ofs | hex dump | ascii |
---|
0000 | de 12 04 95 00 00 00 00 dc 13 00 00 1c 00 00 00 fc 9e 00 00 7b 1a 00 00 dc 3d 01 00 00 00 00 00 | ....................{....=...... |
0020 | c8 a7 01 00 43 00 00 00 c9 a7 01 00 52 00 00 00 0d a8 01 00 42 00 00 00 60 a8 01 00 3b 00 00 00 | ....C.......R.......B...`...;... |
0040 | a3 a8 01 00 42 00 00 00 df a8 01 00 3a 00 00 00 22 a9 01 00 24 00 00 00 5d a9 01 00 1a 00 00 00 | ....B.......:..."...$...]....... |
0060 | 82 a9 01 00 66 00 00 00 9d a9 01 00 6f 00 00 00 04 aa 01 00 5d 01 00 00 74 aa 01 00 48 00 00 00 | ....f.......o.......]...t...H... |
0080 | d2 ab 01 00 46 00 00 00 1b ac 01 00 31 00 00 00 62 ac 01 00 31 00 00 00 94 ac 01 00 3e 00 00 00 | ....F.......1...b...1.......>... |
00a0 | c6 ac 01 00 23 00 00 00 05 ad 01 00 18 00 00 00 29 ad 01 00 23 00 00 00 42 ad 01 00 20 00 00 00 | ....#...........)...#...B....... |
00c0 | 66 ad 01 00 21 00 00 00 87 ad 01 00 21 00 00 00 a9 ad 01 00 3f 00 00 00 cb ad 01 00 78 00 00 00 | f...!.......!.......?.......x... |
00e0 | 0b ae 01 00 7f 00 00 00 84 ae 01 00 15 00 00 00 04 af 01 00 2d 00 00 00 1a af 01 00 27 00 00 00 | ....................-.......'... |
0100 | 48 af 01 00 1d 00 00 00 70 af 01 00 5c 00 00 00 8e af 01 00 1c 00 00 00 eb af 01 00 0c 00 00 00 | H.......p...\................... |
0120 | 08 b0 01 00 21 00 00 00 15 b0 01 00 4e 00 00 00 37 b0 01 00 e0 00 00 00 86 b0 01 00 e0 00 00 00 | ....!.......N...7............... |
0140 | 67 b1 01 00 23 00 00 00 48 b2 01 00 3e 00 00 00 6c b2 01 00 0c 00 00 00 ab b2 01 00 12 00 00 00 | g...#...H...>...l............... |
0160 | b8 b2 01 00 11 00 00 00 cb b2 01 00 4d 00 00 00 dd b2 01 00 b4 00 00 00 2b b3 01 00 6c 00 00 00 | ............M...........+...l... |
0180 | e0 b3 01 00 6b 00 00 00 4d b4 01 00 81 00 00 00 b9 b4 01 00 3b 00 00 00 3b b5 01 00 12 00 00 00 | ....k...M...........;...;....... |
01a0 | 77 b5 01 00 8b 00 00 00 8a b5 01 00 8c 00 00 00 16 b6 01 00 30 01 00 00 a3 b6 01 00 fb 00 00 00 | w...................0........... |
01c0 | d4 b7 01 00 fc 00 00 00 d0 b8 01 00 d5 00 00 00 cd b9 01 00 94 00 00 00 a3 ba 01 00 2c 01 00 00 | ............................,... |
01e0 | 38 bb 01 00 f6 01 00 00 65 bc 01 00 67 00 00 00 5c be 01 00 67 00 00 00 c4 be 01 00 da 00 00 00 | 8.......e...g...\...g........... |
0200 | 2c bf 01 00 d9 00 00 00 07 c0 01 00 12 00 00 00 e1 c0 01 00 08 00 00 00 f4 c0 01 00 b8 00 00 00 | ,............................... |
0220 | fd c0 01 00 14 01 00 00 b6 c1 01 00 18 00 00 00 cb c2 01 00 18 00 00 00 e4 c2 01 00 1b 00 00 00 | ................................ |
0240 | fd c2 01 00 1a 00 00 00 19 c3 01 00 15 00 00 00 34 c3 01 00 0d 00 00 00 4a c3 01 00 14 00 00 00 | ................4.......J....... |
0260 | 58 c3 01 00 0a 00 00 00 6d c3 01 00 0b 00 00 00 78 c3 01 00 0a 00 00 00 84 c3 01 00 0b 00 00 00 | X.......m.......x............... |
0280 | 8f c3 01 00 0a 00 00 00 9b c3 01 00 0a 00 00 00 a6 c3 01 00 4d 00 00 00 b1 c3 01 00 7e 03 00 00 | ....................M.......~... |
02a0 | ff c3 01 00 10 00 00 00 7e c7 01 00 10 00 00 00 8f c7 01 00 a0 01 00 00 a0 c7 01 00 98 01 00 00 | ........~....................... |
02c0 | 41 c9 01 00 99 01 00 00 da ca 01 00 10 00 00 00 74 cc 01 00 4a 00 00 00 85 cc 01 00 16 00 00 00 | A...............t...J........... |
02e0 | d0 cc 01 00 93 00 00 00 e7 cc 01 00 2f 01 00 00 7b cd 01 00 2e 01 00 00 ab ce 01 00 0b 00 00 00 | ............/...{............... |
0300 | da cf 01 00 2e 00 00 00 e6 cf 01 00 2d 00 00 00 15 d0 01 00 37 00 00 00 43 d0 01 00 33 00 00 00 | ............-.......7...C...3... |
0320 | 7b d0 01 00 29 00 00 00 af d0 01 00 3b 00 00 00 d9 d0 01 00 1e 00 00 00 15 d1 01 00 3b 00 00 00 | {...).......;...............;... |
0340 | 34 d1 01 00 2e 00 00 00 70 d1 01 00 4e 00 00 00 9f d1 01 00 11 00 00 00 ee d1 01 00 06 00 00 00 | 4.......p...N................... |
0360 | 00 d2 01 00 11 00 00 00 07 d2 01 00 06 00 00 00 19 d2 01 00 2d 00 00 00 20 d2 01 00 25 00 00 00 | ....................-.......%... |
0380 | 4e d2 01 00 09 00 00 00 74 d2 01 00 b9 00 00 00 7e d2 01 00 0c 00 00 00 38 d3 01 00 0c 00 00 00 | N.......t.......~.......8....... |
03a0 | 45 d3 01 00 0c 00 00 00 52 d3 01 00 13 00 00 00 5f d3 01 00 30 00 00 00 73 d3 01 00 31 00 00 00 | E.......R......._...0...s...1... |
03c0 | a4 d3 01 00 07 00 00 00 d6 d3 01 00 07 00 00 00 de d3 01 00 0d 00 00 00 e6 d3 01 00 14 00 00 00 | ................................ |
03e0 | f4 d3 01 00 1d 00 00 00 09 d4 01 00 49 00 00 00 27 d4 01 00 19 00 00 00 71 d4 01 00 0a 00 00 00 | ............I...'.......q....... |
0400 | 8b d4 01 00 24 00 00 00 96 d4 01 00 27 00 00 00 bb d4 01 00 0b 00 00 00 e3 d4 01 00 10 00 00 00 | ....$.......'................... |
0420 | ef d4 01 00 10 00 00 00 00 d5 01 00 70 00 00 00 11 d5 01 00 57 00 00 00 82 d5 01 00 42 00 00 00 | ............p.......W.......B... |
0440 | da d5 01 00 32 00 00 00 1d d6 01 00 37 00 00 00 50 d6 01 00 5a 00 00 00 88 d6 01 00 a3 00 00 00 | ....2.......7...P...Z........... |
0460 | e3 d6 01 00 74 00 00 00 87 d7 01 00 35 01 00 00 fc d7 01 00 73 00 00 00 32 d9 01 00 16 01 00 00 | ....t.......5.......s...2....... |
0480 | a6 d9 01 00 7e 00 00 00 bd da 01 00 49 00 00 00 3c db 01 00 2f 02 00 00 86 db 01 00 6f 00 00 00 | ....~.......I...<.../.......o... |
04a0 | b6 dd 01 00 39 01 00 00 26 de 01 00 dd 00 00 00 60 df 01 00 20 00 00 00 3e e0 01 00 30 00 00 00 | ....9...&.......`.......>...0... |
04c0 | 5f e0 01 00 14 00 00 00 90 e0 01 00 2c 00 00 00 a5 e0 01 00 90 00 00 00 d2 e0 01 00 52 00 00 00 | _...........,...............R... |
04e0 | 63 e1 01 00 58 00 00 00 b6 e1 01 00 26 00 00 00 0f e2 01 00 58 00 00 00 36 e2 01 00 e4 00 00 00 | c...X.......&.......X...6....... |
0500 | 8f e2 01 00 68 00 00 00 74 e3 01 00 5d 00 00 00 dd e3 01 00 6c 00 00 00 3b e4 01 00 5a 00 00 00 | ....h...t...].......l...;...Z... |
0520 | a8 e4 01 00 a4 00 00 00 03 e5 01 00 eb 00 00 00 a8 e5 01 00 41 00 00 00 94 e6 01 00 52 00 00 00 | ....................A.......R... |
0540 | d6 e6 01 00 6d 00 00 00 29 e7 01 00 c7 00 00 00 97 e7 01 00 f1 00 00 00 5f e8 01 00 08 00 00 00 | ....m...)..............._....... |
0560 | 51 e9 01 00 35 00 00 00 5a e9 01 00 32 00 00 00 90 e9 01 00 4c 00 00 00 c3 e9 01 00 30 00 00 00 | Q...5...Z...2.......L.......0... |
0580 | 10 ea 01 00 38 00 00 00 41 ea 01 00 36 00 00 00 7a ea 01 00 19 00 00 00 b1 ea 01 00 3a 00 00 00 | ....8...A...6...z...........:... |
05a0 | cb ea 01 00 37 00 00 00 06 eb 01 00 7b 01 00 00 3e eb 01 00 36 00 00 00 ba ec 01 00 47 00 00 00 | ....7.......{...>...6.......G... |
05c0 | f1 ec 01 00 55 00 00 00 39 ed 01 00 35 00 00 00 8f ed 01 00 29 00 00 00 c5 ed 01 00 23 00 00 00 | ....U...9...5.......).......#... |
05e0 | ef ed 01 00 24 00 00 00 13 ee 01 00 af 00 00 00 38 ee 01 00 6c 00 00 00 e8 ee 01 00 a7 00 00 00 | ....$...........8...l........... |
0600 | 55 ef 01 00 ee 00 00 00 fd ef 01 00 47 00 00 00 ec f0 01 00 47 00 00 00 34 f1 01 00 3a 00 00 00 | U...........G.......G...4...:... |
0620 | 7c f1 01 00 4b 00 00 00 b7 f1 01 00 5a 01 00 00 03 f2 01 00 9f 01 00 00 5e f3 01 00 b5 00 00 00 | |...K.......Z...........^....... |
0640 | fe f4 01 00 51 00 00 00 b4 f5 01 00 31 00 00 00 06 f6 01 00 1a 00 00 00 38 f6 01 00 4c 00 00 00 | ....Q.......1...........8...L... |
0660 | 53 f6 01 00 80 00 00 00 a0 f6 01 00 26 00 00 00 21 f7 01 00 26 00 00 00 48 f7 01 00 40 00 00 00 | S...........&...!...&...H...@... |
0680 | 6f f7 01 00 09 00 00 00 b0 f7 01 00 3c 00 00 00 ba f7 01 00 42 00 00 00 f7 f7 01 00 b1 00 00 00 | o...........<.......B........... |
06a0 | 3a f8 01 00 54 00 00 00 ec f8 01 00 2c 00 00 00 41 f9 01 00 47 00 00 00 6e f9 01 00 bc 00 00 00 | :...T.......,...A...G...n....... |
06c0 | b6 f9 01 00 bf 00 00 00 73 fa 01 00 1e 00 00 00 33 fb 01 00 37 00 00 00 52 fb 01 00 33 00 00 00 | ........s.......3...7...R...3... |
06e0 | 8a fb 01 00 9a 00 00 00 be fb 01 00 01 00 00 00 59 fc 01 00 2c 00 00 00 5b fc 01 00 11 00 00 00 | ................Y...,...[....... |
0700 | 88 fc 01 00 06 00 00 00 9a fc 01 00 06 00 00 00 a1 fc 01 00 06 00 00 00 a8 fc 01 00 06 00 00 00 | ................................ |
0720 | af fc 01 00 06 00 00 00 b6 fc 01 00 06 00 00 00 bd fc 01 00 06 00 00 00 c4 fc 01 00 06 00 00 00 | ................................ |
0740 | cb fc 01 00 06 00 00 00 d2 fc 01 00 06 00 00 00 d9 fc 01 00 0e 00 00 00 e0 fc 01 00 01 00 00 00 | ................................ |
0760 | ef fc 01 00 11 00 00 00 f1 fc 01 00 0a 00 00 00 03 fd 01 00 1a 00 00 00 0e fd 01 00 b7 00 00 00 | ................................ |
0780 | 29 fd 01 00 02 00 00 00 e1 fd 01 00 0e 00 00 00 e4 fd 01 00 2d 00 00 00 f3 fd 01 00 10 00 00 00 | )...................-........... |
07a0 | 21 fe 01 00 0f 00 00 00 32 fe 01 00 11 00 00 00 42 fe 01 00 13 00 00 00 54 fe 01 00 06 00 00 00 | !.......2.......B.......T....... |
07c0 | 68 fe 01 00 06 00 00 00 6f fe 01 00 06 00 00 00 76 fe 01 00 06 00 00 00 7d fe 01 00 02 00 00 00 | h.......o.......v.......}....... |
07e0 | 84 fe 01 00 03 00 00 00 87 fe 01 00 02 00 00 00 8b fe 01 00 08 00 00 00 8e fe 01 00 02 00 00 00 | ................................ |
0800 | 97 fe 01 00 02 00 00 00 9a fe 01 00 02 00 00 00 9d fe 01 00 02 00 00 00 a0 fe 01 00 02 00 00 00 | ................................ |
0820 | a3 fe 01 00 32 00 00 00 a6 fe 01 00 02 00 00 00 d9 fe 01 00 02 00 00 00 dc fe 01 00 35 00 00 00 | ....2.......................5... |
0840 | df fe 01 00 17 00 00 00 15 ff 01 00 01 00 00 00 2d ff 01 00 1a 00 00 00 2f ff 01 00 80 00 00 00 | ................-......./....... |
0860 | 4a ff 01 00 02 00 00 00 cb ff 01 00 02 00 00 00 ce ff 01 00 02 00 00 00 d1 ff 01 00 02 00 00 00 | J............................... |
0880 | d4 ff 01 00 11 00 00 00 d7 ff 01 00 11 00 00 00 e9 ff 01 00 03 00 00 00 fb ff 01 00 02 00 00 00 | ................................ |
08a0 | ff ff 01 00 02 00 00 00 02 00 02 00 63 00 00 00 05 00 02 00 0f 00 00 00 69 00 02 00 01 00 00 00 | ............c...........i....... |
08c0 | 79 00 02 00 20 00 00 00 7b 00 02 00 02 00 00 00 9c 00 02 00 02 00 00 00 9f 00 02 00 02 00 00 00 | y.......{....................... |
08e0 | a2 00 02 00 02 00 00 00 a5 00 02 00 01 00 00 00 a8 00 02 00 1a 00 00 00 aa 00 02 00 a2 00 00 00 | ................................ |
0900 | c5 00 02 00 e6 00 00 00 68 01 02 00 11 00 00 00 4f 02 02 00 02 00 00 00 61 02 02 00 02 00 00 00 | ........h.......O.......a....... |
0920 | 64 02 02 00 02 00 00 00 67 02 02 00 01 00 00 00 6a 02 02 00 11 00 00 00 6c 02 02 00 c3 00 00 00 | d.......g.......j.......l....... |
0940 | 7e 02 02 00 0f 00 00 00 42 03 02 00 11 00 00 00 52 03 02 00 02 00 00 00 64 03 02 00 01 00 00 00 | ~.......B.......R.......d....... |
0960 | 67 03 02 00 6b 00 00 00 69 03 02 00 02 00 00 00 d5 03 02 00 3b 00 00 00 d8 03 02 00 02 00 00 00 | g...k...i...........;........... |
0980 | 14 04 02 00 02 00 00 00 17 04 02 00 0a 00 00 00 1a 04 02 00 6b 02 00 00 25 04 02 00 01 00 00 00 | ....................k...%....... |
09a0 | 91 06 02 00 02 00 00 00 93 06 02 00 01 00 00 00 96 06 02 00 6c 00 00 00 98 06 02 00 01 00 00 00 | ....................l........... |
09c0 | 05 07 02 00 76 00 00 00 07 07 02 00 61 01 00 00 7e 07 02 00 8b 00 00 00 e0 08 02 00 10 01 00 00 | ....v.......a...~............... |
09e0 | 6c 09 02 00 36 00 00 00 7d 0a 02 00 22 01 00 00 b4 0a 02 00 26 02 00 00 d7 0b 02 00 ec 00 00 00 | l...6...}...".......&........... |
0a00 | fe 0d 02 00 8b 00 00 00 eb 0e 02 00 8c 01 00 00 77 0f 02 00 bd 00 00 00 04 11 02 00 08 02 00 00 | ................w............... |
0a20 | c2 11 02 00 53 01 00 00 cb 13 02 00 dc 00 00 00 1f 15 02 00 4f 00 00 00 fc 15 02 00 aa 03 00 00 | ....S...............O........... |
0a40 | 4c 16 02 00 8b 01 00 00 f7 19 02 00 80 01 00 00 83 1b 02 00 b5 01 00 00 04 1d 02 00 61 00 00 00 | L...........................a... |
0a60 | ba 1e 02 00 8f 05 00 00 1c 1f 02 00 32 02 00 00 ac 24 02 00 0b 01 00 00 df 26 02 00 3d 02 00 00 | ............2....$.......&..=... |
0a80 | eb 27 02 00 7e 00 00 00 29 2a 02 00 37 00 00 00 a8 2a 02 00 8f 01 00 00 e0 2a 02 00 01 01 00 00 | .'..~...)*..7....*.......*...... |
0aa0 | 70 2c 02 00 da 01 00 00 72 2d 02 00 3e 01 00 00 4d 2f 02 00 8e 02 00 00 8c 30 02 00 a6 00 00 00 | p,......r-..>...M/.......0...... |
0ac0 | 1b 33 02 00 e3 01 00 00 c2 33 02 00 af 01 00 00 a6 35 02 00 f6 01 00 00 56 37 02 00 17 02 00 00 | .3.......3.......5......V7...... |
0ae0 | 4d 39 02 00 d9 01 00 00 65 3b 02 00 8e 00 00 00 3f 3d 02 00 57 01 00 00 ce 3d 02 00 82 00 00 00 | M9......e;......?=..W....=...... |
0b00 | 26 3f 02 00 fb 00 00 00 a9 3f 02 00 b4 01 00 00 a5 40 02 00 d6 01 00 00 5a 42 02 00 59 01 00 00 | &?.......?.......@......ZB..Y... |
0b20 | 31 44 02 00 50 01 00 00 8b 45 02 00 be 01 00 00 dc 46 02 00 68 01 00 00 9b 48 02 00 04 02 00 00 | 1D..P....E.......F..h....H...... |
0b40 | 04 4a 02 00 84 00 00 00 09 4c 02 00 f9 00 00 00 8e 4c 02 00 a4 00 00 00 88 4d 02 00 43 00 00 00 | .J.......L.......L.......M..C... |
0b60 | 2d 4e 02 00 5c 00 00 00 71 4e 02 00 52 00 00 00 ce 4e 02 00 46 00 00 00 21 4f 02 00 50 00 00 00 | -N..\...qN..R....N..F...!O..P... |
0b80 | 68 4f 02 00 48 00 00 00 b9 4f 02 00 4c 00 00 00 02 50 02 00 47 00 00 00 4f 50 02 00 48 00 00 00 | hO..H....O..L....P..G...OP..H... |
0ba0 | 97 50 02 00 41 00 00 00 e0 50 02 00 44 00 00 00 22 51 02 00 19 00 00 00 67 51 02 00 29 00 00 00 | .P..A....P..D..."Q......gQ..)... |
0bc0 | 81 51 02 00 12 00 00 00 ab 51 02 00 3d 00 00 00 be 51 02 00 13 00 00 00 fc 51 02 00 3f 00 00 00 | .Q.......Q..=....Q.......Q..?... |
0be0 | 10 52 02 00 13 00 00 00 50 52 02 00 3f 00 00 00 64 52 02 00 15 00 00 00 a4 52 02 00 43 00 00 00 | .R......PR..?...dR.......R..C... |
0c00 | ba 52 02 00 15 00 00 00 fe 52 02 00 43 00 00 00 14 53 02 00 31 01 00 00 58 53 02 00 11 00 00 00 | .R.......R..C....S..1...XS...... |
0c20 | 8a 54 02 00 80 01 00 00 9c 54 02 00 41 01 00 00 1d 56 02 00 19 00 00 00 5f 57 02 00 37 00 00 00 | .T.......T..A....V......_W..7... |
0c40 | 79 57 02 00 2a 00 00 00 b1 57 02 00 39 00 00 00 dc 57 02 00 29 00 00 00 16 58 02 00 07 00 00 00 | yW..*....W..9....W..)....X...... |
0c60 | 40 58 02 00 4d 00 00 00 48 58 02 00 b6 00 00 00 96 58 02 00 40 00 00 00 4d 59 02 00 2f 00 00 00 | @X..M...HX.......X..@...MY../... |
0c80 | 8e 59 02 00 32 00 00 00 be 59 02 00 35 00 00 00 f1 59 02 00 1d 00 00 00 27 5a 02 00 27 00 00 00 | .Y..2....Y..5....Y......'Z..'... |
0ca0 | 45 5a 02 00 1f 00 00 00 6d 5a 02 00 36 00 00 00 8d 5a 02 00 39 00 00 00 c4 5a 02 00 18 01 00 00 | EZ......mZ..6....Z..9....Z...... |
0cc0 | fe 5a 02 00 1e 00 00 00 17 5c 02 00 5c 00 00 00 36 5c 02 00 37 01 00 00 93 5c 02 00 cb 01 00 00 | .Z.......\..\...6\..7....\...... |
0ce0 | cb 5d 02 00 59 01 00 00 97 5f 02 00 3a 01 00 00 f1 60 02 00 2d 00 00 00 2c 62 02 00 3a 00 00 00 | .]..Y...._..:....`..-...,b..:... |
0d00 | 5a 62 02 00 6d 00 00 00 95 62 02 00 77 00 00 00 03 63 02 00 8b 00 00 00 7b 63 02 00 cc 01 00 00 | Zb..m....b..w....c......{c...... |
0d20 | 07 64 02 00 ba 00 00 00 d4 65 02 00 16 00 00 00 8f 66 02 00 33 00 00 00 a6 66 02 00 28 00 00 00 | .d.......e.......f..3....f..(... |
0d40 | da 66 02 00 77 01 00 00 03 67 02 00 51 00 00 00 7b 68 02 00 74 00 00 00 cd 68 02 00 26 00 00 00 | .f..w....g..Q...{h..t....h..&... |
0d60 | 42 69 02 00 85 00 00 00 69 69 02 00 8b 00 00 00 ef 69 02 00 cf 00 00 00 7b 6a 02 00 34 01 00 00 | Bi......ii.......i......{j..4... |
0d80 | 4b 6b 02 00 2f 00 00 00 80 6c 02 00 72 00 00 00 b0 6c 02 00 65 00 00 00 23 6d 02 00 31 00 00 00 | Kk../....l..r....l..e...#m..1... |
0da0 | 89 6d 02 00 01 01 00 00 bb 6d 02 00 33 00 00 00 bd 6e 02 00 3c 00 00 00 f1 6e 02 00 93 01 00 00 | .m.......m..3....n..<....n...... |
0dc0 | 2e 6f 02 00 e4 01 00 00 c2 70 02 00 63 00 00 00 a7 72 02 00 d4 00 00 00 0b 73 02 00 ed 00 00 00 | .o.......p..c....r.......s...... |
0de0 | e0 73 02 00 78 00 00 00 ce 74 02 00 90 00 00 00 47 75 02 00 c0 01 00 00 d8 75 02 00 a2 00 00 00 | .s..x....t......Gu.......u...... |
0e00 | 99 77 02 00 88 00 00 00 3c 78 02 00 4e 00 00 00 c5 78 02 00 58 00 00 00 14 79 02 00 08 01 00 00 | .w......<x..N....x..X....y...... |
0e20 | 6d 79 02 00 65 00 00 00 76 7a 02 00 7e 00 00 00 dc 7a 02 00 48 01 00 00 5b 7b 02 00 35 01 00 00 | my..e...vz..~....z..H...[{..5... |
0e40 | a4 7c 02 00 90 00 00 00 da 7d 02 00 a3 00 00 00 6b 7e 02 00 02 01 00 00 0f 7f 02 00 3f 00 00 00 | .|.......}......k~..........?... |
0e60 | 12 80 02 00 24 00 00 00 52 80 02 00 22 01 00 00 77 80 02 00 1c 00 00 00 9a 81 02 00 2c 00 00 00 | ....$...R..."...w...........,... |
0e80 | b7 81 02 00 43 00 00 00 e4 81 02 00 c8 00 00 00 28 82 02 00 b8 00 00 00 f1 82 02 00 b1 01 00 00 | ....C...........(............... |
0ea0 | aa 83 02 00 4f 00 00 00 5c 85 02 00 37 00 00 00 ac 85 02 00 26 00 00 00 e4 85 02 00 0a 02 00 00 | ....O...\...7.......&........... |
0ec0 | 0b 86 02 00 62 00 00 00 16 88 02 00 41 00 00 00 79 88 02 00 3d 00 00 00 bb 88 02 00 5e 00 00 00 | ....b.......A...y...=.......^... |
0ee0 | f9 88 02 00 35 00 00 00 58 89 02 00 77 00 00 00 8e 89 02 00 04 00 00 00 06 8a 02 00 1c 00 00 00 | ....5...X...w................... |
0f00 | 0b 8a 02 00 03 00 00 00 28 8a 02 00 03 00 00 00 2c 8a 02 00 5c 00 00 00 30 8a 02 00 a7 01 00 00 | ........(.......,...\...0....... |
0f20 | 8d 8a 02 00 0c 00 00 00 35 8c 02 00 a8 00 00 00 42 8c 02 00 70 00 00 00 eb 8c 02 00 3c 00 00 00 | ........5.......B...p.......<... |
0f40 | 5c 8d 02 00 33 00 00 00 99 8d 02 00 12 00 00 00 cd 8d 02 00 0c 00 00 00 e0 8d 02 00 79 00 00 00 | \...3.......................y... |
0f60 | ed 8d 02 00 45 00 00 00 67 8e 02 00 07 00 00 00 ad 8e 02 00 10 00 00 00 b5 8e 02 00 22 00 00 00 | ....E...g..................."... |
0f80 | c6 8e 02 00 68 00 00 00 e9 8e 02 00 41 00 00 00 52 8f 02 00 40 00 00 00 94 8f 02 00 23 00 00 00 | ....h.......A...R...@.......#... |
0fa0 | d5 8f 02 00 c5 00 00 00 f9 8f 02 00 9f 00 00 00 bf 90 02 00 3c 00 00 00 5f 91 02 00 35 00 00 00 | ....................<..._...5... |
0fc0 | 9c 91 02 00 4e 00 00 00 d2 91 02 00 86 00 00 00 21 92 02 00 68 00 00 00 a8 92 02 00 63 00 00 00 | ....N...........!...h.......c... |
0fe0 | 11 93 02 00 2f 00 00 00 75 93 02 00 48 00 00 00 a5 93 02 00 a3 00 00 00 ee 93 02 00 b8 00 00 00 | ..../...u...H................... |
1000 | 92 94 02 00 81 00 00 00 4b 95 02 00 46 00 00 00 cd 95 02 00 1c 00 00 00 14 96 02 00 7d 00 00 00 | ........K...F...............}... |
1020 | 31 96 02 00 60 00 00 00 af 96 02 00 ee 00 00 00 10 97 02 00 09 01 00 00 ff 97 02 00 68 00 00 00 | 1...`.......................h... |
1040 | 09 99 02 00 07 00 00 00 72 99 02 00 12 00 00 00 7a 99 02 00 10 00 00 00 8d 99 02 00 0e 00 00 00 | ........r.......z............... |
1060 | 9e 99 02 00 42 00 00 00 ad 99 02 00 0d 00 00 00 f0 99 02 00 24 00 00 00 fe 99 02 00 c6 00 00 00 | ....B...............$........... |
1080 | 23 9a 02 00 ba 00 00 00 ea 9a 02 00 17 00 00 00 a5 9b 02 00 1a 00 00 00 bd 9b 02 00 10 00 00 00 | #............................... |
10a0 | d8 9b 02 00 c7 00 00 00 e9 9b 02 00 1a 00 00 00 b1 9c 02 00 3c 00 00 00 cc 9c 02 00 1a 00 00 00 | ....................<........... |
10c0 | 09 9d 02 00 14 00 00 00 24 9d 02 00 7e 00 00 00 39 9d 02 00 74 00 00 00 b8 9d 02 00 26 01 00 00 | ........$...~...9...t.......&... |
10e0 | 2d 9e 02 00 40 01 00 00 54 9f 02 00 74 00 00 00 95 a0 02 00 63 01 00 00 0a a1 02 00 2e 00 00 00 | -...@...T...t.......c........... |
1100 | 6e a2 02 00 05 00 00 00 9d a2 02 00 09 00 00 00 a3 a2 02 00 07 00 00 00 ad a2 02 00 66 00 00 00 | n...........................f... |
1120 | b5 a2 02 00 4f 00 00 00 1c a3 02 00 9a 00 00 00 6c a3 02 00 b1 00 00 00 07 a4 02 00 0e 00 00 00 | ....O...........l............... |
1140 | b9 a4 02 00 67 00 00 00 c8 a4 02 00 ae 00 00 00 30 a5 02 00 89 00 00 00 df a5 02 00 28 00 00 00 | ....g...........0...........(... |
1160 | 69 a6 02 00 3a 00 00 00 92 a6 02 00 ac 00 00 00 cd a6 02 00 74 00 00 00 7a a7 02 00 97 00 00 00 | i...:...............t...z....... |
1180 | ef a7 02 00 3a 00 00 00 87 a8 02 00 40 00 00 00 c2 a8 02 00 27 00 00 00 03 a9 02 00 29 00 00 00 | ....:.......@.......'.......)... |
11a0 | 2b a9 02 00 21 00 00 00 55 a9 02 00 08 01 00 00 77 a9 02 00 61 01 00 00 80 aa 02 00 2e 00 00 00 | +...!...U.......w...a........... |
11c0 | e2 ab 02 00 80 00 00 00 11 ac 02 00 7b 00 00 00 92 ac 02 00 30 00 00 00 0e ad 02 00 c8 00 00 00 | ............{.......0........... |
11e0 | 3f ad 02 00 c8 00 00 00 08 ae 02 00 9c 00 00 00 d1 ae 02 00 40 00 00 00 6e af 02 00 b7 00 00 00 | ?...................@...n....... |
1200 | af af 02 00 b7 00 00 00 67 b0 02 00 5a 00 00 00 1f b1 02 00 c4 00 00 00 7a b1 02 00 6e 00 00 00 | ........g...Z...........z...n... |
1220 | 3f b2 02 00 a5 00 00 00 ae b2 02 00 c3 00 00 00 54 b3 02 00 18 00 00 00 18 b4 02 00 54 00 00 00 | ?...............T...........T... |
1240 | 31 b4 02 00 89 00 00 00 86 b4 02 00 6b 00 00 00 10 b5 02 00 3d 00 00 00 7c b5 02 00 91 00 00 00 | 1...........k.......=...|....... |
1260 | ba b5 02 00 81 00 00 00 4c b6 02 00 39 00 00 00 ce b6 02 00 3e 01 00 00 08 b7 02 00 58 00 00 00 | ........L...9.......>.......X... |
1280 | 47 b8 02 00 c2 00 00 00 a0 b8 02 00 6a 00 00 00 63 b9 02 00 85 02 00 00 ce b9 02 00 cb 00 00 00 | G...........j...c............... |
12a0 | 54 bc 02 00 40 00 00 00 20 bd 02 00 5f 00 00 00 61 bd 02 00 9e 01 00 00 c1 bd 02 00 9f 01 00 00 | T...@......._...a............... |
12c0 | 60 bf 02 00 84 01 00 00 00 c1 02 00 bb 00 00 00 85 c2 02 00 56 00 00 00 41 c3 02 00 39 00 00 00 | `...................V...A...9... |
12e0 | 98 c3 02 00 1d 00 00 00 d2 c3 02 00 4b 00 00 00 f0 c3 02 00 0b 00 00 00 3c c4 02 00 02 01 00 00 | ............K...........<....... |
1300 | 48 c4 02 00 30 00 00 00 4b c5 02 00 5d 00 00 00 7c c5 02 00 5d 00 00 00 da c5 02 00 1a 00 00 00 | H...0...K...]...|...]........... |
1320 | 38 c6 02 00 0d 00 00 00 53 c6 02 00 3b 00 00 00 61 c6 02 00 15 00 00 00 9d c6 02 00 34 00 00 00 | 8.......S...;...a...........4... |
1340 | b3 c6 02 00 2c 00 00 00 e8 c6 02 00 2f 00 00 00 15 c7 02 00 c8 00 00 00 45 c7 02 00 43 01 00 00 | ....,......./...........E...C... |
1360 | 0e c8 02 00 9c 00 00 00 52 c9 02 00 3e 00 00 00 ef c9 02 00 ad 00 00 00 2e ca 02 00 aa 00 00 00 | ........R...>................... |
1380 | dc ca 02 00 44 00 00 00 87 cb 02 00 1d 00 00 00 cc cb 02 00 23 00 00 00 ea cb 02 00 19 00 00 00 | ....D...............#........... |
13a0 | 0e cc 02 00 12 00 00 00 28 cc 02 00 43 00 00 00 3b cc 02 00 31 00 00 00 7f cc 02 00 0a 00 00 00 | ........(...C...;...1........... |
13c0 | b1 cc 02 00 08 00 00 00 bc cc 02 00 28 01 00 00 c5 cc 02 00 81 00 00 00 ee cd 02 00 aa 00 00 00 | ............(................... |
13e0 | 70 ce 02 00 d5 00 00 00 1b cf 02 00 a5 01 00 00 f1 cf 02 00 71 00 00 00 97 d1 02 00 78 00 00 00 | p...................q.......x... |
1400 | 09 d2 02 00 99 00 00 00 82 d2 02 00 1d 01 00 00 1c d3 02 00 49 01 00 00 3a d4 02 00 18 01 00 00 | ....................I...:....... |
1420 | 84 d5 02 00 1a 01 00 00 9d d6 02 00 39 01 00 00 b8 d7 02 00 5f 00 00 00 f2 d8 02 00 32 01 00 00 | ............9......._.......2... |
1440 | 52 d9 02 00 82 00 00 00 85 da 02 00 a2 00 00 00 08 db 02 00 93 00 00 00 ab db 02 00 af 00 00 00 | R............................... |
1460 | 3f dc 02 00 7e 00 00 00 ef dc 02 00 47 00 00 00 6e dd 02 00 83 00 00 00 b6 dd 02 00 6e 00 00 00 | ?...~.......G...n...........n... |
1480 | 3a de 02 00 91 00 00 00 a9 de 02 00 59 00 00 00 3b df 02 00 96 00 00 00 95 df 02 00 8e 00 00 00 | :...........Y...;............... |
14a0 | 2c e0 02 00 c1 00 00 00 bb e0 02 00 59 01 00 00 7d e1 02 00 23 00 00 00 d7 e2 02 00 43 00 00 00 | ,...........Y...}...#.......C... |
14c0 | fb e2 02 00 27 00 00 00 3f e3 02 00 2d 00 00 00 67 e3 02 00 3b 00 00 00 95 e3 02 00 6e 00 00 00 | ....'...?...-...g...;.......n... |
14e0 | d1 e3 02 00 82 00 00 00 40 e4 02 00 68 00 00 00 c3 e4 02 00 19 00 00 00 2c e5 02 00 19 00 00 00 | ........@...h...........,....... |
1500 | 46 e5 02 00 19 00 00 00 60 e5 02 00 19 00 00 00 7a e5 02 00 19 00 00 00 94 e5 02 00 19 00 00 00 | F.......`.......z............... |
1520 | ae e5 02 00 19 00 00 00 c8 e5 02 00 19 00 00 00 e2 e5 02 00 19 00 00 00 fc e5 02 00 19 00 00 00 | ................................ |
1540 | 16 e6 02 00 19 00 00 00 30 e6 02 00 19 00 00 00 4a e6 02 00 7b 00 00 00 64 e6 02 00 c2 00 00 00 | ........0.......J...{...d....... |
1560 | e0 e6 02 00 41 00 00 00 a3 e7 02 00 c0 00 00 00 e5 e7 02 00 68 00 00 00 a6 e8 02 00 0e 00 00 00 | ....A...............h........... |
1580 | 0f e9 02 00 16 00 00 00 1e e9 02 00 1f 00 00 00 35 e9 02 00 25 00 00 00 55 e9 02 00 29 00 00 00 | ................5...%...U...)... |
15a0 | 7b e9 02 00 24 00 00 00 a5 e9 02 00 e6 00 00 00 ca e9 02 00 20 00 00 00 b1 ea 02 00 14 00 00 00 | {...$........................... |
15c0 | d2 ea 02 00 45 00 00 00 e7 ea 02 00 13 00 00 00 2d eb 02 00 17 00 00 00 41 eb 02 00 17 00 00 00 | ....E...........-.......A....... |
15e0 | 59 eb 02 00 e7 00 00 00 71 eb 02 00 3d 00 00 00 59 ec 02 00 12 00 00 00 97 ec 02 00 14 00 00 00 | Y.......q...=...Y............... |
1600 | aa ec 02 00 13 00 00 00 bf ec 02 00 03 00 00 00 d3 ec 02 00 1b 00 00 00 d7 ec 02 00 59 00 00 00 | ............................Y... |
1620 | f3 ec 02 00 03 00 00 00 4d ed 02 00 14 00 00 00 51 ed 02 00 14 00 00 00 66 ed 02 00 1d 00 00 00 | ........M.......Q.......f....... |
1640 | 7b ed 02 00 1a 00 00 00 99 ed 02 00 0b 00 00 00 b4 ed 02 00 18 00 00 00 c0 ed 02 00 19 00 00 00 | {............................... |
1660 | d9 ed 02 00 44 00 00 00 f3 ed 02 00 1a 00 00 00 38 ee 02 00 1f 00 00 00 53 ee 02 00 1c 00 00 00 | ....D...........8.......S....... |
1680 | 73 ee 02 00 20 00 00 00 90 ee 02 00 65 01 00 00 b1 ee 02 00 54 01 00 00 17 f0 02 00 c3 02 00 00 | s...........e.......T........... |
16a0 | 6c f1 02 00 05 00 00 00 30 f4 02 00 67 00 00 00 36 f4 02 00 81 01 00 00 9e f4 02 00 07 00 00 00 | l.......0...g...6............... |
16c0 | 20 f6 02 00 13 00 00 00 28 f6 02 00 0f 00 00 00 3c f6 02 00 1e 00 00 00 4c f6 02 00 11 00 00 00 | ........(.......<.......L....... |
16e0 | 6b f6 02 00 21 00 00 00 7d f6 02 00 4c 00 00 00 9f f6 02 00 50 00 00 00 ec f6 02 00 69 00 00 00 | k...!...}...L.......P.......i... |
1700 | 3d f7 02 00 55 00 00 00 a7 f7 02 00 55 00 00 00 fd f7 02 00 17 00 00 00 53 f8 02 00 0e 00 00 00 | =...U.......U...........S....... |
1720 | 6b f8 02 00 0e 00 00 00 7a f8 02 00 3f 00 00 00 89 f8 02 00 36 00 00 00 c9 f8 02 00 0b 00 00 00 | k.......z...?.......6........... |
1740 | 00 f9 02 00 d1 00 00 00 0c f9 02 00 19 00 00 00 de f9 02 00 87 00 00 00 f8 f9 02 00 89 00 00 00 | ................................ |
1760 | 80 fa 02 00 db 00 00 00 0a fb 02 00 55 00 00 00 e6 fb 02 00 75 00 00 00 3c fc 02 00 27 00 00 00 | ............U.......u...<...'... |
1780 | b2 fc 02 00 1c 00 00 00 da fc 02 00 7d 01 00 00 f7 fc 02 00 11 00 00 00 75 fe 02 00 0c 00 00 00 | ............}...........u....... |
17a0 | 87 fe 02 00 2f 00 00 00 94 fe 02 00 3f 00 00 00 c4 fe 02 00 63 00 00 00 04 ff 02 00 09 00 00 00 | ..../.......?.......c........... |
17c0 | 68 ff 02 00 5d 00 00 00 72 ff 02 00 58 00 00 00 d0 ff 02 00 59 00 00 00 29 00 03 00 34 00 00 00 | h...]...r...X.......Y...)...4... |
17e0 | 83 00 03 00 17 00 00 00 b8 00 03 00 0c 00 00 00 d0 00 03 00 25 00 00 00 dd 00 03 00 13 00 00 00 | ....................%........... |
1800 | 03 01 03 00 29 00 00 00 17 01 03 00 83 00 00 00 41 01 03 00 6e 00 00 00 c5 01 03 00 31 00 00 00 | ....)...........A...n.......1... |
1820 | 34 02 03 00 06 00 00 00 66 02 03 00 1d 00 00 00 6d 02 03 00 0e 00 00 00 8b 02 03 00 0c 00 00 00 | 4.......f.......m............... |
1840 | 9a 02 03 00 3f 00 00 00 a7 02 03 00 37 00 00 00 e7 02 03 00 07 00 00 00 1f 03 03 00 0b 00 00 00 | ....?.......7................... |
1860 | 27 03 03 00 0e 00 00 00 33 03 03 00 d0 00 00 00 42 03 03 00 9c 00 00 00 13 04 03 00 51 00 00 00 | '.......3.......B...........Q... |
1880 | b0 04 03 00 9c 00 00 00 02 05 03 00 ef 00 00 00 9f 05 03 00 8d 01 00 00 8f 06 03 00 37 01 00 00 | ............................7... |
18a0 | 1d 08 03 00 38 01 00 00 55 09 03 00 ce 00 00 00 8e 0a 03 00 d9 00 00 00 5d 0b 03 00 3b 00 00 00 | ....8...U...............]...;... |
18c0 | 37 0c 03 00 63 00 00 00 73 0c 03 00 78 00 00 00 d7 0c 03 00 9d 00 00 00 50 0d 03 00 97 00 00 00 | 7...c...s...x...........P....... |
18e0 | ee 0d 03 00 25 00 00 00 86 0e 03 00 a1 00 00 00 ac 0e 03 00 3a 01 00 00 4e 0f 03 00 16 00 00 00 | ....%...............:...N....... |
1900 | 89 10 03 00 1a 00 00 00 a0 10 03 00 0a 00 00 00 bb 10 03 00 27 00 00 00 c6 10 03 00 16 00 00 00 | ....................'........... |
1920 | ee 10 03 00 c8 00 00 00 05 11 03 00 1a 00 00 00 ce 11 03 00 2a 00 00 00 e9 11 03 00 0c 00 00 00 | ....................*........... |
1940 | 14 12 03 00 30 00 00 00 21 12 03 00 2c 00 00 00 52 12 03 00 0b 01 00 00 7f 12 03 00 76 00 00 00 | ....0...!...,...R...........v... |
1960 | 8b 13 03 00 bc 00 00 00 02 14 03 00 91 00 00 00 bf 14 03 00 3e 00 00 00 51 15 03 00 0c 00 00 00 | ....................>...Q....... |
1980 | 90 15 03 00 46 00 00 00 9d 15 03 00 06 00 00 00 e4 15 03 00 14 00 00 00 eb 15 03 00 06 00 00 00 | ....F........................... |
19a0 | 00 16 03 00 9f 00 00 00 07 16 03 00 0e 00 00 00 a7 16 03 00 2d 00 00 00 b6 16 03 00 1b 00 00 00 | ....................-........... |
19c0 | e4 16 03 00 0f 00 00 00 00 17 03 00 07 00 00 00 10 17 03 00 16 00 00 00 18 17 03 00 1d 00 00 00 | ................................ |
19e0 | 2f 17 03 00 06 00 00 00 4d 17 03 00 14 00 00 00 54 17 03 00 15 00 00 00 69 17 03 00 14 00 00 00 | /.......M.......T.......i....... |
1a00 | 7f 17 03 00 1f 00 00 00 94 17 03 00 3d 00 00 00 b4 17 03 00 0b 00 00 00 f2 17 03 00 14 00 00 00 | ............=................... |
1a20 | fe 17 03 00 12 00 00 00 13 18 03 00 14 00 00 00 26 18 03 00 6c 00 00 00 3b 18 03 00 07 00 00 00 | ................&...l...;....... |
1a40 | a8 18 03 00 6a 00 00 00 b0 18 03 00 98 00 00 00 1b 19 03 00 0c 00 00 00 b4 19 03 00 96 00 00 00 | ....j........................... |
1a60 | c1 19 03 00 3e 00 00 00 58 1a 03 00 77 00 00 00 97 1a 03 00 38 00 00 00 0f 1b 03 00 08 00 00 00 | ....>...X...w.......8........... |
1a80 | 48 1b 03 00 40 00 00 00 51 1b 03 00 1e 00 00 00 92 1b 03 00 11 00 00 00 b1 1b 03 00 1b 00 00 00 | H...@...Q....................... |
1aa0 | c3 1b 03 00 58 00 00 00 df 1b 03 00 0d 00 00 00 38 1c 03 00 15 00 00 00 46 1c 03 00 16 00 00 00 | ....X...........8.......F....... |
1ac0 | 5c 1c 03 00 13 00 00 00 73 1c 03 00 15 00 00 00 87 1c 03 00 2f 00 00 00 9d 1c 03 00 0b 01 00 00 | \.......s.........../........... |
1ae0 | cd 1c 03 00 af 00 00 00 d9 1d 03 00 16 00 00 00 89 1e 03 00 59 00 00 00 a0 1e 03 00 26 00 00 00 | ....................Y.......&... |
1b00 | fa 1e 03 00 25 00 00 00 21 1f 03 00 a5 00 00 00 47 1f 03 00 09 00 00 00 ed 1f 03 00 94 00 00 00 | ....%...!.......G............... |
1b20 | f7 1f 03 00 0d 00 00 00 8c 20 03 00 51 00 00 00 9a 20 03 00 25 00 00 00 ec 20 03 00 37 00 00 00 | ............Q.......%.......7... |
1b40 | 12 21 03 00 c0 00 00 00 4a 21 03 00 71 00 00 00 0b 22 03 00 24 00 00 00 7d 22 03 00 52 00 00 00 | .!......J!..q...."..$...}"..R... |
1b60 | a2 22 03 00 4e 00 00 00 f5 22 03 00 68 00 00 00 44 23 03 00 55 00 00 00 ad 23 03 00 22 00 00 00 | ."..N...."..h...D#..U....#.."... |
1b80 | 03 24 03 00 22 00 00 00 26 24 03 00 4c 00 00 00 49 24 03 00 57 00 00 00 96 24 03 00 75 00 00 00 | .$.."...&$..L...I$..W....$..u... |
1ba0 | ee 24 03 00 70 00 00 00 64 25 03 00 75 00 00 00 d5 25 03 00 a4 00 00 00 4b 26 03 00 37 00 00 00 | .$..p...d%..u....%......K&..7... |
1bc0 | f0 26 03 00 fc 00 00 00 28 27 03 00 bb 00 00 00 25 28 03 00 7a 00 00 00 e1 28 03 00 77 00 00 00 | .&......('......%(..z....(..w... |
1be0 | 5c 29 03 00 71 00 00 00 d4 29 03 00 aa 00 00 00 46 2a 03 00 3a 00 00 00 f1 2a 03 00 2b 00 00 00 | \)..q....)......F*..:....*..+... |
1c00 | 2c 2b 03 00 48 00 00 00 58 2b 03 00 3a 00 00 00 a1 2b 03 00 60 00 00 00 dc 2b 03 00 62 00 00 00 | ,+..H...X+..:....+..`....+..b... |
1c20 | 3d 2c 03 00 26 00 00 00 a0 2c 03 00 2b 00 00 00 c7 2c 03 00 43 00 00 00 f3 2c 03 00 2b 00 00 00 | =,..&....,..+....,..C....,..+... |
1c40 | 37 2d 03 00 5b 00 00 00 63 2d 03 00 61 00 00 00 bf 2d 03 00 27 00 00 00 21 2e 03 00 5b 00 00 00 | 7-..[...c-..a....-..'...!...[... |
1c60 | 49 2e 03 00 2e 00 00 00 a5 2e 03 00 47 00 00 00 d4 2e 03 00 9a 00 00 00 1c 2f 03 00 31 00 00 00 | I...........G............/..1... |
1c80 | b7 2f 03 00 31 00 00 00 e9 2f 03 00 41 00 00 00 1b 30 03 00 84 00 00 00 5d 30 03 00 5f 00 00 00 | ./..1..../..A....0......]0.._... |
1ca0 | e2 30 03 00 5f 00 00 00 42 31 03 00 3c 00 00 00 a2 31 03 00 39 00 00 00 df 31 03 00 89 00 00 00 | .0.._...B1..<....1..9....1...... |
1cc0 | 19 32 03 00 58 00 00 00 a3 32 03 00 2c 00 00 00 fc 32 03 00 2b 00 00 00 29 33 03 00 64 00 00 00 | .2..X....2..,....2..+...)3..d... |
1ce0 | 55 33 03 00 65 00 00 00 ba 33 03 00 2f 00 00 00 20 34 03 00 4b 00 00 00 50 34 03 00 5f 00 00 00 | U3..e....3../....4..K...P4.._... |
1d00 | 9c 34 03 00 42 00 00 00 fc 34 03 00 2a 00 00 00 3f 35 03 00 3b 00 00 00 6a 35 03 00 2b 00 00 00 | .4..B....4..*...?5..;...j5..+... |
1d20 | a6 35 03 00 34 00 00 00 d2 35 03 00 42 00 00 00 07 36 03 00 99 00 00 00 4a 36 03 00 3f 00 00 00 | .5..4....5..B....6......J6..?... |
1d40 | e4 36 03 00 3f 00 00 00 24 37 03 00 50 00 00 00 64 37 03 00 b2 00 00 00 b5 37 03 00 5d 00 00 00 | .6..?...$7..P...d7.......7..]... |
1d60 | 68 38 03 00 49 00 00 00 c6 38 03 00 49 00 00 00 10 39 03 00 3c 00 00 00 5a 39 03 00 1f 00 00 00 | h8..I....8..I....9..<...Z9...... |
1d80 | 97 39 03 00 59 00 00 00 b7 39 03 00 95 00 00 00 11 3a 03 00 38 00 00 00 a7 3a 03 00 10 00 00 00 | .9..Y....9.......:..8....:...... |
1da0 | e0 3a 03 00 92 00 00 00 f1 3a 03 00 17 00 00 00 84 3b 03 00 11 00 00 00 9c 3b 03 00 17 00 00 00 | .:.......:.......;.......;...... |
1dc0 | ae 3b 03 00 25 00 00 00 c6 3b 03 00 18 00 00 00 ec 3b 03 00 17 00 00 00 05 3c 03 00 1d 00 00 00 | .;..%....;.......;.......<...... |
1de0 | 1d 3c 03 00 21 00 00 00 3b 3c 03 00 17 00 00 00 5d 3c 03 00 17 00 00 00 75 3c 03 00 b2 00 00 00 | .<..!...;<......]<......u<...... |
1e00 | 8d 3c 03 00 42 00 00 00 40 3d 03 00 12 00 00 00 83 3d 03 00 b7 00 00 00 96 3d 03 00 44 01 00 00 | .<..B...@=.......=.......=..D... |
1e20 | 4e 3e 03 00 3c 01 00 00 93 3f 03 00 09 00 00 00 d0 40 03 00 0e 00 00 00 da 40 03 00 16 00 00 00 | N>..<....?.......@.......@...... |
1e40 | e9 40 03 00 16 00 00 00 00 41 03 00 0d 00 00 00 17 41 03 00 07 00 00 00 25 41 03 00 0e 00 00 00 | .@.......A.......A......%A...... |
1e60 | 2d 41 03 00 30 00 00 00 3c 41 03 00 09 00 00 00 6d 41 03 00 12 00 00 00 77 41 03 00 12 00 00 00 | -A..0...<A......mA......wA...... |
1e80 | 8a 41 03 00 11 00 00 00 9d 41 03 00 49 00 00 00 af 41 03 00 49 00 00 00 f9 41 03 00 c9 00 00 00 | .A.......A..I....A..I....A...... |
1ea0 | 43 42 03 00 b3 00 00 00 0d 43 03 00 36 00 00 00 c1 43 03 00 39 00 00 00 f8 43 03 00 81 00 00 00 | CB.......C..6....C..9....C...... |
1ec0 | 32 44 03 00 82 00 00 00 b4 44 03 00 92 00 00 00 37 45 03 00 64 00 00 00 ca 45 03 00 15 00 00 00 | 2D.......D......7E..d....E...... |
1ee0 | 2f 46 03 00 5f 00 00 00 45 46 03 00 44 00 00 00 a5 46 03 00 69 00 00 00 ea 46 03 00 92 00 00 00 | /F.._...EF..D....F..i....F...... |
1f00 | 54 47 03 00 75 00 00 00 e7 47 03 00 66 00 00 00 5d 48 03 00 4e 00 00 00 c4 48 03 00 8c 00 00 00 | TG..u....G..f...]H..N....H...... |
1f20 | 13 49 03 00 56 00 00 00 a0 49 03 00 76 00 00 00 f7 49 03 00 73 00 00 00 6e 4a 03 00 c3 00 00 00 | .I..V....I..v....I..s...nJ...... |
1f40 | e2 4a 03 00 c0 00 00 00 a6 4b 03 00 6b 00 00 00 67 4c 03 00 30 00 00 00 d3 4c 03 00 7b 00 00 00 | .J.......K..k...gL..0....L..{... |
1f60 | 04 4d 03 00 45 00 00 00 80 4d 03 00 7f 00 00 00 c6 4d 03 00 6d 00 00 00 46 4e 03 00 3d 00 00 00 | .M..E....M.......M..m...FN..=... |
1f80 | b4 4e 03 00 d9 00 00 00 f2 4e 03 00 a0 00 00 00 cc 4f 03 00 68 00 00 00 6d 50 03 00 9c 00 00 00 | .N.......N.......O..h...mP...... |
1fa0 | d6 50 03 00 54 00 00 00 73 51 03 00 2b 00 00 00 c8 51 03 00 21 00 00 00 f4 51 03 00 5a 00 00 00 | .P..T...sQ..+....Q..!....Q..Z... |
1fc0 | 16 52 03 00 70 00 00 00 71 52 03 00 4a 00 00 00 e2 52 03 00 16 00 00 00 2d 53 03 00 19 00 00 00 | .R..p...qR..J....R......-S...... |
1fe0 | 44 53 03 00 25 00 00 00 5e 53 03 00 62 00 00 00 84 53 03 00 08 00 00 00 e7 53 03 00 2d 00 00 00 | DS..%...^S..b....S.......S..-... |
2000 | f0 53 03 00 14 00 00 00 1e 54 03 00 14 00 00 00 33 54 03 00 14 00 00 00 48 54 03 00 14 00 00 00 | .S.......T......3T......HT...... |
2020 | 5d 54 03 00 0d 00 00 00 72 54 03 00 39 00 00 00 80 54 03 00 43 00 00 00 ba 54 03 00 0b 00 00 00 | ]T......rT..9....T..C....T...... |
2040 | fe 54 03 00 da 00 00 00 0a 55 03 00 f3 00 00 00 e5 55 03 00 dc 00 00 00 d9 56 03 00 dc 00 00 00 | .T.......U.......U.......V...... |
2060 | b6 57 03 00 43 00 00 00 93 58 03 00 3d 00 00 00 d7 58 03 00 00 01 00 00 15 59 03 00 b3 00 00 00 | .W..C....X..=....X.......Y...... |
2080 | 16 5a 03 00 0f 00 00 00 ca 5a 03 00 0b 00 00 00 da 5a 03 00 0a 00 00 00 e6 5a 03 00 0b 00 00 00 | .Z.......Z.......Z.......Z...... |
20a0 | f1 5a 03 00 18 00 00 00 fd 5a 03 00 10 00 00 00 16 5b 03 00 3a 00 00 00 27 5b 03 00 12 00 00 00 | .Z.......Z.......[..:...'[...... |
20c0 | 62 5b 03 00 3c 00 00 00 75 5b 03 00 84 00 00 00 b2 5b 03 00 14 00 00 00 37 5c 03 00 4c 00 00 00 | b[..<...u[.......[......7\..L... |
20e0 | 4c 5c 03 00 05 00 00 00 99 5c 03 00 15 00 00 00 9f 5c 03 00 0d 00 00 00 b5 5c 03 00 b6 00 00 00 | L\.......\.......\.......\...... |
2100 | c3 5c 03 00 04 00 00 00 7a 5d 03 00 bf 00 00 00 7f 5d 03 00 52 00 00 00 3f 5e 03 00 06 00 00 00 | .\......z].......]..R...?^...... |
2120 | 92 5e 03 00 0e 00 00 00 99 5e 03 00 10 00 00 00 a8 5e 03 00 1c 00 00 00 b9 5e 03 00 17 00 00 00 | .^.......^.......^.......^...... |
2140 | d6 5e 03 00 2b 00 00 00 ee 5e 03 00 05 00 00 00 1a 5f 03 00 2f 00 00 00 20 5f 03 00 34 00 00 00 | .^..+....^......._../...._..4... |
2160 | 50 5f 03 00 01 01 00 00 85 5f 03 00 05 00 00 00 87 60 03 00 67 00 00 00 8d 60 03 00 07 00 00 00 | P_......._.......`..g....`...... |
2180 | f5 60 03 00 0a 00 00 00 fd 60 03 00 15 00 00 00 08 61 03 00 19 00 00 00 1e 61 03 00 a4 00 00 00 | .`.......`.......a.......a...... |
21a0 | 38 61 03 00 32 00 00 00 dd 61 03 00 31 00 00 00 10 62 03 00 1d 00 00 00 42 62 03 00 14 00 00 00 | 8a..2....a..1....b......Bb...... |
21c0 | 60 62 03 00 32 00 00 00 75 62 03 00 15 00 00 00 a8 62 03 00 0a 00 00 00 be 62 03 00 0c 00 00 00 | `b..2...ub.......b.......b...... |
21e0 | c9 62 03 00 11 00 00 00 d6 62 03 00 17 00 00 00 e8 62 03 00 13 00 00 00 00 63 03 00 19 00 00 00 | .b.......b.......b.......c...... |
2200 | 14 63 03 00 74 00 00 00 2e 63 03 00 98 00 00 00 a3 63 03 00 24 00 00 00 3c 64 03 00 25 00 00 00 | .c..t....c.......c..$...<d..%... |
2220 | 61 64 03 00 0d 00 00 00 87 64 03 00 42 00 00 00 95 64 03 00 16 00 00 00 d8 64 03 00 13 00 00 00 | ad.......d..B....d.......d...... |
2240 | ef 64 03 00 55 00 00 00 03 65 03 00 95 00 00 00 59 65 03 00 35 00 00 00 ef 65 03 00 8e 00 00 00 | .d..U....e......Ye..5....e...... |
2260 | 25 66 03 00 68 00 00 00 b4 66 03 00 77 00 00 00 1d 67 03 00 81 00 00 00 95 67 03 00 21 00 00 00 | %f..h....f..w....g.......g..!... |
2280 | 17 68 03 00 2e 00 00 00 39 68 03 00 7e 00 00 00 68 68 03 00 4b 00 00 00 e7 68 03 00 38 00 00 00 | .h......9h..~...hh..K....h..8... |
22a0 | 33 69 03 00 95 00 00 00 6c 69 03 00 32 00 00 00 02 6a 03 00 69 00 00 00 35 6a 03 00 7b 00 00 00 | 3i......li..2....j..i...5j..{... |
22c0 | 9f 6a 03 00 62 00 00 00 1b 6b 03 00 4b 01 00 00 7e 6b 03 00 a6 00 00 00 ca 6c 03 00 89 00 00 00 | .j..b....k..K...~k.......l...... |
22e0 | 71 6d 03 00 af 00 00 00 fb 6d 03 00 88 00 00 00 ab 6e 03 00 31 00 00 00 34 6f 03 00 2d 00 00 00 | qm.......m.......n..1...4o..-... |
2300 | 66 6f 03 00 7a 00 00 00 94 6f 03 00 92 00 00 00 0f 70 03 00 6b 00 00 00 a2 70 03 00 0e 00 00 00 | fo..z....o.......p..k....p...... |
2320 | 0e 71 03 00 4b 00 00 00 1d 71 03 00 33 00 00 00 69 71 03 00 39 00 00 00 9d 71 03 00 0b 00 00 00 | .q..K....q..3...iq..9....q...... |
2340 | d7 71 03 00 6d 00 00 00 e3 71 03 00 1a 00 00 00 51 72 03 00 20 00 00 00 6c 72 03 00 25 00 00 00 | .q..m....q......Qr......lr..%... |
2360 | 8d 72 03 00 4d 00 00 00 b3 72 03 00 4e 00 00 00 01 73 03 00 0b 00 00 00 50 73 03 00 f6 00 00 00 | .r..M....r..N....s......Ps...... |
2380 | 5c 73 03 00 2e 00 00 00 53 74 03 00 13 00 00 00 82 74 03 00 0f 00 00 00 96 74 03 00 12 00 00 00 | \s......St.......t.......t...... |
23a0 | a6 74 03 00 71 01 00 00 b9 74 03 00 fe 00 00 00 2b 76 03 00 4e 00 00 00 2a 77 03 00 c9 00 00 00 | .t..q....t......+v..N...*w...... |
23c0 | 79 77 03 00 13 00 00 00 43 78 03 00 19 00 00 00 57 78 03 00 7c 00 00 00 71 78 03 00 38 00 00 00 | yw......Cx......Wx..|...qx..8... |
23e0 | ee 78 03 00 3b 00 00 00 27 79 03 00 46 00 00 00 63 79 03 00 2f 00 00 00 aa 79 03 00 19 00 00 00 | .x..;...'y..F...cy../....y...... |
2400 | da 79 03 00 12 00 00 00 f4 79 03 00 14 00 00 00 07 7a 03 00 22 00 00 00 1c 7a 03 00 84 00 00 00 | .y.......y.......z.."....z...... |
2420 | 3f 7a 03 00 26 00 00 00 c4 7a 03 00 24 00 00 00 eb 7a 03 00 1b 00 00 00 10 7b 03 00 1d 00 00 00 | ?z..&....z..$....z.......{...... |
2440 | 2c 7b 03 00 58 00 00 00 4a 7b 03 00 43 00 00 00 a3 7b 03 00 56 00 00 00 e7 7b 03 00 43 00 00 00 | ,{..X...J{..C....{..V....{..C... |
2460 | 3e 7c 03 00 75 00 00 00 82 7c 03 00 1e 00 00 00 f8 7c 03 00 25 00 00 00 17 7d 03 00 25 00 00 00 | >|..u....|.......|..%....}..%... |
2480 | 3d 7d 03 00 15 00 00 00 63 7d 03 00 86 00 00 00 79 7d 03 00 2e 00 00 00 00 7e 03 00 95 00 00 00 | =}......c}......y}.......~...... |
24a0 | 2f 7e 03 00 2b 00 00 00 c5 7e 03 00 2b 00 00 00 f1 7e 03 00 37 01 00 00 1d 7f 03 00 38 00 00 00 | /~..+....~..+....~..7.......8... |
24c0 | 55 80 03 00 3b 00 00 00 8e 80 03 00 18 00 00 00 ca 80 03 00 16 00 00 00 e3 80 03 00 7a 00 00 00 | U...;.......................z... |
24e0 | fa 80 03 00 12 00 00 00 75 81 03 00 67 00 00 00 88 81 03 00 3a 00 00 00 f0 81 03 00 3a 00 00 00 | ........u...g.......:.......:... |
2500 | 2b 82 03 00 0c 00 00 00 66 82 03 00 18 00 00 00 73 82 03 00 39 00 00 00 8c 82 03 00 47 00 00 00 | +.......f.......s...9.......G... |
2520 | c6 82 03 00 42 00 00 00 0e 83 03 00 4c 00 00 00 51 83 03 00 3f 00 00 00 9e 83 03 00 3b 00 00 00 | ....B.......L...Q...?.......;... |
2540 | de 83 03 00 41 00 00 00 1a 84 03 00 11 01 00 00 5c 84 03 00 3d 00 00 00 6e 85 03 00 31 00 00 00 | ....A...........\...=...n...1... |
2560 | ac 85 03 00 26 01 00 00 de 85 03 00 e2 00 00 00 05 87 03 00 9f 00 00 00 e8 87 03 00 9f 00 00 00 | ....&........................... |
2580 | 88 88 03 00 3a 00 00 00 28 89 03 00 f8 00 00 00 63 89 03 00 e2 00 00 00 5c 8a 03 00 88 00 00 00 | ....:...(.......c.......\....... |
25a0 | 3f 8b 03 00 31 00 00 00 c8 8b 03 00 06 00 00 00 fa 8b 03 00 0d 00 00 00 01 8c 03 00 0b 00 00 00 | ?...1........................... |
25c0 | 0f 8c 03 00 2e 00 00 00 1b 8c 03 00 67 00 00 00 4a 8c 03 00 3e 00 00 00 b2 8c 03 00 13 00 00 00 | ............g...J...>........... |
25e0 | f1 8c 03 00 ab 00 00 00 05 8d 03 00 b5 00 00 00 b1 8d 03 00 b5 00 00 00 67 8e 03 00 90 00 00 00 | ........................g....... |
2600 | 1d 8f 03 00 30 00 00 00 ae 8f 03 00 47 00 00 00 df 8f 03 00 22 00 00 00 27 90 03 00 22 00 00 00 | ....0.......G......."...'..."... |
2620 | 4a 90 03 00 24 00 00 00 6d 90 03 00 09 00 00 00 92 90 03 00 09 00 00 00 9c 90 03 00 92 00 00 00 | J...$...m....................... |
2640 | a6 90 03 00 38 00 00 00 39 91 03 00 05 00 00 00 72 91 03 00 0f 00 00 00 78 91 03 00 88 00 00 00 | ....8...9.......r.......x....... |
2660 | 88 91 03 00 bd 00 00 00 11 92 03 00 c2 00 00 00 cf 92 03 00 7e 00 00 00 92 93 03 00 0b 00 00 00 | ....................~........... |
2680 | 11 94 03 00 12 00 00 00 1d 94 03 00 6a 00 00 00 30 94 03 00 2f 00 00 00 9b 94 03 00 0a 00 00 00 | ............j...0.../........... |
26a0 | cb 94 03 00 f4 00 00 00 d6 94 03 00 d2 01 00 00 cb 95 03 00 ad 01 00 00 9e 97 03 00 dd 00 00 00 | ................................ |
26c0 | 4c 99 03 00 91 01 00 00 2a 9a 03 00 7f 00 00 00 bc 9b 03 00 af 00 00 00 3c 9c 03 00 2a 03 00 00 | L.......*...............<...*... |
26e0 | ec 9c 03 00 6b 00 00 00 17 a0 03 00 a3 00 00 00 83 a0 03 00 9a 00 00 00 27 a1 03 00 50 00 00 00 | ....k...................'...P... |
2700 | c2 a1 03 00 81 00 00 00 13 a2 03 00 2c 00 00 00 95 a2 03 00 7a 00 00 00 c2 a2 03 00 2b 00 00 00 | ............,.......z.......+... |
2720 | 3d a3 03 00 31 00 00 00 69 a3 03 00 25 00 00 00 9b a3 03 00 09 00 00 00 c1 a3 03 00 34 00 00 00 | =...1...i...%...............4... |
2740 | cb a3 03 00 23 00 00 00 00 a4 03 00 23 00 00 00 24 a4 03 00 25 00 00 00 48 a4 03 00 11 00 00 00 | ....#.......#...$...%...H....... |
2760 | 6e a4 03 00 12 00 00 00 80 a4 03 00 12 00 00 00 93 a4 03 00 1e 00 00 00 a6 a4 03 00 23 00 00 00 | n...........................#... |
2780 | c5 a4 03 00 39 00 00 00 e9 a4 03 00 2c 00 00 00 23 a5 03 00 2d 00 00 00 50 a5 03 00 1c 00 00 00 | ....9.......,...#...-...P....... |
27a0 | 7e a5 03 00 1d 00 00 00 9b a5 03 00 1e 00 00 00 b9 a5 03 00 0c 00 00 00 d8 a5 03 00 28 00 00 00 | ~...........................(... |
27c0 | e5 a5 03 00 3a 00 00 00 0e a6 03 00 30 00 00 00 49 a6 03 00 27 00 00 00 7a a6 03 00 38 00 00 00 | ....:.......0...I...'...z...8... |
27e0 | a2 a6 03 00 1d 00 00 00 db a6 03 00 13 00 00 00 f9 a6 03 00 0b 00 00 00 0d a7 03 00 28 00 00 00 | ............................(... |
2800 | 19 a7 03 00 30 00 00 00 42 a7 03 00 4c 00 00 00 73 a7 03 00 74 00 00 00 c0 a7 03 00 55 00 00 00 | ....0...B...L...s...t.......U... |
2820 | 35 a8 03 00 30 00 00 00 8b a8 03 00 0b 00 00 00 bc a8 03 00 28 00 00 00 c8 a8 03 00 35 00 00 00 | 5...0...............(.......5... |
2840 | f1 a8 03 00 0a 00 00 00 27 a9 03 00 56 00 00 00 32 a9 03 00 1f 00 00 00 89 a9 03 00 18 00 00 00 | ........'...V...2............... |
2860 | a9 a9 03 00 2d 00 00 00 c2 a9 03 00 23 00 00 00 f0 a9 03 00 3f 00 00 00 14 aa 03 00 4d 00 00 00 | ....-.......#.......?.......M... |
2880 | 54 aa 03 00 20 00 00 00 a2 aa 03 00 6d 00 00 00 c3 aa 03 00 61 00 00 00 31 ab 03 00 63 00 00 00 | T...........m.......a...1...c... |
28a0 | 93 ab 03 00 31 00 00 00 f7 ab 03 00 34 00 00 00 29 ac 03 00 1b 01 00 00 5e ac 03 00 3a 00 00 00 | ....1.......4...).......^...:... |
28c0 | 7a ad 03 00 4a 00 00 00 b5 ad 03 00 38 00 00 00 00 ae 03 00 40 01 00 00 39 ae 03 00 3a 00 00 00 | z...J.......8.......@...9...:... |
28e0 | 7a af 03 00 4f 00 00 00 b5 af 03 00 2e 00 00 00 05 b0 03 00 86 00 00 00 34 b0 03 00 bb 01 00 00 | z...O...................4....... |
2900 | bb b0 03 00 06 01 00 00 77 b2 03 00 bf 00 00 00 7e b3 03 00 25 00 00 00 3e b4 03 00 4b 00 00 00 | ........w.......~...%...>...K... |
2920 | 64 b4 03 00 79 00 00 00 b0 b4 03 00 22 00 00 00 2a b5 03 00 64 00 00 00 4d b5 03 00 16 00 00 00 | d...y......."...*...d...M....... |
2940 | b2 b5 03 00 14 00 00 00 c9 b5 03 00 79 00 00 00 de b5 03 00 42 00 00 00 58 b6 03 00 1c 00 00 00 | ............y.......B...X....... |
2960 | 9b b6 03 00 33 00 00 00 b8 b6 03 00 a7 00 00 00 ec b6 03 00 c1 00 00 00 94 b7 03 00 32 00 00 00 | ....3.......................2... |
2980 | 56 b8 03 00 05 00 00 00 89 b8 03 00 10 00 00 00 8f b8 03 00 5e 00 00 00 a0 b8 03 00 08 00 00 00 | V...................^........... |
29a0 | ff b8 03 00 dc 00 00 00 08 b9 03 00 10 00 00 00 e5 b9 03 00 0d 00 00 00 f6 b9 03 00 21 00 00 00 | ............................!... |
29c0 | 04 ba 03 00 21 00 00 00 26 ba 03 00 d4 00 00 00 48 ba 03 00 14 00 00 00 1d bb 03 00 38 00 00 00 | ....!...&.......H...........8... |
29e0 | 32 bb 03 00 a3 00 00 00 6b bb 03 00 a7 00 00 00 0f bc 03 00 23 00 00 00 b7 bc 03 00 91 00 00 00 | 2.......k...........#........... |
2a00 | db bc 03 00 59 00 00 00 6d bd 03 00 a6 01 00 00 c7 bd 03 00 ca 00 00 00 6e bf 03 00 70 01 00 00 | ....Y...m...............n...p... |
2a20 | 39 c0 03 00 63 01 00 00 aa c1 03 00 07 00 00 00 0e c3 03 00 15 00 00 00 16 c3 03 00 12 00 00 00 | 9...c........................... |
2a40 | 2c c3 03 00 0f 00 00 00 3f c3 03 00 16 00 00 00 4f c3 03 00 2f 00 00 00 66 c3 03 00 2f 00 00 00 | ,.......?.......O.../...f.../... |
2a60 | 96 c3 03 00 77 00 00 00 c6 c3 03 00 17 00 00 00 3e c4 03 00 10 00 00 00 56 c4 03 00 51 00 00 00 | ....w...........>.......V...Q... |
2a80 | 67 c4 03 00 08 00 00 00 b9 c4 03 00 bf 00 00 00 c2 c4 03 00 58 00 00 00 82 c5 03 00 e0 00 00 00 | g...................X........... |
2aa0 | db c5 03 00 3d 00 00 00 bc c6 03 00 3b 00 00 00 fa c6 03 00 3c 00 00 00 36 c7 03 00 3e 00 00 00 | ....=.......;.......<...6...>... |
2ac0 | 73 c7 03 00 3c 00 00 00 b2 c7 03 00 3d 00 00 00 ef c7 03 00 34 00 00 00 2d c8 03 00 36 00 00 00 | s...<.......=.......4...-...6... |
2ae0 | 62 c8 03 00 33 00 00 00 99 c8 03 00 a3 00 00 00 cd c8 03 00 08 00 00 00 71 c9 03 00 1b 00 00 00 | b...3...................q....... |
2b00 | 7a c9 03 00 09 00 00 00 96 c9 03 00 c5 00 00 00 a0 c9 03 00 0f 00 00 00 66 ca 03 00 0f 00 00 00 | z.......................f....... |
2b20 | 76 ca 03 00 31 00 00 00 86 ca 03 00 2a 00 00 00 b8 ca 03 00 19 00 00 00 e3 ca 03 00 0b 00 00 00 | v...1.......*................... |
2b40 | fd ca 03 00 40 00 00 00 09 cb 03 00 28 00 00 00 4a cb 03 00 1c 00 00 00 73 cb 03 00 8e 00 00 00 | ....@.......(...J.......s....... |
2b60 | 90 cb 03 00 08 00 00 00 1f cc 03 00 c1 00 00 00 28 cc 03 00 9a 00 00 00 ea cc 03 00 dc 00 00 00 | ................(............... |
2b80 | 85 cd 03 00 a5 01 00 00 62 ce 03 00 03 00 00 00 08 d0 03 00 98 00 00 00 0c d0 03 00 46 01 00 00 | ........b...................F... |
2ba0 | a5 d0 03 00 0a 00 00 00 ec d1 03 00 0a 00 00 00 f7 d1 03 00 39 00 00 00 02 d2 03 00 0d 00 00 00 | ....................9........... |
2bc0 | 3c d2 03 00 08 00 00 00 4a d2 03 00 0f 00 00 00 53 d2 03 00 2d 00 00 00 63 d2 03 00 e5 00 00 00 | <.......J.......S...-...c....... |
2be0 | 91 d2 03 00 0a 00 00 00 77 d3 03 00 57 01 00 00 82 d3 03 00 31 01 00 00 da d4 03 00 0a 00 00 00 | ........w...W.......1........... |
2c00 | 0c d6 03 00 69 01 00 00 17 d6 03 00 26 00 00 00 81 d7 03 00 05 00 00 00 a8 d7 03 00 71 00 00 00 | ....i.......&...............q... |
2c20 | ae d7 03 00 5c 00 00 00 20 d8 03 00 90 00 00 00 7d d8 03 00 33 00 00 00 0e d9 03 00 51 00 00 00 | ....\...........}...3.......Q... |
2c40 | 42 d9 03 00 95 00 00 00 94 d9 03 00 09 00 00 00 2a da 03 00 c1 00 00 00 34 da 03 00 53 00 00 00 | B...............*.......4...S... |
2c60 | f6 da 03 00 08 00 00 00 4a db 03 00 15 00 00 00 53 db 03 00 15 00 00 00 69 db 03 00 16 00 00 00 | ........J.......S.......i....... |
2c80 | 7f db 03 00 23 00 00 00 96 db 03 00 14 00 00 00 ba db 03 00 13 00 00 00 cf db 03 00 0d 00 00 00 | ....#........................... |
2ca0 | e3 db 03 00 0e 00 00 00 f1 db 03 00 0f 00 00 00 00 dc 03 00 4f 01 00 00 10 dc 03 00 20 01 00 00 | ....................O........... |
2cc0 | 60 dd 03 00 23 01 00 00 81 de 03 00 4d 00 00 00 a5 df 03 00 95 00 00 00 f3 df 03 00 89 00 00 00 | `...#.......M................... |
2ce0 | 89 e0 03 00 22 00 00 00 13 e1 03 00 0f 00 00 00 36 e1 03 00 0f 00 00 00 46 e1 03 00 28 00 00 00 | ...."...........6.......F...(... |
2d00 | 56 e1 03 00 78 01 00 00 7f e1 03 00 60 00 00 00 f8 e2 03 00 1d 01 00 00 59 e3 03 00 0b 00 00 00 | V...x.......`...........Y....... |
2d20 | 77 e4 03 00 53 00 00 00 83 e4 03 00 ca 00 00 00 d7 e4 03 00 f4 00 00 00 a2 e5 03 00 98 00 00 00 | w...S........................... |
2d40 | 97 e6 03 00 98 00 00 00 30 e7 03 00 00 01 00 00 c9 e7 03 00 aa 00 00 00 ca e8 03 00 05 00 00 00 | ........0....................... |
2d60 | 75 e9 03 00 0e 00 00 00 7b e9 03 00 0f 00 00 00 8a e9 03 00 0b 00 00 00 9a e9 03 00 1f 00 00 00 | u.......{....................... |
2d80 | a6 e9 03 00 b1 00 00 00 c6 e9 03 00 17 00 00 00 78 ea 03 00 a7 00 00 00 90 ea 03 00 21 00 00 00 | ................x...........!... |
2da0 | 38 eb 03 00 90 00 00 00 5a eb 03 00 26 00 00 00 eb eb 03 00 1a 00 00 00 12 ec 03 00 44 00 00 00 | 8.......Z...&...............D... |
2dc0 | 2d ec 03 00 48 00 00 00 72 ec 03 00 2a 00 00 00 bb ec 03 00 6e 00 00 00 e6 ec 03 00 90 00 00 00 | -...H...r...*.......n........... |
2de0 | 55 ed 03 00 cf 00 00 00 e6 ed 03 00 0f 00 00 00 b6 ee 03 00 0c 00 00 00 c6 ee 03 00 69 01 00 00 | U...........................i... |
2e00 | d3 ee 03 00 93 00 00 00 3d f0 03 00 0f 00 00 00 d1 f0 03 00 10 00 00 00 e1 f0 03 00 3e 00 00 00 | ........=...................>... |
2e20 | f2 f0 03 00 81 00 00 00 31 f1 03 00 8b 00 00 00 b3 f1 03 00 bd 00 00 00 3f f2 03 00 30 01 00 00 | ........1...............?...0... |
2e40 | fd f2 03 00 96 00 00 00 2e f4 03 00 69 01 00 00 c5 f4 03 00 0c 00 00 00 2f f6 03 00 5a 00 00 00 | ............i.........../...Z... |
2e60 | 3c f6 03 00 3c 01 00 00 97 f6 03 00 db 00 00 00 d4 f7 03 00 52 00 00 00 b0 f8 03 00 2f 00 00 00 | <...<...............R......./... |
2e80 | 03 f9 03 00 ac 00 00 00 33 f9 03 00 09 00 00 00 e0 f9 03 00 eb 00 00 00 ea f9 03 00 d8 00 00 00 | ........3....................... |
2ea0 | d6 fa 03 00 5c 00 00 00 af fb 03 00 63 00 00 00 0c fc 03 00 22 01 00 00 70 fc 03 00 af 00 00 00 | ....\.......c......."...p....... |
2ec0 | 93 fd 03 00 30 00 00 00 43 fe 03 00 4b 00 00 00 74 fe 03 00 66 00 00 00 c0 fe 03 00 52 00 00 00 | ....0...C...K...t...f.......R... |
2ee0 | 27 ff 03 00 49 00 00 00 7a ff 03 00 1b 01 00 00 c4 ff 03 00 bb 00 00 00 e0 00 04 00 60 00 00 00 | '...I...z...................`... |
2f00 | 9c 01 04 00 62 00 00 00 fd 01 04 00 52 01 00 00 60 02 04 00 f3 00 00 00 b3 03 04 00 bc 00 00 00 | ....b.......R...`............... |
2f20 | a7 04 04 00 77 00 00 00 64 05 04 00 af 00 00 00 dc 05 04 00 e8 00 00 00 8c 06 04 00 76 00 00 00 | ....w...d...................v... |
2f40 | 75 07 04 00 3c 01 00 00 ec 07 04 00 97 00 00 00 29 09 04 00 a2 00 00 00 c1 09 04 00 d3 00 00 00 | u...<...........)............... |
2f60 | 64 0a 04 00 62 00 00 00 38 0b 04 00 0e 00 00 00 9b 0b 04 00 cc 00 00 00 aa 0b 04 00 32 00 00 00 | d...b...8...................2... |
2f80 | 77 0c 04 00 11 00 00 00 aa 0c 04 00 14 01 00 00 bc 0c 04 00 b9 00 00 00 d1 0d 04 00 06 00 00 00 | w............................... |
2fa0 | 8b 0e 04 00 06 00 00 00 92 0e 04 00 5d 02 00 00 99 0e 04 00 0e 00 00 00 f7 10 04 00 80 01 00 00 | ............]................... |
2fc0 | 06 11 04 00 23 01 00 00 87 12 04 00 0c 01 00 00 ab 13 04 00 8b 00 00 00 b8 14 04 00 06 00 00 00 | ....#........................... |
2fe0 | 44 15 04 00 59 00 00 00 4b 15 04 00 59 00 00 00 a5 15 04 00 07 00 00 00 ff 15 04 00 15 00 00 00 | D...Y...K...Y................... |
3000 | 07 16 04 00 44 00 00 00 1d 16 04 00 4d 00 00 00 62 16 04 00 3d 00 00 00 b0 16 04 00 10 00 00 00 | ....D.......M...b...=........... |
3020 | ee 16 04 00 45 00 00 00 ff 16 04 00 59 00 00 00 45 17 04 00 7c 00 00 00 9f 17 04 00 ac 00 00 00 | ....E.......Y...E...|........... |
3040 | 1c 18 04 00 89 00 00 00 c9 18 04 00 23 00 00 00 53 19 04 00 0e 00 00 00 77 19 04 00 26 00 00 00 | ............#...S.......w...&... |
3060 | 86 19 04 00 2d 00 00 00 ad 19 04 00 2e 00 00 00 db 19 04 00 2d 00 00 00 0a 1a 04 00 0f 00 00 00 | ....-...............-........... |
3080 | 38 1a 04 00 1d 01 00 00 48 1a 04 00 19 01 00 00 66 1b 04 00 07 00 00 00 80 1c 04 00 17 00 00 00 | 8.......H.......f............... |
30a0 | 88 1c 04 00 0e 00 00 00 a0 1c 04 00 25 00 00 00 af 1c 04 00 0e 00 00 00 d5 1c 04 00 11 00 00 00 | ............%................... |
30c0 | e4 1c 04 00 0f 00 00 00 f6 1c 04 00 10 00 00 00 06 1d 04 00 0e 00 00 00 17 1d 04 00 06 00 00 00 | ................................ |
30e0 | 26 1d 04 00 d0 00 00 00 2d 1d 04 00 57 00 00 00 fe 1d 04 00 2b 00 00 00 56 1e 04 00 08 00 00 00 | &.......-...W.......+...V....... |
3100 | 82 1e 04 00 13 00 00 00 8b 1e 04 00 22 00 00 00 9f 1e 04 00 0b 00 00 00 c2 1e 04 00 08 00 00 00 | ............"................... |
3120 | ce 1e 04 00 1a 00 00 00 d7 1e 04 00 6d 00 00 00 f2 1e 04 00 17 00 00 00 60 1f 04 00 47 01 00 00 | ............m...........`...G... |
3140 | 78 1f 04 00 14 00 00 00 c0 20 04 00 0d 00 00 00 d5 20 04 00 0c 00 00 00 e3 20 04 00 3e 00 00 00 | x...........................>... |
3160 | f0 20 04 00 78 00 00 00 2f 21 04 00 3c 00 00 00 a8 21 04 00 df 00 00 00 e5 21 04 00 34 00 00 00 | ....x.../!..<....!.......!..4... |
3180 | c5 22 04 00 4d 00 00 00 fa 22 04 00 3e 00 00 00 48 23 04 00 64 00 00 00 87 23 04 00 db 00 00 00 | ."..M...."..>...H#..d....#...... |
31a0 | ec 23 04 00 3b 00 00 00 c8 24 04 00 18 00 00 00 04 25 04 00 12 00 00 00 1d 25 04 00 3f 00 00 00 | .#..;....$.......%.......%..?... |
31c0 | 30 25 04 00 04 00 00 00 70 25 04 00 11 00 00 00 75 25 04 00 0a 00 00 00 87 25 04 00 2a 00 00 00 | 0%......p%......u%.......%..*... |
31e0 | 92 25 04 00 10 00 00 00 bd 25 04 00 09 00 00 00 ce 25 04 00 30 00 00 00 d8 25 04 00 08 00 00 00 | .%.......%.......%..0....%...... |
3200 | 09 26 04 00 05 01 00 00 12 26 04 00 1e 00 00 00 18 27 04 00 13 00 00 00 37 27 04 00 c5 00 00 00 | .&.......&.......'......7'...... |
3220 | 4b 27 04 00 6a 00 00 00 11 28 04 00 c0 00 00 00 7c 28 04 00 25 00 00 00 3d 29 04 00 25 00 00 00 | K'..j....(......|(..%...=)..%... |
3240 | 63 29 04 00 03 00 00 00 89 29 04 00 d3 00 00 00 8d 29 04 00 a8 00 00 00 61 2a 04 00 90 01 00 00 | c).......).......)......a*...... |
3260 | 0a 2b 04 00 d4 01 00 00 9b 2c 04 00 23 01 00 00 70 2e 04 00 2a 00 00 00 94 2f 04 00 0a 00 00 00 | .+.......,..#...p...*..../...... |
3280 | bf 2f 04 00 26 00 00 00 ca 2f 04 00 0a 00 00 00 f1 2f 04 00 96 01 00 00 fc 2f 04 00 05 00 00 00 | ./..&..../......./......./...... |
32a0 | 93 31 04 00 05 00 00 00 99 31 04 00 2b 00 00 00 9f 31 04 00 02 00 00 00 cb 31 04 00 0a 00 00 00 | .1.......1..+....1.......1...... |
32c0 | ce 31 04 00 53 00 00 00 d9 31 04 00 1d 00 00 00 2d 32 04 00 25 00 00 00 4b 32 04 00 18 00 00 00 | .1..S....1......-2..%...K2...... |
32e0 | 71 32 04 00 19 00 00 00 8a 32 04 00 19 00 00 00 a4 32 04 00 33 00 00 00 be 32 04 00 33 00 00 00 | q2.......2.......2..3....2..3... |
3300 | f2 32 04 00 ea 00 00 00 26 33 04 00 2b 00 00 00 11 34 04 00 4d 00 00 00 3d 34 04 00 15 00 00 00 | .2......&3..+....4..M...=4...... |
3320 | 8b 34 04 00 14 02 00 00 a1 34 04 00 34 00 00 00 b6 36 04 00 33 00 00 00 eb 36 04 00 36 00 00 00 | .4.......4..4....6..3....6..6... |
3340 | 1f 37 04 00 34 00 00 00 56 37 04 00 2d 00 00 00 8b 37 04 00 27 00 00 00 b9 37 04 00 1b 00 00 00 | .7..4...V7..-....7..'....7...... |
3360 | e1 37 04 00 38 00 00 00 fd 37 04 00 38 00 00 00 36 38 04 00 06 00 00 00 6f 38 04 00 04 00 00 00 | .7..8....7..8...68......o8...... |
3380 | 76 38 04 00 05 00 00 00 7b 38 04 00 11 00 00 00 81 38 04 00 19 00 00 00 93 38 04 00 1d 00 00 00 | v8......{8.......8.......8...... |
33a0 | ad 38 04 00 19 00 00 00 cb 38 04 00 41 00 00 00 e5 38 04 00 11 00 00 00 27 39 04 00 12 00 00 00 | .8.......8..A....8......'9...... |
33c0 | 39 39 04 00 06 00 00 00 4c 39 04 00 0b 00 00 00 53 39 04 00 f7 00 00 00 5f 39 04 00 24 01 00 00 | 99......L9......S9......_9..$... |
33e0 | 57 3a 04 00 39 00 00 00 7c 3b 04 00 05 00 00 00 b6 3b 04 00 19 00 00 00 bc 3b 04 00 04 00 00 00 | W:..9...|;.......;.......;...... |
3400 | d6 3b 04 00 1b 00 00 00 db 3b 04 00 25 00 00 00 f7 3b 04 00 2d 00 00 00 1d 3c 04 00 2e 00 00 00 | .;.......;..%....;..-....<...... |
3420 | 4b 3c 04 00 0c 00 00 00 7a 3c 04 00 0a 00 00 00 87 3c 04 00 7a 00 00 00 92 3c 04 00 50 00 00 00 | K<......z<.......<..z....<..P... |
3440 | 0d 3d 04 00 0b 00 00 00 5e 3d 04 00 76 00 00 00 6a 3d 04 00 04 00 00 00 e1 3d 04 00 10 00 00 00 | .=......^=..v...j=.......=...... |
3460 | e6 3d 04 00 15 00 00 00 f7 3d 04 00 16 00 00 00 0d 3e 04 00 20 00 00 00 24 3e 04 00 1b 00 00 00 | .=.......=.......>......$>...... |
3480 | 45 3e 04 00 0e 00 00 00 61 3e 04 00 16 00 00 00 70 3e 04 00 11 00 00 00 87 3e 04 00 14 00 00 00 | E>......a>......p>.......>...... |
34a0 | 99 3e 04 00 87 00 00 00 ae 3e 04 00 39 00 00 00 36 3f 04 00 3a 00 00 00 70 3f 04 00 3a 00 00 00 | .>.......>..9...6?..:...p?..:... |
34c0 | ab 3f 04 00 ec 00 00 00 e6 3f 04 00 14 00 00 00 d3 40 04 00 1f 00 00 00 e8 40 04 00 25 00 00 00 | .?.......?.......@.......@..%... |
34e0 | 08 41 04 00 0c 00 00 00 2e 41 04 00 3e 00 00 00 3b 41 04 00 0c 00 00 00 7a 41 04 00 0a 00 00 00 | .A.......A..>...;A......zA...... |
3500 | 87 41 04 00 54 00 00 00 92 41 04 00 0b 00 00 00 e7 41 04 00 0c 00 00 00 f3 41 04 00 05 00 00 00 | .A..T....A.......A.......A...... |
3520 | 00 42 04 00 1a 00 00 00 06 42 04 00 16 00 00 00 21 42 04 00 14 00 00 00 38 42 04 00 1c 00 00 00 | .B.......B......!B......8B...... |
3540 | 4d 42 04 00 75 00 00 00 6a 42 04 00 07 01 00 00 e0 42 04 00 78 01 00 00 e8 43 04 00 45 00 00 00 | MB..u...jB.......B..x....C..E... |
3560 | 61 45 04 00 39 00 00 00 a7 45 04 00 ec 00 00 00 e1 45 04 00 e6 00 00 00 ce 46 04 00 4a 00 00 00 | aE..9....E.......E.......F..J... |
3580 | b5 47 04 00 57 00 00 00 00 48 04 00 69 00 00 00 58 48 04 00 d2 00 00 00 c2 48 04 00 c2 00 00 00 | .G..W....H..i...XH.......H...... |
35a0 | 95 49 04 00 b8 00 00 00 58 4a 04 00 98 00 00 00 11 4b 04 00 b5 00 00 00 aa 4b 04 00 ff 00 00 00 | .I......XJ.......K.......K...... |
35c0 | 60 4c 04 00 7f 00 00 00 60 4d 04 00 83 00 00 00 e0 4d 04 00 5a 00 00 00 64 4e 04 00 69 00 00 00 | `L......`M.......M..Z...dN..i... |
35e0 | bf 4e 04 00 0d 02 00 00 29 4f 04 00 b8 00 00 00 37 51 04 00 a4 00 00 00 f0 51 04 00 b1 01 00 00 | .N......)O......7Q.......Q...... |
3600 | 95 52 04 00 ad 00 00 00 47 54 04 00 6f 00 00 00 f5 54 04 00 89 00 00 00 65 55 04 00 ae 00 00 00 | .R......GT..o....T......eU...... |
3620 | ef 55 04 00 38 01 00 00 9e 56 04 00 46 01 00 00 d7 57 04 00 5f 01 00 00 1e 59 04 00 f0 00 00 00 | .U..8....V..F....W.._....Y...... |
3640 | 7e 5a 04 00 57 00 00 00 6f 5b 04 00 83 00 00 00 c7 5b 04 00 32 00 00 00 4b 5c 04 00 25 01 00 00 | ~Z..W...o[.......[..2...K\..%... |
3660 | 7e 5c 04 00 6c 00 00 00 a4 5d 04 00 6a 01 00 00 11 5e 04 00 9b 00 00 00 7c 5f 04 00 2a 00 00 00 | ~\..l....]..j....^......|_..*... |
3680 | 18 60 04 00 78 00 00 00 43 60 04 00 a3 00 00 00 bc 60 04 00 94 00 00 00 60 61 04 00 93 00 00 00 | .`..x...C`.......`......`a...... |
36a0 | f5 61 04 00 51 00 00 00 89 62 04 00 92 00 00 00 db 62 04 00 c0 00 00 00 6e 63 04 00 bb 00 00 00 | .a..Q....b.......b......nc...... |
36c0 | 2f 64 04 00 b2 00 00 00 eb 64 04 00 97 00 00 00 9e 65 04 00 b5 00 00 00 36 66 04 00 55 00 00 00 | /d.......d.......e......6f..U... |
36e0 | ec 66 04 00 6e 00 00 00 42 67 04 00 a6 00 00 00 b1 67 04 00 a7 00 00 00 58 68 04 00 ac 00 00 00 | .f..n...Bg.......g......Xh...... |
3700 | 00 69 04 00 73 00 00 00 ad 69 04 00 68 00 00 00 21 6a 04 00 42 01 00 00 8a 6a 04 00 d4 00 00 00 | .i..s....i..h...!j..B....j...... |
3720 | cd 6b 04 00 d1 00 00 00 a2 6c 04 00 b3 00 00 00 74 6d 04 00 38 00 00 00 28 6e 04 00 87 00 00 00 | .k.......l......tm..8...(n...... |
3740 | 61 6e 04 00 8f 00 00 00 e9 6e 04 00 79 00 00 00 79 6f 04 00 8a 00 00 00 f3 6f 04 00 a3 00 00 00 | an.......n..y...yo.......o...... |
3760 | 7e 70 04 00 60 00 00 00 22 71 04 00 66 00 00 00 83 71 04 00 ab 00 00 00 ea 71 04 00 45 00 00 00 | ~p..`..."q..f....q.......q..E... |
3780 | 96 72 04 00 d3 00 00 00 dc 72 04 00 d3 00 00 00 b0 73 04 00 8e 00 00 00 84 74 04 00 61 00 00 00 | .r.......r.......s.......t..a... |
37a0 | 13 75 04 00 7f 00 00 00 75 75 04 00 69 01 00 00 f5 75 04 00 9d 01 00 00 5f 77 04 00 b6 00 00 00 | .u......uu..i....u......_w...... |
37c0 | fd 78 04 00 cd 00 00 00 b4 79 04 00 bf 00 00 00 82 7a 04 00 a8 00 00 00 42 7b 04 00 5f 00 00 00 | .x.......y.......z......B{.._... |
37e0 | eb 7b 04 00 e5 00 00 00 4b 7c 04 00 55 00 00 00 31 7d 04 00 69 00 00 00 87 7d 04 00 74 00 00 00 | .{......K|..U...1}..i....}..t... |
3800 | f1 7d 04 00 57 01 00 00 66 7e 04 00 8a 00 00 00 be 7f 04 00 9b 00 00 00 49 80 04 00 8d 00 00 00 | .}..W...f~..............I....... |
3820 | e5 80 04 00 74 00 00 00 73 81 04 00 97 00 00 00 e8 81 04 00 5c 00 00 00 80 82 04 00 8e 00 00 00 | ....t...s...........\........... |
3840 | dd 82 04 00 92 00 00 00 6c 83 04 00 69 00 00 00 ff 83 04 00 74 01 00 00 69 84 04 00 55 00 00 00 | ........l...i.......t...i...U... |
3860 | de 85 04 00 87 00 00 00 34 86 04 00 3e 00 00 00 bc 86 04 00 d5 00 00 00 fb 86 04 00 91 00 00 00 | ........4...>................... |
3880 | d1 87 04 00 bf 00 00 00 63 88 04 00 37 01 00 00 23 89 04 00 55 00 00 00 5b 8a 04 00 2c 00 00 00 | ........c...7...#...U...[...,... |
38a0 | b1 8a 04 00 21 00 00 00 de 8a 04 00 9d 00 00 00 00 8b 04 00 1e 00 00 00 9e 8b 04 00 09 00 00 00 | ....!........................... |
38c0 | bd 8b 04 00 1a 00 00 00 c7 8b 04 00 b7 00 00 00 e2 8b 04 00 40 00 00 00 9a 8c 04 00 31 00 00 00 | ....................@.......1... |
38e0 | db 8c 04 00 80 00 00 00 0d 8d 04 00 43 00 00 00 8e 8d 04 00 38 00 00 00 d2 8d 04 00 2c 00 00 00 | ............C.......8.......,... |
3900 | 0b 8e 04 00 9f 00 00 00 38 8e 04 00 7e 00 00 00 d8 8e 04 00 a3 00 00 00 57 8f 04 00 55 00 00 00 | ........8...~...........W...U... |
3920 | fb 8f 04 00 70 00 00 00 51 90 04 00 70 00 00 00 c2 90 04 00 4e 00 00 00 33 91 04 00 3b 00 00 00 | ....p...Q...p.......N...3...;... |
3940 | 82 91 04 00 6b 01 00 00 be 91 04 00 4a 00 00 00 2a 93 04 00 b5 00 00 00 75 93 04 00 71 00 00 00 | ....k.......J...*.......u...q... |
3960 | 2b 94 04 00 c2 00 00 00 9d 94 04 00 67 00 00 00 60 95 04 00 70 00 00 00 c8 95 04 00 dd 00 00 00 | +...........g...`...p........... |
3980 | 39 96 04 00 dc 00 00 00 17 97 04 00 4a 00 00 00 f4 97 04 00 4d 00 00 00 3f 98 04 00 32 00 00 00 | 9...........J.......M...?...2... |
39a0 | 8d 98 04 00 6f 00 00 00 c0 98 04 00 68 00 00 00 30 99 04 00 e3 00 00 00 99 99 04 00 01 03 00 00 | ....o.......h...0............... |
39c0 | 7d 9a 04 00 2c 00 00 00 7f 9d 04 00 bc 01 00 00 ac 9d 04 00 da 00 00 00 69 9f 04 00 8e 00 00 00 | }...,...................i....... |
39e0 | 44 a0 04 00 d0 00 00 00 d3 a0 04 00 81 00 00 00 a4 a1 04 00 b0 01 00 00 26 a2 04 00 94 00 00 00 | D.......................&....... |
3a00 | d7 a3 04 00 f7 00 00 00 6c a4 04 00 49 00 00 00 64 a5 04 00 56 02 00 00 ae a5 04 00 85 00 00 00 | ........l...I...d...V........... |
3a20 | 05 a8 04 00 08 01 00 00 8b a8 04 00 1d 02 00 00 94 a9 04 00 c5 00 00 00 b2 ab 04 00 5b 00 00 00 | ............................[... |
3a40 | 78 ac 04 00 46 00 00 00 d4 ac 04 00 5b 00 00 00 1b ad 04 00 b4 00 00 00 77 ad 04 00 33 00 00 00 | x...F.......[...........w...3... |
3a60 | 2c ae 04 00 60 00 00 00 60 ae 04 00 fe 00 00 00 c1 ae 04 00 61 00 00 00 c0 af 04 00 9d 00 00 00 | ,...`...`...........a........... |
3a80 | 22 b0 04 00 9c 00 00 00 c0 b0 04 00 13 01 00 00 5d b1 04 00 bb 00 00 00 71 b2 04 00 3d 00 00 00 | "...............].......q...=... |
3aa0 | 2d b3 04 00 c2 00 00 00 6b b3 04 00 db 00 00 00 2e b4 04 00 d2 00 00 00 0a b5 04 00 77 00 00 00 | -.......k...................w... |
3ac0 | dd b5 04 00 08 01 00 00 55 b6 04 00 96 00 00 00 5e b7 04 00 2e 01 00 00 f5 b7 04 00 68 00 00 00 | ........U.......^...........h... |
3ae0 | 24 b9 04 00 3c 00 00 00 8d b9 04 00 45 01 00 00 ca b9 04 00 c1 01 00 00 10 bb 04 00 4e 00 00 00 | $...<.......E...............N... |
3b00 | d2 bc 04 00 62 00 00 00 21 bd 04 00 ae 00 00 00 84 bd 04 00 dd 00 00 00 33 be 04 00 77 00 00 00 | ....b...!...............3...w... |
3b20 | 11 bf 04 00 b7 00 00 00 89 bf 04 00 a2 00 00 00 41 c0 04 00 bb 00 00 00 e4 c0 04 00 5c 00 00 00 | ................A...........\... |
3b40 | a0 c1 04 00 6a 01 00 00 fd c1 04 00 62 00 00 00 68 c3 04 00 c3 00 00 00 cb c3 04 00 11 00 00 00 | ....j.......b...h............... |
3b60 | 8f c4 04 00 ba 00 00 00 a1 c4 04 00 ba 00 00 00 5c c5 04 00 bc 00 00 00 17 c6 04 00 6e 00 00 00 | ................\...........n... |
3b80 | d4 c6 04 00 6f 00 00 00 43 c7 04 00 a0 00 00 00 b3 c7 04 00 42 00 00 00 54 c8 04 00 d2 00 00 00 | ....o...C...........B...T....... |
3ba0 | 97 c8 04 00 1d 01 00 00 6a c9 04 00 9b 01 00 00 88 ca 04 00 9b 01 00 00 24 cc 04 00 6b 00 00 00 | ........j...............$...k... |
3bc0 | c0 cd 04 00 98 00 00 00 2c ce 04 00 4a 00 00 00 c5 ce 04 00 0a 00 00 00 10 cf 04 00 18 00 00 00 | ........,...J................... |
3be0 | 1b cf 04 00 3e 00 00 00 34 cf 04 00 67 01 00 00 73 cf 04 00 0d 00 00 00 db d0 04 00 16 00 00 00 | ....>...4...g...s............... |
3c00 | e9 d0 04 00 23 00 00 00 00 d1 04 00 0d 00 00 00 24 d1 04 00 58 00 00 00 32 d1 04 00 67 00 00 00 | ....#...........$...X...2...g... |
3c20 | 8b d1 04 00 ef 00 00 00 f3 d1 04 00 6e 00 00 00 e3 d2 04 00 98 00 00 00 52 d3 04 00 0b 00 00 00 | ............n...........R....... |
3c40 | eb d3 04 00 0b 00 00 00 f7 d3 04 00 4c 00 00 00 03 d4 04 00 2f 00 00 00 50 d4 04 00 17 00 00 00 | ............L......./...P....... |
3c60 | 80 d4 04 00 10 00 00 00 98 d4 04 00 10 00 00 00 a9 d4 04 00 90 00 00 00 ba d4 04 00 17 00 00 00 | ................................ |
3c80 | 4b d5 04 00 37 00 00 00 63 d5 04 00 36 00 00 00 9b d5 04 00 1b 00 00 00 d2 d5 04 00 2f 00 00 00 | K...7...c...6.............../... |
3ca0 | ee d5 04 00 97 00 00 00 1e d6 04 00 10 00 00 00 b6 d6 04 00 0a 00 00 00 c7 d6 04 00 18 00 00 00 | ................................ |
3cc0 | d2 d6 04 00 72 01 00 00 eb d6 04 00 40 00 00 00 5e d8 04 00 7f 01 00 00 9f d8 04 00 c0 00 00 00 | ....r.......@...^............... |
3ce0 | 1f da 04 00 48 01 00 00 e0 da 04 00 54 01 00 00 29 dc 04 00 9e 01 00 00 7e dd 04 00 14 00 00 00 | ....H.......T...).......~....... |
3d00 | 1d df 04 00 08 00 00 00 32 df 04 00 18 00 00 00 3b df 04 00 31 00 00 00 54 df 04 00 8f 01 00 00 | ........2.......;...1...T....... |
3d20 | 86 df 04 00 f7 00 00 00 16 e1 04 00 e9 00 00 00 0e e2 04 00 89 00 00 00 f8 e2 04 00 38 00 00 00 | ............................8... |
3d40 | 82 e3 04 00 8f 00 00 00 bb e3 04 00 37 00 00 00 4b e4 04 00 1b 00 00 00 83 e4 04 00 25 01 00 00 | ............7...K...........%... |
3d60 | 9f e4 04 00 cb 00 00 00 c5 e5 04 00 db 00 00 00 91 e6 04 00 d7 00 00 00 6d e7 04 00 a5 00 00 00 | ........................m....... |
3d80 | 45 e8 04 00 93 00 00 00 eb e8 04 00 e3 00 00 00 7f e9 04 00 02 02 00 00 63 ea 04 00 c4 00 00 00 | E.......................c....... |
3da0 | 66 ec 04 00 a6 00 00 00 2b ed 04 00 e6 00 00 00 d2 ed 04 00 4f 00 00 00 b9 ee 04 00 a4 00 00 00 | f.......+...........O........... |
3dc0 | 09 ef 04 00 28 01 00 00 ae ef 04 00 9d 00 00 00 d7 f0 04 00 3b 00 00 00 75 f1 04 00 4a 00 00 00 | ....(...............;...u...J... |
3de0 | b1 f1 04 00 81 00 00 00 fc f1 04 00 68 00 00 00 7e f2 04 00 49 00 00 00 e7 f2 04 00 36 00 00 00 | ............h...~...I.......6... |
3e00 | 31 f3 04 00 11 00 00 00 68 f3 04 00 06 00 00 00 7a f3 04 00 0f 00 00 00 81 f3 04 00 18 00 00 00 | 1.......h.......z............... |
3e20 | 91 f3 04 00 0e 00 00 00 aa f3 04 00 0e 00 00 00 b9 f3 04 00 0f 00 00 00 c8 f3 04 00 0b 00 00 00 | ................................ |
3e40 | d8 f3 04 00 6c 01 00 00 e4 f3 04 00 3a 01 00 00 51 f5 04 00 0f 00 00 00 8c f6 04 00 0f 00 00 00 | ....l.......:...Q............... |
3e60 | 9c f6 04 00 08 00 00 00 ac f6 04 00 07 00 00 00 b5 f6 04 00 04 00 00 00 bd f6 04 00 0f 00 00 00 | ................................ |
3e80 | c2 f6 04 00 06 00 00 00 d2 f6 04 00 ff 00 00 00 d9 f6 04 00 23 00 00 00 d9 f7 04 00 23 00 00 00 | ....................#.......#... |
3ea0 | fd f7 04 00 0e 00 00 00 21 f8 04 00 07 00 00 00 30 f8 04 00 0a 00 00 00 38 f8 04 00 04 00 00 00 | ........!.......0.......8....... |
3ec0 | 43 f8 04 00 36 00 00 00 48 f8 04 00 b5 00 00 00 7f f8 04 00 04 00 00 00 35 f9 04 00 f5 00 00 00 | C...6...H...............5....... |
3ee0 | 3a f9 04 00 19 00 00 00 30 fa 04 00 42 00 00 00 4a fa 04 00 1b 00 00 00 8d fa 04 00 34 01 00 00 | :.......0...B...J...........4... |
3f00 | a9 fa 04 00 3e 00 00 00 de fb 04 00 29 00 00 00 1d fc 04 00 0f 00 00 00 47 fc 04 00 33 00 00 00 | ....>.......)...........G...3... |
3f20 | 57 fc 04 00 14 02 00 00 8b fc 04 00 40 00 00 00 a0 fe 04 00 3d 00 00 00 e1 fe 04 00 07 01 00 00 | W...........@.......=........... |
3f40 | 1f ff 04 00 23 00 00 00 27 00 05 00 11 00 00 00 4b 00 05 00 3f 00 00 00 5d 00 05 00 20 00 00 00 | ....#...'.......K...?...]....... |
3f60 | 9d 00 05 00 6f 00 00 00 be 00 05 00 78 00 00 00 2e 01 05 00 3d 00 00 00 a7 01 05 00 68 00 00 00 | ....o.......x.......=.......h... |
3f80 | e5 01 05 00 6b 00 00 00 4e 02 05 00 23 00 00 00 ba 02 05 00 07 00 00 00 de 02 05 00 7d 00 00 00 | ....k...N...#...............}... |
3fa0 | e6 02 05 00 06 00 00 00 64 03 05 00 16 00 00 00 6b 03 05 00 35 00 00 00 82 03 05 00 10 00 00 00 | ........d.......k...5........... |
3fc0 | b8 03 05 00 69 02 00 00 c9 03 05 00 1b 00 00 00 33 06 05 00 52 01 00 00 4f 06 05 00 4a 00 00 00 | ....i...........3...R...O...J... |
3fe0 | a2 07 05 00 e8 01 00 00 ed 07 05 00 9d 01 00 00 d6 09 05 00 d7 00 00 00 74 0b 05 00 1e 00 00 00 | ........................t....... |
4000 | 4c 0c 05 00 2f 00 00 00 6b 0c 05 00 21 00 00 00 9b 0c 05 00 0c 00 00 00 bd 0c 05 00 0e 00 00 00 | L.../...k...!................... |
4020 | ca 0c 05 00 24 00 00 00 d9 0c 05 00 0e 00 00 00 fe 0c 05 00 59 00 00 00 0d 0d 05 00 22 00 00 00 | ....$...............Y......."... |
4040 | 67 0d 05 00 05 00 00 00 8a 0d 05 00 20 00 00 00 90 0d 05 00 14 00 00 00 b1 0d 05 00 42 00 00 00 | g...........................B... |
4060 | c6 0d 05 00 1f 00 00 00 09 0e 05 00 2e 00 00 00 29 0e 05 00 10 00 00 00 58 0e 05 00 10 00 00 00 | ................).......X....... |
4080 | 69 0e 05 00 12 00 00 00 7a 0e 05 00 12 00 00 00 8d 0e 05 00 2e 00 00 00 a0 0e 05 00 3c 00 00 00 | i.......z...................<... |
40a0 | cf 0e 05 00 3b 00 00 00 0c 0f 05 00 0b 00 00 00 48 0f 05 00 38 00 00 00 54 0f 05 00 2c 00 00 00 | ....;...........H...8...T...,... |
40c0 | 8d 0f 05 00 09 00 00 00 ba 0f 05 00 09 00 00 00 c4 0f 05 00 0e 00 00 00 ce 0f 05 00 63 00 00 00 | ............................c... |
40e0 | dd 0f 05 00 9c 00 00 00 41 10 05 00 ab 00 00 00 de 10 05 00 eb 00 00 00 8a 11 05 00 30 00 00 00 | ........A...................0... |
4100 | 76 12 05 00 07 00 00 00 a7 12 05 00 63 00 00 00 af 12 05 00 0c 01 00 00 13 13 05 00 0c 00 00 00 | v...........c................... |
4120 | 20 14 05 00 0c 00 00 00 2d 14 05 00 15 00 00 00 3a 14 05 00 19 00 00 00 50 14 05 00 08 00 00 00 | ........-.......:.......P....... |
4140 | 6a 14 05 00 8c 00 00 00 73 14 05 00 03 00 00 00 00 15 05 00 0a 00 00 00 04 15 05 00 35 00 00 00 | j.......s...................5... |
4160 | 0f 15 05 00 13 00 00 00 45 15 05 00 19 00 00 00 59 15 05 00 06 00 00 00 73 15 05 00 3b 02 00 00 | ........E.......Y.......s...;... |
4180 | 7a 15 05 00 85 00 00 00 b6 17 05 00 0e 00 00 00 3c 18 05 00 09 00 00 00 4b 18 05 00 35 00 00 00 | z...............<.......K...5... |
41a0 | 55 18 05 00 04 00 00 00 8b 18 05 00 e8 01 00 00 90 18 05 00 5f 00 00 00 79 1a 05 00 61 00 00 00 | U..................._...y...a... |
41c0 | d9 1a 05 00 03 00 00 00 3b 1b 05 00 0b 00 00 00 3f 1b 05 00 4c 00 00 00 4b 1b 05 00 2f 00 00 00 | ........;.......?...L...K.../... |
41e0 | 98 1b 05 00 1d 00 00 00 c8 1b 05 00 10 00 00 00 e6 1b 05 00 4d 00 00 00 f7 1b 05 00 0f 00 00 00 | ....................M........... |
4200 | 45 1c 05 00 3b 00 00 00 55 1c 05 00 12 00 00 00 91 1c 05 00 1d 00 00 00 a4 1c 05 00 44 00 00 00 | E...;...U...................D... |
4220 | c2 1c 05 00 51 00 00 00 07 1d 05 00 41 00 00 00 59 1d 05 00 6a 00 00 00 9b 1d 05 00 66 00 00 00 | ....Q.......A...Y...j.......f... |
4240 | 06 1e 05 00 1c 00 00 00 6d 1e 05 00 8d 00 00 00 8a 1e 05 00 d1 00 00 00 18 1f 05 00 1d 00 00 00 | ........m....................... |
4260 | ea 1f 05 00 e3 00 00 00 08 20 05 00 e4 00 00 00 ec 20 05 00 24 00 00 00 d1 21 05 00 8d 00 00 00 | ....................$....!...... |
4280 | f6 21 05 00 5a 00 00 00 84 22 05 00 1a 00 00 00 df 22 05 00 21 00 00 00 fa 22 05 00 22 00 00 00 | .!..Z...."......."..!....".."... |
42a0 | 1c 23 05 00 70 00 00 00 3f 23 05 00 72 00 00 00 b0 23 05 00 29 00 00 00 23 24 05 00 77 00 00 00 | .#..p...?#..r....#..)...#$..w... |
42c0 | 4d 24 05 00 73 00 00 00 c5 24 05 00 90 00 00 00 39 25 05 00 53 00 00 00 ca 25 05 00 b6 00 00 00 | M$..s....$......9%..S....%...... |
42e0 | 1e 26 05 00 5c 00 00 00 d5 26 05 00 1e 00 00 00 32 27 05 00 91 00 00 00 51 27 05 00 54 00 00 00 | .&..\....&......2'......Q'..T... |
4300 | e3 27 05 00 b7 00 00 00 38 28 05 00 60 00 00 00 f0 28 05 00 24 00 00 00 51 29 05 00 61 00 00 00 | .'......8(..`....(..$...Q)..a... |
4320 | 76 29 05 00 48 00 00 00 d8 29 05 00 30 00 00 00 21 2a 05 00 3b 00 00 00 52 2a 05 00 25 00 00 00 | v)..H....)..0...!*..;...R*..%... |
4340 | 8e 2a 05 00 28 00 00 00 b4 2a 05 00 2e 00 00 00 dd 2a 05 00 9e 00 00 00 0c 2b 05 00 3e 00 00 00 | .*..(....*.......*.......+..>... |
4360 | ab 2b 05 00 11 00 00 00 ea 2b 05 00 19 00 00 00 fc 2b 05 00 7a 00 00 00 16 2c 05 00 17 00 00 00 | .+.......+.......+..z....,...... |
4380 | 91 2c 05 00 13 00 00 00 a9 2c 05 00 7d 00 00 00 bd 2c 05 00 83 00 00 00 3b 2d 05 00 11 00 00 00 | .,.......,..}....,......;-...... |
43a0 | bf 2d 05 00 10 00 00 00 d1 2d 05 00 33 00 00 00 e2 2d 05 00 33 00 00 00 16 2e 05 00 33 00 00 00 | .-.......-..3....-..3.......3... |
43c0 | 4a 2e 05 00 33 00 00 00 7e 2e 05 00 6a 00 00 00 b2 2e 05 00 22 00 00 00 1d 2f 05 00 1e 01 00 00 | J...3...~...j......."..../...... |
43e0 | 40 2f 05 00 33 00 00 00 5f 30 05 00 dd 00 00 00 93 30 05 00 17 01 00 00 71 31 05 00 49 00 00 00 | @/..3..._0.......0......q1..I... |
4400 | 89 32 05 00 06 00 00 00 d3 32 05 00 11 00 00 00 da 32 05 00 38 00 00 00 ec 32 05 00 28 00 00 00 | .2.......2.......2..8....2..(... |
4420 | 25 33 05 00 24 00 00 00 4e 33 05 00 9d 00 00 00 73 33 05 00 37 00 00 00 11 34 05 00 89 00 00 00 | %3..$...N3......s3..7....4...... |
4440 | 49 34 05 00 5c 00 00 00 d3 34 05 00 cd 01 00 00 30 35 05 00 c2 00 00 00 fe 36 05 00 65 00 00 00 | I4..\....4......05.......6..e... |
4460 | c1 37 05 00 43 00 00 00 27 38 05 00 0a 00 00 00 6b 38 05 00 b3 00 00 00 76 38 05 00 8c 00 00 00 | .7..C...'8......k8......v8...... |
4480 | 2a 39 05 00 e8 00 00 00 b7 39 05 00 21 00 00 00 a0 3a 05 00 05 00 00 00 c2 3a 05 00 89 01 00 00 | *9.......9..!....:.......:...... |
44a0 | c8 3a 05 00 ae 01 00 00 52 3c 05 00 27 00 00 00 01 3e 05 00 09 00 00 00 29 3e 05 00 fc 00 00 00 | .:......R<..'....>......)>...... |
44c0 | 33 3e 05 00 79 01 00 00 30 3f 05 00 0f 00 00 00 aa 40 05 00 6c 00 00 00 ba 40 05 00 35 00 00 00 | 3>..y...0?.......@..l....@..5... |
44e0 | 27 41 05 00 d4 00 00 00 5d 41 05 00 d4 00 00 00 32 42 05 00 f4 00 00 00 07 43 05 00 24 00 00 00 | 'A......]A......2B.......C..$... |
4500 | fc 43 05 00 6f 00 00 00 21 44 05 00 10 00 00 00 91 44 05 00 c6 00 00 00 a2 44 05 00 30 00 00 00 | .C..o...!D.......D.......D..0... |
4520 | 69 45 05 00 a3 00 00 00 9a 45 05 00 a4 00 00 00 3e 46 05 00 25 00 00 00 e3 46 05 00 38 00 00 00 | iE.......E......>F..%....F..8... |
4540 | 09 47 05 00 22 00 00 00 42 47 05 00 65 00 00 00 65 47 05 00 80 00 00 00 cb 47 05 00 74 00 00 00 | .G.."...BG..e...eG.......G..t... |
4560 | 4c 48 05 00 6a 00 00 00 c1 48 05 00 a9 00 00 00 2c 49 05 00 01 00 00 00 d6 49 05 00 03 00 00 00 | LH..j....H......,I.......I...... |
4580 | d8 49 05 00 1f 00 00 00 dc 49 05 00 11 00 00 00 fc 49 05 00 10 00 00 00 0e 4a 05 00 37 01 00 00 | .I.......I.......I.......J..7... |
45a0 | 1f 4a 05 00 0b 00 00 00 57 4b 05 00 0e 00 00 00 63 4b 05 00 17 00 00 00 72 4b 05 00 22 00 00 00 | .J......WK......cK......rK.."... |
45c0 | 8a 4b 05 00 05 00 00 00 ad 4b 05 00 05 00 00 00 b3 4b 05 00 1b 00 00 00 b9 4b 05 00 40 00 00 00 | .K.......K.......K.......K..@... |
45e0 | d5 4b 05 00 1b 00 00 00 16 4c 05 00 0c 00 00 00 32 4c 05 00 eb 00 00 00 3f 4c 05 00 03 00 00 00 | .K.......L......2L......?L...... |
4600 | 2b 4d 05 00 41 02 00 00 2f 4d 05 00 ad 00 00 00 71 4f 05 00 0d 00 00 00 1f 50 05 00 91 00 00 00 | +M..A.../M......qO.......P...... |
4620 | 2d 50 05 00 0b 00 00 00 bf 50 05 00 34 00 00 00 cb 50 05 00 25 00 00 00 00 51 05 00 16 00 00 00 | -P.......P..4....P..%....Q...... |
4640 | 26 51 05 00 40 00 00 00 3d 51 05 00 23 00 00 00 7e 51 05 00 1f 00 00 00 a2 51 05 00 07 00 00 00 | &Q..@...=Q..#...~Q.......Q...... |
4660 | c2 51 05 00 0f 00 00 00 ca 51 05 00 4b 00 00 00 da 51 05 00 ab 01 00 00 26 52 05 00 a3 00 00 00 | .Q.......Q..K....Q......&R...... |
4680 | d2 53 05 00 13 00 00 00 76 54 05 00 0f 00 00 00 8a 54 05 00 1c 00 00 00 9a 54 05 00 18 00 00 00 | .S......vT.......T.......T...... |
46a0 | b7 54 05 00 23 00 00 00 d0 54 05 00 0f 00 00 00 f4 54 05 00 10 00 00 00 04 55 05 00 0e 00 00 00 | .T..#....T.......T.......U...... |
46c0 | 15 55 05 00 25 00 00 00 24 55 05 00 1a 00 00 00 4a 55 05 00 18 00 00 00 65 55 05 00 45 00 00 00 | .U..%...$U......JU......eU..E... |
46e0 | 7e 55 05 00 16 00 00 00 c4 55 05 00 43 00 00 00 db 55 05 00 25 00 00 00 1f 56 05 00 38 00 00 00 | ~U.......U..C....U..%....V..8... |
4700 | 45 56 05 00 36 00 00 00 7e 56 05 00 20 00 00 00 b5 56 05 00 13 00 00 00 d6 56 05 00 1e 00 00 00 | EV..6...~V.......V.......V...... |
4720 | ea 56 05 00 15 00 00 00 09 57 05 00 10 00 00 00 1f 57 05 00 ec 00 00 00 30 57 05 00 ba 00 00 00 | .V.......W.......W......0W...... |
4740 | 1d 58 05 00 25 00 00 00 d8 58 05 00 89 00 00 00 fe 58 05 00 13 00 00 00 88 59 05 00 1a 00 00 00 | .X..%....X.......X.......Y...... |
4760 | 9c 59 05 00 3a 00 00 00 b7 59 05 00 81 01 00 00 f2 59 05 00 47 00 00 00 74 5b 05 00 74 00 00 00 | .Y..:....Y.......Y..G...t[..t... |
4780 | bc 5b 05 00 9d 00 00 00 31 5c 05 00 7b 01 00 00 cf 5c 05 00 61 00 00 00 4b 5e 05 00 6c 00 00 00 | .[......1\..{....\..a...K^..l... |
47a0 | ad 5e 05 00 06 00 00 00 1a 5f 05 00 47 00 00 00 21 5f 05 00 44 00 00 00 69 5f 05 00 37 00 00 00 | .^......._..G...!_..D...i_..7... |
47c0 | ae 5f 05 00 07 01 00 00 e6 5f 05 00 57 00 00 00 ee 60 05 00 31 00 00 00 46 61 05 00 5b 00 00 00 | ._......._..W....`..1...Fa..[... |
47e0 | 78 61 05 00 1f 00 00 00 d4 61 05 00 62 00 00 00 f4 61 05 00 2b 00 00 00 57 62 05 00 04 00 00 00 | xa.......a..b....a..+...Wb...... |
4800 | 83 62 05 00 16 00 00 00 88 62 05 00 37 00 00 00 9f 62 05 00 38 01 00 00 d7 62 05 00 0d 00 00 00 | .b.......b..7....b..8....b...... |
4820 | 10 64 05 00 0d 00 00 00 1e 64 05 00 12 00 00 00 2c 64 05 00 0a 00 00 00 3f 64 05 00 4e 00 00 00 | .d.......d......,d......?d..N... |
4840 | 4a 64 05 00 08 01 00 00 99 64 05 00 24 01 00 00 a2 65 05 00 15 00 00 00 c7 66 05 00 9c 01 00 00 | Jd.......d..$....e.......f...... |
4860 | dd 66 05 00 5c 00 00 00 7a 68 05 00 a4 00 00 00 d7 68 05 00 16 00 00 00 7c 69 05 00 8a 02 00 00 | .f..\...zh.......h......|i...... |
4880 | 93 69 05 00 1d 00 00 00 1e 6c 05 00 0c 00 00 00 3c 6c 05 00 1f 00 00 00 49 6c 05 00 43 00 00 00 | .i.......l......<l......Il..C... |
48a0 | 69 6c 05 00 0d 00 00 00 ad 6c 05 00 c1 00 00 00 bb 6c 05 00 77 00 00 00 7d 6d 05 00 69 00 00 00 | il.......l.......l..w...}m..i... |
48c0 | f5 6d 05 00 62 00 00 00 5f 6e 05 00 76 00 00 00 c2 6e 05 00 0e 01 00 00 39 6f 05 00 cb 00 00 00 | .m..b..._n..v....n......9o...... |
48e0 | 48 70 05 00 19 01 00 00 14 71 05 00 43 00 00 00 2e 72 05 00 ab 00 00 00 72 72 05 00 9a 00 00 00 | Hp.......q..C....r......rr...... |
4900 | 1e 73 05 00 a6 00 00 00 b9 73 05 00 6e 01 00 00 60 74 05 00 17 01 00 00 cf 75 05 00 6f 00 00 00 | .s.......s..n...`t.......u..o... |
4920 | e7 76 05 00 7b 00 00 00 57 77 05 00 7d 00 00 00 d3 77 05 00 12 01 00 00 51 78 05 00 e6 00 00 00 | .v..{...Ww..}....w......Qx...... |
4940 | 64 79 05 00 b6 00 00 00 4b 7a 05 00 b1 00 00 00 02 7b 05 00 fb 00 00 00 b4 7b 05 00 20 00 00 00 | dy......Kz.......{.......{...... |
4960 | b0 7c 05 00 a0 01 00 00 d1 7c 05 00 53 00 00 00 72 7e 05 00 39 00 00 00 c6 7e 05 00 28 00 00 00 | .|.......|..S...r~..9....~..(... |
4980 | 00 7f 05 00 4a 00 00 00 29 7f 05 00 3b 00 00 00 74 7f 05 00 34 00 00 00 b0 7f 05 00 52 00 00 00 | ....J...)...;...t...4.......R... |
49a0 | e5 7f 05 00 53 00 00 00 38 80 05 00 52 00 00 00 8c 80 05 00 80 01 00 00 df 80 05 00 36 00 00 00 | ....S...8...R...............6... |
49c0 | 60 82 05 00 23 00 00 00 97 82 05 00 0b 00 00 00 bb 82 05 00 ad 00 00 00 c7 82 05 00 91 00 00 00 | `...#........................... |
49e0 | 75 83 05 00 1b 02 00 00 07 84 05 00 e8 01 00 00 23 86 05 00 07 00 00 00 0c 88 05 00 df 00 00 00 | u...............#............... |
4a00 | 14 88 05 00 45 01 00 00 f4 88 05 00 22 00 00 00 3a 8a 05 00 79 01 00 00 5d 8a 05 00 a6 00 00 00 | ....E......."...:...y...]....... |
4a20 | d7 8b 05 00 e9 00 00 00 7e 8c 05 00 83 00 00 00 68 8d 05 00 19 00 00 00 ec 8d 05 00 0f 00 00 00 | ........~.......h............... |
4a40 | 06 8e 05 00 09 00 00 00 16 8e 05 00 12 00 00 00 20 8e 05 00 0e 00 00 00 33 8e 05 00 21 00 00 00 | ........................3...!... |
4a60 | 42 8e 05 00 0e 00 00 00 64 8e 05 00 17 00 00 00 73 8e 05 00 14 00 00 00 8b 8e 05 00 19 00 00 00 | B.......d.......s............... |
4a80 | a0 8e 05 00 14 00 00 00 ba 8e 05 00 06 00 00 00 cf 8e 05 00 13 00 00 00 d6 8e 05 00 12 00 00 00 | ................................ |
4aa0 | ea 8e 05 00 0d 00 00 00 fd 8e 05 00 6a 00 00 00 0b 8f 05 00 17 00 00 00 76 8f 05 00 2e 00 00 00 | ............j...........v....... |
4ac0 | 8e 8f 05 00 2d 00 00 00 bd 8f 05 00 08 00 00 00 eb 8f 05 00 16 00 00 00 f4 8f 05 00 ea 00 00 00 | ....-........................... |
4ae0 | 0b 90 05 00 59 00 00 00 f6 90 05 00 19 00 00 00 50 91 05 00 7e 00 00 00 6a 91 05 00 07 00 00 00 | ....Y...........P...~...j....... |
4b00 | e9 91 05 00 2a 00 00 00 f1 91 05 00 4f 00 00 00 1c 92 05 00 17 00 00 00 6c 92 05 00 3b 00 00 00 | ....*.......O...........l...;... |
4b20 | 84 92 05 00 87 01 00 00 c0 92 05 00 6e 00 00 00 48 94 05 00 24 00 00 00 b7 94 05 00 54 00 00 00 | ............n...H...$.......T... |
4b40 | dc 94 05 00 a4 01 00 00 31 95 05 00 8f 01 00 00 d6 96 05 00 24 00 00 00 66 98 05 00 1f 00 00 00 | ........1...........$...f....... |
4b60 | 8b 98 05 00 07 00 00 00 ab 98 05 00 1b 00 00 00 b3 98 05 00 08 00 00 00 cf 98 05 00 5c 00 00 00 | ............................\... |
4b80 | d8 98 05 00 08 00 00 00 35 99 05 00 1b 00 00 00 3e 99 05 00 57 00 00 00 5a 99 05 00 14 00 00 00 | ........5.......>...W...Z....... |
4ba0 | b2 99 05 00 3f 00 00 00 c7 99 05 00 3a 00 00 00 07 9a 05 00 75 00 00 00 42 9a 05 00 69 00 00 00 | ....?.......:.......u...B...i... |
4bc0 | b8 9a 05 00 32 01 00 00 22 9b 05 00 36 01 00 00 55 9c 05 00 0c 00 00 00 8c 9d 05 00 26 00 00 00 | ....2..."...6...U...........&... |
4be0 | 99 9d 05 00 18 00 00 00 c0 9d 05 00 2e 00 00 00 d9 9d 05 00 41 01 00 00 08 9e 05 00 03 00 00 00 | ....................A........... |
4c00 | 4a 9f 05 00 04 00 00 00 4e 9f 05 00 14 00 00 00 53 9f 05 00 0c 00 00 00 68 9f 05 00 05 00 00 00 | J.......N.......S.......h....... |
4c20 | 75 9f 05 00 0c 00 00 00 7b 9f 05 00 0d 00 00 00 88 9f 05 00 0b 00 00 00 96 9f 05 00 ae 00 00 00 | u.......{....................... |
4c40 | a2 9f 05 00 31 01 00 00 51 a0 05 00 ca 00 00 00 83 a1 05 00 43 00 00 00 4e a2 05 00 46 00 00 00 | ....1...Q...........C...N...F... |
4c60 | 92 a2 05 00 0b 00 00 00 d9 a2 05 00 0b 00 00 00 e5 a2 05 00 19 00 00 00 f1 a2 05 00 0f 00 00 00 | ................................ |
4c80 | 0b a3 05 00 ba 01 00 00 1b a3 05 00 6a 00 00 00 d6 a4 05 00 13 00 00 00 41 a5 05 00 e4 00 00 00 | ............j...........A....... |
4ca0 | 55 a5 05 00 46 00 00 00 3a a6 05 00 88 01 00 00 81 a6 05 00 89 01 00 00 0a a8 05 00 0b 00 00 00 | U...F...:....................... |
4cc0 | 94 a9 05 00 ce 00 00 00 a0 a9 05 00 6c 00 00 00 6f aa 05 00 10 01 00 00 dc aa 05 00 6e 00 00 00 | ............l...o...........n... |
4ce0 | ed ab 05 00 26 00 00 00 5c ac 05 00 40 00 00 00 83 ac 05 00 a0 00 00 00 c4 ac 05 00 b9 00 00 00 | ....&...\...@................... |
4d00 | 65 ad 05 00 58 00 00 00 1f ae 05 00 64 00 00 00 78 ae 05 00 39 00 00 00 dd ae 05 00 45 00 00 00 | e...X.......d...x...9.......E... |
4d20 | 17 af 05 00 4a 00 00 00 5d af 05 00 4b 00 00 00 a8 af 05 00 56 00 00 00 f4 af 05 00 57 00 00 00 | ....J...]...K.......V.......W... |
4d40 | 4b b0 05 00 96 00 00 00 a3 b0 05 00 37 00 00 00 3a b1 05 00 8f 00 00 00 72 b1 05 00 06 00 00 00 | K...........7...:.......r....... |
4d60 | 02 b2 05 00 0f 00 00 00 09 b2 05 00 1b 00 00 00 19 b2 05 00 33 00 00 00 35 b2 05 00 56 00 00 00 | ....................3...5...V... |
4d80 | 69 b2 05 00 0b 00 00 00 c0 b2 05 00 12 00 00 00 cc b2 05 00 38 00 00 00 df b2 05 00 19 00 00 00 | i...................8........... |
4da0 | 18 b3 05 00 33 00 00 00 32 b3 05 00 1f 00 00 00 66 b3 05 00 2e 00 00 00 86 b3 05 00 93 01 00 00 | ....3...2.......f............... |
4dc0 | b5 b3 05 00 0f 00 00 00 49 b5 05 00 0a 00 00 00 59 b5 05 00 0a 00 00 00 64 b5 05 00 63 00 00 00 | ........I.......Y.......d...c... |
4de0 | 6f b5 05 00 2f 00 00 00 d3 b5 05 00 32 00 00 00 03 b6 05 00 4c 00 00 00 36 b6 05 00 23 00 00 00 | o.../.......2.......L...6...#... |
4e00 | 83 b6 05 00 64 00 00 00 a7 b6 05 00 65 00 00 00 0c b7 05 00 6e 00 00 00 72 b7 05 00 29 00 00 00 | ....d.......e.......n...r...)... |
4e20 | e1 b7 05 00 dd 00 00 00 0b b8 05 00 2d 00 00 00 e9 b8 05 00 11 00 00 00 17 b9 05 00 11 00 00 00 | ............-................... |
4e40 | 29 b9 05 00 12 00 00 00 3b b9 05 00 0c 00 00 00 4e b9 05 00 30 00 00 00 5b b9 05 00 3f 00 00 00 | ).......;.......N...0...[...?... |
4e60 | 8c b9 05 00 40 00 00 00 cc b9 05 00 04 01 00 00 0d ba 05 00 a9 00 00 00 12 bb 05 00 18 00 00 00 | ....@........................... |
4e80 | bc bb 05 00 08 00 00 00 d5 bb 05 00 46 00 00 00 de bb 05 00 4d 00 00 00 25 bc 05 00 1f 00 00 00 | ............F.......M...%....... |
4ea0 | 73 bc 05 00 4f 00 00 00 93 bc 05 00 3d 00 00 00 e3 bc 05 00 08 00 00 00 21 bd 05 00 0e 00 00 00 | s...O.......=...........!....... |
4ec0 | 2a bd 05 00 84 01 00 00 39 bd 05 00 8c 00 00 00 be be 05 00 fb 00 00 00 4b bf 05 00 11 00 00 00 | *.......9...............K....... |
4ee0 | 47 c0 05 00 0e 01 00 00 59 c0 05 00 3a 00 00 00 68 c1 05 00 09 00 00 00 a3 c1 05 00 38 00 00 00 | G.......Y...:...h...........8... |
4f00 | ad c1 05 00 bd 00 00 00 e6 c1 05 00 30 00 00 00 a4 c2 05 00 31 00 00 00 d5 c2 05 00 24 00 00 00 | ............0.......1.......$... |
4f20 | 07 c3 05 00 28 00 00 00 2c c3 05 00 23 00 00 00 55 c3 05 00 20 00 00 00 79 c3 05 00 21 00 00 00 | ....(...,...#...U.......y...!... |
4f40 | 9a c3 05 00 3a 00 00 00 bc c3 05 00 1f 00 00 00 f7 c3 05 00 32 00 00 00 17 c4 05 00 26 00 00 00 | ....:...............2.......&... |
4f60 | 4a c4 05 00 13 00 00 00 71 c4 05 00 41 00 00 00 85 c4 05 00 a0 00 00 00 c7 c4 05 00 3e 00 00 00 | J.......q...A...............>... |
4f80 | 68 c5 05 00 1f 00 00 00 a7 c5 05 00 ce 00 00 00 c7 c5 05 00 4c 01 00 00 96 c6 05 00 36 01 00 00 | h...................L.......6... |
4fa0 | e3 c7 05 00 21 00 00 00 1a c9 05 00 1e 00 00 00 3c c9 05 00 0e 00 00 00 5b c9 05 00 03 00 00 00 | ....!...........<.......[....... |
4fc0 | 6a c9 05 00 39 00 00 00 6e c9 05 00 2f 00 00 00 a8 c9 05 00 b8 00 00 00 d8 c9 05 00 24 00 00 00 | j...9...n.../...............$... |
4fe0 | 91 ca 05 00 49 00 00 00 b6 ca 05 00 03 00 00 00 00 cb 05 00 24 00 00 00 04 cb 05 00 03 00 00 00 | ....I...............$........... |
5000 | 29 cb 05 00 06 00 00 00 2d cb 05 00 0c 00 00 00 34 cb 05 00 18 00 00 00 41 cb 05 00 17 00 00 00 | ).......-.......4.......A....... |
5020 | 5a cb 05 00 15 00 00 00 72 cb 05 00 22 00 00 00 88 cb 05 00 4c 00 00 00 ab cb 05 00 45 00 00 00 | Z.......r...".......L.......E... |
5040 | f8 cb 05 00 98 00 00 00 3e cc 05 00 15 00 00 00 d7 cc 05 00 53 01 00 00 ed cc 05 00 20 00 00 00 | ........>...........S........... |
5060 | 41 ce 05 00 03 00 00 00 62 ce 05 00 21 00 00 00 66 ce 05 00 21 00 00 00 88 ce 05 00 04 00 00 00 | A.......b...!...f...!........... |
5080 | aa ce 05 00 15 00 00 00 af ce 05 00 e1 00 00 00 c5 ce 05 00 08 00 00 00 a7 cf 05 00 0d 00 00 00 | ................................ |
50a0 | b0 cf 05 00 c3 00 00 00 be cf 05 00 20 00 00 00 82 d0 05 00 21 00 00 00 a3 d0 05 00 0c 00 00 00 | ....................!........... |
50c0 | c5 d0 05 00 0a 00 00 00 d2 d0 05 00 72 00 00 00 dd d0 05 00 dc 00 00 00 50 d1 05 00 0e 00 00 00 | ............r...........P....... |
50e0 | 2d d2 05 00 4f 00 00 00 3c d2 05 00 6a 00 00 00 8c d2 05 00 50 00 00 00 f7 d2 05 00 0e 00 00 00 | -...O...<...j.......P........... |
5100 | 48 d3 05 00 0b 00 00 00 57 d3 05 00 1f 00 00 00 63 d3 05 00 41 00 00 00 83 d3 05 00 13 04 00 00 | H.......W.......c...A........... |
5120 | c5 d3 05 00 87 00 00 00 d9 d7 05 00 25 00 00 00 61 d8 05 00 16 00 00 00 87 d8 05 00 2f 01 00 00 | ............%...a.........../... |
5140 | 9e d8 05 00 96 00 00 00 ce d9 05 00 1e 00 00 00 65 da 05 00 1c 00 00 00 84 da 05 00 ad 01 00 00 | ................e............... |
5160 | a1 da 05 00 45 00 00 00 4f dc 05 00 16 00 00 00 95 dc 05 00 35 00 00 00 ac dc 05 00 3b 00 00 00 | ....E...O...........5.......;... |
5180 | e2 dc 05 00 4a 00 00 00 1e dd 05 00 54 00 00 00 69 dd 05 00 73 00 00 00 be dd 05 00 4c 00 00 00 | ....J.......T...i...s.......L... |
51a0 | 32 de 05 00 0d 00 00 00 7f de 05 00 23 00 00 00 8d de 05 00 23 00 00 00 b1 de 05 00 21 00 00 00 | 2...........#.......#.......!... |
51c0 | d5 de 05 00 15 00 00 00 f7 de 05 00 0b 00 00 00 0d df 05 00 0a 00 00 00 19 df 05 00 1e 00 00 00 | ................................ |
51e0 | 24 df 05 00 0b 00 00 00 43 df 05 00 1f 00 00 00 4f df 05 00 15 00 00 00 6f df 05 00 4e 00 00 00 | $.......C.......O.......o...N... |
5200 | 85 df 05 00 0b 00 00 00 d4 df 05 00 3d 00 00 00 e0 df 05 00 25 00 00 00 1e e0 05 00 29 00 00 00 | ............=.......%.......)... |
5220 | 44 e0 05 00 11 00 00 00 6e e0 05 00 76 00 00 00 80 e0 05 00 43 00 00 00 f7 e0 05 00 6b 00 00 00 | D.......n...v.......C.......k... |
5240 | 3b e1 05 00 0c 00 00 00 a7 e1 05 00 20 00 00 00 b4 e1 05 00 0d 00 00 00 d5 e1 05 00 05 00 00 00 | ;............................... |
5260 | e3 e1 05 00 0d 00 00 00 e9 e1 05 00 0e 00 00 00 f7 e1 05 00 81 00 00 00 06 e2 05 00 07 00 00 00 | ................................ |
5280 | 88 e2 05 00 1a 00 00 00 90 e2 05 00 27 00 00 00 ab e2 05 00 19 00 00 00 d3 e2 05 00 1e 00 00 00 | ............'................... |
52a0 | ed e2 05 00 17 00 00 00 0c e3 05 00 1f 00 00 00 24 e3 05 00 6d 00 00 00 44 e3 05 00 58 00 00 00 | ................$...m...D...X... |
52c0 | b2 e3 05 00 0c 00 00 00 0b e4 05 00 0b 00 00 00 18 e4 05 00 10 00 00 00 24 e4 05 00 3d 00 00 00 | ........................$...=... |
52e0 | 35 e4 05 00 39 00 00 00 73 e4 05 00 40 00 00 00 ad e4 05 00 0d 00 00 00 ee e4 05 00 0b 00 00 00 | 5...9...s...@................... |
5300 | fc e4 05 00 1f 00 00 00 08 e5 05 00 0f 00 00 00 28 e5 05 00 0f 00 00 00 38 e5 05 00 1d 00 00 00 | ................(.......8....... |
5320 | 48 e5 05 00 09 00 00 00 66 e5 05 00 10 00 00 00 70 e5 05 00 14 00 00 00 81 e5 05 00 1d 00 00 00 | H.......f.......p............... |
5340 | 96 e5 05 00 0f 00 00 00 b4 e5 05 00 1d 00 00 00 c4 e5 05 00 17 00 00 00 e2 e5 05 00 d0 01 00 00 | ................................ |
5360 | fa e5 05 00 2e 00 00 00 cb e7 05 00 7d 00 00 00 fa e7 05 00 c1 00 00 00 78 e8 05 00 0c 00 00 00 | ............}...........x....... |
5380 | 3a e9 05 00 13 00 00 00 47 e9 05 00 15 00 00 00 5b e9 05 00 0f 00 00 00 71 e9 05 00 67 00 00 00 | :.......G.......[.......q...g... |
53a0 | 81 e9 05 00 56 00 00 00 e9 e9 05 00 11 00 00 00 40 ea 05 00 c1 00 00 00 52 ea 05 00 59 00 00 00 | ....V...........@.......R...Y... |
53c0 | 14 eb 05 00 c6 00 00 00 6e eb 05 00 07 00 00 00 35 ec 05 00 07 00 00 00 3d ec 05 00 35 00 00 00 | ........n.......5.......=...5... |
53e0 | 45 ec 05 00 69 00 00 00 7b ec 05 00 6c 00 00 00 e5 ec 05 00 2b 00 00 00 52 ed 05 00 7c 00 00 00 | E...i...{...l.......+...R...|... |
5400 | 7e ed 05 00 69 00 00 00 fb ed 05 00 0b 00 00 00 65 ee 05 00 09 00 00 00 71 ee 05 00 11 00 00 00 | ~...i...........e.......q....... |
5420 | 7b ee 05 00 05 00 00 00 8d ee 05 00 ad 00 00 00 93 ee 05 00 4c 00 00 00 41 ef 05 00 12 00 00 00 | {...................L...A....... |
5440 | 8e ef 05 00 04 00 00 00 a1 ef 05 00 06 00 00 00 a6 ef 05 00 06 00 00 00 ad ef 05 00 04 00 00 00 | ................................ |
5460 | b4 ef 05 00 0f 00 00 00 b9 ef 05 00 16 00 00 00 c9 ef 05 00 d7 00 00 00 e0 ef 05 00 fd 00 00 00 | ................................ |
5480 | b8 f0 05 00 65 01 00 00 b6 f1 05 00 06 00 00 00 1c f3 05 00 f4 00 00 00 23 f3 05 00 00 01 00 00 | ....e...................#....... |
54a0 | 18 f4 05 00 06 00 00 00 19 f5 05 00 0b 02 00 00 20 f5 05 00 e2 01 00 00 2c f7 05 00 03 00 00 00 | ........................,....... |
54c0 | 0f f9 05 00 27 00 00 00 13 f9 05 00 18 00 00 00 3b f9 05 00 0a 00 00 00 54 f9 05 00 7b 01 00 00 | ....'...........;.......T...{... |
54e0 | 5f f9 05 00 40 00 00 00 db fa 05 00 a9 01 00 00 1c fb 05 00 30 00 00 00 c6 fc 05 00 10 00 00 00 | _...@...............0........... |
5500 | f7 fc 05 00 1b 00 00 00 08 fd 05 00 2e 00 00 00 24 fd 05 00 0b 00 00 00 53 fd 05 00 13 00 00 00 | ................$.......S....... |
5520 | 5f fd 05 00 0b 00 00 00 73 fd 05 00 2e 00 00 00 7f fd 05 00 46 00 00 00 ae fd 05 00 0d 00 00 00 | _.......s...........F........... |
5540 | f5 fd 05 00 0b 00 00 00 03 fe 05 00 58 01 00 00 0f fe 05 00 88 00 00 00 68 ff 05 00 45 00 00 00 | ............X...........h...E... |
5560 | f1 ff 05 00 29 00 00 00 37 00 06 00 96 00 00 00 61 00 06 00 10 00 00 00 f8 00 06 00 2f 00 00 00 | ....)...7.......a.........../... |
5580 | 09 01 06 00 43 00 00 00 39 01 06 00 37 00 00 00 7d 01 06 00 49 00 00 00 b5 01 06 00 09 00 00 00 | ....C...9...7...}...I........... |
55a0 | ff 01 06 00 a8 00 00 00 09 02 06 00 3a 00 00 00 b2 02 06 00 08 00 00 00 ed 02 06 00 20 00 00 00 | ............:................... |
55c0 | f6 02 06 00 28 00 00 00 17 03 06 00 4b 00 00 00 40 03 06 00 0f 00 00 00 8c 03 06 00 26 01 00 00 | ....(.......K...@...........&... |
55e0 | 9c 03 06 00 5b 01 00 00 c3 04 06 00 87 00 00 00 1f 06 06 00 86 00 00 00 a7 06 06 00 ce 01 00 00 | ....[........................... |
5600 | 2e 07 06 00 18 00 00 00 fd 08 06 00 51 00 00 00 16 09 06 00 f2 00 00 00 68 09 06 00 0e 00 00 00 | ............Q...........h....... |
5620 | 5b 0a 06 00 34 00 00 00 6a 0a 06 00 36 00 00 00 9f 0a 06 00 bd 00 00 00 d6 0a 06 00 7e 00 00 00 | [...4...j...6...............~... |
5640 | 94 0b 06 00 33 00 00 00 13 0c 06 00 0e 00 00 00 47 0c 06 00 dd 00 00 00 56 0c 06 00 06 00 00 00 | ....3...........G.......V....... |
5660 | 34 0d 06 00 12 00 00 00 3b 0d 06 00 14 00 00 00 4e 0d 06 00 0b 00 00 00 63 0d 06 00 14 00 00 00 | 4.......;.......N.......c....... |
5680 | 6f 0d 06 00 42 00 00 00 84 0d 06 00 07 00 00 00 c7 0d 06 00 07 00 00 00 cf 0d 06 00 c7 00 00 00 | o...B........................... |
56a0 | d7 0d 06 00 29 00 00 00 9f 0e 06 00 28 00 00 00 c9 0e 06 00 23 00 00 00 f2 0e 06 00 14 00 00 00 | ....).......(.......#........... |
56c0 | 16 0f 06 00 20 00 00 00 2b 0f 06 00 18 00 00 00 4c 0f 06 00 28 00 00 00 65 0f 06 00 1d 00 00 00 | ........+.......L...(...e....... |
56e0 | 8e 0f 06 00 29 00 00 00 ac 0f 06 00 1e 00 00 00 d6 0f 06 00 30 00 00 00 f5 0f 06 00 4b 00 00 00 | ....)...............0.......K... |
5700 | 26 10 06 00 6e 00 00 00 72 10 06 00 2d 00 00 00 e1 10 06 00 35 00 00 00 0f 11 06 00 16 00 00 00 | &...n...r...-.......5........... |
5720 | 45 11 06 00 1c 00 00 00 5c 11 06 00 1b 00 00 00 79 11 06 00 41 00 00 00 95 11 06 00 35 00 00 00 | E.......\.......y...A.......5... |
5740 | d7 11 06 00 97 00 00 00 0d 12 06 00 4e 00 00 00 a5 12 06 00 1d 00 00 00 f4 12 06 00 4c 00 00 00 | ............N...............L... |
5760 | 12 13 06 00 17 00 00 00 5f 13 06 00 1f 00 00 00 77 13 06 00 1b 00 00 00 97 13 06 00 24 00 00 00 | ........_.......w...........$... |
5780 | b3 13 06 00 31 00 00 00 d8 13 06 00 4a 00 00 00 0a 14 06 00 5a 00 00 00 55 14 06 00 2a 00 00 00 | ....1.......J.......Z...U...*... |
57a0 | b0 14 06 00 3f 00 00 00 db 14 06 00 47 00 00 00 1b 15 06 00 42 00 00 00 63 15 06 00 28 00 00 00 | ....?.......G.......B...c...(... |
57c0 | a6 15 06 00 2a 00 00 00 cf 15 06 00 2d 00 00 00 fa 15 06 00 30 00 00 00 28 16 06 00 2d 00 00 00 | ....*.......-.......0...(...-... |
57e0 | 59 16 06 00 2c 00 00 00 87 16 06 00 19 00 00 00 b4 16 06 00 29 00 00 00 ce 16 06 00 30 00 00 00 | Y...,...............).......0... |
5800 | f8 16 06 00 24 00 00 00 29 17 06 00 2b 00 00 00 4e 17 06 00 29 00 00 00 7a 17 06 00 35 00 00 00 | ....$...)...+...N...)...z...5... |
5820 | a4 17 06 00 2a 00 00 00 da 17 06 00 10 00 00 00 05 18 06 00 2b 00 00 00 16 18 06 00 55 00 00 00 | ....*...............+.......U... |
5840 | 42 18 06 00 3c 00 00 00 98 18 06 00 90 00 00 00 d5 18 06 00 1a 00 00 00 66 19 06 00 4c 00 00 00 | B...<...................f...L... |
5860 | 81 19 06 00 1f 00 00 00 ce 19 06 00 71 00 00 00 ee 19 06 00 6b 00 00 00 60 1a 06 00 5b 00 00 00 | ............q.......k...`...[... |
5880 | cc 1a 06 00 2c 00 00 00 28 1b 06 00 4e 00 00 00 55 1b 06 00 2a 00 00 00 a4 1b 06 00 a0 00 00 00 | ....,...(...N...U...*........... |
58a0 | cf 1b 06 00 65 00 00 00 70 1c 06 00 27 01 00 00 d6 1c 06 00 d0 00 00 00 fe 1d 06 00 d8 00 00 00 | ....e...p...'................... |
58c0 | cf 1e 06 00 3f 00 00 00 a8 1f 06 00 38 00 00 00 e8 1f 06 00 46 00 00 00 21 20 06 00 40 00 00 00 | ....?.......8.......F...!...@... |
58e0 | 68 20 06 00 53 00 00 00 a9 20 06 00 45 00 00 00 fd 20 06 00 26 01 00 00 43 21 06 00 f1 00 00 00 | h...S.......E.......&...C!...... |
5900 | 6a 22 06 00 48 00 00 00 5c 23 06 00 49 00 00 00 a5 23 06 00 d0 00 00 00 ef 23 06 00 24 00 00 00 | j"..H...\#..I....#.......#..$... |
5920 | c0 24 06 00 16 00 00 00 e5 24 06 00 60 00 00 00 fc 24 06 00 50 00 00 00 5d 25 06 00 27 00 00 00 | .$.......$..`....$..P...]%..'... |
5940 | ae 25 06 00 18 00 00 00 d6 25 06 00 49 00 00 00 ef 25 06 00 52 00 00 00 39 26 06 00 58 00 00 00 | .%.......%..I....%..R...9&..X... |
5960 | 8c 26 06 00 3d 00 00 00 e5 26 06 00 25 00 00 00 23 27 06 00 26 00 00 00 49 27 06 00 2a 00 00 00 | .&..=....&..%...#'..&...I'..*... |
5980 | 70 27 06 00 23 00 00 00 9b 27 06 00 47 00 00 00 bf 27 06 00 a4 00 00 00 07 28 06 00 aa 00 00 00 | p'..#....'..G....'.......(...... |
59a0 | ac 28 06 00 f4 00 00 00 57 29 06 00 44 00 00 00 4c 2a 06 00 61 00 00 00 91 2a 06 00 54 00 00 00 | .(......W)..D...L*..a....*..T... |
59c0 | f3 2a 06 00 3c 00 00 00 48 2b 06 00 6d 00 00 00 85 2b 06 00 6a 00 00 00 f3 2b 06 00 43 00 00 00 | .*..<...H+..m....+..j....+..C... |
59e0 | 5e 2c 06 00 5c 00 00 00 a2 2c 06 00 34 00 00 00 ff 2c 06 00 a4 00 00 00 34 2d 06 00 a8 00 00 00 | ^,..\....,..4....,......4-...... |
5a00 | d9 2d 06 00 e8 00 00 00 82 2e 06 00 ec 00 00 00 6b 2f 06 00 2c 00 00 00 58 30 06 00 34 00 00 00 | .-..............k/..,...X0..4... |
5a20 | 85 30 06 00 23 00 00 00 ba 30 06 00 55 00 00 00 de 30 06 00 66 00 00 00 34 31 06 00 7b 00 00 00 | .0..#....0..U....0..f...41..{... |
5a40 | 9b 31 06 00 41 00 00 00 17 32 06 00 42 00 00 00 59 32 06 00 41 00 00 00 9c 32 06 00 56 00 00 00 | .1..A....2..B...Y2..A....2..V... |
5a60 | de 32 06 00 35 00 00 00 35 33 06 00 2b 00 00 00 6b 33 06 00 2f 00 00 00 97 33 06 00 63 00 00 00 | .2..5...53..+...k3../....3..c... |
5a80 | c7 33 06 00 56 00 00 00 2b 34 06 00 4d 00 00 00 82 34 06 00 34 00 00 00 d0 34 06 00 79 01 00 00 | .3..V...+4..M....4..4....4..y... |
5aa0 | 05 35 06 00 df 00 00 00 7f 36 06 00 f0 00 00 00 5f 37 06 00 54 00 00 00 50 38 06 00 32 00 00 00 | .5.......6......_7..T...P8..2... |
5ac0 | a5 38 06 00 0c 01 00 00 d8 38 06 00 59 00 00 00 e5 39 06 00 4e 00 00 00 3f 3a 06 00 26 01 00 00 | .8.......8..Y....9..N...?:..&... |
5ae0 | 8e 3a 06 00 4a 00 00 00 b5 3b 06 00 1a 00 00 00 00 3c 06 00 2f 00 00 00 1b 3c 06 00 a4 00 00 00 | .:..J....;.......<../....<...... |
5b00 | 4b 3c 06 00 2a 00 00 00 f0 3c 06 00 1d 01 00 00 1b 3d 06 00 2d 00 00 00 39 3e 06 00 af 00 00 00 | K<..*....<.......=..-...9>...... |
5b20 | 67 3e 06 00 ce 00 00 00 17 3f 06 00 53 00 00 00 e6 3f 06 00 45 00 00 00 3a 40 06 00 34 00 00 00 | g>.......?..S....?..E...:@..4... |
5b40 | 80 40 06 00 7a 00 00 00 b5 40 06 00 32 00 00 00 30 41 06 00 27 00 00 00 63 41 06 00 27 00 00 00 | .@..z....@..2...0A..'...cA..'... |
5b60 | 8b 41 06 00 5b 00 00 00 b3 41 06 00 78 00 00 00 0f 42 06 00 5f 00 00 00 88 42 06 00 1b 00 00 00 | .A..[....A..x....B.._....B...... |
5b80 | e8 42 06 00 0c 00 00 00 04 43 06 00 b4 01 00 00 11 43 06 00 11 00 00 00 c6 44 06 00 12 00 00 00 | .B.......C.......C.......D...... |
5ba0 | d8 44 06 00 ed 00 00 00 eb 44 06 00 17 00 00 00 d9 45 06 00 18 00 00 00 f1 45 06 00 12 00 00 00 | .D.......D.......E.......E...... |
5bc0 | 0a 46 06 00 35 00 00 00 1d 46 06 00 2c 00 00 00 53 46 06 00 75 00 00 00 80 46 06 00 41 00 00 00 | .F..5....F..,...SF..u....F..A... |
5be0 | f6 46 06 00 41 00 00 00 38 47 06 00 6f 00 00 00 7a 47 06 00 9f 00 00 00 ea 47 06 00 a1 00 00 00 | .F..A...8G..o...zG.......G...... |
5c00 | 8a 48 06 00 7f 00 00 00 2c 49 06 00 77 00 00 00 ac 49 06 00 08 00 00 00 24 4a 06 00 0e 00 00 00 | .H......,I..w....I......$J...... |
5c20 | 2d 4a 06 00 06 00 00 00 3c 4a 06 00 15 00 00 00 43 4a 06 00 27 00 00 00 59 4a 06 00 ee 00 00 00 | -J......<J......CJ..'...YJ...... |
5c40 | 81 4a 06 00 eb 00 00 00 70 4b 06 00 04 00 00 00 5c 4c 06 00 20 00 00 00 61 4c 06 00 22 00 00 00 | .J......pK......\L......aL.."... |
5c60 | 82 4c 06 00 11 00 00 00 a5 4c 06 00 3a 00 00 00 b7 4c 06 00 20 00 00 00 f2 4c 06 00 14 00 00 00 | .L.......L..:....L.......L...... |
5c80 | 13 4d 06 00 55 00 00 00 28 4d 06 00 28 00 00 00 7e 4d 06 00 88 00 00 00 a7 4d 06 00 16 00 00 00 | .M..U...(M..(...~M.......M...... |
5ca0 | 30 4e 06 00 16 00 00 00 47 4e 06 00 18 00 00 00 5e 4e 06 00 26 00 00 00 77 4e 06 00 1a 00 00 00 | 0N......GN......^N..&...wN...... |
5cc0 | 9e 4e 06 00 27 00 00 00 b9 4e 06 00 23 00 00 00 e1 4e 06 00 17 00 00 00 05 4f 06 00 21 00 00 00 | .N..'....N..#....N.......O..!... |
5ce0 | 1d 4f 06 00 28 00 00 00 3f 4f 06 00 49 00 00 00 68 4f 06 00 44 00 00 00 b2 4f 06 00 25 00 00 00 | .O..(...?O..I...hO..D....O..%... |
5d00 | f7 4f 06 00 12 00 00 00 1d 50 06 00 3a 00 00 00 30 50 06 00 32 00 00 00 6b 50 06 00 3f 00 00 00 | .O.......P..:...0P..2...kP..?... |
5d20 | 9e 50 06 00 a2 00 00 00 de 50 06 00 21 00 00 00 81 51 06 00 0d 00 00 00 a3 51 06 00 4a 00 00 00 | .P.......P..!....Q.......Q..J... |
5d40 | b1 51 06 00 2e 00 00 00 fc 51 06 00 2e 00 00 00 2b 52 06 00 2e 00 00 00 5a 52 06 00 1f 00 00 00 | .Q.......Q......+R......ZR...... |
5d60 | 89 52 06 00 41 00 00 00 a9 52 06 00 3c 00 00 00 eb 52 06 00 5b 00 00 00 28 53 06 00 30 00 00 00 | .R..A....R..<....R..[...(S..0... |
5d80 | 84 53 06 00 3f 00 00 00 b5 53 06 00 38 00 00 00 f5 53 06 00 52 00 00 00 2e 54 06 00 39 00 00 00 | .S..?....S..8....S..R....T..9... |
5da0 | 81 54 06 00 3b 00 00 00 bb 54 06 00 4a 00 00 00 f7 54 06 00 2d 00 00 00 42 55 06 00 3d 00 00 00 | .T..;....T..J....T..-...BU..=... |
5dc0 | 70 55 06 00 24 00 00 00 ae 55 06 00 20 00 00 00 d3 55 06 00 29 00 00 00 f4 55 06 00 2b 00 00 00 | pU..$....U.......U..)....U..+... |
5de0 | 1e 56 06 00 38 00 00 00 4a 56 06 00 3a 00 00 00 83 56 06 00 3a 00 00 00 be 56 06 00 30 00 00 00 | .V..8...JV..:....V..:....V..0... |
5e00 | f9 56 06 00 27 00 00 00 2a 57 06 00 8d 00 00 00 52 57 06 00 8d 00 00 00 e0 57 06 00 2f 00 00 00 | .V..'...*W......RW.......W../... |
5e20 | 6e 58 06 00 2a 00 00 00 9e 58 06 00 19 00 00 00 c9 58 06 00 5e 00 00 00 e3 58 06 00 23 00 00 00 | nX..*....X.......X..^....X..#... |
5e40 | 42 59 06 00 37 00 00 00 66 59 06 00 20 00 00 00 9e 59 06 00 1c 00 00 00 bf 59 06 00 30 00 00 00 | BY..7...fY.......Y.......Y..0... |
5e60 | dc 59 06 00 27 00 00 00 0d 5a 06 00 20 00 00 00 35 5a 06 00 25 00 00 00 56 5a 06 00 dd 00 00 00 | .Y..'....Z......5Z..%...VZ...... |
5e80 | 7c 5a 06 00 da 00 00 00 5a 5b 06 00 da 00 00 00 35 5c 06 00 0e 00 00 00 10 5d 06 00 40 00 00 00 | |Z......Z[......5\.......]..@... |
5ea0 | 1f 5d 06 00 23 00 00 00 60 5d 06 00 24 00 00 00 84 5d 06 00 07 00 00 00 a9 5d 06 00 07 00 00 00 | .]..#...`]..$....].......]...... |
5ec0 | b1 5d 06 00 33 00 00 00 b9 5d 06 00 33 00 00 00 ed 5d 06 00 33 00 00 00 21 5e 06 00 33 00 00 00 | .]..3....]..3....]..3...!^..3... |
5ee0 | 55 5e 06 00 40 00 00 00 89 5e 06 00 51 00 00 00 ca 5e 06 00 4f 00 00 00 1c 5f 06 00 3d 00 00 00 | U^..@....^..Q....^..O...._..=... |
5f00 | 6c 5f 06 00 64 00 00 00 aa 5f 06 00 6f 00 00 00 0f 60 06 00 cd 00 00 00 7f 60 06 00 82 00 00 00 | l_..d...._..o....`.......`...... |
5f20 | 4d 61 06 00 8f 00 00 00 d0 61 06 00 e1 00 00 00 60 62 06 00 c3 00 00 00 42 63 06 00 8b 00 00 00 | Ma.......a......`b......Bc...... |
5f40 | 06 64 06 00 19 00 00 00 92 64 06 00 10 00 00 00 ac 64 06 00 0c 00 00 00 bd 64 06 00 ac 00 00 00 | .d.......d.......d.......d...... |
5f60 | ca 64 06 00 e2 00 00 00 77 65 06 00 14 00 00 00 5a 66 06 00 c3 00 00 00 6f 66 06 00 95 00 00 00 | .d......we......Zf......of...... |
5f80 | 33 67 06 00 13 01 00 00 c9 67 06 00 31 00 00 00 dd 68 06 00 0a 00 00 00 0f 69 06 00 21 01 00 00 | 3g.......g..1....h.......i..!... |
5fa0 | 1a 69 06 00 d8 00 00 00 3c 6a 06 00 8b 00 00 00 15 6b 06 00 8c 00 00 00 a1 6b 06 00 f8 00 00 00 | .i......<j.......k.......k...... |
5fc0 | 2e 6c 06 00 39 00 00 00 27 6d 06 00 49 00 00 00 61 6d 06 00 b6 00 00 00 ab 6d 06 00 93 00 00 00 | .l..9...'m..I...am.......m...... |
5fe0 | 62 6e 06 00 80 00 00 00 f6 6e 06 00 79 00 00 00 77 6f 06 00 79 00 00 00 f1 6f 06 00 53 01 00 00 | bn.......n..y...wo..y....o..S... |
6000 | 6b 70 06 00 7f 00 00 00 bf 71 06 00 a9 00 00 00 3f 72 06 00 b6 00 00 00 e9 72 06 00 83 00 00 00 | kp.......q......?r.......r...... |
6020 | a0 73 06 00 86 00 00 00 24 74 06 00 0e 00 00 00 ab 74 06 00 5d 00 00 00 ba 74 06 00 36 00 00 00 | .s......$t.......t..]....t..6... |
6040 | 18 75 06 00 10 00 00 00 4f 75 06 00 0d 00 00 00 60 75 06 00 45 00 00 00 6e 75 06 00 45 00 00 00 | .u......Ou......`u..E...nu..E... |
6060 | b4 75 06 00 19 00 00 00 fa 75 06 00 22 00 00 00 14 76 06 00 1c 00 00 00 37 76 06 00 45 00 00 00 | .u.......u.."....v......7v..E... |
6080 | 54 76 06 00 50 00 00 00 9a 76 06 00 65 00 00 00 eb 76 06 00 2f 00 00 00 51 77 06 00 60 00 00 00 | Tv..P....v..e....v../...Qw..`... |
60a0 | 81 77 06 00 54 00 00 00 e2 77 06 00 55 00 00 00 37 78 06 00 48 00 00 00 8d 78 06 00 26 00 00 00 | .w..T....w..U...7x..H....x..&... |
60c0 | d6 78 06 00 26 00 00 00 fd 78 06 00 b2 00 00 00 24 79 06 00 eb 00 00 00 d7 79 06 00 75 00 00 00 | .x..&....x......$y.......y..u... |
60e0 | c3 7a 06 00 77 00 00 00 39 7b 06 00 4d 00 00 00 b1 7b 06 00 e2 00 00 00 ff 7b 06 00 78 00 00 00 | .z..w...9{..M....{.......{..x... |
6100 | e2 7c 06 00 29 01 00 00 5b 7d 06 00 53 00 00 00 85 7e 06 00 42 00 00 00 d9 7e 06 00 8b 00 00 00 | .|..)...[}..S....~..B....~...... |
6120 | 1c 7f 06 00 1e 00 00 00 a8 7f 06 00 56 00 00 00 c7 7f 06 00 d2 00 00 00 1e 80 06 00 36 00 00 00 | ............V...............6... |
6140 | f1 80 06 00 ce 00 00 00 28 81 06 00 c1 00 00 00 f7 81 06 00 38 00 00 00 b9 82 06 00 57 00 00 00 | ........(...........8.......W... |
6160 | f2 82 06 00 bd 00 00 00 4a 83 06 00 85 00 00 00 08 84 06 00 4f 00 00 00 8e 84 06 00 ba 01 00 00 | ........J...........O........... |
6180 | de 84 06 00 b6 00 00 00 99 86 06 00 63 00 00 00 50 87 06 00 4c 00 00 00 b4 87 06 00 d5 00 00 00 | ............c...P...L........... |
61a0 | 01 88 06 00 66 00 00 00 d7 88 06 00 45 01 00 00 3e 89 06 00 57 00 00 00 84 8a 06 00 a4 00 00 00 | ....f.......E...>...W........... |
61c0 | dc 8a 06 00 bc 00 00 00 81 8b 06 00 65 00 00 00 3e 8c 06 00 3f 00 00 00 a4 8c 06 00 c0 01 00 00 | ............e...>...?........... |
61e0 | e4 8c 06 00 72 00 00 00 a5 8e 06 00 74 00 00 00 18 8f 06 00 58 00 00 00 8d 8f 06 00 45 00 00 00 | ....r.......t.......X.......E... |
6200 | e6 8f 06 00 41 00 00 00 2c 90 06 00 52 00 00 00 6e 90 06 00 81 00 00 00 c1 90 06 00 75 00 00 00 | ....A...,...R...n...........u... |
6220 | 43 91 06 00 30 00 00 00 b9 91 06 00 31 00 00 00 ea 91 06 00 7e 00 00 00 1c 92 06 00 50 00 00 00 | C...0.......1.......~.......P... |
6240 | 9b 92 06 00 36 00 00 00 ec 92 06 00 50 01 00 00 23 93 06 00 69 00 00 00 74 94 06 00 5d 00 00 00 | ....6.......P...#...i...t...]... |
6260 | de 94 06 00 8e 00 00 00 3c 95 06 00 4a 00 00 00 cb 95 06 00 57 00 00 00 16 96 06 00 6d 00 00 00 | ........<...J.......W.......m... |
6280 | 6e 96 06 00 64 00 00 00 dc 96 06 00 64 00 00 00 41 97 06 00 99 00 00 00 a6 97 06 00 26 00 00 00 | n...d.......d...A...........&... |
62a0 | 40 98 06 00 ad 00 00 00 67 98 06 00 81 00 00 00 15 99 06 00 33 00 00 00 97 99 06 00 c0 00 00 00 | @.......g...........3........... |
62c0 | cb 99 06 00 90 00 00 00 8c 9a 06 00 a2 00 00 00 1d 9b 06 00 83 00 00 00 c0 9b 06 00 41 00 00 00 | ............................A... |
62e0 | 44 9c 06 00 3a 00 00 00 86 9c 06 00 4b 00 00 00 c1 9c 06 00 65 00 00 00 0d 9d 06 00 06 00 00 00 | D...:.......K.......e........... |
6300 | 73 9d 06 00 05 00 00 00 7a 9d 06 00 e3 01 00 00 80 9d 06 00 1e 00 00 00 64 9f 06 00 3d 00 00 00 | s.......z...............d...=... |
6320 | 83 9f 06 00 4b 02 00 00 c1 9f 06 00 5a 02 00 00 0d a2 06 00 6d 00 00 00 68 a4 06 00 a8 00 00 00 | ....K.......Z.......m...h....... |
6340 | d6 a4 06 00 bf 00 00 00 7f a5 06 00 b2 00 00 00 3f a6 06 00 06 00 00 00 f2 a6 06 00 4b 01 00 00 | ................?...........K... |
6360 | f9 a6 06 00 4c 01 00 00 45 a8 06 00 17 00 00 00 92 a9 06 00 0b 00 00 00 aa a9 06 00 0d 00 00 00 | ....L...E....................... |
6380 | b6 a9 06 00 55 00 00 00 c4 a9 06 00 0f 00 00 00 1a aa 06 00 0f 00 00 00 2a aa 06 00 5c 00 00 00 | ....U...................*...\... |
63a0 | 3a aa 06 00 ff 02 00 00 97 aa 06 00 b1 00 00 00 97 ad 06 00 37 00 00 00 49 ae 06 00 06 00 00 00 | :...................7...I....... |
63c0 | 81 ae 06 00 12 00 00 00 88 ae 06 00 9a 00 00 00 9b ae 06 00 08 00 00 00 36 af 06 00 38 00 00 00 | ........................6...8... |
63e0 | 3f af 06 00 11 00 00 00 78 af 06 00 1c 00 00 00 8a af 06 00 12 00 00 00 a7 af 06 00 1a 00 00 00 | ?.......x....................... |
6400 | ba af 06 00 49 00 00 00 d5 af 06 00 1e 00 00 00 1f b0 06 00 2f 00 00 00 3e b0 06 00 73 00 00 00 | ....I.............../...>...s... |
6420 | 6e b0 06 00 ae 00 00 00 e2 b0 06 00 af 00 00 00 91 b1 06 00 d0 00 00 00 41 b2 06 00 0b 00 00 00 | n.......................A....... |
6440 | 12 b3 06 00 08 00 00 00 1e b3 06 00 14 00 00 00 27 b3 06 00 4a 00 00 00 3c b3 06 00 60 00 00 00 | ................'...J...<...`... |
6460 | 87 b3 06 00 06 00 00 00 e8 b3 06 00 06 00 00 00 ef b3 06 00 da 00 00 00 f6 b3 06 00 98 00 00 00 | ................................ |
6480 | d1 b4 06 00 bc 00 00 00 6a b5 06 00 06 00 00 00 27 b6 06 00 0a 00 00 00 2e b6 06 00 14 00 00 00 | ........j.......'............... |
64a0 | 39 b6 06 00 1b 00 00 00 4e b6 06 00 0c 00 00 00 6a b6 06 00 2e 00 00 00 77 b6 06 00 1d 00 00 00 | 9.......N.......j.......w....... |
64c0 | a6 b6 06 00 0e 00 00 00 c4 b6 06 00 ff 01 00 00 d3 b6 06 00 26 00 00 00 d3 b8 06 00 0e 00 00 00 | ....................&........... |
64e0 | fa b8 06 00 21 00 00 00 09 b9 06 00 98 00 00 00 2b b9 06 00 07 00 00 00 c4 b9 06 00 03 00 00 00 | ....!...........+............... |
6500 | cc b9 06 00 91 00 00 00 d0 b9 06 00 0b 00 00 00 62 ba 06 00 6a 00 00 00 6e ba 06 00 0e 00 00 00 | ................b...j...n....... |
6520 | d9 ba 06 00 08 00 00 00 e8 ba 06 00 2b 00 00 00 f1 ba 06 00 29 00 00 00 1d bb 06 00 35 00 00 00 | ............+.......).......5... |
6540 | 47 bb 06 00 54 00 00 00 7d bb 06 00 5c 00 00 00 d2 bb 06 00 7b 00 00 00 2f bc 06 00 56 00 00 00 | G...T...}...\.......{.../...V... |
6560 | ab bc 06 00 25 00 00 00 02 bd 06 00 3a 00 00 00 28 bd 06 00 3a 00 00 00 63 bd 06 00 0d 00 00 00 | ....%.......:...(...:...c....... |
6580 | 9e bd 06 00 64 00 00 00 ac bd 06 00 64 00 00 00 11 be 06 00 67 00 00 00 76 be 06 00 67 00 00 00 | ....d.......d.......g...v...g... |
65a0 | de be 06 00 1f 00 00 00 46 bf 06 00 0c 00 00 00 66 bf 06 00 16 00 00 00 73 bf 06 00 44 01 00 00 | ........F.......f.......s...D... |
65c0 | 8a bf 06 00 41 00 00 00 cf c0 06 00 47 00 00 00 11 c1 06 00 d3 00 00 00 59 c1 06 00 3a 02 00 00 | ....A.......G...........Y...:... |
65e0 | 2d c2 06 00 d7 00 00 00 68 c4 06 00 93 00 00 00 40 c5 06 00 4e 01 00 00 d4 c5 06 00 30 00 00 00 | -.......h.......@...N.......0... |
6600 | 23 c7 06 00 c8 00 00 00 54 c7 06 00 ab 00 00 00 1d c8 06 00 31 00 00 00 c9 c8 06 00 68 01 00 00 | #.......T...........1.......h... |
6620 | fb c8 06 00 39 00 00 00 64 ca 06 00 3b 01 00 00 9e ca 06 00 b2 00 00 00 da cb 06 00 27 00 00 00 | ....9...d...;...............'... |
6640 | 8d cc 06 00 44 00 00 00 b5 cc 06 00 d2 00 00 00 fa cc 06 00 73 00 00 00 cd cd 06 00 d7 00 00 00 | ....D...............s........... |
6660 | 41 ce 06 00 9f 00 00 00 19 cf 06 00 af 00 00 00 b9 cf 06 00 cc 00 00 00 69 d0 06 00 4f 00 00 00 | A.......................i...O... |
6680 | 36 d1 06 00 3f 01 00 00 86 d1 06 00 c1 00 00 00 c6 d2 06 00 59 00 00 00 88 d3 06 00 21 01 00 00 | 6...?...............Y.......!... |
66a0 | e2 d3 06 00 29 01 00 00 04 d5 06 00 6f 00 00 00 2e d6 06 00 8f 00 00 00 9e d6 06 00 8d 00 00 00 | ....).......o................... |
66c0 | 2e d7 06 00 9e 00 00 00 bc d7 06 00 6c 00 00 00 5b d8 06 00 3a 00 00 00 c8 d8 06 00 95 00 00 00 | ............l...[...:........... |
66e0 | 03 d9 06 00 68 00 00 00 99 d9 06 00 58 00 00 00 02 da 06 00 15 01 00 00 5b da 06 00 52 00 00 00 | ....h.......X...........[...R... |
6700 | 71 db 06 00 94 00 00 00 c4 db 06 00 9e 00 00 00 59 dc 06 00 79 00 00 00 f8 dc 06 00 50 00 00 00 | q...............Y...y.......P... |
6720 | 72 dd 06 00 9e 00 00 00 c3 dd 06 00 13 00 00 00 62 de 06 00 3a 00 00 00 76 de 06 00 98 01 00 00 | r...............b...:...v....... |
6740 | b1 de 06 00 2d 00 00 00 4a e0 06 00 39 00 00 00 78 e0 06 00 e0 00 00 00 b2 e0 06 00 26 00 00 00 | ....-...J...9...x...........&... |
6760 | 93 e1 06 00 b5 00 00 00 ba e1 06 00 70 01 00 00 70 e2 06 00 1b 00 00 00 e1 e3 06 00 bb 00 00 00 | ............p...p............... |
6780 | fd e3 06 00 bb 00 00 00 b9 e4 06 00 fd 00 00 00 75 e5 06 00 85 00 00 00 73 e6 06 00 b5 00 00 00 | ................u.......s....... |
67a0 | f9 e6 06 00 5b 00 00 00 af e7 06 00 83 00 00 00 0b e8 06 00 4b 00 00 00 8f e8 06 00 59 01 00 00 | ....[...............K.......Y... |
67c0 | db e8 06 00 27 00 00 00 35 ea 06 00 f8 00 00 00 5d ea 06 00 28 02 00 00 56 eb 06 00 ff 00 00 00 | ....'...5.......]...(...V....... |
67e0 | 7f ed 06 00 61 00 00 00 7f ee 06 00 5a 00 00 00 e1 ee 06 00 5c 00 00 00 3c ef 06 00 a9 00 00 00 | ....a.......Z.......\...<....... |
6800 | 99 ef 06 00 b6 00 00 00 43 f0 06 00 5e 00 00 00 fa f0 06 00 d3 00 00 00 59 f1 06 00 24 00 00 00 | ........C...^...........Y...$... |
6820 | 2d f2 06 00 14 00 00 00 52 f2 06 00 bc 00 00 00 67 f2 06 00 68 00 00 00 24 f3 06 00 1f 00 00 00 | -.......R.......g...h...$....... |
6840 | 8d f3 06 00 24 00 00 00 ad f3 06 00 bd 00 00 00 d2 f3 06 00 1f 00 00 00 90 f4 06 00 17 00 00 00 | ....$........................... |
6860 | b0 f4 06 00 21 00 00 00 c8 f4 06 00 21 00 00 00 ea f4 06 00 22 00 00 00 0c f5 06 00 40 00 00 00 | ....!.......!.......".......@... |
6880 | 2f f5 06 00 1a 00 00 00 70 f5 06 00 45 00 00 00 8b f5 06 00 17 01 00 00 d1 f5 06 00 54 00 00 00 | /.......p...E...............T... |
68a0 | e9 f6 06 00 d2 01 00 00 3e f7 06 00 a2 00 00 00 11 f9 06 00 d1 00 00 00 b4 f9 06 00 e4 00 00 00 | ........>....................... |
68c0 | 86 fa 06 00 bf 00 00 00 6b fb 06 00 dc 00 00 00 2b fc 06 00 4e 01 00 00 08 fd 06 00 45 00 00 00 | ........k.......+...N.......E... |
68e0 | 57 fe 06 00 34 00 00 00 9d fe 06 00 b4 00 00 00 d2 fe 06 00 f9 00 00 00 87 ff 06 00 c5 00 00 00 | W...4........................... |
6900 | 81 00 07 00 27 00 00 00 47 01 07 00 b7 00 00 00 6f 01 07 00 ae 00 00 00 27 02 07 00 52 00 00 00 | ....'...G.......o.......'...R... |
6920 | d6 02 07 00 ab 00 00 00 29 03 07 00 c8 00 00 00 d5 03 07 00 5b 00 00 00 9e 04 07 00 6d 00 00 00 | ........)...........[.......m... |
6940 | fa 04 07 00 ab 00 00 00 68 05 07 00 30 00 00 00 14 06 07 00 68 00 00 00 45 06 07 00 53 00 00 00 | ........h...0.......h...E...S... |
6960 | ae 06 07 00 33 00 00 00 02 07 07 00 2d 00 00 00 36 07 07 00 4e 00 00 00 64 07 07 00 70 00 00 00 | ....3.......-...6...N...d...p... |
6980 | b3 07 07 00 6c 00 00 00 24 08 07 00 c5 00 00 00 91 08 07 00 b7 00 00 00 57 09 07 00 38 00 00 00 | ....l...$...............W...8... |
69a0 | 0f 0a 07 00 dd 00 00 00 48 0a 07 00 1e 01 00 00 26 0b 07 00 5f 01 00 00 45 0c 07 00 dc 00 00 00 | ........H.......&..._...E....... |
69c0 | a5 0d 07 00 c8 00 00 00 82 0e 07 00 36 00 00 00 4b 0f 07 00 6e 00 00 00 82 0f 07 00 91 00 00 00 | ............6...K...n........... |
69e0 | f1 0f 07 00 60 00 00 00 83 10 07 00 b0 00 00 00 e4 10 07 00 6e 00 00 00 95 11 07 00 6b 00 00 00 | ....`...............n.......k... |
6a00 | 04 12 07 00 35 00 00 00 70 12 07 00 33 00 00 00 a6 12 07 00 f1 00 00 00 da 12 07 00 2b 00 00 00 | ....5...p...3...............+... |
6a20 | cc 13 07 00 38 00 00 00 f8 13 07 00 3a 01 00 00 31 14 07 00 4b 00 00 00 6c 15 07 00 53 01 00 00 | ....8.......:...1...K...l...S... |
6a40 | b8 15 07 00 92 01 00 00 0c 17 07 00 a1 00 00 00 9f 18 07 00 28 00 00 00 41 19 07 00 35 01 00 00 | ....................(...A...5... |
6a60 | 6a 19 07 00 9a 00 00 00 a0 1a 07 00 10 01 00 00 3b 1b 07 00 2b 00 00 00 4c 1c 07 00 a6 00 00 00 | j...............;...+...L....... |
6a80 | 78 1c 07 00 2e 00 00 00 1f 1d 07 00 3f 00 00 00 4e 1d 07 00 ec 00 00 00 8e 1d 07 00 ee 00 00 00 | x...........?...N............... |
6aa0 | 7b 1e 07 00 7c 00 00 00 6a 1f 07 00 9a 01 00 00 e7 1f 07 00 42 00 00 00 82 21 07 00 82 00 00 00 | {...|...j...........B....!...... |
6ac0 | c5 21 07 00 9b 00 00 00 48 22 07 00 31 00 00 00 e4 22 07 00 b4 00 00 00 16 23 07 00 63 00 00 00 | .!......H"..1....".......#..c... |
6ae0 | cb 23 07 00 33 00 00 00 2f 24 07 00 3a 00 00 00 63 24 07 00 5e 00 00 00 9e 24 07 00 25 01 00 00 | .#..3.../$..:...c$..^....$..%... |
6b00 | fd 24 07 00 42 00 00 00 23 26 07 00 5c 00 00 00 66 26 07 00 56 00 00 00 c3 26 07 00 fe 00 00 00 | .$..B...#&..\...f&..V....&...... |
6b20 | 1a 27 07 00 79 00 00 00 19 28 07 00 55 00 00 00 93 28 07 00 58 00 00 00 e9 28 07 00 cd 01 00 00 | .'..y....(..U....(..X....(...... |
6b40 | 42 29 07 00 3d 00 00 00 10 2b 07 00 e8 01 00 00 4e 2b 07 00 40 00 00 00 37 2d 07 00 7f 00 00 00 | B)..=....+......N+..@...7-...... |
6b60 | 78 2d 07 00 6c 00 00 00 f8 2d 07 00 6e 00 00 00 65 2e 07 00 e8 00 00 00 d4 2e 07 00 a5 00 00 00 | x-..l....-..n...e............... |
6b80 | bd 2f 07 00 6b 00 00 00 63 30 07 00 69 01 00 00 cf 30 07 00 34 00 00 00 39 32 07 00 79 00 00 00 | ./..k...c0..i....0..4...92..y... |
6ba0 | 6e 32 07 00 3d 00 00 00 e8 32 07 00 54 00 00 00 26 33 07 00 4c 00 00 00 7b 33 07 00 bc 00 00 00 | n2..=....2..T...&3..L...{3...... |
6bc0 | c8 33 07 00 ea 00 00 00 85 34 07 00 6d 00 00 00 70 35 07 00 e6 00 00 00 de 35 07 00 36 00 00 00 | .3.......4..m...p5.......5..6... |
6be0 | c5 36 07 00 5b 00 00 00 fc 36 07 00 6a 00 00 00 58 37 07 00 82 00 00 00 c3 37 07 00 73 00 00 00 | .6..[....6..j...X7.......7..s... |
6c00 | 46 38 07 00 49 00 00 00 ba 38 07 00 29 00 00 00 04 39 07 00 2a 01 00 00 2e 39 07 00 47 00 00 00 | F8..I....8..)....9..*....9..G... |
6c20 | 59 3a 07 00 46 00 00 00 a1 3a 07 00 49 00 00 00 e8 3a 07 00 49 00 00 00 32 3b 07 00 22 00 00 00 | Y:..F....:..I....:..I...2;.."... |
6c40 | 7c 3b 07 00 54 00 00 00 9f 3b 07 00 65 00 00 00 f4 3b 07 00 32 00 00 00 5a 3c 07 00 9d 00 00 00 | |;..T....;..e....;..2...Z<...... |
6c60 | 8d 3c 07 00 77 00 00 00 2b 3d 07 00 2c 00 00 00 a3 3d 07 00 42 00 00 00 d0 3d 07 00 2b 00 00 00 | .<..w...+=..,....=..B....=..+... |
6c80 | 13 3e 07 00 86 01 00 00 3f 3e 07 00 c4 00 00 00 c6 3f 07 00 c6 00 00 00 8b 40 07 00 80 00 00 00 | .>......?>.......?.......@...... |
6ca0 | 52 41 07 00 49 01 00 00 d3 41 07 00 90 00 00 00 1d 43 07 00 38 00 00 00 ae 43 07 00 9f 00 00 00 | RA..I....A.......C..8....C...... |
6cc0 | e7 43 07 00 1c 01 00 00 87 44 07 00 d5 00 00 00 a4 45 07 00 38 00 00 00 7a 46 07 00 28 00 00 00 | .C.......D.......E..8...zF..(... |
6ce0 | b3 46 07 00 5c 00 00 00 dc 46 07 00 29 00 00 00 39 47 07 00 71 00 00 00 63 47 07 00 41 00 00 00 | .F..\....F..)...9G..q...cG..A... |
6d00 | d5 47 07 00 0f 01 00 00 17 48 07 00 fc 00 00 00 27 49 07 00 89 00 00 00 24 4a 07 00 25 00 00 00 | .G.......H......'I......$J..%... |
6d20 | ae 4a 07 00 5f 00 00 00 d4 4a 07 00 ec 00 00 00 34 4b 07 00 4e 00 00 00 21 4c 07 00 84 00 00 00 | .J.._....J......4K..N...!L...... |
6d40 | 70 4c 07 00 55 00 00 00 f5 4c 07 00 12 01 00 00 4b 4d 07 00 75 00 00 00 5e 4e 07 00 65 00 00 00 | pL..U....L......KM..u...^N..e... |
6d60 | d4 4e 07 00 e2 00 00 00 3a 4f 07 00 2f 00 00 00 1d 50 07 00 29 00 00 00 4d 50 07 00 a0 01 00 00 | .N......:O../....P..)...MP...... |
6d80 | 77 50 07 00 ff 00 00 00 18 52 07 00 db 00 00 00 18 53 07 00 36 00 00 00 f4 53 07 00 40 00 00 00 | wP.......R.......S..6....S..@... |
6da0 | 2b 54 07 00 1f 00 00 00 6c 54 07 00 40 00 00 00 8c 54 07 00 4d 00 00 00 cd 54 07 00 4c 00 00 00 | +T......lT..@....T..M....T..L... |
6dc0 | 1b 55 07 00 92 00 00 00 68 55 07 00 43 00 00 00 fb 55 07 00 af 00 00 00 3f 56 07 00 65 00 00 00 | .U......hU..C....U......?V..e... |
6de0 | ef 56 07 00 a8 00 00 00 55 57 07 00 38 00 00 00 fe 57 07 00 3e 01 00 00 37 58 07 00 3c 00 00 00 | .V......UW..8....W..>...7X..<... |
6e00 | 76 59 07 00 90 00 00 00 b3 59 07 00 58 00 00 00 44 5a 07 00 95 00 00 00 9d 5a 07 00 50 00 00 00 | vY.......Y..X...DZ.......Z..P... |
6e20 | 33 5b 07 00 64 00 00 00 84 5b 07 00 50 00 00 00 e9 5b 07 00 6d 00 00 00 3a 5c 07 00 3a 00 00 00 | 3[..d....[..P....[..m...:\..:... |
6e40 | a8 5c 07 00 29 00 00 00 e3 5c 07 00 6d 00 00 00 0d 5d 07 00 c0 00 00 00 7b 5d 07 00 b8 01 00 00 | .\..)....\..m....]......{]...... |
6e60 | 3c 5e 07 00 51 00 00 00 f5 5f 07 00 21 00 00 00 47 60 07 00 25 00 00 00 69 60 07 00 71 00 00 00 | <^..Q...._..!...G`..%...i`..q... |
6e80 | 8f 60 07 00 24 00 00 00 01 61 07 00 bc 01 00 00 26 61 07 00 55 00 00 00 e3 62 07 00 a9 00 00 00 | .`..$....a......&a..U....b...... |
6ea0 | 39 63 07 00 4c 00 00 00 e3 63 07 00 ee 00 00 00 30 64 07 00 43 00 00 00 1f 65 07 00 39 00 00 00 | 9c..L....c......0d..C....e..9... |
6ec0 | 63 65 07 00 a9 00 00 00 9d 65 07 00 50 00 00 00 47 66 07 00 53 01 00 00 98 66 07 00 46 00 00 00 | ce.......e..P...Gf..S....f..F... |
6ee0 | ec 67 07 00 44 00 00 00 33 68 07 00 43 00 00 00 78 68 07 00 de 00 00 00 bc 68 07 00 83 00 00 00 | .g..D...3h..C...xh.......h...... |
6f00 | 9b 69 07 00 83 00 00 00 1f 6a 07 00 39 01 00 00 a3 6a 07 00 a0 00 00 00 dd 6b 07 00 d1 00 00 00 | .i.......j..9....j.......k...... |
6f20 | 7e 6c 07 00 61 00 00 00 50 6d 07 00 b4 00 00 00 b2 6d 07 00 b7 00 00 00 67 6e 07 00 b6 00 00 00 | ~l..a...Pm.......m......gn...... |
6f40 | 1f 6f 07 00 bb 00 00 00 d6 6f 07 00 a1 00 00 00 92 70 07 00 5c 00 00 00 34 71 07 00 58 00 00 00 | .o.......o.......p..\...4q..X... |
6f60 | 91 71 07 00 5c 00 00 00 ea 71 07 00 58 00 00 00 47 72 07 00 71 00 00 00 a0 72 07 00 5e 00 00 00 | .q..\....q..X...Gr..q....r..^... |
6f80 | 12 73 07 00 21 01 00 00 71 73 07 00 13 01 00 00 93 74 07 00 12 01 00 00 a7 75 07 00 09 01 00 00 | .s..!...qs.......t.......u...... |
6fa0 | ba 76 07 00 40 00 00 00 c4 77 07 00 a3 00 00 00 05 78 07 00 a3 00 00 00 a9 78 07 00 9f 00 00 00 | .v..@....w.......x.......x...... |
6fc0 | 4d 79 07 00 9f 00 00 00 ed 79 07 00 bb 00 00 00 8d 7a 07 00 b4 00 00 00 49 7b 07 00 54 00 00 00 | My.......y.......z......I{..T... |
6fe0 | fe 7b 07 00 bc 00 00 00 53 7c 07 00 56 00 00 00 10 7d 07 00 be 00 00 00 67 7d 07 00 4e 00 00 00 | .{......S|..V....}......g}..N... |
7000 | 26 7e 07 00 cf 01 00 00 75 7e 07 00 29 01 00 00 45 80 07 00 46 00 00 00 6f 81 07 00 7e 00 00 00 | &~......u~..)...E...F...o...~... |
7020 | b6 81 07 00 3c 00 00 00 35 82 07 00 db 00 00 00 72 82 07 00 42 00 00 00 4e 83 07 00 4e 00 00 00 | ....<...5.......r...B...N...N... |
7040 | 91 83 07 00 4e 00 00 00 e0 83 07 00 49 00 00 00 2f 84 07 00 49 00 00 00 79 84 07 00 43 00 00 00 | ....N.......I.../...I...y...C... |
7060 | c3 84 07 00 4b 00 00 00 07 85 07 00 64 00 00 00 53 85 07 00 46 00 00 00 b8 85 07 00 84 00 00 00 | ....K.......d...S...F........... |
7080 | ff 85 07 00 7c 00 00 00 84 86 07 00 86 00 00 00 01 87 07 00 2f 00 00 00 88 87 07 00 79 00 00 00 | ....|.............../.......y... |
70a0 | b8 87 07 00 76 00 00 00 32 88 07 00 81 00 00 00 a9 88 07 00 46 01 00 00 2b 89 07 00 71 00 00 00 | ....v...2...........F...+...q... |
70c0 | 72 8a 07 00 66 00 00 00 e4 8a 07 00 3f 00 00 00 4b 8b 07 00 88 00 00 00 8b 8b 07 00 da 00 00 00 | r...f.......?...K............... |
70e0 | 14 8c 07 00 19 00 00 00 ef 8c 07 00 90 01 00 00 09 8d 07 00 a5 00 00 00 9a 8e 07 00 43 00 00 00 | ............................C... |
7100 | 40 8f 07 00 2a 00 00 00 84 8f 07 00 4c 00 00 00 af 8f 07 00 3a 00 00 00 fc 8f 07 00 4e 00 00 00 | @...*.......L.......:.......N... |
7120 | 37 90 07 00 b0 00 00 00 86 90 07 00 2a 00 00 00 37 91 07 00 21 00 00 00 62 91 07 00 51 00 00 00 | 7...........*...7...!...b...Q... |
7140 | 84 91 07 00 45 00 00 00 d6 91 07 00 5f 00 00 00 1c 92 07 00 37 00 00 00 7c 92 07 00 41 00 00 00 | ....E......._.......7...|...A... |
7160 | b4 92 07 00 44 00 00 00 f6 92 07 00 6a 00 00 00 3b 93 07 00 3c 00 00 00 a6 93 07 00 56 00 00 00 | ....D.......j...;...<.......V... |
7180 | e3 93 07 00 4a 00 00 00 3a 94 07 00 ee 00 00 00 85 94 07 00 47 00 00 00 74 95 07 00 7a 00 00 00 | ....J...:...........G...t...z... |
71a0 | bc 95 07 00 d2 00 00 00 37 96 07 00 5f 00 00 00 0a 97 07 00 d5 00 00 00 6a 97 07 00 39 00 00 00 | ........7..._...........j...9... |
71c0 | 40 98 07 00 70 00 00 00 7a 98 07 00 5d 00 00 00 eb 98 07 00 55 00 00 00 49 99 07 00 2b 00 00 00 | @...p...z...].......U...I...+... |
71e0 | 9f 99 07 00 38 00 00 00 cb 99 07 00 46 00 00 00 04 9a 07 00 4c 00 00 00 4b 9a 07 00 62 00 00 00 | ....8.......F.......L...K...b... |
7200 | 98 9a 07 00 55 01 00 00 fb 9a 07 00 c0 00 00 00 51 9c 07 00 b6 00 00 00 12 9d 07 00 8d 00 00 00 | ....U...........Q............... |
7220 | c9 9d 07 00 d5 00 00 00 57 9e 07 00 7e 00 00 00 2d 9f 07 00 a4 00 00 00 ac 9f 07 00 a6 00 00 00 | ........W...~...-............... |
7240 | 51 a0 07 00 c7 01 00 00 f8 a0 07 00 32 01 00 00 c0 a2 07 00 a8 00 00 00 f3 a3 07 00 79 00 00 00 | Q...........2...............y... |
7260 | 9c a4 07 00 33 00 00 00 16 a5 07 00 90 00 00 00 4a a5 07 00 b0 00 00 00 db a5 07 00 63 00 00 00 | ....3...........J...........c... |
7280 | 8c a6 07 00 b3 00 00 00 f0 a6 07 00 d6 00 00 00 a4 a7 07 00 2c 00 00 00 7b a8 07 00 52 00 00 00 | ....................,...{...R... |
72a0 | a8 a8 07 00 6e 00 00 00 fb a8 07 00 4d 01 00 00 6a a9 07 00 3b 00 00 00 b8 aa 07 00 ad 00 00 00 | ....n.......M...j...;........... |
72c0 | f4 aa 07 00 7b 02 00 00 a2 ab 07 00 54 01 00 00 1e ae 07 00 53 00 00 00 73 af 07 00 4b 00 00 00 | ....{.......T.......S...s...K... |
72e0 | c7 af 07 00 04 01 00 00 13 b0 07 00 eb 00 00 00 18 b1 07 00 c8 00 00 00 04 b2 07 00 c8 00 00 00 | ................................ |
7300 | cd b2 07 00 b6 00 00 00 96 b3 07 00 bb 00 00 00 4d b4 07 00 60 00 00 00 09 b5 07 00 b5 00 00 00 | ................M...`........... |
7320 | 6a b5 07 00 b9 00 00 00 20 b6 07 00 9b 00 00 00 da b6 07 00 0a 01 00 00 76 b7 07 00 01 01 00 00 | j.......................v....... |
7340 | 81 b8 07 00 38 00 00 00 83 b9 07 00 3b 00 00 00 bc b9 07 00 45 00 00 00 f8 b9 07 00 2c 00 00 00 | ....8.......;.......E.......,... |
7360 | 3e ba 07 00 70 00 00 00 6b ba 07 00 4e 00 00 00 dc ba 07 00 7c 01 00 00 2b bb 07 00 71 01 00 00 | >...p...k...N.......|...+...q... |
7380 | a8 bc 07 00 90 00 00 00 1a be 07 00 4b 00 00 00 ab be 07 00 11 01 00 00 f7 be 07 00 7b 00 00 00 | ............K...............{... |
73a0 | 09 c0 07 00 58 00 00 00 85 c0 07 00 a9 00 00 00 de c0 07 00 72 00 00 00 88 c1 07 00 6c 00 00 00 | ....X...............r.......l... |
73c0 | fb c1 07 00 60 00 00 00 68 c2 07 00 17 01 00 00 c9 c2 07 00 ff 00 00 00 e1 c3 07 00 44 00 00 00 | ....`...h...................D... |
73e0 | e1 c4 07 00 87 00 00 00 26 c5 07 00 70 00 00 00 ae c5 07 00 87 00 00 00 1f c6 07 00 65 00 00 00 | ........&...p...............e... |
7400 | a7 c6 07 00 6e 00 00 00 0d c7 07 00 64 00 00 00 7c c7 07 00 59 02 00 00 e1 c7 07 00 88 00 00 00 | ....n.......d...|...Y........... |
7420 | 3b ca 07 00 25 00 00 00 c4 ca 07 00 88 00 00 00 ea ca 07 00 a5 00 00 00 73 cb 07 00 57 01 00 00 | ;...%...................s...W... |
7440 | 19 cc 07 00 32 01 00 00 71 cd 07 00 49 01 00 00 a4 ce 07 00 51 01 00 00 ee cf 07 00 fb 00 00 00 | ....2...q...I.......Q........... |
7460 | 40 d1 07 00 28 00 00 00 3c d2 07 00 95 00 00 00 65 d2 07 00 af 00 00 00 fb d2 07 00 af 00 00 00 | @...(...<.......e............... |
7480 | ab d3 07 00 76 00 00 00 5b d4 07 00 a6 00 00 00 d2 d4 07 00 84 01 00 00 79 d5 07 00 6a 00 00 00 | ....v...[...............y...j... |
74a0 | fe d6 07 00 b9 00 00 00 69 d7 07 00 0f 01 00 00 23 d8 07 00 36 00 00 00 33 d9 07 00 a5 00 00 00 | ........i.......#...6...3....... |
74c0 | 6a d9 07 00 a7 00 00 00 10 da 07 00 7b 00 00 00 b8 da 07 00 67 00 00 00 34 db 07 00 32 00 00 00 | j...........{.......g...4...2... |
74e0 | 9c db 07 00 fe 00 00 00 cf db 07 00 9d 00 00 00 ce dc 07 00 bb 00 00 00 6c dd 07 00 77 00 00 00 | ........................l...w... |
7500 | 28 de 07 00 bf 00 00 00 a0 de 07 00 c7 00 00 00 60 df 07 00 cc 00 00 00 28 e0 07 00 d1 00 00 00 | (...............`.......(....... |
7520 | f5 e0 07 00 2d 04 00 00 c7 e1 07 00 5d 00 00 00 f5 e5 07 00 e3 00 00 00 53 e6 07 00 cf 00 00 00 | ....-.......]...........S....... |
7540 | 37 e7 07 00 07 01 00 00 07 e8 07 00 10 01 00 00 0f e9 07 00 9c 00 00 00 20 ea 07 00 8a 00 00 00 | 7............................... |
7560 | bd ea 07 00 97 00 00 00 48 eb 07 00 40 00 00 00 e0 eb 07 00 f0 00 00 00 21 ec 07 00 0b 01 00 00 | ........H...@...........!....... |
7580 | 12 ed 07 00 37 01 00 00 1e ee 07 00 75 01 00 00 56 ef 07 00 97 01 00 00 cc f0 07 00 f0 00 00 00 | ....7.......u...V............... |
75a0 | 64 f2 07 00 01 01 00 00 55 f3 07 00 aa 00 00 00 57 f4 07 00 69 00 00 00 02 f5 07 00 6b 00 00 00 | d.......U.......W...i.......k... |
75c0 | 6c f5 07 00 df 00 00 00 d8 f5 07 00 44 00 00 00 b8 f6 07 00 ec 00 00 00 fd f6 07 00 86 00 00 00 | l...........D................... |
75e0 | ea f7 07 00 d5 00 00 00 71 f8 07 00 b9 00 00 00 47 f9 07 00 a6 00 00 00 01 fa 07 00 c8 00 00 00 | ........q.......G............... |
7600 | a8 fa 07 00 71 00 00 00 71 fb 07 00 2c 01 00 00 e3 fb 07 00 84 00 00 00 10 fd 07 00 00 01 00 00 | ....q...q...,................... |
7620 | 95 fd 07 00 e5 00 00 00 96 fe 07 00 2d 01 00 00 7c ff 07 00 12 01 00 00 aa 00 08 00 f2 00 00 00 | ............-...|............... |
7640 | bd 01 08 00 a4 00 00 00 b0 02 08 00 90 01 00 00 55 03 08 00 a2 00 00 00 e6 04 08 00 b3 01 00 00 | ................U............... |
7660 | 89 05 08 00 53 00 00 00 3d 07 08 00 5f 00 00 00 91 07 08 00 80 00 00 00 f1 07 08 00 81 00 00 00 | ....S...=..._................... |
7680 | 72 08 08 00 8f 00 00 00 f4 08 08 00 7b 00 00 00 84 09 08 00 7a 00 00 00 00 0a 08 00 f3 00 00 00 | r...........{.......z........... |
76a0 | 7b 0a 08 00 f2 00 00 00 6f 0b 08 00 3a 00 00 00 62 0c 08 00 3a 00 00 00 9d 0c 08 00 41 00 00 00 | {.......o...:...b...:.......A... |
76c0 | d8 0c 08 00 67 00 00 00 1a 0d 08 00 42 00 00 00 82 0d 08 00 38 00 00 00 c5 0d 08 00 53 00 00 00 | ....g.......B.......8.......S... |
76e0 | fe 0d 08 00 5c 00 00 00 52 0e 08 00 e1 01 00 00 af 0e 08 00 bb 00 00 00 91 10 08 00 e7 00 00 00 | ....\...R....................... |
7700 | 4d 11 08 00 4d 00 00 00 35 12 08 00 96 00 00 00 83 12 08 00 80 00 00 00 1a 13 08 00 e5 00 00 00 | M...M...5....................... |
7720 | 9b 13 08 00 66 00 00 00 81 14 08 00 ad 00 00 00 e8 14 08 00 17 00 00 00 96 15 08 00 16 00 00 00 | ....f........................... |
7740 | ae 15 08 00 16 00 00 00 c5 15 08 00 1c 00 00 00 dc 15 08 00 1d 00 00 00 f9 15 08 00 14 00 00 00 | ................................ |
7760 | 17 16 08 00 13 00 00 00 2c 16 08 00 14 00 00 00 40 16 08 00 22 00 00 00 55 16 08 00 3f 00 00 00 | ........,.......@..."...U...?... |
7780 | 78 16 08 00 16 00 00 00 b8 16 08 00 52 00 00 00 cf 16 08 00 89 00 00 00 22 17 08 00 4b 00 00 00 | x...........R..........."...K... |
77a0 | ac 17 08 00 0d 01 00 00 f8 17 08 00 41 00 00 00 06 19 08 00 6d 00 00 00 48 19 08 00 6a 00 00 00 | ............A.......m...H...j... |
77c0 | b6 19 08 00 32 00 00 00 21 1a 08 00 61 00 00 00 54 1a 08 00 8d 00 00 00 b6 1a 08 00 8e 00 00 00 | ....2...!...a...T............... |
77e0 | 44 1b 08 00 47 00 00 00 d3 1b 08 00 40 00 00 00 1b 1c 08 00 6c 00 00 00 5c 1c 08 00 4c 00 00 00 | D...G.......@.......l...\...L... |
7800 | c9 1c 08 00 3f 00 00 00 16 1d 08 00 00 01 00 00 56 1d 08 00 1c 01 00 00 57 1e 08 00 a2 00 00 00 | ....?...........V.......W....... |
7820 | 74 1f 08 00 97 00 00 00 17 20 08 00 59 00 00 00 af 20 08 00 62 00 00 00 09 21 08 00 1a 00 00 00 | t...........Y.......b....!...... |
7840 | 6c 21 08 00 1c 00 00 00 87 21 08 00 bb 00 00 00 a4 21 08 00 32 00 00 00 60 22 08 00 73 00 00 00 | l!.......!.......!..2...`"..s... |
7860 | 93 22 08 00 61 00 00 00 07 23 08 00 76 00 00 00 69 23 08 00 47 00 00 00 e0 23 08 00 43 01 00 00 | ."..a....#..v...i#..G....#..C... |
7880 | 28 24 08 00 7d 00 00 00 6c 25 08 00 e5 00 00 00 ea 25 08 00 11 00 00 00 d0 26 08 00 63 00 00 00 | ($..}...l%.......%.......&..c... |
78a0 | e2 26 08 00 c6 00 00 00 46 27 08 00 8e 00 00 00 0d 28 08 00 2a 00 00 00 9c 28 08 00 98 00 00 00 | .&......F'.......(..*....(...... |
78c0 | c7 28 08 00 44 00 00 00 60 29 08 00 a0 00 00 00 a5 29 08 00 ca 00 00 00 46 2a 08 00 41 00 00 00 | .(..D...`).......)......F*..A... |
78e0 | 11 2b 08 00 76 00 00 00 53 2b 08 00 c7 00 00 00 ca 2b 08 00 58 00 00 00 92 2c 08 00 23 00 00 00 | .+..v...S+.......+..X....,..#... |
7900 | eb 2c 08 00 76 00 00 00 0f 2d 08 00 36 00 00 00 86 2d 08 00 97 00 00 00 bd 2d 08 00 2c 00 00 00 | .,..v....-..6....-.......-..,... |
7920 | 55 2e 08 00 2b 00 00 00 82 2e 08 00 2e 00 00 00 ae 2e 08 00 33 00 00 00 dd 2e 08 00 fc 00 00 00 | U...+...............3........... |
7940 | 11 2f 08 00 e9 00 00 00 0e 30 08 00 31 00 00 00 f8 30 08 00 26 00 00 00 2a 31 08 00 60 00 00 00 | ./.......0..1....0..&...*1..`... |
7960 | 51 31 08 00 1d 00 00 00 b2 31 08 00 89 00 00 00 d0 31 08 00 be 00 00 00 5a 32 08 00 60 01 00 00 | Q1.......1.......1......Z2..`... |
7980 | 19 33 08 00 80 00 00 00 7a 34 08 00 78 00 00 00 fb 34 08 00 7b 00 00 00 74 35 08 00 29 00 00 00 | .3......z4..x....4..{...t5..)... |
79a0 | f0 35 08 00 e9 00 00 00 1a 36 08 00 3d 00 00 00 04 37 08 00 6f 00 00 00 42 37 08 00 3b 00 00 00 | .5.......6..=....7..o...B7..;... |
79c0 | b2 37 08 00 a5 00 00 00 ee 37 08 00 2d 01 00 00 94 38 08 00 2c 01 00 00 c2 39 08 00 dd 00 00 00 | .7.......7..-....8..,....9...... |
79e0 | ef 3a 08 00 64 00 00 00 cd 3b 08 00 40 00 00 00 32 3c 08 00 77 00 00 00 73 3c 08 00 76 00 00 00 | .:..d....;..@...2<..w...s<..v... |
7a00 | eb 3c 08 00 6f 00 00 00 62 3d 08 00 d3 00 00 00 d2 3d 08 00 23 01 00 00 a6 3e 08 00 9d 01 00 00 | .<..o...b=.......=..#....>...... |
7a20 | ca 3f 08 00 48 00 00 00 68 41 08 00 2c 00 00 00 b1 41 08 00 bb 00 00 00 de 41 08 00 23 00 00 00 | .?..H...hA..,....A.......A..#... |
7a40 | 9a 42 08 00 3d 00 00 00 be 42 08 00 42 00 00 00 fc 42 08 00 5b 00 00 00 3f 43 08 00 6b 00 00 00 | .B..=....B..B....B..[...?C..k... |
7a60 | 9b 43 08 00 30 00 00 00 07 44 08 00 3d 00 00 00 38 44 08 00 2c 00 00 00 76 44 08 00 54 00 00 00 | .C..0....D..=...8D..,...vD..T... |
7a80 | a3 44 08 00 38 00 00 00 f8 44 08 00 3a 00 00 00 31 45 08 00 3c 00 00 00 6c 45 08 00 44 00 00 00 | .D..8....D..:...1E..<...lE..D... |
7aa0 | a9 45 08 00 34 00 00 00 ee 45 08 00 32 01 00 00 23 46 08 00 30 00 00 00 56 47 08 00 dd 00 00 00 | .E..4....E..2...#F..0...VG...... |
7ac0 | 87 47 08 00 09 00 00 00 65 48 08 00 d6 00 00 00 6f 48 08 00 49 00 00 00 46 49 08 00 47 00 00 00 | .G......eH......oH..I...FI..G... |
7ae0 | 90 49 08 00 44 00 00 00 d8 49 08 00 4a 00 00 00 1d 4a 08 00 26 00 00 00 68 4a 08 00 1f 00 00 00 | .I..D....I..J....J..&...hJ...... |
7b00 | 8f 4a 08 00 74 00 00 00 af 4a 08 00 12 00 00 00 24 4b 08 00 30 00 00 00 37 4b 08 00 45 00 00 00 | .J..t....J......$K..0...7K..E... |
7b20 | 68 4b 08 00 2e 00 00 00 ae 4b 08 00 06 00 00 00 dd 4b 08 00 65 00 00 00 e4 4b 08 00 4e 00 00 00 | hK.......K.......K..e....K..N... |
7b40 | 4a 4c 08 00 b1 00 00 00 99 4c 08 00 9b 00 00 00 4b 4d 08 00 91 00 00 00 e7 4d 08 00 ae 00 00 00 | JL.......L......KM.......M...... |
7b60 | 79 4e 08 00 22 00 00 00 28 4f 08 00 aa 00 00 00 4b 4f 08 00 39 01 00 00 f6 4f 08 00 5c 00 00 00 | yN.."...(O......KO..9....O..\... |
7b80 | 30 51 08 00 74 00 00 00 8d 51 08 00 58 00 00 00 02 52 08 00 6f 00 00 00 5b 52 08 00 99 00 00 00 | 0Q..t....Q..X....R..o...[R...... |
7ba0 | cb 52 08 00 80 00 00 00 65 53 08 00 54 00 00 00 e6 53 08 00 4c 00 00 00 3b 54 08 00 51 00 00 00 | .R......eS..T....S..L...;T..Q... |
7bc0 | 88 54 08 00 d7 00 00 00 da 54 08 00 68 00 00 00 b2 55 08 00 62 00 00 00 1b 56 08 00 5e 00 00 00 | .T.......T..h....U..b....V..^... |
7be0 | 7e 56 08 00 3c 00 00 00 dd 56 08 00 77 00 00 00 1a 57 08 00 40 00 00 00 92 57 08 00 d7 00 00 00 | ~V..<....V..w....W..@....W...... |
7c00 | d3 57 08 00 b3 00 00 00 ab 58 08 00 66 00 00 00 5f 59 08 00 37 00 00 00 c6 59 08 00 6a 00 00 00 | .W.......X..f..._Y..7....Y..j... |
7c20 | fe 59 08 00 42 00 00 00 69 5a 08 00 3d 00 00 00 ac 5a 08 00 38 00 00 00 ea 5a 08 00 3d 00 00 00 | .Y..B...iZ..=....Z..8....Z..=... |
7c40 | 23 5b 08 00 40 00 00 00 61 5b 08 00 4a 01 00 00 a2 5b 08 00 52 00 00 00 ed 5c 08 00 51 00 00 00 | #[..@...a[..J....[..R....\..Q... |
7c60 | 40 5d 08 00 d9 00 00 00 92 5d 08 00 c9 00 00 00 6c 5e 08 00 4f 00 00 00 36 5f 08 00 67 00 00 00 | @].......]......l^..O...6_..g... |
7c80 | 86 5f 08 00 8d 00 00 00 ee 5f 08 00 49 00 00 00 7c 60 08 00 a0 01 00 00 c6 60 08 00 87 00 00 00 | ._......._..I...|`.......`...... |
7ca0 | 67 62 08 00 5f 00 00 00 ef 62 08 00 fa 00 00 00 4f 63 08 00 54 00 00 00 4a 64 08 00 25 00 00 00 | gb.._....b......Oc..T...Jd..%... |
7cc0 | 9f 64 08 00 49 00 00 00 c5 64 08 00 92 00 00 00 0f 65 08 00 54 00 00 00 a2 65 08 00 96 00 00 00 | .d..I....d.......e..T....e...... |
7ce0 | f7 65 08 00 2a 00 00 00 8e 66 08 00 1c 00 00 00 b9 66 08 00 1f 00 00 00 d6 66 08 00 32 00 00 00 | .e..*....f.......f.......f..2... |
7d00 | f6 66 08 00 12 01 00 00 29 67 08 00 71 00 00 00 3c 68 08 00 5f 00 00 00 ae 68 08 00 69 00 00 00 | .f......)g..q...<h.._....h..i... |
7d20 | 0e 69 08 00 a5 00 00 00 78 69 08 00 45 00 00 00 1e 6a 08 00 09 00 00 00 64 6a 08 00 2c 00 00 00 | .i......xi..E....j......dj..,... |
7d40 | 6e 6a 08 00 0e 00 00 00 9b 6a 08 00 05 00 00 00 aa 6a 08 00 83 00 00 00 b0 6a 08 00 44 02 00 00 | nj.......j.......j.......j..D... |
7d60 | 34 6b 08 00 dc 00 00 00 79 6d 08 00 8a 01 00 00 56 6e 08 00 0f 00 00 00 e1 6f 08 00 93 00 00 00 | 4k......ym......Vn.......o...... |
7d80 | f1 6f 08 00 0e 00 00 00 85 70 08 00 5e 00 00 00 94 70 08 00 a6 00 00 00 f3 70 08 00 9e 00 00 00 | .o.......p..^....p.......p...... |
7da0 | 9a 71 08 00 97 00 00 00 39 72 08 00 19 00 00 00 d1 72 08 00 b8 00 00 00 eb 72 08 00 12 00 00 00 | .q......9r.......r.......r...... |
7dc0 | a4 73 08 00 60 01 00 00 b7 73 08 00 11 00 00 00 18 75 08 00 0f 00 00 00 2a 75 08 00 0f 00 00 00 | .s..`....s.......u......*u...... |
7de0 | 3a 75 08 00 06 00 00 00 4a 75 08 00 0b 00 00 00 51 75 08 00 35 00 00 00 5d 75 08 00 28 00 00 00 | :u......Ju......Qu..5...]u..(... |
7e00 | 93 75 08 00 44 00 00 00 bc 75 08 00 60 00 00 00 01 76 08 00 3f 00 00 00 62 76 08 00 5f 00 00 00 | .u..D....u..`....v..?...bv.._... |
7e20 | a2 76 08 00 7c 00 00 00 02 77 08 00 13 00 00 00 7f 77 08 00 1f 00 00 00 93 77 08 00 17 00 00 00 | .v..|....w.......w.......w...... |
7e40 | b3 77 08 00 15 00 00 00 cb 77 08 00 12 00 00 00 e1 77 08 00 29 00 00 00 f4 77 08 00 0d 00 00 00 | .w.......w.......w..)....w...... |
7e60 | 1e 78 08 00 38 00 00 00 2c 78 08 00 af 00 00 00 65 78 08 00 0e 00 00 00 15 79 08 00 07 00 00 00 | .x..8...,x......ex.......y...... |
7e80 | 24 79 08 00 0c 00 00 00 2c 79 08 00 0d 00 00 00 39 79 08 00 1b 00 00 00 47 79 08 00 05 00 00 00 | $y......,y......9y......Gy...... |
7ea0 | 63 79 08 00 46 01 00 00 69 79 08 00 9b 01 00 00 b0 7a 08 00 06 00 00 00 4c 7c 08 00 16 00 00 00 | cy..F...iy.......z......L|...... |
7ec0 | 53 7c 08 00 15 00 00 00 6a 7c 08 00 07 00 00 00 80 7c 08 00 9c 00 00 00 88 7c 08 00 2e 00 00 00 | S|......j|.......|.......|...... |
7ee0 | 25 7d 08 00 49 00 00 00 54 7d 08 00 e2 00 00 00 9e 7d 08 00 58 00 00 00 81 7e 08 00 14 00 00 00 | %}..I...T}.......}..X....~...... |
7f00 | da 7e 08 00 66 00 00 00 ef 7e 08 00 25 00 00 00 56 7f 08 00 26 00 00 00 7c 7f 08 00 20 00 00 00 | .~..f....~..%...V...&...|....... |
7f20 | a3 7f 08 00 13 00 00 00 c4 7f 08 00 39 00 00 00 d8 7f 08 00 59 00 00 00 12 80 08 00 3e 00 00 00 | ............9.......Y.......>... |
7f40 | 6c 80 08 00 00 01 00 00 ab 80 08 00 55 00 00 00 ac 81 08 00 54 00 00 00 02 82 08 00 51 00 00 00 | l...........U.......T.......Q... |
7f60 | 57 82 08 00 55 00 00 00 a9 82 08 00 52 00 00 00 ff 82 08 00 44 00 00 00 52 83 08 00 36 00 00 00 | W...U.......R.......D...R...6... |
7f80 | 97 83 08 00 46 00 00 00 ce 83 08 00 2c 00 00 00 15 84 08 00 22 00 00 00 42 84 08 00 88 00 00 00 | ....F.......,......."...B....... |
7fa0 | 65 84 08 00 30 00 00 00 ee 84 08 00 43 00 00 00 1f 85 08 00 18 00 00 00 63 85 08 00 28 00 00 00 | e...0.......C...........c...(... |
7fc0 | 7c 85 08 00 2f 00 00 00 a5 85 08 00 68 00 00 00 d5 85 08 00 8c 00 00 00 3e 86 08 00 9a 00 00 00 | |.../.......h...........>....... |
7fe0 | cb 86 08 00 8a 00 00 00 66 87 08 00 78 00 00 00 f1 87 08 00 59 00 00 00 6a 88 08 00 19 01 00 00 | ........f...x.......Y...j....... |
8000 | c4 88 08 00 24 01 00 00 de 89 08 00 22 01 00 00 03 8b 08 00 08 01 00 00 26 8c 08 00 f8 00 00 00 | ....$......."...........&....... |
8020 | 2f 8d 08 00 f7 00 00 00 28 8e 08 00 f9 00 00 00 20 8f 08 00 f7 00 00 00 1a 90 08 00 f7 00 00 00 | /.......(....................... |
8040 | 12 91 08 00 f7 00 00 00 0a 92 08 00 c4 00 00 00 02 93 08 00 a1 00 00 00 c7 93 08 00 73 00 00 00 | ............................s... |
8060 | 69 94 08 00 f8 00 00 00 dd 94 08 00 4e 00 00 00 d6 95 08 00 99 00 00 00 25 96 08 00 4b 00 00 00 | i...........N...........%...K... |
8080 | bf 96 08 00 5b 00 00 00 0b 97 08 00 4a 00 00 00 67 97 08 00 4a 00 00 00 b2 97 08 00 50 00 00 00 | ....[.......J...g...J.......P... |
80a0 | fd 97 08 00 47 00 00 00 4e 98 08 00 44 01 00 00 96 98 08 00 45 01 00 00 db 99 08 00 44 01 00 00 | ....G...N...D.......E.......D... |
80c0 | 21 9b 08 00 44 01 00 00 66 9c 08 00 44 01 00 00 ab 9d 08 00 3c 01 00 00 f0 9e 08 00 a0 00 00 00 | !...D...f...D.......<........... |
80e0 | 2d a0 08 00 30 01 00 00 ce a0 08 00 50 01 00 00 ff a1 08 00 d1 00 00 00 50 a3 08 00 23 01 00 00 | -...0.......P...........P...#... |
8100 | 22 a4 08 00 08 01 00 00 46 a5 08 00 29 01 00 00 4f a6 08 00 2f 01 00 00 79 a7 08 00 da 00 00 00 | ".......F...)...O.../...y....... |
8120 | a9 a8 08 00 34 01 00 00 84 a9 08 00 89 00 00 00 b9 aa 08 00 66 00 00 00 43 ab 08 00 88 00 00 00 | ....4...............f...C....... |
8140 | aa ab 08 00 a5 00 00 00 33 ac 08 00 70 00 00 00 d9 ac 08 00 6f 00 00 00 4a ad 08 00 8e 00 00 00 | ........3...p.......o...J....... |
8160 | ba ad 08 00 b0 00 00 00 49 ae 08 00 0f 01 00 00 fa ae 08 00 c3 00 00 00 0a b0 08 00 84 00 00 00 | ........I....................... |
8180 | ce b0 08 00 be 00 00 00 53 b1 08 00 db 00 00 00 12 b2 08 00 85 00 00 00 ee b2 08 00 7d 00 00 00 | ........S...................}... |
81a0 | 74 b3 08 00 9a 00 00 00 f2 b3 08 00 92 00 00 00 8d b4 08 00 91 00 00 00 20 b5 08 00 d5 00 00 00 | t............................... |
81c0 | b2 b5 08 00 93 00 00 00 88 b6 08 00 8e 00 00 00 1c b7 08 00 fa 00 00 00 ab b7 08 00 bd 00 00 00 | ................................ |
81e0 | a6 b8 08 00 f5 00 00 00 64 b9 08 00 a6 00 00 00 5a ba 08 00 a1 00 00 00 01 bb 08 00 7b 00 00 00 | ........d.......Z...........{... |
8200 | a3 bb 08 00 fc 00 00 00 1f bc 08 00 fd 00 00 00 1c bd 08 00 19 01 00 00 1a be 08 00 9d 00 00 00 | ................................ |
8220 | 34 bf 08 00 be 01 00 00 d2 bf 08 00 b1 00 00 00 91 c1 08 00 5b 00 00 00 43 c2 08 00 63 00 00 00 | 4...................[...C...c... |
8240 | 9f c2 08 00 33 01 00 00 03 c3 08 00 3b 00 00 00 37 c4 08 00 98 00 00 00 73 c4 08 00 54 00 00 00 | ....3.......;...7.......s...T... |
8260 | 0c c5 08 00 59 00 00 00 61 c5 08 00 de 00 00 00 bb c5 08 00 9a 00 00 00 9a c6 08 00 2b 00 00 00 | ....Y...a...................+... |
8280 | 35 c7 08 00 c0 00 00 00 61 c7 08 00 c5 00 00 00 22 c8 08 00 3a 00 00 00 e8 c8 08 00 35 00 00 00 | 5.......a......."...:.......5... |
82a0 | 23 c9 08 00 87 00 00 00 59 c9 08 00 5c 00 00 00 e1 c9 08 00 74 00 00 00 3e ca 08 00 da 00 00 00 | #.......Y...\.......t...>....... |
82c0 | b3 ca 08 00 f0 00 00 00 8e cb 08 00 84 00 00 00 7f cc 08 00 f0 00 00 00 04 cd 08 00 f0 00 00 00 | ................................ |
82e0 | f5 cd 08 00 f0 00 00 00 e6 ce 08 00 f1 00 00 00 d7 cf 08 00 5f 00 00 00 c9 d0 08 00 83 00 00 00 | ...................._........... |
8300 | 29 d1 08 00 bd 00 00 00 ad d1 08 00 79 00 00 00 6b d2 08 00 7e 00 00 00 e5 d2 08 00 36 00 00 00 | )...........y...k...~.......6... |
8320 | 64 d3 08 00 78 00 00 00 9b d3 08 00 85 00 00 00 14 d4 08 00 51 00 00 00 9a d4 08 00 3e 00 00 00 | d...x...............Q.......>... |
8340 | ec d4 08 00 3e 00 00 00 2b d5 08 00 75 00 00 00 6a d5 08 00 53 00 00 00 e0 d5 08 00 df 00 00 00 | ....>...+...u...j...S........... |
8360 | 34 d6 08 00 a1 00 00 00 14 d7 08 00 ac 00 00 00 b6 d7 08 00 3b 00 00 00 63 d8 08 00 47 00 00 00 | 4...................;...c...G... |
8380 | 9f d8 08 00 67 00 00 00 e7 d8 08 00 d8 00 00 00 4f d9 08 00 5a 00 00 00 28 da 08 00 38 00 00 00 | ....g...........O...Z...(...8... |
83a0 | 83 da 08 00 88 01 00 00 bc da 08 00 c5 00 00 00 45 dc 08 00 a1 00 00 00 0b dd 08 00 6d 00 00 00 | ................E...........m... |
83c0 | ad dd 08 00 4e 00 00 00 1b de 08 00 54 00 00 00 6a de 08 00 3d 00 00 00 bf de 08 00 8a 00 00 00 | ....N.......T...j...=........... |
83e0 | fd de 08 00 6f 00 00 00 88 df 08 00 2e 00 00 00 f8 df 08 00 31 00 00 00 27 e0 08 00 3c 00 00 00 | ....o...............1...'...<... |
8400 | 59 e0 08 00 17 01 00 00 96 e0 08 00 db 00 00 00 ae e1 08 00 49 00 00 00 8a e2 08 00 4a 00 00 00 | Y...................I.......J... |
8420 | d4 e2 08 00 49 00 00 00 1f e3 08 00 49 00 00 00 69 e3 08 00 0b 01 00 00 b3 e3 08 00 51 00 00 00 | ....I.......I...i...........Q... |
8440 | bf e4 08 00 96 00 00 00 11 e5 08 00 5d 00 00 00 a8 e5 08 00 49 00 00 00 06 e6 08 00 46 00 00 00 | ............].......I.......F... |
8460 | 50 e6 08 00 37 00 00 00 97 e6 08 00 38 01 00 00 cf e6 08 00 31 00 00 00 08 e8 08 00 30 00 00 00 | P...7.......8.......1.......0... |
8480 | 3a e8 08 00 39 00 00 00 6b e8 08 00 33 00 00 00 a5 e8 08 00 33 00 00 00 d9 e8 08 00 49 00 00 00 | :...9...k...3.......3.......I... |
84a0 | 0d e9 08 00 d9 00 00 00 57 e9 08 00 78 00 00 00 31 ea 08 00 79 00 00 00 aa ea 08 00 8c 00 00 00 | ........W...x...1...y........... |
84c0 | 24 eb 08 00 47 00 00 00 b1 eb 08 00 fb 00 00 00 f9 eb 08 00 b7 00 00 00 f5 ec 08 00 5b 00 00 00 | $...G.......................[... |
84e0 | ad ed 08 00 b7 00 00 00 09 ee 08 00 42 00 00 00 c1 ee 08 00 46 00 00 00 04 ef 08 00 30 00 00 00 | ............B.......F.......0... |
8500 | 4b ef 08 00 39 00 00 00 7c ef 08 00 25 00 00 00 b6 ef 08 00 2e 00 00 00 dc ef 08 00 2e 00 00 00 | K...9...|...%................... |
8520 | 0b f0 08 00 39 00 00 00 3a f0 08 00 c1 00 00 00 74 f0 08 00 8c 00 00 00 36 f1 08 00 b5 00 00 00 | ....9...:.......t.......6....... |
8540 | c3 f1 08 00 42 00 00 00 79 f2 08 00 a5 00 00 00 bc f2 08 00 b9 00 00 00 62 f3 08 00 3e 00 00 00 | ....B...y...............b...>... |
8560 | 1c f4 08 00 74 00 00 00 5b f4 08 00 6c 00 00 00 d0 f4 08 00 81 00 00 00 3d f5 08 00 19 00 00 00 | ....t...[...l...........=....... |
8580 | bf f5 08 00 23 00 00 00 d9 f5 08 00 b7 00 00 00 fd f5 08 00 dc 00 00 00 b5 f6 08 00 13 00 00 00 | ....#........................... |
85a0 | 92 f7 08 00 54 00 00 00 a6 f7 08 00 5f 01 00 00 fb f7 08 00 17 00 00 00 5b f9 08 00 1a 00 00 00 | ....T......._...........[....... |
85c0 | 73 f9 08 00 17 00 00 00 8e f9 08 00 5b 00 00 00 a6 f9 08 00 3b 00 00 00 02 fa 08 00 dd 00 00 00 | s...........[.......;........... |
85e0 | 3e fa 08 00 1d 01 00 00 1c fb 08 00 32 00 00 00 3a fc 08 00 20 00 00 00 6d fc 08 00 5d 00 00 00 | >...........2...:.......m...]... |
8600 | 8e fc 08 00 54 00 00 00 ec fc 08 00 04 00 00 00 41 fd 08 00 30 00 00 00 46 fd 08 00 0c 00 00 00 | ....T...........A...0...F....... |
8620 | 77 fd 08 00 0c 00 00 00 84 fd 08 00 60 00 00 00 91 fd 08 00 09 00 00 00 f2 fd 08 00 35 01 00 00 | w...........`...............5... |
8640 | fc fd 08 00 33 01 00 00 32 ff 08 00 70 00 00 00 66 00 09 00 03 00 00 00 d7 00 09 00 62 00 00 00 | ....3...2...p...f...........b... |
8660 | db 00 09 00 03 00 00 00 3e 01 09 00 11 00 00 00 42 01 09 00 0b 00 00 00 54 01 09 00 16 00 00 00 | ........>.......B.......T....... |
8680 | 60 01 09 00 19 00 00 00 77 01 09 00 15 00 00 00 91 01 09 00 11 00 00 00 a7 01 09 00 14 00 00 00 | `.......w....................... |
86a0 | b9 01 09 00 6a 02 00 00 ce 01 09 00 3d 01 00 00 39 04 09 00 85 01 00 00 77 05 09 00 95 00 00 00 | ....j.......=...9.......w....... |
86c0 | fd 06 09 00 d5 01 00 00 93 07 09 00 32 00 00 00 69 09 09 00 1e 00 00 00 9c 09 09 00 05 00 00 00 | ............2...i............... |
86e0 | bb 09 09 00 45 01 00 00 c1 09 09 00 16 00 00 00 07 0b 09 00 3b 00 00 00 1e 0b 09 00 18 00 00 00 | ....E...............;........... |
8700 | 5a 0b 09 00 05 00 00 00 73 0b 09 00 8e 00 00 00 79 0b 09 00 60 00 00 00 08 0c 09 00 0c 00 00 00 | Z.......s.......y...`........... |
8720 | 69 0c 09 00 0d 00 00 00 76 0c 09 00 3b 00 00 00 84 0c 09 00 07 00 00 00 c0 0c 09 00 10 00 00 00 | i.......v...;................... |
8740 | c8 0c 09 00 6c 00 00 00 d9 0c 09 00 0e 00 00 00 46 0d 09 00 4b 00 00 00 55 0d 09 00 47 00 00 00 | ....l...........F...K...U...G... |
8760 | a1 0d 09 00 65 00 00 00 e9 0d 09 00 a1 00 00 00 4f 0e 09 00 3f 00 00 00 f1 0e 09 00 4a 01 00 00 | ....e...........O...?.......J... |
8780 | 31 0f 09 00 44 01 00 00 7c 10 09 00 15 00 00 00 c1 11 09 00 24 00 00 00 d7 11 09 00 0a 00 00 00 | 1...D...|...........$........... |
87a0 | fc 11 09 00 24 00 00 00 07 12 09 00 09 00 00 00 2c 12 09 00 29 00 00 00 36 12 09 00 1b 00 00 00 | ....$...........,...)...6....... |
87c0 | 60 12 09 00 c9 00 00 00 7c 12 09 00 0b 00 00 00 46 13 09 00 85 00 00 00 52 13 09 00 26 00 00 00 | `.......|.......F.......R...&... |
87e0 | d8 13 09 00 3d 00 00 00 ff 13 09 00 52 00 00 00 3d 14 09 00 b4 00 00 00 90 14 09 00 a9 00 00 00 | ....=.......R...=............... |
8800 | 45 15 09 00 26 00 00 00 ef 15 09 00 b0 00 00 00 16 16 09 00 df 00 00 00 c7 16 09 00 1c 00 00 00 | E...&........................... |
8820 | a7 17 09 00 8f 00 00 00 c4 17 09 00 8c 00 00 00 54 18 09 00 90 00 00 00 e1 18 09 00 5d 00 00 00 | ................T...........]... |
8840 | 72 19 09 00 44 00 00 00 d0 19 09 00 2f 00 00 00 15 1a 09 00 b0 00 00 00 45 1a 09 00 50 00 00 00 | r...D......./...........E...P... |
8860 | f6 1a 09 00 a6 00 00 00 47 1b 09 00 ec 00 00 00 ee 1b 09 00 64 00 00 00 db 1c 09 00 53 00 00 00 | ........G...........d.......S... |
8880 | 40 1d 09 00 df 00 00 00 94 1d 09 00 86 00 00 00 74 1e 09 00 63 00 00 00 fb 1e 09 00 68 00 00 00 | @...............t...c.......h... |
88a0 | 5f 1f 09 00 d1 00 00 00 c8 1f 09 00 8d 00 00 00 9a 20 09 00 78 00 00 00 28 21 09 00 7a 00 00 00 | _...................x...(!..z... |
88c0 | a1 21 09 00 7d 00 00 00 1c 22 09 00 80 00 00 00 9a 22 09 00 33 00 00 00 1b 23 09 00 71 00 00 00 | .!..}...."......."..3....#..q... |
88e0 | 4f 23 09 00 db 00 00 00 c1 23 09 00 a5 00 00 00 9d 24 09 00 75 00 00 00 43 25 09 00 59 00 00 00 | O#.......#.......$..u...C%..Y... |
8900 | b9 25 09 00 58 00 00 00 13 26 09 00 9b 00 00 00 6c 26 09 00 b6 00 00 00 08 27 09 00 29 00 00 00 | .%..X....&......l&.......'..)... |
8920 | bf 27 09 00 9c 00 00 00 e9 27 09 00 e3 00 00 00 86 28 09 00 9e 00 00 00 6a 29 09 00 44 00 00 00 | .'.......'.......(......j)..D... |
8940 | 09 2a 09 00 44 00 00 00 4e 2a 09 00 ed 00 00 00 93 2a 09 00 3c 00 00 00 81 2b 09 00 bd 00 00 00 | .*..D...N*.......*..<....+...... |
8960 | be 2b 09 00 bf 00 00 00 7c 2c 09 00 88 00 00 00 3c 2d 09 00 85 00 00 00 c5 2d 09 00 6f 00 00 00 | .+......|,......<-.......-..o... |
8980 | 4b 2e 09 00 cf 00 00 00 bb 2e 09 00 17 00 00 00 8b 2f 09 00 12 00 00 00 a3 2f 09 00 18 00 00 00 | K................/......./...... |
89a0 | b6 2f 09 00 39 00 00 00 cf 2f 09 00 1b 00 00 00 09 30 09 00 21 00 00 00 25 30 09 00 07 00 00 00 | ./..9..../.......0..!...%0...... |
89c0 | 47 30 09 00 12 00 00 00 4f 30 09 00 79 00 00 00 62 30 09 00 e5 00 00 00 dc 30 09 00 ac 00 00 00 | G0......O0..y...b0.......0...... |
89e0 | c2 31 09 00 84 00 00 00 6f 32 09 00 36 01 00 00 f4 32 09 00 5a 00 00 00 2b 34 09 00 c4 00 00 00 | .1......o2..6....2..Z...+4...... |
8a00 | 86 34 09 00 4b 00 00 00 4b 35 09 00 a7 00 00 00 97 35 09 00 17 00 00 00 3f 36 09 00 e8 00 00 00 | .4..K...K5.......5......?6...... |
8a20 | 57 36 09 00 48 00 00 00 40 37 09 00 41 00 00 00 89 37 09 00 2e 00 00 00 cb 37 09 00 47 00 00 00 | W6..H...@7..A....7.......7..G... |
8a40 | fa 37 09 00 3f 00 00 00 42 38 09 00 9c 00 00 00 82 38 09 00 68 00 00 00 1f 39 09 00 1b 01 00 00 | .7..?...B8.......8..h....9...... |
8a60 | 88 39 09 00 22 00 00 00 a4 3a 09 00 08 00 00 00 c7 3a 09 00 2a 00 00 00 d0 3a 09 00 34 00 00 00 | .9.."....:.......:..*....:..4... |
8a80 | fb 3a 09 00 ae 00 00 00 30 3b 09 00 17 01 00 00 df 3b 09 00 79 00 00 00 f7 3c 09 00 73 00 00 00 | .:......0;.......;..y....<..s... |
8aa0 | 71 3d 09 00 bf 00 00 00 e5 3d 09 00 dc 00 00 00 a5 3e 09 00 7b 01 00 00 82 3f 09 00 90 01 00 00 | q=.......=.......>..{....?...... |
8ac0 | fe 40 09 00 13 01 00 00 8f 42 09 00 a0 00 00 00 a3 43 09 00 36 01 00 00 44 44 09 00 04 02 00 00 | .@.......B.......C..6...DD...... |
8ae0 | 7b 45 09 00 b6 00 00 00 80 47 09 00 ad 00 00 00 37 48 09 00 67 00 00 00 e5 48 09 00 71 00 00 00 | {E.......G......7H..g....H..q... |
8b00 | 4d 49 09 00 fe 00 00 00 bf 49 09 00 7d 00 00 00 be 4a 09 00 6d 01 00 00 3c 4b 09 00 7a 00 00 00 | MI.......I..}....J..m...<K..z... |
8b20 | aa 4c 09 00 e2 00 00 00 25 4d 09 00 1e 01 00 00 08 4e 09 00 56 00 00 00 27 4f 09 00 16 01 00 00 | .L......%M.......N..V...'O...... |
8b40 | 7e 4f 09 00 06 01 00 00 95 50 09 00 b1 00 00 00 9c 51 09 00 58 00 00 00 4e 52 09 00 80 00 00 00 | ~O.......P.......Q..X...NR...... |
8b60 | a7 52 09 00 7d 00 00 00 28 53 09 00 98 00 00 00 a6 53 09 00 b5 00 00 00 3f 54 09 00 a2 00 00 00 | .R..}...(S.......S......?T...... |
8b80 | f5 54 09 00 00 01 00 00 98 55 09 00 37 00 00 00 99 56 09 00 42 00 00 00 d1 56 09 00 cf 00 00 00 | .T.......U..7....V..B....V...... |
8ba0 | 14 57 09 00 fd 00 00 00 e4 57 09 00 3c 01 00 00 e2 58 09 00 fb 00 00 00 1f 5a 09 00 bf 00 00 00 | .W.......W..<....X.......Z...... |
8bc0 | 1b 5b 09 00 9e 00 00 00 db 5b 09 00 a4 00 00 00 7a 5c 09 00 fb 00 00 00 1f 5d 09 00 18 01 00 00 | .[.......[......z\.......]...... |
8be0 | 1b 5e 09 00 20 01 00 00 34 5f 09 00 5d 00 00 00 55 60 09 00 4b 00 00 00 b3 60 09 00 97 00 00 00 | .^......4_..]...U`..K....`...... |
8c00 | ff 60 09 00 57 00 00 00 97 61 09 00 3e 00 00 00 ef 61 09 00 b0 00 00 00 2e 62 09 00 f1 00 00 00 | .`..W....a..>....a.......b...... |
8c20 | df 62 09 00 b8 00 00 00 d1 63 09 00 b8 00 00 00 8a 64 09 00 5d 00 00 00 43 65 09 00 4a 00 00 00 | .b.......c.......d..]...Ce..J... |
8c40 | a1 65 09 00 34 00 00 00 ec 65 09 00 2c 00 00 00 21 66 09 00 24 00 00 00 4e 66 09 00 41 00 00 00 | .e..4....e..,...!f..$...Nf..A... |
8c60 | 73 66 09 00 d6 00 00 00 b5 66 09 00 ae 00 00 00 8c 67 09 00 cf 00 00 00 3b 68 09 00 59 00 00 00 | sf.......f.......g......;h..Y... |
8c80 | 0b 69 09 00 c3 00 00 00 65 69 09 00 48 00 00 00 29 6a 09 00 62 00 00 00 72 6a 09 00 86 00 00 00 | .i......ei..H...)j..b...rj...... |
8ca0 | d5 6a 09 00 fe 00 00 00 5c 6b 09 00 41 00 00 00 5b 6c 09 00 93 00 00 00 9d 6c 09 00 09 00 00 00 | .j......\k..A...[l.......l...... |
8cc0 | 31 6d 09 00 18 00 00 00 3b 6d 09 00 33 00 00 00 54 6d 09 00 99 00 00 00 88 6d 09 00 9a 00 00 00 | 1m......;m..3...Tm.......m...... |
8ce0 | 22 6e 09 00 16 00 00 00 bd 6e 09 00 27 00 00 00 d4 6e 09 00 30 00 00 00 fc 6e 09 00 10 00 00 00 | "n.......n..'....n..0....n...... |
8d00 | 2d 6f 09 00 21 00 00 00 3e 6f 09 00 1c 00 00 00 60 6f 09 00 aa 01 00 00 7d 6f 09 00 82 00 00 00 | -o..!...>o......`o......}o...... |
8d20 | 28 71 09 00 ac 00 00 00 ab 71 09 00 fe 00 00 00 58 72 09 00 60 00 00 00 57 73 09 00 85 01 00 00 | (q.......q......Xr..`...Ws...... |
8d40 | b8 73 09 00 01 00 00 00 3e 75 09 00 76 00 00 00 40 75 09 00 6b 00 00 00 b7 75 09 00 60 00 00 00 | .s......>u..v...@u..k....u..`... |
8d60 | 23 76 09 00 a9 00 00 00 84 76 09 00 c9 00 00 00 2e 77 09 00 9b 00 00 00 f8 77 09 00 c3 00 00 00 | #v.......v.......w.......w...... |
8d80 | 94 78 09 00 3c 00 00 00 58 79 09 00 38 00 00 00 95 79 09 00 95 00 00 00 ce 79 09 00 2e 00 00 00 | .x..<...Xy..8....y.......y...... |
8da0 | 64 7a 09 00 57 00 00 00 93 7a 09 00 61 00 00 00 eb 7a 09 00 69 00 00 00 4d 7b 09 00 4b 00 00 00 | dz..W....z..a....z..i...M{..K... |
8dc0 | b7 7b 09 00 a4 00 00 00 03 7c 09 00 52 00 00 00 a8 7c 09 00 53 00 00 00 fb 7c 09 00 65 00 00 00 | .{.......|..R....|..S....|..e... |
8de0 | 4f 7d 09 00 35 00 00 00 b5 7d 09 00 51 00 00 00 eb 7d 09 00 a7 00 00 00 3d 7e 09 00 8a 00 00 00 | O}..5....}..Q....}......=~...... |
8e00 | e5 7e 09 00 96 00 00 00 70 7f 09 00 81 00 00 00 07 80 09 00 7f 00 00 00 89 80 09 00 88 00 00 00 | .~......p....................... |
8e20 | 09 81 09 00 e3 00 00 00 92 81 09 00 c3 00 00 00 76 82 09 00 3a 00 00 00 3a 83 09 00 5a 00 00 00 | ................v...:...:...Z... |
8e40 | 75 83 09 00 65 00 00 00 d0 83 09 00 c3 00 00 00 36 84 09 00 db 00 00 00 fa 84 09 00 50 00 00 00 | u...e...........6...........P... |
8e60 | d6 85 09 00 1d 01 00 00 27 86 09 00 f2 00 00 00 45 87 09 00 48 00 00 00 38 88 09 00 b0 00 00 00 | ........'.......E...H...8....... |
8e80 | 81 88 09 00 9f 00 00 00 32 89 09 00 1f 00 00 00 d2 89 09 00 71 00 00 00 f2 89 09 00 75 00 00 00 | ........2...........q.......u... |
8ea0 | 64 8a 09 00 75 00 00 00 da 8a 09 00 dc 00 00 00 50 8b 09 00 3f 00 00 00 2d 8c 09 00 6d 00 00 00 | d...u...........P...?...-...m... |
8ec0 | 6d 8c 09 00 da 00 00 00 db 8c 09 00 1c 00 00 00 b6 8d 09 00 13 00 00 00 d3 8d 09 00 20 00 00 00 | m............................... |
8ee0 | e7 8d 09 00 14 00 00 00 08 8e 09 00 13 00 00 00 1d 8e 09 00 03 01 00 00 31 8e 09 00 1d 00 00 00 | ........................1....... |
8f00 | 35 8f 09 00 1d 00 00 00 53 8f 09 00 23 00 00 00 71 8f 09 00 1d 00 00 00 95 8f 09 00 29 00 00 00 | 5.......S...#...q...........)... |
8f20 | b3 8f 09 00 31 00 00 00 dd 8f 09 00 31 00 00 00 0f 90 09 00 33 00 00 00 41 90 09 00 33 00 00 00 | ....1.......1.......3...A...3... |
8f40 | 75 90 09 00 10 00 00 00 a9 90 09 00 0c 00 00 00 ba 90 09 00 2d 00 00 00 c7 90 09 00 2c 00 00 00 | u...................-.......,... |
8f60 | f5 90 09 00 12 00 00 00 22 91 09 00 2c 00 00 00 35 91 09 00 25 00 00 00 62 91 09 00 3c 00 00 00 | ........"...,...5...%...b...<... |
8f80 | 88 91 09 00 12 00 00 00 c5 91 09 00 35 00 00 00 d8 91 09 00 13 00 00 00 0e 92 09 00 34 00 00 00 | ............5...............4... |
8fa0 | 22 92 09 00 16 00 00 00 57 92 09 00 1c 00 00 00 6e 92 09 00 12 00 00 00 8b 92 09 00 34 00 00 00 | ".......W.......n...........4... |
8fc0 | 9e 92 09 00 13 00 00 00 d3 92 09 00 1d 00 00 00 e7 92 09 00 30 00 00 00 05 93 09 00 1f 00 00 00 | ....................0........... |
8fe0 | 36 93 09 00 13 00 00 00 56 93 09 00 16 00 00 00 6a 93 09 00 25 01 00 00 81 93 09 00 d3 00 00 00 | 6.......V.......j...%........... |
9000 | a7 94 09 00 13 00 00 00 7b 95 09 00 38 00 00 00 8f 95 09 00 16 00 00 00 c8 95 09 00 9d 00 00 00 | ........{...8................... |
9020 | df 95 09 00 41 00 00 00 7d 96 09 00 38 00 00 00 bf 96 09 00 1e 00 00 00 f8 96 09 00 22 00 00 00 | ....A...}...8..............."... |
9040 | 17 97 09 00 5d 00 00 00 3a 97 09 00 55 00 00 00 98 97 09 00 1e 00 00 00 ee 97 09 00 44 00 00 00 | ....]...:...U...............D... |
9060 | 0d 98 09 00 25 00 00 00 52 98 09 00 08 01 00 00 78 98 09 00 fd 01 00 00 81 99 09 00 87 00 00 00 | ....%...R.......x............... |
9080 | 7f 9b 09 00 54 00 00 00 07 9c 09 00 5b 00 00 00 5c 9c 09 00 87 02 00 00 b8 9c 09 00 c3 00 00 00 | ....T.......[...\............... |
90a0 | 40 9f 09 00 59 00 00 00 04 a0 09 00 1e 00 00 00 5e a0 09 00 2a 00 00 00 7d a0 09 00 2f 00 00 00 | @...Y...........^...*...}.../... |
90c0 | a8 a0 09 00 27 00 00 00 d8 a0 09 00 37 00 00 00 00 a1 09 00 54 00 00 00 38 a1 09 00 4f 00 00 00 | ....'.......7.......T...8...O... |
90e0 | 8d a1 09 00 59 00 00 00 dd a1 09 00 4d 00 00 00 37 a2 09 00 5f 00 00 00 85 a2 09 00 33 00 00 00 | ....Y.......M...7..._.......3... |
9100 | e5 a2 09 00 64 00 00 00 19 a3 09 00 7b 00 00 00 7e a3 09 00 49 00 00 00 fa a3 09 00 1e 00 00 00 | ....d.......{...~...I........... |
9120 | 44 a4 09 00 f3 00 00 00 63 a4 09 00 f1 00 00 00 57 a5 09 00 5e 00 00 00 49 a6 09 00 79 00 00 00 | D.......c.......W...^...I...y... |
9140 | a8 a6 09 00 54 00 00 00 22 a7 09 00 43 00 00 00 77 a7 09 00 4f 00 00 00 bb a7 09 00 29 00 00 00 | ....T..."...C...w...O.......)... |
9160 | 0b a8 09 00 82 00 00 00 35 a8 09 00 22 00 00 00 b8 a8 09 00 47 02 00 00 db a8 09 00 47 02 00 00 | ........5...".......G.......G... |
9180 | 23 ab 09 00 fc 00 00 00 6b ad 09 00 9c 00 00 00 68 ae 09 00 2c 00 00 00 05 af 09 00 16 00 00 00 | #.......k.......h...,........... |
91a0 | 32 af 09 00 53 00 00 00 49 af 09 00 7d 00 00 00 9d af 09 00 66 00 00 00 1b b0 09 00 b4 00 00 00 | 2...S...I...}.......f........... |
91c0 | 82 b0 09 00 55 00 00 00 37 b1 09 00 22 00 00 00 8d b1 09 00 18 00 00 00 b0 b1 09 00 31 00 00 00 | ....U...7..."...............1... |
91e0 | c9 b1 09 00 1b 00 00 00 fb b1 09 00 1a 00 00 00 17 b2 09 00 17 00 00 00 32 b2 09 00 17 00 00 00 | ........................2....... |
9200 | 4a b2 09 00 17 00 00 00 62 b2 09 00 35 00 00 00 7a b2 09 00 41 00 00 00 b0 b2 09 00 25 00 00 00 | J.......b...5...z...A.......%... |
9220 | f2 b2 09 00 2d 00 00 00 18 b3 09 00 3e 00 00 00 46 b3 09 00 24 00 00 00 85 b3 09 00 28 00 00 00 | ....-.......>...F...$.......(... |
9240 | aa b3 09 00 4d 00 00 00 d3 b3 09 00 50 00 00 00 21 b4 09 00 33 00 00 00 72 b4 09 00 35 00 00 00 | ....M.......P...!...3...r...5... |
9260 | a6 b4 09 00 20 00 00 00 dc b4 09 00 73 02 00 00 fd b4 09 00 74 02 00 00 71 b7 09 00 c9 00 00 00 | ............s.......t...q....... |
9280 | e6 b9 09 00 28 00 00 00 b0 ba 09 00 5c 00 00 00 d9 ba 09 00 23 00 00 00 36 bb 09 00 27 00 00 00 | ....(.......\.......#...6...'... |
92a0 | 5a bb 09 00 18 00 00 00 82 bb 09 00 25 00 00 00 9b bb 09 00 1c 00 00 00 c1 bb 09 00 53 00 00 00 | Z...........%...............S... |
92c0 | de bb 09 00 53 00 00 00 32 bc 09 00 16 00 00 00 86 bc 09 00 7e 00 00 00 9d bc 09 00 33 00 00 00 | ....S...2...........~.......3... |
92e0 | 1c bd 09 00 25 00 00 00 50 bd 09 00 af 00 00 00 76 bd 09 00 d0 00 00 00 26 be 09 00 7e 00 00 00 | ....%...P.......v.......&...~... |
9300 | f7 be 09 00 25 00 00 00 76 bf 09 00 3d 00 00 00 9c bf 09 00 04 01 00 00 da bf 09 00 49 00 00 00 | ....%...v...=...............I... |
9320 | df c0 09 00 bd 00 00 00 29 c1 09 00 78 00 00 00 e7 c1 09 00 41 00 00 00 60 c2 09 00 43 00 00 00 | ........)...x.......A...`...C... |
9340 | a2 c2 09 00 3d 00 00 00 e6 c2 09 00 27 00 00 00 24 c3 09 00 1a 00 00 00 4c c3 09 00 d2 00 00 00 | ....=.......'...$.......L....... |
9360 | 67 c3 09 00 5b 00 00 00 3a c4 09 00 ab 00 00 00 96 c4 09 00 5a 00 00 00 42 c5 09 00 5a 00 00 00 | g...[...:...........Z...B...Z... |
9380 | 9d c5 09 00 77 00 00 00 f8 c5 09 00 7d 00 00 00 70 c6 09 00 dd 00 00 00 ee c6 09 00 3f 00 00 00 | ....w.......}...p...........?... |
93a0 | cc c7 09 00 40 00 00 00 0c c8 09 00 55 00 00 00 4d c8 09 00 af 00 00 00 a3 c8 09 00 5e 00 00 00 | ....@.......U...M...........^... |
93c0 | 53 c9 09 00 72 00 00 00 b2 c9 09 00 3b 00 00 00 25 ca 09 00 65 00 00 00 61 ca 09 00 37 00 00 00 | S...r.......;...%...e...a...7... |
93e0 | c7 ca 09 00 25 00 00 00 ff ca 09 00 51 00 00 00 25 cb 09 00 55 00 00 00 77 cb 09 00 38 00 00 00 | ....%.......Q...%...U...w...8... |
9400 | cd cb 09 00 13 00 00 00 06 cc 09 00 45 00 00 00 1a cc 09 00 40 00 00 00 60 cc 09 00 26 00 00 00 | ............E.......@...`...&... |
9420 | a1 cc 09 00 24 00 00 00 c8 cc 09 00 44 00 00 00 ed cc 09 00 4b 00 00 00 32 cd 09 00 4b 00 00 00 | ....$.......D.......K...2...K... |
9440 | 7e cd 09 00 1f 00 00 00 ca cd 09 00 96 00 00 00 ea cd 09 00 26 00 00 00 81 ce 09 00 29 00 00 00 | ~...................&.......)... |
9460 | a8 ce 09 00 22 00 00 00 d2 ce 09 00 1f 00 00 00 f5 ce 09 00 24 00 00 00 15 cf 09 00 28 00 00 00 | ...."...............$.......(... |
9480 | 3a cf 09 00 18 00 00 00 63 cf 09 00 1b 00 00 00 7c cf 09 00 26 00 00 00 98 cf 09 00 29 00 00 00 | :.......c.......|...&.......)... |
94a0 | bf cf 09 00 57 00 00 00 e9 cf 09 00 54 00 00 00 41 d0 09 00 52 00 00 00 96 d0 09 00 51 00 00 00 | ....W.......T...A...R.......Q... |
94c0 | e9 d0 09 00 40 00 00 00 3b d1 09 00 28 00 00 00 7c d1 09 00 70 00 00 00 a5 d1 09 00 26 00 00 00 | ....@...;...(...|...p.......&... |
94e0 | 16 d2 09 00 79 00 00 00 3d d2 09 00 56 00 00 00 b7 d2 09 00 0b 00 00 00 0e d3 09 00 2c 00 00 00 | ....y...=...V...............,... |
9500 | 1a d3 09 00 35 00 00 00 47 d3 09 00 3f 00 00 00 7d d3 09 00 2d 00 00 00 bd d3 09 00 33 00 00 00 | ....5...G...?...}...-.......3... |
9520 | eb d3 09 00 31 00 00 00 1f d4 09 00 69 00 00 00 51 d4 09 00 9c 00 00 00 bb d4 09 00 89 00 00 00 | ....1.......i...Q............... |
9540 | 58 d5 09 00 56 00 00 00 e2 d5 09 00 4c 00 00 00 39 d6 09 00 3c 00 00 00 86 d6 09 00 9e 00 00 00 | X...V.......L...9...<........... |
9560 | c3 d6 09 00 26 00 00 00 62 d7 09 00 27 00 00 00 89 d7 09 00 1f 00 00 00 b1 d7 09 00 5c 00 00 00 | ....&...b...'...............\... |
9580 | d1 d7 09 00 3f 00 00 00 2e d8 09 00 36 00 00 00 6e d8 09 00 38 00 00 00 a5 d8 09 00 66 00 00 00 | ....?.......6...n...8.......f... |
95a0 | de d8 09 00 24 00 00 00 45 d9 09 00 27 00 00 00 6a d9 09 00 27 00 00 00 92 d9 09 00 1e 00 00 00 | ....$...E...'...j...'........... |
95c0 | ba d9 09 00 24 01 00 00 d9 d9 09 00 a1 00 00 00 fe da 09 00 3c 00 00 00 a0 db 09 00 6e 00 00 00 | ....$...............<.......n... |
95e0 | dd db 09 00 83 00 00 00 4c dc 09 00 3e 00 00 00 d0 dc 09 00 55 00 00 00 0f dd 09 00 27 01 00 00 | ........L...>.......U.......'... |
9600 | 65 dd 09 00 50 00 00 00 8d de 09 00 22 00 00 00 de de 09 00 5a 00 00 00 01 df 09 00 2c 00 00 00 | e...P.......".......Z.......,... |
9620 | 5c df 09 00 47 00 00 00 89 df 09 00 7b 00 00 00 d1 df 09 00 77 00 00 00 4d e0 09 00 65 00 00 00 | \...G.......{.......w...M...e... |
9640 | c5 e0 09 00 65 00 00 00 2b e1 09 00 5a 00 00 00 91 e1 09 00 5a 00 00 00 ec e1 09 00 72 00 00 00 | ....e...+...Z.......Z.......r... |
9660 | 47 e2 09 00 2e 00 00 00 ba e2 09 00 24 00 00 00 e9 e2 09 00 61 00 00 00 0e e3 09 00 55 00 00 00 | G...........$.......a.......U... |
9680 | 70 e3 09 00 2b 00 00 00 c6 e3 09 00 29 00 00 00 f2 e3 09 00 27 00 00 00 1c e4 09 00 28 00 00 00 | p...+.......).......'.......(... |
96a0 | 44 e4 09 00 29 00 00 00 6d e4 09 00 27 00 00 00 97 e4 09 00 28 00 00 00 bf e4 09 00 4c 00 00 00 | D...)...m...'.......(.......L... |
96c0 | e8 e4 09 00 4c 00 00 00 35 e5 09 00 38 00 00 00 82 e5 09 00 54 00 00 00 bb e5 09 00 0b 00 00 00 | ....L...5...8.......T........... |
96e0 | 10 e6 09 00 0f 00 00 00 1c e6 09 00 49 00 00 00 2c e6 09 00 0b 00 00 00 76 e6 09 00 43 00 00 00 | ............I...,.......v...C... |
9700 | 82 e6 09 00 43 00 00 00 c6 e6 09 00 36 00 00 00 0a e7 09 00 29 00 00 00 41 e7 09 00 2e 00 00 00 | ....C.......6.......)...A....... |
9720 | 6b e7 09 00 22 00 00 00 9a e7 09 00 77 00 00 00 bd e7 09 00 28 00 00 00 35 e8 09 00 3e 00 00 00 | k...".......w.......(...5...>... |
9740 | 5e e8 09 00 28 00 00 00 9d e8 09 00 3e 00 00 00 c6 e8 09 00 29 00 00 00 05 e9 09 00 5d 00 00 00 | ^...(.......>.......).......]... |
9760 | 2f e9 09 00 c9 00 00 00 8d e9 09 00 3f 00 00 00 57 ea 09 00 dd 00 00 00 97 ea 09 00 4c 00 00 00 | /...........?...W...........L... |
9780 | 75 eb 09 00 7f 00 00 00 c2 eb 09 00 1d 00 00 00 42 ec 09 00 73 00 00 00 60 ec 09 00 31 00 00 00 | u...............B...s...`...1... |
97a0 | d4 ec 09 00 d7 00 00 00 06 ed 09 00 1e 00 00 00 de ed 09 00 24 00 00 00 fd ed 09 00 5c 00 00 00 | ....................$.......\... |
97c0 | 22 ee 09 00 21 00 00 00 7f ee 09 00 52 00 00 00 a1 ee 09 00 5c 00 00 00 f4 ee 09 00 b7 00 00 00 | "...!.......R.......\........... |
97e0 | 51 ef 09 00 44 01 00 00 09 f0 09 00 a5 01 00 00 4e f1 09 00 27 00 00 00 f4 f2 09 00 88 01 00 00 | Q...D...........N...'........... |
9800 | 1c f3 09 00 30 00 00 00 a5 f4 09 00 3e 00 00 00 d6 f4 09 00 33 01 00 00 15 f5 09 00 41 00 00 00 | ....0.......>.......3.......A... |
9820 | 49 f6 09 00 d1 00 00 00 8b f6 09 00 c2 01 00 00 5d f7 09 00 49 00 00 00 20 f9 09 00 e7 00 00 00 | I...............]...I........... |
9840 | 6a f9 09 00 65 01 00 00 52 fa 09 00 1f 00 00 00 b8 fb 09 00 30 00 00 00 d8 fb 09 00 33 00 00 00 | j...e...R...........0.......3... |
9860 | 09 fc 09 00 11 00 00 00 3d fc 09 00 05 00 00 00 4f fc 09 00 03 00 00 00 55 fc 09 00 0e 00 00 00 | ........=.......O.......U....... |
9880 | 59 fc 09 00 1b 00 00 00 68 fc 09 00 1d 00 00 00 84 fc 09 00 1f 00 00 00 a2 fc 09 00 04 00 00 00 | Y.......h....................... |
98a0 | c2 fc 09 00 0d 00 00 00 c7 fc 09 00 32 00 00 00 d5 fc 09 00 29 00 00 00 08 fd 09 00 04 00 00 00 | ............2.......)........... |
98c0 | 32 fd 09 00 07 00 00 00 37 fd 09 00 09 00 00 00 3f fd 09 00 0d 00 00 00 49 fd 09 00 17 00 00 00 | 2.......7.......?.......I....... |
98e0 | 57 fd 09 00 0f 00 00 00 6f fd 09 00 0d 00 00 00 7f fd 09 00 06 00 00 00 8d fd 09 00 19 00 00 00 | W.......o....................... |
9900 | 94 fd 09 00 14 00 00 00 ae fd 09 00 05 00 00 00 c3 fd 09 00 15 00 00 00 c9 fd 09 00 04 00 00 00 | ................................ |
9920 | df fd 09 00 04 00 00 00 e4 fd 09 00 06 00 00 00 e9 fd 09 00 51 00 00 00 f0 fd 09 00 4a 01 00 00 | ....................Q.......J... |
9940 | 42 fe 09 00 50 01 00 00 8d ff 09 00 4d 00 00 00 de 00 0a 00 05 00 00 00 2c 01 0a 00 12 00 00 00 | B...P.......M...........,....... |
9960 | 32 01 0a 00 15 00 00 00 45 01 0a 00 22 00 00 00 5b 01 0a 00 10 00 00 00 7e 01 0a 00 12 00 00 00 | 2.......E..."...[.......~....... |
9980 | 8f 01 0a 00 0e 00 00 00 a2 01 0a 00 10 00 00 00 b1 01 0a 00 13 00 00 00 c2 01 0a 00 16 00 00 00 | ................................ |
99a0 | d6 01 0a 00 06 00 00 00 ed 01 0a 00 09 00 00 00 f4 01 0a 00 1d 00 00 00 fe 01 0a 00 05 00 00 00 | ................................ |
99c0 | 1c 02 0a 00 0b 00 00 00 22 02 0a 00 13 00 00 00 2e 02 0a 00 0d 00 00 00 42 02 0a 00 05 00 00 00 | ........"...............B....... |
99e0 | 50 02 0a 00 68 00 00 00 56 02 0a 00 67 00 00 00 bf 02 0a 00 79 00 00 00 27 03 0a 00 66 00 00 00 | P...h...V...g.......y...'...f... |
9a00 | a1 03 0a 00 03 00 00 00 08 04 0a 00 08 00 00 00 0c 04 0a 00 31 00 00 00 15 04 0a 00 07 00 00 00 | ....................1........... |
9a20 | 47 04 0a 00 08 00 00 00 4f 04 0a 00 38 00 00 00 58 04 0a 00 10 00 00 00 91 04 0a 00 0b 00 00 00 | G.......O...8...X............... |
9a40 | a2 04 0a 00 03 00 00 00 ae 04 0a 00 1d 00 00 00 b2 04 0a 00 06 00 00 00 d0 04 0a 00 1d 00 00 00 | ................................ |
9a60 | d7 04 0a 00 09 00 00 00 f5 04 0a 00 26 00 00 00 ff 04 0a 00 6d 00 00 00 26 05 0a 00 46 00 00 00 | ............&.......m...&...F... |
9a80 | 94 05 0a 00 32 00 00 00 db 05 0a 00 46 00 00 00 0e 06 0a 00 04 00 00 00 55 06 0a 00 08 00 00 00 | ....2.......F...........U....... |
9aa0 | 5a 06 0a 00 07 00 00 00 63 06 0a 00 46 00 00 00 6b 06 0a 00 0d 00 00 00 b2 06 0a 00 05 00 00 00 | Z.......c...F...k............... |
9ac0 | c0 06 0a 00 1c 00 00 00 c6 06 0a 00 73 00 00 00 e3 06 0a 00 04 00 00 00 57 07 0a 00 06 00 00 00 | ............s...........W....... |
9ae0 | 5c 07 0a 00 04 00 00 00 63 07 0a 00 05 00 00 00 68 07 0a 00 10 00 00 00 6e 07 0a 00 3c 00 00 00 | \.......c.......h.......n...<... |
9b00 | 7f 07 0a 00 32 00 00 00 bc 07 0a 00 1c 00 00 00 ef 07 0a 00 6d 00 00 00 0c 08 0a 00 08 00 00 00 | ....2...............m........... |
9b20 | 7a 08 0a 00 14 00 00 00 83 08 0a 00 14 00 00 00 98 08 0a 00 14 00 00 00 ad 08 0a 00 14 00 00 00 | z............................... |
9b40 | c2 08 0a 00 14 00 00 00 d7 08 0a 00 14 00 00 00 ec 08 0a 00 14 00 00 00 01 09 0a 00 06 00 00 00 | ................................ |
9b60 | 16 09 0a 00 06 00 00 00 1d 09 0a 00 06 00 00 00 24 09 0a 00 06 00 00 00 2b 09 0a 00 06 00 00 00 | ................$.......+....... |
9b80 | 32 09 0a 00 06 00 00 00 39 09 0a 00 06 00 00 00 40 09 0a 00 06 00 00 00 47 09 0a 00 1f 00 00 00 | 2.......9.......@.......G....... |
9ba0 | 4e 09 0a 00 08 00 00 00 6e 09 0a 00 08 00 00 00 77 09 0a 00 a4 00 00 00 80 09 0a 00 03 00 00 00 | N.......n.......w............... |
9bc0 | 25 0a 0a 00 0d 00 00 00 29 0a 0a 00 74 00 00 00 37 0a 0a 00 9a 00 00 00 ac 0a 0a 00 4c 00 00 00 | %.......)...t...7...........L... |
9be0 | 47 0b 0a 00 04 00 00 00 94 0b 0a 00 0c 00 00 00 99 0b 0a 00 3f 00 00 00 a6 0b 0a 00 29 00 00 00 | G...................?.......)... |
9c00 | e6 0b 0a 00 37 00 00 00 10 0c 0a 00 2c 00 00 00 48 0c 0a 00 0e 00 00 00 75 0c 0a 00 33 00 00 00 | ....7.......,...H.......u...3... |
9c20 | 84 0c 0a 00 33 00 00 00 b8 0c 0a 00 0b 00 00 00 ec 0c 0a 00 14 00 00 00 f8 0c 0a 00 71 00 00 00 | ....3.......................q... |
9c40 | 0d 0d 0a 00 46 00 00 00 7f 0d 0a 00 04 00 00 00 c6 0d 0a 00 0b 00 00 00 cb 0d 0a 00 12 00 00 00 | ....F........................... |
9c60 | d7 0d 0a 00 0f 00 00 00 ea 0d 0a 00 08 00 00 00 fa 0d 0a 00 06 00 00 00 03 0e 0a 00 03 00 00 00 | ................................ |
9c80 | 0a 0e 0a 00 0a 00 00 00 0e 0e 0a 00 0b 00 00 00 19 0e 0a 00 40 00 00 00 25 0e 0a 00 07 00 00 00 | ....................@...%....... |
9ca0 | 66 0e 0a 00 06 00 00 00 6e 0e 0a 00 05 00 00 00 75 0e 0a 00 9b 00 00 00 7b 0e 0a 00 11 00 00 00 | f.......n.......u.......{....... |
9cc0 | 17 0f 0a 00 0d 00 00 00 29 0f 0a 00 13 00 00 00 37 0f 0a 00 15 00 00 00 4b 0f 0a 00 18 00 00 00 | ........).......7.......K....... |
9ce0 | 61 0f 0a 00 1b 00 00 00 7a 0f 0a 00 0a 00 00 00 96 0f 0a 00 12 00 00 00 a1 0f 0a 00 1c 00 00 00 | a.......z....................... |
9d00 | b4 0f 0a 00 0f 00 00 00 d1 0f 0a 00 05 00 00 00 e1 0f 0a 00 0e 00 00 00 e7 0f 0a 00 0e 00 00 00 | ................................ |
9d20 | f6 0f 0a 00 0d 00 00 00 05 10 0a 00 2a 00 00 00 13 10 0a 00 15 00 00 00 3e 10 0a 00 31 00 00 00 | ............*...........>...1... |
9d40 | 54 10 0a 00 39 00 00 00 86 10 0a 00 34 00 00 00 c0 10 0a 00 04 00 00 00 f5 10 0a 00 0b 00 00 00 | T...9.......4................... |
9d60 | fa 10 0a 00 09 00 00 00 06 11 0a 00 07 00 00 00 10 11 0a 00 05 00 00 00 18 11 0a 00 72 00 00 00 | ............................r... |
9d80 | 1e 11 0a 00 08 00 00 00 91 11 0a 00 0e 00 00 00 9a 11 0a 00 11 00 00 00 a9 11 0a 00 38 00 00 00 | ............................8... |
9da0 | bb 11 0a 00 0d 00 00 00 f4 11 0a 00 0d 00 00 00 02 12 0a 00 06 00 00 00 10 12 0a 00 3a 00 00 00 | ............................:... |
9dc0 | 17 12 0a 00 0b 00 00 00 52 12 0a 00 40 00 00 00 5e 12 0a 00 0e 00 00 00 9f 12 0a 00 0f 00 00 00 | ........R...@...^............... |
9de0 | ae 12 0a 00 07 00 00 00 be 12 0a 00 0e 00 00 00 c6 12 0a 00 0c 00 00 00 d5 12 0a 00 ad 00 00 00 | ................................ |
9e00 | e2 12 0a 00 0b 00 00 00 90 13 0a 00 06 00 00 00 9c 13 0a 00 04 00 00 00 a3 13 0a 00 d7 00 00 00 | ................................ |
9e20 | a8 13 0a 00 10 00 00 00 80 14 0a 00 ed 01 00 00 91 14 0a 00 0b 00 00 00 7f 16 0a 00 0b 00 00 00 | ................................ |
9e40 | 8b 16 0a 00 0c 00 00 00 97 16 0a 00 06 00 00 00 a4 16 0a 00 0e 00 00 00 ab 16 0a 00 58 00 00 00 | ............................X... |
9e60 | ba 16 0a 00 04 00 00 00 13 17 0a 00 04 00 00 00 18 17 0a 00 05 00 00 00 1d 17 0a 00 0e 00 00 00 | ................................ |
9e80 | 23 17 0a 00 47 00 00 00 32 17 0a 00 05 00 00 00 7a 17 0a 00 07 00 00 00 80 17 0a 00 68 00 00 00 | #...G...2.......z...........h... |
9ea0 | 88 17 0a 00 19 00 00 00 f1 17 0a 00 14 00 00 00 0b 18 0a 00 2c 00 00 00 20 18 0a 00 0b 00 00 00 | ....................,........... |
9ec0 | 4d 18 0a 00 09 00 00 00 59 18 0a 00 08 00 00 00 63 18 0a 00 53 00 00 00 6c 18 0a 00 08 00 00 00 | M.......Y.......c...S...l....... |
9ee0 | c0 18 0a 00 22 00 00 00 c9 18 0a 00 04 00 00 00 ec 18 0a 00 05 00 00 00 f1 18 0a 00 e2 00 00 00 | ...."........................... |
9f00 | f7 18 0a 00 43 00 00 00 da 19 0a 00 52 00 00 00 1e 1a 0a 00 42 00 00 00 71 1a 0a 00 3b 00 00 00 | ....C.......R.......B...q...;... |
9f20 | b4 1a 0a 00 42 00 00 00 f0 1a 0a 00 3a 00 00 00 33 1b 0a 00 24 00 00 00 6e 1b 0a 00 1a 00 00 00 | ....B.......:...3...$...n....... |
9f40 | 93 1b 0a 00 66 00 00 00 ae 1b 0a 00 6f 00 00 00 15 1c 0a 00 5d 01 00 00 85 1c 0a 00 48 00 00 00 | ....f.......o.......].......H... |
9f60 | e3 1d 0a 00 46 00 00 00 2c 1e 0a 00 31 00 00 00 73 1e 0a 00 31 00 00 00 a5 1e 0a 00 3e 00 00 00 | ....F...,...1...s...1.......>... |
9f80 | d7 1e 0a 00 23 00 00 00 16 1f 0a 00 18 00 00 00 3a 1f 0a 00 23 00 00 00 53 1f 0a 00 20 00 00 00 | ....#...........:...#...S....... |
9fa0 | 77 1f 0a 00 21 00 00 00 98 1f 0a 00 21 00 00 00 ba 1f 0a 00 3f 00 00 00 dc 1f 0a 00 78 00 00 00 | w...!.......!.......?.......x... |
9fc0 | 1c 20 0a 00 7f 00 00 00 95 20 0a 00 15 00 00 00 15 21 0a 00 2d 00 00 00 2b 21 0a 00 27 00 00 00 | .................!..-...+!..'... |
9fe0 | 59 21 0a 00 1d 00 00 00 81 21 0a 00 5c 00 00 00 9f 21 0a 00 1c 00 00 00 fc 21 0a 00 0c 00 00 00 | Y!.......!..\....!.......!...... |
a000 | 19 22 0a 00 21 00 00 00 26 22 0a 00 4e 00 00 00 48 22 0a 00 e0 00 00 00 97 22 0a 00 e0 00 00 00 | ."..!...&"..N...H"......."...... |
a020 | 78 23 0a 00 23 00 00 00 59 24 0a 00 3e 00 00 00 7d 24 0a 00 0c 00 00 00 bc 24 0a 00 12 00 00 00 | x#..#...Y$..>...}$.......$...... |
a040 | c9 24 0a 00 11 00 00 00 dc 24 0a 00 4d 00 00 00 ee 24 0a 00 b4 00 00 00 3c 25 0a 00 6c 00 00 00 | .$.......$..M....$......<%..l... |
a060 | f1 25 0a 00 6b 00 00 00 5e 26 0a 00 81 00 00 00 ca 26 0a 00 3b 00 00 00 4c 27 0a 00 12 00 00 00 | .%..k...^&.......&..;...L'...... |
a080 | 88 27 0a 00 8b 00 00 00 9b 27 0a 00 8c 00 00 00 27 28 0a 00 30 01 00 00 b4 28 0a 00 fb 00 00 00 | .'.......'......'(..0....(...... |
a0a0 | e5 29 0a 00 fc 00 00 00 e1 2a 0a 00 d5 00 00 00 de 2b 0a 00 94 00 00 00 b4 2c 0a 00 2c 01 00 00 | .).......*.......+.......,..,... |
a0c0 | 49 2d 0a 00 f6 01 00 00 76 2e 0a 00 67 00 00 00 6d 30 0a 00 67 00 00 00 d5 30 0a 00 da 00 00 00 | I-......v...g...m0..g....0...... |
a0e0 | 3d 31 0a 00 d9 00 00 00 18 32 0a 00 12 00 00 00 f2 32 0a 00 08 00 00 00 05 33 0a 00 b8 00 00 00 | =1.......2.......2.......3...... |
a100 | 0e 33 0a 00 14 01 00 00 c7 33 0a 00 18 00 00 00 dc 34 0a 00 18 00 00 00 f5 34 0a 00 1b 00 00 00 | .3.......3.......4.......4...... |
a120 | 0e 35 0a 00 1a 00 00 00 2a 35 0a 00 15 00 00 00 45 35 0a 00 0d 00 00 00 5b 35 0a 00 14 00 00 00 | .5......*5......E5......[5...... |
a140 | 69 35 0a 00 0a 00 00 00 7e 35 0a 00 0b 00 00 00 89 35 0a 00 0a 00 00 00 95 35 0a 00 0b 00 00 00 | i5......~5.......5.......5...... |
a160 | a0 35 0a 00 0a 00 00 00 ac 35 0a 00 0a 00 00 00 b7 35 0a 00 4d 00 00 00 c2 35 0a 00 7e 03 00 00 | .5.......5.......5..M....5..~... |
a180 | 10 36 0a 00 10 00 00 00 8f 39 0a 00 10 00 00 00 a0 39 0a 00 a0 01 00 00 b1 39 0a 00 98 01 00 00 | .6.......9.......9.......9...... |
a1a0 | 52 3b 0a 00 99 01 00 00 eb 3c 0a 00 10 00 00 00 85 3e 0a 00 4a 00 00 00 96 3e 0a 00 16 00 00 00 | R;.......<.......>..J....>...... |
a1c0 | e1 3e 0a 00 93 00 00 00 f8 3e 0a 00 2f 01 00 00 8c 3f 0a 00 2e 01 00 00 bc 40 0a 00 0b 00 00 00 | .>.......>../....?.......@...... |
a1e0 | eb 41 0a 00 2e 00 00 00 f7 41 0a 00 2d 00 00 00 26 42 0a 00 37 00 00 00 54 42 0a 00 33 00 00 00 | .A.......A..-...&B..7...TB..3... |
a200 | 8c 42 0a 00 29 00 00 00 c0 42 0a 00 3b 00 00 00 ea 42 0a 00 1e 00 00 00 26 43 0a 00 3b 00 00 00 | .B..)....B..;....B......&C..;... |
a220 | 45 43 0a 00 2e 00 00 00 81 43 0a 00 4e 00 00 00 b0 43 0a 00 11 00 00 00 ff 43 0a 00 06 00 00 00 | EC.......C..N....C.......C...... |
a240 | 11 44 0a 00 11 00 00 00 18 44 0a 00 06 00 00 00 2a 44 0a 00 2d 00 00 00 31 44 0a 00 25 00 00 00 | .D.......D......*D..-...1D..%... |
a260 | 5f 44 0a 00 09 00 00 00 85 44 0a 00 b9 00 00 00 8f 44 0a 00 0c 00 00 00 49 45 0a 00 0c 00 00 00 | _D.......D.......D......IE...... |
a280 | 56 45 0a 00 0c 00 00 00 63 45 0a 00 13 00 00 00 70 45 0a 00 30 00 00 00 84 45 0a 00 31 00 00 00 | VE......cE......pE..0....E..1... |
a2a0 | b5 45 0a 00 07 00 00 00 e7 45 0a 00 07 00 00 00 ef 45 0a 00 0d 00 00 00 f7 45 0a 00 14 00 00 00 | .E.......E.......E.......E...... |
a2c0 | 05 46 0a 00 1d 00 00 00 1a 46 0a 00 49 00 00 00 38 46 0a 00 19 00 00 00 82 46 0a 00 0a 00 00 00 | .F.......F..I...8F.......F...... |
a2e0 | 9c 46 0a 00 24 00 00 00 a7 46 0a 00 27 00 00 00 cc 46 0a 00 0b 00 00 00 f4 46 0a 00 10 00 00 00 | .F..$....F..'....F.......F...... |
a300 | 00 47 0a 00 10 00 00 00 11 47 0a 00 70 00 00 00 22 47 0a 00 57 00 00 00 93 47 0a 00 42 00 00 00 | .G.......G..p..."G..W....G..B... |
a320 | eb 47 0a 00 32 00 00 00 2e 48 0a 00 37 00 00 00 61 48 0a 00 5a 00 00 00 99 48 0a 00 a3 00 00 00 | .G..2....H..7...aH..Z....H...... |
a340 | f4 48 0a 00 74 00 00 00 98 49 0a 00 35 01 00 00 0d 4a 0a 00 73 00 00 00 43 4b 0a 00 16 01 00 00 | .H..t....I..5....J..s...CK...... |
a360 | b7 4b 0a 00 7e 00 00 00 ce 4c 0a 00 49 00 00 00 4d 4d 0a 00 2f 02 00 00 97 4d 0a 00 6f 00 00 00 | .K..~....L..I...MM../....M..o... |
a380 | c7 4f 0a 00 39 01 00 00 37 50 0a 00 dd 00 00 00 71 51 0a 00 20 00 00 00 4f 52 0a 00 30 00 00 00 | .O..9...7P......qQ......OR..0... |
a3a0 | 70 52 0a 00 14 00 00 00 a1 52 0a 00 2c 00 00 00 b6 52 0a 00 90 00 00 00 e3 52 0a 00 52 00 00 00 | pR.......R..,....R.......R..R... |
a3c0 | 74 53 0a 00 58 00 00 00 c7 53 0a 00 26 00 00 00 20 54 0a 00 58 00 00 00 47 54 0a 00 e4 00 00 00 | tS..X....S..&....T..X...GT...... |
a3e0 | a0 54 0a 00 68 00 00 00 85 55 0a 00 5d 00 00 00 ee 55 0a 00 6c 00 00 00 4c 56 0a 00 5a 00 00 00 | .T..h....U..]....U..l...LV..Z... |
a400 | b9 56 0a 00 a4 00 00 00 14 57 0a 00 eb 00 00 00 b9 57 0a 00 41 00 00 00 a5 58 0a 00 52 00 00 00 | .V.......W.......W..A....X..R... |
a420 | e7 58 0a 00 6d 00 00 00 3a 59 0a 00 c7 00 00 00 a8 59 0a 00 f1 00 00 00 70 5a 0a 00 08 00 00 00 | .X..m...:Y.......Y......pZ...... |
a440 | 62 5b 0a 00 35 00 00 00 6b 5b 0a 00 32 00 00 00 a1 5b 0a 00 4c 00 00 00 d4 5b 0a 00 30 00 00 00 | b[..5...k[..2....[..L....[..0... |
a460 | 21 5c 0a 00 38 00 00 00 52 5c 0a 00 36 00 00 00 8b 5c 0a 00 19 00 00 00 c2 5c 0a 00 3a 00 00 00 | !\..8...R\..6....\.......\..:... |
a480 | dc 5c 0a 00 37 00 00 00 17 5d 0a 00 7b 01 00 00 4f 5d 0a 00 36 00 00 00 cb 5e 0a 00 47 00 00 00 | .\..7....]..{...O]..6....^..G... |
a4a0 | 02 5f 0a 00 55 00 00 00 4a 5f 0a 00 35 00 00 00 a0 5f 0a 00 29 00 00 00 d6 5f 0a 00 23 00 00 00 | ._..U...J_..5...._..)...._..#... |
a4c0 | 00 60 0a 00 24 00 00 00 24 60 0a 00 af 00 00 00 49 60 0a 00 6c 00 00 00 f9 60 0a 00 a7 00 00 00 | .`..$...$`......I`..l....`...... |
a4e0 | 66 61 0a 00 ee 00 00 00 0e 62 0a 00 47 00 00 00 fd 62 0a 00 47 00 00 00 45 63 0a 00 3a 00 00 00 | fa.......b..G....b..G...Ec..:... |
a500 | 8d 63 0a 00 4b 00 00 00 c8 63 0a 00 5a 01 00 00 14 64 0a 00 9f 01 00 00 6f 65 0a 00 b5 00 00 00 | .c..K....c..Z....d......oe...... |
a520 | 0f 67 0a 00 51 00 00 00 c5 67 0a 00 31 00 00 00 17 68 0a 00 1a 00 00 00 49 68 0a 00 4c 00 00 00 | .g..Q....g..1....h......Ih..L... |
a540 | 64 68 0a 00 80 00 00 00 b1 68 0a 00 26 00 00 00 32 69 0a 00 26 00 00 00 59 69 0a 00 40 00 00 00 | dh.......h..&...2i..&...Yi..@... |
a560 | 80 69 0a 00 09 00 00 00 c1 69 0a 00 3c 00 00 00 cb 69 0a 00 42 00 00 00 08 6a 0a 00 b1 00 00 00 | .i.......i..<....i..B....j...... |
a580 | 4b 6a 0a 00 54 00 00 00 fd 6a 0a 00 2c 00 00 00 52 6b 0a 00 47 00 00 00 7f 6b 0a 00 bc 00 00 00 | Kj..T....j..,...Rk..G....k...... |
a5a0 | c7 6b 0a 00 bf 00 00 00 84 6c 0a 00 1e 00 00 00 44 6d 0a 00 37 00 00 00 63 6d 0a 00 33 00 00 00 | .k.......l......Dm..7...cm..3... |
a5c0 | 9b 6d 0a 00 9a 00 00 00 cf 6d 0a 00 01 00 00 00 6a 6e 0a 00 2c 00 00 00 6c 6e 0a 00 11 00 00 00 | .m.......m......jn..,...ln...... |
a5e0 | 99 6e 0a 00 06 00 00 00 ab 6e 0a 00 06 00 00 00 b2 6e 0a 00 06 00 00 00 b9 6e 0a 00 06 00 00 00 | .n.......n.......n.......n...... |
a600 | c0 6e 0a 00 06 00 00 00 c7 6e 0a 00 06 00 00 00 ce 6e 0a 00 06 00 00 00 d5 6e 0a 00 06 00 00 00 | .n.......n.......n.......n...... |
a620 | dc 6e 0a 00 06 00 00 00 e3 6e 0a 00 06 00 00 00 ea 6e 0a 00 0e 00 00 00 f1 6e 0a 00 01 00 00 00 | .n.......n.......n.......n...... |
a640 | 00 6f 0a 00 11 00 00 00 02 6f 0a 00 0a 00 00 00 14 6f 0a 00 1a 00 00 00 1f 6f 0a 00 b7 00 00 00 | .o.......o.......o.......o...... |
a660 | 3a 6f 0a 00 02 00 00 00 f2 6f 0a 00 0e 00 00 00 f5 6f 0a 00 2d 00 00 00 04 70 0a 00 10 00 00 00 | :o.......o.......o..-....p...... |
a680 | 32 70 0a 00 0f 00 00 00 43 70 0a 00 11 00 00 00 53 70 0a 00 13 00 00 00 65 70 0a 00 06 00 00 00 | 2p......Cp......Sp......ep...... |
a6a0 | 79 70 0a 00 06 00 00 00 80 70 0a 00 06 00 00 00 87 70 0a 00 06 00 00 00 8e 70 0a 00 02 00 00 00 | yp.......p.......p.......p...... |
a6c0 | 95 70 0a 00 03 00 00 00 98 70 0a 00 02 00 00 00 9c 70 0a 00 08 00 00 00 9f 70 0a 00 02 00 00 00 | .p.......p.......p.......p...... |
a6e0 | a8 70 0a 00 02 00 00 00 ab 70 0a 00 02 00 00 00 ae 70 0a 00 02 00 00 00 b1 70 0a 00 02 00 00 00 | .p.......p.......p.......p...... |
a700 | b4 70 0a 00 32 00 00 00 b7 70 0a 00 02 00 00 00 ea 70 0a 00 02 00 00 00 ed 70 0a 00 35 00 00 00 | .p..2....p.......p.......p..5... |
a720 | f0 70 0a 00 17 00 00 00 26 71 0a 00 01 00 00 00 3e 71 0a 00 1a 00 00 00 40 71 0a 00 80 00 00 00 | .p......&q......>q......@q...... |
a740 | 5b 71 0a 00 02 00 00 00 dc 71 0a 00 02 00 00 00 df 71 0a 00 02 00 00 00 e2 71 0a 00 02 00 00 00 | [q.......q.......q.......q...... |
a760 | e5 71 0a 00 11 00 00 00 e8 71 0a 00 11 00 00 00 fa 71 0a 00 03 00 00 00 0c 72 0a 00 02 00 00 00 | .q.......q.......q.......r...... |
a780 | 10 72 0a 00 02 00 00 00 13 72 0a 00 63 00 00 00 16 72 0a 00 0f 00 00 00 7a 72 0a 00 01 00 00 00 | .r.......r..c....r......zr...... |
a7a0 | 8a 72 0a 00 20 00 00 00 8c 72 0a 00 02 00 00 00 ad 72 0a 00 02 00 00 00 b0 72 0a 00 02 00 00 00 | .r.......r.......r.......r...... |
a7c0 | b3 72 0a 00 02 00 00 00 b6 72 0a 00 01 00 00 00 b9 72 0a 00 1a 00 00 00 bb 72 0a 00 a2 00 00 00 | .r.......r.......r.......r...... |
a7e0 | d6 72 0a 00 e6 00 00 00 79 73 0a 00 11 00 00 00 60 74 0a 00 02 00 00 00 72 74 0a 00 02 00 00 00 | .r......ys......`t......rt...... |
a800 | 75 74 0a 00 02 00 00 00 78 74 0a 00 01 00 00 00 7b 74 0a 00 11 00 00 00 7d 74 0a 00 c3 00 00 00 | ut......xt......{t......}t...... |
a820 | 8f 74 0a 00 0f 00 00 00 53 75 0a 00 11 00 00 00 63 75 0a 00 02 00 00 00 75 75 0a 00 01 00 00 00 | .t......Su......cu......uu...... |
a840 | 78 75 0a 00 6b 00 00 00 7a 75 0a 00 02 00 00 00 e6 75 0a 00 3b 00 00 00 e9 75 0a 00 02 00 00 00 | xu..k...zu.......u..;....u...... |
a860 | 25 76 0a 00 02 00 00 00 28 76 0a 00 0a 00 00 00 2b 76 0a 00 6b 02 00 00 36 76 0a 00 01 00 00 00 | %v......(v......+v..k...6v...... |
a880 | a2 78 0a 00 02 00 00 00 a4 78 0a 00 01 00 00 00 a7 78 0a 00 6c 00 00 00 a9 78 0a 00 01 00 00 00 | .x.......x.......x..l....x...... |
a8a0 | 16 79 0a 00 76 00 00 00 18 79 0a 00 61 01 00 00 8f 79 0a 00 8b 00 00 00 f1 7a 0a 00 10 01 00 00 | .y..v....y..a....y.......z...... |
a8c0 | 7d 7b 0a 00 36 00 00 00 8e 7c 0a 00 22 01 00 00 c5 7c 0a 00 26 02 00 00 e8 7d 0a 00 ec 00 00 00 | }{..6....|.."....|..&....}...... |
a8e0 | 0f 80 0a 00 8b 00 00 00 fc 80 0a 00 8c 01 00 00 88 81 0a 00 bd 00 00 00 15 83 0a 00 08 02 00 00 | ................................ |
a900 | d3 83 0a 00 53 01 00 00 dc 85 0a 00 dc 00 00 00 30 87 0a 00 4f 00 00 00 0d 88 0a 00 aa 03 00 00 | ....S...........0...O........... |
a920 | 5d 88 0a 00 8b 01 00 00 08 8c 0a 00 80 01 00 00 94 8d 0a 00 b5 01 00 00 15 8f 0a 00 61 00 00 00 | ]...........................a... |
a940 | cb 90 0a 00 8f 05 00 00 2d 91 0a 00 32 02 00 00 bd 96 0a 00 0b 01 00 00 f0 98 0a 00 3d 02 00 00 | ........-...2...............=... |
a960 | fc 99 0a 00 7e 00 00 00 3a 9c 0a 00 37 00 00 00 b9 9c 0a 00 8f 01 00 00 f1 9c 0a 00 01 01 00 00 | ....~...:...7................... |
a980 | 81 9e 0a 00 da 01 00 00 83 9f 0a 00 3e 01 00 00 5e a1 0a 00 8e 02 00 00 9d a2 0a 00 a6 00 00 00 | ............>...^............... |
a9a0 | 2c a5 0a 00 e3 01 00 00 d3 a5 0a 00 af 01 00 00 b7 a7 0a 00 f6 01 00 00 67 a9 0a 00 17 02 00 00 | ,.......................g....... |
a9c0 | 5e ab 0a 00 d9 01 00 00 76 ad 0a 00 8e 00 00 00 50 af 0a 00 57 01 00 00 df af 0a 00 82 00 00 00 | ^.......v.......P...W........... |
a9e0 | 37 b1 0a 00 fb 00 00 00 ba b1 0a 00 b4 01 00 00 b6 b2 0a 00 d6 01 00 00 6b b4 0a 00 59 01 00 00 | 7.......................k...Y... |
aa00 | 42 b6 0a 00 50 01 00 00 9c b7 0a 00 be 01 00 00 ed b8 0a 00 68 01 00 00 ac ba 0a 00 04 02 00 00 | B...P...............h........... |
aa20 | 15 bc 0a 00 84 00 00 00 1a be 0a 00 f9 00 00 00 9f be 0a 00 a4 00 00 00 99 bf 0a 00 43 00 00 00 | ............................C... |
aa40 | 3e c0 0a 00 5c 00 00 00 82 c0 0a 00 52 00 00 00 df c0 0a 00 46 00 00 00 32 c1 0a 00 50 00 00 00 | >...\.......R.......F...2...P... |
aa60 | 79 c1 0a 00 48 00 00 00 ca c1 0a 00 4c 00 00 00 13 c2 0a 00 47 00 00 00 60 c2 0a 00 48 00 00 00 | y...H.......L.......G...`...H... |
aa80 | a8 c2 0a 00 41 00 00 00 f1 c2 0a 00 44 00 00 00 33 c3 0a 00 19 00 00 00 78 c3 0a 00 29 00 00 00 | ....A.......D...3.......x...)... |
aaa0 | 92 c3 0a 00 12 00 00 00 bc c3 0a 00 3d 00 00 00 cf c3 0a 00 13 00 00 00 0d c4 0a 00 3f 00 00 00 | ............=...............?... |
aac0 | 21 c4 0a 00 13 00 00 00 61 c4 0a 00 3f 00 00 00 75 c4 0a 00 15 00 00 00 b5 c4 0a 00 43 00 00 00 | !.......a...?...u...........C... |
aae0 | cb c4 0a 00 15 00 00 00 0f c5 0a 00 43 00 00 00 25 c5 0a 00 31 01 00 00 69 c5 0a 00 11 00 00 00 | ............C...%...1...i....... |
ab00 | 9b c6 0a 00 80 01 00 00 ad c6 0a 00 41 01 00 00 2e c8 0a 00 19 00 00 00 70 c9 0a 00 37 00 00 00 | ............A...........p...7... |
ab20 | 8a c9 0a 00 2a 00 00 00 c2 c9 0a 00 39 00 00 00 ed c9 0a 00 29 00 00 00 27 ca 0a 00 07 00 00 00 | ....*.......9.......)...'....... |
ab40 | 51 ca 0a 00 4d 00 00 00 59 ca 0a 00 b6 00 00 00 a7 ca 0a 00 40 00 00 00 5e cb 0a 00 2f 00 00 00 | Q...M...Y...........@...^.../... |
ab60 | 9f cb 0a 00 32 00 00 00 cf cb 0a 00 35 00 00 00 02 cc 0a 00 1d 00 00 00 38 cc 0a 00 27 00 00 00 | ....2.......5...........8...'... |
ab80 | 56 cc 0a 00 1f 00 00 00 7e cc 0a 00 36 00 00 00 9e cc 0a 00 39 00 00 00 d5 cc 0a 00 18 01 00 00 | V.......~...6.......9........... |
aba0 | 0f cd 0a 00 1e 00 00 00 28 ce 0a 00 5c 00 00 00 47 ce 0a 00 37 01 00 00 a4 ce 0a 00 cb 01 00 00 | ........(...\...G...7........... |
abc0 | dc cf 0a 00 59 01 00 00 a8 d1 0a 00 3a 01 00 00 02 d3 0a 00 2d 00 00 00 3d d4 0a 00 3a 00 00 00 | ....Y.......:.......-...=...:... |
abe0 | 6b d4 0a 00 6d 00 00 00 a6 d4 0a 00 77 00 00 00 14 d5 0a 00 8b 00 00 00 8c d5 0a 00 cc 01 00 00 | k...m.......w................... |
ac00 | 18 d6 0a 00 ba 00 00 00 e5 d7 0a 00 16 00 00 00 a0 d8 0a 00 33 00 00 00 b7 d8 0a 00 28 00 00 00 | ....................3.......(... |
ac20 | eb d8 0a 00 77 01 00 00 14 d9 0a 00 51 00 00 00 8c da 0a 00 74 00 00 00 de da 0a 00 26 00 00 00 | ....w.......Q.......t.......&... |
ac40 | 53 db 0a 00 85 00 00 00 7a db 0a 00 8b 00 00 00 00 dc 0a 00 cf 00 00 00 8c dc 0a 00 34 01 00 00 | S.......z...................4... |
ac60 | 5c dd 0a 00 2f 00 00 00 91 de 0a 00 72 00 00 00 c1 de 0a 00 65 00 00 00 34 df 0a 00 31 00 00 00 | \.../.......r.......e...4...1... |
ac80 | 9a df 0a 00 01 01 00 00 cc df 0a 00 33 00 00 00 ce e0 0a 00 3c 00 00 00 02 e1 0a 00 93 01 00 00 | ............3.......<........... |
aca0 | 3f e1 0a 00 e4 01 00 00 d3 e2 0a 00 63 00 00 00 b8 e4 0a 00 d4 00 00 00 1c e5 0a 00 ed 00 00 00 | ?...........c................... |
acc0 | f1 e5 0a 00 78 00 00 00 df e6 0a 00 90 00 00 00 58 e7 0a 00 c0 01 00 00 e9 e7 0a 00 a2 00 00 00 | ....x...........X............... |
ace0 | aa e9 0a 00 88 00 00 00 4d ea 0a 00 4e 00 00 00 d6 ea 0a 00 58 00 00 00 25 eb 0a 00 08 01 00 00 | ........M...N.......X...%....... |
ad00 | 7e eb 0a 00 65 00 00 00 87 ec 0a 00 7e 00 00 00 ed ec 0a 00 48 01 00 00 6c ed 0a 00 35 01 00 00 | ~...e.......~.......H...l...5... |
ad20 | b5 ee 0a 00 90 00 00 00 eb ef 0a 00 a3 00 00 00 7c f0 0a 00 02 01 00 00 20 f1 0a 00 3f 00 00 00 | ................|...........?... |
ad40 | 23 f2 0a 00 24 00 00 00 63 f2 0a 00 22 01 00 00 88 f2 0a 00 1c 00 00 00 ab f3 0a 00 2c 00 00 00 | #...$...c..."...............,... |
ad60 | c8 f3 0a 00 43 00 00 00 f5 f3 0a 00 c8 00 00 00 39 f4 0a 00 b8 00 00 00 02 f5 0a 00 b1 01 00 00 | ....C...........9............... |
ad80 | bb f5 0a 00 4f 00 00 00 6d f7 0a 00 37 00 00 00 bd f7 0a 00 26 00 00 00 f5 f7 0a 00 0a 02 00 00 | ....O...m...7.......&........... |
ada0 | 1c f8 0a 00 62 00 00 00 27 fa 0a 00 41 00 00 00 8a fa 0a 00 3d 00 00 00 cc fa 0a 00 5e 00 00 00 | ....b...'...A.......=.......^... |
adc0 | 0a fb 0a 00 35 00 00 00 69 fb 0a 00 77 00 00 00 9f fb 0a 00 04 00 00 00 17 fc 0a 00 1c 00 00 00 | ....5...i...w................... |
ade0 | 1c fc 0a 00 03 00 00 00 39 fc 0a 00 03 00 00 00 3d fc 0a 00 5c 00 00 00 41 fc 0a 00 a7 01 00 00 | ........9.......=...\...A....... |
ae00 | 9e fc 0a 00 0c 00 00 00 46 fe 0a 00 a8 00 00 00 53 fe 0a 00 70 00 00 00 fc fe 0a 00 3c 00 00 00 | ........F.......S...p.......<... |
ae20 | 6d ff 0a 00 33 00 00 00 aa ff 0a 00 12 00 00 00 de ff 0a 00 0c 00 00 00 f1 ff 0a 00 79 00 00 00 | m...3.......................y... |
ae40 | fe ff 0a 00 45 00 00 00 78 00 0b 00 07 00 00 00 be 00 0b 00 10 00 00 00 c6 00 0b 00 22 00 00 00 | ....E...x..................."... |
ae60 | d7 00 0b 00 68 00 00 00 fa 00 0b 00 41 00 00 00 63 01 0b 00 40 00 00 00 a5 01 0b 00 23 00 00 00 | ....h.......A...c...@.......#... |
ae80 | e6 01 0b 00 c5 00 00 00 0a 02 0b 00 9f 00 00 00 d0 02 0b 00 3c 00 00 00 70 03 0b 00 35 00 00 00 | ....................<...p...5... |
aea0 | ad 03 0b 00 4e 00 00 00 e3 03 0b 00 86 00 00 00 32 04 0b 00 68 00 00 00 b9 04 0b 00 63 00 00 00 | ....N...........2...h.......c... |
aec0 | 22 05 0b 00 2f 00 00 00 86 05 0b 00 48 00 00 00 b6 05 0b 00 a3 00 00 00 ff 05 0b 00 b8 00 00 00 | ".../.......H................... |
aee0 | a3 06 0b 00 81 00 00 00 5c 07 0b 00 46 00 00 00 de 07 0b 00 1c 00 00 00 25 08 0b 00 7d 00 00 00 | ........\...F...........%...}... |
af00 | 42 08 0b 00 60 00 00 00 c0 08 0b 00 ee 00 00 00 21 09 0b 00 09 01 00 00 10 0a 0b 00 68 00 00 00 | B...`...........!...........h... |
af20 | 1a 0b 0b 00 07 00 00 00 83 0b 0b 00 12 00 00 00 8b 0b 0b 00 10 00 00 00 9e 0b 0b 00 0e 00 00 00 | ................................ |
af40 | af 0b 0b 00 42 00 00 00 be 0b 0b 00 0d 00 00 00 01 0c 0b 00 24 00 00 00 0f 0c 0b 00 c6 00 00 00 | ....B...............$........... |
af60 | 34 0c 0b 00 ba 00 00 00 fb 0c 0b 00 17 00 00 00 b6 0d 0b 00 1a 00 00 00 ce 0d 0b 00 10 00 00 00 | 4............................... |
af80 | e9 0d 0b 00 c7 00 00 00 fa 0d 0b 00 1a 00 00 00 c2 0e 0b 00 3c 00 00 00 dd 0e 0b 00 1a 00 00 00 | ....................<........... |
afa0 | 1a 0f 0b 00 14 00 00 00 35 0f 0b 00 7e 00 00 00 4a 0f 0b 00 74 00 00 00 c9 0f 0b 00 26 01 00 00 | ........5...~...J...t.......&... |
afc0 | 3e 10 0b 00 40 01 00 00 65 11 0b 00 74 00 00 00 a6 12 0b 00 63 01 00 00 1b 13 0b 00 2e 00 00 00 | >...@...e...t.......c........... |
afe0 | 7f 14 0b 00 05 00 00 00 ae 14 0b 00 09 00 00 00 b4 14 0b 00 07 00 00 00 be 14 0b 00 66 00 00 00 | ............................f... |
b000 | c6 14 0b 00 4f 00 00 00 2d 15 0b 00 9a 00 00 00 7d 15 0b 00 b1 00 00 00 18 16 0b 00 0e 00 00 00 | ....O...-.......}............... |
b020 | ca 16 0b 00 67 00 00 00 d9 16 0b 00 ae 00 00 00 41 17 0b 00 89 00 00 00 f0 17 0b 00 28 00 00 00 | ....g...........A...........(... |
b040 | 7a 18 0b 00 3a 00 00 00 a3 18 0b 00 ac 00 00 00 de 18 0b 00 74 00 00 00 8b 19 0b 00 97 00 00 00 | z...:...............t........... |
b060 | 00 1a 0b 00 3a 00 00 00 98 1a 0b 00 40 00 00 00 d3 1a 0b 00 27 00 00 00 14 1b 0b 00 29 00 00 00 | ....:.......@.......'.......)... |
b080 | 3c 1b 0b 00 21 00 00 00 66 1b 0b 00 08 01 00 00 88 1b 0b 00 61 01 00 00 91 1c 0b 00 2e 00 00 00 | <...!...f...........a........... |
b0a0 | f3 1d 0b 00 80 00 00 00 22 1e 0b 00 7b 00 00 00 a3 1e 0b 00 30 00 00 00 1f 1f 0b 00 c8 00 00 00 | ........"...{.......0........... |
b0c0 | 50 1f 0b 00 c8 00 00 00 19 20 0b 00 9c 00 00 00 e2 20 0b 00 40 00 00 00 7f 21 0b 00 b7 00 00 00 | P...................@....!...... |
b0e0 | c0 21 0b 00 b7 00 00 00 78 22 0b 00 5a 00 00 00 30 23 0b 00 c4 00 00 00 8b 23 0b 00 6e 00 00 00 | .!......x"..Z...0#.......#..n... |
b100 | 50 24 0b 00 a5 00 00 00 bf 24 0b 00 c3 00 00 00 65 25 0b 00 18 00 00 00 29 26 0b 00 54 00 00 00 | P$.......$......e%......)&..T... |
b120 | 42 26 0b 00 89 00 00 00 97 26 0b 00 6b 00 00 00 21 27 0b 00 3d 00 00 00 8d 27 0b 00 91 00 00 00 | B&.......&..k...!'..=....'...... |
b140 | cb 27 0b 00 81 00 00 00 5d 28 0b 00 39 00 00 00 df 28 0b 00 3e 01 00 00 19 29 0b 00 58 00 00 00 | .'......](..9....(..>....)..X... |
b160 | 58 2a 0b 00 c2 00 00 00 b1 2a 0b 00 6a 00 00 00 74 2b 0b 00 85 02 00 00 df 2b 0b 00 cb 00 00 00 | X*.......*..j...t+.......+...... |
b180 | 65 2e 0b 00 40 00 00 00 31 2f 0b 00 5f 00 00 00 72 2f 0b 00 9e 01 00 00 d2 2f 0b 00 9f 01 00 00 | e...@...1/.._...r/......./...... |
b1a0 | 71 31 0b 00 84 01 00 00 11 33 0b 00 bb 00 00 00 96 34 0b 00 56 00 00 00 52 35 0b 00 39 00 00 00 | q1.......3.......4..V...R5..9... |
b1c0 | a9 35 0b 00 1d 00 00 00 e3 35 0b 00 4b 00 00 00 01 36 0b 00 0b 00 00 00 4d 36 0b 00 02 01 00 00 | .5.......5..K....6......M6...... |
b1e0 | 59 36 0b 00 30 00 00 00 5c 37 0b 00 5d 00 00 00 8d 37 0b 00 5d 00 00 00 eb 37 0b 00 1a 00 00 00 | Y6..0...\7..]....7..]....7...... |
b200 | 49 38 0b 00 0d 00 00 00 64 38 0b 00 3b 00 00 00 72 38 0b 00 15 00 00 00 ae 38 0b 00 34 00 00 00 | I8......d8..;...r8.......8..4... |
b220 | c4 38 0b 00 2c 00 00 00 f9 38 0b 00 2f 00 00 00 26 39 0b 00 c8 00 00 00 56 39 0b 00 43 01 00 00 | .8..,....8../...&9......V9..C... |
b240 | 1f 3a 0b 00 9c 00 00 00 63 3b 0b 00 3e 00 00 00 00 3c 0b 00 ad 00 00 00 3f 3c 0b 00 aa 00 00 00 | .:......c;..>....<......?<...... |
b260 | ed 3c 0b 00 44 00 00 00 98 3d 0b 00 1d 00 00 00 dd 3d 0b 00 23 00 00 00 fb 3d 0b 00 19 00 00 00 | .<..D....=.......=..#....=...... |
b280 | 1f 3e 0b 00 12 00 00 00 39 3e 0b 00 43 00 00 00 4c 3e 0b 00 31 00 00 00 90 3e 0b 00 0a 00 00 00 | .>......9>..C...L>..1....>...... |
b2a0 | c2 3e 0b 00 08 00 00 00 cd 3e 0b 00 28 01 00 00 d6 3e 0b 00 81 00 00 00 ff 3f 0b 00 aa 00 00 00 | .>.......>..(....>.......?...... |
b2c0 | 81 40 0b 00 d5 00 00 00 2c 41 0b 00 a5 01 00 00 02 42 0b 00 71 00 00 00 a8 43 0b 00 78 00 00 00 | .@......,A.......B..q....C..x... |
b2e0 | 1a 44 0b 00 99 00 00 00 93 44 0b 00 1d 01 00 00 2d 45 0b 00 49 01 00 00 4b 46 0b 00 18 01 00 00 | .D.......D......-E..I...KF...... |
b300 | 95 47 0b 00 1a 01 00 00 ae 48 0b 00 39 01 00 00 c9 49 0b 00 5f 00 00 00 03 4b 0b 00 32 01 00 00 | .G.......H..9....I.._....K..2... |
b320 | 63 4b 0b 00 82 00 00 00 96 4c 0b 00 a2 00 00 00 19 4d 0b 00 93 00 00 00 bc 4d 0b 00 af 00 00 00 | cK.......L.......M.......M...... |
b340 | 50 4e 0b 00 7e 00 00 00 00 4f 0b 00 47 00 00 00 7f 4f 0b 00 83 00 00 00 c7 4f 0b 00 6e 00 00 00 | PN..~....O..G....O.......O..n... |
b360 | 4b 50 0b 00 91 00 00 00 ba 50 0b 00 59 00 00 00 4c 51 0b 00 96 00 00 00 a6 51 0b 00 8e 00 00 00 | KP.......P..Y...LQ.......Q...... |
b380 | 3d 52 0b 00 c1 00 00 00 cc 52 0b 00 59 01 00 00 8e 53 0b 00 23 00 00 00 e8 54 0b 00 43 00 00 00 | =R.......R..Y....S..#....T..C... |
b3a0 | 0c 55 0b 00 27 00 00 00 50 55 0b 00 2d 00 00 00 78 55 0b 00 3b 00 00 00 a6 55 0b 00 6e 00 00 00 | .U..'...PU..-...xU..;....U..n... |
b3c0 | e2 55 0b 00 82 00 00 00 51 56 0b 00 68 00 00 00 d4 56 0b 00 19 00 00 00 3d 57 0b 00 19 00 00 00 | .U......QV..h....V......=W...... |
b3e0 | 57 57 0b 00 19 00 00 00 71 57 0b 00 19 00 00 00 8b 57 0b 00 19 00 00 00 a5 57 0b 00 19 00 00 00 | WW......qW.......W.......W...... |
b400 | bf 57 0b 00 19 00 00 00 d9 57 0b 00 19 00 00 00 f3 57 0b 00 19 00 00 00 0d 58 0b 00 19 00 00 00 | .W.......W.......W.......X...... |
b420 | 27 58 0b 00 19 00 00 00 41 58 0b 00 19 00 00 00 5b 58 0b 00 7b 00 00 00 75 58 0b 00 c2 00 00 00 | 'X......AX......[X..{...uX...... |
b440 | f1 58 0b 00 41 00 00 00 b4 59 0b 00 c0 00 00 00 f6 59 0b 00 68 00 00 00 b7 5a 0b 00 0e 00 00 00 | .X..A....Y.......Y..h....Z...... |
b460 | 20 5b 0b 00 16 00 00 00 2f 5b 0b 00 1f 00 00 00 46 5b 0b 00 25 00 00 00 66 5b 0b 00 29 00 00 00 | .[....../[......F[..%...f[..)... |
b480 | 8c 5b 0b 00 24 00 00 00 b6 5b 0b 00 e6 00 00 00 db 5b 0b 00 20 00 00 00 c2 5c 0b 00 14 00 00 00 | .[..$....[.......[.......\...... |
b4a0 | e3 5c 0b 00 45 00 00 00 f8 5c 0b 00 13 00 00 00 3e 5d 0b 00 17 00 00 00 52 5d 0b 00 17 00 00 00 | .\..E....\......>]......R]...... |
b4c0 | 6a 5d 0b 00 e7 00 00 00 82 5d 0b 00 3d 00 00 00 6a 5e 0b 00 12 00 00 00 a8 5e 0b 00 14 00 00 00 | j].......]..=...j^.......^...... |
b4e0 | bb 5e 0b 00 13 00 00 00 d0 5e 0b 00 03 00 00 00 e4 5e 0b 00 1b 00 00 00 e8 5e 0b 00 59 00 00 00 | .^.......^.......^.......^..Y... |
b500 | 04 5f 0b 00 03 00 00 00 5e 5f 0b 00 14 00 00 00 62 5f 0b 00 14 00 00 00 77 5f 0b 00 1d 00 00 00 | ._......^_......b_......w_...... |
b520 | 8c 5f 0b 00 1a 00 00 00 aa 5f 0b 00 0b 00 00 00 c5 5f 0b 00 18 00 00 00 d1 5f 0b 00 19 00 00 00 | ._......._......._......._...... |
b540 | ea 5f 0b 00 44 00 00 00 04 60 0b 00 1a 00 00 00 49 60 0b 00 1f 00 00 00 64 60 0b 00 1c 00 00 00 | ._..D....`......I`......d`...... |
b560 | 84 60 0b 00 20 00 00 00 a1 60 0b 00 65 01 00 00 c2 60 0b 00 54 01 00 00 28 62 0b 00 c3 02 00 00 | .`.......`..e....`..T...(b...... |
b580 | 7d 63 0b 00 05 00 00 00 41 66 0b 00 67 00 00 00 47 66 0b 00 81 01 00 00 af 66 0b 00 07 00 00 00 | }c......Af..g...Gf.......f...... |
b5a0 | 31 68 0b 00 13 00 00 00 39 68 0b 00 0f 00 00 00 4d 68 0b 00 1e 00 00 00 5d 68 0b 00 11 00 00 00 | 1h......9h......Mh......]h...... |
b5c0 | 7c 68 0b 00 21 00 00 00 8e 68 0b 00 4c 00 00 00 b0 68 0b 00 50 00 00 00 fd 68 0b 00 69 00 00 00 | |h..!....h..L....h..P....h..i... |
b5e0 | 4e 69 0b 00 55 00 00 00 b8 69 0b 00 55 00 00 00 0e 6a 0b 00 17 00 00 00 64 6a 0b 00 0e 00 00 00 | Ni..U....i..U....j......dj...... |
b600 | 7c 6a 0b 00 0e 00 00 00 8b 6a 0b 00 3f 00 00 00 9a 6a 0b 00 36 00 00 00 da 6a 0b 00 0b 00 00 00 | |j.......j..?....j..6....j...... |
b620 | 11 6b 0b 00 d1 00 00 00 1d 6b 0b 00 19 00 00 00 ef 6b 0b 00 87 00 00 00 09 6c 0b 00 89 00 00 00 | .k.......k.......k.......l...... |
b640 | 91 6c 0b 00 db 00 00 00 1b 6d 0b 00 55 00 00 00 f7 6d 0b 00 75 00 00 00 4d 6e 0b 00 27 00 00 00 | .l.......m..U....m..u...Mn..'... |
b660 | c3 6e 0b 00 1c 00 00 00 eb 6e 0b 00 7d 01 00 00 08 6f 0b 00 11 00 00 00 86 70 0b 00 0c 00 00 00 | .n.......n..}....o.......p...... |
b680 | 98 70 0b 00 2f 00 00 00 a5 70 0b 00 3f 00 00 00 d5 70 0b 00 63 00 00 00 15 71 0b 00 09 00 00 00 | .p../....p..?....p..c....q...... |
b6a0 | 79 71 0b 00 5d 00 00 00 83 71 0b 00 58 00 00 00 e1 71 0b 00 59 00 00 00 3a 72 0b 00 34 00 00 00 | yq..]....q..X....q..Y...:r..4... |
b6c0 | 94 72 0b 00 17 00 00 00 c9 72 0b 00 0c 00 00 00 e1 72 0b 00 25 00 00 00 ee 72 0b 00 13 00 00 00 | .r.......r.......r..%....r...... |
b6e0 | 14 73 0b 00 29 00 00 00 28 73 0b 00 83 00 00 00 52 73 0b 00 6e 00 00 00 d6 73 0b 00 31 00 00 00 | .s..)...(s......Rs..n....s..1... |
b700 | 45 74 0b 00 06 00 00 00 77 74 0b 00 1d 00 00 00 7e 74 0b 00 0e 00 00 00 9c 74 0b 00 0c 00 00 00 | Et......wt......~t.......t...... |
b720 | ab 74 0b 00 3f 00 00 00 b8 74 0b 00 37 00 00 00 f8 74 0b 00 07 00 00 00 30 75 0b 00 0b 00 00 00 | .t..?....t..7....t......0u...... |
b740 | 38 75 0b 00 0e 00 00 00 44 75 0b 00 d0 00 00 00 53 75 0b 00 9c 00 00 00 24 76 0b 00 51 00 00 00 | 8u......Du......Su......$v..Q... |
b760 | c1 76 0b 00 9c 00 00 00 13 77 0b 00 ef 00 00 00 b0 77 0b 00 8d 01 00 00 a0 78 0b 00 37 01 00 00 | .v.......w.......w.......x..7... |
b780 | 2e 7a 0b 00 38 01 00 00 66 7b 0b 00 ce 00 00 00 9f 7c 0b 00 d9 00 00 00 6e 7d 0b 00 3b 00 00 00 | .z..8...f{.......|......n}..;... |
b7a0 | 48 7e 0b 00 63 00 00 00 84 7e 0b 00 78 00 00 00 e8 7e 0b 00 9d 00 00 00 61 7f 0b 00 97 00 00 00 | H~..c....~..x....~......a....... |
b7c0 | ff 7f 0b 00 25 00 00 00 97 80 0b 00 a1 00 00 00 bd 80 0b 00 3a 01 00 00 5f 81 0b 00 16 00 00 00 | ....%...............:..._....... |
b7e0 | 9a 82 0b 00 1a 00 00 00 b1 82 0b 00 0a 00 00 00 cc 82 0b 00 27 00 00 00 d7 82 0b 00 16 00 00 00 | ....................'........... |
b800 | ff 82 0b 00 c8 00 00 00 16 83 0b 00 1a 00 00 00 df 83 0b 00 2a 00 00 00 fa 83 0b 00 0c 00 00 00 | ....................*........... |
b820 | 25 84 0b 00 30 00 00 00 32 84 0b 00 2c 00 00 00 63 84 0b 00 0b 01 00 00 90 84 0b 00 76 00 00 00 | %...0...2...,...c...........v... |
b840 | 9c 85 0b 00 bc 00 00 00 13 86 0b 00 91 00 00 00 d0 86 0b 00 3e 00 00 00 62 87 0b 00 0c 00 00 00 | ....................>...b....... |
b860 | a1 87 0b 00 46 00 00 00 ae 87 0b 00 06 00 00 00 f5 87 0b 00 14 00 00 00 fc 87 0b 00 06 00 00 00 | ....F........................... |
b880 | 11 88 0b 00 9f 00 00 00 18 88 0b 00 0e 00 00 00 b8 88 0b 00 2d 00 00 00 c7 88 0b 00 1b 00 00 00 | ....................-........... |
b8a0 | f5 88 0b 00 0f 00 00 00 11 89 0b 00 07 00 00 00 21 89 0b 00 16 00 00 00 29 89 0b 00 1d 00 00 00 | ................!.......)....... |
b8c0 | 40 89 0b 00 06 00 00 00 5e 89 0b 00 14 00 00 00 65 89 0b 00 15 00 00 00 7a 89 0b 00 14 00 00 00 | @.......^.......e.......z....... |
b8e0 | 90 89 0b 00 1f 00 00 00 a5 89 0b 00 3d 00 00 00 c5 89 0b 00 0b 00 00 00 03 8a 0b 00 14 00 00 00 | ............=................... |
b900 | 0f 8a 0b 00 12 00 00 00 24 8a 0b 00 14 00 00 00 37 8a 0b 00 6c 00 00 00 4c 8a 0b 00 07 00 00 00 | ........$.......7...l...L....... |
b920 | b9 8a 0b 00 6a 00 00 00 c1 8a 0b 00 98 00 00 00 2c 8b 0b 00 0c 00 00 00 c5 8b 0b 00 96 00 00 00 | ....j...........,............... |
b940 | d2 8b 0b 00 3e 00 00 00 69 8c 0b 00 77 00 00 00 a8 8c 0b 00 38 00 00 00 20 8d 0b 00 08 00 00 00 | ....>...i...w.......8........... |
b960 | 59 8d 0b 00 40 00 00 00 62 8d 0b 00 1e 00 00 00 a3 8d 0b 00 11 00 00 00 c2 8d 0b 00 1b 00 00 00 | Y...@...b....................... |
b980 | d4 8d 0b 00 58 00 00 00 f0 8d 0b 00 0d 00 00 00 49 8e 0b 00 15 00 00 00 57 8e 0b 00 16 00 00 00 | ....X...........I.......W....... |
b9a0 | 6d 8e 0b 00 13 00 00 00 84 8e 0b 00 15 00 00 00 98 8e 0b 00 2f 00 00 00 ae 8e 0b 00 0b 01 00 00 | m.................../........... |
b9c0 | de 8e 0b 00 af 00 00 00 ea 8f 0b 00 16 00 00 00 9a 90 0b 00 59 00 00 00 b1 90 0b 00 26 00 00 00 | ....................Y.......&... |
b9e0 | 0b 91 0b 00 25 00 00 00 32 91 0b 00 a5 00 00 00 58 91 0b 00 09 00 00 00 fe 91 0b 00 94 00 00 00 | ....%...2.......X............... |
ba00 | 08 92 0b 00 0d 00 00 00 9d 92 0b 00 51 00 00 00 ab 92 0b 00 25 00 00 00 fd 92 0b 00 37 00 00 00 | ............Q.......%.......7... |
ba20 | 23 93 0b 00 c0 00 00 00 5b 93 0b 00 71 00 00 00 1c 94 0b 00 24 00 00 00 8e 94 0b 00 52 00 00 00 | #.......[...q.......$.......R... |
ba40 | b3 94 0b 00 4e 00 00 00 06 95 0b 00 68 00 00 00 55 95 0b 00 55 00 00 00 be 95 0b 00 22 00 00 00 | ....N.......h...U...U......."... |
ba60 | 14 96 0b 00 22 00 00 00 37 96 0b 00 4c 00 00 00 5a 96 0b 00 57 00 00 00 a7 96 0b 00 75 00 00 00 | ...."...7...L...Z...W.......u... |
ba80 | ff 96 0b 00 70 00 00 00 75 97 0b 00 75 00 00 00 e6 97 0b 00 a4 00 00 00 5c 98 0b 00 37 00 00 00 | ....p...u...u...........\...7... |
baa0 | 01 99 0b 00 fc 00 00 00 39 99 0b 00 bb 00 00 00 36 9a 0b 00 7a 00 00 00 f2 9a 0b 00 77 00 00 00 | ........9.......6...z.......w... |
bac0 | 6d 9b 0b 00 71 00 00 00 e5 9b 0b 00 aa 00 00 00 57 9c 0b 00 3a 00 00 00 02 9d 0b 00 2b 00 00 00 | m...q...........W...:.......+... |
bae0 | 3d 9d 0b 00 48 00 00 00 69 9d 0b 00 3a 00 00 00 b2 9d 0b 00 60 00 00 00 ed 9d 0b 00 62 00 00 00 | =...H...i...:.......`.......b... |
bb00 | 4e 9e 0b 00 26 00 00 00 b1 9e 0b 00 2b 00 00 00 d8 9e 0b 00 43 00 00 00 04 9f 0b 00 2b 00 00 00 | N...&.......+.......C.......+... |
bb20 | 48 9f 0b 00 5b 00 00 00 74 9f 0b 00 61 00 00 00 d0 9f 0b 00 27 00 00 00 32 a0 0b 00 5b 00 00 00 | H...[...t...a.......'...2...[... |
bb40 | 5a a0 0b 00 2e 00 00 00 b6 a0 0b 00 47 00 00 00 e5 a0 0b 00 9a 00 00 00 2d a1 0b 00 31 00 00 00 | Z...........G...........-...1... |
bb60 | c8 a1 0b 00 31 00 00 00 fa a1 0b 00 41 00 00 00 2c a2 0b 00 84 00 00 00 6e a2 0b 00 5f 00 00 00 | ....1.......A...,.......n..._... |
bb80 | f3 a2 0b 00 5f 00 00 00 53 a3 0b 00 3c 00 00 00 b3 a3 0b 00 39 00 00 00 f0 a3 0b 00 89 00 00 00 | ...._...S...<.......9........... |
bba0 | 2a a4 0b 00 58 00 00 00 b4 a4 0b 00 2c 00 00 00 0d a5 0b 00 2b 00 00 00 3a a5 0b 00 64 00 00 00 | *...X.......,.......+...:...d... |
bbc0 | 66 a5 0b 00 65 00 00 00 cb a5 0b 00 2f 00 00 00 31 a6 0b 00 4b 00 00 00 61 a6 0b 00 5f 00 00 00 | f...e......./...1...K...a..._... |
bbe0 | ad a6 0b 00 42 00 00 00 0d a7 0b 00 2a 00 00 00 50 a7 0b 00 3b 00 00 00 7b a7 0b 00 2b 00 00 00 | ....B.......*...P...;...{...+... |
bc00 | b7 a7 0b 00 34 00 00 00 e3 a7 0b 00 42 00 00 00 18 a8 0b 00 99 00 00 00 5b a8 0b 00 3f 00 00 00 | ....4.......B...........[...?... |
bc20 | f5 a8 0b 00 3f 00 00 00 35 a9 0b 00 50 00 00 00 75 a9 0b 00 b2 00 00 00 c6 a9 0b 00 5d 00 00 00 | ....?...5...P...u...........]... |
bc40 | 79 aa 0b 00 49 00 00 00 d7 aa 0b 00 49 00 00 00 21 ab 0b 00 3c 00 00 00 6b ab 0b 00 1f 00 00 00 | y...I.......I...!...<...k....... |
bc60 | a8 ab 0b 00 59 00 00 00 c8 ab 0b 00 95 00 00 00 22 ac 0b 00 38 00 00 00 b8 ac 0b 00 10 00 00 00 | ....Y..........."...8........... |
bc80 | f1 ac 0b 00 92 00 00 00 02 ad 0b 00 17 00 00 00 95 ad 0b 00 11 00 00 00 ad ad 0b 00 17 00 00 00 | ................................ |
bca0 | bf ad 0b 00 25 00 00 00 d7 ad 0b 00 18 00 00 00 fd ad 0b 00 17 00 00 00 16 ae 0b 00 1d 00 00 00 | ....%........................... |
bcc0 | 2e ae 0b 00 21 00 00 00 4c ae 0b 00 17 00 00 00 6e ae 0b 00 17 00 00 00 86 ae 0b 00 b2 00 00 00 | ....!...L.......n............... |
bce0 | 9e ae 0b 00 42 00 00 00 51 af 0b 00 12 00 00 00 94 af 0b 00 b7 00 00 00 a7 af 0b 00 44 01 00 00 | ....B...Q...................D... |
bd00 | 5f b0 0b 00 3c 01 00 00 a4 b1 0b 00 09 00 00 00 e1 b2 0b 00 0e 00 00 00 eb b2 0b 00 16 00 00 00 | _...<........................... |
bd20 | fa b2 0b 00 16 00 00 00 11 b3 0b 00 0d 00 00 00 28 b3 0b 00 07 00 00 00 36 b3 0b 00 0e 00 00 00 | ................(.......6....... |
bd40 | 3e b3 0b 00 30 00 00 00 4d b3 0b 00 09 00 00 00 7e b3 0b 00 12 00 00 00 88 b3 0b 00 12 00 00 00 | >...0...M.......~............... |
bd60 | 9b b3 0b 00 11 00 00 00 ae b3 0b 00 49 00 00 00 c0 b3 0b 00 49 00 00 00 0a b4 0b 00 c9 00 00 00 | ............I.......I........... |
bd80 | 54 b4 0b 00 b3 00 00 00 1e b5 0b 00 36 00 00 00 d2 b5 0b 00 39 00 00 00 09 b6 0b 00 81 00 00 00 | T...........6.......9........... |
bda0 | 43 b6 0b 00 82 00 00 00 c5 b6 0b 00 92 00 00 00 48 b7 0b 00 64 00 00 00 db b7 0b 00 15 00 00 00 | C...............H...d........... |
bdc0 | 40 b8 0b 00 5f 00 00 00 56 b8 0b 00 44 00 00 00 b6 b8 0b 00 69 00 00 00 fb b8 0b 00 92 00 00 00 | @..._...V...D.......i........... |
bde0 | 65 b9 0b 00 75 00 00 00 f8 b9 0b 00 66 00 00 00 6e ba 0b 00 4e 00 00 00 d5 ba 0b 00 8c 00 00 00 | e...u.......f...n...N........... |
be00 | 24 bb 0b 00 56 00 00 00 b1 bb 0b 00 76 00 00 00 08 bc 0b 00 73 00 00 00 7f bc 0b 00 c3 00 00 00 | $...V.......v.......s........... |
be20 | f3 bc 0b 00 c0 00 00 00 b7 bd 0b 00 6b 00 00 00 78 be 0b 00 30 00 00 00 e4 be 0b 00 7b 00 00 00 | ............k...x...0.......{... |
be40 | 15 bf 0b 00 45 00 00 00 91 bf 0b 00 7f 00 00 00 d7 bf 0b 00 6d 00 00 00 57 c0 0b 00 3d 00 00 00 | ....E...............m...W...=... |
be60 | c5 c0 0b 00 d9 00 00 00 03 c1 0b 00 a0 00 00 00 dd c1 0b 00 68 00 00 00 7e c2 0b 00 9c 00 00 00 | ....................h...~....... |
be80 | e7 c2 0b 00 54 00 00 00 84 c3 0b 00 2b 00 00 00 d9 c3 0b 00 21 00 00 00 05 c4 0b 00 5a 00 00 00 | ....T.......+.......!.......Z... |
bea0 | 27 c4 0b 00 70 00 00 00 82 c4 0b 00 4a 00 00 00 f3 c4 0b 00 16 00 00 00 3e c5 0b 00 19 00 00 00 | '...p.......J...........>....... |
bec0 | 55 c5 0b 00 25 00 00 00 6f c5 0b 00 62 00 00 00 95 c5 0b 00 08 00 00 00 f8 c5 0b 00 2d 00 00 00 | U...%...o...b...............-... |
bee0 | 01 c6 0b 00 14 00 00 00 2f c6 0b 00 14 00 00 00 44 c6 0b 00 14 00 00 00 59 c6 0b 00 14 00 00 00 | ......../.......D.......Y....... |
bf00 | 6e c6 0b 00 0d 00 00 00 83 c6 0b 00 39 00 00 00 91 c6 0b 00 43 00 00 00 cb c6 0b 00 0b 00 00 00 | n...........9.......C........... |
bf20 | 0f c7 0b 00 da 00 00 00 1b c7 0b 00 f3 00 00 00 f6 c7 0b 00 dc 00 00 00 ea c8 0b 00 dc 00 00 00 | ................................ |
bf40 | c7 c9 0b 00 43 00 00 00 a4 ca 0b 00 3d 00 00 00 e8 ca 0b 00 00 01 00 00 26 cb 0b 00 b3 00 00 00 | ....C.......=...........&....... |
bf60 | 27 cc 0b 00 0f 00 00 00 db cc 0b 00 0b 00 00 00 eb cc 0b 00 0a 00 00 00 f7 cc 0b 00 0b 00 00 00 | '............................... |
bf80 | 02 cd 0b 00 18 00 00 00 0e cd 0b 00 10 00 00 00 27 cd 0b 00 3a 00 00 00 38 cd 0b 00 12 00 00 00 | ................'...:...8....... |
bfa0 | 73 cd 0b 00 3c 00 00 00 86 cd 0b 00 84 00 00 00 c3 cd 0b 00 14 00 00 00 48 ce 0b 00 4c 00 00 00 | s...<...................H...L... |
bfc0 | 5d ce 0b 00 05 00 00 00 aa ce 0b 00 15 00 00 00 b0 ce 0b 00 0d 00 00 00 c6 ce 0b 00 b6 00 00 00 | ]............................... |
bfe0 | d4 ce 0b 00 04 00 00 00 8b cf 0b 00 bf 00 00 00 90 cf 0b 00 52 00 00 00 50 d0 0b 00 06 00 00 00 | ....................R...P....... |
c000 | a3 d0 0b 00 0e 00 00 00 aa d0 0b 00 10 00 00 00 b9 d0 0b 00 1c 00 00 00 ca d0 0b 00 17 00 00 00 | ................................ |
c020 | e7 d0 0b 00 2b 00 00 00 ff d0 0b 00 05 00 00 00 2b d1 0b 00 2f 00 00 00 31 d1 0b 00 34 00 00 00 | ....+...........+.../...1...4... |
c040 | 61 d1 0b 00 01 01 00 00 96 d1 0b 00 05 00 00 00 98 d2 0b 00 67 00 00 00 9e d2 0b 00 07 00 00 00 | a...................g........... |
c060 | 06 d3 0b 00 0a 00 00 00 0e d3 0b 00 15 00 00 00 19 d3 0b 00 19 00 00 00 2f d3 0b 00 a4 00 00 00 | ......................../....... |
c080 | 49 d3 0b 00 32 00 00 00 ee d3 0b 00 31 00 00 00 21 d4 0b 00 1d 00 00 00 53 d4 0b 00 14 00 00 00 | I...2.......1...!.......S....... |
c0a0 | 71 d4 0b 00 32 00 00 00 86 d4 0b 00 15 00 00 00 b9 d4 0b 00 0a 00 00 00 cf d4 0b 00 0c 00 00 00 | q...2........................... |
c0c0 | da d4 0b 00 11 00 00 00 e7 d4 0b 00 17 00 00 00 f9 d4 0b 00 13 00 00 00 11 d5 0b 00 19 00 00 00 | ................................ |
c0e0 | 25 d5 0b 00 74 00 00 00 3f d5 0b 00 98 00 00 00 b4 d5 0b 00 24 00 00 00 4d d6 0b 00 25 00 00 00 | %...t...?...........$...M...%... |
c100 | 72 d6 0b 00 0d 00 00 00 98 d6 0b 00 42 00 00 00 a6 d6 0b 00 16 00 00 00 e9 d6 0b 00 13 00 00 00 | r...........B................... |
c120 | 00 d7 0b 00 55 00 00 00 14 d7 0b 00 95 00 00 00 6a d7 0b 00 35 00 00 00 00 d8 0b 00 8e 00 00 00 | ....U...........j...5........... |
c140 | 36 d8 0b 00 68 00 00 00 c5 d8 0b 00 77 00 00 00 2e d9 0b 00 81 00 00 00 a6 d9 0b 00 21 00 00 00 | 6...h.......w...............!... |
c160 | 28 da 0b 00 2e 00 00 00 4a da 0b 00 7e 00 00 00 79 da 0b 00 4b 00 00 00 f8 da 0b 00 38 00 00 00 | (.......J...~...y...K.......8... |
c180 | 44 db 0b 00 95 00 00 00 7d db 0b 00 32 00 00 00 13 dc 0b 00 69 00 00 00 46 dc 0b 00 7b 00 00 00 | D.......}...2.......i...F...{... |
c1a0 | b0 dc 0b 00 62 00 00 00 2c dd 0b 00 4b 01 00 00 8f dd 0b 00 a6 00 00 00 db de 0b 00 89 00 00 00 | ....b...,...K................... |
c1c0 | 82 df 0b 00 af 00 00 00 0c e0 0b 00 88 00 00 00 bc e0 0b 00 31 00 00 00 45 e1 0b 00 2d 00 00 00 | ....................1...E...-... |
c1e0 | 77 e1 0b 00 7a 00 00 00 a5 e1 0b 00 92 00 00 00 20 e2 0b 00 6b 00 00 00 b3 e2 0b 00 0e 00 00 00 | w...z...............k........... |
c200 | 1f e3 0b 00 4b 00 00 00 2e e3 0b 00 33 00 00 00 7a e3 0b 00 39 00 00 00 ae e3 0b 00 0b 00 00 00 | ....K.......3...z...9........... |
c220 | e8 e3 0b 00 6d 00 00 00 f4 e3 0b 00 1a 00 00 00 62 e4 0b 00 20 00 00 00 7d e4 0b 00 25 00 00 00 | ....m...........b.......}...%... |
c240 | 9e e4 0b 00 4d 00 00 00 c4 e4 0b 00 4e 00 00 00 12 e5 0b 00 0b 00 00 00 61 e5 0b 00 f6 00 00 00 | ....M.......N...........a....... |
c260 | 6d e5 0b 00 2e 00 00 00 64 e6 0b 00 13 00 00 00 93 e6 0b 00 0f 00 00 00 a7 e6 0b 00 12 00 00 00 | m.......d....................... |
c280 | b7 e6 0b 00 71 01 00 00 ca e6 0b 00 fe 00 00 00 3c e8 0b 00 4e 00 00 00 3b e9 0b 00 c9 00 00 00 | ....q...........<...N...;....... |
c2a0 | 8a e9 0b 00 13 00 00 00 54 ea 0b 00 19 00 00 00 68 ea 0b 00 7c 00 00 00 82 ea 0b 00 38 00 00 00 | ........T.......h...|.......8... |
c2c0 | ff ea 0b 00 3b 00 00 00 38 eb 0b 00 46 00 00 00 74 eb 0b 00 2f 00 00 00 bb eb 0b 00 19 00 00 00 | ....;...8...F...t.../........... |
c2e0 | eb eb 0b 00 12 00 00 00 05 ec 0b 00 14 00 00 00 18 ec 0b 00 22 00 00 00 2d ec 0b 00 84 00 00 00 | ...................."...-....... |
c300 | 50 ec 0b 00 26 00 00 00 d5 ec 0b 00 24 00 00 00 fc ec 0b 00 1b 00 00 00 21 ed 0b 00 1d 00 00 00 | P...&.......$...........!....... |
c320 | 3d ed 0b 00 58 00 00 00 5b ed 0b 00 43 00 00 00 b4 ed 0b 00 56 00 00 00 f8 ed 0b 00 43 00 00 00 | =...X...[...C.......V.......C... |
c340 | 4f ee 0b 00 75 00 00 00 93 ee 0b 00 1e 00 00 00 09 ef 0b 00 25 00 00 00 28 ef 0b 00 25 00 00 00 | O...u...............%...(...%... |
c360 | 4e ef 0b 00 15 00 00 00 74 ef 0b 00 86 00 00 00 8a ef 0b 00 2e 00 00 00 11 f0 0b 00 95 00 00 00 | N.......t....................... |
c380 | 40 f0 0b 00 2b 00 00 00 d6 f0 0b 00 2b 00 00 00 02 f1 0b 00 37 01 00 00 2e f1 0b 00 38 00 00 00 | @...+.......+.......7.......8... |
c3a0 | 66 f2 0b 00 3b 00 00 00 9f f2 0b 00 18 00 00 00 db f2 0b 00 16 00 00 00 f4 f2 0b 00 7a 00 00 00 | f...;.......................z... |
c3c0 | 0b f3 0b 00 12 00 00 00 86 f3 0b 00 67 00 00 00 99 f3 0b 00 3a 00 00 00 01 f4 0b 00 3a 00 00 00 | ............g.......:.......:... |
c3e0 | 3c f4 0b 00 0c 00 00 00 77 f4 0b 00 18 00 00 00 84 f4 0b 00 39 00 00 00 9d f4 0b 00 47 00 00 00 | <.......w...........9.......G... |
c400 | d7 f4 0b 00 42 00 00 00 1f f5 0b 00 4c 00 00 00 62 f5 0b 00 3f 00 00 00 af f5 0b 00 3b 00 00 00 | ....B.......L...b...?.......;... |
c420 | ef f5 0b 00 41 00 00 00 2b f6 0b 00 11 01 00 00 6d f6 0b 00 3d 00 00 00 7f f7 0b 00 31 00 00 00 | ....A...+.......m...=.......1... |
c440 | bd f7 0b 00 26 01 00 00 ef f7 0b 00 e2 00 00 00 16 f9 0b 00 9f 00 00 00 f9 f9 0b 00 9f 00 00 00 | ....&........................... |
c460 | 99 fa 0b 00 3a 00 00 00 39 fb 0b 00 f8 00 00 00 74 fb 0b 00 e2 00 00 00 6d fc 0b 00 88 00 00 00 | ....:...9.......t.......m....... |
c480 | 50 fd 0b 00 31 00 00 00 d9 fd 0b 00 06 00 00 00 0b fe 0b 00 0d 00 00 00 12 fe 0b 00 0b 00 00 00 | P...1........................... |
c4a0 | 20 fe 0b 00 2e 00 00 00 2c fe 0b 00 67 00 00 00 5b fe 0b 00 3e 00 00 00 c3 fe 0b 00 13 00 00 00 | ........,...g...[...>........... |
c4c0 | 02 ff 0b 00 ab 00 00 00 16 ff 0b 00 b5 00 00 00 c2 ff 0b 00 b5 00 00 00 78 00 0c 00 90 00 00 00 | ........................x....... |
c4e0 | 2e 01 0c 00 30 00 00 00 bf 01 0c 00 47 00 00 00 f0 01 0c 00 22 00 00 00 38 02 0c 00 22 00 00 00 | ....0.......G......."...8..."... |
c500 | 5b 02 0c 00 24 00 00 00 7e 02 0c 00 09 00 00 00 a3 02 0c 00 09 00 00 00 ad 02 0c 00 92 00 00 00 | [...$...~....................... |
c520 | b7 02 0c 00 38 00 00 00 4a 03 0c 00 05 00 00 00 83 03 0c 00 0f 00 00 00 89 03 0c 00 88 00 00 00 | ....8...J....................... |
c540 | 99 03 0c 00 bd 00 00 00 22 04 0c 00 c2 00 00 00 e0 04 0c 00 7e 00 00 00 a3 05 0c 00 0b 00 00 00 | ........"...........~........... |
c560 | 22 06 0c 00 12 00 00 00 2e 06 0c 00 6a 00 00 00 41 06 0c 00 2f 00 00 00 ac 06 0c 00 0a 00 00 00 | "...........j...A.../........... |
c580 | dc 06 0c 00 f4 00 00 00 e7 06 0c 00 d2 01 00 00 dc 07 0c 00 ad 01 00 00 af 09 0c 00 dd 00 00 00 | ................................ |
c5a0 | 5d 0b 0c 00 91 01 00 00 3b 0c 0c 00 7f 00 00 00 cd 0d 0c 00 af 00 00 00 4d 0e 0c 00 2a 03 00 00 | ].......;...............M...*... |
c5c0 | fd 0e 0c 00 6b 00 00 00 28 12 0c 00 a3 00 00 00 94 12 0c 00 9a 00 00 00 38 13 0c 00 50 00 00 00 | ....k...(...............8...P... |
c5e0 | d3 13 0c 00 81 00 00 00 24 14 0c 00 2c 00 00 00 a6 14 0c 00 7a 00 00 00 d3 14 0c 00 2b 00 00 00 | ........$...,.......z.......+... |
c600 | 4e 15 0c 00 31 00 00 00 7a 15 0c 00 25 00 00 00 ac 15 0c 00 09 00 00 00 d2 15 0c 00 34 00 00 00 | N...1...z...%...............4... |
c620 | dc 15 0c 00 23 00 00 00 11 16 0c 00 23 00 00 00 35 16 0c 00 25 00 00 00 59 16 0c 00 11 00 00 00 | ....#.......#...5...%...Y....... |
c640 | 7f 16 0c 00 12 00 00 00 91 16 0c 00 12 00 00 00 a4 16 0c 00 1e 00 00 00 b7 16 0c 00 23 00 00 00 | ............................#... |
c660 | d6 16 0c 00 39 00 00 00 fa 16 0c 00 2c 00 00 00 34 17 0c 00 2d 00 00 00 61 17 0c 00 1c 00 00 00 | ....9.......,...4...-...a....... |
c680 | 8f 17 0c 00 1d 00 00 00 ac 17 0c 00 1e 00 00 00 ca 17 0c 00 0c 00 00 00 e9 17 0c 00 28 00 00 00 | ............................(... |
c6a0 | f6 17 0c 00 3a 00 00 00 1f 18 0c 00 30 00 00 00 5a 18 0c 00 27 00 00 00 8b 18 0c 00 38 00 00 00 | ....:.......0...Z...'.......8... |
c6c0 | b3 18 0c 00 1d 00 00 00 ec 18 0c 00 13 00 00 00 0a 19 0c 00 0b 00 00 00 1e 19 0c 00 28 00 00 00 | ............................(... |
c6e0 | 2a 19 0c 00 30 00 00 00 53 19 0c 00 4c 00 00 00 84 19 0c 00 74 00 00 00 d1 19 0c 00 55 00 00 00 | *...0...S...L.......t.......U... |
c700 | 46 1a 0c 00 30 00 00 00 9c 1a 0c 00 0b 00 00 00 cd 1a 0c 00 28 00 00 00 d9 1a 0c 00 35 00 00 00 | F...0...............(.......5... |
c720 | 02 1b 0c 00 0a 00 00 00 38 1b 0c 00 56 00 00 00 43 1b 0c 00 1f 00 00 00 9a 1b 0c 00 18 00 00 00 | ........8...V...C............... |
c740 | ba 1b 0c 00 2d 00 00 00 d3 1b 0c 00 23 00 00 00 01 1c 0c 00 3f 00 00 00 25 1c 0c 00 4d 00 00 00 | ....-.......#.......?...%...M... |
c760 | 65 1c 0c 00 20 00 00 00 b3 1c 0c 00 6d 00 00 00 d4 1c 0c 00 61 00 00 00 42 1d 0c 00 63 00 00 00 | e...........m.......a...B...c... |
c780 | a4 1d 0c 00 31 00 00 00 08 1e 0c 00 34 00 00 00 3a 1e 0c 00 1b 01 00 00 6f 1e 0c 00 3a 00 00 00 | ....1.......4...:.......o...:... |
c7a0 | 8b 1f 0c 00 4a 00 00 00 c6 1f 0c 00 38 00 00 00 11 20 0c 00 40 01 00 00 4a 20 0c 00 3a 00 00 00 | ....J.......8.......@...J...:... |
c7c0 | 8b 21 0c 00 4f 00 00 00 c6 21 0c 00 2e 00 00 00 16 22 0c 00 86 00 00 00 45 22 0c 00 bb 01 00 00 | .!..O....!......."......E"...... |
c7e0 | cc 22 0c 00 06 01 00 00 88 24 0c 00 bf 00 00 00 8f 25 0c 00 25 00 00 00 4f 26 0c 00 4b 00 00 00 | .".......$.......%..%...O&..K... |
c800 | 75 26 0c 00 79 00 00 00 c1 26 0c 00 22 00 00 00 3b 27 0c 00 64 00 00 00 5e 27 0c 00 16 00 00 00 | u&..y....&.."...;'..d...^'...... |
c820 | c3 27 0c 00 14 00 00 00 da 27 0c 00 79 00 00 00 ef 27 0c 00 42 00 00 00 69 28 0c 00 1c 00 00 00 | .'.......'..y....'..B...i(...... |
c840 | ac 28 0c 00 33 00 00 00 c9 28 0c 00 a7 00 00 00 fd 28 0c 00 c1 00 00 00 a5 29 0c 00 32 00 00 00 | .(..3....(.......(.......)..2... |
c860 | 67 2a 0c 00 05 00 00 00 9a 2a 0c 00 10 00 00 00 a0 2a 0c 00 5e 00 00 00 b1 2a 0c 00 08 00 00 00 | g*.......*.......*..^....*...... |
c880 | 10 2b 0c 00 dc 00 00 00 19 2b 0c 00 10 00 00 00 f6 2b 0c 00 0d 00 00 00 07 2c 0c 00 21 00 00 00 | .+.......+.......+.......,..!... |
c8a0 | 15 2c 0c 00 21 00 00 00 37 2c 0c 00 d4 00 00 00 59 2c 0c 00 14 00 00 00 2e 2d 0c 00 38 00 00 00 | .,..!...7,......Y,.......-..8... |
c8c0 | 43 2d 0c 00 a3 00 00 00 7c 2d 0c 00 a7 00 00 00 20 2e 0c 00 23 00 00 00 c8 2e 0c 00 91 00 00 00 | C-......|-..........#........... |
c8e0 | ec 2e 0c 00 59 00 00 00 7e 2f 0c 00 a6 01 00 00 d8 2f 0c 00 ca 00 00 00 7f 31 0c 00 70 01 00 00 | ....Y...~/......./.......1..p... |
c900 | 4a 32 0c 00 63 01 00 00 bb 33 0c 00 07 00 00 00 1f 35 0c 00 15 00 00 00 27 35 0c 00 12 00 00 00 | J2..c....3.......5......'5...... |
c920 | 3d 35 0c 00 0f 00 00 00 50 35 0c 00 16 00 00 00 60 35 0c 00 2f 00 00 00 77 35 0c 00 2f 00 00 00 | =5......P5......`5../...w5../... |
c940 | a7 35 0c 00 77 00 00 00 d7 35 0c 00 17 00 00 00 4f 36 0c 00 10 00 00 00 67 36 0c 00 51 00 00 00 | .5..w....5......O6......g6..Q... |
c960 | 78 36 0c 00 08 00 00 00 ca 36 0c 00 bf 00 00 00 d3 36 0c 00 58 00 00 00 93 37 0c 00 e0 00 00 00 | x6.......6.......6..X....7...... |
c980 | ec 37 0c 00 3d 00 00 00 cd 38 0c 00 3b 00 00 00 0b 39 0c 00 3c 00 00 00 47 39 0c 00 3e 00 00 00 | .7..=....8..;....9..<...G9..>... |
c9a0 | 84 39 0c 00 3c 00 00 00 c3 39 0c 00 3d 00 00 00 00 3a 0c 00 34 00 00 00 3e 3a 0c 00 36 00 00 00 | .9..<....9..=....:..4...>:..6... |
c9c0 | 73 3a 0c 00 33 00 00 00 aa 3a 0c 00 a3 00 00 00 de 3a 0c 00 08 00 00 00 82 3b 0c 00 1b 00 00 00 | s:..3....:.......:.......;...... |
c9e0 | 8b 3b 0c 00 09 00 00 00 a7 3b 0c 00 c5 00 00 00 b1 3b 0c 00 0f 00 00 00 77 3c 0c 00 0f 00 00 00 | .;.......;.......;......w<...... |
ca00 | 87 3c 0c 00 31 00 00 00 97 3c 0c 00 2a 00 00 00 c9 3c 0c 00 19 00 00 00 f4 3c 0c 00 0b 00 00 00 | .<..1....<..*....<.......<...... |
ca20 | 0e 3d 0c 00 40 00 00 00 1a 3d 0c 00 28 00 00 00 5b 3d 0c 00 1c 00 00 00 84 3d 0c 00 8e 00 00 00 | .=..@....=..(...[=.......=...... |
ca40 | a1 3d 0c 00 08 00 00 00 30 3e 0c 00 c1 00 00 00 39 3e 0c 00 9a 00 00 00 fb 3e 0c 00 dc 00 00 00 | .=......0>......9>.......>...... |
ca60 | 96 3f 0c 00 a5 01 00 00 73 40 0c 00 03 00 00 00 19 42 0c 00 98 00 00 00 1d 42 0c 00 46 01 00 00 | .?......s@.......B.......B..F... |
ca80 | b6 42 0c 00 0a 00 00 00 fd 43 0c 00 0a 00 00 00 08 44 0c 00 39 00 00 00 13 44 0c 00 0d 00 00 00 | .B.......C.......D..9....D...... |
caa0 | 4d 44 0c 00 08 00 00 00 5b 44 0c 00 0f 00 00 00 64 44 0c 00 2d 00 00 00 74 44 0c 00 e5 00 00 00 | MD......[D......dD..-...tD...... |
cac0 | a2 44 0c 00 0a 00 00 00 88 45 0c 00 57 01 00 00 93 45 0c 00 31 01 00 00 eb 46 0c 00 0a 00 00 00 | .D.......E..W....E..1....F...... |
cae0 | 1d 48 0c 00 69 01 00 00 28 48 0c 00 26 00 00 00 92 49 0c 00 05 00 00 00 b9 49 0c 00 71 00 00 00 | .H..i...(H..&....I.......I..q... |
cb00 | bf 49 0c 00 5c 00 00 00 31 4a 0c 00 90 00 00 00 8e 4a 0c 00 33 00 00 00 1f 4b 0c 00 51 00 00 00 | .I..\...1J.......J..3....K..Q... |
cb20 | 53 4b 0c 00 95 00 00 00 a5 4b 0c 00 09 00 00 00 3b 4c 0c 00 c1 00 00 00 45 4c 0c 00 53 00 00 00 | SK.......K......;L......EL..S... |
cb40 | 07 4d 0c 00 08 00 00 00 5b 4d 0c 00 15 00 00 00 64 4d 0c 00 15 00 00 00 7a 4d 0c 00 16 00 00 00 | .M......[M......dM......zM...... |
cb60 | 90 4d 0c 00 23 00 00 00 a7 4d 0c 00 14 00 00 00 cb 4d 0c 00 13 00 00 00 e0 4d 0c 00 0d 00 00 00 | .M..#....M.......M.......M...... |
cb80 | f4 4d 0c 00 0e 00 00 00 02 4e 0c 00 0f 00 00 00 11 4e 0c 00 4f 01 00 00 21 4e 0c 00 20 01 00 00 | .M.......N.......N..O...!N...... |
cba0 | 71 4f 0c 00 23 01 00 00 92 50 0c 00 4d 00 00 00 b6 51 0c 00 95 00 00 00 04 52 0c 00 89 00 00 00 | qO..#....P..M....Q.......R...... |
cbc0 | 9a 52 0c 00 22 00 00 00 24 53 0c 00 0f 00 00 00 47 53 0c 00 0f 00 00 00 57 53 0c 00 28 00 00 00 | .R.."...$S......GS......WS..(... |
cbe0 | 67 53 0c 00 78 01 00 00 90 53 0c 00 60 00 00 00 09 55 0c 00 1d 01 00 00 6a 55 0c 00 0b 00 00 00 | gS..x....S..`....U......jU...... |
cc00 | 88 56 0c 00 53 00 00 00 94 56 0c 00 ca 00 00 00 e8 56 0c 00 f4 00 00 00 b3 57 0c 00 98 00 00 00 | .V..S....V.......V.......W...... |
cc20 | a8 58 0c 00 98 00 00 00 41 59 0c 00 00 01 00 00 da 59 0c 00 aa 00 00 00 db 5a 0c 00 05 00 00 00 | .X......AY.......Y.......Z...... |
cc40 | 86 5b 0c 00 0e 00 00 00 8c 5b 0c 00 0f 00 00 00 9b 5b 0c 00 0b 00 00 00 ab 5b 0c 00 1f 00 00 00 | .[.......[.......[.......[...... |
cc60 | b7 5b 0c 00 b1 00 00 00 d7 5b 0c 00 17 00 00 00 89 5c 0c 00 a7 00 00 00 a1 5c 0c 00 21 00 00 00 | .[.......[.......\.......\..!... |
cc80 | 49 5d 0c 00 90 00 00 00 6b 5d 0c 00 26 00 00 00 fc 5d 0c 00 1a 00 00 00 23 5e 0c 00 44 00 00 00 | I]......k]..&....]......#^..D... |
cca0 | 3e 5e 0c 00 48 00 00 00 83 5e 0c 00 2a 00 00 00 cc 5e 0c 00 6e 00 00 00 f7 5e 0c 00 90 00 00 00 | >^..H....^..*....^..n....^...... |
ccc0 | 66 5f 0c 00 cf 00 00 00 f7 5f 0c 00 0f 00 00 00 c7 60 0c 00 0c 00 00 00 d7 60 0c 00 69 01 00 00 | f_......._.......`.......`..i... |
cce0 | e4 60 0c 00 93 00 00 00 4e 62 0c 00 0f 00 00 00 e2 62 0c 00 10 00 00 00 f2 62 0c 00 3e 00 00 00 | .`......Nb.......b.......b..>... |
cd00 | 03 63 0c 00 81 00 00 00 42 63 0c 00 8b 00 00 00 c4 63 0c 00 bd 00 00 00 50 64 0c 00 30 01 00 00 | .c......Bc.......c......Pd..0... |
cd20 | 0e 65 0c 00 96 00 00 00 3f 66 0c 00 69 01 00 00 d6 66 0c 00 0c 00 00 00 40 68 0c 00 5a 00 00 00 | .e......?f..i....f......@h..Z... |
cd40 | 4d 68 0c 00 3c 01 00 00 a8 68 0c 00 db 00 00 00 e5 69 0c 00 52 00 00 00 c1 6a 0c 00 2f 00 00 00 | Mh..<....h.......i..R....j../... |
cd60 | 14 6b 0c 00 ac 00 00 00 44 6b 0c 00 09 00 00 00 f1 6b 0c 00 eb 00 00 00 fb 6b 0c 00 d8 00 00 00 | .k......Dk.......k.......k...... |
cd80 | e7 6c 0c 00 5c 00 00 00 c0 6d 0c 00 63 00 00 00 1d 6e 0c 00 22 01 00 00 81 6e 0c 00 af 00 00 00 | .l..\....m..c....n.."....n...... |
cda0 | a4 6f 0c 00 30 00 00 00 54 70 0c 00 4b 00 00 00 85 70 0c 00 66 00 00 00 d1 70 0c 00 52 00 00 00 | .o..0...Tp..K....p..f....p..R... |
cdc0 | 38 71 0c 00 49 00 00 00 8b 71 0c 00 1b 01 00 00 d5 71 0c 00 bb 00 00 00 f1 72 0c 00 60 00 00 00 | 8q..I....q.......q.......r..`... |
cde0 | ad 73 0c 00 62 00 00 00 0e 74 0c 00 52 01 00 00 71 74 0c 00 f3 00 00 00 c4 75 0c 00 bc 00 00 00 | .s..b....t..R...qt.......u...... |
ce00 | b8 76 0c 00 77 00 00 00 75 77 0c 00 af 00 00 00 ed 77 0c 00 e8 00 00 00 9d 78 0c 00 76 00 00 00 | .v..w...uw.......w.......x..v... |
ce20 | 86 79 0c 00 3c 01 00 00 fd 79 0c 00 97 00 00 00 3a 7b 0c 00 a2 00 00 00 d2 7b 0c 00 d3 00 00 00 | .y..<....y......:{.......{...... |
ce40 | 75 7c 0c 00 62 00 00 00 49 7d 0c 00 0e 00 00 00 ac 7d 0c 00 cc 00 00 00 bb 7d 0c 00 32 00 00 00 | u|..b...I}.......}.......}..2... |
ce60 | 88 7e 0c 00 11 00 00 00 bb 7e 0c 00 14 01 00 00 cd 7e 0c 00 b9 00 00 00 e2 7f 0c 00 06 00 00 00 | .~.......~.......~.............. |
ce80 | 9c 80 0c 00 06 00 00 00 a3 80 0c 00 5d 02 00 00 aa 80 0c 00 0e 00 00 00 08 83 0c 00 80 01 00 00 | ............]................... |
cea0 | 17 83 0c 00 23 01 00 00 98 84 0c 00 0c 01 00 00 bc 85 0c 00 8b 00 00 00 c9 86 0c 00 06 00 00 00 | ....#........................... |
cec0 | 55 87 0c 00 59 00 00 00 5c 87 0c 00 59 00 00 00 b6 87 0c 00 07 00 00 00 10 88 0c 00 15 00 00 00 | U...Y...\...Y................... |
cee0 | 18 88 0c 00 44 00 00 00 2e 88 0c 00 4d 00 00 00 73 88 0c 00 3d 00 00 00 c1 88 0c 00 10 00 00 00 | ....D.......M...s...=........... |
cf00 | ff 88 0c 00 45 00 00 00 10 89 0c 00 59 00 00 00 56 89 0c 00 7c 00 00 00 b0 89 0c 00 ac 00 00 00 | ....E.......Y...V...|........... |
cf20 | 2d 8a 0c 00 89 00 00 00 da 8a 0c 00 23 00 00 00 64 8b 0c 00 0e 00 00 00 88 8b 0c 00 26 00 00 00 | -...........#...d...........&... |
cf40 | 97 8b 0c 00 2d 00 00 00 be 8b 0c 00 2e 00 00 00 ec 8b 0c 00 2d 00 00 00 1b 8c 0c 00 0f 00 00 00 | ....-...............-........... |
cf60 | 49 8c 0c 00 1d 01 00 00 59 8c 0c 00 19 01 00 00 77 8d 0c 00 07 00 00 00 91 8e 0c 00 17 00 00 00 | I.......Y.......w............... |
cf80 | 99 8e 0c 00 0e 00 00 00 b1 8e 0c 00 25 00 00 00 c0 8e 0c 00 0e 00 00 00 e6 8e 0c 00 11 00 00 00 | ............%................... |
cfa0 | f5 8e 0c 00 0f 00 00 00 07 8f 0c 00 10 00 00 00 17 8f 0c 00 0e 00 00 00 28 8f 0c 00 06 00 00 00 | ........................(....... |
cfc0 | 37 8f 0c 00 d0 00 00 00 3e 8f 0c 00 57 00 00 00 0f 90 0c 00 2b 00 00 00 67 90 0c 00 08 00 00 00 | 7.......>...W.......+...g....... |
cfe0 | 93 90 0c 00 13 00 00 00 9c 90 0c 00 22 00 00 00 b0 90 0c 00 0b 00 00 00 d3 90 0c 00 08 00 00 00 | ............"................... |
d000 | df 90 0c 00 1a 00 00 00 e8 90 0c 00 6d 00 00 00 03 91 0c 00 17 00 00 00 71 91 0c 00 47 01 00 00 | ............m...........q...G... |
d020 | 89 91 0c 00 14 00 00 00 d1 92 0c 00 0d 00 00 00 e6 92 0c 00 0c 00 00 00 f4 92 0c 00 3e 00 00 00 | ............................>... |
d040 | 01 93 0c 00 78 00 00 00 40 93 0c 00 3c 00 00 00 b9 93 0c 00 df 00 00 00 f6 93 0c 00 34 00 00 00 | ....x...@...<...............4... |
d060 | d6 94 0c 00 4d 00 00 00 0b 95 0c 00 3e 00 00 00 59 95 0c 00 64 00 00 00 98 95 0c 00 db 00 00 00 | ....M.......>...Y...d........... |
d080 | fd 95 0c 00 3b 00 00 00 d9 96 0c 00 18 00 00 00 15 97 0c 00 12 00 00 00 2e 97 0c 00 3f 00 00 00 | ....;.......................?... |
d0a0 | 41 97 0c 00 04 00 00 00 81 97 0c 00 11 00 00 00 86 97 0c 00 0a 00 00 00 98 97 0c 00 2a 00 00 00 | A...........................*... |
d0c0 | a3 97 0c 00 10 00 00 00 ce 97 0c 00 09 00 00 00 df 97 0c 00 30 00 00 00 e9 97 0c 00 08 00 00 00 | ....................0........... |
d0e0 | 1a 98 0c 00 05 01 00 00 23 98 0c 00 1e 00 00 00 29 99 0c 00 13 00 00 00 48 99 0c 00 c5 00 00 00 | ........#.......).......H....... |
d100 | 5c 99 0c 00 6a 00 00 00 22 9a 0c 00 c0 00 00 00 8d 9a 0c 00 25 00 00 00 4e 9b 0c 00 25 00 00 00 | \...j..."...........%...N...%... |
d120 | 74 9b 0c 00 03 00 00 00 9a 9b 0c 00 d3 00 00 00 9e 9b 0c 00 a8 00 00 00 72 9c 0c 00 90 01 00 00 | t.......................r....... |
d140 | 1b 9d 0c 00 d4 01 00 00 ac 9e 0c 00 23 01 00 00 81 a0 0c 00 2a 00 00 00 a5 a1 0c 00 0a 00 00 00 | ............#.......*........... |
d160 | d0 a1 0c 00 26 00 00 00 db a1 0c 00 0a 00 00 00 02 a2 0c 00 96 01 00 00 0d a2 0c 00 05 00 00 00 | ....&........................... |
d180 | a4 a3 0c 00 05 00 00 00 aa a3 0c 00 2b 00 00 00 b0 a3 0c 00 02 00 00 00 dc a3 0c 00 0a 00 00 00 | ............+................... |
d1a0 | df a3 0c 00 53 00 00 00 ea a3 0c 00 1d 00 00 00 3e a4 0c 00 25 00 00 00 5c a4 0c 00 18 00 00 00 | ....S...........>...%...\....... |
d1c0 | 82 a4 0c 00 19 00 00 00 9b a4 0c 00 19 00 00 00 b5 a4 0c 00 33 00 00 00 cf a4 0c 00 33 00 00 00 | ....................3.......3... |
d1e0 | 03 a5 0c 00 ea 00 00 00 37 a5 0c 00 2b 00 00 00 22 a6 0c 00 4d 00 00 00 4e a6 0c 00 15 00 00 00 | ........7...+..."...M...N....... |
d200 | 9c a6 0c 00 14 02 00 00 b2 a6 0c 00 34 00 00 00 c7 a8 0c 00 33 00 00 00 fc a8 0c 00 36 00 00 00 | ............4.......3.......6... |
d220 | 30 a9 0c 00 34 00 00 00 67 a9 0c 00 2d 00 00 00 9c a9 0c 00 27 00 00 00 ca a9 0c 00 1b 00 00 00 | 0...4...g...-.......'........... |
d240 | f2 a9 0c 00 38 00 00 00 0e aa 0c 00 38 00 00 00 47 aa 0c 00 06 00 00 00 80 aa 0c 00 04 00 00 00 | ....8.......8...G............... |
d260 | 87 aa 0c 00 05 00 00 00 8c aa 0c 00 11 00 00 00 92 aa 0c 00 19 00 00 00 a4 aa 0c 00 1d 00 00 00 | ................................ |
d280 | be aa 0c 00 19 00 00 00 dc aa 0c 00 41 00 00 00 f6 aa 0c 00 11 00 00 00 38 ab 0c 00 12 00 00 00 | ............A...........8....... |
d2a0 | 4a ab 0c 00 06 00 00 00 5d ab 0c 00 0b 00 00 00 64 ab 0c 00 f7 00 00 00 70 ab 0c 00 24 01 00 00 | J.......].......d.......p...$... |
d2c0 | 68 ac 0c 00 39 00 00 00 8d ad 0c 00 05 00 00 00 c7 ad 0c 00 19 00 00 00 cd ad 0c 00 04 00 00 00 | h...9........................... |
d2e0 | e7 ad 0c 00 1b 00 00 00 ec ad 0c 00 25 00 00 00 08 ae 0c 00 2d 00 00 00 2e ae 0c 00 2e 00 00 00 | ............%.......-........... |
d300 | 5c ae 0c 00 0c 00 00 00 8b ae 0c 00 0a 00 00 00 98 ae 0c 00 7a 00 00 00 a3 ae 0c 00 50 00 00 00 | \...................z.......P... |
d320 | 1e af 0c 00 0b 00 00 00 6f af 0c 00 76 00 00 00 7b af 0c 00 04 00 00 00 f2 af 0c 00 10 00 00 00 | ........o...v...{............... |
d340 | f7 af 0c 00 15 00 00 00 08 b0 0c 00 16 00 00 00 1e b0 0c 00 20 00 00 00 35 b0 0c 00 1b 00 00 00 | ........................5....... |
d360 | 56 b0 0c 00 0e 00 00 00 72 b0 0c 00 16 00 00 00 81 b0 0c 00 11 00 00 00 98 b0 0c 00 14 00 00 00 | V.......r....................... |
d380 | aa b0 0c 00 87 00 00 00 bf b0 0c 00 39 00 00 00 47 b1 0c 00 3a 00 00 00 81 b1 0c 00 3a 00 00 00 | ............9...G...:.......:... |
d3a0 | bc b1 0c 00 ec 00 00 00 f7 b1 0c 00 14 00 00 00 e4 b2 0c 00 1f 00 00 00 f9 b2 0c 00 25 00 00 00 | ............................%... |
d3c0 | 19 b3 0c 00 0c 00 00 00 3f b3 0c 00 3e 00 00 00 4c b3 0c 00 0c 00 00 00 8b b3 0c 00 0a 00 00 00 | ........?...>...L............... |
d3e0 | 98 b3 0c 00 54 00 00 00 a3 b3 0c 00 0b 00 00 00 f8 b3 0c 00 0c 00 00 00 04 b4 0c 00 05 00 00 00 | ....T........................... |
d400 | 11 b4 0c 00 1a 00 00 00 17 b4 0c 00 16 00 00 00 32 b4 0c 00 14 00 00 00 49 b4 0c 00 1c 00 00 00 | ................2.......I....... |
d420 | 5e b4 0c 00 75 00 00 00 7b b4 0c 00 07 01 00 00 f1 b4 0c 00 78 01 00 00 f9 b5 0c 00 45 00 00 00 | ^...u...{...........x.......E... |
d440 | 72 b7 0c 00 39 00 00 00 b8 b7 0c 00 ec 00 00 00 f2 b7 0c 00 e6 00 00 00 df b8 0c 00 4a 00 00 00 | r...9.......................J... |
d460 | c6 b9 0c 00 57 00 00 00 11 ba 0c 00 69 00 00 00 69 ba 0c 00 d2 00 00 00 d3 ba 0c 00 c2 00 00 00 | ....W.......i...i............... |
d480 | a6 bb 0c 00 b8 00 00 00 69 bc 0c 00 98 00 00 00 22 bd 0c 00 b5 00 00 00 bb bd 0c 00 ff 00 00 00 | ........i......."............... |
d4a0 | 71 be 0c 00 7f 00 00 00 71 bf 0c 00 83 00 00 00 f1 bf 0c 00 5a 00 00 00 75 c0 0c 00 69 00 00 00 | q.......q...........Z...u...i... |
d4c0 | d0 c0 0c 00 0d 02 00 00 3a c1 0c 00 b8 00 00 00 48 c3 0c 00 a4 00 00 00 01 c4 0c 00 b1 01 00 00 | ........:.......H............... |
d4e0 | a6 c4 0c 00 ad 00 00 00 58 c6 0c 00 6f 00 00 00 06 c7 0c 00 89 00 00 00 76 c7 0c 00 ae 00 00 00 | ........X...o...........v....... |
d500 | 00 c8 0c 00 38 01 00 00 af c8 0c 00 46 01 00 00 e8 c9 0c 00 5f 01 00 00 2f cb 0c 00 f0 00 00 00 | ....8.......F......._.../....... |
d520 | 8f cc 0c 00 57 00 00 00 80 cd 0c 00 83 00 00 00 d8 cd 0c 00 32 00 00 00 5c ce 0c 00 25 01 00 00 | ....W...............2...\...%... |
d540 | 8f ce 0c 00 6c 00 00 00 b5 cf 0c 00 6a 01 00 00 22 d0 0c 00 9b 00 00 00 8d d1 0c 00 2a 00 00 00 | ....l.......j..."...........*... |
d560 | 29 d2 0c 00 78 00 00 00 54 d2 0c 00 a3 00 00 00 cd d2 0c 00 94 00 00 00 71 d3 0c 00 93 00 00 00 | )...x...T...............q....... |
d580 | 06 d4 0c 00 51 00 00 00 9a d4 0c 00 92 00 00 00 ec d4 0c 00 c0 00 00 00 7f d5 0c 00 bb 00 00 00 | ....Q........................... |
d5a0 | 40 d6 0c 00 b2 00 00 00 fc d6 0c 00 97 00 00 00 af d7 0c 00 b5 00 00 00 47 d8 0c 00 55 00 00 00 | @.......................G...U... |
d5c0 | fd d8 0c 00 6e 00 00 00 53 d9 0c 00 a6 00 00 00 c2 d9 0c 00 a7 00 00 00 69 da 0c 00 ac 00 00 00 | ....n...S...............i....... |
d5e0 | 11 db 0c 00 73 00 00 00 be db 0c 00 68 00 00 00 32 dc 0c 00 42 01 00 00 9b dc 0c 00 d4 00 00 00 | ....s.......h...2...B........... |
d600 | de dd 0c 00 d1 00 00 00 b3 de 0c 00 b3 00 00 00 85 df 0c 00 38 00 00 00 39 e0 0c 00 87 00 00 00 | ....................8...9....... |
d620 | 72 e0 0c 00 8f 00 00 00 fa e0 0c 00 79 00 00 00 8a e1 0c 00 8a 00 00 00 04 e2 0c 00 a3 00 00 00 | r...........y................... |
d640 | 8f e2 0c 00 60 00 00 00 33 e3 0c 00 66 00 00 00 94 e3 0c 00 ab 00 00 00 fb e3 0c 00 45 00 00 00 | ....`...3...f...............E... |
d660 | a7 e4 0c 00 d3 00 00 00 ed e4 0c 00 d3 00 00 00 c1 e5 0c 00 8e 00 00 00 95 e6 0c 00 61 00 00 00 | ............................a... |
d680 | 24 e7 0c 00 7f 00 00 00 86 e7 0c 00 69 01 00 00 06 e8 0c 00 9d 01 00 00 70 e9 0c 00 b6 00 00 00 | $...........i...........p....... |
d6a0 | 0e eb 0c 00 cd 00 00 00 c5 eb 0c 00 bf 00 00 00 93 ec 0c 00 a8 00 00 00 53 ed 0c 00 5f 00 00 00 | ........................S..._... |
d6c0 | fc ed 0c 00 e5 00 00 00 5c ee 0c 00 55 00 00 00 42 ef 0c 00 69 00 00 00 98 ef 0c 00 74 00 00 00 | ........\...U...B...i.......t... |
d6e0 | 02 f0 0c 00 57 01 00 00 77 f0 0c 00 8a 00 00 00 cf f1 0c 00 9b 00 00 00 5a f2 0c 00 8d 00 00 00 | ....W...w...............Z....... |
d700 | f6 f2 0c 00 74 00 00 00 84 f3 0c 00 97 00 00 00 f9 f3 0c 00 5c 00 00 00 91 f4 0c 00 8e 00 00 00 | ....t...............\........... |
d720 | ee f4 0c 00 92 00 00 00 7d f5 0c 00 69 00 00 00 10 f6 0c 00 74 01 00 00 7a f6 0c 00 55 00 00 00 | ........}...i.......t...z...U... |
d740 | ef f7 0c 00 87 00 00 00 45 f8 0c 00 3e 00 00 00 cd f8 0c 00 d5 00 00 00 0c f9 0c 00 91 00 00 00 | ........E...>................... |
d760 | e2 f9 0c 00 bf 00 00 00 74 fa 0c 00 37 01 00 00 34 fb 0c 00 55 00 00 00 6c fc 0c 00 2c 00 00 00 | ........t...7...4...U...l...,... |
d780 | c2 fc 0c 00 21 00 00 00 ef fc 0c 00 9d 00 00 00 11 fd 0c 00 1e 00 00 00 af fd 0c 00 09 00 00 00 | ....!........................... |
d7a0 | ce fd 0c 00 1a 00 00 00 d8 fd 0c 00 b7 00 00 00 f3 fd 0c 00 40 00 00 00 ab fe 0c 00 31 00 00 00 | ....................@.......1... |
d7c0 | ec fe 0c 00 80 00 00 00 1e ff 0c 00 43 00 00 00 9f ff 0c 00 38 00 00 00 e3 ff 0c 00 2c 00 00 00 | ............C.......8.......,... |
d7e0 | 1c 00 0d 00 9f 00 00 00 49 00 0d 00 7e 00 00 00 e9 00 0d 00 a3 00 00 00 68 01 0d 00 55 00 00 00 | ........I...~...........h...U... |
d800 | 0c 02 0d 00 70 00 00 00 62 02 0d 00 70 00 00 00 d3 02 0d 00 4e 00 00 00 44 03 0d 00 3b 00 00 00 | ....p...b...p.......N...D...;... |
d820 | 93 03 0d 00 6b 01 00 00 cf 03 0d 00 4a 00 00 00 3b 05 0d 00 b5 00 00 00 86 05 0d 00 71 00 00 00 | ....k.......J...;...........q... |
d840 | 3c 06 0d 00 c2 00 00 00 ae 06 0d 00 67 00 00 00 71 07 0d 00 70 00 00 00 d9 07 0d 00 dd 00 00 00 | <...........g...q...p........... |
d860 | 4a 08 0d 00 dc 00 00 00 28 09 0d 00 4a 00 00 00 05 0a 0d 00 4d 00 00 00 50 0a 0d 00 32 00 00 00 | J.......(...J.......M...P...2... |
d880 | 9e 0a 0d 00 6f 00 00 00 d1 0a 0d 00 68 00 00 00 41 0b 0d 00 e3 00 00 00 aa 0b 0d 00 01 03 00 00 | ....o.......h...A............... |
d8a0 | 8e 0c 0d 00 2c 00 00 00 90 0f 0d 00 bc 01 00 00 bd 0f 0d 00 da 00 00 00 7a 11 0d 00 8e 00 00 00 | ....,...................z....... |
d8c0 | 55 12 0d 00 d0 00 00 00 e4 12 0d 00 81 00 00 00 b5 13 0d 00 b0 01 00 00 37 14 0d 00 94 00 00 00 | U.......................7....... |
d8e0 | e8 15 0d 00 f7 00 00 00 7d 16 0d 00 49 00 00 00 75 17 0d 00 56 02 00 00 bf 17 0d 00 85 00 00 00 | ........}...I...u...V........... |
d900 | 16 1a 0d 00 08 01 00 00 9c 1a 0d 00 1d 02 00 00 a5 1b 0d 00 c5 00 00 00 c3 1d 0d 00 5b 00 00 00 | ............................[... |
d920 | 89 1e 0d 00 46 00 00 00 e5 1e 0d 00 5b 00 00 00 2c 1f 0d 00 b4 00 00 00 88 1f 0d 00 33 00 00 00 | ....F.......[...,...........3... |
d940 | 3d 20 0d 00 60 00 00 00 71 20 0d 00 fe 00 00 00 d2 20 0d 00 61 00 00 00 d1 21 0d 00 9d 00 00 00 | =...`...q...........a....!...... |
d960 | 33 22 0d 00 9c 00 00 00 d1 22 0d 00 13 01 00 00 6e 23 0d 00 bb 00 00 00 82 24 0d 00 3d 00 00 00 | 3"......."......n#.......$..=... |
d980 | 3e 25 0d 00 c2 00 00 00 7c 25 0d 00 db 00 00 00 3f 26 0d 00 d2 00 00 00 1b 27 0d 00 77 00 00 00 | >%......|%......?&.......'..w... |
d9a0 | ee 27 0d 00 08 01 00 00 66 28 0d 00 96 00 00 00 6f 29 0d 00 2e 01 00 00 06 2a 0d 00 68 00 00 00 | .'......f(......o).......*..h... |
d9c0 | 35 2b 0d 00 3c 00 00 00 9e 2b 0d 00 45 01 00 00 db 2b 0d 00 c1 01 00 00 21 2d 0d 00 4e 00 00 00 | 5+..<....+..E....+......!-..N... |
d9e0 | e3 2e 0d 00 62 00 00 00 32 2f 0d 00 ae 00 00 00 95 2f 0d 00 dd 00 00 00 44 30 0d 00 77 00 00 00 | ....b...2/......./......D0..w... |
da00 | 22 31 0d 00 b7 00 00 00 9a 31 0d 00 a2 00 00 00 52 32 0d 00 bb 00 00 00 f5 32 0d 00 5c 00 00 00 | "1.......1......R2.......2..\... |
da20 | b1 33 0d 00 6a 01 00 00 0e 34 0d 00 62 00 00 00 79 35 0d 00 c3 00 00 00 dc 35 0d 00 11 00 00 00 | .3..j....4..b...y5.......5...... |
da40 | a0 36 0d 00 ba 00 00 00 b2 36 0d 00 ba 00 00 00 6d 37 0d 00 bc 00 00 00 28 38 0d 00 6e 00 00 00 | .6.......6......m7......(8..n... |
da60 | e5 38 0d 00 6f 00 00 00 54 39 0d 00 a0 00 00 00 c4 39 0d 00 42 00 00 00 65 3a 0d 00 d2 00 00 00 | .8..o...T9.......9..B...e:...... |
da80 | a8 3a 0d 00 1d 01 00 00 7b 3b 0d 00 9b 01 00 00 99 3c 0d 00 9b 01 00 00 35 3e 0d 00 6b 00 00 00 | .:......{;.......<......5>..k... |
daa0 | d1 3f 0d 00 98 00 00 00 3d 40 0d 00 4a 00 00 00 d6 40 0d 00 0a 00 00 00 21 41 0d 00 18 00 00 00 | .?......=@..J....@......!A...... |
dac0 | 2c 41 0d 00 3e 00 00 00 45 41 0d 00 67 01 00 00 84 41 0d 00 0d 00 00 00 ec 42 0d 00 16 00 00 00 | ,A..>...EA..g....A.......B...... |
dae0 | fa 42 0d 00 23 00 00 00 11 43 0d 00 0d 00 00 00 35 43 0d 00 58 00 00 00 43 43 0d 00 67 00 00 00 | .B..#....C......5C..X...CC..g... |
db00 | 9c 43 0d 00 ef 00 00 00 04 44 0d 00 6e 00 00 00 f4 44 0d 00 98 00 00 00 63 45 0d 00 0b 00 00 00 | .C.......D..n....D......cE...... |
db20 | fc 45 0d 00 0b 00 00 00 08 46 0d 00 4c 00 00 00 14 46 0d 00 2f 00 00 00 61 46 0d 00 17 00 00 00 | .E.......F..L....F../...aF...... |
db40 | 91 46 0d 00 10 00 00 00 a9 46 0d 00 10 00 00 00 ba 46 0d 00 90 00 00 00 cb 46 0d 00 17 00 00 00 | .F.......F.......F.......F...... |
db60 | 5c 47 0d 00 37 00 00 00 74 47 0d 00 36 00 00 00 ac 47 0d 00 1b 00 00 00 e3 47 0d 00 2f 00 00 00 | \G..7...tG..6....G.......G../... |
db80 | ff 47 0d 00 97 00 00 00 2f 48 0d 00 10 00 00 00 c7 48 0d 00 0a 00 00 00 d8 48 0d 00 18 00 00 00 | .G....../H.......H.......H...... |
dba0 | e3 48 0d 00 72 01 00 00 fc 48 0d 00 40 00 00 00 6f 4a 0d 00 7f 01 00 00 b0 4a 0d 00 c0 00 00 00 | .H..r....H..@...oJ.......J...... |
dbc0 | 30 4c 0d 00 48 01 00 00 f1 4c 0d 00 54 01 00 00 3a 4e 0d 00 9e 01 00 00 8f 4f 0d 00 14 00 00 00 | 0L..H....L..T...:N.......O...... |
dbe0 | 2e 51 0d 00 08 00 00 00 43 51 0d 00 18 00 00 00 4c 51 0d 00 31 00 00 00 65 51 0d 00 8f 01 00 00 | .Q......CQ......LQ..1...eQ...... |
dc00 | 97 51 0d 00 f7 00 00 00 27 53 0d 00 e9 00 00 00 1f 54 0d 00 89 00 00 00 09 55 0d 00 38 00 00 00 | .Q......'S.......T.......U..8... |
dc20 | 93 55 0d 00 8f 00 00 00 cc 55 0d 00 37 00 00 00 5c 56 0d 00 1b 00 00 00 94 56 0d 00 25 01 00 00 | .U.......U..7...\V.......V..%... |
dc40 | b0 56 0d 00 cb 00 00 00 d6 57 0d 00 db 00 00 00 a2 58 0d 00 d7 00 00 00 7e 59 0d 00 a5 00 00 00 | .V.......W.......X......~Y...... |
dc60 | 56 5a 0d 00 93 00 00 00 fc 5a 0d 00 e3 00 00 00 90 5b 0d 00 02 02 00 00 74 5c 0d 00 c4 00 00 00 | VZ.......Z.......[......t\...... |
dc80 | 77 5e 0d 00 a6 00 00 00 3c 5f 0d 00 e6 00 00 00 e3 5f 0d 00 4f 00 00 00 ca 60 0d 00 a4 00 00 00 | w^......<_......._..O....`...... |
dca0 | 1a 61 0d 00 28 01 00 00 bf 61 0d 00 9d 00 00 00 e8 62 0d 00 3b 00 00 00 86 63 0d 00 4a 00 00 00 | .a..(....a.......b..;....c..J... |
dcc0 | c2 63 0d 00 81 00 00 00 0d 64 0d 00 68 00 00 00 8f 64 0d 00 49 00 00 00 f8 64 0d 00 36 00 00 00 | .c.......d..h....d..I....d..6... |
dce0 | 42 65 0d 00 11 00 00 00 79 65 0d 00 06 00 00 00 8b 65 0d 00 0f 00 00 00 92 65 0d 00 18 00 00 00 | Be......ye.......e.......e...... |
dd00 | a2 65 0d 00 0e 00 00 00 bb 65 0d 00 0e 00 00 00 ca 65 0d 00 0f 00 00 00 d9 65 0d 00 0b 00 00 00 | .e.......e.......e.......e...... |
dd20 | e9 65 0d 00 6c 01 00 00 f5 65 0d 00 3a 01 00 00 62 67 0d 00 0f 00 00 00 9d 68 0d 00 0f 00 00 00 | .e..l....e..:...bg.......h...... |
dd40 | ad 68 0d 00 08 00 00 00 bd 68 0d 00 07 00 00 00 c6 68 0d 00 04 00 00 00 ce 68 0d 00 0f 00 00 00 | .h.......h.......h.......h...... |
dd60 | d3 68 0d 00 06 00 00 00 e3 68 0d 00 ff 00 00 00 ea 68 0d 00 23 00 00 00 ea 69 0d 00 23 00 00 00 | .h.......h.......h..#....i..#... |
dd80 | 0e 6a 0d 00 0e 00 00 00 32 6a 0d 00 07 00 00 00 41 6a 0d 00 0a 00 00 00 49 6a 0d 00 04 00 00 00 | .j......2j......Aj......Ij...... |
dda0 | 54 6a 0d 00 36 00 00 00 59 6a 0d 00 b5 00 00 00 90 6a 0d 00 04 00 00 00 46 6b 0d 00 f5 00 00 00 | Tj..6...Yj.......j......Fk...... |
ddc0 | 4b 6b 0d 00 19 00 00 00 41 6c 0d 00 42 00 00 00 5b 6c 0d 00 1b 00 00 00 9e 6c 0d 00 34 01 00 00 | Kk......Al..B...[l.......l..4... |
dde0 | ba 6c 0d 00 3e 00 00 00 ef 6d 0d 00 29 00 00 00 2e 6e 0d 00 0f 00 00 00 58 6e 0d 00 33 00 00 00 | .l..>....m..)....n......Xn..3... |
de00 | 68 6e 0d 00 14 02 00 00 9c 6e 0d 00 40 00 00 00 b1 70 0d 00 3d 00 00 00 f2 70 0d 00 07 01 00 00 | hn.......n..@....p..=....p...... |
de20 | 30 71 0d 00 23 00 00 00 38 72 0d 00 11 00 00 00 5c 72 0d 00 3f 00 00 00 6e 72 0d 00 20 00 00 00 | 0q..#...8r......\r..?...nr...... |
de40 | ae 72 0d 00 6f 00 00 00 cf 72 0d 00 78 00 00 00 3f 73 0d 00 3d 00 00 00 b8 73 0d 00 68 00 00 00 | .r..o....r..x...?s..=....s..h... |
de60 | f6 73 0d 00 6b 00 00 00 5f 74 0d 00 23 00 00 00 cb 74 0d 00 07 00 00 00 ef 74 0d 00 7d 00 00 00 | .s..k..._t..#....t.......t..}... |
de80 | f7 74 0d 00 06 00 00 00 75 75 0d 00 16 00 00 00 7c 75 0d 00 35 00 00 00 93 75 0d 00 10 00 00 00 | .t......uu......|u..5....u...... |
dea0 | c9 75 0d 00 69 02 00 00 da 75 0d 00 1b 00 00 00 44 78 0d 00 52 01 00 00 60 78 0d 00 4a 00 00 00 | .u..i....u......Dx..R...`x..J... |
dec0 | b3 79 0d 00 e8 01 00 00 fe 79 0d 00 9d 01 00 00 e7 7b 0d 00 d7 00 00 00 85 7d 0d 00 1e 00 00 00 | .y.......y.......{.......}...... |
dee0 | 5d 7e 0d 00 2f 00 00 00 7c 7e 0d 00 21 00 00 00 ac 7e 0d 00 0c 00 00 00 ce 7e 0d 00 0e 00 00 00 | ]~../...|~..!....~.......~...... |
df00 | db 7e 0d 00 24 00 00 00 ea 7e 0d 00 0e 00 00 00 0f 7f 0d 00 59 00 00 00 1e 7f 0d 00 22 00 00 00 | .~..$....~..........Y......."... |
df20 | 78 7f 0d 00 05 00 00 00 9b 7f 0d 00 20 00 00 00 a1 7f 0d 00 14 00 00 00 c2 7f 0d 00 42 00 00 00 | x...........................B... |
df40 | d7 7f 0d 00 1f 00 00 00 1a 80 0d 00 2e 00 00 00 3a 80 0d 00 10 00 00 00 69 80 0d 00 10 00 00 00 | ................:.......i....... |
df60 | 7a 80 0d 00 12 00 00 00 8b 80 0d 00 12 00 00 00 9e 80 0d 00 2e 00 00 00 b1 80 0d 00 3c 00 00 00 | z...........................<... |
df80 | e0 80 0d 00 3b 00 00 00 1d 81 0d 00 0b 00 00 00 59 81 0d 00 38 00 00 00 65 81 0d 00 2c 00 00 00 | ....;...........Y...8...e...,... |
dfa0 | 9e 81 0d 00 09 00 00 00 cb 81 0d 00 09 00 00 00 d5 81 0d 00 0e 00 00 00 df 81 0d 00 63 00 00 00 | ............................c... |
dfc0 | ee 81 0d 00 9c 00 00 00 52 82 0d 00 ab 00 00 00 ef 82 0d 00 eb 00 00 00 9b 83 0d 00 30 00 00 00 | ........R...................0... |
dfe0 | 87 84 0d 00 07 00 00 00 b8 84 0d 00 63 00 00 00 c0 84 0d 00 0c 01 00 00 24 85 0d 00 0c 00 00 00 | ............c...........$....... |
e000 | 31 86 0d 00 0c 00 00 00 3e 86 0d 00 15 00 00 00 4b 86 0d 00 19 00 00 00 61 86 0d 00 08 00 00 00 | 1.......>.......K.......a....... |
e020 | 7b 86 0d 00 8c 00 00 00 84 86 0d 00 03 00 00 00 11 87 0d 00 0a 00 00 00 15 87 0d 00 35 00 00 00 | {...........................5... |
e040 | 20 87 0d 00 13 00 00 00 56 87 0d 00 19 00 00 00 6a 87 0d 00 06 00 00 00 84 87 0d 00 3b 02 00 00 | ........V.......j...........;... |
e060 | 8b 87 0d 00 85 00 00 00 c7 89 0d 00 0e 00 00 00 4d 8a 0d 00 09 00 00 00 5c 8a 0d 00 35 00 00 00 | ................M.......\...5... |
e080 | 66 8a 0d 00 04 00 00 00 9c 8a 0d 00 e8 01 00 00 a1 8a 0d 00 5f 00 00 00 8a 8c 0d 00 61 00 00 00 | f..................._.......a... |
e0a0 | ea 8c 0d 00 03 00 00 00 4c 8d 0d 00 0b 00 00 00 50 8d 0d 00 4c 00 00 00 5c 8d 0d 00 2f 00 00 00 | ........L.......P...L...\.../... |
e0c0 | a9 8d 0d 00 1d 00 00 00 d9 8d 0d 00 10 00 00 00 f7 8d 0d 00 4d 00 00 00 08 8e 0d 00 0f 00 00 00 | ....................M........... |
e0e0 | 56 8e 0d 00 3b 00 00 00 66 8e 0d 00 12 00 00 00 a2 8e 0d 00 1d 00 00 00 b5 8e 0d 00 44 00 00 00 | V...;...f...................D... |
e100 | d3 8e 0d 00 51 00 00 00 18 8f 0d 00 41 00 00 00 6a 8f 0d 00 6a 00 00 00 ac 8f 0d 00 66 00 00 00 | ....Q.......A...j...j.......f... |
e120 | 17 90 0d 00 1c 00 00 00 7e 90 0d 00 8d 00 00 00 9b 90 0d 00 d1 00 00 00 29 91 0d 00 1d 00 00 00 | ........~...............)....... |
e140 | fb 91 0d 00 e3 00 00 00 19 92 0d 00 e4 00 00 00 fd 92 0d 00 24 00 00 00 e2 93 0d 00 8d 00 00 00 | ....................$........... |
e160 | 07 94 0d 00 5a 00 00 00 95 94 0d 00 1a 00 00 00 f0 94 0d 00 21 00 00 00 0b 95 0d 00 22 00 00 00 | ....Z...............!......."... |
e180 | 2d 95 0d 00 70 00 00 00 50 95 0d 00 72 00 00 00 c1 95 0d 00 29 00 00 00 34 96 0d 00 77 00 00 00 | -...p...P...r.......)...4...w... |
e1a0 | 5e 96 0d 00 73 00 00 00 d6 96 0d 00 90 00 00 00 4a 97 0d 00 53 00 00 00 db 97 0d 00 b6 00 00 00 | ^...s...........J...S........... |
e1c0 | 2f 98 0d 00 5c 00 00 00 e6 98 0d 00 1e 00 00 00 43 99 0d 00 91 00 00 00 62 99 0d 00 54 00 00 00 | /...\...........C.......b...T... |
e1e0 | f4 99 0d 00 b7 00 00 00 49 9a 0d 00 60 00 00 00 01 9b 0d 00 24 00 00 00 62 9b 0d 00 61 00 00 00 | ........I...`.......$...b...a... |
e200 | 87 9b 0d 00 48 00 00 00 e9 9b 0d 00 30 00 00 00 32 9c 0d 00 3b 00 00 00 63 9c 0d 00 25 00 00 00 | ....H.......0...2...;...c...%... |
e220 | 9f 9c 0d 00 28 00 00 00 c5 9c 0d 00 2e 00 00 00 ee 9c 0d 00 9e 00 00 00 1d 9d 0d 00 3e 00 00 00 | ....(.......................>... |
e240 | bc 9d 0d 00 11 00 00 00 fb 9d 0d 00 19 00 00 00 0d 9e 0d 00 7a 00 00 00 27 9e 0d 00 17 00 00 00 | ....................z...'....... |
e260 | a2 9e 0d 00 13 00 00 00 ba 9e 0d 00 7d 00 00 00 ce 9e 0d 00 83 00 00 00 4c 9f 0d 00 11 00 00 00 | ............}...........L....... |
e280 | d0 9f 0d 00 10 00 00 00 e2 9f 0d 00 33 00 00 00 f3 9f 0d 00 33 00 00 00 27 a0 0d 00 33 00 00 00 | ............3.......3...'...3... |
e2a0 | 5b a0 0d 00 33 00 00 00 8f a0 0d 00 6a 00 00 00 c3 a0 0d 00 22 00 00 00 2e a1 0d 00 1e 01 00 00 | [...3.......j......."........... |
e2c0 | 51 a1 0d 00 33 00 00 00 70 a2 0d 00 dd 00 00 00 a4 a2 0d 00 17 01 00 00 82 a3 0d 00 49 00 00 00 | Q...3...p...................I... |
e2e0 | 9a a4 0d 00 06 00 00 00 e4 a4 0d 00 11 00 00 00 eb a4 0d 00 38 00 00 00 fd a4 0d 00 28 00 00 00 | ....................8.......(... |
e300 | 36 a5 0d 00 24 00 00 00 5f a5 0d 00 9d 00 00 00 84 a5 0d 00 37 00 00 00 22 a6 0d 00 89 00 00 00 | 6...$..._...........7..."....... |
e320 | 5a a6 0d 00 5c 00 00 00 e4 a6 0d 00 cd 01 00 00 41 a7 0d 00 c2 00 00 00 0f a9 0d 00 65 00 00 00 | Z...\...........A...........e... |
e340 | d2 a9 0d 00 43 00 00 00 38 aa 0d 00 0a 00 00 00 7c aa 0d 00 b3 00 00 00 87 aa 0d 00 8c 00 00 00 | ....C...8.......|............... |
e360 | 3b ab 0d 00 e8 00 00 00 c8 ab 0d 00 21 00 00 00 b1 ac 0d 00 05 00 00 00 d3 ac 0d 00 89 01 00 00 | ;...........!................... |
e380 | d9 ac 0d 00 ae 01 00 00 63 ae 0d 00 27 00 00 00 12 b0 0d 00 09 00 00 00 3a b0 0d 00 fc 00 00 00 | ........c...'...........:....... |
e3a0 | 44 b0 0d 00 79 01 00 00 41 b1 0d 00 0f 00 00 00 bb b2 0d 00 6c 00 00 00 cb b2 0d 00 35 00 00 00 | D...y...A...........l.......5... |
e3c0 | 38 b3 0d 00 d4 00 00 00 6e b3 0d 00 d4 00 00 00 43 b4 0d 00 f4 00 00 00 18 b5 0d 00 24 00 00 00 | 8.......n.......C...........$... |
e3e0 | 0d b6 0d 00 6f 00 00 00 32 b6 0d 00 10 00 00 00 a2 b6 0d 00 c6 00 00 00 b3 b6 0d 00 30 00 00 00 | ....o...2...................0... |
e400 | 7a b7 0d 00 a3 00 00 00 ab b7 0d 00 a4 00 00 00 4f b8 0d 00 25 00 00 00 f4 b8 0d 00 38 00 00 00 | z...............O...%.......8... |
e420 | 1a b9 0d 00 22 00 00 00 53 b9 0d 00 65 00 00 00 76 b9 0d 00 80 00 00 00 dc b9 0d 00 74 00 00 00 | ...."...S...e...v...........t... |
e440 | 5d ba 0d 00 6a 00 00 00 d2 ba 0d 00 a9 00 00 00 3d bb 0d 00 01 00 00 00 e7 bb 0d 00 03 00 00 00 | ]...j...........=............... |
e460 | e9 bb 0d 00 1f 00 00 00 ed bb 0d 00 11 00 00 00 0d bc 0d 00 10 00 00 00 1f bc 0d 00 37 01 00 00 | ............................7... |
e480 | 30 bc 0d 00 0b 00 00 00 68 bd 0d 00 0e 00 00 00 74 bd 0d 00 17 00 00 00 83 bd 0d 00 22 00 00 00 | 0.......h.......t..........."... |
e4a0 | 9b bd 0d 00 05 00 00 00 be bd 0d 00 05 00 00 00 c4 bd 0d 00 1b 00 00 00 ca bd 0d 00 40 00 00 00 | ............................@... |
e4c0 | e6 bd 0d 00 1b 00 00 00 27 be 0d 00 0c 00 00 00 43 be 0d 00 eb 00 00 00 50 be 0d 00 03 00 00 00 | ........'.......C.......P....... |
e4e0 | 3c bf 0d 00 41 02 00 00 40 bf 0d 00 ad 00 00 00 82 c1 0d 00 0d 00 00 00 30 c2 0d 00 91 00 00 00 | <...A...@...............0....... |
e500 | 3e c2 0d 00 0b 00 00 00 d0 c2 0d 00 34 00 00 00 dc c2 0d 00 25 00 00 00 11 c3 0d 00 16 00 00 00 | >...........4.......%........... |
e520 | 37 c3 0d 00 40 00 00 00 4e c3 0d 00 23 00 00 00 8f c3 0d 00 1f 00 00 00 b3 c3 0d 00 07 00 00 00 | 7...@...N...#................... |
e540 | d3 c3 0d 00 0f 00 00 00 db c3 0d 00 4b 00 00 00 eb c3 0d 00 ab 01 00 00 37 c4 0d 00 a3 00 00 00 | ............K...........7....... |
e560 | e3 c5 0d 00 13 00 00 00 87 c6 0d 00 0f 00 00 00 9b c6 0d 00 1c 00 00 00 ab c6 0d 00 18 00 00 00 | ................................ |
e580 | c8 c6 0d 00 23 00 00 00 e1 c6 0d 00 0f 00 00 00 05 c7 0d 00 10 00 00 00 15 c7 0d 00 0e 00 00 00 | ....#........................... |
e5a0 | 26 c7 0d 00 25 00 00 00 35 c7 0d 00 1a 00 00 00 5b c7 0d 00 18 00 00 00 76 c7 0d 00 45 00 00 00 | &...%...5.......[.......v...E... |
e5c0 | 8f c7 0d 00 16 00 00 00 d5 c7 0d 00 43 00 00 00 ec c7 0d 00 25 00 00 00 30 c8 0d 00 38 00 00 00 | ............C.......%...0...8... |
e5e0 | 56 c8 0d 00 36 00 00 00 8f c8 0d 00 20 00 00 00 c6 c8 0d 00 13 00 00 00 e7 c8 0d 00 1e 00 00 00 | V...6........................... |
e600 | fb c8 0d 00 15 00 00 00 1a c9 0d 00 10 00 00 00 30 c9 0d 00 ec 00 00 00 41 c9 0d 00 ba 00 00 00 | ................0.......A....... |
e620 | 2e ca 0d 00 25 00 00 00 e9 ca 0d 00 89 00 00 00 0f cb 0d 00 13 00 00 00 99 cb 0d 00 1a 00 00 00 | ....%........................... |
e640 | ad cb 0d 00 3a 00 00 00 c8 cb 0d 00 81 01 00 00 03 cc 0d 00 47 00 00 00 85 cd 0d 00 74 00 00 00 | ....:...............G.......t... |
e660 | cd cd 0d 00 9d 00 00 00 42 ce 0d 00 7b 01 00 00 e0 ce 0d 00 61 00 00 00 5c d0 0d 00 6c 00 00 00 | ........B...{.......a...\...l... |
e680 | be d0 0d 00 06 00 00 00 2b d1 0d 00 47 00 00 00 32 d1 0d 00 44 00 00 00 7a d1 0d 00 37 00 00 00 | ........+...G...2...D...z...7... |
e6a0 | bf d1 0d 00 07 01 00 00 f7 d1 0d 00 57 00 00 00 ff d2 0d 00 31 00 00 00 57 d3 0d 00 5b 00 00 00 | ............W.......1...W...[... |
e6c0 | 89 d3 0d 00 1f 00 00 00 e5 d3 0d 00 62 00 00 00 05 d4 0d 00 2b 00 00 00 68 d4 0d 00 04 00 00 00 | ............b.......+...h....... |
e6e0 | 94 d4 0d 00 16 00 00 00 99 d4 0d 00 37 00 00 00 b0 d4 0d 00 38 01 00 00 e8 d4 0d 00 0d 00 00 00 | ............7.......8........... |
e700 | 21 d6 0d 00 0d 00 00 00 2f d6 0d 00 12 00 00 00 3d d6 0d 00 0a 00 00 00 50 d6 0d 00 4e 00 00 00 | !......./.......=.......P...N... |
e720 | 5b d6 0d 00 08 01 00 00 aa d6 0d 00 24 01 00 00 b3 d7 0d 00 15 00 00 00 d8 d8 0d 00 9c 01 00 00 | [...........$................... |
e740 | ee d8 0d 00 5c 00 00 00 8b da 0d 00 a4 00 00 00 e8 da 0d 00 16 00 00 00 8d db 0d 00 8a 02 00 00 | ....\........................... |
e760 | a4 db 0d 00 1d 00 00 00 2f de 0d 00 0c 00 00 00 4d de 0d 00 1f 00 00 00 5a de 0d 00 43 00 00 00 | ......../.......M.......Z...C... |
e780 | 7a de 0d 00 0d 00 00 00 be de 0d 00 c1 00 00 00 cc de 0d 00 77 00 00 00 8e df 0d 00 69 00 00 00 | z...................w.......i... |
e7a0 | 06 e0 0d 00 62 00 00 00 70 e0 0d 00 76 00 00 00 d3 e0 0d 00 0e 01 00 00 4a e1 0d 00 cb 00 00 00 | ....b...p...v...........J....... |
e7c0 | 59 e2 0d 00 19 01 00 00 25 e3 0d 00 43 00 00 00 3f e4 0d 00 ab 00 00 00 83 e4 0d 00 9a 00 00 00 | Y.......%...C...?............... |
e7e0 | 2f e5 0d 00 a6 00 00 00 ca e5 0d 00 6e 01 00 00 71 e6 0d 00 17 01 00 00 e0 e7 0d 00 6f 00 00 00 | /...........n...q...........o... |
e800 | f8 e8 0d 00 7b 00 00 00 68 e9 0d 00 7d 00 00 00 e4 e9 0d 00 12 01 00 00 62 ea 0d 00 e6 00 00 00 | ....{...h...}...........b....... |
e820 | 75 eb 0d 00 b6 00 00 00 5c ec 0d 00 b1 00 00 00 13 ed 0d 00 fb 00 00 00 c5 ed 0d 00 20 00 00 00 | u.......\....................... |
e840 | c1 ee 0d 00 a0 01 00 00 e2 ee 0d 00 53 00 00 00 83 f0 0d 00 39 00 00 00 d7 f0 0d 00 28 00 00 00 | ............S.......9.......(... |
e860 | 11 f1 0d 00 4a 00 00 00 3a f1 0d 00 3b 00 00 00 85 f1 0d 00 34 00 00 00 c1 f1 0d 00 52 00 00 00 | ....J...:...;.......4.......R... |
e880 | f6 f1 0d 00 53 00 00 00 49 f2 0d 00 52 00 00 00 9d f2 0d 00 80 01 00 00 f0 f2 0d 00 36 00 00 00 | ....S...I...R...............6... |
e8a0 | 71 f4 0d 00 23 00 00 00 a8 f4 0d 00 0b 00 00 00 cc f4 0d 00 ad 00 00 00 d8 f4 0d 00 91 00 00 00 | q...#........................... |
e8c0 | 86 f5 0d 00 1b 02 00 00 18 f6 0d 00 e8 01 00 00 34 f8 0d 00 07 00 00 00 1d fa 0d 00 df 00 00 00 | ................4............... |
e8e0 | 25 fa 0d 00 45 01 00 00 05 fb 0d 00 22 00 00 00 4b fc 0d 00 79 01 00 00 6e fc 0d 00 a6 00 00 00 | %...E......."...K...y...n....... |
e900 | e8 fd 0d 00 e9 00 00 00 8f fe 0d 00 83 00 00 00 79 ff 0d 00 19 00 00 00 fd ff 0d 00 0f 00 00 00 | ................y............... |
e920 | 17 00 0e 00 09 00 00 00 27 00 0e 00 12 00 00 00 31 00 0e 00 0e 00 00 00 44 00 0e 00 21 00 00 00 | ........'.......1.......D...!... |
e940 | 53 00 0e 00 0e 00 00 00 75 00 0e 00 17 00 00 00 84 00 0e 00 14 00 00 00 9c 00 0e 00 19 00 00 00 | S.......u....................... |
e960 | b1 00 0e 00 14 00 00 00 cb 00 0e 00 06 00 00 00 e0 00 0e 00 13 00 00 00 e7 00 0e 00 12 00 00 00 | ................................ |
e980 | fb 00 0e 00 0d 00 00 00 0e 01 0e 00 6a 00 00 00 1c 01 0e 00 17 00 00 00 87 01 0e 00 2e 00 00 00 | ............j................... |
e9a0 | 9f 01 0e 00 2d 00 00 00 ce 01 0e 00 08 00 00 00 fc 01 0e 00 16 00 00 00 05 02 0e 00 ea 00 00 00 | ....-........................... |
e9c0 | 1c 02 0e 00 59 00 00 00 07 03 0e 00 19 00 00 00 61 03 0e 00 7e 00 00 00 7b 03 0e 00 07 00 00 00 | ....Y...........a...~...{....... |
e9e0 | fa 03 0e 00 2a 00 00 00 02 04 0e 00 4f 00 00 00 2d 04 0e 00 17 00 00 00 7d 04 0e 00 3b 00 00 00 | ....*.......O...-.......}...;... |
ea00 | 95 04 0e 00 87 01 00 00 d1 04 0e 00 6e 00 00 00 59 06 0e 00 24 00 00 00 c8 06 0e 00 54 00 00 00 | ............n...Y...$.......T... |
ea20 | ed 06 0e 00 a4 01 00 00 42 07 0e 00 8f 01 00 00 e7 08 0e 00 24 00 00 00 77 0a 0e 00 1f 00 00 00 | ........B...........$...w....... |
ea40 | 9c 0a 0e 00 07 00 00 00 bc 0a 0e 00 1b 00 00 00 c4 0a 0e 00 08 00 00 00 e0 0a 0e 00 5c 00 00 00 | ............................\... |
ea60 | e9 0a 0e 00 08 00 00 00 46 0b 0e 00 1b 00 00 00 4f 0b 0e 00 57 00 00 00 6b 0b 0e 00 14 00 00 00 | ........F.......O...W...k....... |
ea80 | c3 0b 0e 00 3f 00 00 00 d8 0b 0e 00 3a 00 00 00 18 0c 0e 00 75 00 00 00 53 0c 0e 00 69 00 00 00 | ....?.......:.......u...S...i... |
eaa0 | c9 0c 0e 00 32 01 00 00 33 0d 0e 00 36 01 00 00 66 0e 0e 00 0c 00 00 00 9d 0f 0e 00 26 00 00 00 | ....2...3...6...f...........&... |
eac0 | aa 0f 0e 00 18 00 00 00 d1 0f 0e 00 2e 00 00 00 ea 0f 0e 00 41 01 00 00 19 10 0e 00 03 00 00 00 | ....................A........... |
eae0 | 5b 11 0e 00 04 00 00 00 5f 11 0e 00 14 00 00 00 64 11 0e 00 0c 00 00 00 79 11 0e 00 05 00 00 00 | [......._.......d.......y....... |
eb00 | 86 11 0e 00 0c 00 00 00 8c 11 0e 00 0d 00 00 00 99 11 0e 00 0b 00 00 00 a7 11 0e 00 ae 00 00 00 | ................................ |
eb20 | b3 11 0e 00 31 01 00 00 62 12 0e 00 ca 00 00 00 94 13 0e 00 43 00 00 00 5f 14 0e 00 46 00 00 00 | ....1...b...........C..._...F... |
eb40 | a3 14 0e 00 0b 00 00 00 ea 14 0e 00 0b 00 00 00 f6 14 0e 00 19 00 00 00 02 15 0e 00 0f 00 00 00 | ................................ |
eb60 | 1c 15 0e 00 ba 01 00 00 2c 15 0e 00 6a 00 00 00 e7 16 0e 00 13 00 00 00 52 17 0e 00 e4 00 00 00 | ........,...j...........R....... |
eb80 | 66 17 0e 00 46 00 00 00 4b 18 0e 00 88 01 00 00 92 18 0e 00 89 01 00 00 1b 1a 0e 00 0b 00 00 00 | f...F...K....................... |
eba0 | a5 1b 0e 00 ce 00 00 00 b1 1b 0e 00 6c 00 00 00 80 1c 0e 00 10 01 00 00 ed 1c 0e 00 6e 00 00 00 | ............l...............n... |
ebc0 | fe 1d 0e 00 26 00 00 00 6d 1e 0e 00 40 00 00 00 94 1e 0e 00 a0 00 00 00 d5 1e 0e 00 b9 00 00 00 | ....&...m...@................... |
ebe0 | 76 1f 0e 00 58 00 00 00 30 20 0e 00 64 00 00 00 89 20 0e 00 39 00 00 00 ee 20 0e 00 45 00 00 00 | v...X...0...d.......9.......E... |
ec00 | 28 21 0e 00 4a 00 00 00 6e 21 0e 00 4b 00 00 00 b9 21 0e 00 56 00 00 00 05 22 0e 00 57 00 00 00 | (!..J...n!..K....!..V...."..W... |
ec20 | 5c 22 0e 00 96 00 00 00 b4 22 0e 00 37 00 00 00 4b 23 0e 00 8f 00 00 00 83 23 0e 00 06 00 00 00 | \"......."..7...K#.......#...... |
ec40 | 13 24 0e 00 0f 00 00 00 1a 24 0e 00 1b 00 00 00 2a 24 0e 00 33 00 00 00 46 24 0e 00 56 00 00 00 | .$.......$......*$..3...F$..V... |
ec60 | 7a 24 0e 00 0b 00 00 00 d1 24 0e 00 12 00 00 00 dd 24 0e 00 38 00 00 00 f0 24 0e 00 19 00 00 00 | z$.......$.......$..8....$...... |
ec80 | 29 25 0e 00 33 00 00 00 43 25 0e 00 1f 00 00 00 77 25 0e 00 2e 00 00 00 97 25 0e 00 93 01 00 00 | )%..3...C%......w%.......%...... |
eca0 | c6 25 0e 00 0f 00 00 00 5a 27 0e 00 0a 00 00 00 6a 27 0e 00 0a 00 00 00 75 27 0e 00 63 00 00 00 | .%......Z'......j'......u'..c... |
ecc0 | 80 27 0e 00 2f 00 00 00 e4 27 0e 00 32 00 00 00 14 28 0e 00 4c 00 00 00 47 28 0e 00 23 00 00 00 | .'../....'..2....(..L...G(..#... |
ece0 | 94 28 0e 00 64 00 00 00 b8 28 0e 00 65 00 00 00 1d 29 0e 00 6e 00 00 00 83 29 0e 00 29 00 00 00 | .(..d....(..e....)..n....)..)... |
ed00 | f2 29 0e 00 dd 00 00 00 1c 2a 0e 00 2d 00 00 00 fa 2a 0e 00 11 00 00 00 28 2b 0e 00 11 00 00 00 | .).......*..-....*......(+...... |
ed20 | 3a 2b 0e 00 12 00 00 00 4c 2b 0e 00 0c 00 00 00 5f 2b 0e 00 30 00 00 00 6c 2b 0e 00 3f 00 00 00 | :+......L+......_+..0...l+..?... |
ed40 | 9d 2b 0e 00 40 00 00 00 dd 2b 0e 00 04 01 00 00 1e 2c 0e 00 a9 00 00 00 23 2d 0e 00 18 00 00 00 | .+..@....+.......,......#-...... |
ed60 | cd 2d 0e 00 08 00 00 00 e6 2d 0e 00 46 00 00 00 ef 2d 0e 00 4d 00 00 00 36 2e 0e 00 1f 00 00 00 | .-.......-..F....-..M...6....... |
ed80 | 84 2e 0e 00 4f 00 00 00 a4 2e 0e 00 3d 00 00 00 f4 2e 0e 00 08 00 00 00 32 2f 0e 00 0e 00 00 00 | ....O.......=...........2/...... |
eda0 | 3b 2f 0e 00 84 01 00 00 4a 2f 0e 00 8c 00 00 00 cf 30 0e 00 fb 00 00 00 5c 31 0e 00 11 00 00 00 | ;/......J/.......0......\1...... |
edc0 | 58 32 0e 00 0e 01 00 00 6a 32 0e 00 3a 00 00 00 79 33 0e 00 09 00 00 00 b4 33 0e 00 38 00 00 00 | X2......j2..:...y3.......3..8... |
ede0 | be 33 0e 00 bd 00 00 00 f7 33 0e 00 30 00 00 00 b5 34 0e 00 31 00 00 00 e6 34 0e 00 24 00 00 00 | .3.......3..0....4..1....4..$... |
ee00 | 18 35 0e 00 28 00 00 00 3d 35 0e 00 23 00 00 00 66 35 0e 00 20 00 00 00 8a 35 0e 00 21 00 00 00 | .5..(...=5..#...f5.......5..!... |
ee20 | ab 35 0e 00 3a 00 00 00 cd 35 0e 00 1f 00 00 00 08 36 0e 00 32 00 00 00 28 36 0e 00 26 00 00 00 | .5..:....5.......6..2...(6..&... |
ee40 | 5b 36 0e 00 13 00 00 00 82 36 0e 00 41 00 00 00 96 36 0e 00 a0 00 00 00 d8 36 0e 00 3e 00 00 00 | [6.......6..A....6.......6..>... |
ee60 | 79 37 0e 00 1f 00 00 00 b8 37 0e 00 ce 00 00 00 d8 37 0e 00 4c 01 00 00 a7 38 0e 00 36 01 00 00 | y7.......7.......7..L....8..6... |
ee80 | f4 39 0e 00 21 00 00 00 2b 3b 0e 00 1e 00 00 00 4d 3b 0e 00 0e 00 00 00 6c 3b 0e 00 03 00 00 00 | .9..!...+;......M;......l;...... |
eea0 | 7b 3b 0e 00 39 00 00 00 7f 3b 0e 00 2f 00 00 00 b9 3b 0e 00 b8 00 00 00 e9 3b 0e 00 24 00 00 00 | {;..9....;../....;.......;..$... |
eec0 | a2 3c 0e 00 49 00 00 00 c7 3c 0e 00 03 00 00 00 11 3d 0e 00 24 00 00 00 15 3d 0e 00 03 00 00 00 | .<..I....<.......=..$....=...... |
eee0 | 3a 3d 0e 00 06 00 00 00 3e 3d 0e 00 0c 00 00 00 45 3d 0e 00 18 00 00 00 52 3d 0e 00 17 00 00 00 | :=......>=......E=......R=...... |
ef00 | 6b 3d 0e 00 15 00 00 00 83 3d 0e 00 22 00 00 00 99 3d 0e 00 4c 00 00 00 bc 3d 0e 00 45 00 00 00 | k=.......=.."....=..L....=..E... |
ef20 | 09 3e 0e 00 98 00 00 00 4f 3e 0e 00 15 00 00 00 e8 3e 0e 00 53 01 00 00 fe 3e 0e 00 20 00 00 00 | .>......O>.......>..S....>...... |
ef40 | 52 40 0e 00 03 00 00 00 73 40 0e 00 21 00 00 00 77 40 0e 00 21 00 00 00 99 40 0e 00 04 00 00 00 | R@......s@..!...w@..!....@...... |
ef60 | bb 40 0e 00 15 00 00 00 c0 40 0e 00 e1 00 00 00 d6 40 0e 00 08 00 00 00 b8 41 0e 00 0d 00 00 00 | .@.......@.......@.......A...... |
ef80 | c1 41 0e 00 c3 00 00 00 cf 41 0e 00 20 00 00 00 93 42 0e 00 21 00 00 00 b4 42 0e 00 0c 00 00 00 | .A.......A.......B..!....B...... |
efa0 | d6 42 0e 00 0a 00 00 00 e3 42 0e 00 72 00 00 00 ee 42 0e 00 dc 00 00 00 61 43 0e 00 0e 00 00 00 | .B.......B..r....B......aC...... |
efc0 | 3e 44 0e 00 4f 00 00 00 4d 44 0e 00 6a 00 00 00 9d 44 0e 00 50 00 00 00 08 45 0e 00 0e 00 00 00 | >D..O...MD..j....D..P....E...... |
efe0 | 59 45 0e 00 0b 00 00 00 68 45 0e 00 1f 00 00 00 74 45 0e 00 41 00 00 00 94 45 0e 00 13 04 00 00 | YE......hE......tE..A....E...... |
f000 | d6 45 0e 00 87 00 00 00 ea 49 0e 00 25 00 00 00 72 4a 0e 00 16 00 00 00 98 4a 0e 00 2f 01 00 00 | .E.......I..%...rJ.......J../... |
f020 | af 4a 0e 00 96 00 00 00 df 4b 0e 00 1e 00 00 00 76 4c 0e 00 1c 00 00 00 95 4c 0e 00 ad 01 00 00 | .J.......K......vL.......L...... |
f040 | b2 4c 0e 00 45 00 00 00 60 4e 0e 00 16 00 00 00 a6 4e 0e 00 35 00 00 00 bd 4e 0e 00 3b 00 00 00 | .L..E...`N.......N..5....N..;... |
f060 | f3 4e 0e 00 4a 00 00 00 2f 4f 0e 00 54 00 00 00 7a 4f 0e 00 73 00 00 00 cf 4f 0e 00 4c 00 00 00 | .N..J.../O..T...zO..s....O..L... |
f080 | 43 50 0e 00 0d 00 00 00 90 50 0e 00 23 00 00 00 9e 50 0e 00 23 00 00 00 c2 50 0e 00 21 00 00 00 | CP.......P..#....P..#....P..!... |
f0a0 | e6 50 0e 00 15 00 00 00 08 51 0e 00 0b 00 00 00 1e 51 0e 00 0a 00 00 00 2a 51 0e 00 1e 00 00 00 | .P.......Q.......Q......*Q...... |
f0c0 | 35 51 0e 00 0b 00 00 00 54 51 0e 00 1f 00 00 00 60 51 0e 00 15 00 00 00 80 51 0e 00 4e 00 00 00 | 5Q......TQ......`Q.......Q..N... |
f0e0 | 96 51 0e 00 0b 00 00 00 e5 51 0e 00 3d 00 00 00 f1 51 0e 00 25 00 00 00 2f 52 0e 00 29 00 00 00 | .Q.......Q..=....Q..%.../R..)... |
f100 | 55 52 0e 00 11 00 00 00 7f 52 0e 00 76 00 00 00 91 52 0e 00 43 00 00 00 08 53 0e 00 6b 00 00 00 | UR.......R..v....R..C....S..k... |
f120 | 4c 53 0e 00 0c 00 00 00 b8 53 0e 00 20 00 00 00 c5 53 0e 00 0d 00 00 00 e6 53 0e 00 05 00 00 00 | LS.......S.......S.......S...... |
f140 | f4 53 0e 00 0d 00 00 00 fa 53 0e 00 0e 00 00 00 08 54 0e 00 81 00 00 00 17 54 0e 00 07 00 00 00 | .S.......S.......T.......T...... |
f160 | 99 54 0e 00 1a 00 00 00 a1 54 0e 00 27 00 00 00 bc 54 0e 00 19 00 00 00 e4 54 0e 00 1e 00 00 00 | .T.......T..'....T.......T...... |
f180 | fe 54 0e 00 17 00 00 00 1d 55 0e 00 1f 00 00 00 35 55 0e 00 6d 00 00 00 55 55 0e 00 58 00 00 00 | .T.......U......5U..m...UU..X... |
f1a0 | c3 55 0e 00 0c 00 00 00 1c 56 0e 00 0b 00 00 00 29 56 0e 00 10 00 00 00 35 56 0e 00 3d 00 00 00 | .U.......V......)V......5V..=... |
f1c0 | 46 56 0e 00 39 00 00 00 84 56 0e 00 40 00 00 00 be 56 0e 00 0d 00 00 00 ff 56 0e 00 0b 00 00 00 | FV..9....V..@....V.......V...... |
f1e0 | 0d 57 0e 00 1f 00 00 00 19 57 0e 00 0f 00 00 00 39 57 0e 00 0f 00 00 00 49 57 0e 00 1d 00 00 00 | .W.......W......9W......IW...... |
f200 | 59 57 0e 00 09 00 00 00 77 57 0e 00 10 00 00 00 81 57 0e 00 14 00 00 00 92 57 0e 00 1d 00 00 00 | YW......wW.......W.......W...... |
f220 | a7 57 0e 00 0f 00 00 00 c5 57 0e 00 1d 00 00 00 d5 57 0e 00 17 00 00 00 f3 57 0e 00 d0 01 00 00 | .W.......W.......W.......W...... |
f240 | 0b 58 0e 00 2e 00 00 00 dc 59 0e 00 7d 00 00 00 0b 5a 0e 00 c1 00 00 00 89 5a 0e 00 0c 00 00 00 | .X.......Y..}....Z.......Z...... |
f260 | 4b 5b 0e 00 13 00 00 00 58 5b 0e 00 15 00 00 00 6c 5b 0e 00 0f 00 00 00 82 5b 0e 00 67 00 00 00 | K[......X[......l[.......[..g... |
f280 | 92 5b 0e 00 56 00 00 00 fa 5b 0e 00 11 00 00 00 51 5c 0e 00 c1 00 00 00 63 5c 0e 00 59 00 00 00 | .[..V....[......Q\......c\..Y... |
f2a0 | 25 5d 0e 00 c6 00 00 00 7f 5d 0e 00 07 00 00 00 46 5e 0e 00 07 00 00 00 4e 5e 0e 00 35 00 00 00 | %].......]......F^......N^..5... |
f2c0 | 56 5e 0e 00 69 00 00 00 8c 5e 0e 00 6c 00 00 00 f6 5e 0e 00 2b 00 00 00 63 5f 0e 00 7c 00 00 00 | V^..i....^..l....^..+...c_..|... |
f2e0 | 8f 5f 0e 00 69 00 00 00 0c 60 0e 00 0b 00 00 00 76 60 0e 00 09 00 00 00 82 60 0e 00 11 00 00 00 | ._..i....`......v`.......`...... |
f300 | 8c 60 0e 00 05 00 00 00 9e 60 0e 00 ad 00 00 00 a4 60 0e 00 4c 00 00 00 52 61 0e 00 12 00 00 00 | .`.......`.......`..L...Ra...... |
f320 | 9f 61 0e 00 04 00 00 00 b2 61 0e 00 06 00 00 00 b7 61 0e 00 06 00 00 00 be 61 0e 00 04 00 00 00 | .a.......a.......a.......a...... |
f340 | c5 61 0e 00 0f 00 00 00 ca 61 0e 00 16 00 00 00 da 61 0e 00 d7 00 00 00 f1 61 0e 00 fd 00 00 00 | .a.......a.......a.......a...... |
f360 | c9 62 0e 00 65 01 00 00 c7 63 0e 00 06 00 00 00 2d 65 0e 00 f4 00 00 00 34 65 0e 00 00 01 00 00 | .b..e....c......-e......4e...... |
f380 | 29 66 0e 00 06 00 00 00 2a 67 0e 00 0b 02 00 00 31 67 0e 00 e2 01 00 00 3d 69 0e 00 03 00 00 00 | )f......*g......1g......=i...... |
f3a0 | 20 6b 0e 00 27 00 00 00 24 6b 0e 00 18 00 00 00 4c 6b 0e 00 0a 00 00 00 65 6b 0e 00 7b 01 00 00 | .k..'...$k......Lk......ek..{... |
f3c0 | 70 6b 0e 00 40 00 00 00 ec 6c 0e 00 a9 01 00 00 2d 6d 0e 00 30 00 00 00 d7 6e 0e 00 10 00 00 00 | pk..@....l......-m..0....n...... |
f3e0 | 08 6f 0e 00 1b 00 00 00 19 6f 0e 00 2e 00 00 00 35 6f 0e 00 0b 00 00 00 64 6f 0e 00 13 00 00 00 | .o.......o......5o......do...... |
f400 | 70 6f 0e 00 0b 00 00 00 84 6f 0e 00 2e 00 00 00 90 6f 0e 00 46 00 00 00 bf 6f 0e 00 0d 00 00 00 | po.......o.......o..F....o...... |
f420 | 06 70 0e 00 0b 00 00 00 14 70 0e 00 58 01 00 00 20 70 0e 00 88 00 00 00 79 71 0e 00 45 00 00 00 | .p.......p..X....p......yq..E... |
f440 | 02 72 0e 00 29 00 00 00 48 72 0e 00 96 00 00 00 72 72 0e 00 10 00 00 00 09 73 0e 00 2f 00 00 00 | .r..)...Hr......rr.......s../... |
f460 | 1a 73 0e 00 43 00 00 00 4a 73 0e 00 37 00 00 00 8e 73 0e 00 49 00 00 00 c6 73 0e 00 09 00 00 00 | .s..C...Js..7....s..I....s...... |
f480 | 10 74 0e 00 a8 00 00 00 1a 74 0e 00 3a 00 00 00 c3 74 0e 00 08 00 00 00 fe 74 0e 00 20 00 00 00 | .t.......t..:....t.......t...... |
f4a0 | 07 75 0e 00 28 00 00 00 28 75 0e 00 4b 00 00 00 51 75 0e 00 0f 00 00 00 9d 75 0e 00 26 01 00 00 | .u..(...(u..K...Qu.......u..&... |
f4c0 | ad 75 0e 00 5b 01 00 00 d4 76 0e 00 87 00 00 00 30 78 0e 00 86 00 00 00 b8 78 0e 00 ce 01 00 00 | .u..[....v......0x.......x...... |
f4e0 | 3f 79 0e 00 18 00 00 00 0e 7b 0e 00 51 00 00 00 27 7b 0e 00 f2 00 00 00 79 7b 0e 00 0e 00 00 00 | ?y.......{..Q...'{......y{...... |
f500 | 6c 7c 0e 00 34 00 00 00 7b 7c 0e 00 36 00 00 00 b0 7c 0e 00 bd 00 00 00 e7 7c 0e 00 7e 00 00 00 | l|..4...{|..6....|.......|..~... |
f520 | a5 7d 0e 00 33 00 00 00 24 7e 0e 00 0e 00 00 00 58 7e 0e 00 dd 00 00 00 67 7e 0e 00 06 00 00 00 | .}..3...$~......X~......g~...... |
f540 | 45 7f 0e 00 12 00 00 00 4c 7f 0e 00 14 00 00 00 5f 7f 0e 00 0b 00 00 00 74 7f 0e 00 14 00 00 00 | E.......L......._.......t....... |
f560 | 80 7f 0e 00 42 00 00 00 95 7f 0e 00 07 00 00 00 d8 7f 0e 00 07 00 00 00 e0 7f 0e 00 c7 00 00 00 | ....B........................... |
f580 | e8 7f 0e 00 29 00 00 00 b0 80 0e 00 28 00 00 00 da 80 0e 00 23 00 00 00 03 81 0e 00 14 00 00 00 | ....).......(.......#........... |
f5a0 | 27 81 0e 00 20 00 00 00 3c 81 0e 00 18 00 00 00 5d 81 0e 00 28 00 00 00 76 81 0e 00 1d 00 00 00 | '.......<.......]...(...v....... |
f5c0 | 9f 81 0e 00 29 00 00 00 bd 81 0e 00 1e 00 00 00 e7 81 0e 00 30 00 00 00 06 82 0e 00 4b 00 00 00 | ....)...............0.......K... |
f5e0 | 37 82 0e 00 6e 00 00 00 83 82 0e 00 2d 00 00 00 f2 82 0e 00 35 00 00 00 20 83 0e 00 16 00 00 00 | 7...n.......-.......5........... |
f600 | 56 83 0e 00 1c 00 00 00 6d 83 0e 00 1b 00 00 00 8a 83 0e 00 41 00 00 00 a6 83 0e 00 35 00 00 00 | V.......m...........A.......5... |
f620 | e8 83 0e 00 97 00 00 00 1e 84 0e 00 4e 00 00 00 b6 84 0e 00 1d 00 00 00 05 85 0e 00 4c 00 00 00 | ............N...............L... |
f640 | 23 85 0e 00 17 00 00 00 70 85 0e 00 1f 00 00 00 88 85 0e 00 1b 00 00 00 a8 85 0e 00 24 00 00 00 | #.......p...................$... |
f660 | c4 85 0e 00 31 00 00 00 e9 85 0e 00 4a 00 00 00 1b 86 0e 00 5a 00 00 00 66 86 0e 00 2a 00 00 00 | ....1.......J.......Z...f...*... |
f680 | c1 86 0e 00 3f 00 00 00 ec 86 0e 00 47 00 00 00 2c 87 0e 00 42 00 00 00 74 87 0e 00 28 00 00 00 | ....?.......G...,...B...t...(... |
f6a0 | b7 87 0e 00 2a 00 00 00 e0 87 0e 00 2d 00 00 00 0b 88 0e 00 30 00 00 00 39 88 0e 00 2d 00 00 00 | ....*.......-.......0...9...-... |
f6c0 | 6a 88 0e 00 2c 00 00 00 98 88 0e 00 19 00 00 00 c5 88 0e 00 29 00 00 00 df 88 0e 00 30 00 00 00 | j...,...............).......0... |
f6e0 | 09 89 0e 00 24 00 00 00 3a 89 0e 00 2b 00 00 00 5f 89 0e 00 29 00 00 00 8b 89 0e 00 35 00 00 00 | ....$...:...+..._...).......5... |
f700 | b5 89 0e 00 2a 00 00 00 eb 89 0e 00 10 00 00 00 16 8a 0e 00 2b 00 00 00 27 8a 0e 00 55 00 00 00 | ....*...............+...'...U... |
f720 | 53 8a 0e 00 3c 00 00 00 a9 8a 0e 00 90 00 00 00 e6 8a 0e 00 1a 00 00 00 77 8b 0e 00 4c 00 00 00 | S...<...................w...L... |
f740 | 92 8b 0e 00 1f 00 00 00 df 8b 0e 00 71 00 00 00 ff 8b 0e 00 6b 00 00 00 71 8c 0e 00 5b 00 00 00 | ............q.......k...q...[... |
f760 | dd 8c 0e 00 2c 00 00 00 39 8d 0e 00 4e 00 00 00 66 8d 0e 00 2a 00 00 00 b5 8d 0e 00 a0 00 00 00 | ....,...9...N...f...*........... |
f780 | e0 8d 0e 00 65 00 00 00 81 8e 0e 00 27 01 00 00 e7 8e 0e 00 d0 00 00 00 0f 90 0e 00 d8 00 00 00 | ....e.......'................... |
f7a0 | e0 90 0e 00 3f 00 00 00 b9 91 0e 00 38 00 00 00 f9 91 0e 00 46 00 00 00 32 92 0e 00 40 00 00 00 | ....?.......8.......F...2...@... |
f7c0 | 79 92 0e 00 53 00 00 00 ba 92 0e 00 45 00 00 00 0e 93 0e 00 26 01 00 00 54 93 0e 00 f1 00 00 00 | y...S.......E.......&...T....... |
f7e0 | 7b 94 0e 00 48 00 00 00 6d 95 0e 00 49 00 00 00 b6 95 0e 00 d0 00 00 00 00 96 0e 00 24 00 00 00 | {...H...m...I...............$... |
f800 | d1 96 0e 00 16 00 00 00 f6 96 0e 00 60 00 00 00 0d 97 0e 00 50 00 00 00 6e 97 0e 00 27 00 00 00 | ............`.......P...n...'... |
f820 | bf 97 0e 00 18 00 00 00 e7 97 0e 00 49 00 00 00 00 98 0e 00 52 00 00 00 4a 98 0e 00 58 00 00 00 | ............I.......R...J...X... |
f840 | 9d 98 0e 00 3d 00 00 00 f6 98 0e 00 25 00 00 00 34 99 0e 00 26 00 00 00 5a 99 0e 00 2a 00 00 00 | ....=.......%...4...&...Z...*... |
f860 | 81 99 0e 00 23 00 00 00 ac 99 0e 00 47 00 00 00 d0 99 0e 00 a4 00 00 00 18 9a 0e 00 aa 00 00 00 | ....#.......G................... |
f880 | bd 9a 0e 00 f4 00 00 00 68 9b 0e 00 44 00 00 00 5d 9c 0e 00 61 00 00 00 a2 9c 0e 00 54 00 00 00 | ........h...D...]...a.......T... |
f8a0 | 04 9d 0e 00 3c 00 00 00 59 9d 0e 00 6d 00 00 00 96 9d 0e 00 6a 00 00 00 04 9e 0e 00 43 00 00 00 | ....<...Y...m.......j.......C... |
f8c0 | 6f 9e 0e 00 5c 00 00 00 b3 9e 0e 00 34 00 00 00 10 9f 0e 00 a4 00 00 00 45 9f 0e 00 a8 00 00 00 | o...\.......4...........E....... |
f8e0 | ea 9f 0e 00 e8 00 00 00 93 a0 0e 00 ec 00 00 00 7c a1 0e 00 2c 00 00 00 69 a2 0e 00 34 00 00 00 | ................|...,...i...4... |
f900 | 96 a2 0e 00 23 00 00 00 cb a2 0e 00 55 00 00 00 ef a2 0e 00 66 00 00 00 45 a3 0e 00 7b 00 00 00 | ....#.......U.......f...E...{... |
f920 | ac a3 0e 00 41 00 00 00 28 a4 0e 00 42 00 00 00 6a a4 0e 00 41 00 00 00 ad a4 0e 00 56 00 00 00 | ....A...(...B...j...A.......V... |
f940 | ef a4 0e 00 35 00 00 00 46 a5 0e 00 2b 00 00 00 7c a5 0e 00 2f 00 00 00 a8 a5 0e 00 63 00 00 00 | ....5...F...+...|.../.......c... |
f960 | d8 a5 0e 00 56 00 00 00 3c a6 0e 00 4d 00 00 00 93 a6 0e 00 34 00 00 00 e1 a6 0e 00 79 01 00 00 | ....V...<...M.......4.......y... |
f980 | 16 a7 0e 00 df 00 00 00 90 a8 0e 00 f0 00 00 00 70 a9 0e 00 54 00 00 00 61 aa 0e 00 32 00 00 00 | ................p...T...a...2... |
f9a0 | b6 aa 0e 00 0c 01 00 00 e9 aa 0e 00 59 00 00 00 f6 ab 0e 00 4e 00 00 00 50 ac 0e 00 26 01 00 00 | ............Y.......N...P...&... |
f9c0 | 9f ac 0e 00 4a 00 00 00 c6 ad 0e 00 1a 00 00 00 11 ae 0e 00 2f 00 00 00 2c ae 0e 00 a4 00 00 00 | ....J.............../...,....... |
f9e0 | 5c ae 0e 00 2a 00 00 00 01 af 0e 00 1d 01 00 00 2c af 0e 00 2d 00 00 00 4a b0 0e 00 af 00 00 00 | \...*...........,...-...J....... |
fa00 | 78 b0 0e 00 ce 00 00 00 28 b1 0e 00 53 00 00 00 f7 b1 0e 00 45 00 00 00 4b b2 0e 00 34 00 00 00 | x.......(...S.......E...K...4... |
fa20 | 91 b2 0e 00 7a 00 00 00 c6 b2 0e 00 32 00 00 00 41 b3 0e 00 27 00 00 00 74 b3 0e 00 27 00 00 00 | ....z.......2...A...'...t...'... |
fa40 | 9c b3 0e 00 5b 00 00 00 c4 b3 0e 00 78 00 00 00 20 b4 0e 00 5f 00 00 00 99 b4 0e 00 1b 00 00 00 | ....[.......x......._........... |
fa60 | f9 b4 0e 00 0c 00 00 00 15 b5 0e 00 b4 01 00 00 22 b5 0e 00 11 00 00 00 d7 b6 0e 00 12 00 00 00 | ................"............... |
fa80 | e9 b6 0e 00 ed 00 00 00 fc b6 0e 00 17 00 00 00 ea b7 0e 00 18 00 00 00 02 b8 0e 00 12 00 00 00 | ................................ |
faa0 | 1b b8 0e 00 35 00 00 00 2e b8 0e 00 2c 00 00 00 64 b8 0e 00 75 00 00 00 91 b8 0e 00 41 00 00 00 | ....5.......,...d...u.......A... |
fac0 | 07 b9 0e 00 41 00 00 00 49 b9 0e 00 6f 00 00 00 8b b9 0e 00 9f 00 00 00 fb b9 0e 00 a1 00 00 00 | ....A...I...o................... |
fae0 | 9b ba 0e 00 7f 00 00 00 3d bb 0e 00 77 00 00 00 bd bb 0e 00 08 00 00 00 35 bc 0e 00 0e 00 00 00 | ........=...w...........5....... |
fb00 | 3e bc 0e 00 06 00 00 00 4d bc 0e 00 15 00 00 00 54 bc 0e 00 27 00 00 00 6a bc 0e 00 ee 00 00 00 | >.......M.......T...'...j....... |
fb20 | 92 bc 0e 00 eb 00 00 00 81 bd 0e 00 04 00 00 00 6d be 0e 00 20 00 00 00 72 be 0e 00 22 00 00 00 | ................m.......r..."... |
fb40 | 93 be 0e 00 11 00 00 00 b6 be 0e 00 3a 00 00 00 c8 be 0e 00 20 00 00 00 03 bf 0e 00 14 00 00 00 | ............:................... |
fb60 | 24 bf 0e 00 55 00 00 00 39 bf 0e 00 28 00 00 00 8f bf 0e 00 88 00 00 00 b8 bf 0e 00 16 00 00 00 | $...U...9...(................... |
fb80 | 41 c0 0e 00 16 00 00 00 58 c0 0e 00 18 00 00 00 6f c0 0e 00 26 00 00 00 88 c0 0e 00 1a 00 00 00 | A.......X.......o...&........... |
fba0 | af c0 0e 00 27 00 00 00 ca c0 0e 00 23 00 00 00 f2 c0 0e 00 17 00 00 00 16 c1 0e 00 21 00 00 00 | ....'.......#...............!... |
fbc0 | 2e c1 0e 00 28 00 00 00 50 c1 0e 00 49 00 00 00 79 c1 0e 00 44 00 00 00 c3 c1 0e 00 25 00 00 00 | ....(...P...I...y...D.......%... |
fbe0 | 08 c2 0e 00 12 00 00 00 2e c2 0e 00 3a 00 00 00 41 c2 0e 00 32 00 00 00 7c c2 0e 00 3f 00 00 00 | ............:...A...2...|...?... |
fc00 | af c2 0e 00 a2 00 00 00 ef c2 0e 00 21 00 00 00 92 c3 0e 00 0d 00 00 00 b4 c3 0e 00 4a 00 00 00 | ............!...............J... |
fc20 | c2 c3 0e 00 2e 00 00 00 0d c4 0e 00 2e 00 00 00 3c c4 0e 00 2e 00 00 00 6b c4 0e 00 1f 00 00 00 | ................<.......k....... |
fc40 | 9a c4 0e 00 41 00 00 00 ba c4 0e 00 3c 00 00 00 fc c4 0e 00 5b 00 00 00 39 c5 0e 00 30 00 00 00 | ....A.......<.......[...9...0... |
fc60 | 95 c5 0e 00 3f 00 00 00 c6 c5 0e 00 38 00 00 00 06 c6 0e 00 52 00 00 00 3f c6 0e 00 39 00 00 00 | ....?.......8.......R...?...9... |
fc80 | 92 c6 0e 00 3b 00 00 00 cc c6 0e 00 4a 00 00 00 08 c7 0e 00 2d 00 00 00 53 c7 0e 00 3d 00 00 00 | ....;.......J.......-...S...=... |
fca0 | 81 c7 0e 00 24 00 00 00 bf c7 0e 00 20 00 00 00 e4 c7 0e 00 29 00 00 00 05 c8 0e 00 2b 00 00 00 | ....$...............).......+... |
fcc0 | 2f c8 0e 00 38 00 00 00 5b c8 0e 00 3a 00 00 00 94 c8 0e 00 3a 00 00 00 cf c8 0e 00 30 00 00 00 | /...8...[...:.......:.......0... |
fce0 | 0a c9 0e 00 27 00 00 00 3b c9 0e 00 8d 00 00 00 63 c9 0e 00 8d 00 00 00 f1 c9 0e 00 2f 00 00 00 | ....'...;.......c.........../... |
fd00 | 7f ca 0e 00 2a 00 00 00 af ca 0e 00 19 00 00 00 da ca 0e 00 5e 00 00 00 f4 ca 0e 00 23 00 00 00 | ....*...............^.......#... |
fd20 | 53 cb 0e 00 37 00 00 00 77 cb 0e 00 20 00 00 00 af cb 0e 00 1c 00 00 00 d0 cb 0e 00 30 00 00 00 | S...7...w...................0... |
fd40 | ed cb 0e 00 27 00 00 00 1e cc 0e 00 20 00 00 00 46 cc 0e 00 25 00 00 00 67 cc 0e 00 dd 00 00 00 | ....'...........F...%...g....... |
fd60 | 8d cc 0e 00 da 00 00 00 6b cd 0e 00 da 00 00 00 46 ce 0e 00 0e 00 00 00 21 cf 0e 00 40 00 00 00 | ........k.......F.......!...@... |
fd80 | 30 cf 0e 00 23 00 00 00 71 cf 0e 00 24 00 00 00 95 cf 0e 00 07 00 00 00 ba cf 0e 00 07 00 00 00 | 0...#...q...$................... |
fda0 | c2 cf 0e 00 33 00 00 00 ca cf 0e 00 33 00 00 00 fe cf 0e 00 33 00 00 00 32 d0 0e 00 33 00 00 00 | ....3.......3.......3...2...3... |
fdc0 | 66 d0 0e 00 40 00 00 00 9a d0 0e 00 51 00 00 00 db d0 0e 00 4f 00 00 00 2d d1 0e 00 3d 00 00 00 | f...@.......Q.......O...-...=... |
fde0 | 7d d1 0e 00 64 00 00 00 bb d1 0e 00 6f 00 00 00 20 d2 0e 00 cd 00 00 00 90 d2 0e 00 82 00 00 00 | }...d.......o................... |
fe00 | 5e d3 0e 00 8f 00 00 00 e1 d3 0e 00 e1 00 00 00 71 d4 0e 00 c3 00 00 00 53 d5 0e 00 8b 00 00 00 | ^...............q.......S....... |
fe20 | 17 d6 0e 00 19 00 00 00 a3 d6 0e 00 10 00 00 00 bd d6 0e 00 0c 00 00 00 ce d6 0e 00 ac 00 00 00 | ................................ |
fe40 | db d6 0e 00 e2 00 00 00 88 d7 0e 00 14 00 00 00 6b d8 0e 00 c3 00 00 00 80 d8 0e 00 95 00 00 00 | ................k............... |
fe60 | 44 d9 0e 00 13 01 00 00 da d9 0e 00 31 00 00 00 ee da 0e 00 0a 00 00 00 20 db 0e 00 21 01 00 00 | D...........1...............!... |
fe80 | 2b db 0e 00 d8 00 00 00 4d dc 0e 00 8b 00 00 00 26 dd 0e 00 8c 00 00 00 b2 dd 0e 00 f8 00 00 00 | +.......M.......&............... |
fea0 | 3f de 0e 00 39 00 00 00 38 df 0e 00 49 00 00 00 72 df 0e 00 b6 00 00 00 bc df 0e 00 93 00 00 00 | ?...9...8...I...r............... |
fec0 | 73 e0 0e 00 80 00 00 00 07 e1 0e 00 79 00 00 00 88 e1 0e 00 79 00 00 00 02 e2 0e 00 53 01 00 00 | s...........y.......y.......S... |
fee0 | 7c e2 0e 00 7f 00 00 00 d0 e3 0e 00 a9 00 00 00 50 e4 0e 00 b6 00 00 00 fa e4 0e 00 83 00 00 00 | |...............P............... |
ff00 | b1 e5 0e 00 86 00 00 00 35 e6 0e 00 0e 00 00 00 bc e6 0e 00 5d 00 00 00 cb e6 0e 00 36 00 00 00 | ........5...........].......6... |
ff20 | 29 e7 0e 00 10 00 00 00 60 e7 0e 00 0d 00 00 00 71 e7 0e 00 45 00 00 00 7f e7 0e 00 45 00 00 00 | ).......`.......q...E.......E... |
ff40 | c5 e7 0e 00 19 00 00 00 0b e8 0e 00 22 00 00 00 25 e8 0e 00 1c 00 00 00 48 e8 0e 00 45 00 00 00 | ............"...%.......H...E... |
ff60 | 65 e8 0e 00 50 00 00 00 ab e8 0e 00 65 00 00 00 fc e8 0e 00 2f 00 00 00 62 e9 0e 00 60 00 00 00 | e...P.......e......./...b...`... |
ff80 | 92 e9 0e 00 54 00 00 00 f3 e9 0e 00 55 00 00 00 48 ea 0e 00 48 00 00 00 9e ea 0e 00 26 00 00 00 | ....T.......U...H...H.......&... |
ffa0 | e7 ea 0e 00 26 00 00 00 0e eb 0e 00 b2 00 00 00 35 eb 0e 00 eb 00 00 00 e8 eb 0e 00 75 00 00 00 | ....&...........5...........u... |
ffc0 | d4 ec 0e 00 77 00 00 00 4a ed 0e 00 4d 00 00 00 c2 ed 0e 00 e2 00 00 00 10 ee 0e 00 78 00 00 00 | ....w...J...M...............x... |
ffe0 | f3 ee 0e 00 29 01 00 00 6c ef 0e 00 53 00 00 00 96 f0 0e 00 42 00 00 00 ea f0 0e 00 8b 00 00 00 | ....)...l...S.......B........... |
10000 | 2d f1 0e 00 1e 00 00 00 b9 f1 0e 00 56 00 00 00 d8 f1 0e 00 d2 00 00 00 2f f2 0e 00 36 00 00 00 | -...........V.........../...6... |
10020 | 02 f3 0e 00 ce 00 00 00 39 f3 0e 00 c1 00 00 00 08 f4 0e 00 38 00 00 00 ca f4 0e 00 57 00 00 00 | ........9...........8.......W... |
10040 | 03 f5 0e 00 bd 00 00 00 5b f5 0e 00 85 00 00 00 19 f6 0e 00 4f 00 00 00 9f f6 0e 00 ba 01 00 00 | ........[...........O........... |
10060 | ef f6 0e 00 b6 00 00 00 aa f8 0e 00 63 00 00 00 61 f9 0e 00 4c 00 00 00 c5 f9 0e 00 d5 00 00 00 | ............c...a...L........... |
10080 | 12 fa 0e 00 66 00 00 00 e8 fa 0e 00 45 01 00 00 4f fb 0e 00 57 00 00 00 95 fc 0e 00 a4 00 00 00 | ....f.......E...O...W........... |
100a0 | ed fc 0e 00 bc 00 00 00 92 fd 0e 00 65 00 00 00 4f fe 0e 00 3f 00 00 00 b5 fe 0e 00 c0 01 00 00 | ............e...O...?........... |
100c0 | f5 fe 0e 00 72 00 00 00 b6 00 0f 00 74 00 00 00 29 01 0f 00 58 00 00 00 9e 01 0f 00 45 00 00 00 | ....r.......t...)...X.......E... |
100e0 | f7 01 0f 00 41 00 00 00 3d 02 0f 00 52 00 00 00 7f 02 0f 00 81 00 00 00 d2 02 0f 00 75 00 00 00 | ....A...=...R...............u... |
10100 | 54 03 0f 00 30 00 00 00 ca 03 0f 00 31 00 00 00 fb 03 0f 00 7e 00 00 00 2d 04 0f 00 50 00 00 00 | T...0.......1.......~...-...P... |
10120 | ac 04 0f 00 36 00 00 00 fd 04 0f 00 50 01 00 00 34 05 0f 00 69 00 00 00 85 06 0f 00 5d 00 00 00 | ....6.......P...4...i.......]... |
10140 | ef 06 0f 00 8e 00 00 00 4d 07 0f 00 4a 00 00 00 dc 07 0f 00 57 00 00 00 27 08 0f 00 6d 00 00 00 | ........M...J.......W...'...m... |
10160 | 7f 08 0f 00 64 00 00 00 ed 08 0f 00 64 00 00 00 52 09 0f 00 99 00 00 00 b7 09 0f 00 26 00 00 00 | ....d.......d...R...........&... |
10180 | 51 0a 0f 00 ad 00 00 00 78 0a 0f 00 81 00 00 00 26 0b 0f 00 33 00 00 00 a8 0b 0f 00 c0 00 00 00 | Q.......x.......&...3........... |
101a0 | dc 0b 0f 00 90 00 00 00 9d 0c 0f 00 a2 00 00 00 2e 0d 0f 00 83 00 00 00 d1 0d 0f 00 41 00 00 00 | ............................A... |
101c0 | 55 0e 0f 00 3a 00 00 00 97 0e 0f 00 4b 00 00 00 d2 0e 0f 00 65 00 00 00 1e 0f 0f 00 06 00 00 00 | U...:.......K.......e........... |
101e0 | 84 0f 0f 00 05 00 00 00 8b 0f 0f 00 e3 01 00 00 91 0f 0f 00 1e 00 00 00 75 11 0f 00 3d 00 00 00 | ........................u...=... |
10200 | 94 11 0f 00 4b 02 00 00 d2 11 0f 00 5a 02 00 00 1e 14 0f 00 6d 00 00 00 79 16 0f 00 a8 00 00 00 | ....K.......Z.......m...y....... |
10220 | e7 16 0f 00 bf 00 00 00 90 17 0f 00 b2 00 00 00 50 18 0f 00 06 00 00 00 03 19 0f 00 4b 01 00 00 | ................P...........K... |
10240 | 0a 19 0f 00 4c 01 00 00 56 1a 0f 00 17 00 00 00 a3 1b 0f 00 0b 00 00 00 bb 1b 0f 00 0d 00 00 00 | ....L...V....................... |
10260 | c7 1b 0f 00 55 00 00 00 d5 1b 0f 00 0f 00 00 00 2b 1c 0f 00 0f 00 00 00 3b 1c 0f 00 5c 00 00 00 | ....U...........+.......;...\... |
10280 | 4b 1c 0f 00 ff 02 00 00 a8 1c 0f 00 b1 00 00 00 a8 1f 0f 00 37 00 00 00 5a 20 0f 00 06 00 00 00 | K...................7...Z....... |
102a0 | 92 20 0f 00 12 00 00 00 99 20 0f 00 9a 00 00 00 ac 20 0f 00 08 00 00 00 47 21 0f 00 38 00 00 00 | ........................G!..8... |
102c0 | 50 21 0f 00 11 00 00 00 89 21 0f 00 1c 00 00 00 9b 21 0f 00 12 00 00 00 b8 21 0f 00 1a 00 00 00 | P!.......!.......!.......!...... |
102e0 | cb 21 0f 00 49 00 00 00 e6 21 0f 00 1e 00 00 00 30 22 0f 00 2f 00 00 00 4f 22 0f 00 73 00 00 00 | .!..I....!......0"../...O"..s... |
10300 | 7f 22 0f 00 ae 00 00 00 f3 22 0f 00 af 00 00 00 a2 23 0f 00 d0 00 00 00 52 24 0f 00 0b 00 00 00 | .".......".......#......R$...... |
10320 | 23 25 0f 00 08 00 00 00 2f 25 0f 00 14 00 00 00 38 25 0f 00 4a 00 00 00 4d 25 0f 00 60 00 00 00 | #%....../%......8%..J...M%..`... |
10340 | 98 25 0f 00 06 00 00 00 f9 25 0f 00 06 00 00 00 00 26 0f 00 da 00 00 00 07 26 0f 00 98 00 00 00 | .%.......%.......&.......&...... |
10360 | e2 26 0f 00 bc 00 00 00 7b 27 0f 00 06 00 00 00 38 28 0f 00 0a 00 00 00 3f 28 0f 00 14 00 00 00 | .&......{'......8(......?(...... |
10380 | 4a 28 0f 00 1b 00 00 00 5f 28 0f 00 0c 00 00 00 7b 28 0f 00 2e 00 00 00 88 28 0f 00 1d 00 00 00 | J(......_(......{(.......(...... |
103a0 | b7 28 0f 00 0e 00 00 00 d5 28 0f 00 ff 01 00 00 e4 28 0f 00 26 00 00 00 e4 2a 0f 00 0e 00 00 00 | .(.......(.......(..&....*...... |
103c0 | 0b 2b 0f 00 21 00 00 00 1a 2b 0f 00 98 00 00 00 3c 2b 0f 00 07 00 00 00 d5 2b 0f 00 03 00 00 00 | .+..!....+......<+.......+...... |
103e0 | dd 2b 0f 00 91 00 00 00 e1 2b 0f 00 0b 00 00 00 73 2c 0f 00 6a 00 00 00 7f 2c 0f 00 0e 00 00 00 | .+.......+......s,..j....,...... |
10400 | ea 2c 0f 00 08 00 00 00 f9 2c 0f 00 2b 00 00 00 02 2d 0f 00 29 00 00 00 2e 2d 0f 00 35 00 00 00 | .,.......,..+....-..)....-..5... |
10420 | 58 2d 0f 00 54 00 00 00 8e 2d 0f 00 5c 00 00 00 e3 2d 0f 00 7b 00 00 00 40 2e 0f 00 56 00 00 00 | X-..T....-..\....-..{...@...V... |
10440 | bc 2e 0f 00 25 00 00 00 13 2f 0f 00 3a 00 00 00 39 2f 0f 00 3a 00 00 00 74 2f 0f 00 0d 00 00 00 | ....%..../..:...9/..:...t/...... |
10460 | af 2f 0f 00 64 00 00 00 bd 2f 0f 00 64 00 00 00 22 30 0f 00 67 00 00 00 87 30 0f 00 67 00 00 00 | ./..d..../..d..."0..g....0..g... |
10480 | ef 30 0f 00 1f 00 00 00 57 31 0f 00 0c 00 00 00 77 31 0f 00 16 00 00 00 84 31 0f 00 44 01 00 00 | .0......W1......w1.......1..D... |
104a0 | 9b 31 0f 00 41 00 00 00 e0 32 0f 00 47 00 00 00 22 33 0f 00 d3 00 00 00 6a 33 0f 00 3a 02 00 00 | .1..A....2..G..."3......j3..:... |
104c0 | 3e 34 0f 00 d7 00 00 00 79 36 0f 00 93 00 00 00 51 37 0f 00 4e 01 00 00 e5 37 0f 00 30 00 00 00 | >4......y6......Q7..N....7..0... |
104e0 | 34 39 0f 00 c8 00 00 00 65 39 0f 00 ab 00 00 00 2e 3a 0f 00 31 00 00 00 da 3a 0f 00 68 01 00 00 | 49......e9.......:..1....:..h... |
10500 | 0c 3b 0f 00 39 00 00 00 75 3c 0f 00 3b 01 00 00 af 3c 0f 00 b2 00 00 00 eb 3d 0f 00 27 00 00 00 | .;..9...u<..;....<.......=..'... |
10520 | 9e 3e 0f 00 44 00 00 00 c6 3e 0f 00 d2 00 00 00 0b 3f 0f 00 73 00 00 00 de 3f 0f 00 d7 00 00 00 | .>..D....>.......?..s....?...... |
10540 | 52 40 0f 00 9f 00 00 00 2a 41 0f 00 af 00 00 00 ca 41 0f 00 cc 00 00 00 7a 42 0f 00 4f 00 00 00 | R@......*A.......A......zB..O... |
10560 | 47 43 0f 00 3f 01 00 00 97 43 0f 00 c1 00 00 00 d7 44 0f 00 59 00 00 00 99 45 0f 00 21 01 00 00 | GC..?....C.......D..Y....E..!... |
10580 | f3 45 0f 00 29 01 00 00 15 47 0f 00 6f 00 00 00 3f 48 0f 00 8f 00 00 00 af 48 0f 00 8d 00 00 00 | .E..)....G..o...?H.......H...... |
105a0 | 3f 49 0f 00 9e 00 00 00 cd 49 0f 00 6c 00 00 00 6c 4a 0f 00 3a 00 00 00 d9 4a 0f 00 95 00 00 00 | ?I.......I..l...lJ..:....J...... |
105c0 | 14 4b 0f 00 68 00 00 00 aa 4b 0f 00 58 00 00 00 13 4c 0f 00 15 01 00 00 6c 4c 0f 00 52 00 00 00 | .K..h....K..X....L......lL..R... |
105e0 | 82 4d 0f 00 94 00 00 00 d5 4d 0f 00 9e 00 00 00 6a 4e 0f 00 79 00 00 00 09 4f 0f 00 50 00 00 00 | .M.......M......jN..y....O..P... |
10600 | 83 4f 0f 00 9e 00 00 00 d4 4f 0f 00 13 00 00 00 73 50 0f 00 3a 00 00 00 87 50 0f 00 98 01 00 00 | .O.......O......sP..:....P...... |
10620 | c2 50 0f 00 2d 00 00 00 5b 52 0f 00 39 00 00 00 89 52 0f 00 e0 00 00 00 c3 52 0f 00 26 00 00 00 | .P..-...[R..9....R.......R..&... |
10640 | a4 53 0f 00 b5 00 00 00 cb 53 0f 00 70 01 00 00 81 54 0f 00 1b 00 00 00 f2 55 0f 00 bb 00 00 00 | .S.......S..p....T.......U...... |
10660 | 0e 56 0f 00 bb 00 00 00 ca 56 0f 00 fd 00 00 00 86 57 0f 00 85 00 00 00 84 58 0f 00 b5 00 00 00 | .V.......V.......W.......X...... |
10680 | 0a 59 0f 00 5b 00 00 00 c0 59 0f 00 83 00 00 00 1c 5a 0f 00 4b 00 00 00 a0 5a 0f 00 59 01 00 00 | .Y..[....Y.......Z..K....Z..Y... |
106a0 | ec 5a 0f 00 27 00 00 00 46 5c 0f 00 f8 00 00 00 6e 5c 0f 00 28 02 00 00 67 5d 0f 00 ff 00 00 00 | .Z..'...F\......n\..(...g]...... |
106c0 | 90 5f 0f 00 61 00 00 00 90 60 0f 00 5a 00 00 00 f2 60 0f 00 5c 00 00 00 4d 61 0f 00 a9 00 00 00 | ._..a....`..Z....`..\...Ma...... |
106e0 | aa 61 0f 00 b6 00 00 00 54 62 0f 00 5e 00 00 00 0b 63 0f 00 d3 00 00 00 6a 63 0f 00 24 00 00 00 | .a......Tb..^....c......jc..$... |
10700 | 3e 64 0f 00 14 00 00 00 63 64 0f 00 bc 00 00 00 78 64 0f 00 68 00 00 00 35 65 0f 00 1f 00 00 00 | >d......cd......xd..h...5e...... |
10720 | 9e 65 0f 00 24 00 00 00 be 65 0f 00 bd 00 00 00 e3 65 0f 00 1f 00 00 00 a1 66 0f 00 17 00 00 00 | .e..$....e.......e.......f...... |
10740 | c1 66 0f 00 21 00 00 00 d9 66 0f 00 21 00 00 00 fb 66 0f 00 22 00 00 00 1d 67 0f 00 40 00 00 00 | .f..!....f..!....f.."....g..@... |
10760 | 40 67 0f 00 1a 00 00 00 81 67 0f 00 45 00 00 00 9c 67 0f 00 17 01 00 00 e2 67 0f 00 54 00 00 00 | @g.......g..E....g.......g..T... |
10780 | fa 68 0f 00 d2 01 00 00 4f 69 0f 00 a2 00 00 00 22 6b 0f 00 d1 00 00 00 c5 6b 0f 00 e4 00 00 00 | .h......Oi......"k.......k...... |
107a0 | 97 6c 0f 00 bf 00 00 00 7c 6d 0f 00 dc 00 00 00 3c 6e 0f 00 4e 01 00 00 19 6f 0f 00 45 00 00 00 | .l......|m......<n..N....o..E... |
107c0 | 68 70 0f 00 34 00 00 00 ae 70 0f 00 b4 00 00 00 e3 70 0f 00 f9 00 00 00 98 71 0f 00 c5 00 00 00 | hp..4....p.......p.......q...... |
107e0 | 92 72 0f 00 27 00 00 00 58 73 0f 00 b7 00 00 00 80 73 0f 00 ae 00 00 00 38 74 0f 00 52 00 00 00 | .r..'...Xs.......s......8t..R... |
10800 | e7 74 0f 00 ab 00 00 00 3a 75 0f 00 c8 00 00 00 e6 75 0f 00 5b 00 00 00 af 76 0f 00 6d 00 00 00 | .t......:u.......u..[....v..m... |
10820 | 0b 77 0f 00 ab 00 00 00 79 77 0f 00 30 00 00 00 25 78 0f 00 68 00 00 00 56 78 0f 00 53 00 00 00 | .w......yw..0...%x..h...Vx..S... |
10840 | bf 78 0f 00 33 00 00 00 13 79 0f 00 2d 00 00 00 47 79 0f 00 4e 00 00 00 75 79 0f 00 70 00 00 00 | .x..3....y..-...Gy..N...uy..p... |
10860 | c4 79 0f 00 6c 00 00 00 35 7a 0f 00 c5 00 00 00 a2 7a 0f 00 b7 00 00 00 68 7b 0f 00 38 00 00 00 | .y..l...5z.......z......h{..8... |
10880 | 20 7c 0f 00 dd 00 00 00 59 7c 0f 00 1e 01 00 00 37 7d 0f 00 5f 01 00 00 56 7e 0f 00 dc 00 00 00 | .|......Y|......7}.._...V~...... |
108a0 | b6 7f 0f 00 c8 00 00 00 93 80 0f 00 36 00 00 00 5c 81 0f 00 6e 00 00 00 93 81 0f 00 91 00 00 00 | ............6...\...n........... |
108c0 | 02 82 0f 00 60 00 00 00 94 82 0f 00 b0 00 00 00 f5 82 0f 00 6e 00 00 00 a6 83 0f 00 6b 00 00 00 | ....`...............n.......k... |
108e0 | 15 84 0f 00 35 00 00 00 81 84 0f 00 33 00 00 00 b7 84 0f 00 f1 00 00 00 eb 84 0f 00 2b 00 00 00 | ....5.......3...............+... |
10900 | dd 85 0f 00 38 00 00 00 09 86 0f 00 3a 01 00 00 42 86 0f 00 4b 00 00 00 7d 87 0f 00 53 01 00 00 | ....8.......:...B...K...}...S... |
10920 | c9 87 0f 00 92 01 00 00 1d 89 0f 00 a1 00 00 00 b0 8a 0f 00 28 00 00 00 52 8b 0f 00 35 01 00 00 | ....................(...R...5... |
10940 | 7b 8b 0f 00 9a 00 00 00 b1 8c 0f 00 10 01 00 00 4c 8d 0f 00 2b 00 00 00 5d 8e 0f 00 a6 00 00 00 | {...............L...+...]....... |
10960 | 89 8e 0f 00 2e 00 00 00 30 8f 0f 00 3f 00 00 00 5f 8f 0f 00 ec 00 00 00 9f 8f 0f 00 ee 00 00 00 | ........0...?..._............... |
10980 | 8c 90 0f 00 7c 00 00 00 7b 91 0f 00 9a 01 00 00 f8 91 0f 00 42 00 00 00 93 93 0f 00 82 00 00 00 | ....|...{...........B........... |
109a0 | d6 93 0f 00 9b 00 00 00 59 94 0f 00 31 00 00 00 f5 94 0f 00 b4 00 00 00 27 95 0f 00 63 00 00 00 | ........Y...1...........'...c... |
109c0 | dc 95 0f 00 33 00 00 00 40 96 0f 00 3a 00 00 00 74 96 0f 00 5e 00 00 00 af 96 0f 00 25 01 00 00 | ....3...@...:...t...^.......%... |
109e0 | 0e 97 0f 00 42 00 00 00 34 98 0f 00 5c 00 00 00 77 98 0f 00 56 00 00 00 d4 98 0f 00 fe 00 00 00 | ....B...4...\...w...V........... |
10a00 | 2b 99 0f 00 79 00 00 00 2a 9a 0f 00 55 00 00 00 a4 9a 0f 00 58 00 00 00 fa 9a 0f 00 cd 01 00 00 | +...y...*...U.......X........... |
10a20 | 53 9b 0f 00 3d 00 00 00 21 9d 0f 00 e8 01 00 00 5f 9d 0f 00 40 00 00 00 48 9f 0f 00 7f 00 00 00 | S...=...!......._...@...H....... |
10a40 | 89 9f 0f 00 6c 00 00 00 09 a0 0f 00 6e 00 00 00 76 a0 0f 00 e8 00 00 00 e5 a0 0f 00 a5 00 00 00 | ....l.......n...v............... |
10a60 | ce a1 0f 00 6b 00 00 00 74 a2 0f 00 69 01 00 00 e0 a2 0f 00 34 00 00 00 4a a4 0f 00 79 00 00 00 | ....k...t...i.......4...J...y... |
10a80 | 7f a4 0f 00 3d 00 00 00 f9 a4 0f 00 54 00 00 00 37 a5 0f 00 4c 00 00 00 8c a5 0f 00 bc 00 00 00 | ....=.......T...7...L........... |
10aa0 | d9 a5 0f 00 ea 00 00 00 96 a6 0f 00 6d 00 00 00 81 a7 0f 00 e6 00 00 00 ef a7 0f 00 36 00 00 00 | ............m...............6... |
10ac0 | d6 a8 0f 00 5b 00 00 00 0d a9 0f 00 6a 00 00 00 69 a9 0f 00 82 00 00 00 d4 a9 0f 00 73 00 00 00 | ....[.......j...i...........s... |
10ae0 | 57 aa 0f 00 49 00 00 00 cb aa 0f 00 29 00 00 00 15 ab 0f 00 2a 01 00 00 3f ab 0f 00 47 00 00 00 | W...I.......).......*...?...G... |
10b00 | 6a ac 0f 00 46 00 00 00 b2 ac 0f 00 49 00 00 00 f9 ac 0f 00 49 00 00 00 43 ad 0f 00 22 00 00 00 | j...F.......I.......I...C..."... |
10b20 | 8d ad 0f 00 54 00 00 00 b0 ad 0f 00 65 00 00 00 05 ae 0f 00 32 00 00 00 6b ae 0f 00 9d 00 00 00 | ....T.......e.......2...k....... |
10b40 | 9e ae 0f 00 77 00 00 00 3c af 0f 00 2c 00 00 00 b4 af 0f 00 42 00 00 00 e1 af 0f 00 2b 00 00 00 | ....w...<...,.......B.......+... |
10b60 | 24 b0 0f 00 86 01 00 00 50 b0 0f 00 c4 00 00 00 d7 b1 0f 00 c6 00 00 00 9c b2 0f 00 80 00 00 00 | $.......P....................... |
10b80 | 63 b3 0f 00 49 01 00 00 e4 b3 0f 00 90 00 00 00 2e b5 0f 00 38 00 00 00 bf b5 0f 00 9f 00 00 00 | c...I...............8........... |
10ba0 | f8 b5 0f 00 1c 01 00 00 98 b6 0f 00 d5 00 00 00 b5 b7 0f 00 38 00 00 00 8b b8 0f 00 28 00 00 00 | ....................8.......(... |
10bc0 | c4 b8 0f 00 5c 00 00 00 ed b8 0f 00 29 00 00 00 4a b9 0f 00 71 00 00 00 74 b9 0f 00 41 00 00 00 | ....\.......)...J...q...t...A... |
10be0 | e6 b9 0f 00 0f 01 00 00 28 ba 0f 00 fc 00 00 00 38 bb 0f 00 89 00 00 00 35 bc 0f 00 25 00 00 00 | ........(.......8.......5...%... |
10c00 | bf bc 0f 00 5f 00 00 00 e5 bc 0f 00 ec 00 00 00 45 bd 0f 00 4e 00 00 00 32 be 0f 00 84 00 00 00 | ...._...........E...N...2....... |
10c20 | 81 be 0f 00 55 00 00 00 06 bf 0f 00 12 01 00 00 5c bf 0f 00 75 00 00 00 6f c0 0f 00 65 00 00 00 | ....U...........\...u...o...e... |
10c40 | e5 c0 0f 00 e2 00 00 00 4b c1 0f 00 2f 00 00 00 2e c2 0f 00 29 00 00 00 5e c2 0f 00 a0 01 00 00 | ........K.../.......)...^....... |
10c60 | 88 c2 0f 00 ff 00 00 00 29 c4 0f 00 db 00 00 00 29 c5 0f 00 36 00 00 00 05 c6 0f 00 40 00 00 00 | ........).......)...6.......@... |
10c80 | 3c c6 0f 00 1f 00 00 00 7d c6 0f 00 40 00 00 00 9d c6 0f 00 4d 00 00 00 de c6 0f 00 4c 00 00 00 | <.......}...@.......M.......L... |
10ca0 | 2c c7 0f 00 92 00 00 00 79 c7 0f 00 43 00 00 00 0c c8 0f 00 af 00 00 00 50 c8 0f 00 65 00 00 00 | ,.......y...C...........P...e... |
10cc0 | 00 c9 0f 00 a8 00 00 00 66 c9 0f 00 38 00 00 00 0f ca 0f 00 3e 01 00 00 48 ca 0f 00 3c 00 00 00 | ........f...8.......>...H...<... |
10ce0 | 87 cb 0f 00 90 00 00 00 c4 cb 0f 00 58 00 00 00 55 cc 0f 00 95 00 00 00 ae cc 0f 00 50 00 00 00 | ............X...U...........P... |
10d00 | 44 cd 0f 00 64 00 00 00 95 cd 0f 00 50 00 00 00 fa cd 0f 00 6d 00 00 00 4b ce 0f 00 3a 00 00 00 | D...d.......P.......m...K...:... |
10d20 | b9 ce 0f 00 29 00 00 00 f4 ce 0f 00 6d 00 00 00 1e cf 0f 00 c0 00 00 00 8c cf 0f 00 b8 01 00 00 | ....).......m................... |
10d40 | 4d d0 0f 00 51 00 00 00 06 d2 0f 00 21 00 00 00 58 d2 0f 00 25 00 00 00 7a d2 0f 00 71 00 00 00 | M...Q.......!...X...%...z...q... |
10d60 | a0 d2 0f 00 24 00 00 00 12 d3 0f 00 bc 01 00 00 37 d3 0f 00 55 00 00 00 f4 d4 0f 00 a9 00 00 00 | ....$...........7...U........... |
10d80 | 4a d5 0f 00 4c 00 00 00 f4 d5 0f 00 ee 00 00 00 41 d6 0f 00 43 00 00 00 30 d7 0f 00 39 00 00 00 | J...L...........A...C...0...9... |
10da0 | 74 d7 0f 00 a9 00 00 00 ae d7 0f 00 50 00 00 00 58 d8 0f 00 53 01 00 00 a9 d8 0f 00 46 00 00 00 | t...........P...X...S.......F... |
10dc0 | fd d9 0f 00 44 00 00 00 44 da 0f 00 43 00 00 00 89 da 0f 00 de 00 00 00 cd da 0f 00 83 00 00 00 | ....D...D...C................... |
10de0 | ac db 0f 00 83 00 00 00 30 dc 0f 00 39 01 00 00 b4 dc 0f 00 a0 00 00 00 ee dd 0f 00 d1 00 00 00 | ........0...9................... |
10e00 | 8f de 0f 00 61 00 00 00 61 df 0f 00 b4 00 00 00 c3 df 0f 00 b7 00 00 00 78 e0 0f 00 b6 00 00 00 | ....a...a...............x....... |
10e20 | 30 e1 0f 00 bb 00 00 00 e7 e1 0f 00 a1 00 00 00 a3 e2 0f 00 5c 00 00 00 45 e3 0f 00 58 00 00 00 | 0...................\...E...X... |
10e40 | a2 e3 0f 00 5c 00 00 00 fb e3 0f 00 58 00 00 00 58 e4 0f 00 71 00 00 00 b1 e4 0f 00 5e 00 00 00 | ....\.......X...X...q.......^... |
10e60 | 23 e5 0f 00 21 01 00 00 82 e5 0f 00 13 01 00 00 a4 e6 0f 00 12 01 00 00 b8 e7 0f 00 09 01 00 00 | #...!........................... |
10e80 | cb e8 0f 00 40 00 00 00 d5 e9 0f 00 a3 00 00 00 16 ea 0f 00 a3 00 00 00 ba ea 0f 00 9f 00 00 00 | ....@........................... |
10ea0 | 5e eb 0f 00 9f 00 00 00 fe eb 0f 00 bb 00 00 00 9e ec 0f 00 b4 00 00 00 5a ed 0f 00 54 00 00 00 | ^.......................Z...T... |
10ec0 | 0f ee 0f 00 bc 00 00 00 64 ee 0f 00 56 00 00 00 21 ef 0f 00 be 00 00 00 78 ef 0f 00 4e 00 00 00 | ........d...V...!.......x...N... |
10ee0 | 37 f0 0f 00 cf 01 00 00 86 f0 0f 00 29 01 00 00 56 f2 0f 00 46 00 00 00 80 f3 0f 00 7e 00 00 00 | 7...........)...V...F.......~... |
10f00 | c7 f3 0f 00 3c 00 00 00 46 f4 0f 00 db 00 00 00 83 f4 0f 00 42 00 00 00 5f f5 0f 00 4e 00 00 00 | ....<...F...........B..._...N... |
10f20 | a2 f5 0f 00 4e 00 00 00 f1 f5 0f 00 49 00 00 00 40 f6 0f 00 49 00 00 00 8a f6 0f 00 43 00 00 00 | ....N.......I...@...I.......C... |
10f40 | d4 f6 0f 00 4b 00 00 00 18 f7 0f 00 64 00 00 00 64 f7 0f 00 46 00 00 00 c9 f7 0f 00 84 00 00 00 | ....K.......d...d...F........... |
10f60 | 10 f8 0f 00 7c 00 00 00 95 f8 0f 00 86 00 00 00 12 f9 0f 00 2f 00 00 00 99 f9 0f 00 79 00 00 00 | ....|.............../.......y... |
10f80 | c9 f9 0f 00 76 00 00 00 43 fa 0f 00 81 00 00 00 ba fa 0f 00 46 01 00 00 3c fb 0f 00 71 00 00 00 | ....v...C...........F...<...q... |
10fa0 | 83 fc 0f 00 66 00 00 00 f5 fc 0f 00 3f 00 00 00 5c fd 0f 00 88 00 00 00 9c fd 0f 00 da 00 00 00 | ....f.......?...\............... |
10fc0 | 25 fe 0f 00 19 00 00 00 00 ff 0f 00 90 01 00 00 1a ff 0f 00 a5 00 00 00 ab 00 10 00 43 00 00 00 | %...........................C... |
10fe0 | 51 01 10 00 2a 00 00 00 95 01 10 00 4c 00 00 00 c0 01 10 00 3a 00 00 00 0d 02 10 00 4e 00 00 00 | Q...*.......L.......:.......N... |
11000 | 48 02 10 00 b0 00 00 00 97 02 10 00 2a 00 00 00 48 03 10 00 21 00 00 00 73 03 10 00 51 00 00 00 | H...........*...H...!...s...Q... |
11020 | 95 03 10 00 45 00 00 00 e7 03 10 00 5f 00 00 00 2d 04 10 00 37 00 00 00 8d 04 10 00 41 00 00 00 | ....E......._...-...7.......A... |
11040 | c5 04 10 00 44 00 00 00 07 05 10 00 6a 00 00 00 4c 05 10 00 3c 00 00 00 b7 05 10 00 56 00 00 00 | ....D.......j...L...<.......V... |
11060 | f4 05 10 00 4a 00 00 00 4b 06 10 00 ee 00 00 00 96 06 10 00 47 00 00 00 85 07 10 00 7a 00 00 00 | ....J...K...........G.......z... |
11080 | cd 07 10 00 d2 00 00 00 48 08 10 00 5f 00 00 00 1b 09 10 00 d5 00 00 00 7b 09 10 00 39 00 00 00 | ........H..._...........{...9... |
110a0 | 51 0a 10 00 70 00 00 00 8b 0a 10 00 5d 00 00 00 fc 0a 10 00 55 00 00 00 5a 0b 10 00 2b 00 00 00 | Q...p.......].......U...Z...+... |
110c0 | b0 0b 10 00 38 00 00 00 dc 0b 10 00 46 00 00 00 15 0c 10 00 4c 00 00 00 5c 0c 10 00 62 00 00 00 | ....8.......F.......L...\...b... |
110e0 | a9 0c 10 00 55 01 00 00 0c 0d 10 00 c0 00 00 00 62 0e 10 00 b6 00 00 00 23 0f 10 00 8d 00 00 00 | ....U...........b.......#....... |
11100 | da 0f 10 00 d5 00 00 00 68 10 10 00 7e 00 00 00 3e 11 10 00 a4 00 00 00 bd 11 10 00 a6 00 00 00 | ........h...~...>............... |
11120 | 62 12 10 00 c7 01 00 00 09 13 10 00 32 01 00 00 d1 14 10 00 a8 00 00 00 04 16 10 00 79 00 00 00 | b...........2...............y... |
11140 | ad 16 10 00 33 00 00 00 27 17 10 00 90 00 00 00 5b 17 10 00 b0 00 00 00 ec 17 10 00 63 00 00 00 | ....3...'.......[...........c... |
11160 | 9d 18 10 00 b3 00 00 00 01 19 10 00 d6 00 00 00 b5 19 10 00 2c 00 00 00 8c 1a 10 00 52 00 00 00 | ....................,.......R... |
11180 | b9 1a 10 00 6e 00 00 00 0c 1b 10 00 4d 01 00 00 7b 1b 10 00 3b 00 00 00 c9 1c 10 00 ad 00 00 00 | ....n.......M...{...;........... |
111a0 | 05 1d 10 00 7b 02 00 00 b3 1d 10 00 54 01 00 00 2f 20 10 00 53 00 00 00 84 21 10 00 4b 00 00 00 | ....{.......T.../...S....!..K... |
111c0 | d8 21 10 00 04 01 00 00 24 22 10 00 eb 00 00 00 29 23 10 00 c8 00 00 00 15 24 10 00 c8 00 00 00 | .!......$"......)#.......$...... |
111e0 | de 24 10 00 b6 00 00 00 a7 25 10 00 bb 00 00 00 5e 26 10 00 60 00 00 00 1a 27 10 00 b5 00 00 00 | .$.......%......^&..`....'...... |
11200 | 7b 27 10 00 b9 00 00 00 31 28 10 00 9b 00 00 00 eb 28 10 00 0a 01 00 00 87 29 10 00 01 01 00 00 | {'......1(.......(.......)...... |
11220 | 92 2a 10 00 38 00 00 00 94 2b 10 00 3b 00 00 00 cd 2b 10 00 45 00 00 00 09 2c 10 00 2c 00 00 00 | .*..8....+..;....+..E....,..,... |
11240 | 4f 2c 10 00 70 00 00 00 7c 2c 10 00 4e 00 00 00 ed 2c 10 00 7c 01 00 00 3c 2d 10 00 71 01 00 00 | O,..p...|,..N....,..|...<-..q... |
11260 | b9 2e 10 00 90 00 00 00 2b 30 10 00 4b 00 00 00 bc 30 10 00 11 01 00 00 08 31 10 00 7b 00 00 00 | ........+0..K....0.......1..{... |
11280 | 1a 32 10 00 58 00 00 00 96 32 10 00 a9 00 00 00 ef 32 10 00 72 00 00 00 99 33 10 00 6c 00 00 00 | .2..X....2.......2..r....3..l... |
112a0 | 0c 34 10 00 60 00 00 00 79 34 10 00 17 01 00 00 da 34 10 00 ff 00 00 00 f2 35 10 00 44 00 00 00 | .4..`...y4.......4.......5..D... |
112c0 | f2 36 10 00 87 00 00 00 37 37 10 00 70 00 00 00 bf 37 10 00 87 00 00 00 30 38 10 00 65 00 00 00 | .6......77..p....7......08..e... |
112e0 | b8 38 10 00 6e 00 00 00 1e 39 10 00 64 00 00 00 8d 39 10 00 59 02 00 00 f2 39 10 00 88 00 00 00 | .8..n....9..d....9..Y....9...... |
11300 | 4c 3c 10 00 25 00 00 00 d5 3c 10 00 88 00 00 00 fb 3c 10 00 a5 00 00 00 84 3d 10 00 57 01 00 00 | L<..%....<.......<.......=..W... |
11320 | 2a 3e 10 00 32 01 00 00 82 3f 10 00 49 01 00 00 b5 40 10 00 51 01 00 00 ff 41 10 00 fb 00 00 00 | *>..2....?..I....@..Q....A...... |
11340 | 51 43 10 00 28 00 00 00 4d 44 10 00 95 00 00 00 76 44 10 00 af 00 00 00 0c 45 10 00 af 00 00 00 | QC..(...MD......vD.......E...... |
11360 | bc 45 10 00 76 00 00 00 6c 46 10 00 a6 00 00 00 e3 46 10 00 84 01 00 00 8a 47 10 00 6a 00 00 00 | .E..v...lF.......F.......G..j... |
11380 | 0f 49 10 00 b9 00 00 00 7a 49 10 00 0f 01 00 00 34 4a 10 00 36 00 00 00 44 4b 10 00 a5 00 00 00 | .I......zI......4J..6...DK...... |
113a0 | 7b 4b 10 00 a7 00 00 00 21 4c 10 00 7b 00 00 00 c9 4c 10 00 67 00 00 00 45 4d 10 00 32 00 00 00 | {K......!L..{....L..g...EM..2... |
113c0 | ad 4d 10 00 fe 00 00 00 e0 4d 10 00 9d 00 00 00 df 4e 10 00 bb 00 00 00 7d 4f 10 00 77 00 00 00 | .M.......M.......N......}O..w... |
113e0 | 39 50 10 00 bf 00 00 00 b1 50 10 00 c7 00 00 00 71 51 10 00 cc 00 00 00 39 52 10 00 d1 00 00 00 | 9P.......P......qQ......9R...... |
11400 | 06 53 10 00 2d 04 00 00 d8 53 10 00 5d 00 00 00 06 58 10 00 e3 00 00 00 64 58 10 00 cf 00 00 00 | .S..-....S..]....X......dX...... |
11420 | 48 59 10 00 07 01 00 00 18 5a 10 00 10 01 00 00 20 5b 10 00 9c 00 00 00 31 5c 10 00 8a 00 00 00 | HY.......Z.......[......1\...... |
11440 | ce 5c 10 00 97 00 00 00 59 5d 10 00 40 00 00 00 f1 5d 10 00 f0 00 00 00 32 5e 10 00 0b 01 00 00 | .\......Y]..@....]......2^...... |
11460 | 23 5f 10 00 37 01 00 00 2f 60 10 00 75 01 00 00 67 61 10 00 97 01 00 00 dd 62 10 00 f0 00 00 00 | #_..7.../`..u...ga.......b...... |
11480 | 75 64 10 00 01 01 00 00 66 65 10 00 aa 00 00 00 68 66 10 00 69 00 00 00 13 67 10 00 6b 00 00 00 | ud......fe......hf..i....g..k... |
114a0 | 7d 67 10 00 df 00 00 00 e9 67 10 00 44 00 00 00 c9 68 10 00 ec 00 00 00 0e 69 10 00 86 00 00 00 | }g.......g..D....h.......i...... |
114c0 | fb 69 10 00 d5 00 00 00 82 6a 10 00 b9 00 00 00 58 6b 10 00 a6 00 00 00 12 6c 10 00 c8 00 00 00 | .i.......j......Xk.......l...... |
114e0 | b9 6c 10 00 71 00 00 00 82 6d 10 00 2c 01 00 00 f4 6d 10 00 84 00 00 00 21 6f 10 00 00 01 00 00 | .l..q....m..,....m......!o...... |
11500 | a6 6f 10 00 e5 00 00 00 a7 70 10 00 2d 01 00 00 8d 71 10 00 12 01 00 00 bb 72 10 00 f2 00 00 00 | .o.......p..-....q.......r...... |
11520 | ce 73 10 00 a4 00 00 00 c1 74 10 00 90 01 00 00 66 75 10 00 a2 00 00 00 f7 76 10 00 b3 01 00 00 | .s.......t......fu.......v...... |
11540 | 9a 77 10 00 53 00 00 00 4e 79 10 00 5f 00 00 00 a2 79 10 00 80 00 00 00 02 7a 10 00 81 00 00 00 | .w..S...Ny.._....y.......z...... |
11560 | 83 7a 10 00 8f 00 00 00 05 7b 10 00 7b 00 00 00 95 7b 10 00 7a 00 00 00 11 7c 10 00 f3 00 00 00 | .z.......{..{....{..z....|...... |
11580 | 8c 7c 10 00 f2 00 00 00 80 7d 10 00 3a 00 00 00 73 7e 10 00 3a 00 00 00 ae 7e 10 00 41 00 00 00 | .|.......}..:...s~..:....~..A... |
115a0 | e9 7e 10 00 67 00 00 00 2b 7f 10 00 42 00 00 00 93 7f 10 00 38 00 00 00 d6 7f 10 00 53 00 00 00 | .~..g...+...B.......8.......S... |
115c0 | 0f 80 10 00 5c 00 00 00 63 80 10 00 e1 01 00 00 c0 80 10 00 bb 00 00 00 a2 82 10 00 e7 00 00 00 | ....\...c....................... |
115e0 | 5e 83 10 00 4d 00 00 00 46 84 10 00 96 00 00 00 94 84 10 00 80 00 00 00 2b 85 10 00 e5 00 00 00 | ^...M...F...............+....... |
11600 | ac 85 10 00 66 00 00 00 92 86 10 00 ad 00 00 00 f9 86 10 00 17 00 00 00 a7 87 10 00 16 00 00 00 | ....f........................... |
11620 | bf 87 10 00 16 00 00 00 d6 87 10 00 1c 00 00 00 ed 87 10 00 1d 00 00 00 0a 88 10 00 14 00 00 00 | ................................ |
11640 | 28 88 10 00 13 00 00 00 3d 88 10 00 14 00 00 00 51 88 10 00 22 00 00 00 66 88 10 00 3f 00 00 00 | (.......=.......Q..."...f...?... |
11660 | 89 88 10 00 16 00 00 00 c9 88 10 00 52 00 00 00 e0 88 10 00 89 00 00 00 33 89 10 00 4b 00 00 00 | ............R...........3...K... |
11680 | bd 89 10 00 0d 01 00 00 09 8a 10 00 41 00 00 00 17 8b 10 00 6d 00 00 00 59 8b 10 00 6a 00 00 00 | ............A.......m...Y...j... |
116a0 | c7 8b 10 00 32 00 00 00 32 8c 10 00 61 00 00 00 65 8c 10 00 8d 00 00 00 c7 8c 10 00 8e 00 00 00 | ....2...2...a...e............... |
116c0 | 55 8d 10 00 47 00 00 00 e4 8d 10 00 40 00 00 00 2c 8e 10 00 6c 00 00 00 6d 8e 10 00 4c 00 00 00 | U...G.......@...,...l...m...L... |
116e0 | da 8e 10 00 3f 00 00 00 27 8f 10 00 00 01 00 00 67 8f 10 00 1c 01 00 00 68 90 10 00 a2 00 00 00 | ....?...'.......g.......h....... |
11700 | 85 91 10 00 97 00 00 00 28 92 10 00 59 00 00 00 c0 92 10 00 62 00 00 00 1a 93 10 00 1a 00 00 00 | ........(...Y.......b........... |
11720 | 7d 93 10 00 1c 00 00 00 98 93 10 00 bb 00 00 00 b5 93 10 00 32 00 00 00 71 94 10 00 73 00 00 00 | }...................2...q...s... |
11740 | a4 94 10 00 61 00 00 00 18 95 10 00 76 00 00 00 7a 95 10 00 47 00 00 00 f1 95 10 00 43 01 00 00 | ....a.......v...z...G.......C... |
11760 | 39 96 10 00 7d 00 00 00 7d 97 10 00 e5 00 00 00 fb 97 10 00 11 00 00 00 e1 98 10 00 63 00 00 00 | 9...}...}...................c... |
11780 | f3 98 10 00 c6 00 00 00 57 99 10 00 8e 00 00 00 1e 9a 10 00 2a 00 00 00 ad 9a 10 00 98 00 00 00 | ........W...........*........... |
117a0 | d8 9a 10 00 44 00 00 00 71 9b 10 00 a0 00 00 00 b6 9b 10 00 ca 00 00 00 57 9c 10 00 41 00 00 00 | ....D...q...............W...A... |
117c0 | 22 9d 10 00 76 00 00 00 64 9d 10 00 c7 00 00 00 db 9d 10 00 58 00 00 00 a3 9e 10 00 23 00 00 00 | "...v...d...........X.......#... |
117e0 | fc 9e 10 00 76 00 00 00 20 9f 10 00 36 00 00 00 97 9f 10 00 97 00 00 00 ce 9f 10 00 2c 00 00 00 | ....v.......6...............,... |
11800 | 66 a0 10 00 2b 00 00 00 93 a0 10 00 2e 00 00 00 bf a0 10 00 33 00 00 00 ee a0 10 00 fc 00 00 00 | f...+...............3........... |
11820 | 22 a1 10 00 e9 00 00 00 1f a2 10 00 31 00 00 00 09 a3 10 00 26 00 00 00 3b a3 10 00 60 00 00 00 | "...........1.......&...;...`... |
11840 | 62 a3 10 00 1d 00 00 00 c3 a3 10 00 89 00 00 00 e1 a3 10 00 be 00 00 00 6b a4 10 00 60 01 00 00 | b.......................k...`... |
11860 | 2a a5 10 00 80 00 00 00 8b a6 10 00 78 00 00 00 0c a7 10 00 7b 00 00 00 85 a7 10 00 29 00 00 00 | *...........x.......{.......)... |
11880 | 01 a8 10 00 e9 00 00 00 2b a8 10 00 3d 00 00 00 15 a9 10 00 6f 00 00 00 53 a9 10 00 3b 00 00 00 | ........+...=.......o...S...;... |
118a0 | c3 a9 10 00 a5 00 00 00 ff a9 10 00 2d 01 00 00 a5 aa 10 00 2c 01 00 00 d3 ab 10 00 dd 00 00 00 | ............-.......,........... |
118c0 | 00 ad 10 00 64 00 00 00 de ad 10 00 40 00 00 00 43 ae 10 00 77 00 00 00 84 ae 10 00 76 00 00 00 | ....d.......@...C...w.......v... |
118e0 | fc ae 10 00 6f 00 00 00 73 af 10 00 d3 00 00 00 e3 af 10 00 23 01 00 00 b7 b0 10 00 9d 01 00 00 | ....o...s...........#........... |
11900 | db b1 10 00 48 00 00 00 79 b3 10 00 2c 00 00 00 c2 b3 10 00 bb 00 00 00 ef b3 10 00 23 00 00 00 | ....H...y...,...............#... |
11920 | ab b4 10 00 3d 00 00 00 cf b4 10 00 42 00 00 00 0d b5 10 00 5b 00 00 00 50 b5 10 00 6b 00 00 00 | ....=.......B.......[...P...k... |
11940 | ac b5 10 00 30 00 00 00 18 b6 10 00 3d 00 00 00 49 b6 10 00 2c 00 00 00 87 b6 10 00 54 00 00 00 | ....0.......=...I...,.......T... |
11960 | b4 b6 10 00 38 00 00 00 09 b7 10 00 3a 00 00 00 42 b7 10 00 3c 00 00 00 7d b7 10 00 44 00 00 00 | ....8.......:...B...<...}...D... |
11980 | ba b7 10 00 34 00 00 00 ff b7 10 00 32 01 00 00 34 b8 10 00 30 00 00 00 67 b9 10 00 dd 00 00 00 | ....4.......2...4...0...g....... |
119a0 | 98 b9 10 00 09 00 00 00 76 ba 10 00 d6 00 00 00 80 ba 10 00 49 00 00 00 57 bb 10 00 47 00 00 00 | ........v...........I...W...G... |
119c0 | a1 bb 10 00 44 00 00 00 e9 bb 10 00 4a 00 00 00 2e bc 10 00 26 00 00 00 79 bc 10 00 1f 00 00 00 | ....D.......J.......&...y....... |
119e0 | a0 bc 10 00 74 00 00 00 c0 bc 10 00 12 00 00 00 35 bd 10 00 30 00 00 00 48 bd 10 00 45 00 00 00 | ....t...........5...0...H...E... |
11a00 | 79 bd 10 00 2e 00 00 00 bf bd 10 00 06 00 00 00 ee bd 10 00 65 00 00 00 f5 bd 10 00 4e 00 00 00 | y...................e.......N... |
11a20 | 5b be 10 00 b1 00 00 00 aa be 10 00 9b 00 00 00 5c bf 10 00 91 00 00 00 f8 bf 10 00 ae 00 00 00 | [...............\............... |
11a40 | 8a c0 10 00 22 00 00 00 39 c1 10 00 aa 00 00 00 5c c1 10 00 39 01 00 00 07 c2 10 00 5c 00 00 00 | ...."...9.......\...9.......\... |
11a60 | 41 c3 10 00 74 00 00 00 9e c3 10 00 58 00 00 00 13 c4 10 00 6f 00 00 00 6c c4 10 00 99 00 00 00 | A...t.......X.......o...l....... |
11a80 | dc c4 10 00 80 00 00 00 76 c5 10 00 54 00 00 00 f7 c5 10 00 4c 00 00 00 4c c6 10 00 51 00 00 00 | ........v...T.......L...L...Q... |
11aa0 | 99 c6 10 00 d7 00 00 00 eb c6 10 00 68 00 00 00 c3 c7 10 00 62 00 00 00 2c c8 10 00 5e 00 00 00 | ............h.......b...,...^... |
11ac0 | 8f c8 10 00 3c 00 00 00 ee c8 10 00 77 00 00 00 2b c9 10 00 40 00 00 00 a3 c9 10 00 d7 00 00 00 | ....<.......w...+...@........... |
11ae0 | e4 c9 10 00 b3 00 00 00 bc ca 10 00 66 00 00 00 70 cb 10 00 37 00 00 00 d7 cb 10 00 6a 00 00 00 | ............f...p...7.......j... |
11b00 | 0f cc 10 00 42 00 00 00 7a cc 10 00 3d 00 00 00 bd cc 10 00 38 00 00 00 fb cc 10 00 3d 00 00 00 | ....B...z...=.......8.......=... |
11b20 | 34 cd 10 00 40 00 00 00 72 cd 10 00 4a 01 00 00 b3 cd 10 00 52 00 00 00 fe ce 10 00 51 00 00 00 | 4...@...r...J.......R.......Q... |
11b40 | 51 cf 10 00 d9 00 00 00 a3 cf 10 00 c9 00 00 00 7d d0 10 00 4f 00 00 00 47 d1 10 00 67 00 00 00 | Q...............}...O...G...g... |
11b60 | 97 d1 10 00 8d 00 00 00 ff d1 10 00 49 00 00 00 8d d2 10 00 a0 01 00 00 d7 d2 10 00 87 00 00 00 | ............I................... |
11b80 | 78 d4 10 00 5f 00 00 00 00 d5 10 00 fa 00 00 00 60 d5 10 00 54 00 00 00 5b d6 10 00 25 00 00 00 | x..._...........`...T...[...%... |
11ba0 | b0 d6 10 00 49 00 00 00 d6 d6 10 00 92 00 00 00 20 d7 10 00 54 00 00 00 b3 d7 10 00 96 00 00 00 | ....I...............T........... |
11bc0 | 08 d8 10 00 2a 00 00 00 9f d8 10 00 1c 00 00 00 ca d8 10 00 1f 00 00 00 e7 d8 10 00 32 00 00 00 | ....*.......................2... |
11be0 | 07 d9 10 00 12 01 00 00 3a d9 10 00 71 00 00 00 4d da 10 00 5f 00 00 00 bf da 10 00 69 00 00 00 | ........:...q...M..._.......i... |
11c00 | 1f db 10 00 a5 00 00 00 89 db 10 00 45 00 00 00 2f dc 10 00 09 00 00 00 75 dc 10 00 2c 00 00 00 | ............E.../.......u...,... |
11c20 | 7f dc 10 00 0e 00 00 00 ac dc 10 00 05 00 00 00 bb dc 10 00 83 00 00 00 c1 dc 10 00 44 02 00 00 | ............................D... |
11c40 | 45 dd 10 00 dc 00 00 00 8a df 10 00 8a 01 00 00 67 e0 10 00 0f 00 00 00 f2 e1 10 00 93 00 00 00 | E...............g............... |
11c60 | 02 e2 10 00 0e 00 00 00 96 e2 10 00 5e 00 00 00 a5 e2 10 00 a6 00 00 00 04 e3 10 00 9e 00 00 00 | ............^................... |
11c80 | ab e3 10 00 97 00 00 00 4a e4 10 00 19 00 00 00 e2 e4 10 00 b8 00 00 00 fc e4 10 00 12 00 00 00 | ........J....................... |
11ca0 | b5 e5 10 00 60 01 00 00 c8 e5 10 00 11 00 00 00 29 e7 10 00 0f 00 00 00 3b e7 10 00 0f 00 00 00 | ....`...........).......;....... |
11cc0 | 4b e7 10 00 06 00 00 00 5b e7 10 00 0b 00 00 00 62 e7 10 00 35 00 00 00 6e e7 10 00 28 00 00 00 | K.......[.......b...5...n...(... |
11ce0 | a4 e7 10 00 44 00 00 00 cd e7 10 00 60 00 00 00 12 e8 10 00 3f 00 00 00 73 e8 10 00 5f 00 00 00 | ....D.......`.......?...s..._... |
11d00 | b3 e8 10 00 7c 00 00 00 13 e9 10 00 13 00 00 00 90 e9 10 00 1f 00 00 00 a4 e9 10 00 17 00 00 00 | ....|........................... |
11d20 | c4 e9 10 00 15 00 00 00 dc e9 10 00 12 00 00 00 f2 e9 10 00 29 00 00 00 05 ea 10 00 0d 00 00 00 | ....................)........... |
11d40 | 2f ea 10 00 38 00 00 00 3d ea 10 00 af 00 00 00 76 ea 10 00 0e 00 00 00 26 eb 10 00 07 00 00 00 | /...8...=.......v.......&....... |
11d60 | 35 eb 10 00 0c 00 00 00 3d eb 10 00 0d 00 00 00 4a eb 10 00 1b 00 00 00 58 eb 10 00 05 00 00 00 | 5.......=.......J.......X....... |
11d80 | 74 eb 10 00 46 01 00 00 7a eb 10 00 9b 01 00 00 c1 ec 10 00 06 00 00 00 5d ee 10 00 16 00 00 00 | t...F...z...............]....... |
11da0 | 64 ee 10 00 15 00 00 00 7b ee 10 00 07 00 00 00 91 ee 10 00 9c 00 00 00 99 ee 10 00 2e 00 00 00 | d.......{....................... |
11dc0 | 36 ef 10 00 49 00 00 00 65 ef 10 00 e2 00 00 00 af ef 10 00 58 00 00 00 92 f0 10 00 14 00 00 00 | 6...I...e...........X........... |
11de0 | eb f0 10 00 66 00 00 00 00 f1 10 00 25 00 00 00 67 f1 10 00 26 00 00 00 8d f1 10 00 20 00 00 00 | ....f.......%...g...&........... |
11e00 | b4 f1 10 00 13 00 00 00 d5 f1 10 00 39 00 00 00 e9 f1 10 00 59 00 00 00 23 f2 10 00 3e 00 00 00 | ............9.......Y...#...>... |
11e20 | 7d f2 10 00 00 01 00 00 bc f2 10 00 55 00 00 00 bd f3 10 00 54 00 00 00 13 f4 10 00 51 00 00 00 | }...........U.......T.......Q... |
11e40 | 68 f4 10 00 55 00 00 00 ba f4 10 00 52 00 00 00 10 f5 10 00 44 00 00 00 63 f5 10 00 36 00 00 00 | h...U.......R.......D...c...6... |
11e60 | a8 f5 10 00 46 00 00 00 df f5 10 00 2c 00 00 00 26 f6 10 00 22 00 00 00 53 f6 10 00 88 00 00 00 | ....F.......,...&..."...S....... |
11e80 | 76 f6 10 00 30 00 00 00 ff f6 10 00 43 00 00 00 30 f7 10 00 18 00 00 00 74 f7 10 00 28 00 00 00 | v...0.......C...0.......t...(... |
11ea0 | 8d f7 10 00 2f 00 00 00 b6 f7 10 00 68 00 00 00 e6 f7 10 00 8c 00 00 00 4f f8 10 00 9a 00 00 00 | ..../.......h...........O....... |
11ec0 | dc f8 10 00 8a 00 00 00 77 f9 10 00 78 00 00 00 02 fa 10 00 59 00 00 00 7b fa 10 00 19 01 00 00 | ........w...x.......Y...{....... |
11ee0 | d5 fa 10 00 24 01 00 00 ef fb 10 00 22 01 00 00 14 fd 10 00 08 01 00 00 37 fe 10 00 f8 00 00 00 | ....$......."...........7....... |
11f00 | 40 ff 10 00 f7 00 00 00 39 00 11 00 f9 00 00 00 31 01 11 00 f7 00 00 00 2b 02 11 00 f7 00 00 00 | @.......9.......1.......+....... |
11f20 | 23 03 11 00 f7 00 00 00 1b 04 11 00 c4 00 00 00 13 05 11 00 a1 00 00 00 d8 05 11 00 73 00 00 00 | #...........................s... |
11f40 | 7a 06 11 00 f8 00 00 00 ee 06 11 00 4e 00 00 00 e7 07 11 00 99 00 00 00 36 08 11 00 4b 00 00 00 | z...........N...........6...K... |
11f60 | d0 08 11 00 5b 00 00 00 1c 09 11 00 4a 00 00 00 78 09 11 00 4a 00 00 00 c3 09 11 00 50 00 00 00 | ....[.......J...x...J.......P... |
11f80 | 0e 0a 11 00 47 00 00 00 5f 0a 11 00 44 01 00 00 a7 0a 11 00 45 01 00 00 ec 0b 11 00 44 01 00 00 | ....G..._...D.......E.......D... |
11fa0 | 32 0d 11 00 44 01 00 00 77 0e 11 00 44 01 00 00 bc 0f 11 00 3c 01 00 00 01 11 11 00 a0 00 00 00 | 2...D...w...D.......<........... |
11fc0 | 3e 12 11 00 30 01 00 00 df 12 11 00 50 01 00 00 10 14 11 00 d1 00 00 00 61 15 11 00 23 01 00 00 | >...0.......P...........a...#... |
11fe0 | 33 16 11 00 08 01 00 00 57 17 11 00 29 01 00 00 60 18 11 00 2f 01 00 00 8a 19 11 00 da 00 00 00 | 3.......W...)...`.../........... |
12000 | ba 1a 11 00 34 01 00 00 95 1b 11 00 89 00 00 00 ca 1c 11 00 66 00 00 00 54 1d 11 00 88 00 00 00 | ....4...............f...T....... |
12020 | bb 1d 11 00 a5 00 00 00 44 1e 11 00 70 00 00 00 ea 1e 11 00 6f 00 00 00 5b 1f 11 00 8e 00 00 00 | ........D...p.......o...[....... |
12040 | cb 1f 11 00 b0 00 00 00 5a 20 11 00 0f 01 00 00 0b 21 11 00 c3 00 00 00 1b 22 11 00 84 00 00 00 | ........Z........!......."...... |
12060 | df 22 11 00 be 00 00 00 64 23 11 00 db 00 00 00 23 24 11 00 85 00 00 00 ff 24 11 00 7d 00 00 00 | ."......d#......#$.......$..}... |
12080 | 85 25 11 00 9a 00 00 00 03 26 11 00 92 00 00 00 9e 26 11 00 91 00 00 00 31 27 11 00 d5 00 00 00 | .%.......&.......&......1'...... |
120a0 | c3 27 11 00 93 00 00 00 99 28 11 00 8e 00 00 00 2d 29 11 00 fa 00 00 00 bc 29 11 00 bd 00 00 00 | .'.......(......-).......)...... |
120c0 | b7 2a 11 00 f5 00 00 00 75 2b 11 00 a6 00 00 00 6b 2c 11 00 a1 00 00 00 12 2d 11 00 7b 00 00 00 | .*......u+......k,.......-..{... |
120e0 | b4 2d 11 00 fc 00 00 00 30 2e 11 00 fd 00 00 00 2d 2f 11 00 19 01 00 00 2b 30 11 00 9d 00 00 00 | .-......0.......-/......+0...... |
12100 | 45 31 11 00 be 01 00 00 e3 31 11 00 b1 00 00 00 a2 33 11 00 5b 00 00 00 54 34 11 00 63 00 00 00 | E1.......1.......3..[...T4..c... |
12120 | b0 34 11 00 33 01 00 00 14 35 11 00 3b 00 00 00 48 36 11 00 98 00 00 00 84 36 11 00 54 00 00 00 | .4..3....5..;...H6.......6..T... |
12140 | 1d 37 11 00 59 00 00 00 72 37 11 00 de 00 00 00 cc 37 11 00 9a 00 00 00 ab 38 11 00 2b 00 00 00 | .7..Y...r7.......7.......8..+... |
12160 | 46 39 11 00 c0 00 00 00 72 39 11 00 c5 00 00 00 33 3a 11 00 3a 00 00 00 f9 3a 11 00 35 00 00 00 | F9......r9......3:..:....:..5... |
12180 | 34 3b 11 00 87 00 00 00 6a 3b 11 00 5c 00 00 00 f2 3b 11 00 74 00 00 00 4f 3c 11 00 da 00 00 00 | 4;......j;..\....;..t...O<...... |
121a0 | c4 3c 11 00 f0 00 00 00 9f 3d 11 00 84 00 00 00 90 3e 11 00 f0 00 00 00 15 3f 11 00 f0 00 00 00 | .<.......=.......>.......?...... |
121c0 | 06 40 11 00 f0 00 00 00 f7 40 11 00 f1 00 00 00 e8 41 11 00 5f 00 00 00 da 42 11 00 83 00 00 00 | .@.......@.......A.._....B...... |
121e0 | 3a 43 11 00 bd 00 00 00 be 43 11 00 79 00 00 00 7c 44 11 00 7e 00 00 00 f6 44 11 00 36 00 00 00 | :C.......C..y...|D..~....D..6... |
12200 | 75 45 11 00 78 00 00 00 ac 45 11 00 85 00 00 00 25 46 11 00 51 00 00 00 ab 46 11 00 3e 00 00 00 | uE..x....E......%F..Q....F..>... |
12220 | fd 46 11 00 3e 00 00 00 3c 47 11 00 75 00 00 00 7b 47 11 00 53 00 00 00 f1 47 11 00 df 00 00 00 | .F..>...<G..u...{G..S....G...... |
12240 | 45 48 11 00 a1 00 00 00 25 49 11 00 ac 00 00 00 c7 49 11 00 3b 00 00 00 74 4a 11 00 47 00 00 00 | EH......%I.......I..;...tJ..G... |
12260 | b0 4a 11 00 67 00 00 00 f8 4a 11 00 d8 00 00 00 60 4b 11 00 5a 00 00 00 39 4c 11 00 38 00 00 00 | .J..g....J......`K..Z...9L..8... |
12280 | 94 4c 11 00 88 01 00 00 cd 4c 11 00 c5 00 00 00 56 4e 11 00 a1 00 00 00 1c 4f 11 00 6d 00 00 00 | .L.......L......VN.......O..m... |
122a0 | be 4f 11 00 4e 00 00 00 2c 50 11 00 54 00 00 00 7b 50 11 00 3d 00 00 00 d0 50 11 00 8a 00 00 00 | .O..N...,P..T...{P..=....P...... |
122c0 | 0e 51 11 00 6f 00 00 00 99 51 11 00 2e 00 00 00 09 52 11 00 31 00 00 00 38 52 11 00 3c 00 00 00 | .Q..o....Q.......R..1...8R..<... |
122e0 | 6a 52 11 00 17 01 00 00 a7 52 11 00 db 00 00 00 bf 53 11 00 49 00 00 00 9b 54 11 00 4a 00 00 00 | jR.......R.......S..I....T..J... |
12300 | e5 54 11 00 49 00 00 00 30 55 11 00 49 00 00 00 7a 55 11 00 0b 01 00 00 c4 55 11 00 51 00 00 00 | .T..I...0U..I...zU.......U..Q... |
12320 | d0 56 11 00 96 00 00 00 22 57 11 00 5d 00 00 00 b9 57 11 00 49 00 00 00 17 58 11 00 46 00 00 00 | .V......"W..]....W..I....X..F... |
12340 | 61 58 11 00 37 00 00 00 a8 58 11 00 38 01 00 00 e0 58 11 00 31 00 00 00 19 5a 11 00 30 00 00 00 | aX..7....X..8....X..1....Z..0... |
12360 | 4b 5a 11 00 39 00 00 00 7c 5a 11 00 33 00 00 00 b6 5a 11 00 33 00 00 00 ea 5a 11 00 49 00 00 00 | KZ..9...|Z..3....Z..3....Z..I... |
12380 | 1e 5b 11 00 d9 00 00 00 68 5b 11 00 78 00 00 00 42 5c 11 00 79 00 00 00 bb 5c 11 00 8c 00 00 00 | .[......h[..x...B\..y....\...... |
123a0 | 35 5d 11 00 47 00 00 00 c2 5d 11 00 fb 00 00 00 0a 5e 11 00 b7 00 00 00 06 5f 11 00 5b 00 00 00 | 5]..G....].......^......._..[... |
123c0 | be 5f 11 00 b7 00 00 00 1a 60 11 00 42 00 00 00 d2 60 11 00 46 00 00 00 15 61 11 00 30 00 00 00 | ._.......`..B....`..F....a..0... |
123e0 | 5c 61 11 00 39 00 00 00 8d 61 11 00 25 00 00 00 c7 61 11 00 2e 00 00 00 ed 61 11 00 2e 00 00 00 | \a..9....a..%....a.......a...... |
12400 | 1c 62 11 00 39 00 00 00 4b 62 11 00 c1 00 00 00 85 62 11 00 8c 00 00 00 47 63 11 00 b5 00 00 00 | .b..9...Kb.......b......Gc...... |
12420 | d4 63 11 00 42 00 00 00 8a 64 11 00 a5 00 00 00 cd 64 11 00 b9 00 00 00 73 65 11 00 3e 00 00 00 | .c..B....d.......d......se..>... |
12440 | 2d 66 11 00 74 00 00 00 6c 66 11 00 6c 00 00 00 e1 66 11 00 81 00 00 00 4e 67 11 00 19 00 00 00 | -f..t...lf..l....f......Ng...... |
12460 | d0 67 11 00 23 00 00 00 ea 67 11 00 b7 00 00 00 0e 68 11 00 dc 00 00 00 c6 68 11 00 13 00 00 00 | .g..#....g.......h.......h...... |
12480 | a3 69 11 00 54 00 00 00 b7 69 11 00 5f 01 00 00 0c 6a 11 00 17 00 00 00 6c 6b 11 00 1a 00 00 00 | .i..T....i.._....j......lk...... |
124a0 | 84 6b 11 00 17 00 00 00 9f 6b 11 00 5b 00 00 00 b7 6b 11 00 3b 00 00 00 13 6c 11 00 dd 00 00 00 | .k.......k..[....k..;....l...... |
124c0 | 4f 6c 11 00 1d 01 00 00 2d 6d 11 00 32 00 00 00 4b 6e 11 00 20 00 00 00 7e 6e 11 00 5d 00 00 00 | Ol......-m..2...Kn......~n..]... |
124e0 | 9f 6e 11 00 54 00 00 00 fd 6e 11 00 04 00 00 00 52 6f 11 00 30 00 00 00 57 6f 11 00 0c 00 00 00 | .n..T....n......Ro..0...Wo...... |
12500 | 88 6f 11 00 0c 00 00 00 95 6f 11 00 60 00 00 00 a2 6f 11 00 09 00 00 00 03 70 11 00 35 01 00 00 | .o.......o..`....o.......p..5... |
12520 | 0d 70 11 00 33 01 00 00 43 71 11 00 70 00 00 00 77 72 11 00 03 00 00 00 e8 72 11 00 62 00 00 00 | .p..3...Cq..p...wr.......r..b... |
12540 | ec 72 11 00 03 00 00 00 4f 73 11 00 11 00 00 00 53 73 11 00 0b 00 00 00 65 73 11 00 16 00 00 00 | .r......Os......Ss......es...... |
12560 | 71 73 11 00 19 00 00 00 88 73 11 00 15 00 00 00 a2 73 11 00 11 00 00 00 b8 73 11 00 14 00 00 00 | qs.......s.......s.......s...... |
12580 | ca 73 11 00 6a 02 00 00 df 73 11 00 3d 01 00 00 4a 76 11 00 85 01 00 00 88 77 11 00 95 00 00 00 | .s..j....s..=...Jv.......w...... |
125a0 | 0e 79 11 00 d5 01 00 00 a4 79 11 00 32 00 00 00 7a 7b 11 00 1e 00 00 00 ad 7b 11 00 05 00 00 00 | .y.......y..2...z{.......{...... |
125c0 | cc 7b 11 00 45 01 00 00 d2 7b 11 00 16 00 00 00 18 7d 11 00 3b 00 00 00 2f 7d 11 00 18 00 00 00 | .{..E....{.......}..;.../}...... |
125e0 | 6b 7d 11 00 05 00 00 00 84 7d 11 00 8e 00 00 00 8a 7d 11 00 60 00 00 00 19 7e 11 00 0c 00 00 00 | k}.......}.......}..`....~...... |
12600 | 7a 7e 11 00 0d 00 00 00 87 7e 11 00 3b 00 00 00 95 7e 11 00 07 00 00 00 d1 7e 11 00 10 00 00 00 | z~.......~..;....~.......~...... |
12620 | d9 7e 11 00 6c 00 00 00 ea 7e 11 00 0e 00 00 00 57 7f 11 00 4b 00 00 00 66 7f 11 00 47 00 00 00 | .~..l....~......W...K...f...G... |
12640 | b2 7f 11 00 65 00 00 00 fa 7f 11 00 a1 00 00 00 60 80 11 00 3f 00 00 00 02 81 11 00 4a 01 00 00 | ....e...........`...?.......J... |
12660 | 42 81 11 00 44 01 00 00 8d 82 11 00 15 00 00 00 d2 83 11 00 24 00 00 00 e8 83 11 00 0a 00 00 00 | B...D...............$........... |
12680 | 0d 84 11 00 24 00 00 00 18 84 11 00 09 00 00 00 3d 84 11 00 29 00 00 00 47 84 11 00 1b 00 00 00 | ....$...........=...)...G....... |
126a0 | 71 84 11 00 c9 00 00 00 8d 84 11 00 0b 00 00 00 57 85 11 00 85 00 00 00 63 85 11 00 26 00 00 00 | q...............W.......c...&... |
126c0 | e9 85 11 00 3d 00 00 00 10 86 11 00 52 00 00 00 4e 86 11 00 b4 00 00 00 a1 86 11 00 a9 00 00 00 | ....=.......R...N............... |
126e0 | 56 87 11 00 26 00 00 00 00 88 11 00 b0 00 00 00 27 88 11 00 df 00 00 00 d8 88 11 00 1c 00 00 00 | V...&...........'............... |
12700 | b8 89 11 00 8f 00 00 00 d5 89 11 00 8c 00 00 00 65 8a 11 00 90 00 00 00 f2 8a 11 00 5d 00 00 00 | ................e...........]... |
12720 | 83 8b 11 00 44 00 00 00 e1 8b 11 00 2f 00 00 00 26 8c 11 00 b0 00 00 00 56 8c 11 00 50 00 00 00 | ....D......./...&.......V...P... |
12740 | 07 8d 11 00 a6 00 00 00 58 8d 11 00 ec 00 00 00 ff 8d 11 00 64 00 00 00 ec 8e 11 00 53 00 00 00 | ........X...........d.......S... |
12760 | 51 8f 11 00 df 00 00 00 a5 8f 11 00 86 00 00 00 85 90 11 00 63 00 00 00 0c 91 11 00 68 00 00 00 | Q...................c.......h... |
12780 | 70 91 11 00 d1 00 00 00 d9 91 11 00 8d 00 00 00 ab 92 11 00 78 00 00 00 39 93 11 00 7a 00 00 00 | p...................x...9...z... |
127a0 | b2 93 11 00 7d 00 00 00 2d 94 11 00 80 00 00 00 ab 94 11 00 33 00 00 00 2c 95 11 00 71 00 00 00 | ....}...-...........3...,...q... |
127c0 | 60 95 11 00 db 00 00 00 d2 95 11 00 a5 00 00 00 ae 96 11 00 75 00 00 00 54 97 11 00 59 00 00 00 | `...................u...T...Y... |
127e0 | ca 97 11 00 58 00 00 00 24 98 11 00 9b 00 00 00 7d 98 11 00 b6 00 00 00 19 99 11 00 29 00 00 00 | ....X...$.......}...........)... |
12800 | d0 99 11 00 9c 00 00 00 fa 99 11 00 e3 00 00 00 97 9a 11 00 9e 00 00 00 7b 9b 11 00 44 00 00 00 | ........................{...D... |
12820 | 1a 9c 11 00 44 00 00 00 5f 9c 11 00 ed 00 00 00 a4 9c 11 00 3c 00 00 00 92 9d 11 00 bd 00 00 00 | ....D..._...........<........... |
12840 | cf 9d 11 00 bf 00 00 00 8d 9e 11 00 88 00 00 00 4d 9f 11 00 85 00 00 00 d6 9f 11 00 6f 00 00 00 | ................M...........o... |
12860 | 5c a0 11 00 cf 00 00 00 cc a0 11 00 17 00 00 00 9c a1 11 00 12 00 00 00 b4 a1 11 00 18 00 00 00 | \............................... |
12880 | c7 a1 11 00 39 00 00 00 e0 a1 11 00 1b 00 00 00 1a a2 11 00 21 00 00 00 36 a2 11 00 07 00 00 00 | ....9...............!...6....... |
128a0 | 58 a2 11 00 12 00 00 00 60 a2 11 00 79 00 00 00 73 a2 11 00 e5 00 00 00 ed a2 11 00 ac 00 00 00 | X.......`...y...s............... |
128c0 | d3 a3 11 00 84 00 00 00 80 a4 11 00 36 01 00 00 05 a5 11 00 5a 00 00 00 3c a6 11 00 c4 00 00 00 | ............6.......Z...<....... |
128e0 | 97 a6 11 00 4b 00 00 00 5c a7 11 00 a7 00 00 00 a8 a7 11 00 17 00 00 00 50 a8 11 00 e8 00 00 00 | ....K...\...............P....... |
12900 | 68 a8 11 00 48 00 00 00 51 a9 11 00 41 00 00 00 9a a9 11 00 2e 00 00 00 dc a9 11 00 47 00 00 00 | h...H...Q...A...............G... |
12920 | 0b aa 11 00 3f 00 00 00 53 aa 11 00 9c 00 00 00 93 aa 11 00 68 00 00 00 30 ab 11 00 1b 01 00 00 | ....?...S...........h...0....... |
12940 | 99 ab 11 00 22 00 00 00 b5 ac 11 00 08 00 00 00 d8 ac 11 00 2a 00 00 00 e1 ac 11 00 34 00 00 00 | ...."...............*.......4... |
12960 | 0c ad 11 00 ae 00 00 00 41 ad 11 00 17 01 00 00 f0 ad 11 00 79 00 00 00 08 af 11 00 73 00 00 00 | ........A...........y.......s... |
12980 | 82 af 11 00 bf 00 00 00 f6 af 11 00 dc 00 00 00 b6 b0 11 00 7b 01 00 00 93 b1 11 00 90 01 00 00 | ....................{........... |
129a0 | 0f b3 11 00 13 01 00 00 a0 b4 11 00 a0 00 00 00 b4 b5 11 00 36 01 00 00 55 b6 11 00 04 02 00 00 | ....................6...U....... |
129c0 | 8c b7 11 00 b6 00 00 00 91 b9 11 00 ad 00 00 00 48 ba 11 00 67 00 00 00 f6 ba 11 00 71 00 00 00 | ................H...g.......q... |
129e0 | 5e bb 11 00 fe 00 00 00 d0 bb 11 00 7d 00 00 00 cf bc 11 00 6d 01 00 00 4d bd 11 00 7a 00 00 00 | ^...........}.......m...M...z... |
12a00 | bb be 11 00 e2 00 00 00 36 bf 11 00 1e 01 00 00 19 c0 11 00 56 00 00 00 38 c1 11 00 16 01 00 00 | ........6...........V...8....... |
12a20 | 8f c1 11 00 06 01 00 00 a6 c2 11 00 b1 00 00 00 ad c3 11 00 58 00 00 00 5f c4 11 00 80 00 00 00 | ....................X..._....... |
12a40 | b8 c4 11 00 7d 00 00 00 39 c5 11 00 98 00 00 00 b7 c5 11 00 b5 00 00 00 50 c6 11 00 a2 00 00 00 | ....}...9...............P....... |
12a60 | 06 c7 11 00 00 01 00 00 a9 c7 11 00 37 00 00 00 aa c8 11 00 42 00 00 00 e2 c8 11 00 cf 00 00 00 | ............7.......B........... |
12a80 | 25 c9 11 00 fd 00 00 00 f5 c9 11 00 3c 01 00 00 f3 ca 11 00 fb 00 00 00 30 cc 11 00 bf 00 00 00 | %...........<...........0....... |
12aa0 | 2c cd 11 00 9e 00 00 00 ec cd 11 00 a4 00 00 00 8b ce 11 00 fb 00 00 00 30 cf 11 00 18 01 00 00 | ,.......................0....... |
12ac0 | 2c d0 11 00 20 01 00 00 45 d1 11 00 5d 00 00 00 66 d2 11 00 4b 00 00 00 c4 d2 11 00 97 00 00 00 | ,.......E...]...f...K........... |
12ae0 | 10 d3 11 00 57 00 00 00 a8 d3 11 00 3e 00 00 00 00 d4 11 00 b0 00 00 00 3f d4 11 00 f1 00 00 00 | ....W.......>...........?....... |
12b00 | f0 d4 11 00 b8 00 00 00 e2 d5 11 00 b8 00 00 00 9b d6 11 00 5d 00 00 00 54 d7 11 00 4a 00 00 00 | ....................]...T...J... |
12b20 | b2 d7 11 00 34 00 00 00 fd d7 11 00 2c 00 00 00 32 d8 11 00 24 00 00 00 5f d8 11 00 41 00 00 00 | ....4.......,...2...$..._...A... |
12b40 | 84 d8 11 00 d6 00 00 00 c6 d8 11 00 ae 00 00 00 9d d9 11 00 cf 00 00 00 4c da 11 00 59 00 00 00 | ........................L...Y... |
12b60 | 1c db 11 00 c3 00 00 00 76 db 11 00 48 00 00 00 3a dc 11 00 62 00 00 00 83 dc 11 00 86 00 00 00 | ........v...H...:...b........... |
12b80 | e6 dc 11 00 fe 00 00 00 6d dd 11 00 41 00 00 00 6c de 11 00 93 00 00 00 ae de 11 00 09 00 00 00 | ........m...A...l............... |
12ba0 | 42 df 11 00 18 00 00 00 4c df 11 00 33 00 00 00 65 df 11 00 99 00 00 00 99 df 11 00 9a 00 00 00 | B.......L...3...e............... |
12bc0 | 33 e0 11 00 16 00 00 00 ce e0 11 00 27 00 00 00 e5 e0 11 00 30 00 00 00 0d e1 11 00 10 00 00 00 | 3...........'.......0........... |
12be0 | 3e e1 11 00 21 00 00 00 4f e1 11 00 1c 00 00 00 71 e1 11 00 aa 01 00 00 8e e1 11 00 82 00 00 00 | >...!...O.......q............... |
12c00 | 39 e3 11 00 ac 00 00 00 bc e3 11 00 fe 00 00 00 69 e4 11 00 60 00 00 00 68 e5 11 00 85 01 00 00 | 9...............i...`...h....... |
12c20 | c9 e5 11 00 01 00 00 00 4f e7 11 00 76 00 00 00 51 e7 11 00 6b 00 00 00 c8 e7 11 00 60 00 00 00 | ........O...v...Q...k.......`... |
12c40 | 34 e8 11 00 a9 00 00 00 95 e8 11 00 c9 00 00 00 3f e9 11 00 9b 00 00 00 09 ea 11 00 c3 00 00 00 | 4...............?............... |
12c60 | a5 ea 11 00 3c 00 00 00 69 eb 11 00 38 00 00 00 a6 eb 11 00 95 00 00 00 df eb 11 00 2e 00 00 00 | ....<...i...8................... |
12c80 | 75 ec 11 00 57 00 00 00 a4 ec 11 00 61 00 00 00 fc ec 11 00 69 00 00 00 5e ed 11 00 4b 00 00 00 | u...W.......a.......i...^...K... |
12ca0 | c8 ed 11 00 a4 00 00 00 14 ee 11 00 52 00 00 00 b9 ee 11 00 53 00 00 00 0c ef 11 00 65 00 00 00 | ............R.......S.......e... |
12cc0 | 60 ef 11 00 35 00 00 00 c6 ef 11 00 51 00 00 00 fc ef 11 00 a7 00 00 00 4e f0 11 00 8a 00 00 00 | `...5.......Q...........N....... |
12ce0 | f6 f0 11 00 96 00 00 00 81 f1 11 00 81 00 00 00 18 f2 11 00 7f 00 00 00 9a f2 11 00 88 00 00 00 | ................................ |
12d00 | 1a f3 11 00 e3 00 00 00 a3 f3 11 00 c3 00 00 00 87 f4 11 00 3a 00 00 00 4b f5 11 00 5a 00 00 00 | ....................:...K...Z... |
12d20 | 86 f5 11 00 65 00 00 00 e1 f5 11 00 c3 00 00 00 47 f6 11 00 db 00 00 00 0b f7 11 00 50 00 00 00 | ....e...........G...........P... |
12d40 | e7 f7 11 00 1d 01 00 00 38 f8 11 00 f2 00 00 00 56 f9 11 00 48 00 00 00 49 fa 11 00 b0 00 00 00 | ........8.......V...H...I....... |
12d60 | 92 fa 11 00 9f 00 00 00 43 fb 11 00 1f 00 00 00 e3 fb 11 00 71 00 00 00 03 fc 11 00 75 00 00 00 | ........C...........q.......u... |
12d80 | 75 fc 11 00 75 00 00 00 eb fc 11 00 dc 00 00 00 61 fd 11 00 3f 00 00 00 3e fe 11 00 6d 00 00 00 | u...u...........a...?...>...m... |
12da0 | 7e fe 11 00 da 00 00 00 ec fe 11 00 1c 00 00 00 c7 ff 11 00 13 00 00 00 e4 ff 11 00 20 00 00 00 | ~............................... |
12dc0 | f8 ff 11 00 14 00 00 00 19 00 12 00 13 00 00 00 2e 00 12 00 03 01 00 00 42 00 12 00 1d 00 00 00 | ........................B....... |
12de0 | 46 01 12 00 1d 00 00 00 64 01 12 00 23 00 00 00 82 01 12 00 1d 00 00 00 a6 01 12 00 29 00 00 00 | F.......d...#...............)... |
12e00 | c4 01 12 00 31 00 00 00 ee 01 12 00 31 00 00 00 20 02 12 00 33 00 00 00 52 02 12 00 33 00 00 00 | ....1.......1.......3...R...3... |
12e20 | 86 02 12 00 10 00 00 00 ba 02 12 00 0c 00 00 00 cb 02 12 00 2d 00 00 00 d8 02 12 00 2c 00 00 00 | ....................-.......,... |
12e40 | 06 03 12 00 12 00 00 00 33 03 12 00 2c 00 00 00 46 03 12 00 25 00 00 00 73 03 12 00 3c 00 00 00 | ........3...,...F...%...s...<... |
12e60 | 99 03 12 00 12 00 00 00 d6 03 12 00 35 00 00 00 e9 03 12 00 13 00 00 00 1f 04 12 00 34 00 00 00 | ............5...............4... |
12e80 | 33 04 12 00 16 00 00 00 68 04 12 00 1c 00 00 00 7f 04 12 00 12 00 00 00 9c 04 12 00 34 00 00 00 | 3.......h...................4... |
12ea0 | af 04 12 00 13 00 00 00 e4 04 12 00 1d 00 00 00 f8 04 12 00 30 00 00 00 16 05 12 00 1f 00 00 00 | ....................0........... |
12ec0 | 47 05 12 00 13 00 00 00 67 05 12 00 16 00 00 00 7b 05 12 00 25 01 00 00 92 05 12 00 d3 00 00 00 | G.......g.......{...%........... |
12ee0 | b8 06 12 00 13 00 00 00 8c 07 12 00 38 00 00 00 a0 07 12 00 16 00 00 00 d9 07 12 00 9d 00 00 00 | ............8................... |
12f00 | f0 07 12 00 41 00 00 00 8e 08 12 00 38 00 00 00 d0 08 12 00 1e 00 00 00 09 09 12 00 22 00 00 00 | ....A.......8..............."... |
12f20 | 28 09 12 00 5d 00 00 00 4b 09 12 00 55 00 00 00 a9 09 12 00 1e 00 00 00 ff 09 12 00 44 00 00 00 | (...]...K...U...............D... |
12f40 | 1e 0a 12 00 25 00 00 00 63 0a 12 00 08 01 00 00 89 0a 12 00 fd 01 00 00 92 0b 12 00 87 00 00 00 | ....%...c....................... |
12f60 | 90 0d 12 00 54 00 00 00 18 0e 12 00 5b 00 00 00 6d 0e 12 00 87 02 00 00 c9 0e 12 00 c3 00 00 00 | ....T.......[...m............... |
12f80 | 51 11 12 00 59 00 00 00 15 12 12 00 1e 00 00 00 6f 12 12 00 2a 00 00 00 8e 12 12 00 2f 00 00 00 | Q...Y...........o...*......./... |
12fa0 | b9 12 12 00 27 00 00 00 e9 12 12 00 37 00 00 00 11 13 12 00 54 00 00 00 49 13 12 00 4f 00 00 00 | ....'.......7.......T...I...O... |
12fc0 | 9e 13 12 00 59 00 00 00 ee 13 12 00 4d 00 00 00 48 14 12 00 5f 00 00 00 96 14 12 00 33 00 00 00 | ....Y.......M...H..._.......3... |
12fe0 | f6 14 12 00 64 00 00 00 2a 15 12 00 7b 00 00 00 8f 15 12 00 49 00 00 00 0b 16 12 00 1e 00 00 00 | ....d...*...{.......I........... |
13000 | 55 16 12 00 f3 00 00 00 74 16 12 00 f1 00 00 00 68 17 12 00 5e 00 00 00 5a 18 12 00 79 00 00 00 | U.......t.......h...^...Z...y... |
13020 | b9 18 12 00 54 00 00 00 33 19 12 00 43 00 00 00 88 19 12 00 4f 00 00 00 cc 19 12 00 29 00 00 00 | ....T...3...C.......O.......)... |
13040 | 1c 1a 12 00 82 00 00 00 46 1a 12 00 22 00 00 00 c9 1a 12 00 47 02 00 00 ec 1a 12 00 47 02 00 00 | ........F...".......G.......G... |
13060 | 34 1d 12 00 fc 00 00 00 7c 1f 12 00 9c 00 00 00 79 20 12 00 2c 00 00 00 16 21 12 00 16 00 00 00 | 4.......|.......y...,....!...... |
13080 | 43 21 12 00 53 00 00 00 5a 21 12 00 7d 00 00 00 ae 21 12 00 66 00 00 00 2c 22 12 00 b4 00 00 00 | C!..S...Z!..}....!..f...,"...... |
130a0 | 93 22 12 00 55 00 00 00 48 23 12 00 22 00 00 00 9e 23 12 00 18 00 00 00 c1 23 12 00 31 00 00 00 | ."..U...H#.."....#.......#..1... |
130c0 | da 23 12 00 1b 00 00 00 0c 24 12 00 1a 00 00 00 28 24 12 00 17 00 00 00 43 24 12 00 17 00 00 00 | .#.......$......($......C$...... |
130e0 | 5b 24 12 00 17 00 00 00 73 24 12 00 35 00 00 00 8b 24 12 00 41 00 00 00 c1 24 12 00 25 00 00 00 | [$......s$..5....$..A....$..%... |
13100 | 03 25 12 00 2d 00 00 00 29 25 12 00 3e 00 00 00 57 25 12 00 24 00 00 00 96 25 12 00 28 00 00 00 | .%..-...)%..>...W%..$....%..(... |
13120 | bb 25 12 00 4d 00 00 00 e4 25 12 00 50 00 00 00 32 26 12 00 33 00 00 00 83 26 12 00 35 00 00 00 | .%..M....%..P...2&..3....&..5... |
13140 | b7 26 12 00 20 00 00 00 ed 26 12 00 73 02 00 00 0e 27 12 00 74 02 00 00 82 29 12 00 c9 00 00 00 | .&.......&..s....'..t....)...... |
13160 | f7 2b 12 00 28 00 00 00 c1 2c 12 00 5c 00 00 00 ea 2c 12 00 23 00 00 00 47 2d 12 00 27 00 00 00 | .+..(....,..\....,..#...G-..'... |
13180 | 6b 2d 12 00 18 00 00 00 93 2d 12 00 25 00 00 00 ac 2d 12 00 1c 00 00 00 d2 2d 12 00 53 00 00 00 | k-.......-..%....-.......-..S... |
131a0 | ef 2d 12 00 53 00 00 00 43 2e 12 00 16 00 00 00 97 2e 12 00 7e 00 00 00 ae 2e 12 00 33 00 00 00 | .-..S...C...........~.......3... |
131c0 | 2d 2f 12 00 25 00 00 00 61 2f 12 00 af 00 00 00 87 2f 12 00 d0 00 00 00 37 30 12 00 7e 00 00 00 | -/..%...a/......./......70..~... |
131e0 | 08 31 12 00 25 00 00 00 87 31 12 00 3d 00 00 00 ad 31 12 00 04 01 00 00 eb 31 12 00 49 00 00 00 | .1..%....1..=....1.......1..I... |
13200 | f0 32 12 00 bd 00 00 00 3a 33 12 00 78 00 00 00 f8 33 12 00 41 00 00 00 71 34 12 00 43 00 00 00 | .2......:3..x....3..A...q4..C... |
13220 | b3 34 12 00 3d 00 00 00 f7 34 12 00 27 00 00 00 35 35 12 00 1a 00 00 00 5d 35 12 00 d2 00 00 00 | .4..=....4..'...55......]5...... |
13240 | 78 35 12 00 5b 00 00 00 4b 36 12 00 ab 00 00 00 a7 36 12 00 5a 00 00 00 53 37 12 00 5a 00 00 00 | x5..[...K6.......6..Z...S7..Z... |
13260 | ae 37 12 00 77 00 00 00 09 38 12 00 7d 00 00 00 81 38 12 00 dd 00 00 00 ff 38 12 00 3f 00 00 00 | .7..w....8..}....8.......8..?... |
13280 | dd 39 12 00 40 00 00 00 1d 3a 12 00 55 00 00 00 5e 3a 12 00 af 00 00 00 b4 3a 12 00 5e 00 00 00 | .9..@....:..U...^:.......:..^... |
132a0 | 64 3b 12 00 72 00 00 00 c3 3b 12 00 3b 00 00 00 36 3c 12 00 65 00 00 00 72 3c 12 00 37 00 00 00 | d;..r....;..;...6<..e...r<..7... |
132c0 | d8 3c 12 00 25 00 00 00 10 3d 12 00 51 00 00 00 36 3d 12 00 55 00 00 00 88 3d 12 00 38 00 00 00 | .<..%....=..Q...6=..U....=..8... |
132e0 | de 3d 12 00 13 00 00 00 17 3e 12 00 45 00 00 00 2b 3e 12 00 40 00 00 00 71 3e 12 00 26 00 00 00 | .=.......>..E...+>..@...q>..&... |
13300 | b2 3e 12 00 24 00 00 00 d9 3e 12 00 44 00 00 00 fe 3e 12 00 4b 00 00 00 43 3f 12 00 4b 00 00 00 | .>..$....>..D....>..K...C?..K... |
13320 | 8f 3f 12 00 1f 00 00 00 db 3f 12 00 96 00 00 00 fb 3f 12 00 26 00 00 00 92 40 12 00 29 00 00 00 | .?.......?.......?..&....@..)... |
13340 | b9 40 12 00 22 00 00 00 e3 40 12 00 1f 00 00 00 06 41 12 00 24 00 00 00 26 41 12 00 28 00 00 00 | .@.."....@.......A..$...&A..(... |
13360 | 4b 41 12 00 18 00 00 00 74 41 12 00 1b 00 00 00 8d 41 12 00 26 00 00 00 a9 41 12 00 29 00 00 00 | KA......tA.......A..&....A..)... |
13380 | d0 41 12 00 57 00 00 00 fa 41 12 00 54 00 00 00 52 42 12 00 52 00 00 00 a7 42 12 00 51 00 00 00 | .A..W....A..T...RB..R....B..Q... |
133a0 | fa 42 12 00 40 00 00 00 4c 43 12 00 28 00 00 00 8d 43 12 00 70 00 00 00 b6 43 12 00 26 00 00 00 | .B..@...LC..(....C..p....C..&... |
133c0 | 27 44 12 00 79 00 00 00 4e 44 12 00 56 00 00 00 c8 44 12 00 0b 00 00 00 1f 45 12 00 2c 00 00 00 | 'D..y...ND..V....D.......E..,... |
133e0 | 2b 45 12 00 35 00 00 00 58 45 12 00 3f 00 00 00 8e 45 12 00 2d 00 00 00 ce 45 12 00 33 00 00 00 | +E..5...XE..?....E..-....E..3... |
13400 | fc 45 12 00 31 00 00 00 30 46 12 00 69 00 00 00 62 46 12 00 9c 00 00 00 cc 46 12 00 89 00 00 00 | .E..1...0F..i...bF.......F...... |
13420 | 69 47 12 00 56 00 00 00 f3 47 12 00 4c 00 00 00 4a 48 12 00 3c 00 00 00 97 48 12 00 9e 00 00 00 | iG..V....G..L...JH..<....H...... |
13440 | d4 48 12 00 26 00 00 00 73 49 12 00 27 00 00 00 9a 49 12 00 1f 00 00 00 c2 49 12 00 5c 00 00 00 | .H..&...sI..'....I.......I..\... |
13460 | e2 49 12 00 3f 00 00 00 3f 4a 12 00 36 00 00 00 7f 4a 12 00 38 00 00 00 b6 4a 12 00 66 00 00 00 | .I..?...?J..6....J..8....J..f... |
13480 | ef 4a 12 00 24 00 00 00 56 4b 12 00 27 00 00 00 7b 4b 12 00 27 00 00 00 a3 4b 12 00 1e 00 00 00 | .J..$...VK..'...{K..'....K...... |
134a0 | cb 4b 12 00 24 01 00 00 ea 4b 12 00 a1 00 00 00 0f 4d 12 00 3c 00 00 00 b1 4d 12 00 6e 00 00 00 | .K..$....K.......M..<....M..n... |
134c0 | ee 4d 12 00 83 00 00 00 5d 4e 12 00 3e 00 00 00 e1 4e 12 00 55 00 00 00 20 4f 12 00 27 01 00 00 | .M......]N..>....N..U....O..'... |
134e0 | 76 4f 12 00 50 00 00 00 9e 50 12 00 22 00 00 00 ef 50 12 00 5a 00 00 00 12 51 12 00 2c 00 00 00 | vO..P....P.."....P..Z....Q..,... |
13500 | 6d 51 12 00 47 00 00 00 9a 51 12 00 7b 00 00 00 e2 51 12 00 77 00 00 00 5e 52 12 00 65 00 00 00 | mQ..G....Q..{....Q..w...^R..e... |
13520 | d6 52 12 00 65 00 00 00 3c 53 12 00 5a 00 00 00 a2 53 12 00 5a 00 00 00 fd 53 12 00 72 00 00 00 | .R..e...<S..Z....S..Z....S..r... |
13540 | 58 54 12 00 2e 00 00 00 cb 54 12 00 24 00 00 00 fa 54 12 00 61 00 00 00 1f 55 12 00 55 00 00 00 | XT.......T..$....T..a....U..U... |
13560 | 81 55 12 00 2b 00 00 00 d7 55 12 00 29 00 00 00 03 56 12 00 27 00 00 00 2d 56 12 00 28 00 00 00 | .U..+....U..)....V..'...-V..(... |
13580 | 55 56 12 00 29 00 00 00 7e 56 12 00 27 00 00 00 a8 56 12 00 28 00 00 00 d0 56 12 00 4c 00 00 00 | UV..)...~V..'....V..(....V..L... |
135a0 | f9 56 12 00 4c 00 00 00 46 57 12 00 38 00 00 00 93 57 12 00 54 00 00 00 cc 57 12 00 0b 00 00 00 | .V..L...FW..8....W..T....W...... |
135c0 | 21 58 12 00 0f 00 00 00 2d 58 12 00 49 00 00 00 3d 58 12 00 0b 00 00 00 87 58 12 00 43 00 00 00 | !X......-X..I...=X.......X..C... |
135e0 | 93 58 12 00 43 00 00 00 d7 58 12 00 36 00 00 00 1b 59 12 00 29 00 00 00 52 59 12 00 2e 00 00 00 | .X..C....X..6....Y..)...RY...... |
13600 | 7c 59 12 00 22 00 00 00 ab 59 12 00 77 00 00 00 ce 59 12 00 28 00 00 00 46 5a 12 00 3e 00 00 00 | |Y.."....Y..w....Y..(...FZ..>... |
13620 | 6f 5a 12 00 28 00 00 00 ae 5a 12 00 3e 00 00 00 d7 5a 12 00 29 00 00 00 16 5b 12 00 5d 00 00 00 | oZ..(....Z..>....Z..)....[..]... |
13640 | 40 5b 12 00 c9 00 00 00 9e 5b 12 00 3f 00 00 00 68 5c 12 00 dd 00 00 00 a8 5c 12 00 4c 00 00 00 | @[.......[..?...h\.......\..L... |
13660 | 86 5d 12 00 7f 00 00 00 d3 5d 12 00 1d 00 00 00 53 5e 12 00 73 00 00 00 71 5e 12 00 31 00 00 00 | .].......]......S^..s...q^..1... |
13680 | e5 5e 12 00 d7 00 00 00 17 5f 12 00 1e 00 00 00 ef 5f 12 00 24 00 00 00 0e 60 12 00 5c 00 00 00 | .^......._......._..$....`..\... |
136a0 | 33 60 12 00 21 00 00 00 90 60 12 00 52 00 00 00 b2 60 12 00 5c 00 00 00 05 61 12 00 b7 00 00 00 | 3`..!....`..R....`..\....a...... |
136c0 | 62 61 12 00 44 01 00 00 1a 62 12 00 a5 01 00 00 5f 63 12 00 27 00 00 00 05 65 12 00 88 01 00 00 | ba..D....b......_c..'....e...... |
136e0 | 2d 65 12 00 30 00 00 00 b6 66 12 00 3e 00 00 00 e7 66 12 00 33 01 00 00 26 67 12 00 41 00 00 00 | -e..0....f..>....f..3...&g..A... |
13700 | 5a 68 12 00 d1 00 00 00 9c 68 12 00 c2 01 00 00 6e 69 12 00 49 00 00 00 31 6b 12 00 e7 00 00 00 | Zh.......h......ni..I...1k...... |
13720 | 7b 6b 12 00 65 01 00 00 63 6c 12 00 1f 00 00 00 c9 6d 12 00 30 00 00 00 e9 6d 12 00 33 00 00 00 | {k..e...cl.......m..0....m..3... |
13740 | 1a 6e 12 00 11 00 00 00 4e 6e 12 00 05 00 00 00 60 6e 12 00 03 00 00 00 66 6e 12 00 0e 00 00 00 | .n......Nn......`n......fn...... |
13760 | 6a 6e 12 00 1b 00 00 00 79 6e 12 00 1d 00 00 00 95 6e 12 00 1f 00 00 00 b3 6e 12 00 04 00 00 00 | jn......yn.......n.......n...... |
13780 | d3 6e 12 00 0d 00 00 00 d8 6e 12 00 32 00 00 00 e6 6e 12 00 29 00 00 00 19 6f 12 00 04 00 00 00 | .n.......n..2....n..)....o...... |
137a0 | 43 6f 12 00 07 00 00 00 48 6f 12 00 09 00 00 00 50 6f 12 00 0d 00 00 00 5a 6f 12 00 17 00 00 00 | Co......Ho......Po......Zo...... |
137c0 | 68 6f 12 00 0f 00 00 00 80 6f 12 00 0d 00 00 00 90 6f 12 00 06 00 00 00 9e 6f 12 00 19 00 00 00 | ho.......o.......o.......o...... |
137e0 | a5 6f 12 00 14 00 00 00 bf 6f 12 00 05 00 00 00 d4 6f 12 00 15 00 00 00 da 6f 12 00 04 00 00 00 | .o.......o.......o.......o...... |
13800 | f0 6f 12 00 04 00 00 00 f5 6f 12 00 06 00 00 00 fa 6f 12 00 51 00 00 00 01 70 12 00 4a 01 00 00 | .o.......o.......o..Q....p..J... |
13820 | 53 70 12 00 50 01 00 00 9e 71 12 00 4d 00 00 00 ef 72 12 00 05 00 00 00 3d 73 12 00 12 00 00 00 | Sp..P....q..M....r......=s...... |
13840 | 43 73 12 00 15 00 00 00 56 73 12 00 22 00 00 00 6c 73 12 00 10 00 00 00 8f 73 12 00 12 00 00 00 | Cs......Vs.."...ls.......s...... |
13860 | a0 73 12 00 0e 00 00 00 b3 73 12 00 10 00 00 00 c2 73 12 00 13 00 00 00 d3 73 12 00 16 00 00 00 | .s.......s.......s.......s...... |
13880 | e7 73 12 00 06 00 00 00 fe 73 12 00 09 00 00 00 05 74 12 00 1d 00 00 00 0f 74 12 00 05 00 00 00 | .s.......s.......t.......t...... |
138a0 | 2d 74 12 00 0b 00 00 00 33 74 12 00 13 00 00 00 3f 74 12 00 0d 00 00 00 53 74 12 00 05 00 00 00 | -t......3t......?t......St...... |
138c0 | 61 74 12 00 68 00 00 00 67 74 12 00 67 00 00 00 d0 74 12 00 79 00 00 00 38 75 12 00 66 00 00 00 | at..h...gt..g....t..y...8u..f... |
138e0 | b2 75 12 00 03 00 00 00 19 76 12 00 08 00 00 00 1d 76 12 00 31 00 00 00 26 76 12 00 07 00 00 00 | .u.......v.......v..1...&v...... |
13900 | 58 76 12 00 08 00 00 00 60 76 12 00 38 00 00 00 69 76 12 00 10 00 00 00 a2 76 12 00 0b 00 00 00 | Xv......`v..8...iv.......v...... |
13920 | b3 76 12 00 03 00 00 00 bf 76 12 00 1d 00 00 00 c3 76 12 00 06 00 00 00 e1 76 12 00 1d 00 00 00 | .v.......v.......v.......v...... |
13940 | e8 76 12 00 09 00 00 00 06 77 12 00 26 00 00 00 10 77 12 00 6d 00 00 00 37 77 12 00 46 00 00 00 | .v.......w..&....w..m...7w..F... |
13960 | a5 77 12 00 32 00 00 00 ec 77 12 00 46 00 00 00 1f 78 12 00 04 00 00 00 66 78 12 00 08 00 00 00 | .w..2....w..F....x......fx...... |
13980 | 6b 78 12 00 07 00 00 00 74 78 12 00 46 00 00 00 7c 78 12 00 0d 00 00 00 c3 78 12 00 05 00 00 00 | kx......tx..F...|x.......x...... |
139a0 | d1 78 12 00 1c 00 00 00 d7 78 12 00 73 00 00 00 f4 78 12 00 04 00 00 00 68 79 12 00 06 00 00 00 | .x.......x..s....x......hy...... |
139c0 | 6d 79 12 00 04 00 00 00 74 79 12 00 05 00 00 00 79 79 12 00 10 00 00 00 7f 79 12 00 3c 00 00 00 | my......ty......yy.......y..<... |
139e0 | 90 79 12 00 32 00 00 00 cd 79 12 00 1c 00 00 00 00 7a 12 00 6d 00 00 00 1d 7a 12 00 08 00 00 00 | .y..2....y.......z..m....z...... |
13a00 | 8b 7a 12 00 14 00 00 00 94 7a 12 00 14 00 00 00 a9 7a 12 00 14 00 00 00 be 7a 12 00 14 00 00 00 | .z.......z.......z.......z...... |
13a20 | d3 7a 12 00 14 00 00 00 e8 7a 12 00 14 00 00 00 fd 7a 12 00 14 00 00 00 12 7b 12 00 06 00 00 00 | .z.......z.......z.......{...... |
13a40 | 27 7b 12 00 06 00 00 00 2e 7b 12 00 06 00 00 00 35 7b 12 00 06 00 00 00 3c 7b 12 00 06 00 00 00 | '{.......{......5{......<{...... |
13a60 | 43 7b 12 00 06 00 00 00 4a 7b 12 00 06 00 00 00 51 7b 12 00 06 00 00 00 58 7b 12 00 1f 00 00 00 | C{......J{......Q{......X{...... |
13a80 | 5f 7b 12 00 08 00 00 00 7f 7b 12 00 08 00 00 00 88 7b 12 00 a4 00 00 00 91 7b 12 00 03 00 00 00 | _{.......{.......{.......{...... |
13aa0 | 36 7c 12 00 0d 00 00 00 3a 7c 12 00 74 00 00 00 48 7c 12 00 9a 00 00 00 bd 7c 12 00 4c 00 00 00 | 6|......:|..t...H|.......|..L... |
13ac0 | 58 7d 12 00 04 00 00 00 a5 7d 12 00 0c 00 00 00 aa 7d 12 00 3f 00 00 00 b7 7d 12 00 29 00 00 00 | X}.......}.......}..?....}..)... |
13ae0 | f7 7d 12 00 37 00 00 00 21 7e 12 00 2c 00 00 00 59 7e 12 00 0e 00 00 00 86 7e 12 00 33 00 00 00 | .}..7...!~..,...Y~.......~..3... |
13b00 | 95 7e 12 00 33 00 00 00 c9 7e 12 00 0b 00 00 00 fd 7e 12 00 14 00 00 00 09 7f 12 00 71 00 00 00 | .~..3....~.......~..........q... |
13b20 | 1e 7f 12 00 46 00 00 00 90 7f 12 00 04 00 00 00 d7 7f 12 00 0b 00 00 00 dc 7f 12 00 12 00 00 00 | ....F........................... |
13b40 | e8 7f 12 00 0f 00 00 00 fb 7f 12 00 08 00 00 00 0b 80 12 00 06 00 00 00 14 80 12 00 03 00 00 00 | ................................ |
13b60 | 1b 80 12 00 0a 00 00 00 1f 80 12 00 0b 00 00 00 2a 80 12 00 40 00 00 00 36 80 12 00 07 00 00 00 | ................*...@...6....... |
13b80 | 77 80 12 00 06 00 00 00 7f 80 12 00 05 00 00 00 86 80 12 00 9b 00 00 00 8c 80 12 00 11 00 00 00 | w............................... |
13ba0 | 28 81 12 00 0d 00 00 00 3a 81 12 00 13 00 00 00 48 81 12 00 15 00 00 00 5c 81 12 00 18 00 00 00 | (.......:.......H.......\....... |
13bc0 | 72 81 12 00 1b 00 00 00 8b 81 12 00 0a 00 00 00 a7 81 12 00 12 00 00 00 b2 81 12 00 1c 00 00 00 | r............................... |
13be0 | c5 81 12 00 0f 00 00 00 e2 81 12 00 05 00 00 00 f2 81 12 00 0e 00 00 00 f8 81 12 00 0e 00 00 00 | ................................ |
13c00 | 07 82 12 00 0d 00 00 00 16 82 12 00 2a 00 00 00 24 82 12 00 15 00 00 00 4f 82 12 00 31 00 00 00 | ............*...$.......O...1... |
13c20 | 65 82 12 00 39 00 00 00 97 82 12 00 34 00 00 00 d1 82 12 00 04 00 00 00 06 83 12 00 0b 00 00 00 | e...9.......4................... |
13c40 | 0b 83 12 00 09 00 00 00 17 83 12 00 07 00 00 00 21 83 12 00 05 00 00 00 29 83 12 00 72 00 00 00 | ................!.......)...r... |
13c60 | 2f 83 12 00 08 00 00 00 a2 83 12 00 0e 00 00 00 ab 83 12 00 11 00 00 00 ba 83 12 00 38 00 00 00 | /...........................8... |
13c80 | cc 83 12 00 0d 00 00 00 05 84 12 00 0d 00 00 00 13 84 12 00 06 00 00 00 21 84 12 00 3a 00 00 00 | ........................!...:... |
13ca0 | 28 84 12 00 0b 00 00 00 63 84 12 00 40 00 00 00 6f 84 12 00 0e 00 00 00 b0 84 12 00 0f 00 00 00 | (.......c...@...o............... |
13cc0 | bf 84 12 00 07 00 00 00 cf 84 12 00 0e 00 00 00 d7 84 12 00 0c 00 00 00 e6 84 12 00 ad 00 00 00 | ................................ |
13ce0 | f3 84 12 00 0b 00 00 00 a1 85 12 00 06 00 00 00 ad 85 12 00 04 00 00 00 b4 85 12 00 d7 00 00 00 | ................................ |
13d00 | b9 85 12 00 10 00 00 00 91 86 12 00 ed 01 00 00 a2 86 12 00 0b 00 00 00 90 88 12 00 0b 00 00 00 | ................................ |
13d20 | 9c 88 12 00 0c 00 00 00 a8 88 12 00 06 00 00 00 b5 88 12 00 0e 00 00 00 bc 88 12 00 58 00 00 00 | ............................X... |
13d40 | cb 88 12 00 04 00 00 00 24 89 12 00 04 00 00 00 29 89 12 00 05 00 00 00 2e 89 12 00 0e 00 00 00 | ........$.......)............... |
13d60 | 34 89 12 00 47 00 00 00 43 89 12 00 05 00 00 00 8b 89 12 00 07 00 00 00 91 89 12 00 68 00 00 00 | 4...G...C...................h... |
13d80 | 99 89 12 00 19 00 00 00 02 8a 12 00 14 00 00 00 1c 8a 12 00 2c 00 00 00 31 8a 12 00 0b 00 00 00 | ....................,...1....... |
13da0 | 5e 8a 12 00 09 00 00 00 6a 8a 12 00 08 00 00 00 74 8a 12 00 53 00 00 00 7d 8a 12 00 08 00 00 00 | ^.......j.......t...S...}....... |
13dc0 | d1 8a 12 00 22 00 00 00 da 8a 12 00 04 00 00 00 fd 8a 12 00 05 00 00 00 02 8b 12 00 01 00 00 00 | ...."........................... |
13de0 | d8 0a 00 00 00 00 00 00 8a 06 00 00 93 04 00 00 b0 09 00 00 46 0e 00 00 fc 0d 00 00 e0 10 00 00 | ....................F........... |
13e00 | 00 00 00 00 bc 11 00 00 8c 04 00 00 a4 07 00 00 00 00 00 00 be 12 00 00 4a 09 00 00 0e 05 00 00 | ........................J....... |
13e20 | 97 0a 00 00 61 02 00 00 63 0b 00 00 7a 12 00 00 a3 08 00 00 15 05 00 00 00 00 00 00 00 00 00 00 | ....a...c...z................... |
13e40 | 54 0a 00 00 00 00 00 00 00 00 00 00 cd 0b 00 00 b8 13 00 00 35 08 00 00 1b 0e 00 00 d1 06 00 00 | T...................5........... |
13e60 | 00 00 00 00 00 00 00 00 0e 08 00 00 a6 01 00 00 25 0e 00 00 68 06 00 00 8e 0c 00 00 00 00 00 00 | ................%...h........... |
13e80 | 03 08 00 00 b7 12 00 00 3a 12 00 00 18 12 00 00 29 0e 00 00 57 05 00 00 e1 08 00 00 db 00 00 00 | ........:.......)...W........... |
13ea0 | e9 00 00 00 07 01 00 00 15 01 00 00 1b 01 00 00 23 01 00 00 29 01 00 00 31 01 00 00 33 01 00 00 | ................#...)...1...3... |
13ec0 | 35 01 00 00 77 0e 00 00 2a 10 00 00 2f 03 00 00 78 09 00 00 6c 00 00 00 e9 0d 00 00 00 00 00 00 | 5...w...*.../...x...l........... |
13ee0 | 46 06 00 00 7a 09 00 00 9e 07 00 00 7a 0d 00 00 81 05 00 00 20 0d 00 00 00 00 00 00 00 00 00 00 | F...z.......z................... |
13f00 | 4b 0c 00 00 b2 12 00 00 1e 12 00 00 a8 11 00 00 0b 0c 00 00 ac 08 00 00 d1 03 00 00 00 00 00 00 | K............................... |
13f20 | 86 06 00 00 2a 01 00 00 64 01 00 00 3c 0d 00 00 ec 0a 00 00 76 08 00 00 07 0e 00 00 b9 08 00 00 | ....*...d...<.......v........... |
13f40 | b4 06 00 00 48 0f 00 00 9e 0c 00 00 e4 11 00 00 c3 11 00 00 00 00 00 00 4c 03 00 00 2d 0f 00 00 | ....H...................L...-... |
13f60 | c2 06 00 00 ee 04 00 00 6f 02 00 00 69 11 00 00 5b 12 00 00 00 00 00 00 a3 01 00 00 00 00 00 00 | ........o...i...[............... |
13f80 | 00 00 00 00 58 06 00 00 00 00 00 00 76 07 00 00 27 13 00 00 d1 09 00 00 40 00 00 00 b0 05 00 00 | ....X.......v...'.......@....... |
13fa0 | 00 00 00 00 f6 06 00 00 c0 0c 00 00 2d 08 00 00 31 03 00 00 19 05 00 00 00 00 00 00 87 03 00 00 | ............-...1............... |
13fc0 | e2 0b 00 00 4b 0d 00 00 00 00 00 00 00 00 00 00 a2 09 00 00 89 0f 00 00 6e 06 00 00 cc 07 00 00 | ....K...................n....... |
13fe0 | 4b 13 00 00 00 00 00 00 00 00 00 00 7a 07 00 00 82 0b 00 00 1d 0c 00 00 4c 01 00 00 c6 11 00 00 | K...........z...........L....... |
14000 | 0a 13 00 00 44 08 00 00 f7 0d 00 00 10 01 00 00 00 00 00 00 00 00 00 00 78 13 00 00 21 12 00 00 | ....D...................x...!... |
14020 | 00 00 00 00 bc 09 00 00 25 0a 00 00 77 13 00 00 00 00 00 00 b8 0b 00 00 5f 0c 00 00 00 00 00 00 | ........%...w..........._....... |
14040 | 80 10 00 00 1a 10 00 00 71 03 00 00 2a 03 00 00 b4 01 00 00 f2 0d 00 00 00 00 00 00 23 0e 00 00 | ........q...*...............#... |
14060 | 2f 0d 00 00 3d 06 00 00 1d 04 00 00 4c 0d 00 00 6c 0b 00 00 f4 10 00 00 60 09 00 00 b6 00 00 00 | /...=.......L...l.......`....... |
14080 | f5 0d 00 00 09 0a 00 00 7e 08 00 00 c5 0b 00 00 16 09 00 00 be 00 00 00 1a 02 00 00 ff 0b 00 00 | ........~....................... |
140a0 | 25 01 00 00 dd 01 00 00 49 0c 00 00 00 00 00 00 08 01 00 00 00 00 00 00 cb 00 00 00 db 0e 00 00 | %.......I....................... |
140c0 | 94 13 00 00 00 00 00 00 00 00 00 00 0f 11 00 00 00 00 00 00 d9 08 00 00 f6 0b 00 00 29 06 00 00 | ............................)... |
140e0 | fc 11 00 00 00 00 00 00 d4 0d 00 00 00 00 00 00 9c 10 00 00 6e 08 00 00 f6 0c 00 00 3b 07 00 00 | ....................n.......;... |
14100 | 7d 01 00 00 d9 11 00 00 00 00 00 00 00 00 00 00 a4 0f 00 00 00 00 00 00 eb 0c 00 00 22 08 00 00 | }..........................."... |
14120 | 00 00 00 00 d4 07 00 00 00 00 00 00 00 00 00 00 f0 11 00 00 bf 0d 00 00 d5 03 00 00 f2 0b 00 00 | ................................ |
14140 | 02 0b 00 00 d5 00 00 00 d3 0a 00 00 66 0a 00 00 00 00 00 00 ea 04 00 00 9a 0c 00 00 38 04 00 00 | ............f...............8... |
14160 | 20 12 00 00 b7 06 00 00 00 00 00 00 6f 06 00 00 60 06 00 00 00 00 00 00 a5 07 00 00 2d 05 00 00 | ............o...`...........-... |
14180 | 52 0a 00 00 00 00 00 00 6b 0f 00 00 da 0f 00 00 00 00 00 00 32 0a 00 00 f4 00 00 00 5d 11 00 00 | R.......k...........2.......]... |
141a0 | c1 04 00 00 f1 09 00 00 5b 06 00 00 e2 09 00 00 ab 0d 00 00 6a 06 00 00 f7 09 00 00 e4 02 00 00 | ........[...........j........... |
141c0 | 1e 0f 00 00 ad 06 00 00 95 0c 00 00 e1 11 00 00 00 00 00 00 f8 0b 00 00 00 00 00 00 93 05 00 00 | ................................ |
141e0 | 11 02 00 00 03 07 00 00 f1 11 00 00 a5 0b 00 00 c2 0c 00 00 64 09 00 00 80 11 00 00 00 00 00 00 | ....................d........... |
14200 | 7e 02 00 00 00 00 00 00 c2 04 00 00 24 06 00 00 bb 01 00 00 38 08 00 00 00 00 00 00 ad 01 00 00 | ~...........$.......8........... |
14220 | bf 10 00 00 5e 00 00 00 3f 0c 00 00 79 06 00 00 9a 03 00 00 34 04 00 00 00 00 00 00 93 11 00 00 | ....^...?...y.......4........... |
14240 | 2d 07 00 00 00 00 00 00 65 0e 00 00 5e 08 00 00 1f 0f 00 00 04 05 00 00 bc 07 00 00 ec 0b 00 00 | -.......e...^................... |
14260 | 4c 00 00 00 2b 10 00 00 00 00 00 00 df 08 00 00 40 11 00 00 51 11 00 00 a0 0f 00 00 96 0c 00 00 | L...+...........@...Q........... |
14280 | 97 03 00 00 2d 04 00 00 81 00 00 00 7e 0c 00 00 ca 00 00 00 27 12 00 00 b0 03 00 00 52 0e 00 00 | ....-.......~.......'.......R... |
142a0 | 7d 07 00 00 d0 07 00 00 32 0c 00 00 6b 0d 00 00 4b 11 00 00 00 00 00 00 a6 02 00 00 9e 13 00 00 | }.......2...k...K............... |
142c0 | 00 00 00 00 3a 04 00 00 2b 0e 00 00 2a 04 00 00 d4 11 00 00 6f 03 00 00 00 00 00 00 37 0e 00 00 | ....:...+...*.......o.......7... |
142e0 | 94 09 00 00 10 0d 00 00 19 11 00 00 00 00 00 00 28 12 00 00 e7 0a 00 00 df 0b 00 00 6a 09 00 00 | ................(...........j... |
14300 | 00 00 00 00 18 0e 00 00 87 0c 00 00 fe 07 00 00 a3 11 00 00 38 0f 00 00 ea 12 00 00 00 00 00 00 | ....................8........... |
14320 | 00 00 00 00 90 0b 00 00 00 00 00 00 7c 11 00 00 e3 07 00 00 78 10 00 00 4d 13 00 00 00 00 00 00 | ............|.......x...M....... |
14340 | 6c 11 00 00 42 13 00 00 af 08 00 00 91 11 00 00 c5 06 00 00 2b 03 00 00 00 00 00 00 2e 09 00 00 | l...B...............+........... |
14360 | 8b 0c 00 00 c6 0e 00 00 00 00 00 00 0a 08 00 00 6d 0a 00 00 b0 10 00 00 3d 0b 00 00 cb 13 00 00 | ................m.......=....... |
14380 | 4b 06 00 00 00 00 00 00 fb 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 0a 00 00 | K............................... |
143a0 | c0 13 00 00 00 00 00 00 c8 0f 00 00 1c 0a 00 00 58 0c 00 00 d7 0f 00 00 00 00 00 00 6f 08 00 00 | ................X...........o... |
143c0 | 1c 07 00 00 6b 01 00 00 00 00 00 00 64 0f 00 00 b3 0f 00 00 05 10 00 00 00 00 00 00 ef 11 00 00 | ....k.......d................... |
143e0 | 00 00 00 00 73 05 00 00 13 03 00 00 19 02 00 00 00 00 00 00 50 11 00 00 00 00 00 00 ce 10 00 00 | ....s...............P........... |
14400 | 00 00 00 00 00 00 00 00 24 12 00 00 f7 00 00 00 00 00 00 00 99 03 00 00 33 0f 00 00 7e 13 00 00 | ........$...............3...~... |
14420 | 8a 01 00 00 5a 0f 00 00 c4 10 00 00 00 00 00 00 00 00 00 00 ab 06 00 00 a2 0e 00 00 a2 0a 00 00 | ....Z........................... |
14440 | 00 00 00 00 09 09 00 00 00 00 00 00 1a 0c 00 00 00 00 00 00 83 01 00 00 ea 11 00 00 4b 03 00 00 | ............................K... |
14460 | 00 00 00 00 00 00 00 00 19 0b 00 00 00 00 00 00 71 10 00 00 2c 0c 00 00 61 07 00 00 00 00 00 00 | ................q...,...a....... |
14480 | 00 00 00 00 fb 08 00 00 93 13 00 00 36 05 00 00 00 00 00 00 26 13 00 00 00 13 00 00 fd 12 00 00 | ............6.......&........... |
144a0 | e6 12 00 00 81 0a 00 00 cd 04 00 00 00 00 00 00 00 00 00 00 d4 02 00 00 09 10 00 00 83 00 00 00 | ................................ |
144c0 | de 0a 00 00 00 00 00 00 01 0c 00 00 de 06 00 00 82 05 00 00 5b 13 00 00 00 00 00 00 70 12 00 00 | ....................[.......p... |
144e0 | 6e 11 00 00 00 00 00 00 45 07 00 00 3f 12 00 00 fd 08 00 00 00 00 00 00 17 05 00 00 68 07 00 00 | n.......E...?...............h... |
14500 | 71 07 00 00 5d 01 00 00 00 00 00 00 ef 09 00 00 c9 0f 00 00 de 05 00 00 ae 0b 00 00 45 0f 00 00 | q...].......................E... |
14520 | 00 00 00 00 00 00 00 00 da 08 00 00 0e 07 00 00 78 03 00 00 55 0d 00 00 88 00 00 00 bd 0a 00 00 | ................x...U........... |
14540 | 0a 02 00 00 b3 0a 00 00 f9 09 00 00 29 0d 00 00 f8 11 00 00 d8 0b 00 00 00 00 00 00 1c 0e 00 00 | ............)................... |
14560 | 00 00 00 00 00 00 00 00 e1 01 00 00 d1 0c 00 00 ee 12 00 00 3e 0f 00 00 4a 0f 00 00 00 00 00 00 | ....................>...J....... |
14580 | d5 09 00 00 97 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 09 00 00 64 03 00 00 00 00 00 00 | ....................6...d....... |
145a0 | 11 0e 00 00 17 03 00 00 01 09 00 00 ac 0b 00 00 55 04 00 00 d3 04 00 00 29 13 00 00 00 00 00 00 | ................U.......)....... |
145c0 | 00 00 00 00 7f 10 00 00 25 03 00 00 e5 08 00 00 10 10 00 00 00 00 00 00 91 07 00 00 ae 05 00 00 | ........%....................... |
145e0 | 43 06 00 00 00 00 00 00 00 00 00 00 33 05 00 00 00 00 00 00 8f 12 00 00 18 0a 00 00 cd 0f 00 00 | C...........3................... |
14600 | 00 00 00 00 f2 01 00 00 d2 0e 00 00 e3 11 00 00 56 10 00 00 8d 04 00 00 b0 08 00 00 00 00 00 00 | ................V............... |
14620 | 00 00 00 00 48 13 00 00 0f 04 00 00 00 00 00 00 7f 01 00 00 18 08 00 00 00 00 00 00 68 0b 00 00 | ....H.......................h... |
14640 | 43 12 00 00 00 00 00 00 48 0d 00 00 00 00 00 00 1c 0f 00 00 00 00 00 00 c3 0b 00 00 1c 00 00 00 | C.......H....................... |
14660 | 4a 00 00 00 31 0b 00 00 00 00 00 00 00 00 00 00 a9 10 00 00 00 00 00 00 4c 05 00 00 00 00 00 00 | J...1...................L....... |
14680 | b6 09 00 00 6c 0c 00 00 9e 03 00 00 37 07 00 00 00 00 00 00 34 0a 00 00 00 00 00 00 61 12 00 00 | ....l.......7.......4.......a... |
146a0 | 7d 0b 00 00 98 08 00 00 8b 0b 00 00 00 00 00 00 c7 11 00 00 00 00 00 00 5e 05 00 00 d1 0b 00 00 | }.......................^....... |
146c0 | 9a 02 00 00 dc 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a5 0f 00 00 34 0d 00 00 a5 0d 00 00 | ........................4....... |
146e0 | 00 00 00 00 2d 0d 00 00 9b 05 00 00 d4 05 00 00 4e 0d 00 00 43 0a 00 00 00 00 00 00 00 00 00 00 | ....-...........N...C........... |
14700 | 8a 11 00 00 cd 06 00 00 00 00 00 00 00 00 00 00 6b 0a 00 00 11 08 00 00 00 00 00 00 00 00 00 00 | ................k............... |
14720 | 74 07 00 00 00 00 00 00 24 0d 00 00 00 00 00 00 c4 02 00 00 d9 01 00 00 16 02 00 00 a4 13 00 00 | t.......$....................... |
14740 | 00 00 00 00 0c 05 00 00 bb 0f 00 00 96 09 00 00 00 00 00 00 00 00 00 00 b4 09 00 00 2d 0a 00 00 | ............................-... |
14760 | f3 01 00 00 6d 05 00 00 87 0a 00 00 fc 0e 00 00 88 0a 00 00 bd 01 00 00 92 07 00 00 b2 06 00 00 | ....m........................... |
14780 | 30 0e 00 00 55 09 00 00 61 08 00 00 d4 13 00 00 33 11 00 00 df 12 00 00 f6 01 00 00 2f 00 00 00 | 0...U...a.......3.........../... |
147a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 11 00 00 c8 01 00 00 c5 10 00 00 00 00 00 00 | ................................ |
147c0 | c5 0a 00 00 00 00 00 00 da 0e 00 00 37 0a 00 00 00 00 00 00 b5 03 00 00 e8 0d 00 00 00 00 00 00 | ............7................... |
147e0 | ce 0c 00 00 36 10 00 00 65 05 00 00 b7 01 00 00 b3 0c 00 00 5a 0a 00 00 00 00 00 00 47 04 00 00 | ....6...e...........Z.......G... |
14800 | dd 0d 00 00 5c 07 00 00 0a 0f 00 00 00 00 00 00 00 00 00 00 72 12 00 00 fb 01 00 00 8c 0c 00 00 | ....\...............r........... |
14820 | 00 00 00 00 00 00 00 00 4a 05 00 00 bd 11 00 00 c4 0d 00 00 72 05 00 00 ec 09 00 00 ce 01 00 00 | ........J...........r........... |
14840 | 00 00 00 00 00 00 00 00 e1 04 00 00 69 00 00 00 65 0d 00 00 00 00 00 00 58 07 00 00 01 13 00 00 | ............i...e.......X....... |
14860 | 63 07 00 00 00 00 00 00 3f 00 00 00 1d 10 00 00 74 0a 00 00 08 0f 00 00 00 00 00 00 da 0c 00 00 | c.......?.......t............... |
14880 | 00 00 00 00 00 00 00 00 c2 08 00 00 be 05 00 00 a9 0c 00 00 9e 12 00 00 00 00 00 00 89 08 00 00 | ................................ |
148a0 | 00 00 00 00 41 13 00 00 00 00 00 00 1a 0f 00 00 51 0f 00 00 00 00 00 00 d2 00 00 00 4a 02 00 00 | ....A...........Q...........J... |
148c0 | 00 00 00 00 59 10 00 00 e3 04 00 00 be 03 00 00 00 00 00 00 00 00 00 00 76 0a 00 00 52 0b 00 00 | ....Y...................v...R... |
148e0 | 00 00 00 00 00 00 00 00 00 00 00 00 16 12 00 00 00 00 00 00 08 07 00 00 00 00 00 00 00 00 00 00 | ................................ |
14900 | 37 08 00 00 c3 0e 00 00 92 02 00 00 b4 08 00 00 32 03 00 00 00 00 00 00 07 06 00 00 64 04 00 00 | 7...............2...........d... |
14920 | 00 00 00 00 b0 01 00 00 39 06 00 00 31 07 00 00 00 00 00 00 00 00 00 00 e3 01 00 00 00 00 00 00 | ........9...1................... |
14940 | 00 00 00 00 b0 02 00 00 03 0f 00 00 0e 01 00 00 38 10 00 00 00 00 00 00 02 04 00 00 00 00 00 00 | ................8............... |
14960 | 49 09 00 00 f6 07 00 00 34 05 00 00 00 00 00 00 09 0e 00 00 dc 0f 00 00 00 00 00 00 91 0e 00 00 | I.......4....................... |
14980 | 00 00 00 00 00 00 00 00 2c 09 00 00 00 00 00 00 08 0b 00 00 70 06 00 00 42 11 00 00 6b 10 00 00 | ........,...........p...B...k... |
149a0 | 99 0b 00 00 00 00 00 00 ad 08 00 00 c5 0e 00 00 c5 05 00 00 bc 0e 00 00 51 10 00 00 00 00 00 00 | ........................Q....... |
149c0 | c1 12 00 00 e8 0f 00 00 45 02 00 00 7f 06 00 00 05 05 00 00 95 00 00 00 00 00 00 00 c7 12 00 00 | ........E....................... |
149e0 | 24 05 00 00 5a 0e 00 00 ed 10 00 00 35 04 00 00 95 05 00 00 c8 0b 00 00 76 03 00 00 10 0b 00 00 | $...Z.......5...........v....... |
14a00 | 8b 08 00 00 ae 02 00 00 f0 0c 00 00 39 13 00 00 2c 07 00 00 00 00 00 00 00 00 00 00 19 0a 00 00 | ............9...,............... |
14a20 | d3 12 00 00 00 00 00 00 00 00 00 00 2f 0f 00 00 07 0f 00 00 08 13 00 00 00 00 00 00 27 0a 00 00 | ............/...............'... |
14a40 | 00 00 00 00 15 0c 00 00 00 00 00 00 91 01 00 00 00 00 00 00 81 07 00 00 32 12 00 00 4b 07 00 00 | ........................2...K... |
14a60 | 78 08 00 00 00 00 00 00 10 04 00 00 36 08 00 00 69 0c 00 00 b6 13 00 00 23 05 00 00 5b 10 00 00 | x...........6...i.......#...[... |
14a80 | 11 04 00 00 00 00 00 00 00 00 00 00 c9 07 00 00 00 00 00 00 01 03 00 00 92 0e 00 00 e6 08 00 00 | ................................ |
14aa0 | c3 07 00 00 46 04 00 00 d8 04 00 00 c2 0e 00 00 3e 06 00 00 af 0d 00 00 86 10 00 00 ed 12 00 00 | ....F...........>............... |
14ac0 | 9b 0f 00 00 00 00 00 00 52 07 00 00 29 0c 00 00 d7 07 00 00 4e 12 00 00 b3 04 00 00 ee 00 00 00 | ........R...).......N........... |
14ae0 | f9 00 00 00 fb 00 00 00 fd 00 00 00 fe 00 00 00 ff 00 00 00 00 01 00 00 01 01 00 00 03 01 00 00 | ................................ |
14b00 | 04 01 00 00 5c 08 00 00 12 08 00 00 74 0b 00 00 43 05 00 00 b4 0d 00 00 57 0e 00 00 0a 01 00 00 | ....\.......t...C.......W....... |
14b20 | 0b 01 00 00 0c 01 00 00 0d 01 00 00 ec 01 00 00 ba 05 00 00 11 01 00 00 dc 0e 00 00 12 01 00 00 | ................................ |
14b40 | f3 12 00 00 40 0e 00 00 00 00 00 00 ed 04 00 00 84 07 00 00 c4 0c 00 00 65 13 00 00 52 00 00 00 | ....@...................e...R... |
14b60 | ca 0b 00 00 e5 0d 00 00 0f 13 00 00 18 01 00 00 15 12 00 00 19 01 00 00 00 00 00 00 1a 01 00 00 | ................................ |
14b80 | 00 00 00 00 b9 05 00 00 00 00 00 00 c4 13 00 00 00 00 00 00 8f 11 00 00 b1 06 00 00 73 09 00 00 | ............................s... |
14ba0 | 69 0b 00 00 20 01 00 00 00 00 00 00 21 01 00 00 b4 0a 00 00 22 01 00 00 4e 04 00 00 8f 0f 00 00 | i...........!......."...N....... |
14bc0 | 00 00 00 00 00 00 00 00 8d 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 0f 00 00 00 00 00 00 | ................................ |
14be0 | 00 00 00 00 c1 10 00 00 a5 12 00 00 9d 00 00 00 00 00 00 00 d0 10 00 00 5e 07 00 00 b6 0f 00 00 | ........................^....... |
14c00 | 36 03 00 00 00 00 00 00 00 00 00 00 30 11 00 00 d4 08 00 00 2e 03 00 00 00 00 00 00 ea 00 00 00 | 6...........0................... |
14c20 | 27 07 00 00 2f 05 00 00 00 00 00 00 4b 08 00 00 00 00 00 00 2b 01 00 00 2d 01 00 00 0f 12 00 00 | '.../.......K.......+...-....... |
14c40 | 3e 00 00 00 00 00 00 00 ca 0e 00 00 6b 00 00 00 00 00 00 00 a0 04 00 00 7c 0b 00 00 32 01 00 00 | >...........k...........|...2... |
14c60 | 8e 0f 00 00 57 10 00 00 0c 12 00 00 00 00 00 00 5f 02 00 00 00 00 00 00 00 00 00 00 5c 0c 00 00 | ....W..........._...........\... |
14c80 | 00 00 00 00 00 00 00 00 4c 10 00 00 d1 11 00 00 00 00 00 00 a9 08 00 00 00 00 00 00 c5 12 00 00 | ........L....................... |
14ca0 | d4 12 00 00 5d 05 00 00 2f 02 00 00 64 12 00 00 d1 0a 00 00 aa 13 00 00 d9 13 00 00 e4 10 00 00 | ....].../...d................... |
14cc0 | a3 09 00 00 49 0f 00 00 34 10 00 00 6c 09 00 00 11 00 00 00 00 00 00 00 a9 0d 00 00 99 08 00 00 | ....I...4...l................... |
14ce0 | a8 03 00 00 ff 07 00 00 b2 0d 00 00 46 13 00 00 ae 0f 00 00 00 00 00 00 00 0e 00 00 00 00 00 00 | ............F................... |
14d00 | fa 09 00 00 28 0f 00 00 00 00 00 00 72 0e 00 00 dc 03 00 00 00 00 00 00 e8 09 00 00 7a 03 00 00 | ....(.......r...............z... |
14d20 | 22 07 00 00 00 00 00 00 84 0a 00 00 00 00 00 00 00 00 00 00 ed 05 00 00 1b 08 00 00 00 00 00 00 | "............................... |
14d40 | 47 0d 00 00 c7 0a 00 00 00 00 00 00 00 00 00 00 92 12 00 00 2b 07 00 00 19 06 00 00 e1 10 00 00 | G...................+........... |
14d60 | e0 06 00 00 27 02 00 00 11 05 00 00 f5 06 00 00 91 0c 00 00 00 00 00 00 9d 0b 00 00 00 00 00 00 | ....'........................... |
14d80 | 52 13 00 00 21 11 00 00 33 0a 00 00 c1 00 00 00 00 00 00 00 00 00 00 00 56 0c 00 00 00 00 00 00 | R...!...3...............V....... |
14da0 | 00 00 00 00 b2 02 00 00 5a 05 00 00 00 00 00 00 00 00 00 00 2e 02 00 00 9d 10 00 00 00 00 00 00 | ........Z....................... |
14dc0 | 0b 0b 00 00 e0 08 00 00 2b 0c 00 00 44 11 00 00 dd 05 00 00 a4 06 00 00 00 00 00 00 ea 0a 00 00 | ........+...D................... |
14de0 | 01 08 00 00 57 0a 00 00 57 11 00 00 00 00 00 00 bb 0c 00 00 6a 04 00 00 0b 09 00 00 08 12 00 00 | ....W...W...........j........... |
14e00 | 88 08 00 00 8d 01 00 00 40 12 00 00 d4 0c 00 00 92 0b 00 00 5d 0c 00 00 5f 03 00 00 02 06 00 00 | ........@...........]..._....... |
14e20 | 9c 04 00 00 49 02 00 00 a4 04 00 00 00 00 00 00 79 08 00 00 35 00 00 00 00 00 00 00 00 00 00 00 | ....I...........y...5........... |
14e40 | 7d 08 00 00 2a 06 00 00 be 0d 00 00 00 00 00 00 00 00 00 00 16 0e 00 00 af 02 00 00 d7 0b 00 00 | }...*........................... |
14e60 | de 0f 00 00 5e 09 00 00 00 00 00 00 b1 11 00 00 ee 0a 00 00 f7 01 00 00 3f 0d 00 00 00 00 00 00 | ....^...................?....... |
14e80 | b4 05 00 00 ec 08 00 00 c8 0e 00 00 27 0e 00 00 b2 11 00 00 d6 02 00 00 a0 06 00 00 eb 06 00 00 | ............'................... |
14ea0 | 5b 0a 00 00 0e 12 00 00 c4 06 00 00 47 11 00 00 6a 12 00 00 c5 04 00 00 51 01 00 00 56 05 00 00 | [...........G...j.......Q...V... |
14ec0 | 0b 03 00 00 69 10 00 00 28 04 00 00 90 08 00 00 43 0b 00 00 be 0a 00 00 55 06 00 00 17 0b 00 00 | ....i...(.......C.......U....... |
14ee0 | e2 12 00 00 da 06 00 00 5e 04 00 00 00 00 00 00 00 00 00 00 28 0c 00 00 f5 0a 00 00 e4 0b 00 00 | ........^...........(........... |
14f00 | 00 00 00 00 00 00 00 00 db 08 00 00 00 00 00 00 32 0e 00 00 d8 0f 00 00 00 00 00 00 11 0f 00 00 | ................2............... |
14f20 | 00 00 00 00 00 00 00 00 74 10 00 00 a3 0b 00 00 44 06 00 00 b4 0c 00 00 eb 11 00 00 b6 12 00 00 | ........t.......D............... |
14f40 | 00 00 00 00 54 04 00 00 00 00 00 00 48 0e 00 00 00 00 00 00 f4 0b 00 00 ac 01 00 00 63 11 00 00 | ....T.......H...............c... |
14f60 | 67 06 00 00 82 02 00 00 e1 0c 00 00 40 07 00 00 00 00 00 00 75 09 00 00 87 0d 00 00 41 12 00 00 | g...........@.......u.......A... |
14f80 | 0a 03 00 00 89 04 00 00 00 00 00 00 00 00 00 00 5d 07 00 00 00 00 00 00 00 00 00 00 3c 07 00 00 | ................]...........<... |
14fa0 | 00 00 00 00 3e 05 00 00 e4 09 00 00 97 11 00 00 57 09 00 00 19 0e 00 00 8e 10 00 00 17 0f 00 00 | ....>...........W............... |
14fc0 | 00 00 00 00 85 11 00 00 1c 10 00 00 14 06 00 00 94 05 00 00 ba 08 00 00 00 00 00 00 84 05 00 00 | ................................ |
14fe0 | 34 02 00 00 a2 08 00 00 00 00 00 00 00 00 00 00 fb 07 00 00 c8 09 00 00 bf 03 00 00 6d 04 00 00 | 4...........................m... |
15000 | 63 0f 00 00 e1 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e7 0e 00 00 1d 02 00 00 00 00 00 00 | c............................... |
15020 | e7 0d 00 00 e2 06 00 00 3a 02 00 00 3e 07 00 00 00 00 00 00 68 0e 00 00 00 00 00 00 34 01 00 00 | ........:...>.......h.......4... |
15040 | 80 03 00 00 00 00 00 00 6c 03 00 00 12 06 00 00 ed 07 00 00 00 00 00 00 00 00 00 00 09 0c 00 00 | ........l....................... |
15060 | 7d 04 00 00 71 11 00 00 e9 10 00 00 00 00 00 00 aa 11 00 00 15 07 00 00 00 00 00 00 8a 0b 00 00 | }...q........................... |
15080 | 97 13 00 00 16 03 00 00 07 11 00 00 7e 12 00 00 d3 06 00 00 b8 04 00 00 35 0b 00 00 00 00 00 00 | ............~...........5....... |
150a0 | a2 03 00 00 d0 09 00 00 00 00 00 00 8d 0e 00 00 c4 0e 00 00 b3 13 00 00 95 0d 00 00 00 00 00 00 | ................................ |
150c0 | 4f 10 00 00 bb 07 00 00 4c 12 00 00 b3 09 00 00 67 10 00 00 47 13 00 00 2e 12 00 00 92 0f 00 00 | O.......L.......g...G........... |
150e0 | 3c 0c 00 00 38 02 00 00 00 00 00 00 d5 13 00 00 3b 0a 00 00 ac 0a 00 00 59 0f 00 00 00 00 00 00 | <...8...........;.......Y....... |
15100 | 93 06 00 00 9b 03 00 00 37 01 00 00 3d 09 00 00 40 10 00 00 c7 08 00 00 e3 09 00 00 8f 01 00 00 | ........7...=...@............... |
15120 | de 12 00 00 3c 10 00 00 67 00 00 00 04 0f 00 00 2d 10 00 00 00 00 00 00 c6 07 00 00 00 00 00 00 | ....<...g.......-............... |
15140 | 56 13 00 00 00 00 00 00 28 0b 00 00 35 06 00 00 d5 0b 00 00 09 13 00 00 ee 0e 00 00 54 06 00 00 | V.......(...5...............T... |
15160 | ee 07 00 00 8f 07 00 00 00 00 00 00 ee 06 00 00 00 00 00 00 73 0f 00 00 00 00 00 00 3b 02 00 00 | ....................s.......;... |
15180 | 00 00 00 00 4d 0f 00 00 00 00 00 00 fe 08 00 00 d4 0b 00 00 80 07 00 00 a3 04 00 00 fa 0f 00 00 | ....M........................... |
151a0 | 0e 13 00 00 78 01 00 00 3a 03 00 00 e7 0b 00 00 97 09 00 00 d3 09 00 00 00 00 00 00 fc 03 00 00 | ....x...:....................... |
151c0 | 6f 12 00 00 ab 0f 00 00 00 00 00 00 d6 03 00 00 47 01 00 00 00 00 00 00 94 04 00 00 93 0e 00 00 | o...............G............... |
151e0 | 22 0f 00 00 53 10 00 00 d5 08 00 00 65 0c 00 00 3e 03 00 00 f2 03 00 00 e6 05 00 00 d3 11 00 00 | "...S.......e...>............... |
15200 | 58 02 00 00 f9 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 a0 08 00 00 e4 07 00 00 | X...................S........... |
15220 | 4c 0f 00 00 00 00 00 00 93 01 00 00 37 0d 00 00 00 00 00 00 65 04 00 00 36 01 00 00 a7 05 00 00 | L...........7.......e...6....... |
15240 | 2d 0b 00 00 80 06 00 00 0f 10 00 00 bc 00 00 00 12 0f 00 00 96 04 00 00 e7 09 00 00 f6 0e 00 00 | -............................... |
15260 | 00 00 00 00 15 02 00 00 2a 0e 00 00 48 00 00 00 83 0f 00 00 9a 04 00 00 64 0b 00 00 bf 11 00 00 | ........*...H...........d....... |
15280 | 4b 10 00 00 04 11 00 00 4e 11 00 00 04 06 00 00 00 00 00 00 f7 12 00 00 25 0f 00 00 df 0a 00 00 | K.......N...............%....... |
152a0 | f7 03 00 00 00 00 00 00 69 01 00 00 84 12 00 00 00 00 00 00 00 00 00 00 c4 0f 00 00 47 05 00 00 | ........i...................G... |
152c0 | a3 07 00 00 06 11 00 00 00 00 00 00 0f 07 00 00 29 0b 00 00 70 03 00 00 00 00 00 00 1e 04 00 00 | ................)...p........... |
152e0 | f9 07 00 00 00 00 00 00 e2 0e 00 00 a2 0d 00 00 4d 06 00 00 00 00 00 00 81 04 00 00 00 00 00 00 | ................M............... |
15300 | 00 00 00 00 48 02 00 00 3a 06 00 00 00 00 00 00 bd 06 00 00 00 00 00 00 1c 05 00 00 00 00 00 00 | ....H...:....................... |
15320 | cf 0d 00 00 f0 04 00 00 c1 06 00 00 cb 12 00 00 3e 13 00 00 00 00 00 00 80 0f 00 00 d7 08 00 00 | ................>............... |
15340 | 5b 00 00 00 8c 00 00 00 00 00 00 00 c4 01 00 00 f5 10 00 00 96 12 00 00 7c 0e 00 00 19 07 00 00 | [.......................|....... |
15360 | 24 09 00 00 00 00 00 00 00 00 00 00 ae 12 00 00 b8 12 00 00 00 00 00 00 f0 12 00 00 00 00 00 00 | $............................... |
15380 | e1 0f 00 00 32 05 00 00 00 00 00 00 00 00 00 00 a9 0a 00 00 00 00 00 00 78 05 00 00 de 04 00 00 | ....2...................x....... |
153a0 | 00 00 00 00 68 10 00 00 cd 0a 00 00 23 13 00 00 cb 0f 00 00 76 01 00 00 81 11 00 00 3c 0e 00 00 | ....h.......#.......v.......<... |
153c0 | 3d 00 00 00 67 0d 00 00 94 0e 00 00 12 0b 00 00 00 00 00 00 ac 04 00 00 fe 09 00 00 92 13 00 00 | =...g........................... |
153e0 | dc 12 00 00 25 0b 00 00 7d 02 00 00 cf 12 00 00 11 09 00 00 00 00 00 00 4a 07 00 00 41 07 00 00 | ....%...}...............J...A... |
15400 | 00 00 00 00 d0 0e 00 00 d2 0a 00 00 00 00 00 00 b6 05 00 00 2c 04 00 00 00 00 00 00 00 00 00 00 | ....................,........... |
15420 | 00 00 00 00 00 00 00 00 00 00 00 00 8a 00 00 00 20 06 00 00 36 00 00 00 33 0c 00 00 34 12 00 00 | ....................6...3...4... |
15440 | dd 11 00 00 00 00 00 00 66 03 00 00 d6 09 00 00 c0 0b 00 00 00 00 00 00 00 00 00 00 f1 01 00 00 | ........f....................... |
15460 | 00 00 00 00 06 05 00 00 4f 08 00 00 47 0c 00 00 a5 0a 00 00 9f 10 00 00 fb 0f 00 00 00 00 00 00 | ........O...G................... |
15480 | 00 00 00 00 16 08 00 00 00 00 00 00 0f 00 00 00 42 10 00 00 b7 11 00 00 0e 10 00 00 00 00 00 00 | ................B............... |
154a0 | f4 06 00 00 cd 12 00 00 00 00 00 00 3d 04 00 00 d7 01 00 00 b2 13 00 00 f8 0f 00 00 de 03 00 00 | ............=................... |
154c0 | 77 01 00 00 7f 0d 00 00 b5 07 00 00 b8 02 00 00 db 06 00 00 52 02 00 00 11 10 00 00 b5 11 00 00 | w...................R........... |
154e0 | a9 11 00 00 a0 0b 00 00 cd 0c 00 00 60 11 00 00 17 0d 00 00 00 00 00 00 00 00 00 00 f1 12 00 00 | ............`................... |
15500 | 00 00 00 00 10 0a 00 00 75 07 00 00 00 00 00 00 00 00 00 00 e5 04 00 00 00 00 00 00 f1 04 00 00 | ........u....................... |
15520 | 00 00 00 00 82 09 00 00 5e 0f 00 00 c6 10 00 00 00 00 00 00 80 02 00 00 c4 0a 00 00 c3 01 00 00 | ........^....................... |
15540 | 6a 05 00 00 30 06 00 00 5a 06 00 00 ca 08 00 00 9f 0f 00 00 ee 10 00 00 6f 0c 00 00 52 01 00 00 | j...0...Z...............o...R... |
15560 | 3d 11 00 00 00 00 00 00 a4 0e 00 00 12 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c6 04 00 00 | =............................... |
15580 | 63 09 00 00 6d 02 00 00 8a 02 00 00 00 00 00 00 fe 0f 00 00 ba 01 00 00 00 00 00 00 df 00 00 00 | c...m........................... |
155a0 | a7 0c 00 00 cb 0b 00 00 71 01 00 00 73 07 00 00 30 0a 00 00 eb 07 00 00 66 0c 00 00 ce 12 00 00 | ........q...s...0.......f....... |
155c0 | 00 00 00 00 03 0c 00 00 ce 00 00 00 f1 0d 00 00 1f 09 00 00 44 02 00 00 53 12 00 00 1a 06 00 00 | ....................D...S....... |
155e0 | af 0f 00 00 00 00 00 00 73 11 00 00 00 00 00 00 5f 11 00 00 53 0f 00 00 65 0a 00 00 e3 0c 00 00 | ........s......._...S...e....... |
15600 | ed 0c 00 00 82 0e 00 00 8f 09 00 00 4b 00 00 00 a0 05 00 00 00 10 00 00 00 00 00 00 00 12 00 00 | ............K................... |
15620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 03 00 00 c7 0e 00 00 50 05 00 00 f3 02 00 00 | ................?.......P....... |
15640 | 54 0e 00 00 af 05 00 00 05 02 00 00 a4 01 00 00 8c 03 00 00 27 10 00 00 64 05 00 00 9f 0a 00 00 | T...................'...d....... |
15660 | 12 04 00 00 00 00 00 00 4e 02 00 00 74 02 00 00 62 05 00 00 35 03 00 00 00 00 00 00 00 08 00 00 | ........N...t...b...5........... |
15680 | 3a 10 00 00 86 05 00 00 b6 06 00 00 00 00 00 00 00 00 00 00 da 0a 00 00 46 00 00 00 00 00 00 00 | :.......................F....... |
156a0 | 71 04 00 00 f8 05 00 00 04 02 00 00 f6 03 00 00 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | q............................... |
156c0 | 73 0b 00 00 7b 01 00 00 00 00 00 00 5d 0e 00 00 84 0e 00 00 8d 06 00 00 ea 06 00 00 f8 10 00 00 | s...{.......]................... |
156e0 | 00 00 00 00 2a 02 00 00 cf 02 00 00 b2 00 00 00 00 00 00 00 00 00 00 00 49 03 00 00 1f 10 00 00 | ....*...................I....... |
15700 | a7 07 00 00 60 0f 00 00 f9 0e 00 00 ad 10 00 00 84 10 00 00 00 00 00 00 00 00 00 00 4d 10 00 00 | ....`.......................M... |
15720 | 00 00 00 00 af 01 00 00 cf 00 00 00 00 00 00 00 60 07 00 00 68 00 00 00 00 00 00 00 e7 01 00 00 | ................`...h........... |
15740 | 00 00 00 00 61 0c 00 00 98 10 00 00 84 00 00 00 a7 08 00 00 00 00 00 00 00 00 00 00 d1 13 00 00 | ....a........................... |
15760 | e6 04 00 00 31 09 00 00 1d 12 00 00 45 0a 00 00 e7 03 00 00 00 00 00 00 27 0d 00 00 d1 07 00 00 | ....1.......E...........'....... |
15780 | 23 0a 00 00 00 00 00 00 a6 0d 00 00 00 09 00 00 fd 0f 00 00 0d 0b 00 00 91 12 00 00 2d 03 00 00 | #...........................-... |
157a0 | 00 00 00 00 65 08 00 00 50 03 00 00 00 00 00 00 0c 0c 00 00 a0 13 00 00 8c 13 00 00 d7 06 00 00 | ....e...P....................... |
157c0 | 4f 04 00 00 f5 11 00 00 00 00 00 00 c7 10 00 00 d0 02 00 00 00 00 00 00 5b 04 00 00 00 00 00 00 | O.......................[....... |
157e0 | d8 11 00 00 a0 11 00 00 ec 12 00 00 00 00 00 00 2b 0d 00 00 76 10 00 00 00 00 00 00 00 00 00 00 | ................+...v........... |
15800 | a8 12 00 00 a3 0e 00 00 6c 0f 00 00 00 00 00 00 10 06 00 00 ff 02 00 00 00 00 00 00 5f 00 00 00 | ........l..................._... |
15820 | 9b 0b 00 00 53 07 00 00 7b 11 00 00 92 10 00 00 93 09 00 00 00 00 00 00 54 0b 00 00 8c 0f 00 00 | ....S...{...............T....... |
15840 | 38 07 00 00 3f 07 00 00 a7 0b 00 00 00 00 00 00 76 06 00 00 c2 0a 00 00 f3 0c 00 00 00 00 00 00 | 8...?...........v............... |
15860 | 9f 0d 00 00 cf 05 00 00 25 00 00 00 6c 04 00 00 b1 13 00 00 c9 03 00 00 f6 10 00 00 00 00 00 00 | ........%...l................... |
15880 | 00 00 00 00 cf 03 00 00 30 01 00 00 73 01 00 00 29 03 00 00 1c 13 00 00 4e 01 00 00 a6 00 00 00 | ........0...s...).......N....... |
158a0 | 14 05 00 00 39 00 00 00 85 13 00 00 00 00 00 00 b1 04 00 00 00 00 00 00 a7 09 00 00 00 00 00 00 | ....9........................... |
158c0 | c0 0a 00 00 a5 09 00 00 83 03 00 00 87 10 00 00 00 00 00 00 e9 09 00 00 77 04 00 00 00 00 00 00 | ........................w....... |
158e0 | 17 01 00 00 61 09 00 00 41 05 00 00 db 02 00 00 00 00 00 00 45 0c 00 00 00 00 00 00 00 00 00 00 | ....a...A...........E........... |
15900 | 00 00 00 00 89 0c 00 00 dc 0c 00 00 00 00 00 00 1d 08 00 00 f5 04 00 00 00 00 00 00 b6 0a 00 00 | ................................ |
15920 | 62 0b 00 00 00 00 00 00 54 0f 00 00 2d 0e 00 00 0b 0a 00 00 e8 05 00 00 10 0e 00 00 dc 13 00 00 | b.......T...-................... |
15940 | 3a 13 00 00 a1 05 00 00 dd 08 00 00 6d 12 00 00 53 0a 00 00 32 0f 00 00 00 00 00 00 e0 00 00 00 | :...........m...S...2........... |
15960 | b3 08 00 00 b6 0b 00 00 00 00 00 00 62 07 00 00 1d 0d 00 00 e8 03 00 00 8b 05 00 00 00 00 00 00 | ............b................... |
15980 | 00 00 00 00 67 0b 00 00 4d 03 00 00 f9 04 00 00 aa 01 00 00 00 00 00 00 55 0c 00 00 e1 00 00 00 | ....g...M...............U....... |
159a0 | 00 00 00 00 34 08 00 00 a6 0a 00 00 c0 0f 00 00 51 0b 00 00 00 00 00 00 02 10 00 00 2c 02 00 00 | ....4...........Q...........,... |
159c0 | 02 00 00 00 2e 05 00 00 2c 0d 00 00 9e 05 00 00 00 00 00 00 26 08 00 00 e9 05 00 00 00 00 00 00 | ........,...........&........... |
159e0 | f1 0f 00 00 eb 04 00 00 17 13 00 00 33 03 00 00 b5 0f 00 00 00 00 00 00 1c 0c 00 00 00 00 00 00 | ............3................... |
15a00 | cc 00 00 00 00 00 00 00 8c 10 00 00 3c 12 00 00 a0 0e 00 00 43 0e 00 00 13 11 00 00 84 13 00 00 | ............<.......C........... |
15a20 | 73 08 00 00 cb 0d 00 00 00 00 00 00 68 13 00 00 00 00 00 00 f6 08 00 00 5e 03 00 00 ba 11 00 00 | s...........h...........^....... |
15a40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 0a 00 00 84 04 00 00 58 08 00 00 99 00 00 00 | ........................X....... |
15a60 | be 06 00 00 73 0c 00 00 08 05 00 00 2b 13 00 00 af 0e 00 00 1e 05 00 00 00 00 00 00 fc 08 00 00 | ....s.......+................... |
15a80 | ef 0c 00 00 9f 01 00 00 21 10 00 00 f2 0c 00 00 a2 00 00 00 8c 07 00 00 88 01 00 00 a3 00 00 00 | ........!....................... |
15aa0 | 01 02 00 00 e2 0a 00 00 2e 01 00 00 00 00 00 00 a8 13 00 00 00 00 00 00 2e 13 00 00 bc 0a 00 00 | ................................ |
15ac0 | 28 11 00 00 db 04 00 00 da 0b 00 00 8d 12 00 00 0c 02 00 00 7d 03 00 00 4f 01 00 00 1e 07 00 00 | (...................}...O....... |
15ae0 | 75 10 00 00 48 0a 00 00 78 06 00 00 00 00 00 00 e6 0b 00 00 cc 03 00 00 d4 01 00 00 39 09 00 00 | u...H...x...................9... |
15b00 | d9 04 00 00 e0 0b 00 00 dd 0c 00 00 e3 0e 00 00 74 03 00 00 00 00 00 00 c2 03 00 00 49 0d 00 00 | ................t...........I... |
15b20 | 93 0c 00 00 05 00 00 00 b8 0c 00 00 a1 0c 00 00 a4 0d 00 00 75 01 00 00 1b 06 00 00 55 07 00 00 | ....................u.......U... |
15b40 | 1c 12 00 00 00 00 00 00 28 00 00 00 00 00 00 00 c1 02 00 00 1e 01 00 00 75 04 00 00 67 05 00 00 | ........(...............u...g... |
15b60 | df 03 00 00 60 02 00 00 62 0c 00 00 14 0a 00 00 18 0d 00 00 69 04 00 00 69 02 00 00 00 00 00 00 | ....`...b...........i...i....... |
15b80 | 00 00 00 00 98 12 00 00 8b 00 00 00 bb 04 00 00 6c 13 00 00 ab 01 00 00 0a 0a 00 00 67 04 00 00 | ................l...........g... |
15ba0 | 0f 08 00 00 65 12 00 00 00 00 00 00 00 00 00 00 4f 12 00 00 a1 12 00 00 1b 11 00 00 0b 06 00 00 | ....e...........O............... |
15bc0 | 00 00 00 00 a7 13 00 00 26 09 00 00 3d 0d 00 00 00 00 00 00 05 01 00 00 00 00 00 00 00 00 00 00 | ........&...=................... |
15be0 | 48 08 00 00 00 00 00 00 68 09 00 00 fd 02 00 00 c1 13 00 00 00 00 00 00 26 0c 00 00 25 02 00 00 | H.......h...............&...%... |
15c00 | 30 13 00 00 23 0c 00 00 00 00 00 00 9c 03 00 00 0e 02 00 00 e1 0e 00 00 c2 11 00 00 51 03 00 00 | 0...#.......................Q... |
15c20 | 00 00 00 00 cb 0e 00 00 0d 10 00 00 d4 04 00 00 c9 11 00 00 39 0f 00 00 ba 02 00 00 58 00 00 00 | ....................9.......X... |
15c40 | 61 04 00 00 f6 02 00 00 4d 04 00 00 bd 09 00 00 e2 00 00 00 a8 0c 00 00 79 11 00 00 99 10 00 00 | a.......M...............y....... |
15c60 | df 07 00 00 11 03 00 00 22 0d 00 00 f2 05 00 00 ff 11 00 00 e7 07 00 00 00 00 00 00 44 00 00 00 | ........"...................D... |
15c80 | 89 0a 00 00 00 00 00 00 00 00 00 00 13 04 00 00 ad 00 00 00 36 02 00 00 30 04 00 00 00 00 00 00 | ....................6...0....... |
15ca0 | 7b 03 00 00 80 12 00 00 7c 0f 00 00 eb 08 00 00 bc 02 00 00 00 00 00 00 d1 00 00 00 74 05 00 00 | {.......|...................t... |
15cc0 | c7 00 00 00 e6 11 00 00 00 00 00 00 b9 02 00 00 a6 0b 00 00 4a 01 00 00 00 00 00 00 70 02 00 00 | ....................J.......p... |
15ce0 | 5e 11 00 00 49 08 00 00 77 12 00 00 25 10 00 00 e0 11 00 00 00 00 00 00 c8 12 00 00 c4 00 00 00 | ^...I...w...%................... |
15d00 | dc 02 00 00 a5 02 00 00 d2 01 00 00 a7 02 00 00 a6 06 00 00 00 00 00 00 86 04 00 00 3d 0c 00 00 | ............................=... |
15d20 | bc 10 00 00 e9 02 00 00 0d 0a 00 00 29 04 00 00 ec 0d 00 00 6f 09 00 00 d0 12 00 00 00 00 00 00 | ............).......o........... |
15d40 | b6 11 00 00 a2 02 00 00 a3 02 00 00 a4 02 00 00 0e 03 00 00 c7 0c 00 00 8d 05 00 00 68 0a 00 00 | ............................h... |
15d60 | b8 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 12 00 00 c6 0a 00 00 7a 0b 00 00 76 00 00 00 | ........................z...v... |
15d80 | 7a 0e 00 00 9f 02 00 00 a0 02 00 00 a1 02 00 00 93 07 00 00 14 10 00 00 40 0a 00 00 f5 05 00 00 | z.......................@....... |
15da0 | a1 04 00 00 f5 00 00 00 27 08 00 00 00 00 00 00 8a 07 00 00 36 0c 00 00 5a 13 00 00 20 0a 00 00 | ........'...........6...Z....... |
15dc0 | a8 0f 00 00 9c 02 00 00 9d 02 00 00 9e 02 00 00 00 00 00 00 00 00 00 00 3d 12 00 00 7e 10 00 00 | ........................=...~... |
15de0 | 26 0f 00 00 0e 0c 00 00 c1 07 00 00 7d 0d 00 00 00 00 00 00 3e 09 00 00 2a 09 00 00 b4 0f 00 00 | &...........}.......>...*....... |
15e00 | 51 12 00 00 00 00 00 00 25 08 00 00 22 05 00 00 00 00 00 00 7d 0a 00 00 60 0d 00 00 1e 13 00 00 | Q.......%...".......}...`....... |
15e20 | 17 11 00 00 20 0e 00 00 37 04 00 00 ee 03 00 00 00 00 00 00 00 00 00 00 81 09 00 00 0a 09 00 00 | ........7....................... |
15e40 | 85 08 00 00 8e 08 00 00 52 0f 00 00 f2 11 00 00 2a 12 00 00 f7 0a 00 00 b1 0b 00 00 00 00 00 00 | ........R.......*............... |
15e60 | 00 00 00 00 00 00 00 00 22 11 00 00 c8 04 00 00 e2 11 00 00 89 11 00 00 a8 0a 00 00 32 00 00 00 | ........"...................2... |
15e80 | 3b 04 00 00 0c 09 00 00 18 06 00 00 00 00 00 00 9e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ;............................... |
15ea0 | 00 00 00 00 8c 0e 00 00 5e 13 00 00 65 0b 00 00 c0 10 00 00 27 01 00 00 51 07 00 00 00 00 00 00 | ........^...e.......'...Q....... |
15ec0 | b1 07 00 00 00 00 00 00 a5 11 00 00 b2 03 00 00 aa 0e 00 00 6e 02 00 00 f2 10 00 00 71 02 00 00 | ....................n.......q... |
15ee0 | 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 6a 07 00 00 b9 0a 00 00 80 08 00 00 d2 0c 00 00 | ................j............... |
15f00 | 00 00 00 00 00 00 00 00 6d 06 00 00 00 00 00 00 00 00 00 00 36 0a 00 00 86 13 00 00 fb 04 00 00 | ........m...........6........... |
15f20 | 00 00 00 00 9e 0f 00 00 00 00 00 00 1b 13 00 00 00 00 00 00 42 0b 00 00 32 04 00 00 8d 0b 00 00 | ....................B...2....... |
15f40 | 51 13 00 00 00 00 00 00 00 00 00 00 67 11 00 00 00 00 00 00 b1 10 00 00 c2 0b 00 00 00 00 00 00 | Q...........g................... |
15f60 | 39 05 00 00 8f 02 00 00 aa 04 00 00 8e 0d 00 00 1b 0b 00 00 41 00 00 00 0d 0c 00 00 bb 06 00 00 | 9...................A........... |
15f80 | af 0a 00 00 d1 02 00 00 00 00 00 00 86 00 00 00 eb 0f 00 00 67 0e 00 00 ae 07 00 00 00 00 00 00 | ....................g........... |
15fa0 | 18 03 00 00 17 09 00 00 b0 11 00 00 14 13 00 00 e0 0c 00 00 c2 07 00 00 00 00 00 00 ee 01 00 00 | ................................ |
15fc0 | 0b 0d 00 00 94 02 00 00 00 00 00 00 13 00 00 00 51 04 00 00 c2 01 00 00 00 00 00 00 0f 09 00 00 | ................Q............... |
15fe0 | ae 04 00 00 37 09 00 00 a9 04 00 00 28 06 00 00 cf 13 00 00 3a 00 00 00 fd 0e 00 00 00 00 00 00 | ....7.......(.......:........... |
16000 | 70 01 00 00 30 09 00 00 82 00 00 00 00 00 00 00 e3 00 00 00 cf 09 00 00 38 12 00 00 fe 0b 00 00 | p...0...................8....... |
16020 | 00 00 00 00 aa 06 00 00 55 08 00 00 22 0b 00 00 72 0a 00 00 7d 12 00 00 40 0c 00 00 87 11 00 00 | ........U..."...r...}...@....... |
16040 | ef 08 00 00 04 12 00 00 00 00 00 00 74 08 00 00 e4 00 00 00 57 02 00 00 11 11 00 00 ac 03 00 00 | ............t.......W........... |
16060 | 00 00 00 00 fa 10 00 00 e5 01 00 00 d2 11 00 00 ad 12 00 00 00 00 00 00 07 02 00 00 22 06 00 00 | ............................"... |
16080 | be 01 00 00 1f 0b 00 00 14 0f 00 00 84 02 00 00 81 0b 00 00 07 0b 00 00 00 00 00 00 08 09 00 00 | ................................ |
160a0 | 00 00 00 00 e8 0a 00 00 6a 00 00 00 90 02 00 00 9d 05 00 00 99 11 00 00 00 00 00 00 c9 02 00 00 | ........j....................... |
160c0 | 3b 12 00 00 45 09 00 00 dc 0d 00 00 00 00 00 00 00 00 00 00 83 0a 00 00 00 00 00 00 8f 00 00 00 | ;...E........................... |
160e0 | 0c 11 00 00 82 13 00 00 d9 0a 00 00 67 13 00 00 8f 10 00 00 61 00 00 00 8f 0c 00 00 17 08 00 00 | ............g.......a........... |
16100 | 20 00 00 00 00 00 00 00 2b 0a 00 00 00 00 00 00 9e 01 00 00 58 04 00 00 a3 0d 00 00 f8 0d 00 00 | ........+...........X........... |
16120 | 00 00 00 00 d9 06 00 00 71 0e 00 00 6e 0c 00 00 00 00 00 00 00 00 00 00 39 04 00 00 cd 08 00 00 | ........q...n...........9....... |
16140 | 00 00 00 00 00 00 00 00 00 00 00 00 76 0d 00 00 00 00 00 00 2d 11 00 00 6e 0b 00 00 5f 04 00 00 | ............v.......-...n..._... |
16160 | 00 00 00 00 f6 00 00 00 b0 0b 00 00 25 0c 00 00 d6 12 00 00 40 05 00 00 00 00 00 00 77 00 00 00 | ............%.......@.......w... |
16180 | 58 0e 00 00 73 0e 00 00 59 01 00 00 d0 11 00 00 00 00 00 00 38 13 00 00 00 00 00 00 95 11 00 00 | X...s...Y...........8........... |
161a0 | 87 05 00 00 33 00 00 00 44 03 00 00 00 00 00 00 f4 12 00 00 99 0d 00 00 ee 09 00 00 00 00 00 00 | ....3...D....................... |
161c0 | e6 0f 00 00 ba 12 00 00 7b 00 00 00 00 00 00 00 1f 08 00 00 00 00 00 00 71 09 00 00 00 00 00 00 | ........{...............q....... |
161e0 | 67 0a 00 00 7a 05 00 00 f4 07 00 00 97 08 00 00 92 0a 00 00 cb 0a 00 00 95 0a 00 00 45 08 00 00 | g...z.......................E... |
16200 | 66 0b 00 00 b9 04 00 00 7c 0c 00 00 57 08 00 00 d5 01 00 00 00 00 00 00 9b 11 00 00 81 01 00 00 | f.......|...W................... |
16220 | 00 00 00 00 c6 13 00 00 26 10 00 00 37 02 00 00 95 13 00 00 00 00 00 00 29 05 00 00 35 11 00 00 | ........&...7...........)...5... |
16240 | 30 0c 00 00 e0 02 00 00 38 0e 00 00 5b 0b 00 00 98 0f 00 00 cf 0b 00 00 cb 04 00 00 62 08 00 00 | 0.......8...[...............b... |
16260 | cd 02 00 00 00 00 00 00 57 01 00 00 00 00 00 00 13 07 00 00 c1 0b 00 00 00 00 00 00 cd 0e 00 00 | ........W....................... |
16280 | 00 00 00 00 dc 04 00 00 e3 02 00 00 00 00 00 00 00 00 00 00 d6 0c 00 00 00 00 00 00 b6 0d 00 00 | ................................ |
162a0 | 8d 00 00 00 02 12 00 00 00 00 00 00 00 00 00 00 ca 01 00 00 62 04 00 00 00 00 00 00 2a 00 00 00 | ....................b.......*... |
162c0 | 5c 12 00 00 00 00 00 00 a2 13 00 00 45 05 00 00 6a 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | \...........E...j............... |
162e0 | 92 0d 00 00 33 13 00 00 00 00 00 00 66 0e 00 00 91 0d 00 00 c1 0e 00 00 f4 0f 00 00 2f 10 00 00 | ....3.......f.............../... |
16300 | 35 0f 00 00 d7 0c 00 00 aa 07 00 00 be 11 00 00 64 0d 00 00 a1 0a 00 00 00 00 00 00 00 00 00 00 | 5...............d............... |
16320 | 0f 0c 00 00 42 0c 00 00 b0 06 00 00 3a 07 00 00 00 00 00 00 5f 07 00 00 00 00 00 00 10 08 00 00 | ....B.......:......._........... |
16340 | 00 00 00 00 ec 06 00 00 00 00 00 00 d1 0e 00 00 5a 11 00 00 e7 0c 00 00 44 0d 00 00 00 00 00 00 | ................Z.......D....... |
16360 | 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 63 0e 00 00 00 00 00 00 0a 0c 00 00 5a 10 00 00 | ................c...........Z... |
16380 | 00 00 00 00 43 0c 00 00 01 0a 00 00 70 0c 00 00 00 00 00 00 00 00 00 00 4c 08 00 00 53 0d 00 00 | ....C.......p...........L...S... |
163a0 | aa 08 00 00 aa 00 00 00 00 00 00 00 71 08 00 00 87 0b 00 00 3c 0b 00 00 d8 00 00 00 9e 0a 00 00 | ............q.......<........... |
163c0 | 74 11 00 00 b5 0d 00 00 00 00 00 00 00 00 00 00 10 11 00 00 07 0a 00 00 00 00 00 00 77 05 00 00 | t...........................w... |
163e0 | 00 00 00 00 eb 09 00 00 57 07 00 00 00 00 00 00 78 12 00 00 49 0a 00 00 a3 03 00 00 9c 00 00 00 | ........W.......x...I........... |
16400 | 00 00 00 00 00 00 00 00 c6 08 00 00 7f 0b 00 00 17 0a 00 00 02 0f 00 00 ea 05 00 00 bd 05 00 00 | ................................ |
16420 | ed 02 00 00 00 00 00 00 1e 06 00 00 00 00 00 00 00 00 00 00 77 0b 00 00 5b 07 00 00 d0 13 00 00 | ....................w...[....... |
16440 | 2a 07 00 00 ae 00 00 00 b0 0a 00 00 fc 10 00 00 1a 04 00 00 db 01 00 00 00 00 00 00 66 13 00 00 | *...........................f... |
16460 | aa 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 11 00 00 00 00 00 00 4c 0a 00 00 22 09 00 00 | ........................L..."... |
16480 | 2e 00 00 00 00 00 00 00 31 0a 00 00 4d 0b 00 00 00 00 00 00 00 00 00 00 f9 08 00 00 59 0a 00 00 | ........1...M...............Y... |
164a0 | 00 00 00 00 1e 11 00 00 00 00 00 00 83 12 00 00 10 0c 00 00 4b 0a 00 00 6a 03 00 00 85 0c 00 00 | ....................K...j....... |
164c0 | 39 0d 00 00 14 03 00 00 a2 06 00 00 da 04 00 00 9d 12 00 00 e5 11 00 00 00 00 00 00 00 00 00 00 | 9............................... |
164e0 | 00 00 00 00 00 00 00 00 00 00 00 00 8a 03 00 00 26 02 00 00 3e 0d 00 00 88 11 00 00 00 00 00 00 | ................&...>........... |
16500 | ff 08 00 00 00 00 00 00 00 00 00 00 1c 0d 00 00 78 00 00 00 c5 02 00 00 a3 05 00 00 5e 0e 00 00 | ................x...........^... |
16520 | 3b 10 00 00 00 00 00 00 00 00 00 00 42 03 00 00 4f 0a 00 00 c9 00 00 00 34 09 00 00 00 00 00 00 | ;...........B...O.......4....... |
16540 | 00 00 00 00 00 00 00 00 ad 11 00 00 c2 0f 00 00 2e 06 00 00 3f 11 00 00 cd 03 00 00 ce 0e 00 00 | ....................?........... |
16560 | 00 00 00 00 b7 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 13 00 00 | ............................%... |
16580 | 00 00 00 00 18 0b 00 00 2e 0f 00 00 00 00 00 00 b2 0e 00 00 00 00 00 00 ad 03 00 00 c3 08 00 00 | ................................ |
165a0 | 00 00 00 00 da 12 00 00 00 00 00 00 bc 12 00 00 a5 08 00 00 f8 0e 00 00 00 00 00 00 5c 0a 00 00 | ............................\... |
165c0 | ba 0f 00 00 40 09 00 00 00 00 00 00 00 00 00 00 26 03 00 00 00 00 00 00 00 00 00 00 c1 08 00 00 | ....@...........&............... |
165e0 | 0b 0f 00 00 70 0d 00 00 ff 10 00 00 92 04 00 00 00 00 00 00 00 00 00 00 93 0f 00 00 b5 06 00 00 | ....p........................... |
16600 | d1 05 00 00 d1 01 00 00 00 00 00 00 06 0d 00 00 45 0e 00 00 19 0f 00 00 b4 0e 00 00 00 00 00 00 | ................E............... |
16620 | 9f 0e 00 00 00 00 00 00 55 0f 00 00 00 00 00 00 ee 0f 00 00 06 01 00 00 2a 13 00 00 00 00 00 00 | ........U...............*....... |
16640 | 00 00 00 00 00 00 00 00 28 02 00 00 98 0e 00 00 dc 00 00 00 e4 08 00 00 91 10 00 00 20 10 00 00 | ........(....................... |
16660 | cb 01 00 00 d4 0a 00 00 00 00 00 00 1a 03 00 00 96 00 00 00 d5 11 00 00 1d 00 00 00 57 0f 00 00 | ............................W... |
16680 | 00 00 00 00 00 00 00 00 de 10 00 00 07 0d 00 00 fa 04 00 00 92 01 00 00 44 0b 00 00 9e 0d 00 00 | ........................D....... |
166a0 | ce 03 00 00 00 00 00 00 fe 11 00 00 00 00 00 00 00 00 00 00 c5 00 00 00 32 0d 00 00 8e 01 00 00 | ........................2....... |
166c0 | dd 09 00 00 d6 13 00 00 65 11 00 00 00 00 00 00 00 00 00 00 4f 02 00 00 90 0c 00 00 00 00 00 00 | ........e...........O........... |
166e0 | 8a 12 00 00 2a 11 00 00 ef 0a 00 00 21 13 00 00 c7 0b 00 00 a4 11 00 00 57 0b 00 00 00 00 00 00 | ....*.......!...........W....... |
16700 | 00 00 00 00 a7 01 00 00 00 00 00 00 6e 09 00 00 63 01 00 00 ae 0c 00 00 00 00 00 00 62 00 00 00 | ............n...c...........b... |
16720 | 7f 0a 00 00 d7 0e 00 00 44 0f 00 00 8f 0d 00 00 7a 10 00 00 cf 11 00 00 68 0c 00 00 f1 0a 00 00 | ........D.......z.......h....... |
16740 | b2 04 00 00 e2 05 00 00 00 00 00 00 15 03 00 00 1a 0d 00 00 c1 0d 00 00 89 12 00 00 00 00 00 00 | ................................ |
16760 | fa 08 00 00 00 00 00 00 a9 0e 00 00 00 00 00 00 00 00 00 00 6c 02 00 00 9c 08 00 00 d6 00 00 00 | ....................l........... |
16780 | 00 00 00 00 e8 0e 00 00 c9 04 00 00 34 0f 00 00 53 01 00 00 35 0d 00 00 1e 0d 00 00 67 02 00 00 | ............4...S...5.......g... |
167a0 | 00 00 00 00 fd 01 00 00 91 08 00 00 3f 01 00 00 99 13 00 00 39 03 00 00 02 0c 00 00 1b 04 00 00 | ............?.......9........... |
167c0 | 5c 05 00 00 37 05 00 00 62 02 00 00 b6 08 00 00 04 00 00 00 00 00 00 00 d2 05 00 00 00 00 00 00 | \...7...b....................... |
167e0 | 4f 0b 00 00 00 00 00 00 6f 0e 00 00 00 00 00 00 2c 12 00 00 00 00 00 00 c2 0d 00 00 3c 11 00 00 | O.......o.......,...........<... |
16800 | be 0f 00 00 00 00 00 00 a0 0a 00 00 09 12 00 00 00 00 00 00 28 01 00 00 76 12 00 00 00 00 00 00 | ....................(...v....... |
16820 | 83 08 00 00 33 0d 00 00 28 07 00 00 23 10 00 00 5f 0b 00 00 ab 12 00 00 00 00 00 00 00 00 00 00 | ....3...(...#..._............... |
16840 | 68 12 00 00 50 07 00 00 00 00 00 00 1a 11 00 00 79 10 00 00 23 04 00 00 00 00 00 00 a8 05 00 00 | h...P...........y...#........... |
16860 | 3e 04 00 00 e2 0f 00 00 a2 0b 00 00 49 07 00 00 00 00 00 00 ab 13 00 00 f5 0e 00 00 a2 05 00 00 | >...........I................... |
16880 | fc 06 00 00 90 11 00 00 00 00 00 00 e8 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 0c 00 00 | ................................ |
168a0 | cd 0d 00 00 00 00 00 00 bd 12 00 00 03 13 00 00 c5 07 00 00 84 09 00 00 ed 0e 00 00 19 09 00 00 | ................................ |
168c0 | 79 0b 00 00 00 00 00 00 ff 0d 00 00 19 03 00 00 44 0c 00 00 00 00 00 00 90 01 00 00 4a 04 00 00 | y...............D...........J... |
168e0 | 00 00 00 00 7c 13 00 00 00 00 00 00 de 08 00 00 00 00 00 00 00 00 00 00 fc 04 00 00 47 0e 00 00 | ....|.......................G... |
16900 | 9a 00 00 00 00 00 00 00 f4 0c 00 00 d6 04 00 00 4d 02 00 00 20 03 00 00 85 07 00 00 00 00 00 00 | ................M............... |
16920 | 2b 04 00 00 00 00 00 00 0c 0a 00 00 87 00 00 00 00 00 00 00 71 0b 00 00 00 00 00 00 00 00 00 00 | +...................q........... |
16940 | 00 00 00 00 a1 09 00 00 60 04 00 00 00 00 00 00 22 12 00 00 00 00 00 00 5f 0a 00 00 1a 0a 00 00 | ........`......."......._....... |
16960 | 52 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 56 01 00 00 ab 05 00 00 | R.......................V....... |
16980 | 26 01 00 00 95 01 00 00 75 00 00 00 14 0d 00 00 7d 0c 00 00 7f 11 00 00 7b 0f 00 00 0c 0f 00 00 | &.......u.......}.......{....... |
169a0 | 00 00 00 00 56 02 00 00 00 00 00 00 f3 0d 00 00 00 00 00 00 00 00 00 00 6a 10 00 00 98 05 00 00 | ....V...................j....... |
169c0 | 00 00 00 00 d0 0c 00 00 00 00 00 00 6d 0e 00 00 00 00 00 00 5a 09 00 00 7d 06 00 00 00 00 00 00 | ............m.......Z...}....... |
169e0 | 88 06 00 00 27 03 00 00 3e 11 00 00 ed 00 00 00 b9 00 00 00 3d 0f 00 00 b9 12 00 00 00 00 00 00 | ....'...>...........=........... |
16a00 | 00 00 00 00 72 03 00 00 00 00 00 00 87 09 00 00 00 00 00 00 c6 12 00 00 1c 11 00 00 4b 02 00 00 | ....r.......................K... |
16a20 | 76 13 00 00 2a 0b 00 00 61 0a 00 00 f0 0a 00 00 9a 06 00 00 f0 10 00 00 1a 09 00 00 00 00 00 00 | v...*...a....................... |
16a40 | 00 00 00 00 56 11 00 00 fe 05 00 00 0c 0b 00 00 5a 03 00 00 68 11 00 00 3d 02 00 00 00 0d 00 00 | ....V...........Z...h...=....... |
16a60 | 54 12 00 00 46 02 00 00 24 10 00 00 3a 01 00 00 00 00 00 00 6a 0b 00 00 b4 13 00 00 00 00 00 00 | T...F...$...:.......j........... |
16a80 | ef 0d 00 00 a4 12 00 00 3c 00 00 00 4d 05 00 00 53 02 00 00 27 0c 00 00 4d 08 00 00 00 00 00 00 | ........<...M...S...'...M....... |
16aa0 | 00 00 00 00 00 00 00 00 34 06 00 00 f4 0a 00 00 db 10 00 00 e8 12 00 00 f2 0e 00 00 00 00 00 00 | ........4....................... |
16ac0 | 13 0e 00 00 27 06 00 00 db 0a 00 00 3c 04 00 00 78 0e 00 00 d2 08 00 00 c7 06 00 00 00 00 00 00 | ....'.......<...x............... |
16ae0 | 47 12 00 00 00 00 00 00 52 05 00 00 00 00 00 00 f1 07 00 00 13 0f 00 00 00 00 00 00 00 00 00 00 | G.......R....................... |
16b00 | 00 00 00 00 00 00 00 00 dd 04 00 00 00 00 00 00 5f 06 00 00 89 03 00 00 00 00 00 00 c4 03 00 00 | ................_............... |
16b20 | 97 06 00 00 a0 0c 00 00 b2 05 00 00 6c 12 00 00 00 00 00 00 a8 04 00 00 00 00 00 00 00 00 00 00 | ............l................... |
16b40 | 4e 13 00 00 8e 12 00 00 59 11 00 00 41 0c 00 00 00 00 00 00 9f 0b 00 00 eb 0e 00 00 4c 0e 00 00 | N.......Y...A...............L... |
16b60 | 00 00 00 00 d1 04 00 00 63 04 00 00 96 0f 00 00 9f 07 00 00 f9 03 00 00 fd 11 00 00 ed 01 00 00 | ........c....................... |
16b80 | 67 08 00 00 6b 03 00 00 e7 04 00 00 83 0c 00 00 00 00 00 00 61 0e 00 00 00 00 00 00 7f 0f 00 00 | g...k...............a........... |
16ba0 | 23 11 00 00 c9 12 00 00 07 03 00 00 21 0d 00 00 00 00 00 00 50 0c 00 00 dd 10 00 00 00 00 00 00 | #...........!.......P........... |
16bc0 | 00 00 00 00 ef 00 00 00 3b 00 00 00 66 07 00 00 00 00 00 00 00 00 00 00 e7 08 00 00 8e 0b 00 00 | ........;...f................... |
16be0 | 00 00 00 00 7b 0a 00 00 4e 0b 00 00 00 00 00 00 ac 00 00 00 64 0c 00 00 29 11 00 00 1d 0e 00 00 | ....{...N...........d...)....... |
16c00 | 49 0b 00 00 d9 09 00 00 f8 12 00 00 1a 00 00 00 00 00 00 00 86 07 00 00 59 04 00 00 00 00 00 00 | I.......................Y....... |
16c20 | 00 00 00 00 00 00 00 00 1d 13 00 00 40 03 00 00 ae 10 00 00 54 10 00 00 24 08 00 00 ea 0d 00 00 | ............@.......T...$....... |
16c40 | 6d 0c 00 00 cb 07 00 00 8e 13 00 00 c3 06 00 00 04 07 00 00 00 00 00 00 89 05 00 00 00 00 00 00 | m............................... |
16c60 | f2 08 00 00 79 07 00 00 76 02 00 00 42 05 00 00 cc 05 00 00 cb 02 00 00 11 06 00 00 00 00 00 00 | ....y...v...B................... |
16c80 | b7 02 00 00 00 00 00 00 00 00 00 00 3e 10 00 00 70 11 00 00 00 00 00 00 fe 0d 00 00 14 02 00 00 | ............>...p............... |
16ca0 | 2f 13 00 00 2f 0e 00 00 5d 00 00 00 4a 0d 00 00 b0 0f 00 00 c9 06 00 00 00 00 00 00 75 13 00 00 | /.../...]...J...............u... |
16cc0 | fb 09 00 00 38 0b 00 00 f7 0b 00 00 4f 06 00 00 56 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....8.......O...V............... |
16ce0 | 00 00 00 00 9b 07 00 00 f4 01 00 00 cc 0f 00 00 48 05 00 00 d5 0a 00 00 6d 00 00 00 00 00 00 00 | ................H.......m....... |
16d00 | bb 0e 00 00 18 05 00 00 21 0e 00 00 00 00 00 00 80 01 00 00 e4 03 00 00 94 01 00 00 4c 07 00 00 | ........!...................L... |
16d20 | 5c 09 00 00 94 0b 00 00 00 00 00 00 ad 04 00 00 3e 0b 00 00 60 01 00 00 00 00 00 00 00 00 00 00 | \...............>...`........... |
16d40 | fd 09 00 00 34 13 00 00 9e 04 00 00 1f 03 00 00 f6 09 00 00 d0 0f 00 00 12 02 00 00 0f 0b 00 00 | ....4........................... |
16d60 | 16 05 00 00 83 13 00 00 fa 03 00 00 86 01 00 00 00 00 00 00 57 13 00 00 81 10 00 00 00 00 00 00 | ....................W........... |
16d80 | 29 12 00 00 b3 10 00 00 3d 05 00 00 00 00 00 00 4d 0e 00 00 b9 13 00 00 70 10 00 00 00 00 00 00 | ).......=.......M.......p....... |
16da0 | 5c 02 00 00 00 00 00 00 00 00 00 00 21 05 00 00 fa 0e 00 00 00 00 00 00 75 0c 00 00 00 00 00 00 | \...........!...........u....... |
16dc0 | f6 0f 00 00 f3 04 00 00 5c 11 00 00 95 12 00 00 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........\.......O............... |
16de0 | 6b 0b 00 00 c9 0a 00 00 00 00 00 00 be 04 00 00 7f 05 00 00 8c 05 00 00 00 00 00 00 37 10 00 00 | k...........................7... |
16e00 | a3 13 00 00 06 0c 00 00 e1 06 00 00 ca 0a 00 00 00 00 00 00 0e 00 00 00 02 03 00 00 a5 05 00 00 | ................................ |
16e20 | 00 00 00 00 18 0f 00 00 25 11 00 00 3c 02 00 00 2c 11 00 00 00 00 00 00 98 02 00 00 00 00 00 00 | ........%...<...,............... |
16e40 | 00 00 00 00 90 04 00 00 00 00 00 00 00 00 00 00 ea 09 00 00 01 10 00 00 9a 0e 00 00 06 0f 00 00 | ................................ |
16e60 | 65 0f 00 00 98 00 00 00 cf 0e 00 00 17 10 00 00 05 0e 00 00 74 12 00 00 00 00 00 00 48 07 00 00 | e...................t.......H... |
16e80 | 24 02 00 00 8b 0d 00 00 75 06 00 00 00 00 00 00 00 00 00 00 01 11 00 00 89 0d 00 00 21 07 00 00 | $.......u...................!... |
16ea0 | 00 00 00 00 00 00 00 00 94 03 00 00 00 00 00 00 00 00 00 00 82 0f 00 00 15 06 00 00 70 0a 00 00 | ............................p... |
16ec0 | 00 00 00 00 00 00 00 00 00 00 00 00 af 12 00 00 88 02 00 00 72 0d 00 00 33 06 00 00 cb 09 00 00 | ....................r...3....... |
16ee0 | 6a 13 00 00 c3 00 00 00 77 0d 00 00 00 00 00 00 f0 0d 00 00 03 09 00 00 00 00 00 00 60 05 00 00 | j.......w...................`... |
16f00 | 0c 07 00 00 52 09 00 00 fd 0d 00 00 b6 01 00 00 7e 0d 00 00 9d 06 00 00 0f 05 00 00 6d 13 00 00 | ....R...........~...........m... |
16f20 | 5f 12 00 00 00 00 00 00 b5 0e 00 00 32 06 00 00 6e 13 00 00 f7 04 00 00 00 00 00 00 00 00 00 00 | _...........2...n............... |
16f40 | fe 03 00 00 00 0a 00 00 4f 0d 00 00 45 11 00 00 34 0e 00 00 1e 10 00 00 e9 0e 00 00 9b 02 00 00 | ........O...E...4............... |
16f60 | e9 11 00 00 ce 0a 00 00 e2 10 00 00 a9 13 00 00 fa 0c 00 00 6b 02 00 00 00 00 00 00 2e 04 00 00 | ....................k........... |
16f80 | e3 0d 00 00 de 0c 00 00 a3 06 00 00 52 0d 00 00 b0 13 00 00 00 00 00 00 00 00 00 00 bf 0a 00 00 | ............R................... |
16fa0 | 2e 11 00 00 00 00 00 00 11 0c 00 00 c8 07 00 00 e6 01 00 00 00 00 00 00 00 00 00 00 5b 0c 00 00 | ............................[... |
16fc0 | 60 0b 00 00 1a 08 00 00 bf 0c 00 00 c8 00 00 00 3f 0e 00 00 00 00 00 00 00 00 00 00 b7 04 00 00 | `...............?............... |
16fe0 | 81 0c 00 00 00 00 00 00 00 00 00 00 97 0b 00 00 9c 07 00 00 e6 07 00 00 97 0d 00 00 89 06 00 00 | ................................ |
17000 | 46 11 00 00 e3 12 00 00 56 12 00 00 00 00 00 00 0e 0b 00 00 79 01 00 00 c3 02 00 00 9b 0c 00 00 | F.......V...........y........... |
17020 | 00 00 00 00 00 00 00 00 bb 03 00 00 96 06 00 00 c7 04 00 00 b0 00 00 00 db 0f 00 00 e9 0c 00 00 | ................................ |
17040 | 00 00 00 00 cc 0d 00 00 17 0e 00 00 f4 08 00 00 89 02 00 00 36 0e 00 00 82 07 00 00 29 09 00 00 | ....................6.......)... |
17060 | bb 10 00 00 e7 06 00 00 85 00 00 00 05 04 00 00 d2 13 00 00 00 00 00 00 1f 12 00 00 00 00 00 00 | ................................ |
17080 | 00 00 00 00 cc 0c 00 00 03 05 00 00 cb 0c 00 00 b3 0b 00 00 8e 11 00 00 00 00 00 00 70 13 00 00 | ............................p... |
170a0 | d8 0c 00 00 23 0b 00 00 26 11 00 00 80 04 00 00 41 0d 00 00 67 0f 00 00 fb 06 00 00 7c 07 00 00 | ....#...&.......A...g.......|... |
170c0 | 3b 11 00 00 8a 10 00 00 7e 05 00 00 f5 0f 00 00 2d 13 00 00 b6 02 00 00 00 00 00 00 87 0e 00 00 | ;.......~.......-............... |
170e0 | 83 0d 00 00 d6 0d 00 00 5f 01 00 00 19 13 00 00 14 04 00 00 ff 0f 00 00 ef 0e 00 00 00 00 00 00 | ........_....................... |
17100 | 20 05 00 00 00 00 00 00 00 00 00 00 4e 07 00 00 bb 0a 00 00 00 00 00 00 50 0b 00 00 00 00 00 00 | ............N...........P....... |
17120 | 91 0f 00 00 3f 08 00 00 e0 0a 00 00 e5 0e 00 00 15 04 00 00 5c 01 00 00 26 05 00 00 d9 05 00 00 | ....?...............\...&....... |
17140 | 00 00 00 00 2a 0a 00 00 1c 03 00 00 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 10 00 00 | ....*.......Z...............{... |
17160 | 8a 13 00 00 05 08 00 00 78 07 00 00 79 12 00 00 bc 01 00 00 00 00 00 00 9f 11 00 00 5c 06 00 00 | ........x...y...............\... |
17180 | 00 00 00 00 44 13 00 00 55 00 00 00 08 08 00 00 36 0d 00 00 2d 02 00 00 ba 13 00 00 00 00 00 00 | ....D...U.......6...-........... |
171a0 | 00 00 00 00 ca 04 00 00 d3 01 00 00 22 0e 00 00 00 00 00 00 cb 03 00 00 48 04 00 00 32 08 00 00 | ............"...........H...2... |
171c0 | 3e 0e 00 00 00 00 00 00 00 00 00 00 db 0c 00 00 ea 0c 00 00 b0 04 00 00 0b 08 00 00 2e 0d 00 00 | >............................... |
171e0 | 97 07 00 00 00 00 00 00 77 08 00 00 56 04 00 00 f0 02 00 00 94 0f 00 00 2e 07 00 00 71 06 00 00 | ........w...V...............q... |
17200 | 63 03 00 00 0a 07 00 00 00 00 00 00 23 02 00 00 83 05 00 00 2d 09 00 00 95 0e 00 00 00 00 00 00 | c...........#.......-........... |
17220 | 8a 05 00 00 28 0e 00 00 3b 03 00 00 9b 0a 00 00 82 06 00 00 4a 0a 00 00 8b 07 00 00 0c 03 00 00 | ....(...;...........J........... |
17240 | 00 00 00 00 3c 0f 00 00 af 11 00 00 27 05 00 00 00 00 00 00 26 0d 00 00 ca 07 00 00 31 0e 00 00 | ....<.......'.......&.......1... |
17260 | 00 00 00 00 61 0f 00 00 69 05 00 00 f3 07 00 00 00 00 00 00 35 09 00 00 4a 10 00 00 d2 12 00 00 | ....a...i...........5...J....... |
17280 | 2c 10 00 00 f8 03 00 00 a7 06 00 00 ab 0a 00 00 00 00 00 00 32 07 00 00 7d 05 00 00 74 0f 00 00 | ,...................2...}...t... |
172a0 | e7 11 00 00 00 00 00 00 9b 00 00 00 ea 07 00 00 fd 0b 00 00 2b 0b 00 00 95 10 00 00 fb 03 00 00 | ....................+........... |
172c0 | 8c 0d 00 00 de 0d 00 00 15 11 00 00 89 10 00 00 00 00 00 00 00 00 00 00 21 09 00 00 ca 11 00 00 | ........................!....... |
172e0 | 00 00 00 00 3c 06 00 00 0b 04 00 00 8d 11 00 00 8e 0e 00 00 11 07 00 00 73 03 00 00 1b 0f 00 00 | ....<...................s....... |
17300 | 05 09 00 00 00 00 00 00 4b 0e 00 00 00 00 00 00 c7 0f 00 00 00 00 00 00 da 10 00 00 19 10 00 00 | ........K....................... |
17320 | ca 03 00 00 09 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 0b 00 00 ff 03 00 00 5f 05 00 00 | ....................G......._... |
17340 | 00 04 00 00 26 00 00 00 01 04 00 00 c6 01 00 00 10 02 00 00 c5 11 00 00 00 00 00 00 82 11 00 00 | ....&........................... |
17360 | ac 09 00 00 e8 01 00 00 1d 11 00 00 95 0f 00 00 eb 0d 00 00 00 00 00 00 a1 07 00 00 70 04 00 00 | ............................p... |
17380 | 00 00 00 00 75 03 00 00 8c 12 00 00 be 13 00 00 49 00 00 00 4f 05 00 00 64 06 00 00 00 00 00 00 | ....u...........I...O...d....... |
173a0 | eb 0b 00 00 86 0b 00 00 28 10 00 00 c8 03 00 00 5a 07 00 00 00 00 00 00 03 03 00 00 b1 08 00 00 | ........(.......Z............... |
173c0 | 00 00 00 00 51 08 00 00 6b 0c 00 00 36 07 00 00 00 00 00 00 ca 06 00 00 02 13 00 00 32 02 00 00 | ....Q...k...6...............2... |
173e0 | 25 07 00 00 b0 12 00 00 62 13 00 00 aa 03 00 00 b3 0e 00 00 00 00 00 00 d3 05 00 00 e6 02 00 00 | %.......b....................... |
17400 | 37 0b 00 00 84 06 00 00 91 04 00 00 79 02 00 00 ff 06 00 00 aa 09 00 00 00 00 00 00 00 00 00 00 | 7...........y................... |
17420 | 00 00 00 00 71 13 00 00 00 00 00 00 00 00 00 00 68 0d 00 00 00 00 00 00 00 00 00 00 d8 05 00 00 | ....q...........h............... |
17440 | bc 04 00 00 af 10 00 00 67 0c 00 00 f7 08 00 00 00 00 00 00 e4 06 00 00 af 13 00 00 32 11 00 00 | ........g...................2... |
17460 | 08 0a 00 00 ac 06 00 00 fa 0b 00 00 53 03 00 00 c9 05 00 00 cd 10 00 00 00 00 00 00 00 00 00 00 | ............S................... |
17480 | cd 01 00 00 00 00 00 00 31 11 00 00 00 00 00 00 b1 0a 00 00 ff 01 00 00 f1 0b 00 00 dc 0b 00 00 | ........1....................... |
174a0 | ae 0e 00 00 00 00 00 00 ba 09 00 00 b2 0b 00 00 85 0e 00 00 99 02 00 00 00 00 00 00 87 02 00 00 | ................................ |
174c0 | 00 00 00 00 9c 0e 00 00 00 00 00 00 00 00 00 00 5c 13 00 00 c0 06 00 00 63 0a 00 00 5e 12 00 00 | ................\.......c...^... |
174e0 | 5d 10 00 00 00 00 00 00 00 00 00 00 70 0b 00 00 30 0f 00 00 44 01 00 00 87 12 00 00 00 00 00 00 | ]...........p...0...D........... |
17500 | 95 03 00 00 e9 01 00 00 3f 09 00 00 fa 05 00 00 46 07 00 00 bf 09 00 00 e3 06 00 00 00 00 00 00 | ........?.......F............... |
17520 | 69 06 00 00 91 0a 00 00 4e 0e 00 00 e8 08 00 00 bd 02 00 00 47 00 00 00 00 00 00 00 72 0f 00 00 | i.......N...........G.......r... |
17540 | 81 0f 00 00 c9 13 00 00 d3 03 00 00 00 00 00 00 72 06 00 00 df 09 00 00 f4 11 00 00 d3 0d 00 00 | ................r............... |
17560 | 0d 11 00 00 b9 07 00 00 9b 08 00 00 f4 03 00 00 b5 10 00 00 39 0c 00 00 cf 0f 00 00 38 03 00 00 | ....................9.......8... |
17580 | b3 0d 00 00 49 11 00 00 00 00 00 00 c5 0c 00 00 00 00 00 00 08 06 00 00 fd 07 00 00 75 0a 00 00 | ....I.......................u... |
175a0 | a0 10 00 00 42 07 00 00 00 00 00 00 09 02 00 00 82 08 00 00 8b 01 00 00 58 01 00 00 ef 10 00 00 | ....B...................X....... |
175c0 | 28 09 00 00 00 00 00 00 8b 02 00 00 62 01 00 00 00 00 00 00 a5 04 00 00 3e 02 00 00 00 00 00 00 | (...........b...........>....... |
175e0 | 00 00 00 00 9a 0d 00 00 63 02 00 00 61 11 00 00 00 00 00 00 00 00 00 00 78 0c 00 00 00 00 00 00 | ........c...a...........x....... |
17600 | 69 0a 00 00 3a 11 00 00 6b 09 00 00 97 0e 00 00 00 00 00 00 bb 11 00 00 00 00 00 00 9b 13 00 00 | i...:...k....................... |
17620 | c3 0d 00 00 66 08 00 00 b8 08 00 00 7e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9a 10 00 00 | ....f.......~................... |
17640 | 00 00 00 00 4e 03 00 00 18 04 00 00 00 00 00 00 d2 07 00 00 b2 10 00 00 a8 10 00 00 9c 12 00 00 | ....N........................... |
17660 | 87 08 00 00 74 0e 00 00 ea 0b 00 00 ad 0b 00 00 00 00 00 00 00 00 00 00 5e 0c 00 00 00 00 00 00 | ....t...................^....... |
17680 | 00 00 00 00 00 00 00 00 00 00 00 00 b3 00 00 00 44 07 00 00 39 0e 00 00 5f 0e 00 00 bf 0b 00 00 | ................D...9..._....... |
176a0 | 63 0c 00 00 aa 10 00 00 b3 01 00 00 ba 10 00 00 57 04 00 00 1b 0a 00 00 00 00 00 00 eb 01 00 00 | c...............W............... |
176c0 | 08 0e 00 00 40 08 00 00 00 00 00 00 65 02 00 00 00 00 00 00 ea 02 00 00 6a 11 00 00 00 00 00 00 | ....@.......e...........j....... |
176e0 | b5 05 00 00 29 08 00 00 d5 02 00 00 05 0f 00 00 86 0a 00 00 7e 0f 00 00 13 0a 00 00 18 0c 00 00 | ....)...............~........... |
17700 | 00 00 00 00 00 00 00 00 3d 08 00 00 2d 0c 00 00 0b 12 00 00 96 13 00 00 00 00 00 00 00 00 00 00 | ........=...-................... |
17720 | 1f 05 00 00 de 09 00 00 00 00 00 00 86 03 00 00 a6 10 00 00 00 00 00 00 92 09 00 00 73 06 00 00 | ............................s... |
17740 | 11 0b 00 00 3c 05 00 00 47 0f 00 00 a0 09 00 00 99 06 00 00 e4 0c 00 00 99 07 00 00 9e 08 00 00 | ....<...G....................... |
17760 | 00 00 00 00 d9 0e 00 00 0a 05 00 00 00 00 00 00 d6 0a 00 00 9f 05 00 00 db 0b 00 00 20 13 00 00 | ................................ |
17780 | 7a 11 00 00 05 13 00 00 03 02 00 00 20 04 00 00 72 00 00 00 00 00 00 00 37 13 00 00 00 00 00 00 | z...............r.......7....... |
177a0 | 3b 0d 00 00 da 11 00 00 d6 05 00 00 e9 0b 00 00 36 04 00 00 00 00 00 00 00 00 00 00 7e 01 00 00 | ;...............6...........~... |
177c0 | 10 05 00 00 b8 10 00 00 00 00 00 00 9a 07 00 00 45 13 00 00 00 00 00 00 e6 0c 00 00 d6 07 00 00 | ................E............... |
177e0 | 00 00 00 00 00 00 00 00 ef 12 00 00 34 00 00 00 7a 02 00 00 ac 0c 00 00 7c 0d 00 00 6c 10 00 00 | ............4...z.......|...l... |
17800 | 03 11 00 00 ca 09 00 00 15 00 00 00 59 07 00 00 00 00 00 00 86 11 00 00 51 09 00 00 ab 0c 00 00 | ............Y...........Q....... |
17820 | d7 00 00 00 00 00 00 00 00 00 00 00 a4 0b 00 00 54 0c 00 00 da 09 00 00 8e 0a 00 00 8a 08 00 00 | ................T............... |
17840 | 59 00 00 00 ab 08 00 00 e4 05 00 00 08 00 00 00 45 0d 00 00 f9 12 00 00 cb 11 00 00 00 00 00 00 | Y...............E............... |
17860 | 00 00 00 00 9b 09 00 00 a5 06 00 00 a1 0e 00 00 f3 10 00 00 99 0e 00 00 d3 07 00 00 0a 06 00 00 | ................................ |
17880 | 00 00 00 00 b9 11 00 00 00 00 00 00 ae 11 00 00 24 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................$............... |
178a0 | 00 00 00 00 72 02 00 00 b9 0f 00 00 00 00 00 00 00 00 00 00 4e 10 00 00 75 0b 00 00 c3 12 00 00 | ....r...............N...u....... |
178c0 | 78 04 00 00 09 0f 00 00 76 09 00 00 6d 0d 00 00 00 00 00 00 3b 08 00 00 00 00 00 00 00 00 00 00 | x.......v...m.......;........... |
178e0 | 8f 0e 00 00 d7 0a 00 00 5c 0d 00 00 42 00 00 00 00 00 00 00 c6 03 00 00 98 01 00 00 c9 0d 00 00 | ........\...B................... |
17900 | 73 12 00 00 00 00 00 00 f5 08 00 00 88 04 00 00 89 01 00 00 1a 12 00 00 06 13 00 00 33 12 00 00 | s...........................3... |
17920 | 40 04 00 00 00 00 00 00 b4 0b 00 00 ab 04 00 00 11 0d 00 00 b2 0f 00 00 00 00 00 00 69 12 00 00 | @...........................i... |
17940 | 0a 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 0a 00 00 20 08 00 00 00 00 00 00 5a 0d 00 00 | ................b...........Z... |
17960 | 36 0f 00 00 99 0f 00 00 a6 04 00 00 fc 09 00 00 79 0c 00 00 7e 11 00 00 bf 00 00 00 e9 07 00 00 | 6...............y...~........... |
17980 | 28 03 00 00 26 06 00 00 1a 13 00 00 63 10 00 00 ba 07 00 00 38 00 00 00 00 00 00 00 9c 01 00 00 | (...&.......c.......8........... |
179a0 | 9f 00 00 00 30 10 00 00 e6 03 00 00 00 00 00 00 e9 08 00 00 2a 05 00 00 70 08 00 00 00 00 00 00 | ....0...............*...p....... |
179c0 | 7f 0c 00 00 00 00 00 00 00 00 00 00 7f 12 00 00 3a 0a 00 00 00 00 00 00 00 00 00 00 bb 13 00 00 | ................:............... |
179e0 | 34 07 00 00 00 00 00 00 73 10 00 00 a9 0f 00 00 00 00 00 00 17 12 00 00 ed 08 00 00 03 04 00 00 | 4.......s....................... |
17a00 | e0 07 00 00 46 0c 00 00 eb 02 00 00 14 00 00 00 00 00 00 00 00 00 00 00 5d 0f 00 00 00 00 00 00 | ....F...................]....... |
17a20 | 43 13 00 00 52 0c 00 00 9a 12 00 00 25 12 00 00 d7 04 00 00 a7 04 00 00 33 09 00 00 0e 06 00 00 | C...R.......%...........3....... |
17a40 | a1 08 00 00 be 10 00 00 20 07 00 00 70 07 00 00 00 00 00 00 00 00 00 00 1c 0b 00 00 34 0b 00 00 | ............p...............4... |
17a60 | 44 10 00 00 70 0e 00 00 aa 0b 00 00 a5 10 00 00 a0 03 00 00 7a 06 00 00 46 0b 00 00 85 09 00 00 | D...p...............z...F....... |
17a80 | 88 0b 00 00 ff 05 00 00 83 02 00 00 bd 0e 00 00 b7 0b 00 00 58 0f 00 00 d3 13 00 00 00 00 00 00 | ....................X........... |
17aa0 | 56 09 00 00 29 0a 00 00 b2 07 00 00 00 00 00 00 e2 03 00 00 00 00 00 00 d0 05 00 00 00 00 00 00 | V...)........................... |
17ac0 | f9 02 00 00 6d 10 00 00 12 0c 00 00 00 00 00 00 b1 01 00 00 a3 0f 00 00 30 12 00 00 00 00 00 00 | ....m...................0....... |
17ae0 | 1d 03 00 00 00 00 00 00 6b 08 00 00 32 09 00 00 00 00 00 00 00 00 00 00 9f 13 00 00 00 00 00 00 | ........k...2................... |
17b00 | 38 11 00 00 41 02 00 00 0f 03 00 00 00 00 00 00 2f 01 00 00 00 00 00 00 00 00 00 00 f1 02 00 00 | 8...A.........../............... |
17b20 | 00 00 00 00 00 00 00 00 c6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b4 02 00 00 | ................................ |
17b40 | 00 00 00 00 00 00 00 00 cc 09 00 00 b4 04 00 00 00 00 00 00 c4 12 00 00 7e 03 00 00 c8 08 00 00 | ........................~....... |
17b60 | f1 10 00 00 f3 06 00 00 42 04 00 00 79 09 00 00 17 00 00 00 f9 05 00 00 00 00 00 00 00 00 00 00 | ........B...y................... |
17b80 | 03 0e 00 00 8d 08 00 00 82 0c 00 00 00 00 00 00 00 00 00 00 39 12 00 00 00 00 00 00 00 00 00 00 | ....................9........... |
17ba0 | 65 10 00 00 08 02 00 00 79 0f 00 00 19 12 00 00 8b 0a 00 00 00 00 00 00 fd 05 00 00 00 00 00 00 | e.......y....................... |
17bc0 | 00 00 00 00 00 00 00 00 00 00 00 00 01 05 00 00 00 00 00 00 9e 00 00 00 96 11 00 00 25 04 00 00 | ............................%... |
17be0 | b8 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 0c 00 00 9f 08 00 00 9d 11 00 00 e4 12 00 00 | ................................ |
17c00 | 00 00 00 00 00 00 00 00 c7 07 00 00 e0 12 00 00 00 00 00 00 d4 09 00 00 00 00 00 00 68 04 00 00 | ............................h... |
17c20 | 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d7 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @............................... |
17c40 | 81 06 00 00 5a 0c 00 00 00 00 00 00 cc 11 00 00 d3 10 00 00 0d 0f 00 00 00 00 00 00 64 0e 00 00 | ....Z.......................d... |
17c60 | 3a 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 07 00 00 c9 0e 00 00 c7 09 00 00 | :...................g........... |
17c80 | 00 00 00 00 00 02 00 00 00 00 00 00 3f 10 00 00 a9 0b 00 00 f3 0b 00 00 8d 0d 00 00 5f 09 00 00 | ............?..............._... |
17ca0 | 9c 13 00 00 26 12 00 00 f6 12 00 00 a9 00 00 00 00 00 00 00 f7 05 00 00 00 00 00 00 2c 01 00 00 | ....&.......................,... |
17cc0 | b5 0c 00 00 7a 13 00 00 8b 0e 00 00 fc 0c 00 00 00 00 00 00 00 00 00 00 4c 04 00 00 f7 02 00 00 | ....z...................L....... |
17ce0 | ba 03 00 00 00 11 00 00 61 06 00 00 66 06 00 00 07 05 00 00 00 00 00 00 2c 05 00 00 7e 04 00 00 | ........a...f...........,...~... |
17d00 | f3 08 00 00 41 0a 00 00 bb 0d 00 00 e6 0e 00 00 c8 05 00 00 5b 01 00 00 bd 07 00 00 00 00 00 00 | ....A...............[........... |
17d20 | b8 05 00 00 47 03 00 00 ef 03 00 00 bf 04 00 00 31 13 00 00 04 13 00 00 96 05 00 00 3f 05 00 00 | ....G...........1...........?... |
17d40 | 00 00 00 00 00 00 00 00 2b 05 00 00 3d 0a 00 00 e5 12 00 00 24 0c 00 00 ed 0b 00 00 53 04 00 00 | ........+...=.......$.......S... |
17d60 | 00 00 00 00 00 00 00 00 bf 0f 00 00 9b 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 10 00 00 | ................................ |
17d80 | 63 08 00 00 00 00 00 00 c6 02 00 00 00 0b 00 00 37 12 00 00 0d 07 00 00 0c 0e 00 00 a5 13 00 00 | c...............7............... |
17da0 | 4a 0c 00 00 50 13 00 00 c0 0e 00 00 d1 08 00 00 d0 01 00 00 88 0c 00 00 68 03 00 00 db 05 00 00 | J...P...................h....... |
17dc0 | 00 00 00 00 10 13 00 00 57 12 00 00 00 00 00 00 e0 05 00 00 fb 11 00 00 3c 01 00 00 a7 11 00 00 | ........W...............<....... |
17de0 | 4d 0a 00 00 4c 0c 00 00 c2 13 00 00 65 06 00 00 65 07 00 00 07 0c 00 00 00 00 00 00 9a 13 00 00 | M...L.......e...e............... |
17e00 | ca 13 00 00 00 00 00 00 b8 01 00 00 bd 00 00 00 64 02 00 00 17 04 00 00 00 00 00 00 b8 0d 00 00 | ................d............... |
17e20 | 3c 09 00 00 92 08 00 00 1a 0b 00 00 ac 11 00 00 d6 06 00 00 00 00 00 00 00 00 00 00 02 01 00 00 | <............................... |
17e40 | 3e 0c 00 00 b5 12 00 00 40 0d 00 00 98 0c 00 00 5d 0b 00 00 3f 06 00 00 00 00 00 00 ba 0a 00 00 | >.......@.......]...?........... |
17e60 | 43 00 00 00 56 0f 00 00 00 00 00 00 b1 03 00 00 7a 01 00 00 49 12 00 00 ce 0d 00 00 fa 02 00 00 | C...V...........z...I........... |
17e80 | dd 0b 00 00 e5 02 00 00 90 0f 00 00 5d 0a 00 00 20 02 00 00 83 07 00 00 d7 05 00 00 5c 10 00 00 | ............]...............\... |
17ea0 | d9 10 00 00 03 10 00 00 69 03 00 00 00 00 00 00 00 00 00 00 6d 11 00 00 00 00 00 00 ef 01 00 00 | ........i...........m........... |
17ec0 | 00 00 00 00 14 12 00 00 00 00 00 00 b4 12 00 00 d0 00 00 00 58 10 00 00 d3 0f 00 00 fe 0e 00 00 | ....................X........... |
17ee0 | 04 09 00 00 86 0e 00 00 6f 00 00 00 cc 0e 00 00 a8 08 00 00 00 00 00 00 77 11 00 00 aa 0f 00 00 | ........o...............w....... |
17f00 | 61 13 00 00 93 00 00 00 3d 13 00 00 7b 0e 00 00 00 00 00 00 44 0e 00 00 b8 00 00 00 8a 0a 00 00 | a.......=...{.......D........... |
17f20 | fe 04 00 00 00 00 00 00 2e 08 00 00 23 0d 00 00 35 10 00 00 e3 10 00 00 3f 02 00 00 40 0f 00 00 | ............#...5.......?...@... |
17f40 | 00 00 00 00 23 08 00 00 de 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba 0b 00 00 62 10 00 00 | ....#.......................b... |
17f60 | cc 0a 00 00 00 00 00 00 29 10 00 00 41 08 00 00 4c 0b 00 00 00 00 00 00 00 00 00 00 d2 02 00 00 | ........)...A...L............... |
17f80 | 88 0e 00 00 95 08 00 00 a5 0e 00 00 00 00 00 00 70 00 00 00 83 0b 00 00 6b 04 00 00 6f 0d 00 00 | ................p.......k...o... |
17fa0 | d1 0f 00 00 2a 0d 00 00 d5 06 00 00 9b 0d 00 00 b5 0a 00 00 3a 05 00 00 1d 0b 00 00 00 00 00 00 | ....*...............:........... |
17fc0 | 53 06 00 00 49 13 00 00 7c 10 00 00 21 08 00 00 cb 06 00 00 77 07 00 00 db 0d 00 00 18 10 00 00 | S...I...|...!.......w........... |
17fe0 | 00 00 00 00 eb 00 00 00 00 00 00 00 71 05 00 00 00 00 00 00 1e 0a 00 00 4d 00 00 00 00 00 00 00 | ............q...........M....... |
18000 | 62 0d 00 00 6c 06 00 00 00 00 00 00 91 03 00 00 42 06 00 00 14 0e 00 00 00 00 00 00 00 00 00 00 | b...l...........B............... |
18020 | bd 08 00 00 48 0b 00 00 fc 07 00 00 00 00 00 00 c6 06 00 00 2b 00 00 00 27 11 00 00 00 00 00 00 | ....H...............+...'....... |
18040 | a1 00 00 00 f2 0f 00 00 09 11 00 00 45 03 00 00 0c 08 00 00 93 0d 00 00 0d 08 00 00 05 0c 00 00 | ............E................... |
18060 | 06 02 00 00 8d 0a 00 00 00 00 00 00 5f 08 00 00 49 04 00 00 7d 09 00 00 00 00 00 00 c6 09 00 00 | ............_...I...}........... |
18080 | c1 05 00 00 00 00 00 00 a6 12 00 00 7b 09 00 00 3e 12 00 00 00 00 00 00 08 11 00 00 00 00 00 00 | ............{...>............... |
180a0 | 00 00 00 00 4d 09 00 00 77 06 00 00 00 00 00 00 00 00 00 00 90 10 00 00 81 08 00 00 00 00 00 00 | ....M...w....................... |
180c0 | 12 07 00 00 e9 03 00 00 87 07 00 00 53 08 00 00 db 13 00 00 eb 10 00 00 07 08 00 00 10 07 00 00 | ............S................... |
180e0 | 58 0d 00 00 00 00 00 00 b4 00 00 00 0e 0f 00 00 1d 07 00 00 45 00 00 00 00 00 00 00 00 00 00 00 | X...................E........... |
18100 | 52 12 00 00 cc 10 00 00 a0 12 00 00 5c 0b 00 00 77 09 00 00 4a 06 00 00 86 0c 00 00 ec 03 00 00 | R...........\...w...J........... |
18120 | 61 01 00 00 31 00 00 00 af 0c 00 00 64 13 00 00 96 03 00 00 00 00 00 00 00 00 00 00 83 04 00 00 | a...1.......d................... |
18140 | a7 0a 00 00 f8 02 00 00 fe 0c 00 00 c9 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 05 00 00 | ................................ |
18160 | 00 00 00 00 96 10 00 00 13 10 00 00 00 00 00 00 cd 00 00 00 59 09 00 00 df 04 00 00 b7 05 00 00 | ....................Y........... |
18180 | 58 05 00 00 de 02 00 00 bb 12 00 00 92 0c 00 00 d5 10 00 00 00 00 00 00 3b 0b 00 00 aa 0c 00 00 | X.......................;....... |
181a0 | 38 0c 00 00 66 0f 00 00 0d 00 00 00 d6 08 00 00 1e 0b 00 00 ab 10 00 00 00 00 00 00 00 00 00 00 | 8...f........................... |
181c0 | 00 00 00 00 43 03 00 00 00 00 00 00 90 09 00 00 00 00 00 00 6a 08 00 00 00 00 00 00 ac 07 00 00 | ....C...............j........... |
181e0 | 3a 0f 00 00 fe 10 00 00 00 00 00 00 53 11 00 00 49 05 00 00 78 11 00 00 00 00 00 00 00 00 00 00 | :...........S...I...x........... |
18200 | 03 06 00 00 fc 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23 0f 00 00 be 08 00 00 00 00 00 00 | ....................#........... |
18220 | 8e 07 00 00 45 01 00 00 ab 0b 00 00 df 06 00 00 ce 09 00 00 3b 0f 00 00 6a 0a 00 00 d1 10 00 00 | ....E...............;...j....... |
18240 | 27 00 00 00 44 04 00 00 00 00 00 00 6f 01 00 00 ec 07 00 00 00 00 00 00 00 00 00 00 b7 08 00 00 | '...D.......o................... |
18260 | 7b 0d 00 00 00 00 00 00 00 00 00 00 c2 00 00 00 39 01 00 00 00 00 00 00 7d 00 00 00 4d 0c 00 00 | {...............9.......}...M... |
18280 | 96 07 00 00 88 0d 00 00 d5 0d 00 00 f5 01 00 00 a3 0c 00 00 00 00 00 00 00 00 00 00 7c 03 00 00 | ............................|... |
182a0 | 2e 0c 00 00 00 00 00 00 b7 0a 00 00 00 00 00 00 00 00 00 00 46 0a 00 00 00 00 00 00 e5 09 00 00 | ....................F........... |
182c0 | 78 0b 00 00 83 09 00 00 03 0a 00 00 b6 04 00 00 8c 06 00 00 00 00 00 00 00 00 00 00 ea 03 00 00 | x............................... |
182e0 | 00 00 00 00 00 00 00 00 c5 01 00 00 89 07 00 00 6e 01 00 00 f8 06 00 00 00 00 00 00 00 00 00 00 | ................n............... |
18300 | 5f 0d 00 00 df 02 00 00 00 00 00 00 4a 11 00 00 f9 0b 00 00 f3 0f 00 00 ee 08 00 00 d5 07 00 00 | _...........J................... |
18320 | 00 00 00 00 46 03 00 00 de 01 00 00 8a 0d 00 00 00 00 00 00 0a 10 00 00 6f 07 00 00 7d 13 00 00 | ....F...................o...}... |
18340 | d8 08 00 00 00 00 00 00 2c 0b 00 00 9d 01 00 00 ab 03 00 00 94 0c 00 00 f3 05 00 00 00 00 00 00 | ........,....................... |
18360 | 6d 09 00 00 9e 11 00 00 00 00 00 00 94 12 00 00 16 00 00 00 df 0c 00 00 00 00 00 00 6b 07 00 00 | m...........................k... |
18380 | 37 0f 00 00 13 0d 00 00 c3 0c 00 00 df 0d 00 00 16 0b 00 00 1b 10 00 00 c4 08 00 00 12 00 00 00 | 7............................... |
183a0 | 79 0e 00 00 df 05 00 00 00 00 00 00 31 0c 00 00 00 00 00 00 77 0f 00 00 c3 0f 00 00 00 00 00 00 | y...........1.......w........... |
183c0 | 82 10 00 00 df 01 00 00 00 00 00 00 f8 07 00 00 00 00 00 00 6d 0f 00 00 6a 0c 00 00 f5 0b 00 00 | ....................m...j....... |
183e0 | 7b 06 00 00 00 00 00 00 1c 04 00 00 00 00 00 00 f1 08 00 00 13 02 00 00 54 08 00 00 00 00 00 00 | {.......................T....... |
18400 | c1 01 00 00 66 10 00 00 fa 01 00 00 ef 02 00 00 7f 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....f........................... |
18420 | a8 0b 00 00 a4 10 00 00 00 00 00 00 ad 13 00 00 09 01 00 00 04 0a 00 00 19 04 00 00 9f 0c 00 00 | ................................ |
18440 | cc 0b 00 00 5b 09 00 00 81 0d 00 00 3f 0f 00 00 00 00 00 00 12 05 00 00 a6 05 00 00 4a 0e 00 00 | ....[.......?...............J... |
18460 | 77 0a 00 00 00 00 00 00 78 0a 00 00 76 04 00 00 f6 11 00 00 cd 07 00 00 00 00 00 00 a6 03 00 00 | w.......x...v................... |
18480 | 4b 0f 00 00 4e 09 00 00 f5 09 00 00 47 02 00 00 00 00 00 00 bf 02 00 00 63 00 00 00 f1 03 00 00 | K...N.......G...........c....... |
184a0 | 0f 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 07 00 00 67 12 00 00 69 08 00 00 8b 10 00 00 | ....................g...i....... |
184c0 | d5 0c 00 00 b8 0a 00 00 4f 0c 00 00 c5 0d 00 00 e4 0f 00 00 ff 09 00 00 f0 09 00 00 81 12 00 00 | ........O....................... |
184e0 | 58 03 00 00 00 00 00 00 1b 03 00 00 00 00 00 00 e7 0f 00 00 00 00 00 00 9d 0e 00 00 f6 0d 00 00 | X............................... |
18500 | 6a 0e 00 00 c2 02 00 00 d4 00 00 00 02 0d 00 00 9f 04 00 00 55 01 00 00 e5 0a 00 00 62 0e 00 00 | j...................U.......b... |
18520 | 00 00 00 00 1b 00 00 00 66 0d 00 00 00 05 00 00 17 02 00 00 1e 0e 00 00 19 00 00 00 33 10 00 00 | ........f...................3... |
18540 | e7 12 00 00 00 00 00 00 06 07 00 00 3f 0a 00 00 ae 06 00 00 93 12 00 00 74 00 00 00 a0 0d 00 00 | ............?...........t....... |
18560 | 6d 01 00 00 34 03 00 00 01 0e 00 00 9e 06 00 00 00 00 00 00 d6 0f 00 00 68 05 00 00 00 00 00 00 | m...4...................h....... |
18580 | c1 11 00 00 ed 09 00 00 00 00 00 00 65 09 00 00 9d 0c 00 00 00 00 00 00 4e 0c 00 00 53 0e 00 00 | ............e...........N...S... |
185a0 | 00 00 00 00 12 0d 00 00 43 0f 00 00 e4 04 00 00 00 00 00 00 a2 0c 00 00 98 0d 00 00 89 13 00 00 | ........C....................... |
185c0 | 57 03 00 00 8f 0b 00 00 66 00 00 00 6c 0d 00 00 00 00 00 00 ea 01 00 00 00 00 00 00 58 11 00 00 | W.......f...l...............X... |
185e0 | dd 0a 00 00 cd 09 00 00 4d 11 00 00 82 12 00 00 25 0d 00 00 85 0d 00 00 18 07 00 00 35 12 00 00 | ........M.......%...........5... |
18600 | 00 00 00 00 fd 06 00 00 b4 10 00 00 22 02 00 00 00 00 00 00 44 12 00 00 00 00 00 00 60 0e 00 00 | ............".......D.......`... |
18620 | 98 13 00 00 4b 12 00 00 37 0c 00 00 1f 0a 00 00 00 00 00 00 01 0b 00 00 fa 11 00 00 fc 0a 00 00 | ....K...7....................... |
18640 | 1e 00 00 00 9b 04 00 00 43 07 00 00 97 04 00 00 00 00 00 00 12 11 00 00 9d 03 00 00 00 00 00 00 | ........C....................... |
18660 | 00 00 00 00 00 00 00 00 5a 08 00 00 b2 01 00 00 74 01 00 00 11 12 00 00 4a 12 00 00 dd 06 00 00 | ........Z.......t.......J....... |
18680 | 00 00 00 00 06 03 00 00 00 00 00 00 4b 05 00 00 5e 01 00 00 93 0b 00 00 5e 10 00 00 33 04 00 00 | ............K...^.......^...3... |
186a0 | 35 05 00 00 81 02 00 00 9a 0f 00 00 d8 0e 00 00 98 07 00 00 c1 0f 00 00 c4 11 00 00 86 09 00 00 | 5............................... |
186c0 | 00 00 00 00 c4 04 00 00 07 04 00 00 d5 05 00 00 71 0c 00 00 00 00 00 00 96 02 00 00 00 00 00 00 | ................q............... |
186e0 | ae 08 00 00 f0 0f 00 00 ec 0e 00 00 ec 0f 00 00 ac 13 00 00 90 03 00 00 ba 0c 00 00 45 0b 00 00 | ............................E... |
18700 | 05 06 00 00 bf 08 00 00 00 00 00 00 61 0d 00 00 dc 11 00 00 00 00 00 00 00 00 00 00 24 0b 00 00 | ............a...............$... |
18720 | fd 03 00 00 db 03 00 00 b7 13 00 00 7c 04 00 00 00 00 00 00 9c 06 00 00 bd 0b 00 00 c0 12 00 00 | ............|................... |
18740 | 26 04 00 00 79 04 00 00 13 0c 00 00 f0 00 00 00 02 05 00 00 00 00 00 00 54 09 00 00 83 0e 00 00 | &...y...................T....... |
18760 | 81 03 00 00 19 08 00 00 b5 09 00 00 15 10 00 00 04 0d 00 00 89 00 00 00 00 00 00 00 d0 03 00 00 | ................................ |
18780 | 3a 09 00 00 00 00 00 00 c8 13 00 00 00 00 00 00 59 0b 00 00 85 0b 00 00 a6 0c 00 00 9a 05 00 00 | :...............Y............... |
187a0 | 00 00 00 00 d6 11 00 00 b9 0b 00 00 a6 08 00 00 00 06 00 00 00 00 00 00 ee 11 00 00 a7 03 00 00 | ................................ |
187c0 | 00 00 00 00 fe 0a 00 00 31 10 00 00 85 12 00 00 5a 12 00 00 e4 01 00 00 7b 12 00 00 00 00 00 00 | ........1.......Z.......{....... |
187e0 | fb 02 00 00 1c 06 00 00 90 06 00 00 00 00 00 00 59 0e 00 00 90 07 00 00 42 12 00 00 93 08 00 00 | ................Y.......B....... |
18800 | 60 00 00 00 8b 04 00 00 5e 0a 00 00 76 0c 00 00 25 06 00 00 00 00 00 00 c0 04 00 00 30 05 00 00 | `.......^...v...%...........0... |
18820 | 5d 04 00 00 e5 06 00 00 70 0f 00 00 59 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ].......p...Y................... |
18840 | 90 00 00 00 77 0c 00 00 8a 09 00 00 37 00 00 00 a7 0e 00 00 00 00 00 00 f5 03 00 00 59 12 00 00 | ....w.......7...............Y... |
18860 | 3b 09 00 00 00 00 00 00 00 00 00 00 eb 05 00 00 00 00 00 00 16 07 00 00 f7 0c 00 00 a2 04 00 00 | ;............................... |
18880 | 0b 10 00 00 00 00 00 00 13 12 00 00 a3 12 00 00 30 08 00 00 00 00 00 00 c3 05 00 00 79 0a 00 00 | ................0...........y... |
188a0 | c0 07 00 00 cc 12 00 00 00 00 00 00 8d 02 00 00 6b 12 00 00 16 13 00 00 ec 0c 00 00 34 11 00 00 | ................k...........4... |
188c0 | 8f 0a 00 00 00 00 00 00 00 00 00 00 0b 13 00 00 00 00 00 00 24 13 00 00 00 00 00 00 9b 0e 00 00 | ....................$........... |
188e0 | 00 00 00 00 c9 0c 00 00 15 08 00 00 00 00 00 00 00 00 00 00 31 0d 00 00 a1 03 00 00 72 11 00 00 | ....................1.......r... |
18900 | 14 0c 00 00 00 00 00 00 00 00 00 00 db 12 00 00 d7 12 00 00 bf 07 00 00 85 03 00 00 00 00 00 00 | ................................ |
18920 | 4f 13 00 00 91 0b 00 00 00 00 00 00 f8 09 00 00 f0 07 00 00 ca 0d 00 00 a4 05 00 00 90 0a 00 00 | O............................... |
18940 | 18 11 00 00 a6 07 00 00 b9 10 00 00 50 10 00 00 29 02 00 00 00 00 00 00 71 0f 00 00 95 02 00 00 | ............P...).......q....... |
18960 | 4c 06 00 00 94 07 00 00 80 00 00 00 00 00 00 00 60 12 00 00 e5 0f 00 00 cf 04 00 00 37 06 00 00 | L...............`...........7... |
18980 | 00 00 00 00 38 01 00 00 26 0a 00 00 f9 01 00 00 c8 0c 00 00 78 0f 00 00 31 08 00 00 46 10 00 00 | ....8...&...........x...1...F... |
189a0 | 00 00 00 00 00 00 00 00 ef 05 00 00 00 00 00 00 d7 09 00 00 db 09 00 00 00 00 00 00 00 00 00 00 | ................................ |
189c0 | 00 00 00 00 32 10 00 00 63 05 00 00 13 09 00 00 5a 01 00 00 56 07 00 00 06 04 00 00 06 12 00 00 | ....2...c.......Z...V........... |
189e0 | 62 0f 00 00 00 00 00 00 24 11 00 00 3a 0e 00 00 23 06 00 00 a1 0b 00 00 90 05 00 00 00 00 00 00 | b.......$...:...#............... |
18a00 | ab 02 00 00 43 11 00 00 e8 04 00 00 53 13 00 00 50 0f 00 00 fe 02 00 00 e3 05 00 00 25 05 00 00 | ....C.......S...P...........%... |
18a20 | 00 00 00 00 00 00 00 00 75 0e 00 00 be 07 00 00 cc 06 00 00 bc 0c 00 00 00 00 00 00 ad 0e 00 00 | ........u....................... |
18a40 | 4d 12 00 00 00 00 00 00 46 08 00 00 15 0e 00 00 5d 12 00 00 00 00 00 00 75 08 00 00 e9 0a 00 00 | M.......F.......].......u....... |
18a60 | d4 03 00 00 00 00 00 00 00 00 00 00 13 05 00 00 b7 00 00 00 00 00 00 00 39 0b 00 00 00 00 00 00 | ........................9....... |
18a80 | 80 05 00 00 d5 12 00 00 00 00 00 00 00 00 00 00 ef 0b 00 00 25 09 00 00 00 0c 00 00 00 00 00 00 | ....................%........... |
18aa0 | 8a 0c 00 00 00 00 00 00 60 0c 00 00 43 04 00 00 73 0a 00 00 2b 12 00 00 d8 01 00 00 00 00 00 00 | ........`...C...s...+........... |
18ac0 | 00 00 00 00 00 00 00 00 dd 0e 00 00 ba 06 00 00 00 00 00 00 f9 0d 00 00 63 06 00 00 8f 13 00 00 | ........................c....... |
18ae0 | be 0e 00 00 7c 08 00 00 36 06 00 00 00 00 00 00 9d 08 00 00 7f 09 00 00 6c 01 00 00 8c 11 00 00 | ....|...6...............l....... |
18b00 | 54 05 00 00 54 00 00 00 ad 0d 00 00 1f 07 00 00 43 02 00 00 4c 11 00 00 09 00 00 00 84 01 00 00 | T...T...........C...L........... |
18b20 | 26 0b 00 00 6a 01 00 00 14 11 00 00 c5 13 00 00 00 00 00 00 03 12 00 00 c0 08 00 00 85 0f 00 00 | &...j........................... |
18b40 | 55 03 00 00 0f 06 00 00 29 0f 00 00 fb 12 00 00 73 04 00 00 94 10 00 00 66 01 00 00 b1 02 00 00 | U.......).......s.......f....... |
18b60 | af 09 00 00 e3 08 00 00 00 00 00 00 fa 07 00 00 b7 09 00 00 15 09 00 00 00 00 00 00 00 00 00 00 | ................................ |
18b80 | 42 0a 00 00 80 0e 00 00 0e 09 00 00 ef 04 00 00 4e 06 00 00 49 06 00 00 00 00 00 00 8f 08 00 00 | B...............N...I........... |
18ba0 | 00 00 00 00 7a 0c 00 00 43 0d 00 00 1d 05 00 00 85 02 00 00 cf 06 00 00 3b 01 00 00 44 0a 00 00 | ....z...C...............;...D... |
18bc0 | 00 00 00 00 bd 03 00 00 64 0a 00 00 00 00 00 00 67 09 00 00 1a 05 00 00 d7 03 00 00 00 00 00 00 | ........d.......g............... |
18be0 | 72 13 00 00 00 00 00 00 36 12 00 00 3f 04 00 00 95 06 00 00 43 10 00 00 32 0b 00 00 b9 01 00 00 | r.......6...?.......C...2....... |
18c00 | bc 0f 00 00 ed 0f 00 00 75 12 00 00 e7 10 00 00 a9 02 00 00 b1 12 00 00 04 0c 00 00 75 11 00 00 | ........u...................u... |
18c20 | 00 00 00 00 9d 0d 00 00 c1 03 00 00 00 00 00 00 1d 0f 00 00 00 00 00 00 45 06 00 00 00 00 00 00 | ........................E....... |
18c40 | 00 00 00 00 00 00 00 00 d9 0b 00 00 2c 0e 00 00 58 09 00 00 c7 02 00 00 7c 09 00 00 bb 08 00 00 | ............,...X.......|....... |
18c60 | f8 08 00 00 6f 11 00 00 02 09 00 00 00 00 00 00 00 00 00 00 9c 0b 00 00 00 00 00 00 6c 05 00 00 | ....o.......................l... |
18c80 | 00 00 00 00 4c 09 00 00 f6 04 00 00 00 00 00 00 3e 08 00 00 07 00 00 00 af 0b 00 00 50 09 00 00 | ....L...........>...........P... |
18ca0 | 1e 02 00 00 1a 0e 00 00 48 11 00 00 db 11 00 00 00 00 00 00 97 05 00 00 b9 0e 00 00 00 00 00 00 | ........H....................... |
18cc0 | 2c 00 00 00 6e 0d 00 00 21 0c 00 00 5d 06 00 00 e2 08 00 00 ec 10 00 00 6d 0b 00 00 f9 0f 00 00 | ,...n...!...]...........m....... |
18ce0 | 0c 0d 00 00 f8 04 00 00 e9 12 00 00 0a 0b 00 00 1e 08 00 00 6d 03 00 00 ff 0e 00 00 a1 06 00 00 | ....................m........... |
18d00 | 00 00 00 00 00 00 00 00 cf 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 04 00 00 00 00 00 00 | ................................ |
18d20 | 00 00 00 00 a8 06 00 00 00 00 00 00 38 05 00 00 c2 09 00 00 29 07 00 00 09 08 00 00 00 00 00 00 | ............8.......)........... |
18d40 | 00 00 00 00 00 00 00 00 12 09 00 00 c6 0c 00 00 00 00 00 00 65 00 00 00 21 0a 00 00 00 00 00 00 | ....................e...!....... |
18d60 | 00 00 00 00 58 13 00 00 e9 04 00 00 21 06 00 00 04 10 00 00 bc 0d 00 00 00 00 00 00 56 0e 00 00 | ....X.......!...............V... |
18d80 | 62 11 00 00 00 00 00 00 5f 0f 00 00 e9 0f 00 00 00 00 00 00 c3 09 00 00 35 07 00 00 04 08 00 00 | b......._...............5....... |
18da0 | b1 0f 00 00 da 07 00 00 a3 0a 00 00 00 00 00 00 cf 10 00 00 00 00 00 00 d2 06 00 00 b3 11 00 00 | ................................ |
18dc0 | 7d 10 00 00 8f 05 00 00 8c 02 00 00 00 00 00 00 23 03 00 00 00 00 00 00 92 00 00 00 0a 00 00 00 | }...............#............... |
18de0 | 00 00 00 00 00 00 00 00 41 09 00 00 6b 0e 00 00 2c 0f 00 00 00 00 00 00 00 00 00 00 b6 03 00 00 | ........A...k...,............... |
18e00 | 82 04 00 00 00 00 00 00 e8 10 00 00 b2 08 00 00 ce 0b 00 00 68 08 00 00 a6 09 00 00 6a 02 00 00 | ....................h.......j... |
18e20 | 00 00 00 00 00 00 00 00 00 00 00 00 ab 09 00 00 a1 0d 00 00 d8 09 00 00 da 02 00 00 9c 09 00 00 | ................................ |
18e40 | 00 00 00 00 72 08 00 00 6e 03 00 00 ad 0f 00 00 2e 0b 00 00 00 00 00 00 00 00 00 00 83 11 00 00 | ....r...n....................... |
18e60 | d3 00 00 00 00 00 00 00 3b 0e 00 00 41 0f 00 00 0f 0e 00 00 1d 09 00 00 96 08 00 00 00 00 00 00 | ........;...A................... |
18e80 | 30 0d 00 00 e6 0d 00 00 e5 03 00 00 ee 02 00 00 11 0a 00 00 ba 04 00 00 00 00 00 00 8a 04 00 00 | 0............................... |
18ea0 | 01 07 00 00 82 0a 00 00 50 08 00 00 00 00 00 00 81 0e 00 00 00 00 00 00 00 00 00 00 7f 03 00 00 | ........P....................... |
18ec0 | 00 00 00 00 2f 08 00 00 c4 0b 00 00 8a 0e 00 00 00 00 00 00 a0 07 00 00 00 00 00 00 00 00 00 00 | ..../........................... |
18ee0 | 4f 11 00 00 42 0d 00 00 f1 0c 00 00 f4 0d 00 00 92 11 00 00 2f 06 00 00 a9 07 00 00 ce 13 00 00 | O...B.............../........... |
18f00 | e3 0b 00 00 d0 06 00 00 71 0a 00 00 58 0b 00 00 40 01 00 00 00 00 00 00 1f 11 00 00 bc 0b 00 00 | ........q...X...@............... |
18f20 | 51 0d 00 00 5f 13 00 00 73 00 00 00 dd 03 00 00 bb 05 00 00 88 12 00 00 de 07 00 00 00 00 00 00 | Q..._...s....................... |
18f40 | d7 10 00 00 46 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc 08 00 00 00 00 00 00 88 0f 00 00 | ....F........................... |
18f60 | 00 00 00 00 16 06 00 00 e3 03 00 00 39 10 00 00 ee 05 00 00 99 04 00 00 76 0e 00 00 f5 02 00 00 | ............9...........v....... |
18f80 | 19 0d 00 00 5c 04 00 00 d1 12 00 00 33 0e 00 00 84 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....\.......3................... |
18fa0 | 00 00 00 00 2d 12 00 00 de 0e 00 00 00 00 00 00 42 0f 00 00 47 06 00 00 c9 01 00 00 90 12 00 00 | ....-...........B...G........... |
18fc0 | 00 00 00 00 b6 07 00 00 ba 00 00 00 56 06 00 00 3a 0d 00 00 00 00 00 00 62 06 00 00 00 00 00 00 | ............V...:.......b....... |
18fe0 | c4 05 00 00 f0 01 00 00 00 00 00 00 00 00 00 00 24 07 00 00 b1 0c 00 00 cf 07 00 00 c6 0d 00 00 | ................$............... |
19000 | d4 10 00 00 0f 0d 00 00 31 05 00 00 00 00 00 00 0d 02 00 00 0f 01 00 00 6d 08 00 00 f2 04 00 00 | ........1...............m....... |
19020 | 60 08 00 00 ec 05 00 00 7f 04 00 00 d3 0e 00 00 a4 00 00 00 0d 04 00 00 55 12 00 00 7b 0b 00 00 | `.......................U...{... |
19040 | 00 00 00 00 fd 0c 00 00 5b 0f 00 00 90 13 00 00 59 06 00 00 c0 09 00 00 c2 10 00 00 b4 03 00 00 | ........[.......Y............... |
19060 | 7d 11 00 00 e1 03 00 00 00 07 00 00 b2 0a 00 00 6e 12 00 00 46 12 00 00 55 11 00 00 82 03 00 00 | }...............n...F...U....... |
19080 | 7a 00 00 00 3d 0e 00 00 6f 0b 00 00 c6 05 00 00 09 06 00 00 00 00 00 00 00 00 00 00 23 09 00 00 | z...=...o...................#... |
190a0 | 00 00 00 00 8d 07 00 00 89 09 00 00 00 00 00 00 06 08 00 00 00 00 00 00 60 13 00 00 d9 02 00 00 | ........................`....... |
190c0 | 00 00 00 00 da 05 00 00 83 10 00 00 06 0b 00 00 15 13 00 00 b7 03 00 00 56 00 00 00 1b 05 00 00 | ........................V....... |
190e0 | 22 0a 00 00 94 11 00 00 00 00 00 00 6f 0a 00 00 ef 0f 00 00 4e 08 00 00 72 10 00 00 1c 02 00 00 | "...........o.......N...r....... |
19100 | 42 01 00 00 00 00 00 00 f8 01 00 00 b5 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 02 00 00 | B...........................0... |
19120 | 74 0c 00 00 00 00 00 00 35 02 00 00 be 0c 00 00 86 0d 00 00 d2 0d 00 00 d6 0b 00 00 c9 10 00 00 | t.......5....................... |
19140 | 00 00 00 00 00 00 00 00 dd 0f 00 00 c0 11 00 00 00 00 00 00 6d 07 00 00 b7 0f 00 00 ab 0e 00 00 | ....................m........... |
19160 | 41 04 00 00 00 00 00 00 00 00 00 00 55 0b 00 00 9d 09 00 00 ca 05 00 00 00 00 00 00 56 03 00 00 | A...........U...............V... |
19180 | aa 05 00 00 e6 06 00 00 85 0a 00 00 00 00 00 00 00 00 00 00 41 01 00 00 00 00 00 00 00 00 00 00 | ....................A........... |
191a0 | 00 00 00 00 00 00 00 00 84 11 00 00 bd 0f 00 00 f4 09 00 00 ad 05 00 00 00 00 00 00 50 0a 00 00 | ............................P... |
191c0 | a0 01 00 00 50 00 00 00 74 04 00 00 b2 09 00 00 64 11 00 00 00 00 00 00 aa 02 00 00 a3 10 00 00 | ....P...t.......d............... |
191e0 | 78 02 00 00 00 00 00 00 00 00 00 00 05 0d 00 00 de 11 00 00 00 00 00 00 4b 01 00 00 d7 11 00 00 | x.......................K....... |
19200 | b1 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb 0d 00 00 7c 12 00 00 00 00 00 00 00 03 00 00 | ....................|........... |
19220 | c6 0b 00 00 00 00 00 00 00 00 00 00 05 03 00 00 f7 0e 00 00 00 00 00 00 00 00 00 00 f4 0e 00 00 | ................................ |
19240 | 7b 0c 00 00 28 05 00 00 00 00 00 00 2f 04 00 00 e5 10 00 00 91 05 00 00 ce 11 00 00 5b 03 00 00 | {...(......./...............[... |
19260 | e0 04 00 00 00 00 00 00 00 00 00 00 46 09 00 00 65 03 00 00 9d 13 00 00 10 0f 00 00 00 00 00 00 | ............F...e............... |
19280 | 02 0e 00 00 b5 08 00 00 1b 02 00 00 84 0b 00 00 c0 02 00 00 94 00 00 00 00 00 00 00 93 03 00 00 | ................................ |
192a0 | 00 00 00 00 00 00 00 00 7a 0f 00 00 00 00 00 00 00 00 00 00 6e 04 00 00 7e 0a 00 00 2b 09 00 00 | ........z...........n...~...+... |
192c0 | 00 00 00 00 00 00 00 00 41 0b 00 00 00 00 00 00 dd 00 00 00 b9 0c 00 00 0e 0a 00 00 91 00 00 00 | ........A....................... |
192e0 | 00 00 00 00 c8 11 00 00 f8 0c 00 00 00 00 00 00 6b 11 00 00 35 0c 00 00 c9 0b 00 00 d9 0d 00 00 | ................k...5........... |
19300 | 86 0f 00 00 1b 0d 00 00 8f 03 00 00 00 00 00 00 02 07 00 00 24 01 00 00 30 03 00 00 5c 00 00 00 | ....................$...0...\... |
19320 | af 03 00 00 ff 04 00 00 0a 0e 00 00 cb 08 00 00 52 11 00 00 c7 01 00 00 b1 0d 00 00 c7 03 00 00 | ................R............... |
19340 | f3 09 00 00 d8 0d 00 00 ef 06 00 00 00 00 00 00 5b 05 00 00 42 08 00 00 d2 09 00 00 a6 0f 00 00 | ................[...B........... |
19360 | 96 0b 00 00 40 02 00 00 07 10 00 00 0b 11 00 00 00 00 00 00 43 09 00 00 00 00 00 00 dc 07 00 00 | ....@...............C........... |
19380 | 96 0d 00 00 85 06 00 00 fc 0f 00 00 bd 13 00 00 84 0f 00 00 d0 0b 00 00 ac 0f 00 00 00 00 00 00 | ................................ |
193a0 | ac 02 00 00 00 00 00 00 00 00 00 00 80 0b 00 00 05 0a 00 00 a8 00 00 00 93 10 00 00 bc 03 00 00 | ................................ |
193c0 | 00 00 00 00 85 01 00 00 00 00 00 00 00 00 00 00 99 01 00 00 28 0d 00 00 4e 0f 00 00 bd 0c 00 00 | ....................(...N....... |
193e0 | 00 00 00 00 00 00 00 00 53 0b 00 00 51 05 00 00 00 00 00 00 00 00 00 00 d7 02 00 00 ec 11 00 00 | ........S...Q................... |
19400 | 24 0f 00 00 bf 13 00 00 4d 0d 00 00 00 00 00 00 06 10 00 00 9b 12 00 00 b9 06 00 00 bf 12 00 00 | $.......M....................... |
19420 | 00 00 00 00 22 10 00 00 0b 02 00 00 00 00 00 00 00 00 00 00 bd 04 00 00 a8 0e 00 00 47 0a 00 00 | ....".......................G... |
19440 | d4 06 00 00 c5 09 00 00 2d 06 00 00 13 08 00 00 2b 11 00 00 4f 09 00 00 e6 0a 00 00 b5 01 00 00 | ........-.......+...O........... |
19460 | fa 06 00 00 8e 06 00 00 51 02 00 00 b5 00 00 00 00 00 00 00 be 0b 00 00 00 00 00 00 fe 01 00 00 | ........Q....................... |
19480 | 59 05 00 00 c5 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 0b 00 00 9c 0f 00 00 08 0c 00 00 | Y...................r........... |
194a0 | 00 00 00 00 f3 0e 00 00 73 0d 00 00 0d 13 00 00 d0 04 00 00 9c 05 00 00 ed 06 00 00 56 0d 00 00 | ........s...................V... |
194c0 | 4c 13 00 00 15 0d 00 00 5d 13 00 00 d0 08 00 00 22 13 00 00 9e 0b 00 00 59 08 00 00 00 00 00 00 | L.......].......".......Y....... |
194e0 | b0 0d 00 00 d4 0e 00 00 2a 08 00 00 5a 04 00 00 9c 0d 00 00 c8 0a 00 00 00 00 00 00 00 00 00 00 | ........*...Z................... |
19500 | 1f 06 00 00 a2 11 00 00 36 0b 00 00 da 00 00 00 23 00 00 00 45 04 00 00 2f 09 00 00 00 00 00 00 | ........6.......#...E.../....... |
19520 | 8c 0a 00 00 00 00 00 00 b5 04 00 00 55 13 00 00 92 03 00 00 00 00 00 00 ed 11 00 00 00 00 00 00 | ............U................... |
19540 | 80 13 00 00 d3 08 00 00 55 0e 00 00 69 13 00 00 6c 0e 00 00 e2 04 00 00 00 00 00 00 6b 13 00 00 | ........U...i...l...........k... |
19560 | 7e 06 00 00 8c 09 00 00 13 13 00 00 39 11 00 00 ca 02 00 00 8c 01 00 00 00 00 00 00 6f 13 00 00 | ~...........9...............o... |
19580 | e0 01 00 00 5c 03 00 00 d8 12 00 00 00 00 00 00 00 00 00 00 8e 05 00 00 a7 0d 00 00 00 00 00 00 | ....\........................... |
195a0 | 9d 04 00 00 f7 11 00 00 ee 0b 00 00 00 00 00 00 43 01 00 00 2c 08 00 00 00 00 00 00 00 00 00 00 | ................C...,........... |
195c0 | 58 0a 00 00 e1 0b 00 00 09 0b 00 00 66 11 00 00 26 0e 00 00 00 00 00 00 79 05 00 00 64 10 00 00 | X...........f...&.......y...d... |
195e0 | da 13 00 00 ce 06 00 00 00 00 00 00 a5 03 00 00 00 00 00 00 42 09 00 00 18 02 00 00 76 0b 00 00 | ....................B.......v... |
19600 | a6 0e 00 00 fb 0a 00 00 71 12 00 00 73 02 00 00 c5 0f 00 00 dc 08 00 00 23 07 00 00 16 0c 00 00 | ........q...s...........#....... |
19620 | e1 0a 00 00 0c 04 00 00 0b 0e 00 00 02 0a 00 00 fe 06 00 00 00 00 00 00 00 00 00 00 64 08 00 00 | ............................d... |
19640 | 39 02 00 00 5b 0e 00 00 d6 01 00 00 8b 12 00 00 cd 11 00 00 00 00 00 00 c7 05 00 00 66 09 00 00 | 9...[.......................f... |
19660 | 7a 08 00 00 27 09 00 00 e0 03 00 00 fc 00 00 00 e4 0e 00 00 eb 12 00 00 b1 05 00 00 a7 00 00 00 | z...'........................... |
19680 | b4 07 00 00 3c 03 00 00 03 00 00 00 06 0e 00 00 00 00 00 00 00 00 00 00 e9 06 00 00 2e 0a 00 00 | ....<........................... |
196a0 | 00 00 00 00 fe 12 00 00 00 00 00 00 16 04 00 00 00 00 00 00 6e 0a 00 00 9f 09 00 00 54 11 00 00 | ....................n.......T... |
196c0 | cc 02 00 00 54 02 00 00 94 0a 00 00 05 0b 00 00 e3 0f 00 00 9a 0b 00 00 35 0a 00 00 a4 03 00 00 | ....T...................5....... |
196e0 | 52 10 00 00 a9 09 00 00 fc 05 00 00 12 0a 00 00 ff 12 00 00 9f 03 00 00 f2 09 00 00 3b 13 00 00 | R...........................;... |
19700 | 00 00 00 00 28 13 00 00 9d 07 00 00 50 0e 00 00 0b 05 00 00 88 05 00 00 00 00 00 00 9e 10 00 00 | ....(.......P................... |
19720 | da 0d 00 00 00 00 00 00 00 00 00 00 a2 01 00 00 df 10 00 00 f1 05 00 00 ec 00 00 00 bd 0d 00 00 | ................................ |
19740 | 96 01 00 00 3c 0a 00 00 00 00 00 00 a1 10 00 00 35 13 00 00 72 09 00 00 6e 0f 00 00 40 06 00 00 | ....<...........5...r...n...@... |
19760 | a6 13 00 00 f7 0f 00 00 51 0e 00 00 77 03 00 00 b3 07 00 00 12 13 00 00 00 00 00 00 7b 07 00 00 | ........Q...w...............{... |
19780 | 07 07 00 00 02 11 00 00 00 00 00 00 33 08 00 00 f3 00 00 00 c0 0d 00 00 80 0d 00 00 6e 10 00 00 | ............3...............n... |
197a0 | 00 00 00 00 2f 07 00 00 00 00 00 00 f9 0c 00 00 3f 0b 00 00 3c 08 00 00 53 0c 00 00 4e 00 00 00 | ..../...........?...<...S...N... |
197c0 | f0 05 00 00 7c 06 00 00 5a 02 00 00 6f 05 00 00 d6 0e 00 00 1b 09 00 00 43 08 00 00 68 01 00 00 | ....|...Z...o...........C...h... |
197e0 | 00 00 00 00 4f 03 00 00 d9 07 00 00 90 0d 00 00 98 0b 00 00 2a 0c 00 00 00 00 00 00 2f 11 00 00 | ....O...............*......./... |
19800 | 52 04 00 00 75 0d 00 00 a4 09 00 00 d9 03 00 00 77 10 00 00 00 00 00 00 f1 0e 00 00 00 00 00 00 | R...u...........w............... |
19820 | 7c 05 00 00 ed 03 00 00 be 09 00 00 d9 00 00 00 48 0c 00 00 0e 0e 00 00 97 12 00 00 f0 03 00 00 | |...............H............... |
19840 | 81 13 00 00 00 00 00 00 e6 10 00 00 a1 13 00 00 00 00 00 00 01 0f 00 00 0f 0a 00 00 00 00 00 00 | ................................ |
19860 | 00 00 00 00 5b 08 00 00 60 10 00 00 c7 13 00 00 00 00 00 00 b8 0e 00 00 0d 03 00 00 68 02 00 00 | ....[...`...................h... |
19880 | 00 00 00 00 00 00 00 00 95 09 00 00 66 02 00 00 00 00 00 00 47 10 00 00 00 00 00 00 35 0e 00 00 | ............f.......G.......5... |
198a0 | 00 00 00 00 f7 07 00 00 b2 0c 00 00 00 00 00 00 cc 13 00 00 1f 0d 00 00 00 00 00 00 8e 00 00 00 | ................................ |
198c0 | 47 08 00 00 fb 0b 00 00 00 00 00 00 61 05 00 00 f7 06 00 00 00 00 00 00 9d 0a 00 00 31 02 00 00 | G...........a...............1... |
198e0 | 15 0a 00 00 e0 0e 00 00 00 00 00 00 b3 12 00 00 da 03 00 00 48 12 00 00 00 00 00 00 e8 0b 00 00 | ....................H........... |
19900 | c7 0d 00 00 00 00 00 00 27 04 00 00 b5 0b 00 00 00 00 00 00 00 00 00 00 99 05 00 00 38 0a 00 00 | ........'...................8... |
19920 | 00 00 00 00 dd 02 00 00 00 00 00 00 39 07 00 00 30 07 00 00 4d 07 00 00 a7 12 00 00 42 0e 00 00 | ............9...0...M.......B... |
19940 | b0 0e 00 00 00 00 00 00 00 00 00 00 bc 13 00 00 66 05 00 00 8d 10 00 00 c4 09 00 00 61 03 00 00 | ................f...........a... |
19960 | 8b 11 00 00 b0 0c 00 00 00 00 00 00 3e 01 00 00 13 01 00 00 67 03 00 00 12 12 00 00 00 00 00 00 | ............>.......g........... |
19980 | 30 00 00 00 00 00 00 00 31 06 00 00 82 01 00 00 c8 0d 00 00 fc 02 00 00 00 00 00 00 00 00 00 00 | 0.......1....................... |
199a0 | 0d 0e 00 00 0a 0d 00 00 99 09 00 00 13 0b 00 00 e2 07 00 00 00 00 00 00 00 00 00 00 ce 07 00 00 | ................................ |
199c0 | 00 00 00 00 00 00 00 00 22 0c 00 00 0d 06 00 00 f0 0b 00 00 0c 06 00 00 54 01 00 00 60 0a 00 00 | ........"...............T...`... |
199e0 | 39 0a 00 00 d2 0b 00 00 55 0a 00 00 74 0d 00 00 05 12 00 00 5d 08 00 00 e5 0c 00 00 70 05 00 00 | 9.......U...t.......].......p... |
19a00 | 58 12 00 00 ac 0e 00 00 5f 10 00 00 df 11 00 00 5e 0b 00 00 00 00 00 00 1e 03 00 00 d8 13 00 00 | X......._.......^............... |
19a20 | dc 06 00 00 d3 0c 00 00 4a 13 00 00 1d 01 00 00 00 00 00 00 05 11 00 00 1f 04 00 00 83 06 00 00 | ........J....................... |
19a40 | 78 0d 00 00 d8 02 00 00 20 11 00 00 e8 02 00 00 6c 07 00 00 04 03 00 00 00 00 00 00 8d 09 00 00 | x...............l............... |
19a60 | 00 00 00 00 6c 0a 00 00 5e 02 00 00 24 04 00 00 00 00 00 00 a9 03 00 00 00 00 00 00 61 10 00 00 | ....l...^...$...............a... |
19a80 | 00 00 00 00 ae 09 00 00 fd 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 08 00 00 97 02 00 00 | ................................ |
19aa0 | 8e 03 00 00 00 00 00 00 e1 09 00 00 4e 0a 00 00 fc 0b 00 00 72 01 00 00 56 0a 00 00 24 0a 00 00 | ............N.......r...V...$... |
19ac0 | 00 00 00 00 21 0b 00 00 84 0c 00 00 b8 0f 00 00 49 10 00 00 73 13 00 00 a0 00 00 00 8b 09 00 00 | ....!...........I...s........... |
19ae0 | 27 0b 00 00 ea 08 00 00 48 01 00 00 00 00 00 00 36 13 00 00 13 06 00 00 27 0f 00 00 1e 09 00 00 | '.......H.......6.......'....... |
19b00 | ca 0c 00 00 00 00 00 00 44 09 00 00 00 00 00 00 ff 0c 00 00 00 00 00 00 54 0d 00 00 00 00 00 00 | ........D...............T....... |
19b20 | b9 03 00 00 e2 02 00 00 bb 0b 00 00 14 08 00 00 8b 13 00 00 eb 03 00 00 00 00 00 00 00 00 00 00 | ................................ |
19b40 | 3d 01 00 00 76 0f 00 00 9d 0f 00 00 1f 01 00 00 c0 01 00 00 2c 13 00 00 50 01 00 00 00 00 00 00 | =...v...............,...P....... |
19b60 | f6 0a 00 00 53 09 00 00 ae 01 00 00 d2 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....S........................... |
19b80 | 00 00 00 00 f4 05 00 00 00 00 00 00 38 09 00 00 cf 01 00 00 a2 12 00 00 32 13 00 00 20 09 00 00 | ............8...........2....... |
19ba0 | e6 09 00 00 46 0d 00 00 e1 05 00 00 00 00 00 00 ec 04 00 00 48 10 00 00 95 04 00 00 16 0f 00 00 | ....F...............H........... |
19bc0 | 9b 10 00 00 4a 08 00 00 f2 07 00 00 98 0a 00 00 1d 0a 00 00 aa 12 00 00 00 00 00 00 31 12 00 00 | ....J.......................1... |
19be0 | 57 00 00 00 0e 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ee 0d 00 00 94 06 00 00 | W............................... |
19c00 | 00 00 00 00 00 00 00 00 5d 0d 00 00 00 00 00 00 a4 0c 00 00 00 00 00 00 bc 05 00 00 21 04 00 00 | ........]...................!... |
19c20 | 8d 13 00 00 7e 07 00 00 71 00 00 00 04 04 00 00 05 07 00 00 91 13 00 00 b6 10 00 00 39 08 00 00 | ....~...q...................9... |
19c40 | 00 00 00 00 00 00 00 00 a5 0c 00 00 92 06 00 00 e5 00 00 00 00 00 00 00 45 10 00 00 2d 00 00 00 | ........................E...-... |
19c60 | 00 00 00 00 49 0e 00 00 00 00 00 00 16 11 00 00 a8 07 00 00 00 00 00 00 00 00 00 00 da 01 00 00 | ....I........................... |
19c80 | 31 0f 00 00 e2 0d 00 00 28 0a 00 00 88 09 00 00 f5 0c 00 00 b3 06 00 00 c8 06 00 00 53 05 00 00 | 1.......(...................S... |
19ca0 | a8 02 00 00 dd 07 00 00 85 04 00 00 7d 0f 00 00 8c 08 00 00 06 09 00 00 e4 0d 00 00 e2 01 00 00 | ............}................... |
19cc0 | 00 00 00 00 af 07 00 00 10 00 00 00 1d 06 00 00 00 00 00 00 e7 05 00 00 00 00 00 00 00 00 00 00 | ................................ |
19ce0 | c8 10 00 00 ce 05 00 00 e5 0b 00 00 ad 02 00 00 00 00 00 00 bf 0e 00 00 08 0d 00 00 63 12 00 00 | ............................c... |
19d00 | 94 0d 00 00 c4 07 00 00 a1 11 00 00 f3 11 00 00 e1 02 00 00 62 09 00 00 00 00 00 00 69 0d 00 00 | ....................b.......i... |
19d20 | 00 00 00 00 00 00 00 00 cf 08 00 00 b8 07 00 00 7c 0a 00 00 00 00 00 00 64 07 00 00 f2 12 00 00 | ................|.......d....... |
19d40 | 0a 12 00 00 d2 03 00 00 f4 04 00 00 97 0f 00 00 08 04 00 00 34 0c 00 00 c2 05 00 00 00 00 00 00 | ....................4........... |
19d60 | 00 00 00 00 e1 12 00 00 2b 06 00 00 0d 05 00 00 7f 0e 00 00 00 00 00 00 6e 0e 00 00 46 01 00 00 | ........+...............n...F... |
19d80 | 86 08 00 00 00 00 00 00 90 0e 00 00 54 13 00 00 69 07 00 00 dc 10 00 00 6e 05 00 00 f6 05 00 00 | ............T...i.......n....... |
19da0 | ca 10 00 00 62 12 00 00 cc 01 00 00 d9 0c 00 00 63 13 00 00 74 09 00 00 14 07 00 00 00 00 00 00 | ....b...........c...t........... |
19dc0 | 79 13 00 00 00 00 00 00 94 08 00 00 17 07 00 00 40 13 00 00 cb 05 00 00 09 04 00 00 00 00 00 00 | y...............@............... |
19de0 | 7c 00 00 00 4e 05 00 00 00 00 00 00 41 06 00 00 3a 0c 00 00 88 10 00 00 e5 05 00 00 ba 0d 00 00 | |...N.......A...:............... |
19e00 | 00 00 00 00 5b 02 00 00 b3 03 00 00 37 03 00 00 00 00 00 00 f4 02 00 00 16 0a 00 00 17 06 00 00 | ....[.......7................... |
19e20 | 0d 12 00 00 00 00 00 00 00 00 00 00 72 04 00 00 00 00 00 00 d9 12 00 00 c3 04 00 00 b7 0c 00 00 | ............r................... |
19e40 | 00 00 00 00 bf 01 00 00 4f 0e 00 00 36 11 00 00 00 00 00 00 00 00 00 00 bf 06 00 00 88 03 00 00 | ........O...6................... |
19e60 | d5 04 00 00 00 00 00 00 00 00 00 00 21 03 00 00 3b 06 00 00 00 00 00 00 84 03 00 00 ce 04 00 00 | ............!...;............... |
19e80 | 7e 00 00 00 6c 08 00 00 06 06 00 00 ad 09 00 00 5d 02 00 00 00 00 00 00 00 00 00 00 79 0d 00 00 | ~...l...........]...........y... |
19ea0 | 3d 10 00 00 7a 0a 00 00 00 00 00 00 86 02 00 00 59 0d 00 00 00 00 00 00 74 06 00 00 9f 12 00 00 | =...z...........Y.......t....... |
19ec0 | 00 00 00 00 8f 04 00 00 de 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 01 00 00 | ............................|... |
19ee0 | 75 0f 00 00 00 00 00 00 00 00 00 00 88 07 00 00 6e 00 00 00 50 02 00 00 a9 12 00 00 00 00 00 00 | u...............n...P........... |
19f00 | 2b 02 00 00 d5 0f 00 00 07 13 00 00 24 00 00 00 dc 05 00 00 6f 0f 00 00 cb 10 00 00 2f 12 00 00 | +...........$.......o......./... |
19f20 | 00 00 00 00 a2 0f 00 00 b7 10 00 00 00 00 00 00 69 0e 00 00 00 00 00 00 21 02 00 00 ca 0f 00 00 | ................i.......!....... |
19f40 | 2f 0a 00 00 54 03 00 00 00 00 00 00 b3 05 00 00 00 00 00 00 00 00 00 00 4c 02 00 00 ab 11 00 00 | /...T...................L....... |
19f60 | 89 0b 00 00 00 00 00 00 9e 0e 00 00 12 03 00 00 65 01 00 00 f3 0a 00 00 c8 02 00 00 2f 0b 00 00 | ................e.........../... |
19f80 | 6b 06 00 00 76 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8b 03 00 00 16 10 00 00 5b 0d 00 00 | k...v.......................[... |
19fa0 | f9 11 00 00 9c 0a 00 00 7b 13 00 00 41 0e 00 00 03 0d 00 00 d9 0f 00 00 ac 05 00 00 0e 0d 00 00 | ........{...A................... |
19fc0 | 02 02 00 00 98 04 00 00 c1 0c 00 00 c3 03 00 00 00 00 00 00 59 03 00 00 1f 0e 00 00 ac 12 00 00 | ....................Y........... |
19fe0 | 2c 0a 00 00 00 00 00 00 a7 10 00 00 42 02 00 00 ac 10 00 00 7d 0e 00 00 10 12 00 00 ed 0d 00 00 | ,...........B.......}........... |
1a000 | 37 11 00 00 70 09 00 00 00 00 00 00 69 0f 00 00 e6 00 00 00 19 0c 00 00 46 0f 00 00 31 04 00 00 | 7...p.......i...........F...1... |
1a020 | 00 00 00 00 18 09 00 00 bd 10 00 00 e8 06 00 00 1b 0c 00 00 00 00 00 00 9a 09 00 00 85 10 00 00 | ................................ |
1a040 | fa 12 00 00 00 00 00 00 56 08 00 00 b9 0d 00 00 e7 00 00 00 93 02 00 00 44 05 00 00 00 00 00 00 | ........V...............D....... |
1a060 | 00 00 00 00 00 00 00 00 d8 03 00 00 0c 10 00 00 a9 05 00 00 a8 01 00 00 48 03 00 00 5e 0d 00 00 | ........................H...^... |
1a080 | 00 00 00 00 8d 03 00 00 d6 10 00 00 ab 00 00 00 38 06 00 00 4f 0f 00 00 b6 0e 00 00 d2 04 00 00 | ................8...O........... |
1a0a0 | 85 05 00 00 54 07 00 00 f5 12 00 00 5a 0b 00 00 98 03 00 00 00 00 00 00 00 00 00 00 82 0d 00 00 | ....T.......Z................... |
1a0c0 | 72 0c 00 00 00 00 00 00 0c 13 00 00 00 00 00 00 99 12 00 00 a1 0f 00 00 22 03 00 00 5c 0f 00 00 | r......................."...\... |
1a0e0 | 18 00 00 00 00 00 00 00 63 0d 00 00 91 02 00 00 4b 04 00 00 51 06 00 00 52 06 00 00 93 0a 00 00 | ........c.......K...Q...R....... |
1a100 | 00 00 00 00 87 06 00 00 00 00 00 00 21 0f 00 00 01 0d 00 00 02 08 00 00 1b 12 00 00 8e 04 00 00 | ............!................... |
1a120 | 3e 0a 00 00 9a 11 00 00 d4 0f 00 00 00 00 00 00 52 03 00 00 8d 0c 00 00 75 02 00 00 1c 01 00 00 | >...............R.......u....... |
1a140 | 14 09 00 00 e1 07 00 00 ae 13 00 00 04 0e 00 00 14 0b 00 00 07 09 00 00 7e 0b 00 00 d8 06 00 00 | ........................~....... |
1a160 | e7 02 00 00 1f 02 00 00 00 00 00 00 00 00 00 00 d0 0a 00 00 b4 11 00 00 00 00 00 00 eb 0a 00 00 | ................................ |
1a180 | 00 00 00 00 00 00 00 00 ad 0a 00 00 00 00 00 00 a2 07 00 00 4a 0b 00 00 91 09 00 00 08 03 00 00 | ....................J........... |
1a1a0 | 91 06 00 00 f8 00 00 00 ca 12 00 00 97 00 00 00 00 00 00 00 00 00 00 00 d3 0b 00 00 2b 0f 00 00 | ............................+... |
1a1c0 | 20 0b 00 00 00 00 00 00 72 07 00 00 7f 13 00 00 5e 06 00 00 0b 00 00 00 ab 07 00 00 fa 0d 00 00 | ........r.......^............... |
1a1e0 | 00 00 00 00 00 00 00 00 cc 08 00 00 fa 0a 00 00 16 0d 00 00 00 00 00 00 1f 13 00 00 fb 10 00 00 | ................................ |
1a200 | af 06 00 00 55 05 00 00 c3 0a 00 00 f2 06 00 00 df 0f 00 00 b1 09 00 00 ae 03 00 00 8f 06 00 00 | ....U........................... |
1a220 | 3b 0c 00 00 5b 11 00 00 51 0c 00 00 08 10 00 00 1f 0c 00 00 7b 05 00 00 00 00 00 00 00 00 00 00 | ;...[...Q...........{........... |
1a240 | a9 01 00 00 00 00 00 00 f3 03 00 00 45 12 00 00 dd 12 00 00 22 04 00 00 00 00 00 00 00 00 00 00 | ............E......."........... |
1a260 | 3b 05 00 00 e8 0c 00 00 4b 0b 00 00 00 00 00 00 f1 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ;.......K....................... |
1a280 | b3 02 00 00 e0 09 00 00 b8 11 00 00 57 06 00 00 00 00 00 00 00 00 00 00 2f 0c 00 00 00 00 00 00 | ............W.........../....... |
1a2a0 | 5d 03 00 00 59 02 00 00 6f 10 00 00 00 00 00 00 0f 02 00 00 00 00 00 00 47 07 00 00 00 00 00 00 | ]...Y...o...............G....... |
1a2c0 | 00 00 00 00 51 0a 00 00 3c 13 00 00 00 00 00 00 03 0b 00 00 c1 09 00 00 00 00 00 00 50 06 00 00 | ....Q...<...................P... |
1a2e0 | c6 0f 00 00 4d 01 00 00 00 00 00 00 38 0d 00 00 98 06 00 00 00 00 00 00 24 03 00 00 00 00 00 00 | ....M.......8...........$....... |
1a300 | 8e 02 00 00 00 00 00 00 f5 07 00 00 d3 02 00 00 00 00 00 00 88 13 00 00 10 03 00 00 12 0e 00 00 | ................................ |
1a320 | d7 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 06 00 00 1a 07 00 00 7f 02 00 00 00 00 00 00 | ................................ |
1a340 | ce 08 00 00 33 0b 00 00 6f 04 00 00 67 01 00 00 00 00 00 00 ce 0f 00 00 00 00 00 00 e3 0a 00 00 | ....3...o...g................... |
1a360 | be 02 00 00 7c 02 00 00 fb 0c 00 00 00 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 97 10 00 00 | ....|..........."............... |
1a380 | 96 0a 00 00 fb 0e 00 00 3f 13 00 00 e5 07 00 00 51 00 00 00 49 01 00 00 30 0b 00 00 00 00 00 00 | ........?.......Q...I...0....... |
1a3a0 | 04 0b 00 00 5d 09 00 00 2a 0f 00 00 bc 06 00 00 c1 0a 00 00 64 00 00 00 87 0f 00 00 d8 10 00 00 | ....]...*...........d........... |
1a3c0 | 9c 11 00 00 af 04 00 00 8a 0f 00 00 9a 01 00 00 e4 0a 00 00 1b 07 00 00 28 08 00 00 d8 07 00 00 | ........................(....... |
1a3e0 | 00 00 00 00 00 00 00 00 87 13 00 00 00 00 00 00 ba 0e 00 00 fc 01 00 00 87 04 00 00 00 00 00 00 | ................................ |
1a400 | ac 0d 00 00 7b 08 00 00 41 10 00 00 dc 0a 00 00 26 07 00 00 00 00 00 00 6b 05 00 00 00 00 00 00 | ....{...A.......&.......k....... |
1a420 | 6a 0f 00 00 98 11 00 00 17 0c 00 00 3a 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | j...........:................... |
1a440 | df 0e 00 00 84 0d 00 00 00 00 00 00 66 04 00 00 00 00 00 00 00 00 00 00 b7 0e 00 00 50 04 00 00 | ............f...............P... |
1a460 | 99 0c 00 00 00 00 00 00 00 00 00 00 f2 00 00 00 0d 09 00 00 00 00 00 00 c0 03 00 00 b0 07 00 00 | ................................ |
1a480 | 57 0c 00 00 1c 08 00 00 ff 0a 00 00 99 0a 00 00 9a 08 00 00 61 0b 00 00 00 00 00 00 c3 13 00 00 | W...................a........... |
1a4a0 | 95 07 00 00 00 00 00 00 ee 0c 00 00 a1 01 00 00 00 00 00 00 92 05 00 00 5c 0e 00 00 00 00 00 00 | ........................\....... |
1a4c0 | 1f 00 00 00 af 00 00 00 f1 00 00 00 a2 10 00 00 1e 0c 00 00 2c 03 00 00 00 00 00 00 4b 09 00 00 | ....................,.......K... |
1a4e0 | e0 0d 00 00 75 05 00 00 80 09 00 00 e0 0f 00 00 d5 0e 00 00 06 0a 00 00 bb 02 00 00 f2 02 00 00 | ....u........................... |
1a500 | b1 00 00 00 a8 09 00 00 00 00 00 00 00 00 00 00 bf 05 00 00 fa 00 00 00 95 0b 00 00 f8 0a 00 00 | ................................ |
1a520 | 8c 0b 00 00 00 00 00 00 00 00 00 00 c2 12 00 00 76 05 00 00 29 00 00 00 00 00 00 00 a5 00 00 00 | ................v...)........... |
1a540 | f0 08 00 00 00 00 00 00 f0 06 00 00 80 0c 00 00 71 0d 00 00 55 10 00 00 77 02 00 00 00 00 00 00 | ................q...U...w....... |
1a560 | 2b 08 00 00 fd 10 00 00 00 00 00 00 33 07 00 00 9c 0c 00 00 a5 01 00 00 68 0f 00 00 9a 0a 00 00 | +...........3...........h....... |
1a580 | 00 00 00 00 cd 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf 0c 00 00 06 00 00 00 00 00 00 00 | ................................ |
1a5a0 | 00 00 00 00 6e 07 00 00 3d 03 00 00 ae 0a 00 00 d2 10 00 00 c3 10 00 00 00 00 00 00 00 0f 00 00 | ....n...=....................... |
1a5c0 | 00 00 00 00 aa 0d 00 00 00 00 00 00 ce 02 00 00 87 01 00 00 a4 08 00 00 00 00 00 00 0d 0d 00 00 | ................................ |
1a5e0 | 00 00 00 00 47 09 00 00 59 13 00 00 00 00 00 00 69 09 00 00 00 00 00 00 3d 07 00 00 b9 09 00 00 | ....G...Y.......i.......=....... |
1a600 | a8 0d 00 00 00 00 00 00 7b 04 00 00 00 00 00 00 ed 0a 00 00 7b 02 00 00 00 00 00 00 00 00 00 00 | ........{...........{........... |
1a620 | 15 0b 00 00 86 12 00 00 41 03 00 00 00 00 00 00 2e 0e 00 00 50 0d 00 00 00 00 00 00 79 00 00 00 | ........A...........P.......y... |
1a640 | 48 06 00 00 10 09 00 00 00 00 00 00 ef 07 00 00 d0 0d 00 00 89 0e 00 00 8e 09 00 00 18 13 00 00 | H............................... |
1a660 | 00 00 00 00 57 0d 00 00 ad 07 00 00 00 00 00 00 9b 06 00 00 c5 08 00 00 11 13 00 00 09 05 00 00 | ....W........................... |
1a680 | 21 00 00 00 96 0e 00 00 20 0f 00 00 db 07 00 00 fd 0a 00 00 a7 0f 00 00 00 00 00 00 e8 00 00 00 | !............................... |
1a6a0 | 8b 0f 00 00 14 01 00 00 cd 13 00 00 00 00 00 00 48 09 00 00 00 00 00 00 00 00 00 00 50 12 00 00 | ................H...........P... |
1a6c0 | a9 06 00 00 d1 0d 00 00 f7 10 00 00 55 02 00 00 00 00 00 00 74 13 00 00 f0 0e 00 00 79 03 00 00 | ............U.......t.......y... |
1a6e0 | 09 0d 00 00 2c 06 00 00 00 00 00 00 ae 0d 00 00 00 00 00 00 00 00 00 00 b7 07 00 00 ad 0c 00 00 | ....,........................... |
1a700 | 98 09 00 00 ea 10 00 00 4f 07 00 00 80 0a 00 00 97 0c 00 00 f9 06 00 00 07 12 00 00 a4 0a 00 00 | ........O....................... |
1a720 | 7e 0e 00 00 66 12 00 00 62 03 00 00 00 00 00 00 b5 02 00 00 00 00 00 00 00 00 00 00 4a 03 00 00 | ~...f...b...................J... |
1a740 | 00 00 00 00 00 00 00 00 00 00 00 00 b8 06 00 00 ea 0e 00 00 ec 02 00 00 cc 04 00 00 8b 06 00 00 | ................................ |
1a760 | 00 00 00 00 dc 01 00 00 e8 07 00 00 e2 0c 00 00 00 00 00 00 00 00 00 00 0b 07 00 00 00 00 00 00 | ................................ |
1a780 | 1c 09 00 00 bb 09 00 00 bb 00 00 00 9f 06 00 00 00 00 00 00 41 11 00 00 60 03 00 00 7a 04 00 00 | ....................A...`...z... |
1a7a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23 12 00 00 c9 08 00 00 ea 0f 00 00 | ....................#........... |
1a7c0 | 33 02 00 00 16 01 00 00 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 4d | 3........!<h:h:h:h:h:h:h:h/x>:.M |
1a7e0 | 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 | atch.everything.except.the.speci |
1a800 | 66 69 65 64 20 70 72 65 66 69 78 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d | fied.prefix..!<h:h:h:h:h:h:h:h>- |
1a820 | 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 | <h:h:h:h:h:h:h:h>:.Match.everyth |
1a840 | 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 2e 00 | ing.except.the.specified.range.. |
1a860 | 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 | !<h:h:h:h:h:h:h:h>:.Match.everyt |
1a880 | 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 | hing.except.the.specified.addres |
1a8a0 | 73 2e 00 21 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e | s..!<x.x.x.x/x>:.Match.everythin |
1a8c0 | 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 75 62 6e 65 74 2e 00 21 | g.except.the.specified.subnet..! |
1a8e0 | 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 | <x.x.x.x>-<x.x.x.x>:.Match.every |
1a900 | 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 | thing.except.the.specified.range |
1a920 | 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 | ..!<x.x.x.x>:.Match.everything.e |
1a940 | 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 22 4d 61 | xcept.the.specified.address.."Ma |
1a960 | 6e 61 67 65 64 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 | naged.address.configuration".fla |
1a980 | 67 00 22 4f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 23 23 23 | g."Other.configuration".flag.### |
1a9a0 | 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 c3 a4 23 23 23 23 23 23 23 23 23 23 23 23 23 20 | ################..#############. |
1a9c0 | 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | Flowtables.Firewall.Configuratio |
1a9e0 | 6e 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | n.############################## |
1aa00 | 23 23 23 00 28 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 63 | ###.(This.can.be.useful.when.a.c |
1aa20 | 61 6c 6c 65 64 20 73 65 72 76 69 63 65 20 68 61 73 20 6d 61 6e 79 20 61 6e 64 2f 6f 72 20 6f 66 | alled.service.has.many.and/or.of |
1aa40 | 74 65 6e 20 63 68 61 6e 67 69 6e 67 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | ten.changing.destination.address |
1aa60 | 65 73 20 2d 20 65 2e 67 2e 20 4e 65 74 66 6c 69 78 2e 29 00 2a 2a 31 2d 32 35 34 2a 2a 20 e2 80 | es.-.e.g..Netflix.).**1-254**... |
1aa80 | 93 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 | ..interfaces.with.a.channel.numb |
1aaa0 | 65 72 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e | er.interfere.with.interfering.in |
1aac0 | 74 65 72 66 61 63 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 74 68 65 | terfaces.and.interfaces.with.the |
1aae0 | 20 73 61 6d 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 2e 20 2a 2a 69 6e 74 65 72 66 65 72 | .same.channel.number..**interfer |
1ab00 | 69 6e 67 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 | ing**.....interfering.interfaces |
1ab20 | 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 61 | .are.assumed.to.interfere.with.a |
1ab40 | 6c 6c 20 6f 74 68 65 72 20 63 68 61 6e 6e 65 6c 73 20 65 78 63 65 70 74 20 6e 6f 6e 69 6e 74 65 | ll.other.channels.except.noninte |
1ab60 | 72 66 65 72 69 6e 67 20 63 68 61 6e 6e 65 6c 73 2e 20 2a 2a 6e 6f 6e 69 6e 74 65 72 66 65 72 69 | rfering.channels..**noninterferi |
1ab80 | 6e 67 2a 2a 20 e2 80 93 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 | ng**.....noninterfering.interfac |
1aba0 | 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 6f 6e 6c 79 20 69 6e 74 65 72 66 65 72 65 | es.are.assumed.to.only.interfere |
1abc0 | 20 77 69 74 68 20 74 68 65 6d 73 65 6c 76 65 73 2e 00 2a 2a 31 2e 20 43 6f 6e 66 69 72 6d 20 49 | .with.themselves..**1..Confirm.I |
1abe0 | 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 62 65 74 77 65 65 6e 20 74 75 6e 6e 65 6c 20 73 6f | P.connectivity.between.tunnel.so |
1ac00 | 75 72 63 65 2d 61 64 64 72 65 73 73 20 61 6e 64 20 72 65 6d 6f 74 65 3a 2a 2a 00 2a 2a 31 30 2a | urce-address.and.remote:**.**10* |
1ac20 | 2a 20 2d 20 3a 61 62 62 72 3a 60 49 50 46 49 58 20 28 49 50 20 46 6c 6f 77 20 49 6e 66 6f 72 6d | *.-.:abbr:`IPFIX.(IP.Flow.Inform |
1ac40 | 61 74 69 6f 6e 20 45 78 70 6f 72 74 29 60 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 33 39 31 37 | ation.Export)`.as.per.:rfc:`3917 |
1ac60 | 60 00 2a 2a 32 2e 20 43 6f 6e 66 69 72 6d 20 74 68 65 20 6c 69 6e 6b 20 74 79 70 65 20 68 61 73 | `.**2..Confirm.the.link.type.has |
1ac80 | 20 62 65 65 6e 20 73 65 74 20 74 6f 20 47 52 45 3a 2a 2a 00 2a 2a 33 2e 20 43 6f 6e 66 69 72 6d | .been.set.to.GRE:**.**3..Confirm |
1aca0 | 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 63 72 6f 73 73 20 74 68 65 20 74 75 6e 6e | .IP.connectivity.across.the.tunn |
1acc0 | 65 6c 3a 2a 2a 00 2a 2a 35 2a 2a 20 2d 20 4d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 76 65 72 73 69 6f | el:**.**5**.-.Most.common.versio |
1ace0 | 6e 2c 20 62 75 74 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 49 50 76 34 20 66 6c 6f 77 73 20 | n,.but.restricted.to.IPv4.flows. |
1ad00 | 6f 6e 6c 79 00 2a 2a 39 2a 2a 20 2d 20 4e 65 74 46 6c 6f 77 20 76 65 72 73 69 6f 6e 20 39 20 28 | only.**9**.-.NetFlow.version.9.( |
1ad20 | 64 65 66 61 75 6c 74 29 00 2a 2a 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a | default).**AS.path.length.check* |
1ad40 | 2a 00 2a 2a 41 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 65 78 74 65 72 6e 61 6c 20 63 68 | *.**Already-selected.external.ch |
1ad60 | 65 63 6b 2a 2a 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 49 6e 62 6f 75 6e 64 20 74 72 | eck**.**Applies.to:**.Inbound.tr |
1ad80 | 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 | affic..**Applies.to:**.Outbound. |
1ada0 | 54 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e | Traffic..**Applies.to:**.Outboun |
1adc0 | 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 79 20 74 68 65 20 74 72 61 66 66 69 63 20 70 | d.traffic..**Apply.the.traffic.p |
1ade0 | 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 67 72 65 73 73 20 6f 72 | olicy.to.an.interface.ingress.or |
1ae00 | 20 65 67 72 65 73 73 2a 2a 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f | .egress**..**Bridge.Port?**:.cho |
1ae20 | 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 69 66 20 | ose.appropiate.path.based.on.if. |
1ae40 | 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 | interface.were.the.packet.was.re |
1ae60 | 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e | ceived.is.part.of.a.bridge,.or.n |
1ae80 | 6f 74 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 | ot..**Bridge.Port?**:.choose.app |
1aea0 | 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 69 | ropriate.path.based.on.whether.i |
1aec0 | 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 | nterface.where.the.packet.was.re |
1aee0 | 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e | ceived.is.part.of.a.bridge,.or.n |
1af00 | 6f 74 2e 00 2a 2a 43 69 73 63 6f 20 49 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 43 6c 69 65 | ot..**Cisco.IOS.Router:**.**Clie |
1af20 | 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 76 69 61 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e | nt.IP.address.via.IP.range.defin |
1af40 | 69 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 73 75 62 6e 65 74 73 20 76 69 61 20 | ition**.**Client.IP.subnets.via. |
1af60 | 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 75 73 74 65 72 2d 4c 69 73 74 20 6c | CIDR.notation**.**Cluster-List.l |
1af80 | 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 43 6f 6e 6e 74 72 61 63 6b 20 49 67 6e 6f 72 65 | ength.check**.**Conntrack.Ignore |
1afa0 | 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 73 79 | **:.rules.defined.under.``set.sy |
1afc0 | 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 5b 69 70 76 34 20 7c 20 69 70 | stem.conntrack.ignore.[ipv4.|.ip |
1afe0 | 76 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 43 72 65 61 74 65 20 61 20 74 72 61 66 66 69 63 20 70 6f | v6]....``..**Create.a.traffic.po |
1b000 | 6c 69 63 79 2a 2a 2e 00 2a 2a 44 48 43 50 28 76 36 29 2a 2a 00 2a 2a 44 48 43 50 76 36 20 50 72 | licy**..**DHCP(v6)**.**DHCPv6.Pr |
1b020 | 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 50 44 29 2a 2a 00 2a 2a 44 65 73 74 69 6e 61 | efix.Delegation.(PD)**.**Destina |
1b040 | 74 69 6f 6e 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 | tion.NAT**:.rules.defined.under. |
1b060 | 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e | ``set.[nat.|.nat66].destination. |
1b080 | 2e 2e 60 60 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 | ..``..**Destination.is.the.route |
1b0a0 | 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 | r?**:.choose.appropiate.path.bas |
1b0c0 | 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 | ed.on.destination.IP.address..Tr |
1b0e0 | 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 6e 65 73 20 74 6f 20 2a 2a 66 6f | ansit.forward.continunes.to.**fo |
1b100 | 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 | rward**,.while.traffic.that.dest |
1b120 | 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 | ination.IP.address.is.configured |
1b140 | 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e | .on.the.router.continues.to.**in |
1b160 | 70 75 74 2a 2a 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 | put**..**Destination.is.the.rout |
1b180 | 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 | er?**:.choose.appropriate.path.b |
1b1a0 | 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 | ased.on.destination.IP.address.. |
1b1c0 | 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 66 | Transit.forward.continues.to.**f |
1b1e0 | 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 | orward**,.while.traffic.that.des |
1b200 | 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | tination.IP.address.is.configure |
1b220 | 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 | d.on.the.router.continues.to.**i |
1b240 | 6e 70 75 74 2a 2a 2e 00 2a 2a 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 75 6e 64 65 72 20 64 65 | nput**..**Documentation.under.de |
1b260 | 76 65 6c 6f 70 6d 65 6e 74 2a 2a 00 2a 2a 45 74 68 65 72 6e 65 74 20 28 70 72 6f 74 6f 63 6f 6c | velopment**.**Ethernet.(protocol |
1b280 | 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 72 20 73 6f 75 72 63 65 20 | ,.destination.address.or.source. |
1b2a0 | 61 64 64 72 65 73 73 29 2a 2a 00 2a 2a 45 78 61 6d 70 6c 65 3a 2a 2a 00 2a 2a 45 78 74 65 72 6e | address)**.**Example:**.**Extern |
1b2c0 | 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2a 2a 00 2a 2a 46 | al.check**.**Firewall.mark**.**F |
1b2e0 | 6c 6f 77 74 61 62 6c 65 20 52 65 66 65 72 65 6e 63 65 3a 2a 2a 20 68 74 74 70 73 3a 2f 2f 64 6f | lowtable.Reference:**.https://do |
1b300 | 63 73 2e 6b 65 72 6e 65 6c 2e 6f 72 67 2f 6e 65 74 77 6f 72 6b 69 6e 67 2f 6e 66 5f 66 6c 6f 77 | cs.kernel.org/networking/nf_flow |
1b320 | 74 61 62 6c 65 2e 68 74 6d 6c 00 2a 2a 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f | table.html.**For.more.informatio |
1b340 | 6e 2a 2a 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 | n**.of.Netfilter.hooks.and.Linux |
1b360 | 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 | .networking.packet.flows.can.be. |
1b380 | 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 | found.in.`Netfilter-Hooks.<https |
1b3a0 | 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c | ://wiki.nftables.org/wiki-nftabl |
1b3c0 | 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 | es/index.php/Netfilter_hooks>`_. |
1b3e0 | 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 | **Forward.(Bridge)**:.stage.wher |
1b400 | 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 61 73 73 70 61 73 69 6e 67 20 74 68 | e.traffic.that.is.trasspasing.th |
1b420 | 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 | rough.the.bridge.is.filtered.and |
1b440 | 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a | .controlled:.**Forward.(Bridge)* |
1b460 | 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 | *:.stage.where.traffic.that.is.t |
1b480 | 72 65 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 | respasing.through.the.bridge.is. |
1b4a0 | 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 | filtered.and.controlled:.**Forwa |
1b4c0 | 72 64 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 | rd**:.stage.where.transit.traffi |
1b4e0 | 63 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 | c.can.be.filtered.and.controlled |
1b500 | 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 | ..This.includes.ipv4.and.ipv6.fi |
1b520 | 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 48 61 72 | ltering.rules,.defined.in:.**Har |
1b540 | 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 3a 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f | dware.offload:**.should.be.suppo |
1b560 | 72 74 65 64 20 62 79 20 74 68 65 20 4e 49 43 73 20 75 73 65 64 2e 00 2a 2a 49 47 50 20 63 6f 73 | rted.by.the.NICs.used..**IGP.cos |
1b580 | 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 49 50 76 34 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 | t.check**.**IPv4.(DSCP.value,.ma |
1b5a0 | 78 69 6d 75 6d 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 | ximum.packet.length,.protocol,.s |
1b5c0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | ource.address,**.**destination.a |
1b5e0 | 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e | ddress,.source.port,.destination |
1b600 | 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a 2a 49 50 76 36 20 28 44 53 | .port.or.TCP.flags)**.**IPv6.(DS |
1b620 | 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 79 6c 6f 61 64 20 6c 65 6e 67 74 68 | CP.value,.maximum.payload.length |
1b640 | 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a | ,.protocol,.source.address,**.** |
1b660 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 | destination.address,.source.port |
1b680 | 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 | ,.destination.port.or.TCP.flags) |
1b6a0 | 2a 2a 00 2a 2a 49 66 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 20 70 6f | **.**If.you.are.looking.for.a.po |
1b6c0 | 6c 69 63 79 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2a 2a | licy.for.your.outbound.traffic** |
1b6e0 | 20 62 75 74 20 79 6f 75 20 64 6f 6e 27 74 20 6b 6e 6f 77 20 77 68 69 63 68 20 6f 6e 65 20 79 6f | .but.you.don't.know.which.one.yo |
1b700 | 75 20 6e 65 65 64 20 61 6e 64 20 79 6f 75 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 67 6f 20 | u.need.and.you.don't.want.to.go. |
1b720 | 74 68 72 6f 75 67 68 20 65 76 65 72 79 20 70 6f 73 73 69 62 6c 65 20 70 6f 6c 69 63 79 20 73 68 | through.every.possible.policy.sh |
1b740 | 6f 77 6e 20 68 65 72 65 2c 20 2a 2a 6f 75 72 20 62 65 74 20 69 73 20 74 68 61 74 20 68 69 67 68 | own.here,.**our.bet.is.that.high |
1b760 | 6c 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 2a | ly.likely.you.are.looking.for.a* |
1b780 | 2a 20 53 68 61 70 65 72 5f 20 2a 2a 70 6f 6c 69 63 79 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 | *.Shaper_.**policy.and.you.want. |
1b7a0 | 74 6f 2a 2a 20 3a 72 65 66 3a 60 73 65 74 20 69 74 73 20 71 75 65 75 65 73 20 3c 65 6d 62 65 64 | to**.:ref:`set.its.queues.<embed |
1b7c0 | 3e 60 20 2a 2a 61 73 20 46 51 2d 43 6f 44 65 6c 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 | >`.**as.FQ-CoDel**..**Important. |
1b7e0 | 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 | note.about.default-actions:**.If |
1b800 | 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 | .default.action.for.any.base.cha |
1b820 | 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 | in.is.not.defined,.then.the.defa |
1b840 | 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 | ult.action.is.set.to.**accept**. |
1b860 | 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e | for.that.chain..For.custom.chain |
1b880 | 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 | s,.if.default.action.is.not.defi |
1b8a0 | 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 | ned,.then.the.default-action.is. |
1b8c0 | 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 | set.to.**drop**.**Important.note |
1b8e0 | 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 | .about.default-actions:**.If.def |
1b900 | 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 | ault.action.for.any.base.chain.i |
1b920 | 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 | s.not.defined,.then.the.default. |
1b940 | 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 | action.is.set.to.**accept**.for. |
1b960 | 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 | that.chain..For.custom.chains,.i |
1b980 | 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c | f.default.action.is.not.defined, |
1b9a0 | 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 | .then.the.default-action.is.set. |
1b9c0 | 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 | to.**drop**..**Important.note.ab |
1b9e0 | 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c | out.default-actions:**.If.defaul |
1ba00 | 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 | t.action.for.any.chain.is.not.de |
1ba20 | 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 | fined,.then.the.default.action.i |
1ba40 | 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 | s.set.to.**accept**.for.that.cha |
1ba60 | 69 6e 2e 20 4f 6e 6c 79 20 66 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 74 68 65 20 | in..Only.for.custom.chains,.the. |
1ba80 | 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a | default.action.is.set.to.**drop* |
1baa0 | 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c | *..**Important.note.about.defaul |
1bac0 | 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 | t-actions:**.If.default.action.f |
1bae0 | 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 | or.any.chain.is.not.defined,.the |
1bb00 | 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a | n.the.default.action.is.set.to.* |
1bb20 | 2a 64 72 6f 70 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 00 2a 2a 49 6d 70 6f 72 74 | *drop**.for.that.chain..**Import |
1bb40 | 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 | ant.note.on.usage.of.terms:**.Th |
1bb60 | 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d | e.firewall.makes.use.of.the.term |
1bb80 | 73 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 | s.`forward`,.`input`,.and.`outpu |
1bba0 | 74 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 4d 6f 72 65 20 69 6e 66 | t`.for.firewall.policy..More.inf |
1bbc0 | 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 | ormation.of.Netfilter.hooks.and. |
1bbe0 | 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 | Linux.networking.packet.flows.ca |
1bc00 | 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c | n.be.found.in.`Netfilter-Hooks.< |
1bc20 | 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e | https://wiki.nftables.org/wiki-n |
1bc40 | 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b | ftables/index.php/Netfilter_hook |
1bc60 | 73 3e 60 5f 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f | s>`_.**Important.note.on.usage.o |
1bc80 | 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 | f.terms:**.The.firewall.makes.us |
1bca0 | 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 69 6e 60 2c 20 60 6f 75 74 60 2c 20 61 6e 64 20 | e.of.the.terms.`in`,.`out`,.and. |
1bcc0 | 60 6c 6f 63 61 6c 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 55 73 65 | `local`.for.firewall.policy..Use |
1bce0 | 72 73 20 65 78 70 65 72 69 65 6e 63 65 64 20 77 69 74 68 20 6e 65 74 66 69 6c 74 65 72 20 6f 66 | rs.experienced.with.netfilter.of |
1bd00 | 74 65 6e 20 63 6f 6e 66 75 73 65 20 60 69 6e 60 20 74 6f 20 62 65 20 61 20 72 65 66 65 72 65 6e | ten.confuse.`in`.to.be.a.referen |
1bd20 | 63 65 20 74 6f 20 74 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 61 6e 64 20 60 6f 75 | ce.to.the.`INPUT`.chain,.and.`ou |
1bd40 | 74 60 20 74 68 65 20 60 4f 55 54 50 55 54 60 20 63 68 61 69 6e 20 66 72 6f 6d 20 6e 65 74 66 69 | t`.the.`OUTPUT`.chain.from.netfi |
1bd60 | 6c 74 65 72 2e 20 54 68 69 73 20 69 73 20 6e 6f 74 20 74 68 65 20 63 61 73 65 2e 20 54 68 65 73 | lter..This.is.not.the.case..Thes |
1bd80 | 65 20 69 6e 73 74 65 61 64 20 69 6e 64 69 63 61 74 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 | e.instead.indicate.the.use.of.th |
1bda0 | 65 20 60 46 4f 52 57 41 52 44 60 20 63 68 61 69 6e 20 61 6e 64 20 65 69 74 68 65 72 20 74 68 65 | e.`FORWARD`.chain.and.either.the |
1bdc0 | 20 69 6e 70 75 74 20 6f 72 20 6f 75 74 70 75 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 | .input.or.output.interface..The. |
1bde0 | 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 | `INPUT`.chain,.which.is.used.for |
1be00 | 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 4f 53 2c 20 69 73 20 61 20 72 | .local.traffic.to.the.OS,.is.a.r |
1be20 | 65 66 65 72 65 6e 63 65 20 74 6f 20 61 73 20 60 6c 6f 63 61 6c 60 20 77 69 74 68 20 72 65 73 70 | eference.to.as.`local`.with.resp |
1be40 | 65 63 74 20 74 6f 20 69 74 73 20 69 6e 70 75 74 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 49 6d | ect.to.its.input.interface..**Im |
1be60 | 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 | portant.note:**.This.documentati |
1be80 | 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 | on.is.valid.only.for.VyOS.Sagitt |
1bea0 | 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 | a.prior.to.1.4-rolling-202308040 |
1bec0 | 35 35 37 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 | 557.**Important.note:**.This.doc |
1bee0 | 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f | umentation.is.valid.only.for.VyO |
1bf00 | 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 59 | S.Sagitta.prior.to.1.4-rolling-Y |
1bf20 | 59 59 59 4d 4d 44 44 48 48 6d 6d 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 | YYYMMDDHHmm.**Input**:.stage.whe |
1bf40 | 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 | re.traffic.destinated.to.the.rou |
1bf60 | 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 | ter.itself.can.be.filtered.and.c |
1bf80 | 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c | ontrolled..This.is.where.all.rul |
1bfa0 | 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c | es.for.securing.the.router.shoul |
1bfc0 | 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 | d.take.place..This.includes.ipv4 |
1bfe0 | 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e | .and.ipv6.filtering.rules,.defin |
1c000 | 65 64 20 69 6e 3a 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 | ed.in:.**Input**:.stage.where.tr |
1c020 | 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 | affic.destined.for.the.router.it |
1c040 | 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c | self.can.be.filtered.and.control |
1c060 | 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 | led..This.is.where.all.rules.for |
1c080 | 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 | .securing.the.router.should.take |
1c0a0 | 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 | .place..This.includes.ipv4.and.i |
1c0c0 | 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a | pv6.filtering.rules,.defined.in: |
1c0e0 | 00 2a 2a 49 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2a 2a 00 2a 2a 4c 45 46 54 2a 2a 00 2a 2a 4c | .**Interface.name**.**LEFT**.**L |
1c100 | 45 46 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e | EFT:**.*.WAN.interface.on.`eth0. |
1c120 | 32 30 31 60 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 | 201`.*.`eth0.201`.interface.IP:. |
1c140 | 60 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 | `172.18.201.10/24`.*.`vti10`.int |
1c160 | 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 32 2f 33 31 60 20 2a 20 60 64 75 6d 30 | erface.IP:.`10.0.0.2/31`.*.`dum0 |
1c180 | 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 31 31 2e 31 2f 32 34 60 20 28 | `.interface.IP:.`10.0.11.1/24`.( |
1c1a0 | 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 00 2a 2a 4c 61 79 65 72 20 33 20 | for.testing.purposes).**Layer.3. |
1c1c0 | 62 72 69 64 67 65 2a 2a 3a 20 57 68 65 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 | bridge**:.When.an.IP.address.is. |
1c1e0 | 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 | assigned.to.the.bridge.interface |
1c200 | 2c 20 61 6e 64 20 69 66 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 | ,.and.if.traffic.is.sent.to.the. |
1c220 | 72 6f 75 74 65 72 20 74 6f 20 74 68 69 73 20 49 50 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 75 | router.to.this.IP.(for.example.u |
1c240 | 73 69 6e 67 20 73 75 63 68 20 49 50 20 61 73 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 29 | sing.such.IP.as.default.gateway) |
1c260 | 2c 20 74 68 65 6e 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 2a 2a 62 72 69 64 67 | ,.then.rules.defined.for.**bridg |
1c280 | 65 20 66 69 72 65 77 61 6c 6c 2a 2a 20 77 6f 6e 27 74 20 6d 61 74 63 68 2c 20 61 6e 64 20 66 69 | e.firewall**.won't.match,.and.fi |
1c2a0 | 72 65 77 61 6c 6c 20 61 6e 61 6c 79 73 69 73 20 63 6f 6e 74 69 6e 75 65 73 20 61 74 20 2a 2a 49 | rewall.analysis.continues.at.**I |
1c2c0 | 50 20 6c 61 79 65 72 2a 2a 2e 00 2a 2a 4c 65 61 66 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | P.layer**..**Leaf2.configuration |
1c2e0 | 3a 2a 2a 00 2a 2a 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c | :**.**Leaf3.configuration:**.**L |
1c300 | 69 6e 75 78 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 3a 2a 2a 00 2a 2a 4c 6f 63 61 6c | inux.systemd-networkd:**.**Local |
1c320 | 20 70 72 65 66 65 72 65 6e 63 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 72 6f 75 74 | .preference.check**.**Local.rout |
1c340 | 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 45 44 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 75 6c 74 69 2d | e.check**.**MED.check**.**Multi- |
1c360 | 70 61 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 4e 6f 64 65 20 31 2a 2a 00 2a 2a 4e 6f 64 65 20 31 | path.check**.**Node.1**.**Node.1 |
1c380 | 3a 2a 2a 00 2a 2a 4e 6f 64 65 20 32 2a 2a 00 2a 2a 4e 6f 64 65 20 32 3a 2a 2a 00 2a 2a 4e 6f 64 | :**.**Node.2**.**Node.2:**.**Nod |
1c3a0 | 65 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 32 3a 2a 2a 00 2a 2a 4f 50 54 49 4f 4e 41 4c 3a 2a 2a 20 45 | e1:**.**Node2:**.**OPTIONAL:**.E |
1c3c0 | 78 63 6c 75 64 65 20 49 6e 74 65 72 2d 56 4c 41 4e 20 74 72 61 66 66 69 63 20 28 62 65 74 77 65 | xclude.Inter-VLAN.traffic.(betwe |
1c3e0 | 65 6e 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 29 20 66 72 6f 6d 20 50 42 52 00 2a | en.VLAN10.and.VLAN11).from.PBR.* |
1c400 | 2a 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 | *OSPF.network.routing.table**... |
1c420 | 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f | ..includes.a.list.of.acquired.ro |
1c440 | 75 74 65 73 20 66 6f 72 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c 65 20 6e 65 74 77 6f 72 6b 73 | utes.for.all.accessible.networks |
1c460 | 20 28 6f 72 20 61 67 67 72 65 67 61 74 65 64 20 61 72 65 61 20 72 61 6e 67 65 73 29 20 6f 66 20 | .(or.aggregated.area.ranges).of. |
1c480 | 4f 53 50 46 20 73 79 73 74 65 6d 2e 20 22 49 41 22 20 66 6c 61 67 20 6d 65 61 6e 73 20 74 68 61 | OSPF.system.."IA".flag.means.tha |
1c4a0 | 74 20 72 6f 75 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 69 6e 20 74 68 65 20 61 72 | t.route.destination.is.in.the.ar |
1c4c0 | 65 61 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 63 6f | ea.to.which.the.router.is.not.co |
1c4e0 | 6e 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 69 74 e2 80 99 73 20 61 6e 20 69 6e 74 65 72 2d 61 72 | nnected,.i.e..it...s.an.inter-ar |
1c500 | 65 61 20 70 61 74 68 2e 20 49 6e 20 73 71 75 61 72 65 20 62 72 61 63 6b 65 74 73 20 61 20 73 75 | ea.path..In.square.brackets.a.su |
1c520 | 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 66 6f 72 20 61 6c 6c 20 6c 69 6e 6b 73 20 74 68 72 6f 75 | mmary.metric.for.all.links.throu |
1c540 | 67 68 20 77 68 69 63 68 20 61 20 70 61 74 68 20 6c 69 65 73 20 74 6f 20 74 68 69 73 20 6e 65 74 | gh.which.a.path.lies.to.this.net |
1c560 | 77 6f 72 6b 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 20 22 76 69 61 22 20 70 72 65 66 69 78 20 | work.is.specified.."via".prefix. |
1c580 | 64 65 66 69 6e 65 73 20 61 20 72 6f 75 74 65 72 2d 67 61 74 65 77 61 79 2c 20 69 2e 65 2e 20 74 | defines.a.router-gateway,.i.e..t |
1c5a0 | 68 65 20 66 69 72 73 74 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 77 61 79 20 74 6f 20 74 68 | he.first.router.on.the.way.to.th |
1c5c0 | 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 6e 65 78 74 20 68 6f 70 29 2e 20 2a 2a 4f 53 50 46 | e.destination.(next.hop)..**OSPF |
1c5e0 | 20 72 6f 75 74 65 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c | .router.routing.table**.....incl |
1c600 | 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 | udes.a.list.of.acquired.routes.t |
1c620 | 6f 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c 65 20 41 42 52 73 20 61 6e 64 20 41 53 42 52 73 2e | o.all.accessible.ABRs.and.ASBRs. |
1c640 | 20 2a 2a 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a | .**OSPF.external.routing.table** |
1c660 | 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 | .....includes.a.list.of.acquired |
1c680 | 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 74 68 65 | .routes.that.are.external.to.the |
1c6a0 | 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 22 45 22 20 66 6c 61 67 20 70 6f 69 6e 74 73 20 74 | .OSPF.process.."E".flag.points.t |
1c6c0 | 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 74 79 70 65 20 | o.the.external.link.metric.type. |
1c6e0 | 28 45 31 20 e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 2c 20 45 32 20 e2 80 93 20 6d 65 | (E1.....metric.type.1,.E2.....me |
1c700 | 74 72 69 63 20 74 79 70 65 20 32 29 2e 20 45 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 | tric.type.2)..External.link.metr |
1c720 | 69 63 20 69 73 20 70 72 69 6e 74 65 64 20 69 6e 20 74 68 65 20 22 3c 6d 65 74 72 69 63 20 6f 66 | ic.is.printed.in.the."<metric.of |
1c740 | 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 65 | .the.router.which.advertised.the |
1c760 | 20 6c 69 6e 6b 3e 2f 3c 6c 69 6e 6b 20 6d 65 74 72 69 63 3e 22 20 66 6f 72 6d 61 74 2e 00 2a 2a | .link>/<link.metric>".format..** |
1c780 | 4f 6e 65 20 67 61 74 65 77 61 79 3a 2a 2a 00 2a 2a 4f 72 69 67 69 6e 20 63 68 65 63 6b 2a 2a 00 | One.gateway:**.**Origin.check**. |
1c7a0 | 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 | **Output**:.stage.where.traffic. |
1c7c0 | 74 68 61 74 20 69 73 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 | that.is.originated.by.the.router |
1c7e0 | 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 | .itself.can.be.filtered.and.cont |
1c800 | 72 6f 6c 6c 65 64 2e 20 42 61 72 65 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 | rolled..Bare.in.mind.that.this.t |
1c820 | 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f | raffic.can.be.a.new.connection.o |
1c840 | 72 69 67 69 6e 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 | riginted.by.a.internal.process.r |
1c860 | 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e | unning.on.VyOS.router,.such.as.N |
1c880 | 54 50 2c 20 6f 72 20 63 61 6e 20 62 65 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 | TP,.or.can.be.a.response.to.traf |
1c8a0 | 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a | fic.received.externaly.through.* |
1c8c0 | 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 | *inputt**.(for.example.response. |
1c8e0 | 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 | to.an.ssh.login.attempt.to.the.r |
1c900 | 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 | outer)..This.includes.ipv4.and.i |
1c920 | 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a | pv6.filtering.rules,.defined.in: |
1c940 | 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 | .**Output**:.stage.where.traffic |
1c960 | 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 | .that.originates.from.the.router |
1c980 | 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 | .itself.can.be.filtered.and.cont |
1c9a0 | 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 | rolled..Bear.in.mind.that.this.t |
1c9c0 | 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f | raffic.can.be.a.new.connection.o |
1c9e0 | 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 | riginated.by.a.internal.process. |
1ca00 | 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 | running.on.VyOS.router,.such.as. |
1ca20 | 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 | NTP,.or.a.response.to.traffic.re |
1ca40 | 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 | ceived.externaly.through.**input |
1ca60 | 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 | **.(for.example.response.to.an.s |
1ca80 | 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e | sh.login.attempt.to.the.router). |
1caa0 | 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c | .This.includes.ipv4.and.ipv6.fil |
1cac0 | 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 | tering.rules,.defined.in:.**Outp |
1cae0 | 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f | ut**:.stage.where.traffic.that.o |
1cb00 | 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 | riginates.from.the.router.itself |
1cb20 | 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e | .can.be.filtered.and.controlled. |
1cb40 | 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 | .Bear.in.mind.that.this.traffic. |
1cb60 | 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 | can.be.a.new.connection.originat |
1cb80 | 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 | ed.by.a.internal.process.running |
1cba0 | 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 | .on.VyOS.router,.such.as.NTP,.or |
1cbc0 | 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 | .a.response.to.traffic.received. |
1cbe0 | 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f | externaly.through.**inputt**.(fo |
1cc00 | 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 | r.example.response.to.an.ssh.log |
1cc20 | 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 | in.attempt.to.the.router)..This. |
1cc40 | 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 | includes.ipv4.and.ipv6.filtering |
1cc60 | 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 50 65 65 72 20 61 64 64 72 65 | .rules,.defined.in:.**Peer.addre |
1cc80 | 73 73 2a 2a 00 2a 2a 50 6f 6c 69 63 79 20 52 6f 75 74 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 | ss**.**Policy.Route**:.rules.def |
1cca0 | 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 70 6f 6c 69 63 79 20 5b 72 6f 75 74 65 20 7c | ined.under.``set.policy.[route.| |
1ccc0 | 20 72 6f 75 74 65 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 50 6f 6c 69 63 79 20 64 65 66 69 6e 69 74 | .route6]....``..**Policy.definit |
1cce0 | 69 6f 6e 3a 2a 2a 00 2a 2a 50 6f 73 74 72 6f 75 74 69 6e 67 2a 2a 3a 20 61 73 20 69 6e 20 2a 2a | ion:**.**Postrouting**:.as.in.** |
1cd00 | 50 72 65 72 6f 75 74 69 6e 67 2a 2a 2c 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 64 65 | Prerouting**,.several.actions.de |
1cd20 | 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 6f 66 20 56 79 4f 53 | fined.in.different.parts.of.VyOS |
1cd40 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 69 6e 20 | .configuration.are.performed.in. |
1cd60 | 74 68 69 73 20 73 74 61 67 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 3a 00 2a 2a 50 72 65 | this.stage..This.includes:.**Pre |
1cd80 | 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 | routing**:.several.actions.can.b |
1cda0 | 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e | e.done.in.this.stage,.and.curren |
1cdc0 | 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e | tly.these.actions.are.defined.in |
1cde0 | 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 | .different.parts.in.VyOS.configu |
1ce00 | 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 | ration..Order.is.important,.and. |
1ce20 | 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 | all.these.actions.are.performed. |
1ce40 | 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 | before.any.actions.defined.under |
1ce60 | 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 | .``firewall``.section..Relevant. |
1ce80 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 | configuration.that.acts.in.this. |
1cea0 | 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 | stage.are:.**Prerouting**:.sever |
1cec0 | 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 | al.actions.can.be.done.in.this.s |
1cee0 | 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e | tage,.and.currently.these.action |
1cf00 | 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 | s.are.defined.in.different.parts |
1cf20 | 20 69 6e 20 76 79 6f 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 | .in.vyos.configuration..Order.is |
1cf40 | 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e | .important,.and.all.these.action |
1cf60 | 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f | s.are.performed.before.any.actio |
1cf80 | 6e 73 20 64 65 66 69 6e 65 20 75 6e 64 65 72 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 | ns.define.under.``firewall``.sec |
1cfa0 | 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 | tion..Relevant.configuration.tha |
1cfc0 | 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 69 6d | t.acts.in.this.stage.are:.**Prim |
1cfe0 | 61 72 79 2a 2a 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 2a 2a 20 46 61 | ary**.**Queueing.discipline**.Fa |
1d000 | 69 72 2f 46 6c 6f 77 20 51 75 65 75 65 20 43 6f 44 65 6c 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 | ir/Flow.Queue.CoDel..**Queueing. |
1d020 | 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 | discipline:**.Deficit.Round.Robi |
1d040 | 6e 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 47 65 6e 65 | n..**Queueing.discipline:**.Gene |
1d060 | 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 72 6f 70 2e 00 2a 2a 51 75 65 | ralized.Random.Early.Drop..**Que |
1d080 | 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 48 69 65 72 61 72 63 68 69 63 61 6c | ueing.discipline:**.Hierarchical |
1d0a0 | 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 | .Token.Bucket..**Queueing.discip |
1d0c0 | 6c 69 6e 65 3a 2a 2a 20 49 6e 67 72 65 73 73 20 70 6f 6c 69 63 65 72 2e 00 2a 2a 51 75 65 75 65 | line:**.Ingress.policer..**Queue |
1d0e0 | 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 46 49 46 4f 20 28 50 61 63 6b 65 74 20 | ing.discipline:**.PFIFO.(Packet. |
1d100 | 46 69 72 73 74 20 49 6e 20 46 69 72 73 74 20 4f 75 74 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 | First.In.First.Out)..**Queueing. |
1d120 | 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 52 49 4f 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 | discipline:**.PRIO..**Queueing.d |
1d140 | 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 53 46 51 20 28 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 | iscipline:**.SFQ.(Stochastic.Fai |
1d160 | 72 6e 65 73 73 20 51 75 65 75 69 6e 67 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 | rness.Queuing)..**Queueing.disci |
1d180 | 70 6c 69 6e 65 3a 2a 2a 20 54 6f 63 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 2e 00 2a | pline:**.Tocken.Bucket.Filter..* |
1d1a0 | 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 6e 65 74 65 6d 20 28 4e | *Queueing.discipline:**.netem.(N |
1d1c0 | 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 29 20 2b 20 54 42 46 20 28 54 6f 6b 65 6e 20 42 75 | etwork.Emulator).+.TBF.(Token.Bu |
1d1e0 | 63 6b 65 74 20 46 69 6c 74 65 72 29 2e 00 2a 2a 52 31 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 | cket.Filter)..**R1.Static.Key**. |
1d200 | 2a 2a 52 31 2a 2a 00 2a 2a 52 32 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 32 2a 2a 00 | **R1**.**R2.Static.Key**.**R2**. |
1d220 | 2a 2a 52 41 44 49 55 53 20 62 61 73 65 64 20 49 50 20 70 6f 6f 6c 73 20 28 46 72 61 6d 65 64 2d | **RADIUS.based.IP.pools.(Framed- |
1d240 | 49 50 2d 41 64 64 72 65 73 73 29 2a 2a 00 2a 2a 52 41 44 49 55 53 20 73 65 73 73 69 6f 6e 73 20 | IP-Address)**.**RADIUS.sessions. |
1d260 | 6d 61 6e 61 67 65 6d 65 6e 74 20 44 4d 2f 43 6f 41 2a 2a 00 2a 2a 52 49 47 48 54 2a 2a 00 2a 2a | management.DM/CoA**.**RIGHT**.** |
1d280 | 52 49 47 48 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 | RIGHT:**.*.WAN.interface.on.`eth |
1d2a0 | 30 2e 32 30 32 60 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 | 0.202`.*.`eth0.201`.interface.IP |
1d2c0 | 3a 20 60 31 37 32 2e 31 38 2e 32 30 32 2e 31 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 | :.`172.18.202.10/24`.*.`vti10`.i |
1d2e0 | 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 33 2f 33 31 60 20 2a 20 60 64 75 | nterface.IP:.`10.0.0.3/31`.*.`du |
1d300 | 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 31 32 2e 31 2f 32 34 60 | m0`.interface.IP:.`10.0.12.1/24` |
1d320 | 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 00 2a 2a 52 6f 75 74 65 72 | .(for.testing.purposes).**Router |
1d340 | 20 31 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 32 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 33 2a 2a 00 2a | .1**.**Router.2**.**Router.3**.* |
1d360 | 2a 52 6f 75 74 65 72 2d 49 44 20 63 68 65 63 6b 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 | *Router-ID.check**.**Routes.lear |
1d380 | 6e 65 64 20 61 66 74 65 72 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 | ned.after.routing.policy.applied |
1d3a0 | 3a 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 62 65 66 6f 72 65 20 72 6f 75 74 | :**.**Routes.learned.before.rout |
1d3c0 | 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 2a 2a 53 57 31 2a 2a 00 2a 2a | ing.policy.applied:**.**SW1**.** |
1d3e0 | 53 57 32 2a 2a 00 2a 2a 53 65 63 6f 6e 64 61 72 79 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 | SW2**.**Secondary**.**Setting.up |
1d400 | 20 49 50 53 65 63 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 47 52 45 20 74 75 | .IPSec**.**Setting.up.the.GRE.tu |
1d420 | 6e 6e 65 6c 2a 2a 00 2a 2a 53 6f 75 72 63 65 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 | nnel**.**Source.NAT**:.rules.def |
1d440 | 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 | ined.under.``set.[nat.|.nat66].d |
1d460 | 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 2e 00 2a 2a 53 70 69 6e 65 31 20 43 6f 6e 66 69 67 | estination...``..**Spine1.Config |
1d480 | 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 53 74 61 74 75 73 2a 2a 00 2a 2a 54 6f 20 73 65 65 20 74 | uration:**.**Status**.**To.see.t |
1d4a0 | 68 65 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 3a 2a 2a 00 2a 2a 54 77 6f | he.redistributed.routes:**.**Two |
1d4c0 | 20 67 61 74 65 77 61 79 73 20 61 6e 64 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 73 3a | .gateways.and.different.metrics: |
1d4e0 | 2a 2a 00 2a 2a 56 4c 41 4e 20 49 44 2a 2a 00 2a 2a 56 79 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 | **.**VLAN.ID**.**VyOS.Router:**. |
1d500 | 2a 2a 57 65 69 67 68 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e | **Weight.check**.**address**.can |
1d520 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 61 73 20 | .be.specified.multiple.times.as. |
1d540 | 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 65 2e 67 2e 20 31 | IPv4.and/or.IPv6.address,.e.g..1 |
1d560 | 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 2f 6f 72 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 | 92.0.2.1/24.and/or.2001:db8::1/6 |
1d580 | 34 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d | 4.**address**.can.be.specified.m |
1d5a0 | 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2c 20 65 2e 67 2e 20 31 39 32 2e 31 36 38 2e 31 30 30 2e | ultiple.times,.e.g..192.168.100. |
1d5c0 | 31 20 61 6e 64 2f 6f 72 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 30 2f 32 34 00 2a 2a 61 6c 6c 6f | 1.and/or.192.168.100.0/24.**allo |
1d5e0 | 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 20 49 50 76 34 20 6f 6e 6c 79 20 69 66 20 63 6c 69 | w**.-.Negotiate.IPv4.only.if.cli |
1d600 | 65 6e 74 20 72 65 71 75 65 73 74 73 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 61 | ent.requests.(Default.value).**a |
1d620 | 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 6f 6e 6c 79 20 69 66 20 | llow**.-.Negotiate.IPv6.only.if. |
1d640 | 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 00 2a 2a 61 6c 6c 6f 77 2d 68 6f 73 74 2d 6e 65 74 | client.requests.**allow-host-net |
1d660 | 77 6f 72 6b 73 2a 2a 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 2a 2a 6e 65 | works**.cannot.be.used.with.**ne |
1d680 | 74 77 6f 72 6b 2a 2a 00 2a 2a 61 6c 77 61 79 73 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 | twork**.**always**:.Restart.cont |
1d6a0 | 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 79 20 65 78 69 74 2c 20 72 65 67 61 72 64 6c 65 73 | ainers.when.they.exit,.regardles |
1d6c0 | 73 20 6f 66 20 73 74 61 74 75 73 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 | s.of.status,.retrying.indefinite |
1d6e0 | 6c 79 00 2a 2a 61 70 70 65 6e 64 3a 2a 2a 20 54 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 | ly.**append:**.The.relay.agent.i |
1d700 | 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 70 70 65 6e 64 20 69 74 73 20 6f 77 6e 20 72 65 6c 61 | s.allowed.to.append.its.own.rela |
1d720 | 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 20 72 65 63 65 69 76 65 64 20 44 48 43 50 | y.information.to.a.received.DHCP |
1d740 | 20 70 61 63 6b 65 74 2c 20 64 69 73 72 65 67 61 72 64 69 6e 67 20 72 65 6c 61 79 20 69 6e 66 6f | .packet,.disregarding.relay.info |
1d760 | 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 70 | rmation.already.present.in.the.p |
1d780 | 61 63 6b 65 74 2e 00 2a 2a 61 70 70 6c 69 63 61 74 69 6f 6e 2a 2a 3a 20 61 6e 61 6c 79 7a 65 73 | acket..**application**:.analyzes |
1d7a0 | 20 72 65 63 65 69 76 65 64 20 66 6c 6f 77 20 64 61 74 61 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 | .received.flow.data.in.the.conte |
1d7c0 | 78 74 20 6f 66 20 69 6e 74 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 6f 72 20 74 72 61 | xt.of.intrusion.detection.or.tra |
1d7e0 | 66 66 69 63 20 70 72 6f 66 69 6c 69 6e 67 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 00 2a 2a 61 75 | ffic.profiling,.for.example.**au |
1d800 | 74 6f 2a 2a 20 e2 80 93 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 72 6d 69 6e 65 | to**.....automatically.determine |
1d820 | 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 20 2a 2a 77 69 72 65 64 2a 2a 20 | s.the.interface.type..**wired**. |
1d840 | e2 80 93 20 65 6e 61 62 6c 65 73 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 66 6f 72 20 77 69 | ....enables.optimisations.for.wi |
1d860 | 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 77 69 72 65 6c 65 73 73 2a 2a 20 e2 80 93 | red.interfaces..**wireless**.... |
1d880 | 20 64 69 73 61 62 6c 65 73 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 74 69 6d 69 73 61 74 69 | .disables.a.number.of.optimisati |
1d8a0 | 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6f 6e 6c 79 20 63 6f 72 72 65 63 74 20 6f 6e 20 77 69 72 | ons.that.are.only.correct.on.wir |
1d8c0 | 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 53 70 65 63 69 66 79 69 6e 67 20 77 69 72 65 6c 65 | ed.interfaces..Specifying.wirele |
1d8e0 | 73 73 20 69 73 20 61 6c 77 61 79 73 20 63 6f 72 72 65 63 74 2c 20 62 75 74 20 6d 61 79 20 63 61 | ss.is.always.correct,.but.may.ca |
1d900 | 75 73 65 20 73 6c 6f 77 65 72 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 61 6e 64 20 65 78 74 72 61 | use.slower.convergence.and.extra |
1d920 | 20 72 6f 75 74 69 6e 67 20 74 72 61 66 66 69 63 2e 00 2a 2a 62 61 6e 2d 74 69 6d 65 2a 2a 20 61 | .routing.traffic..**ban-time**.a |
1d940 | 6e 64 20 2a 2a 74 68 72 65 73 68 6f 6c 64 2a 2a 3a 20 74 68 65 73 65 20 76 61 6c 75 65 73 20 61 | nd.**threshold**:.these.values.a |
1d960 | 72 65 20 6b 65 70 74 20 76 65 72 79 20 6c 6f 77 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 61 73 | re.kept.very.low.in.order.to.eas |
1d980 | 69 6c 79 20 69 64 65 6e 74 69 66 79 20 61 6e 64 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 61 74 | ily.identify.and.generate.and.at |
1d9a0 | 74 61 63 6b 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 | tack..**broadcast**.....broadcas |
1d9c0 | 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 6e | t.IP.addresses.distribution..**n |
1d9e0 | 6f 6e 2d 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 | on-broadcast**.....address.distr |
1da00 | 69 62 75 74 69 6f 6e 20 69 6e 20 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 73 20 74 6f 70 6f 6c 6f 67 | ibution.in.NBMA.networks.topolog |
1da20 | 79 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 | y..**point-to-multipoint**.....a |
1da40 | 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d | ddress.distribution.in.point-to- |
1da60 | 6d 75 6c 74 69 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d | multipoint.networks..**point-to- |
1da80 | 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e | point**.....address.distribution |
1daa0 | 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 62 | .in.point-to-point.networks..**b |
1dac0 | 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 | roadcast**.....broadcast.IP.addr |
1dae0 | 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 | esses.distribution..**point-to-p |
1db00 | 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 | oint**.....address.distribution. |
1db20 | 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 63 61 | in.point-to-point.networks..**ca |
1db40 | 6c 6c 69 6e 67 2d 73 69 64 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 | lling-sid**.-.Calculate.interfac |
1db60 | 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 63 61 6c 6c 69 6e 67 2d 73 74 61 74 69 6f | e.identifier.from.calling-statio |
1db80 | 6e 2d 69 64 2e 00 2a 2a 63 69 73 63 6f 2a 2a 20 e2 80 93 20 61 20 72 6f 75 74 65 72 20 77 69 6c | n-id..**cisco**.....a.router.wil |
1dba0 | 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 73 20 41 42 52 20 69 66 20 69 74 20 68 61 73 | l.be.considered.as.ABR.if.it.has |
1dbc0 | 20 73 65 76 65 72 61 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 | .several.configured.links.to.the |
1dbe0 | 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 73 20 6f 6e 65 | .networks.in.different.areas.one |
1dc00 | 20 6f 66 20 77 68 69 63 68 20 69 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 4d 6f | .of.which.is.a.backbone.area..Mo |
1dc20 | 72 65 6f 76 65 72 2c 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 | reover,.the.link.to.the.backbone |
1dc40 | 20 61 72 65 61 20 73 68 6f 75 6c 64 20 62 65 20 61 63 74 69 76 65 20 28 77 6f 72 6b 69 6e 67 29 | .area.should.be.active.(working) |
1dc60 | 2e 20 2a 2a 69 62 6d 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 63 69 73 63 | ..**ibm**.....identical.to."cisc |
1dc80 | 6f 22 20 6d 6f 64 65 6c 20 62 75 74 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 61 20 62 61 63 6b | o".model.but.in.this.case.a.back |
1dca0 | 62 6f 6e 65 20 61 72 65 61 20 6c 69 6e 6b 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 63 74 69 76 65 | bone.area.link.may.not.be.active |
1dcc0 | 2e 20 2a 2a 73 74 61 6e 64 61 72 64 2a 2a 20 e2 80 93 20 72 6f 75 74 65 72 20 68 61 73 20 73 65 | ..**standard**.....router.has.se |
1dce0 | 76 65 72 61 6c 20 61 63 74 69 76 65 20 6c 69 6e 6b 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 | veral.active.links.to.different. |
1dd00 | 61 72 65 61 73 2e 20 2a 2a 73 68 6f 72 74 63 75 74 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 | areas..**shortcut**.....identica |
1dd20 | 6c 20 74 6f 20 22 73 74 61 6e 64 61 72 64 22 20 62 75 74 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 | l.to."standard".but.in.this.mode |
1dd40 | 6c 20 61 20 72 6f 75 74 65 72 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 61 20 63 | l.a.router.is.allowed.to.use.a.c |
1dd60 | 6f 6e 6e 65 63 74 65 64 20 61 72 65 61 73 20 74 6f 70 6f 6c 6f 67 79 20 77 69 74 68 6f 75 74 20 | onnected.areas.topology.without. |
1dd80 | 69 6e 76 6f 6c 76 69 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 66 6f 72 20 69 6e | involving.a.backbone.area.for.in |
1dda0 | 74 65 72 2d 61 72 65 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 2a 2a 63 6f 6c 6c 65 63 74 6f | ter-area.connections..**collecto |
1ddc0 | 72 2a 2a 3a 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 72 65 63 65 70 74 69 6f 6e 2c 20 | r**:.responsible.for.reception,. |
1dde0 | 73 74 6f 72 61 67 65 20 61 6e 64 20 70 72 65 2d 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 66 6c | storage.and.pre-processing.of.fl |
1de00 | 6f 77 20 64 61 74 61 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 61 20 66 6c 6f 77 20 65 78 70 | ow.data.received.from.a.flow.exp |
1de20 | 6f 72 74 65 72 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 20 20 74 68 69 73 20 61 72 65 61 | orter.**default**......this.area |
1de40 | 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 6f | .will.be.used.for.shortcutting.o |
1de60 | 6e 6c 79 20 69 66 20 41 42 52 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 | nly.if.ABR.does.not.have.a.link. |
1de80 | 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6f 72 20 74 68 69 73 20 6c 69 6e | to.the.backbone.area.or.this.lin |
1dea0 | 6b 20 77 61 73 20 6c 6f 73 74 2e 20 2a 2a 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 65 20 61 | k.was.lost..**enable**.....the.a |
1dec0 | 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e | rea.will.be.used.for.shortcuttin |
1dee0 | 67 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 74 68 61 74 20 67 6f 65 73 | g.every.time.the.route.that.goes |
1df00 | 20 74 68 72 6f 75 67 68 20 69 74 20 69 73 20 63 68 65 61 70 65 72 2e 20 2a 2a 64 69 73 61 62 6c | .through.it.is.cheaper..**disabl |
1df20 | 65 2a 2a 20 e2 80 93 20 74 68 69 73 20 61 72 65 61 20 69 73 20 6e 65 76 65 72 20 75 73 65 64 20 | e**.....this.area.is.never.used. |
1df40 | 62 79 20 41 42 52 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 2e 00 | by.ABR.for.routes.shortcutting.. |
1df60 | 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 | **default**.....enable.split-hor |
1df80 | 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 64 69 | izon.on.wired.interfaces,.and.di |
1dfa0 | 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 | sable.split-horizon.on.wireless. |
1dfc0 | 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 65 6e 61 62 6c | interfaces..**enable**.....enabl |
1dfe0 | 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | e.split-horizon.on.this.interfac |
1e000 | 65 73 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 20 73 70 6c 69 | es..**disable**.....disable.spli |
1e020 | 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 2a 2a | t-horizon.on.this.interfaces..** |
1e040 | 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 34 00 2a | deny**.-.Do.not.negotiate.IPv4.* |
1e060 | 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 | *deny**.-.Do.not.negotiate.IPv6. |
1e080 | 28 64 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 64 65 6e 79 20 | (default.value).**deny**.-.deny. |
1e0a0 | 6d 70 70 65 00 2a 2a 64 65 6e 79 2a 2a 3a 20 44 65 6e 79 20 73 65 63 6f 6e 64 20 73 65 73 73 69 | mppe.**deny**:.Deny.second.sessi |
1e0c0 | 6f 6e 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2e 00 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 2a | on.authorization..**destination* |
1e0e0 | 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 74 72 | *.-.specify.which.packets.the.tr |
1e100 | 61 6e 73 6c 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 2c 20 6f 6e | anslation.will.be.applied.to,.on |
1e120 | 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 | ly.based.on.the.destination.addr |
1e140 | 65 73 73 20 61 6e 64 2f 6f 72 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 63 6f 6e 66 69 67 75 72 65 | ess.and/or.port.number.configure |
1e160 | 64 2e 00 2a 2a 64 68 63 70 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 | d..**dhcp**.interface.address.is |
1e180 | 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 43 50 20 66 72 6f 6d 20 61 20 44 48 43 50 20 73 65 | .received.by.DHCP.from.a.DHCP.se |
1e1a0 | 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 2a 2a 64 68 63 70 76 36 2a 2a | rver.on.this.segment..**dhcpv6** |
1e1c0 | 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 | .interface.address.is.received.b |
1e1e0 | 79 20 44 48 43 50 76 36 20 66 72 6f 6d 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 6f 6e | y.DHCPv6.from.a.DHCPv6.server.on |
1e200 | 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 2a 2a 64 69 73 61 62 6c 65 2a 2a 3a 20 44 69 73 61 | .this.segment..**disable**:.Disa |
1e220 | 62 6c 65 73 20 73 65 73 73 69 6f 6e 20 63 6f 6e 74 72 6f 6c 2e 00 2a 2a 64 69 73 63 61 72 64 3a | bles.session.control..**discard: |
1e240 | 2a 2a 20 52 65 63 65 69 76 65 64 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 | **.Received.packets.which.alread |
1e260 | 79 20 63 6f 6e 74 61 69 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c | y.contain.relay.information.will |
1e280 | 20 62 65 20 64 69 73 63 61 72 64 65 64 2e 00 2a 2a 64 6f 77 6e 73 74 72 65 61 6d 3a 2a 2a 20 44 | .be.discarded..**downstream:**.D |
1e2a0 | 6f 77 6e 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 | ownstream.network.interfaces.are |
1e2c0 | 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 | .the.distribution.interfaces.to. |
1e2e0 | 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 65 74 77 6f 72 6b 73 2c 20 77 68 65 72 65 20 | the.destination.networks,.where. |
1e300 | 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 6e 74 73 20 63 61 6e 20 6a 6f 69 6e 20 67 72 6f 75 70 | multicast.clients.can.join.group |
1e320 | 73 20 61 6e 64 20 72 65 63 65 69 76 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 2e 20 4f 6e | s.and.receive.multicast.data..On |
1e340 | 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 20 | e.or.more.downstream.interfaces. |
1e360 | 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a 2a 65 78 70 6f 72 74 65 72 2a 2a | must.be.configured..**exporter** |
1e380 | 3a 20 61 67 67 72 65 67 61 74 65 73 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 66 6c 6f 77 73 20 | :.aggregates.packets.into.flows. |
1e3a0 | 61 6e 64 20 65 78 70 6f 72 74 73 20 66 6c 6f 77 20 72 65 63 6f 72 64 73 20 74 6f 77 61 72 64 73 | and.exports.flow.records.towards |
1e3c0 | 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 66 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 00 2a 2a 66 | .one.or.more.flow.collectors.**f |
1e3e0 | 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 | irewall.all-ping**.affects.only. |
1e400 | 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 | to.LOCAL.and.it.always.behaves.i |
1e420 | 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 69 72 | n.the.most.restrictive.way.**fir |
1e440 | 65 77 61 6c 6c 20 67 6c 6f 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 | ewall.global-options.all-ping**. |
1e460 | 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 | affects.only.to.LOCAL.and.it.alw |
1e480 | 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 | ays.behaves.in.the.most.restrict |
1e4a0 | 69 76 65 20 77 61 79 00 2a 2a 66 6f 72 77 61 72 64 3a 2a 2a 20 41 6c 6c 20 70 61 63 6b 65 74 73 | ive.way.**forward:**.All.packets |
1e4c0 | 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2c 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f | .are.forwarded,.relay.informatio |
1e4e0 | 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 | n.already.present.will.be.ignore |
1e500 | 64 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 | d..**inbound-interface**.-.appli |
1e520 | 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d | cable.only.to.:ref:`destination- |
1e540 | 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 | nat`..It.configures.the.interfac |
1e560 | 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 | e.which.is.used.for.the.inside.t |
1e580 | 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c | raffic.the.translation.rule.appl |
1e5a0 | 69 65 73 20 74 6f 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 | ies.to..**inbound-interface**.-. |
1e5c0 | 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 | applicable.only.to.:ref:`destina |
1e5e0 | 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 | tion-nat`..It.configures.the.int |
1e600 | 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 | erface.which.is.used.for.the.ins |
1e620 | 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 | ide.traffic.the.translation.rule |
1e640 | 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 | .applies.to..Interface.groups,.i |
1e660 | 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 | nverted.selection.and.wildcard,. |
1e680 | 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 69 70 76 34 2d 61 64 64 72 2a | are.also.supported..**ipv4-addr* |
1e6a0 | 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 | *.-.Calculate.interface.identifi |
1e6c0 | 65 72 20 66 72 6f 6d 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 2a 2a 6c 32 2a 2a 3a 20 49 74 | er.from.IPv4.address..**l2**:.It |
1e6e0 | 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 65 6e 74 73 20 61 72 65 20 6f 6e 20 73 61 6d 65 20 | .means.that.clients.are.on.same. |
1e700 | 6e 65 74 77 6f 72 6b 20 77 68 65 72 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 2e 2a 2a 28 64 65 | network.where.interface.is.**(de |
1e720 | 66 61 75 6c 74 29 2a 2a 00 2a 2a 6c 61 79 65 72 32 2a 2a 20 2d 20 55 73 65 73 20 58 4f 52 20 6f | fault)**.**layer2**.-.Uses.XOR.o |
1e740 | 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 70 61 63 | f.hardware.MAC.addresses.and.pac |
1e760 | 6b 65 74 20 74 79 70 65 20 49 44 20 66 69 65 6c 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 | ket.type.ID.field.to.generate.th |
1e780 | 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 00 2a 2a 6c 61 79 65 72 32 2b | e.hash..The.formula.is.**layer2+ |
1e7a0 | 33 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 61 20 63 6f 6d 62 69 6e 61 | 3**.-.This.policy.uses.a.combina |
1e7c0 | 74 69 6f 6e 20 6f 66 20 6c 61 79 65 72 32 20 61 6e 64 20 6c 61 79 65 72 33 20 70 72 6f 74 6f 63 | tion.of.layer2.and.layer3.protoc |
1e7e0 | 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 | ol.information.to.generate.the.h |
1e800 | 61 73 68 2e 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 | ash..Uses.XOR.of.hardware.MAC.ad |
1e820 | 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 67 65 6e 65 | dresses.and.IP.addresses.to.gene |
1e840 | 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 3a 00 2a | rate.the.hash..The.formula.is:.* |
1e860 | 2a 6c 61 79 65 72 33 2b 34 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 75 | *layer3+4**.-.This.policy.uses.u |
1e880 | 70 70 65 72 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c | pper.layer.protocol.information, |
1e8a0 | 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 | .when.available,.to.generate.the |
1e8c0 | 20 68 61 73 68 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 | .hash..This.allows.for.traffic.t |
1e8e0 | 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 74 6f 20 73 | o.a.particular.network.peer.to.s |
1e900 | 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 2c 20 61 6c 74 68 6f 75 67 68 20 61 20 | pan.multiple.slaves,.although.a. |
1e920 | 73 69 6e 67 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 70 61 6e 20 | single.connection.will.not.span. |
1e940 | 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 2e 00 2a 2a 6c 65 66 74 2a 2a 00 2a 2a 6c 65 76 65 | multiple.slaves..**left**.**leve |
1e960 | 6c 2d 31 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 | l-1**.-.Act.as.a.station.(Level. |
1e980 | 31 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 4c 65 | 1).router.only..**level-1**.-.Le |
1e9a0 | 76 65 6c 2d 31 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 | vel-1.only.adjacencies.are.forme |
1e9c0 | 64 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 | d..**level-1-2**.-.Act.as.a.stat |
1e9e0 | 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 61 6e 64 20 61 72 65 61 20 28 4c | ion.(Level.1).router.and.area.(L |
1ea00 | 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 | evel.2).router..**level-1-2**.-. |
1ea20 | 4c 65 76 65 6c 2d 31 2d 32 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 | Level-1-2.adjacencies.are.formed |
1ea40 | 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 6e 20 61 72 | .**level-2-only**.-.Act.as.an.ar |
1ea60 | 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 | ea.(Level.2).router.only..**leve |
1ea80 | 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 4c 65 76 65 6c 2d 32 20 6f 6e 6c 79 20 61 64 6a 61 63 65 | l-2-only**.-.Level-2.only.adjace |
1eaa0 | 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c 6f 63 61 6c 20 73 69 64 65 20 2d 20 | ncies.are.formed.**local.side.-. |
1eac0 | 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 6c 6f 63 61 6c 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e | commands**.**local**:.All.authen |
1eae0 | 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 6c 6f 63 | tication.queries.are.handled.loc |
1eb00 | 61 6c 6c 79 2e 00 2a 2a 6c 6f 63 61 6c 2a 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 | ally..**local**:.It.means.that.c |
1eb20 | 6c 69 65 6e 74 20 61 72 65 20 62 65 68 69 6e 64 20 73 6f 6d 65 20 72 6f 75 74 65 72 2e 00 2a 2a | lient.are.behind.some.router..** |
1eb40 | 6c 6f 67 2d 66 61 69 6c 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 72 65 63 | log-fail**.In.this.mode,.the.rec |
1eb60 | 75 72 73 6f 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 76 61 6c 69 64 61 74 65 20 61 | ursor.will.attempt.to.validate.a |
1eb80 | 6c 6c 20 64 61 74 61 20 69 74 20 72 65 74 72 69 65 76 65 73 20 66 72 6f 6d 20 61 75 74 68 6f 72 | ll.data.it.retrieves.from.author |
1eba0 | 69 74 61 74 69 76 65 20 73 65 72 76 65 72 73 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 | itative.servers,.regardless.of.t |
1ebc0 | 68 65 20 63 6c 69 65 6e 74 27 73 20 44 4e 53 53 45 43 20 64 65 73 69 72 65 73 2c 20 61 6e 64 20 | he.client's.DNSSEC.desires,.and. |
1ebe0 | 77 69 6c 6c 20 6c 6f 67 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 20 | will.log.the.validation.result.. |
1ec00 | 54 68 69 73 20 6d 6f 64 65 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 | This.mode.can.be.used.to.determi |
1ec20 | 6e 65 20 74 68 65 20 65 78 74 72 61 20 6c 6f 61 64 20 61 6e 64 20 61 6d 6f 75 6e 74 20 6f 66 20 | ne.the.extra.load.and.amount.of. |
1ec40 | 70 6f 73 73 69 62 6c 79 20 62 6f 67 75 73 20 61 6e 73 77 65 72 73 20 62 65 66 6f 72 65 20 74 75 | possibly.bogus.answers.before.tu |
1ec60 | 72 6e 69 6e 67 20 6f 6e 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 | rning.on.full-blown.validation.. |
1ec80 | 52 65 73 70 6f 6e 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 20 71 75 65 72 69 65 73 20 61 72 65 20 | Responses.to.client.queries.are. |
1eca0 | 74 68 65 20 73 61 6d 65 20 61 73 20 77 69 74 68 20 70 72 6f 63 65 73 73 2e 00 2a 2a 6e 61 72 72 | the.same.as.with.process..**narr |
1ecc0 | 6f 77 2a 2a 20 2d 20 55 73 65 20 6f 6c 64 20 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 77 69 74 | ow**.-.Use.old.style.of.TLVs.wit |
1ece0 | 68 20 6e 61 72 72 6f 77 20 6d 65 74 72 69 63 2e 00 2a 2a 6e 65 74 2d 61 64 6d 69 6e 2a 2a 3a 20 | h.narrow.metric..**net-admin**:. |
1ed00 | 4e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 69 6e 74 65 72 66 61 63 65 2c 20 66 | Network.operations.(interface,.f |
1ed20 | 69 72 65 77 61 6c 6c 2c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 29 00 2a 2a 6e 65 74 2d 62 | irewall,.routing.tables).**net-b |
1ed40 | 69 6e 64 2d 73 65 72 76 69 63 65 2a 2a 3a 20 42 69 6e 64 20 61 20 73 6f 63 6b 65 74 20 74 6f 20 | ind-service**:.Bind.a.socket.to. |
1ed60 | 70 72 69 76 69 6c 65 67 65 64 20 70 6f 72 74 73 20 28 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 6c | privileged.ports.(port.numbers.l |
1ed80 | 65 73 73 20 74 68 61 6e 20 31 30 32 34 29 00 2a 2a 6e 65 74 2d 72 61 77 2a 2a 3a 20 50 65 72 6d | ess.than.1024).**net-raw**:.Perm |
1eda0 | 69 73 73 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 72 61 77 20 6e 65 74 77 6f 72 6b 20 73 6f 63 | ission.to.create.raw.network.soc |
1edc0 | 6b 65 74 73 00 2a 2a 6e 6f 2a 2a 3a 20 44 6f 20 6e 6f 74 20 72 65 73 74 61 72 74 20 63 6f 6e 74 | kets.**no**:.Do.not.restart.cont |
1ede0 | 61 69 6e 65 72 73 20 6f 6e 20 65 78 69 74 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 | ainers.on.exit.**noauth**:.Authe |
1ee00 | 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 | ntication.disabled.**noauth**:.A |
1ee20 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 2e 00 2a 2a 6f 66 66 2a 2a 20 | uthentication.disabled..**off**. |
1ee40 | 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e 6f 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 | In.this.mode,.no.DNSSEC.processi |
1ee60 | 6e 67 20 74 61 6b 65 73 20 70 6c 61 63 65 2e 20 54 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c | ng.takes.place..The.recursor.wil |
1ee80 | 6c 20 6e 6f 74 20 73 65 74 20 74 68 65 20 44 4e 53 53 45 43 20 4f 4b 20 28 44 4f 29 20 62 69 74 | l.not.set.the.DNSSEC.OK.(DO).bit |
1eea0 | 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c | .in.the.outgoing.queries.and.wil |
1eec0 | 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 44 4f 20 61 6e 64 20 41 44 20 62 69 74 73 20 69 6e 20 71 | l.ignore.the.DO.and.AD.bits.in.q |
1eee0 | 75 65 72 69 65 73 2e 00 2a 2a 6f 6e 2d 66 61 69 6c 75 72 65 2a 2a 3a 20 52 65 73 74 61 72 74 20 | ueries..**on-failure**:.Restart. |
1ef00 | 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 79 20 65 78 69 74 20 77 69 74 68 20 61 | containers.when.they.exit.with.a |
1ef20 | 20 6e 6f 6e 2d 7a 65 72 6f 20 65 78 69 74 20 63 6f 64 65 2c 20 72 65 74 72 79 69 6e 67 20 69 6e | .non-zero.exit.code,.retrying.in |
1ef40 | 64 65 66 69 6e 69 74 65 6c 79 20 28 64 65 66 61 75 6c 74 29 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d | definitely.(default).**outbound- |
1ef60 | 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f | interface**.-.applicable.only.to |
1ef80 | 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 | .:ref:`source-nat`..It.configure |
1efa0 | 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f | s.the.interface.which.is.used.fo |
1efc0 | 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 | r.the.outside.traffic.that.this. |
1efe0 | 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 6f | translation.rule.applies.to..**o |
1f000 | 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 | utbound-interface**.-.applicable |
1f020 | 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 | .only.to.:ref:`source-nat`..It.c |
1f040 | 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 | onfigures.the.interface.which.is |
1f060 | 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 | .used.for.the.outside.traffic.th |
1f080 | 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 | at.this.translation.rule.applies |
1f0a0 | 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 | .to..Interface.groups,.inverted. |
1f0c0 | 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f | selection.and.wildcard,.are.also |
1f0e0 | 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 | .supported..**prefer**.-.Ask.cli |
1f100 | 65 6e 74 20 66 6f 72 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 | ent.for.IPv4.negotiation,.do.not |
1f120 | 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d | .fail.if.it.rejects.**prefer**.- |
1f140 | 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e | .Ask.client.for.IPv6.negotiation |
1f160 | 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 | ,.do.not.fail.if.it.rejects.**pr |
1f180 | 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 | efer**.-.ask.client.for.mppe,.if |
1f1a0 | 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 00 2a 2a 70 72 65 66 65 72 2a | .it.rejects.don't.fail.**prefer* |
1f1c0 | 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 | *.-.ask.client.for.mppe,.if.it.r |
1f1e0 | 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 2e 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 | ejects.don't.fail..(Default.valu |
1f200 | 65 29 00 2a 2a 70 72 6f 63 65 73 73 2a 2a 20 57 68 65 6e 20 64 6e 73 73 65 63 20 69 73 20 73 65 | e).**process**.When.dnssec.is.se |
1f220 | 74 20 74 6f 20 70 72 6f 63 65 73 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 69 73 20 73 69 6d | t.to.process.the.behavior.is.sim |
1f240 | 69 6c 61 72 20 74 6f 20 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2e 20 48 6f 77 | ilar.to.process-no-validate..How |
1f260 | 65 76 65 72 2c 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 76 | ever,.the.recursor.will.try.to.v |
1f280 | 61 6c 69 64 61 74 65 20 74 68 65 20 64 61 74 61 20 69 66 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 | alidate.the.data.if.at.least.one |
1f2a0 | 20 6f 66 20 74 68 65 20 44 4f 20 6f 72 20 41 44 20 62 69 74 73 20 69 73 20 73 65 74 20 69 6e 20 | .of.the.DO.or.AD.bits.is.set.in. |
1f2c0 | 74 68 65 20 71 75 65 72 79 3b 20 69 6e 20 74 68 61 74 20 63 61 73 65 2c 20 69 74 20 77 69 6c 6c | the.query;.in.that.case,.it.will |
1f2e0 | 20 73 65 74 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 | .set.the.AD-bit.in.the.response. |
1f300 | 77 68 65 6e 20 74 68 65 20 64 61 74 61 20 69 73 20 76 61 6c 69 64 61 74 65 64 20 73 75 63 63 65 | when.the.data.is.validated.succe |
1f320 | 73 73 66 75 6c 6c 79 2c 20 6f 72 20 73 65 6e 64 20 53 45 52 56 46 41 49 4c 20 77 68 65 6e 20 74 | ssfully,.or.send.SERVFAIL.when.t |
1f340 | 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 63 6f 6d 65 73 20 75 70 20 62 6f 67 75 73 2e 00 2a 2a | he.validation.comes.up.bogus..** |
1f360 | 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f | process-no-validate**.In.this.mo |
1f380 | 64 65 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 61 63 74 73 20 61 73 20 61 20 22 73 65 63 75 72 | de.the.recursor.acts.as.a."secur |
1f3a0 | 69 74 79 20 61 77 61 72 65 2c 20 6e 6f 6e 2d 76 61 6c 69 64 61 74 69 6e 67 22 20 6e 61 6d 65 73 | ity.aware,.non-validating".names |
1f3c0 | 65 72 76 65 72 2c 20 6d 65 61 6e 69 6e 67 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 44 | erver,.meaning.it.will.set.the.D |
1f3e0 | 4f 2d 62 69 74 20 6f 6e 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 | O-bit.on.outgoing.queries.and.wi |
1f400 | 6c 6c 20 70 72 6f 76 69 64 65 20 44 4e 53 53 45 43 20 72 65 6c 61 74 65 64 20 52 52 73 65 74 73 | ll.provide.DNSSEC.related.RRsets |
1f420 | 20 28 4e 53 45 43 2c 20 52 52 53 49 47 29 20 74 6f 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 61 | .(NSEC,.RRSIG).to.clients.that.a |
1f440 | 73 6b 20 66 6f 72 20 74 68 65 6d 20 28 62 79 20 6d 65 61 6e 73 20 6f 66 20 61 20 44 4f 2d 62 69 | sk.for.them.(by.means.of.a.DO-bi |
1f460 | 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 29 2c 20 65 78 63 65 70 74 20 66 6f 72 20 7a 6f 6e 65 | t.in.the.query),.except.for.zone |
1f480 | 73 20 70 72 6f 76 69 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 75 74 68 2d 7a 6f 6e 65 | s.provided.through.the.auth-zone |
1f4a0 | 73 20 73 65 74 74 69 6e 67 2e 20 49 74 20 77 69 6c 6c 20 6e 6f 74 20 64 6f 20 61 6e 79 20 76 61 | s.setting..It.will.not.do.any.va |
1f4c0 | 6c 69 64 61 74 69 6f 6e 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e 6f 74 20 65 76 65 6e 20 | lidation.in.this.mode,.not.even. |
1f4e0 | 77 68 65 6e 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 2a 2a | when.requested.by.the.client..** |
1f500 | 70 72 6f 74 6f 63 6f 6c 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 74 79 70 65 73 | protocol**.-.specify.which.types |
1f520 | 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 | .of.protocols.this.translation.r |
1f540 | 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 4f 6e 6c 79 20 70 61 63 6b 65 74 73 20 6d 61 74 | ule.applies.to..Only.packets.mat |
1f560 | 63 68 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 20 61 72 65 | ching.the.specified.protocol.are |
1f580 | 20 4e 41 54 65 64 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 69 73 20 61 70 70 6c 69 65 73 20 | .NATed..By.default.this.applies. |
1f5a0 | 74 6f 20 60 61 6c 6c 60 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 2a 2a 72 61 64 69 75 73 2a 2a 3a 20 | to.`all`.protocols..**radius**:. |
1f5c0 | 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 | All.authentication.queries.are.h |
1f5e0 | 61 6e 64 6c 65 64 20 62 79 20 61 20 63 6f 6e 66 69 67 75 72 65 64 20 52 41 44 49 55 53 20 73 65 | andled.by.a.configured.RADIUS.se |
1f600 | 72 76 65 72 2e 00 2a 2a 72 61 6e 64 6f 6d 2a 2a 20 2d 20 52 61 6e 64 6f 6d 20 69 6e 74 65 72 66 | rver..**random**.-.Random.interf |
1f620 | 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 2a 72 65 6d 6f 74 65 | ace.identifier.for.IPv6.**remote |
1f640 | 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 2a 2a 3a 20 | .side.-.commands**.**replace**:. |
1f660 | 54 65 72 6d 69 6e 61 74 65 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 77 68 65 6e 20 73 65 63 | Terminate.first.session.when.sec |
1f680 | 6f 6e 64 20 69 73 20 61 75 74 68 6f 72 69 7a 65 64 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 | ond.is.authorized.**(default)**. |
1f6a0 | 2a 2a 72 65 70 6c 61 63 65 3a 2a 2a 20 52 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 | **replace:**.Relay.information.a |
1f6c0 | 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 73 74 | lready.present.in.a.packet.is.st |
1f6e0 | 72 69 70 70 65 64 20 61 6e 64 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 | ripped.and.replaced.with.the.rou |
1f700 | 74 65 72 27 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 65 74 2e | ter's.own.relay.information.set. |
1f720 | 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 34 20 6e 65 67 6f | .**require**.-.Require.IPv4.nego |
1f740 | 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 | tiation.**require**.-.Require.IP |
1f760 | 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 61 73 6b | v6.negotiation.**require**.-.ask |
1f780 | 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 | .client.for.mppe,.if.it.rejects. |
1f7a0 | 64 72 6f 70 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 2a 2a 72 69 67 68 74 2a 2a 00 2a 2a 73 65 74 70 | drop.connection.**right**.**setp |
1f7c0 | 63 61 70 2a 2a 3a 20 43 61 70 61 62 69 6c 69 74 79 20 73 65 74 73 20 28 66 72 6f 6d 20 62 6f 75 | cap**:.Capability.sets.(from.bou |
1f7e0 | 6e 64 65 64 20 6f 72 20 69 6e 68 65 72 69 74 65 64 20 73 65 74 29 00 2a 2a 73 68 61 72 65 64 2a | nded.or.inherited.set).**shared* |
1f800 | 2a 3a 20 4d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 20 73 68 61 72 65 20 74 68 65 20 73 61 | *:.Multiple.clients.share.the.sa |
1f820 | 6d 65 20 6e 65 74 77 6f 72 6b 2e 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 73 6f 75 72 | me.network..**(default)**.**sour |
1f840 | 63 65 2a 2a 20 2d 20 73 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 | ce**.-.specifies.which.packets.t |
1f860 | 68 65 20 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 | he.NAT.translation.rule.applies. |
1f880 | 74 6f 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 49 | to.based.on.the.packets.source.I |
1f8a0 | 50 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 4f 6e | P.address.and/or.source.port..On |
1f8c0 | 6c 79 20 6d 61 74 63 68 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 | ly.matching.packets.are.consider |
1f8e0 | 65 64 20 66 6f 72 20 4e 41 54 2e 00 2a 2a 73 79 73 2d 61 64 6d 69 6e 2a 2a 3a 20 41 64 6d 69 6e | ed.for.NAT..**sys-admin**:.Admin |
1f900 | 69 73 74 61 74 69 6f 6e 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 71 75 6f 74 61 63 74 6c 2c 20 6d | istation.operations.(quotactl,.m |
1f920 | 6f 75 6e 74 2c 20 73 65 74 68 6f 73 74 6e 61 6d 65 2c 20 73 65 74 64 6f 6d 61 69 6e 61 6d 65 29 | ount,.sethostname,.setdomainame) |
1f940 | 00 2a 2a 73 79 73 2d 74 69 6d 65 2a 2a 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 73 65 74 | .**sys-time**:.Permission.to.set |
1f960 | 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 00 2a 2a 74 72 61 6e 73 69 74 69 6f 6e 2a 2a 20 2d 20 53 | .system.clock.**transition**.-.S |
1f980 | 65 6e 64 20 61 6e 64 20 61 63 63 65 70 74 20 62 6f 74 68 20 73 74 79 6c 65 73 20 6f 66 20 54 4c | end.and.accept.both.styles.of.TL |
1f9a0 | 56 73 20 64 75 72 69 6e 67 20 74 72 61 6e 73 69 74 69 6f 6e 2e 00 2a 2a 75 70 73 74 72 65 61 6d | Vs.during.transition..**upstream |
1f9c0 | 3a 2a 2a 20 54 68 65 20 75 70 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 | :**.The.upstream.network.interfa |
1f9e0 | 63 65 20 69 73 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 | ce.is.the.outgoing.interface.whi |
1fa00 | 63 68 20 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 | ch.is.responsible.for.communicat |
1fa20 | 69 6e 67 20 74 6f 20 61 76 61 69 6c 61 62 6c 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 20 | ing.to.available.multicast.data. |
1fa40 | 73 6f 75 72 63 65 73 2e 20 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 75 | sources..There.can.only.be.one.u |
1fa60 | 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 76 61 6c 69 64 61 74 65 2a 2a 20 | pstream.interface..**validate**. |
1fa80 | 54 68 65 20 68 69 67 68 65 73 74 20 6d 6f 64 65 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 | The.highest.mode.of.DNSSEC.proce |
1faa0 | 73 73 69 6e 67 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 61 6c 6c 20 71 75 65 72 69 65 73 | ssing..In.this.mode,.all.queries |
1fac0 | 20 77 69 6c 6c 20 62 65 20 76 61 6c 69 64 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 | .will.be.validated.and.will.be.a |
1fae0 | 6e 73 77 65 72 65 64 20 77 69 74 68 20 61 20 53 45 52 56 46 41 49 4c 20 69 6e 20 63 61 73 65 20 | nswered.with.a.SERVFAIL.in.case. |
1fb00 | 6f 66 20 62 6f 67 75 73 20 64 61 74 61 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 | of.bogus.data,.regardless.of.the |
1fb20 | 20 63 6c 69 65 6e 74 27 73 20 72 65 71 75 65 73 74 2e 00 2a 2a 76 6c 61 6e 2a 2a 3a 20 4f 6e 65 | .client's.request..**vlan**:.One |
1fb40 | 20 56 4c 41 4e 20 70 65 72 20 63 6c 69 65 6e 74 2e 00 2a 2a 77 69 64 65 2a 2a 20 2d 20 55 73 65 | .VLAN.per.client..**wide**.-.Use |
1fb60 | 20 6e 65 77 20 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 74 6f 20 63 61 72 72 79 20 77 69 64 65 | .new.style.of.TLVs.to.carry.wide |
1fb80 | 72 20 6d 65 74 72 69 63 2e 00 2a 2a 78 3a 78 3a 78 3a 78 2a 2a 20 2d 20 53 70 65 63 69 66 79 20 | r.metric..**x:x:x:x**.-.Specify. |
1fba0 | 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 62 | interface.identifier.for.IPv6.*b |
1fbc0 | 67 70 64 2a 20 73 75 70 70 6f 72 74 73 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 | gpd*.supports.Multiprotocol.Exte |
1fbe0 | 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 53 6f 20 69 66 20 61 20 72 65 6d 6f 74 65 20 70 65 | nsion.for.BGP..So.if.a.remote.pe |
1fc00 | 65 72 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 2a 62 67 70 64 2a | er.supports.the.protocol,.*bgpd* |
1fc20 | 20 63 61 6e 20 65 78 63 68 61 6e 67 65 20 49 50 76 36 20 61 6e 64 2f 6f 72 20 6d 75 6c 74 69 63 | .can.exchange.IPv6.and/or.multic |
1fc40 | 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 30 00 30 20 69 66 20 | ast.routing.information..0.0.if. |
1fc60 | 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 6e 6f 20 72 65 66 72 | not.defined,.which.means.no.refr |
1fc80 | 65 73 68 69 6e 67 2e 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 30 30 30 30 30 30 | eshing..0.if.not.defined..000000 |
1fca0 | 00 30 30 31 30 31 30 00 30 30 31 31 30 30 00 30 30 31 31 31 30 00 30 31 30 30 31 30 00 30 31 30 | .001010.001100.001110.010010.010 |
1fcc0 | 31 30 30 00 30 31 30 31 31 30 00 30 31 31 30 31 30 00 30 31 31 31 30 30 00 30 31 31 31 31 30 00 | 100.010110.011010.011100.011110. |
1fce0 | 30 3a 20 44 69 73 61 62 6c 65 20 44 41 44 00 31 00 31 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 | 0:.Disable.DAD.1.1.if.not.define |
1fd00 | 64 2e 00 31 2d 74 6f 2d 31 20 4e 41 54 00 31 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 | d..1-to-1.NAT.1..Create.an.event |
1fd20 | 20 68 61 6e 64 6c 65 72 00 31 2e 20 46 69 72 73 74 20 70 61 63 6b 65 74 20 69 73 20 72 65 63 65 | .handler.1..First.packet.is.rece |
1fd40 | 69 76 65 64 20 6f 6e 20 65 68 74 30 2c 20 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | ived.on.eht0,.with.destination.a |
1fd60 | 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 | ddress.192.0.2.100,.protocol.tcp |
1fd80 | 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 73 73 75 | .and.destination.port.1122..Assu |
1fda0 | 6d 65 20 73 75 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 | me.such.destination.address.is.r |
1fdc0 | 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 31 2e | eachable.through.interface.eth1. |
1fde0 | 00 31 30 00 31 30 20 2d 20 31 30 20 4d 42 69 74 2f 73 00 31 30 2e 30 2e 30 2e 30 20 74 6f 20 31 | .10.10.-.10.MBit/s.10.0.0.0.to.1 |
1fe00 | 30 2e 32 35 35 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 30 2e 30 2e 30 2e 30 2f 38 29 | 0.255.255.255.(CIDR:.10.0.0.0/8) |
1fe20 | 00 31 30 30 20 2d 20 31 30 30 20 4d 42 69 74 2f 73 00 31 30 30 30 20 2d 20 31 20 47 42 69 74 2f | .100.-.100.MBit/s.1000.-.1.GBit/ |
1fe40 | 73 00 31 30 30 30 30 20 2d 20 31 30 20 47 42 69 74 2f 73 00 31 30 30 30 30 30 20 2d 20 31 30 30 | s.10000.-.10.GBit/s.100000.-.100 |
1fe60 | 20 47 42 69 74 2f 73 00 31 30 30 30 31 30 00 31 30 30 31 30 30 00 31 30 30 31 31 30 00 31 30 31 | .GBit/s.100010.100100.100110.101 |
1fe80 | 31 31 30 00 31 31 00 31 31 39 00 31 32 00 31 32 31 2c 20 32 34 39 00 31 33 00 31 34 00 31 35 00 | 110.11.119.12.121,.249.13.14.15. |
1fea0 | 31 36 00 31 37 00 31 37 32 2e 31 36 2e 30 2e 30 20 74 6f 20 31 37 32 2e 33 31 2e 32 35 35 2e 32 | 16.17.172.16.0.0.to.172.31.255.2 |
1fec0 | 35 35 20 28 43 49 44 52 3a 20 31 37 32 2e 31 36 2e 30 2e 30 2f 31 32 29 00 31 38 00 31 39 00 31 | 55.(CIDR:.172.16.0.0/12).18.19.1 |
1fee0 | 39 32 2e 31 36 38 2e 30 2e 30 20 74 6f 20 31 39 32 2e 31 36 38 2e 32 35 35 2e 32 35 35 20 28 43 | 92.168.0.0.to.192.168.255.255.(C |
1ff00 | 49 44 52 3a 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 29 00 31 3a 20 45 6e 61 62 6c 65 20 44 | IDR:.192.168.0.0/16).1:.Enable.D |
1ff20 | 41 44 20 28 64 65 66 61 75 6c 74 29 00 32 00 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 | AD.(default).2.2..Add.regex.to.t |
1ff40 | 68 65 20 73 63 72 69 70 74 00 32 2e 20 53 69 6e 63 65 20 74 68 69 73 20 69 73 20 74 68 65 20 66 | he.script.2..Since.this.is.the.f |
1ff60 | 69 72 73 74 20 70 61 63 6b 65 74 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 20 6f | irst.packet,.connection.status.o |
1ff80 | 66 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 73 6f 20 66 61 72 20 69 73 20 2a 2a 6e | f.this.connection,.so.far.is.**n |
1ffa0 | 65 77 2a 2a 2e 20 53 6f 20 6e 65 69 74 68 65 72 20 72 75 6c 65 20 31 30 20 6e 6f 72 20 32 30 20 | ew**..So.neither.rule.10.nor.20. |
1ffc0 | 61 72 65 20 76 61 6c 69 64 2e 00 32 30 00 32 31 00 32 32 00 32 33 00 32 35 30 30 20 2d 20 32 2e | are.valid..20.21.22.23.2500.-.2. |
1ffe0 | 35 20 47 42 69 74 2f 73 00 32 35 30 30 30 20 2d 20 32 35 20 47 42 69 74 2f 73 00 32 35 32 00 32 | 5.GBit/s.25000.-.25.GBit/s.252.2 |
20000 | 36 00 32 38 00 32 3a 20 45 6e 61 62 6c 65 20 44 41 44 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 | 6.28.2:.Enable.DAD,.and.disable. |
20020 | 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 69 66 20 4d 41 43 2d 62 61 73 65 64 20 64 75 70 6c | IPv6.operation.if.MAC-based.dupl |
20040 | 69 63 61 74 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 68 61 73 20 62 65 65 | icate.link-local.address.has.bee |
20060 | 6e 20 66 6f 75 6e 64 2e 00 32 46 41 20 4f 54 50 20 73 75 70 70 6f 72 74 00 33 00 33 2e 20 41 64 | n.found..2FA.OTP.support.3.3..Ad |
20080 | 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 33 30 00 33 | d.a.full.path.to.the.script.30.3 |
200a0 | 34 00 33 36 00 33 38 00 34 00 34 2e 20 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 | 4.36.38.4.4..Add.optional.parame |
200c0 | 74 65 72 73 00 34 2e 20 4f 6e 63 65 20 61 6e 73 77 65 72 20 66 72 6f 6d 20 73 65 72 76 65 72 20 | ters.4..Once.answer.from.server. |
200e0 | 31 39 32 2e 30 2e 32 2e 31 30 30 20 69 73 20 73 65 65 6e 20 69 6e 20 6f 70 70 6f 73 69 74 65 20 | 192.0.2.100.is.seen.in.opposite. |
20100 | 64 69 72 65 63 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 77 69 6c 6c | direction,.connection.state.will |
20120 | 20 62 65 20 74 72 69 67 67 65 72 65 64 20 74 6f 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a | .be.triggered.to.**established** |
20140 | 2c 20 73 6f 20 74 68 69 73 20 72 65 70 6c 79 20 69 73 20 61 63 63 65 70 74 65 64 20 69 6e 20 72 | ,.so.this.reply.is.accepted.in.r |
20160 | 75 6c 65 20 31 30 2e 00 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 73 77 69 74 | ule.10..40.MHz.channels.may.swit |
20180 | 63 68 20 74 68 65 69 72 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 63 | ch.their.primary.and.secondary.c |
201a0 | 68 61 6e 6e 65 6c 73 20 69 66 20 6e 65 65 64 65 64 20 6f 72 20 63 72 65 61 74 69 6f 6e 20 6f 66 | hannels.if.needed.or.creation.of |
201c0 | 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 6d 61 79 62 65 20 72 65 6a 65 63 74 65 64 20 62 | .40.MHz.channel.maybe.rejected.b |
201e0 | 61 73 65 64 20 6f 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 42 53 53 65 73 2e 20 54 68 65 73 65 | ased.on.overlapping.BSSes..These |
20200 | 20 63 68 61 6e 67 65 73 20 61 72 65 20 64 6f 6e 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | .changes.are.done.automatically. |
20220 | 77 68 65 6e 20 68 6f 73 74 61 70 64 20 69 73 20 73 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 34 | when.hostapd.is.setting.up.the.4 |
20240 | 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 2e 00 34 30 30 30 30 20 2d 20 34 30 20 47 42 69 74 2f 73 | 0.MHz.channel..40000.-.40.GBit/s |
20260 | 00 34 32 00 34 34 00 34 36 00 35 00 35 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 35 2e | .42.44.46.5.5.if.not.defined..5. |
20280 | 20 53 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 | .Second.packet.for.this.connecti |
202a0 | 6f 6e 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 53 69 | on.is.received.by.the.router..Si |
202c0 | 6e 63 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 69 73 20 2a 2a 65 73 74 61 62 6c | nce.connection.state.is.**establ |
202e0 | 69 73 68 65 64 2a 2a 2c 20 74 68 65 6e 20 72 75 6c 65 20 31 30 20 69 73 20 68 69 74 2c 20 61 6e | ished**,.then.rule.10.is.hit,.an |
20300 | 64 20 61 20 6e 65 77 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 46 | d.a.new.entry.in.the.flowtable.F |
20320 | 54 30 31 20 69 73 20 61 64 64 65 64 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e | T01.is.added.for.this.connection |
20340 | 2e 00 35 30 30 30 20 2d 20 35 20 47 42 69 74 2f 73 00 35 30 30 30 30 20 2d 20 35 30 20 47 42 69 | ..5000.-.5.GBit/s.50000.-.50.GBi |
20360 | 74 2f 73 00 35 34 00 36 00 36 2e 20 41 6c 6c 20 73 75 62 73 65 63 75 65 6e 74 20 70 61 63 6b 65 | t/s.54.6.6..All.subsecuent.packe |
20380 | 74 73 20 77 69 6c 6c 20 73 6b 69 70 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 61 74 68 2c 20 61 | ts.will.skip.traditional.path,.a |
203a0 | 6e 64 20 77 69 6c 6c 20 62 65 20 6f 66 66 6c 6f 61 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 75 73 | nd.will.be.offloaded.and.will.us |
203c0 | 65 20 74 68 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 2e 00 36 36 00 36 36 25 20 6f 66 20 74 | e.the.**Fast.Path**..66.66%.of.t |
203e0 | 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 74 6f 20 65 74 68 30 2c 20 65 74 68 31 20 67 | raffic.is.routed.to.eth0,.eth1.g |
20400 | 65 74 73 20 33 33 25 20 6f 66 20 74 72 61 66 66 69 63 2e 00 36 37 00 36 39 00 36 69 6e 34 20 28 | ets.33%.of.traffic..67.69.6in4.( |
20420 | 53 49 54 29 00 36 69 6e 34 20 75 73 65 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 6f 20 65 6e 63 61 | SIT).6in4.uses.tunneling.to.enca |
20440 | 70 73 75 6c 61 74 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 49 50 76 34 20 6c | psulate.IPv6.traffic.over.IPv4.l |
20460 | 69 6e 6b 73 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 32 31 33 60 2e 20 | inks.as.defined.in.:rfc:`4213`.. |
20480 | 54 68 65 20 36 69 6e 34 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 49 50 | The.6in4.traffic.is.sent.over.IP |
204a0 | 76 34 20 69 6e 73 69 64 65 20 49 50 76 34 20 70 61 63 6b 65 74 73 20 77 68 6f 73 65 20 49 50 20 | v4.inside.IPv4.packets.whose.IP. |
204c0 | 68 65 61 64 65 72 73 20 68 61 76 65 20 74 68 65 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d | headers.have.the.IP.protocol.num |
204e0 | 62 65 72 20 73 65 74 20 74 6f 20 34 31 2e 20 54 68 69 73 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d | ber.set.to.41..This.protocol.num |
20500 | 62 65 72 20 69 73 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 64 65 73 69 67 6e 61 74 65 64 20 66 | ber.is.specifically.designated.f |
20520 | 6f 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2c 20 74 68 65 20 49 50 76 34 20 | or.IPv6.encapsulation,.the.IPv4. |
20540 | 70 61 63 6b 65 74 20 68 65 61 64 65 72 20 69 73 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 66 6f 6c | packet.header.is.immediately.fol |
20560 | 6c 6f 77 65 64 20 62 79 20 74 68 65 20 49 50 76 36 20 70 61 63 6b 65 74 20 62 65 69 6e 67 20 63 | lowed.by.the.IPv6.packet.being.c |
20580 | 61 72 72 69 65 64 2e 20 54 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 76 65 72 68 65 | arried..The.encapsulation.overhe |
205a0 | 61 64 20 69 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 49 50 76 34 20 68 65 61 64 65 | ad.is.the.size.of.the.IPv4.heade |
205c0 | 72 20 6f 66 20 32 30 20 62 79 74 65 73 2c 20 74 68 65 72 65 66 6f 72 65 20 77 69 74 68 20 61 6e | r.of.20.bytes,.therefore.with.an |
205e0 | 20 4d 54 55 20 6f 66 20 31 35 30 30 20 62 79 74 65 73 2c 20 49 50 76 36 20 70 61 63 6b 65 74 73 | .MTU.of.1500.bytes,.IPv6.packets |
20600 | 20 6f 66 20 31 34 38 30 20 62 79 74 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 77 69 74 68 6f | .of.1480.bytes.can.be.sent.witho |
20620 | 75 74 20 66 72 61 67 6d 65 6e 74 61 74 69 6f 6e 2e 20 54 68 69 73 20 74 75 6e 6e 65 6c 69 6e 67 | ut.fragmentation..This.tunneling |
20640 | 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 66 72 65 71 75 65 6e 74 6c 79 20 75 73 65 64 20 62 79 | .technique.is.frequently.used.by |
20660 | 20 49 50 76 36 20 74 75 6e 6e 65 6c 20 62 72 6f 6b 65 72 73 20 6c 69 6b 65 20 60 48 75 72 72 69 | .IPv6.tunnel.brokers.like.`Hurri |
20680 | 63 61 6e 65 20 45 6c 65 63 74 72 69 63 60 5f 2e 00 37 00 37 30 00 38 00 38 30 32 2e 31 71 20 56 | cane.Electric`_..7.70.8.802.1q.V |
206a0 | 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 72 65 70 72 65 73 65 6e 74 65 64 20 61 | LAN.interfaces.are.represented.a |
206c0 | 73 20 76 69 72 74 75 61 6c 20 73 75 62 2d 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 56 79 4f 53 | s.virtual.sub-interfaces.in.VyOS |
206e0 | 2e 20 54 68 65 20 74 65 72 6d 20 75 73 65 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 60 60 76 69 | ..The.term.used.for.this.is.``vi |
20700 | 66 60 60 2e 00 39 00 3a 61 62 62 72 3a 60 41 46 49 20 28 41 64 64 72 65 73 73 20 66 61 6d 69 6c | f``..9.:abbr:`AFI.(Address.famil |
20720 | 79 20 61 75 74 68 6f 72 69 74 79 20 69 64 65 6e 74 69 66 69 65 72 29 60 20 2d 20 60 60 34 39 60 | y.authority.identifier)`.-.``49` |
20740 | 60 20 54 68 65 20 41 46 49 20 76 61 6c 75 65 20 34 39 20 69 73 20 77 68 61 74 20 49 53 2d 49 53 | `.The.AFI.value.49.is.what.IS-IS |
20760 | 20 75 73 65 73 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 69 6e 67 2e 00 3a 61 | .uses.for.private.addressing..:a |
20780 | 62 62 72 3a 60 41 52 50 20 28 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f | bbr:`ARP.(Address.Resolution.Pro |
207a0 | 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f | tocol)`.is.a.communication.proto |
207c0 | 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 64 69 73 63 6f 76 65 72 69 6e 67 20 74 68 65 20 6c 69 6e | col.used.for.discovering.the.lin |
207e0 | 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 20 61 20 4d 41 43 20 61 | k.layer.address,.such.as.a.MAC.a |
20800 | 64 64 72 65 73 73 2c 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 | ddress,.associated.with.a.given. |
20820 | 69 6e 74 65 72 6e 65 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 74 79 70 69 63 61 6c 6c | internet.layer.address,.typicall |
20840 | 79 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6d 61 70 70 69 6e 67 20 | y.an.IPv4.address..This.mapping. |
20860 | 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 66 75 6e 63 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 6e | is.a.critical.function.in.the.In |
20880 | 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 20 73 75 69 74 65 2e 20 41 52 50 20 77 61 73 20 64 | ternet.protocol.suite..ARP.was.d |
208a0 | 65 66 69 6e 65 64 20 69 6e 20 31 39 38 32 20 62 79 20 3a 72 66 63 3a 60 38 32 36 60 20 77 68 69 | efined.in.1982.by.:rfc:`826`.whi |
208c0 | 63 68 20 69 73 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 53 54 44 20 33 37 2e 00 | ch.is.Internet.Standard.STD.37.. |
208e0 | 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 | :abbr:`BFD.(Bidirectional.Forwar |
20900 | 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 60 20 69 73 20 64 65 73 63 72 69 62 65 64 20 61 6e | ding.Detection)`.is.described.an |
20920 | 64 20 65 78 74 65 6e 64 65 64 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 52 46 43 73 | d.extended.by.the.following.RFCs |
20940 | 3a 20 3a 72 66 63 3a 60 35 38 38 30 60 2c 20 3a 72 66 63 3a 60 35 38 38 31 60 20 61 6e 64 20 3a | :.:rfc:`5880`,.:rfc:`5881`.and.: |
20960 | 72 66 63 3a 60 35 38 38 33 60 2e 00 3a 61 62 62 72 3a 60 42 47 50 20 28 42 6f 72 64 65 72 20 47 | rfc:`5883`..:abbr:`BGP.(Border.G |
20980 | 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 | ateway.Protocol)`.is.one.of.the. |
209a0 | 45 78 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 74 | Exterior.Gateway.Protocols.and.t |
209c0 | 68 65 20 64 65 20 66 61 63 74 6f 20 73 74 61 6e 64 61 72 64 20 69 6e 74 65 72 64 6f 6d 61 69 6e | he.de.facto.standard.interdomain |
209e0 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 6c 61 74 65 73 74 20 42 47 | .routing.protocol..The.latest.BG |
20a00 | 50 20 76 65 72 73 69 6f 6e 20 69 73 20 34 2e 20 42 47 50 2d 34 20 69 73 20 64 65 73 63 72 69 62 | P.version.is.4..BGP-4.is.describ |
20a20 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 37 37 31 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 | ed.in.:rfc:`1771`.and.updated.by |
20a40 | 20 3a 72 66 63 3a 60 34 32 37 31 60 2e 20 3a 72 66 63 3a 60 32 38 35 38 60 20 61 64 64 73 20 6d | .:rfc:`4271`..:rfc:`2858`.adds.m |
20a60 | 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 20 74 6f 20 42 47 50 2e 00 3a 61 62 | ultiprotocol.support.to.BGP..:ab |
20a80 | 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 | br:`CKN.(MACsec.connectivity.ass |
20aa0 | 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 20 6b 65 79 00 3a 61 62 62 72 3a 60 44 4d 56 50 4e | ociation.name)`.key.:abbr:`DMVPN |
20ac0 | 20 28 44 79 6e 61 6d 69 63 20 4d 75 6c 74 69 70 6f 69 6e 74 20 56 69 72 74 75 61 6c 20 50 72 69 | .(Dynamic.Multipoint.Virtual.Pri |
20ae0 | 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 69 73 20 61 20 64 79 6e 61 6d 69 63 20 3a 61 62 62 | vate.Network)`.is.a.dynamic.:abb |
20b00 | 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 | r:`VPN.(Virtual.Private.Network) |
20b20 | 60 20 74 65 63 68 6e 6f 6c 6f 67 79 20 6f 72 69 67 69 6e 61 6c 6c 79 20 64 65 76 65 6c 6f 70 65 | `.technology.originally.develope |
20b40 | 64 20 62 79 20 43 69 73 63 6f 2e 20 57 68 69 6c 65 20 74 68 65 69 72 20 69 6d 70 6c 65 6d 65 6e | d.by.Cisco..While.their.implemen |
20b60 | 74 61 74 69 6f 6e 20 77 61 73 20 73 6f 6d 65 77 68 61 74 20 70 72 6f 70 72 69 65 74 61 72 79 2c | tation.was.somewhat.proprietary, |
20b80 | 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 | .the.underlying.technologies.are |
20ba0 | 20 61 63 74 75 61 6c 6c 79 20 73 74 61 6e 64 61 72 64 73 20 62 61 73 65 64 2e 20 54 68 65 20 74 | .actually.standards.based..The.t |
20bc0 | 68 72 65 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 3a 00 3a 61 62 62 72 3a 60 44 4e | hree.technologies.are:.:abbr:`DN |
20be0 | 41 54 20 28 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 | AT.(Destination.Network.Address. |
20c00 | 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 63 68 61 6e 67 65 73 20 74 68 65 20 64 65 73 74 69 6e | Translation)`.changes.the.destin |
20c20 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b 65 74 73 20 70 61 73 73 69 6e 67 | ation.address.of.packets.passing |
20c40 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2c 20 77 68 69 6c 65 20 3a 72 65 66 3a | .through.the.router,.while.:ref: |
20c60 | 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 63 68 61 6e 67 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 | `source-nat`.changes.the.source. |
20c80 | 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 44 4e 41 54 20 69 73 20 74 79 70 69 | address.of.packets..DNAT.is.typi |
20ca0 | 63 61 6c 6c 79 20 75 73 65 64 20 77 68 65 6e 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 28 70 75 62 | cally.used.when.an.external.(pub |
20cc0 | 6c 69 63 29 20 68 6f 73 74 20 6e 65 65 64 73 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 73 65 | lic).host.needs.to.initiate.a.se |
20ce0 | 73 73 69 6f 6e 20 77 69 74 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 | ssion.with.an.internal.(private) |
20d00 | 20 68 6f 73 74 2e 20 41 20 63 75 73 74 6f 6d 65 72 20 6e 65 65 64 73 20 74 6f 20 61 63 63 65 73 | .host..A.customer.needs.to.acces |
20d20 | 73 20 61 20 70 72 69 76 61 74 65 20 73 65 72 76 69 63 65 20 62 65 68 69 6e 64 20 74 68 65 20 72 | s.a.private.service.behind.the.r |
20d40 | 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 50 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 | outers.public.IP..A.connection.i |
20d60 | 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 | s.established.with.the.routers.p |
20d80 | 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 77 65 6c 6c 20 6b 6e 6f 77 6e | ublic.IP.address.on.a.well.known |
20da0 | 20 70 6f 72 74 20 61 6e 64 20 74 68 75 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 | .port.and.thus.all.traffic.for.t |
20dc0 | 68 69 73 20 70 6f 72 74 20 69 73 20 72 65 77 72 69 74 74 65 6e 20 74 6f 20 61 64 64 72 65 73 73 | his.port.is.rewritten.to.address |
20de0 | 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 00 3a 61 | .the.internal.(private).host..:a |
20e00 | 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 | bbr:`EAP.(Extensible.Authenticat |
20e20 | 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 76 65 72 20 4c 41 4e 20 28 45 41 50 6f 4c 29 20 | ion.Protocol)`.over.LAN.(EAPoL). |
20e40 | 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 6f 72 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | is.a.network.port.authentication |
20e60 | 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 58 20 28 50 | .protocol.used.in.IEEE.802.1X.(P |
20e80 | 6f 72 74 20 42 61 73 65 64 20 4e 65 74 77 6f 72 6b 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c | ort.Based.Network.Access.Control |
20ea0 | 29 20 64 65 76 65 6c 6f 70 65 64 20 74 6f 20 67 69 76 65 20 61 20 67 65 6e 65 72 69 63 20 6e 65 | ).developed.to.give.a.generic.ne |
20ec0 | 74 77 6f 72 6b 20 73 69 67 6e 2d 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 | twork.sign-on.to.access.network. |
20ee0 | 72 65 73 6f 75 72 63 65 73 2e 00 3a 61 62 62 72 3a 60 45 55 49 2d 36 34 20 28 36 34 2d 42 69 74 | resources..:abbr:`EUI-64.(64-Bit |
20f00 | 20 45 78 74 65 6e 64 65 64 20 55 6e 69 71 75 65 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 61 73 | .Extended.Unique.Identifier)`.as |
20f20 | 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 32 39 31 60 20 61 6c 6c 6f 77 73 | .specified.in.:rfc:`4291`.allows |
20f40 | 20 61 20 68 6f 73 74 20 74 6f 20 61 73 73 69 67 6e 20 69 74 65 73 6c 66 20 61 20 75 6e 69 71 75 | .a.host.to.assign.iteslf.a.uniqu |
20f60 | 65 20 36 34 2d 42 69 74 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 3a 61 62 62 72 3a 60 47 45 | e.64-Bit.IPv6.address..:abbr:`GE |
20f80 | 4e 45 56 45 20 28 47 65 6e 65 72 69 63 20 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 | NEVE.(Generic.Network.Virtualiza |
20fa0 | 74 69 6f 6e 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 73 75 70 70 6f 72 74 73 20 61 6c | tion.Encapsulation)`.supports.al |
20fc0 | 6c 20 6f 66 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 66 20 3a 61 62 62 72 3a 60 | l.of.the.capabilities.of.:abbr:` |
20fe0 | 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 2c | VXLAN.(Virtual.Extensible.LAN)`, |
21000 | 20 3a 61 62 62 72 3a 60 4e 56 47 52 45 20 28 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a | .:abbr:`NVGRE.(Network.Virtualiz |
21020 | 61 74 69 6f 6e 20 75 73 69 6e 67 20 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 | ation.using.Generic.Routing.Enca |
21040 | 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 61 6e 64 20 3a 61 62 62 72 3a 60 53 54 54 20 28 53 74 61 | psulation)`,.and.:abbr:`STT.(Sta |
21060 | 74 65 6c 65 73 73 20 54 72 61 6e 73 70 6f 72 74 20 54 75 6e 6e 65 6c 69 6e 67 29 60 20 61 6e 64 | teless.Transport.Tunneling)`.and |
21080 | 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 6f 76 65 72 63 6f 6d 65 20 74 68 65 69 72 20 | .was.designed.to.overcome.their. |
210a0 | 70 65 72 63 65 69 76 65 64 20 6c 69 6d 69 74 61 74 69 6f 6e 73 2e 20 4d 61 6e 79 20 62 65 6c 69 | perceived.limitations..Many.beli |
210c0 | 65 76 65 20 47 45 4e 45 56 45 20 63 6f 75 6c 64 20 65 76 65 6e 74 75 61 6c 6c 79 20 72 65 70 6c | eve.GENEVE.could.eventually.repl |
210e0 | 61 63 65 20 74 68 65 73 65 20 65 61 72 6c 69 65 72 20 66 6f 72 6d 61 74 73 20 65 6e 74 69 72 65 | ace.these.earlier.formats.entire |
21100 | 6c 79 2e 00 3a 61 62 62 72 3a 60 47 52 45 20 28 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 | ly..:abbr:`GRE.(Generic.Routing. |
21120 | 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 47 52 45 2f 49 50 73 65 63 20 28 6f 72 20 49 | Encapsulation)`,.GRE/IPsec.(or.I |
21140 | 50 49 50 2f 49 50 73 65 63 2c 20 53 49 54 2f 49 50 73 65 63 2c 20 6f 72 20 61 6e 79 20 6f 74 68 | PIP/IPsec,.SIT/IPsec,.or.any.oth |
21160 | 65 72 20 73 74 61 74 65 6c 65 73 73 20 74 75 6e 6e 65 6c 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 | er.stateless.tunnel.protocol.ove |
21180 | 72 20 49 50 73 65 63 29 20 69 73 20 74 68 65 20 75 73 75 61 6c 20 77 61 79 20 74 6f 20 70 72 6f | r.IPsec).is.the.usual.way.to.pro |
211a0 | 74 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 73 69 64 65 20 61 20 74 75 6e 6e 65 6c | tect.the.traffic.inside.a.tunnel |
211c0 | 2e 00 3a 61 62 62 72 3a 60 47 52 4f 20 28 47 65 6e 65 72 69 63 20 72 65 63 65 69 76 65 20 6f 66 | ..:abbr:`GRO.(Generic.receive.of |
211e0 | 66 6c 6f 61 64 29 60 20 69 73 20 74 68 65 20 63 6f 6d 70 6c 65 6d 65 6e 74 20 74 6f 20 47 53 4f | fload)`.is.the.complement.to.GSO |
21200 | 2e 20 49 64 65 61 6c 6c 79 20 61 6e 79 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 62 79 | ..Ideally.any.frame.assembled.by |
21220 | 20 47 52 4f 20 73 68 6f 75 6c 64 20 62 65 20 73 65 67 6d 65 6e 74 65 64 20 74 6f 20 63 72 65 61 | .GRO.should.be.segmented.to.crea |
21240 | 74 65 20 61 6e 20 69 64 65 6e 74 69 63 61 6c 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d | te.an.identical.sequence.of.fram |
21260 | 65 73 20 75 73 69 6e 67 20 47 53 4f 2c 20 61 6e 64 20 61 6e 79 20 73 65 71 75 65 6e 63 65 20 6f | es.using.GSO,.and.any.sequence.o |
21280 | 66 20 66 72 61 6d 65 73 20 73 65 67 6d 65 6e 74 65 64 20 62 79 20 47 53 4f 20 73 68 6f 75 6c 64 | f.frames.segmented.by.GSO.should |
212a0 | 20 62 65 20 61 62 6c 65 20 74 6f 20 62 65 20 72 65 61 73 73 65 6d 62 6c 65 64 20 62 61 63 6b 20 | .be.able.to.be.reassembled.back. |
212c0 | 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 62 79 20 47 52 4f 2e 20 54 68 65 20 6f 6e 6c 79 | to.the.original.by.GRO..The.only |
212e0 | 20 65 78 63 65 70 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 49 50 76 34 20 49 44 20 69 6e | .exception.to.this.is.IPv4.ID.in |
21300 | 20 74 68 65 20 63 61 73 65 20 74 68 61 74 20 74 68 65 20 44 46 20 62 69 74 20 69 73 20 73 65 74 | .the.case.that.the.DF.bit.is.set |
21320 | 20 66 6f 72 20 61 20 67 69 76 65 6e 20 49 50 20 68 65 61 64 65 72 2e 20 49 66 20 74 68 65 20 76 | .for.a.given.IP.header..If.the.v |
21340 | 61 6c 75 65 20 6f 66 20 74 68 65 20 49 50 76 34 20 49 44 20 69 73 20 6e 6f 74 20 73 65 71 75 65 | alue.of.the.IPv4.ID.is.not.seque |
21360 | 6e 74 69 61 6c 6c 79 20 69 6e 63 72 65 6d 65 6e 74 69 6e 67 20 69 74 20 77 69 6c 6c 20 62 65 20 | ntially.incrementing.it.will.be. |
21380 | 61 6c 74 65 72 65 64 20 73 6f 20 74 68 61 74 20 69 74 20 69 73 20 77 68 65 6e 20 61 20 66 72 61 | altered.so.that.it.is.when.a.fra |
213a0 | 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 76 69 61 20 47 52 4f 20 69 73 20 73 65 67 6d 65 6e 74 65 | me.assembled.via.GRO.is.segmente |
213c0 | 64 20 76 69 61 20 47 53 4f 2e 00 3a 61 62 62 72 3a 60 47 53 4f 20 28 47 65 6e 65 72 69 63 20 53 | d.via.GSO..:abbr:`GSO.(Generic.S |
213e0 | 65 67 6d 65 6e 74 61 74 69 6f 6e 20 4f 66 66 6c 6f 61 64 29 60 20 69 73 20 61 20 70 75 72 65 20 | egmentation.Offload)`.is.a.pure. |
21400 | 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 74 68 61 74 20 69 73 20 6d 65 61 6e 74 20 74 | software.offload.that.is.meant.t |
21420 | 6f 20 64 65 61 6c 20 77 69 74 68 20 63 61 73 65 73 20 77 68 65 72 65 20 64 65 76 69 63 65 20 64 | o.deal.with.cases.where.device.d |
21440 | 72 69 76 65 72 73 20 63 61 6e 6e 6f 74 20 70 65 72 66 6f 72 6d 20 74 68 65 20 6f 66 66 6c 6f 61 | rivers.cannot.perform.the.offloa |
21460 | 64 73 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 57 68 61 74 20 6f 63 63 75 72 73 20 | ds.described.above..What.occurs. |
21480 | 69 6e 20 47 53 4f 20 69 73 20 74 68 61 74 20 61 20 67 69 76 65 6e 20 73 6b 62 75 66 66 20 77 69 | in.GSO.is.that.a.given.skbuff.wi |
214a0 | 6c 6c 20 68 61 76 65 20 69 74 73 20 64 61 74 61 20 62 72 6f 6b 65 6e 20 6f 75 74 20 6f 76 65 72 | ll.have.its.data.broken.out.over |
214c0 | 20 6d 75 6c 74 69 70 6c 65 20 73 6b 62 75 66 66 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e | .multiple.skbuffs.that.have.been |
214e0 | 20 72 65 73 69 7a 65 64 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 4d 53 53 20 70 72 6f 76 69 64 | .resized.to.match.the.MSS.provid |
21500 | 65 64 20 76 69 61 20 73 6b 62 5f 73 68 69 6e 66 6f 28 29 2d 3e 67 73 6f 5f 73 69 7a 65 2e 00 3a | ed.via.skb_shinfo()->gso_size..: |
21520 | 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 | abbr:`IGMP.(Internet.Group.Manag |
21540 | 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 70 72 6f 78 79 20 73 65 6e 64 73 20 49 47 4d | ement.Protocol)`.proxy.sends.IGM |
21560 | 50 20 68 6f 73 74 20 6d 65 73 73 61 67 65 73 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 61 20 63 | P.host.messages.on.behalf.of.a.c |
21580 | 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | onnected.client..The.configurati |
215a0 | 6f 6e 20 6d 75 73 74 20 64 65 66 69 6e 65 20 6f 6e 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 | on.must.define.one,.and.only.one |
215c0 | 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 6f 6e 65 20 6f 72 20 | .upstream.interface,.and.one.or. |
215e0 | 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 2e 00 3a 61 62 62 | more.downstream.interfaces..:abb |
21600 | 72 3a 60 49 50 53 65 63 20 28 49 50 20 53 65 63 75 72 69 74 79 29 60 20 2d 20 74 6f 6f 20 6d 61 | r:`IPSec.(IP.Security)`.-.too.ma |
21620 | 6e 79 20 52 46 43 73 20 74 6f 20 6c 69 73 74 2c 20 62 75 74 20 73 74 61 72 74 20 77 69 74 68 20 | ny.RFCs.to.list,.but.start.with. |
21640 | 3a 72 66 63 3a 60 34 33 30 31 60 00 3a 61 62 62 72 3a 60 49 53 2d 49 53 20 28 49 6e 74 65 72 6d | :rfc:`4301`.:abbr:`IS-IS.(Interm |
21660 | 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 | ediate.System.to.Intermediate.Sy |
21680 | 73 74 65 6d 29 60 20 69 73 20 61 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 6e 74 65 72 69 6f 72 20 | stem)`.is.a.link-state.interior. |
216a0 | 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 20 28 49 47 50 29 20 77 68 69 63 68 20 69 73 20 | gateway.protocol.(IGP).which.is. |
216c0 | 64 65 73 63 72 69 62 65 64 20 69 6e 20 49 53 4f 31 30 35 38 39 2c 20 3a 72 66 63 3a 60 31 31 39 | described.in.ISO10589,.:rfc:`119 |
216e0 | 35 60 2c 20 3a 72 66 63 3a 60 35 33 30 38 60 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 74 68 65 20 | 5`,.:rfc:`5308`..IS-IS.runs.the. |
21700 | 44 69 6a 6b 73 74 72 61 20 73 68 6f 72 74 65 73 74 2d 70 61 74 68 20 66 69 72 73 74 20 28 53 50 | Dijkstra.shortest-path.first.(SP |
21720 | 46 29 20 61 6c 67 6f 72 69 74 68 6d 20 74 6f 20 63 72 65 61 74 65 20 61 20 64 61 74 61 62 61 73 | F).algorithm.to.create.a.databas |
21740 | 65 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b e2 80 99 73 20 74 6f 70 6f 6c 6f 67 79 2c 20 61 | e.of.the.network...s.topology,.a |
21760 | 6e 64 20 66 72 6f 6d 20 74 68 61 74 20 64 61 74 61 62 61 73 65 20 74 6f 20 64 65 74 65 72 6d 69 | nd.from.that.database.to.determi |
21780 | 6e 65 20 74 68 65 20 62 65 73 74 20 28 74 68 61 74 20 69 73 2c 20 6c 6f 77 65 73 74 20 63 6f 73 | ne.the.best.(that.is,.lowest.cos |
217a0 | 74 29 20 70 61 74 68 20 74 6f 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 69 6e | t).path.to.a.destination..The.in |
217c0 | 74 65 72 6d 65 64 69 61 74 65 20 73 79 73 74 65 6d 73 20 28 74 68 65 20 6e 61 6d 65 20 66 6f 72 | termediate.systems.(the.name.for |
217e0 | 20 72 6f 75 74 65 72 73 29 20 65 78 63 68 61 6e 67 65 20 74 6f 70 6f 6c 6f 67 79 20 69 6e 66 6f | .routers).exchange.topology.info |
21800 | 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 65 69 72 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 65 | rmation.with.their.directly.cone |
21820 | 6e 63 74 65 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 64 69 72 65 | ncted.neighbors..IS-IS.runs.dire |
21840 | 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 61 20 6c 69 6e 6b 20 6c 61 79 65 72 20 28 4c 61 79 | ctly.on.the.data.link.layer.(Lay |
21860 | 65 72 20 32 29 2e 20 49 53 2d 49 53 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 63 61 6c 6c 65 | er.2)..IS-IS.addresses.are.calle |
21880 | 64 20 3a 61 62 62 72 3a 60 4e 45 54 73 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 | d.:abbr:`NETs.(Network.Entity.Ti |
218a0 | 74 6c 65 73 29 60 20 61 6e 64 20 63 61 6e 20 62 65 20 38 20 74 6f 20 32 30 20 62 79 74 65 73 20 | tles)`.and.can.be.8.to.20.bytes. |
218c0 | 6c 6f 6e 67 2c 20 62 75 74 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 31 30 20 62 79 74 65 73 | long,.but.are.generally.10.bytes |
218e0 | 20 6c 6f 6e 67 2e 20 54 68 65 20 74 72 65 65 20 64 61 74 61 62 61 73 65 20 74 68 61 74 20 69 73 | .long..The.tree.database.that.is |
21900 | 20 63 72 65 61 74 65 64 20 77 69 74 68 20 49 53 2d 49 53 20 69 73 20 73 69 6d 69 6c 61 72 20 74 | .created.with.IS-IS.is.similar.t |
21920 | 6f 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 4f | o.the.one.that.is.created.with.O |
21940 | 53 50 46 20 69 6e 20 74 68 61 74 20 74 68 65 20 70 61 74 68 73 20 63 68 6f 73 65 6e 20 73 68 6f | SPF.in.that.the.paths.chosen.sho |
21960 | 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 2e 20 43 6f 6d 70 61 72 69 73 6f 6e 73 20 74 6f 20 4f | uld.be.similar..Comparisons.to.O |
21980 | 53 50 46 20 61 72 65 20 69 6e 65 76 69 74 61 62 6c 65 20 61 6e 64 20 6f 66 74 65 6e 20 61 72 65 | SPF.are.inevitable.and.often.are |
219a0 | 20 72 65 61 73 6f 6e 61 62 6c 65 20 6f 6e 65 73 20 74 6f 20 6d 61 6b 65 20 69 6e 20 72 65 67 61 | .reasonable.ones.to.make.in.rega |
219c0 | 72 64 73 20 74 6f 20 74 68 65 20 77 61 79 20 61 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 72 65 | rds.to.the.way.a.network.will.re |
219e0 | 73 70 6f 6e 64 20 77 69 74 68 20 65 69 74 68 65 72 20 49 47 50 2e 00 3a 61 62 62 72 3a 60 4c 33 | spond.with.either.IGP..:abbr:`L3 |
21a00 | 56 50 4e 20 56 52 46 73 20 28 20 4c 61 79 65 72 20 33 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 | VPN.VRFs.(.Layer.3.Virtual.Priva |
21a20 | 74 65 20 4e 65 74 77 6f 72 6b 73 20 29 60 20 62 67 70 64 20 73 75 70 70 6f 72 74 73 20 66 6f 72 | te.Networks.)`.bgpd.supports.for |
21a40 | 20 49 50 76 34 20 52 46 43 20 34 33 36 34 20 61 6e 64 20 49 50 76 36 20 52 46 43 20 34 36 35 39 | .IPv4.RFC.4364.and.IPv6.RFC.4659 |
21a60 | 2e 20 4c 33 56 50 4e 20 72 6f 75 74 65 73 2c 20 61 6e 64 20 74 68 65 69 72 20 61 73 73 6f 63 69 | ..L3VPN.routes,.and.their.associ |
21a80 | 61 74 65 64 20 56 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c 73 2c 20 63 61 6e 20 62 65 20 64 69 73 | ated.VRF.MPLS.labels,.can.be.dis |
21aa0 | 74 72 69 62 75 74 65 64 20 74 6f 20 56 50 4e 20 53 41 46 49 20 6e 65 69 67 68 62 6f 72 73 20 69 | tributed.to.VPN.SAFI.neighbors.i |
21ac0 | 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2c 20 69 2e 65 2e 2c 20 6e 6f 6e 20 56 52 46 2c 20 42 47 | n.the.default,.i.e.,.non.VRF,.BG |
21ae0 | 50 20 69 6e 73 74 61 6e 63 65 2e 20 56 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 | P.instance..VRF.MPLS.labels.are. |
21b00 | 72 65 61 63 68 65 64 20 75 73 69 6e 67 20 63 6f 72 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 77 | reached.using.core.MPLS.labels.w |
21b20 | 68 69 63 68 20 61 72 65 20 64 69 73 74 72 69 62 75 74 65 64 20 75 73 69 6e 67 20 4c 44 50 20 6f | hich.are.distributed.using.LDP.o |
21b40 | 72 20 42 47 50 20 6c 61 62 65 6c 65 64 20 75 6e 69 63 61 73 74 2e 20 62 67 70 64 20 61 6c 73 6f | r.BGP.labeled.unicast..bgpd.also |
21b60 | 20 73 75 70 70 6f 72 74 73 20 69 6e 74 65 72 2d 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e | .supports.inter-VRF.route.leakin |
21b80 | 67 2e 00 3a 61 62 62 72 3a 60 4c 44 50 20 28 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f | g..:abbr:`LDP.(Label.Distributio |
21ba0 | 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 54 43 50 20 62 61 73 65 64 20 4d 50 4c 53 | n.Protocol)`.is.a.TCP.based.MPLS |
21bc0 | 20 73 69 67 6e 61 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 64 69 73 74 72 69 62 | .signaling.protocol.that.distrib |
21be0 | 75 74 65 73 20 6c 61 62 65 6c 73 20 63 72 65 61 74 69 6e 67 20 4d 50 4c 53 20 6c 61 62 65 6c 20 | utes.labels.creating.MPLS.label. |
21c00 | 73 77 69 74 63 68 65 64 20 70 61 74 68 73 20 69 6e 20 61 20 64 79 6e 61 6d 69 63 20 6d 61 6e 6e | switched.paths.in.a.dynamic.mann |
21c20 | 65 72 2e 20 4c 44 50 20 69 73 20 6e 6f 74 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f | er..LDP.is.not.a.routing.protoco |
21c40 | 6c 2c 20 61 73 20 69 74 20 72 65 6c 69 65 73 20 6f 6e 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 | l,.as.it.relies.on.other.routing |
21c60 | 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 | .protocols.for.forwarding.decisi |
21c80 | 6f 6e 73 2e 20 4c 44 50 20 63 61 6e 6e 6f 74 20 62 6f 6f 74 73 74 72 61 70 20 69 74 73 65 6c 66 | ons..LDP.cannot.bootstrap.itself |
21ca0 | 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 6c 69 65 73 20 6f 6e 20 73 61 69 64 20 72 | ,.and.therefore.relies.on.said.r |
21cc0 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 | outing.protocols.for.communicati |
21ce0 | 6f 6e 20 77 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 75 73 65 20 4c | on.with.other.routers.that.use.L |
21d00 | 44 50 2e 00 3a 61 62 62 72 3a 60 4c 4c 44 50 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 44 69 73 63 | DP..:abbr:`LLDP.(Link.Layer.Disc |
21d20 | 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 76 65 6e 64 6f 72 2d 6e 65 75 | overy.Protocol)`.is.a.vendor-neu |
21d40 | 74 72 61 6c 20 6c 69 6e 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 20 74 68 65 20 | tral.link.layer.protocol.in.the. |
21d60 | 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 75 73 65 64 20 62 79 20 | Internet.Protocol.Suite.used.by. |
21d80 | 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 | network.devices.for.advertising. |
21da0 | 74 68 65 69 72 20 69 64 65 6e 74 69 74 79 2c 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e | their.identity,.capabilities,.an |
21dc0 | 64 20 6e 65 69 67 68 62 6f 72 73 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 30 32 20 6c 6f 63 61 6c | d.neighbors.on.an.IEEE.802.local |
21de0 | 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2c 20 70 72 69 6e 63 69 70 61 6c 6c 79 20 77 69 72 65 64 | .area.network,.principally.wired |
21e00 | 20 45 74 68 65 72 6e 65 74 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 6d 61 | .Ethernet..The.protocol.is.forma |
21e20 | 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 62 79 20 74 68 65 20 49 45 45 45 20 61 73 20 53 | lly.referred.to.by.the.IEEE.as.S |
21e40 | 74 61 74 69 6f 6e 20 61 6e 64 20 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 | tation.and.Media.Access.Control. |
21e60 | 43 6f 6e 6e 65 63 74 69 76 69 74 79 20 44 69 73 63 6f 76 65 72 79 20 73 70 65 63 69 66 69 65 64 | Connectivity.Discovery.specified |
21e80 | 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 41 42 20 61 6e 64 20 49 45 45 45 20 38 30 32 2e 33 2d | .in.IEEE.802.1AB.and.IEEE.802.3- |
21ea0 | 32 30 31 32 20 73 65 63 74 69 6f 6e 20 36 20 63 6c 61 75 73 65 20 37 39 2e 00 3a 61 62 62 72 3a | 2012.section.6.clause.79..:abbr: |
21ec0 | 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f | `MKA.(MACsec.Key.Agreement.proto |
21ee0 | 63 6f 6c 29 60 20 69 73 20 75 73 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 6b 65 79 | col)`.is.used.to.synchronize.key |
21f00 | 73 20 62 65 74 77 65 65 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 70 65 65 72 73 2e 00 3a 61 62 62 | s.between.individual.peers..:abb |
21f20 | 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 | r:`MPLS.(Multi-Protocol.Label.Sw |
21f40 | 69 74 63 68 69 6e 67 29 60 20 69 73 20 61 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 | itching)`.is.a.packet.forwarding |
21f60 | 20 70 61 72 61 64 69 67 6d 20 77 68 69 63 68 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 72 65 67 | .paradigm.which.differs.from.reg |
21f80 | 75 6c 61 72 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 49 | ular.IP.forwarding..Instead.of.I |
21fa0 | 50 20 61 64 64 72 65 73 73 65 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 | P.addresses.being.used.to.make.t |
21fc0 | 68 65 20 64 65 63 69 73 69 6f 6e 20 6f 6e 20 66 69 6e 64 69 6e 67 20 74 68 65 20 65 78 69 74 20 | he.decision.on.finding.the.exit. |
21fe0 | 69 6e 74 65 72 66 61 63 65 2c 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 69 6e 73 74 65 61 64 | interface,.a.router.will.instead |
22000 | 20 75 73 65 20 61 6e 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 6e 20 61 20 33 32 20 62 69 74 2f | .use.an.exact.match.on.a.32.bit/ |
22020 | 34 20 62 79 74 65 20 68 65 61 64 65 72 20 63 61 6c 6c 65 64 20 74 68 65 20 4d 50 4c 53 20 6c 61 | 4.byte.header.called.the.MPLS.la |
22040 | 62 65 6c 2e 20 54 68 69 73 20 6c 61 62 65 6c 20 69 73 20 69 6e 73 65 72 74 65 64 20 62 65 74 77 | bel..This.label.is.inserted.betw |
22060 | 65 65 6e 20 74 68 65 20 65 74 68 65 72 6e 65 74 20 28 6c 61 79 65 72 20 32 29 20 68 65 61 64 65 | een.the.ethernet.(layer.2).heade |
22080 | 72 20 61 6e 64 20 74 68 65 20 49 50 20 28 6c 61 79 65 72 20 33 29 20 68 65 61 64 65 72 2e 20 4f | r.and.the.IP.(layer.3).header..O |
220a0 | 6e 65 20 63 61 6e 20 73 74 61 74 69 63 61 6c 6c 79 20 6f 72 20 64 79 6e 61 6d 69 63 61 6c 6c 79 | ne.can.statically.or.dynamically |
220c0 | 20 61 73 73 69 67 6e 20 6c 61 62 65 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 2c 20 62 75 74 20 77 | .assign.label.allocations,.but.w |
220e0 | 65 20 77 69 6c 6c 20 66 6f 63 75 73 20 6f 6e 20 64 79 6e 61 6d 69 63 20 61 6c 6c 6f 63 61 74 69 | e.will.focus.on.dynamic.allocati |
22100 | 6f 6e 20 6f 66 20 6c 61 62 65 6c 73 20 75 73 69 6e 67 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 | on.of.labels.using.some.sort.of. |
22120 | 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 73 75 63 | label.distribution.protocol.(suc |
22140 | 68 20 61 73 20 74 68 65 20 61 70 74 6c 79 20 6e 61 6d 65 64 20 4c 61 62 65 6c 20 44 69 73 74 72 | h.as.the.aptly.named.Label.Distr |
22160 | 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 2f 20 4c 44 50 2c 20 52 65 73 6f 75 72 63 65 | ibution.Protocol./.LDP,.Resource |
22180 | 20 52 65 73 65 72 76 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 2f 20 52 53 56 50 2c 20 6f 72 | .Reservation.Protocol./.RSVP,.or |
221a0 | 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 74 68 72 6f 75 67 68 20 4f 53 50 46 2f 49 53 | .Segment.Routing.through.OSPF/IS |
221c0 | 49 53 29 2e 20 54 68 65 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6c 6c 6f 77 20 66 6f 72 20 74 | IS)..These.protocols.allow.for.t |
221e0 | 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 61 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 2f | he.creation.of.a.unidirectional/ |
22200 | 75 6e 69 63 61 73 74 20 70 61 74 68 20 63 61 6c 6c 65 64 20 61 20 6c 61 62 65 6c 65 64 20 73 77 | unicast.path.called.a.labeled.sw |
22220 | 69 74 63 68 65 64 20 70 61 74 68 20 28 69 6e 69 74 69 61 6c 69 7a 65 64 20 61 73 20 4c 53 50 29 | itched.path.(initialized.as.LSP) |
22240 | 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 6f 70 65 | .throughout.the.network.that.ope |
22260 | 72 61 74 65 73 20 76 65 72 79 20 6d 75 63 68 20 6c 69 6b 65 20 61 20 74 75 6e 6e 65 6c 20 74 68 | rates.very.much.like.a.tunnel.th |
22280 | 72 6f 75 67 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 41 6e 20 65 61 73 79 20 77 61 79 20 6f | rough.the.network..An.easy.way.o |
222a0 | 66 20 74 68 69 6e 6b 69 6e 67 20 61 62 6f 75 74 20 68 6f 77 20 61 6e 20 4d 50 4c 53 20 4c 53 50 | f.thinking.about.how.an.MPLS.LSP |
222c0 | 20 61 63 74 75 61 6c 6c 79 20 66 6f 72 77 61 72 64 73 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 | .actually.forwards.traffic.throu |
222e0 | 67 68 6f 75 74 20 61 20 6e 65 74 77 6f 72 6b 20 69 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 61 | ghout.a.network.is.to.think.of.a |
22300 | 20 47 52 45 20 74 75 6e 6e 65 6c 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 74 68 65 20 73 61 | .GRE.tunnel..They.are.not.the.sa |
22320 | 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 6f 70 65 72 61 74 65 2c 20 62 75 74 20 74 68 65 79 | me.in.how.they.operate,.but.they |
22340 | 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 68 61 6e 64 6c 65 | .are.the.same.in.how.they.handle |
22360 | 20 74 68 65 20 74 75 6e 6e 65 6c 65 64 20 70 61 63 6b 65 74 2e 20 49 74 20 77 6f 75 6c 64 20 62 | .the.tunneled.packet..It.would.b |
22380 | 65 20 67 6f 6f 64 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 4d 50 4c 53 20 61 73 20 61 20 74 75 6e | e.good.to.think.of.MPLS.as.a.tun |
223a0 | 6e 65 6c 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 | neling.technology.that.can.be.us |
223c0 | 65 64 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 74 | ed.to.transport.many.different.t |
223e0 | 79 70 65 73 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 74 6f 20 61 69 64 20 69 6e 20 74 72 61 66 66 | ypes.of.packets,.to.aid.in.traff |
22400 | 69 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 62 79 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 65 20 74 | ic.engineering.by.allowing.one.t |
22420 | 6f 20 73 70 65 63 69 66 79 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e | o.specify.paths.throughout.the.n |
22440 | 65 74 77 6f 72 6b 20 28 75 73 69 6e 67 20 52 53 56 50 20 6f 72 20 53 52 29 2c 20 61 6e 64 20 74 | etwork.(using.RSVP.or.SR),.and.t |
22460 | 6f 20 67 65 6e 65 72 61 6c 6c 79 20 61 6c 6c 6f 77 20 66 6f 72 20 65 61 73 69 65 72 20 69 6e 74 | o.generally.allow.for.easier.int |
22480 | 72 61 2f 69 6e 74 65 72 20 6e 65 74 77 6f 72 6b 20 74 72 61 6e 73 70 6f 72 74 20 6f 66 20 64 61 | ra/inter.network.transport.of.da |
224a0 | 74 61 20 70 61 63 6b 65 74 73 2e 00 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 | ta.packets..:abbr:`NAT.(Network. |
224c0 | 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 6f 6d 6d 6f | Address.Translation)`.is.a.commo |
224e0 | 6e 20 6d 65 74 68 6f 64 20 6f 66 20 72 65 6d 61 70 70 69 6e 67 20 6f 6e 65 20 49 50 20 61 64 64 | n.method.of.remapping.one.IP.add |
22500 | 72 65 73 73 20 73 70 61 63 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 62 79 20 6d 6f 64 69 66 | ress.space.into.another.by.modif |
22520 | 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | ying.network.address.information |
22540 | 20 69 6e 20 74 68 65 20 49 50 20 68 65 61 64 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 77 68 69 | .in.the.IP.header.of.packets.whi |
22560 | 6c 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 74 72 61 6e 73 69 74 20 61 63 72 6f 73 73 20 61 20 | le.they.are.in.transit.across.a. |
22580 | 74 72 61 66 66 69 63 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 2e 20 54 68 65 20 74 65 63 68 | traffic.routing.device..The.tech |
225a0 | 6e 69 71 75 65 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 20 61 73 20 61 20 73 | nique.was.originally.used.as.a.s |
225c0 | 68 6f 72 74 63 75 74 20 74 6f 20 61 76 6f 69 64 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 61 | hortcut.to.avoid.the.need.to.rea |
225e0 | 64 64 72 65 73 73 20 65 76 65 72 79 20 68 6f 73 74 20 77 68 65 6e 20 61 20 6e 65 74 77 6f 72 6b | ddress.every.host.when.a.network |
22600 | 20 77 61 73 20 6d 6f 76 65 64 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 61 20 70 6f 70 75 | .was.moved..It.has.become.a.popu |
22620 | 6c 61 72 20 61 6e 64 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 6f 6c 20 69 6e 20 63 6f 6e 73 65 72 | lar.and.essential.tool.in.conser |
22640 | 76 69 6e 67 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e 20 74 68 65 | ving.global.address.space.in.the |
22660 | 20 66 61 63 65 20 6f 66 20 49 50 76 34 20 61 64 64 72 65 73 73 20 65 78 68 61 75 73 74 69 6f 6e | .face.of.IPv4.address.exhaustion |
22680 | 2e 20 4f 6e 65 20 49 6e 74 65 72 6e 65 74 2d 72 6f 75 74 61 62 6c 65 20 49 50 20 61 64 64 72 65 | ..One.Internet-routable.IP.addre |
226a0 | 73 73 20 6f 66 20 61 20 4e 41 54 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 | ss.of.a.NAT.gateway.can.be.used. |
226c0 | 66 6f 72 20 61 6e 20 65 6e 74 69 72 65 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 2e 00 3a | for.an.entire.private.network..: |
226e0 | 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 | abbr:`NAT.(Network.Address.Trans |
22700 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 65 6e 74 69 72 65 6c 79 20 | lation)`.is.configured.entirely. |
22720 | 6f 6e 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 6f 20 63 61 6c 6c 65 64 20 60 72 75 6c 65 73 60 | on.a.series.of.so.called.`rules` |
22740 | 2e 20 52 75 6c 65 73 20 61 72 65 20 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 65 76 61 6c 75 61 74 | ..Rules.are.numbered.and.evaluat |
22760 | 65 64 20 62 79 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 4f 53 20 69 6e 20 6e 75 6d 65 72 | ed.by.the.underlying.OS.in.numer |
22780 | 69 63 61 6c 20 6f 72 64 65 72 21 20 54 68 65 20 72 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e | ical.order!.The.rule.numbers.can |
227a0 | 20 62 65 20 63 68 61 6e 67 65 73 20 62 79 20 75 74 69 6c 69 7a 69 6e 67 20 74 68 65 20 3a 63 66 | .be.changes.by.utilizing.the.:cf |
227c0 | 67 63 6d 64 3a 60 72 65 6e 61 6d 65 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 63 6f 70 79 60 | gcmd:`rename`.and.:cfgcmd:`copy` |
227e0 | 20 63 6f 6d 6d 61 6e 64 73 2e 00 3a 61 62 62 72 3a 60 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f | .commands..:abbr:`NAT64.(IPv6-to |
22800 | 2d 49 50 76 34 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 | -IPv4.Prefix.Translation)`.is.a. |
22820 | 63 72 69 74 69 63 61 6c 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 20 6d 6f 64 65 72 6e 20 6e 65 74 | critical.component.in.modern.net |
22840 | 77 6f 72 6b 69 6e 67 2c 20 66 61 63 69 6c 69 74 61 74 69 6e 67 20 63 6f 6d 6d 75 6e 69 63 61 74 | working,.facilitating.communicat |
22860 | 69 6f 6e 20 62 65 74 77 65 65 6e 20 49 50 76 36 20 61 6e 64 20 49 50 76 34 20 6e 65 74 77 6f 72 | ion.between.IPv6.and.IPv4.networ |
22880 | 6b 73 2e 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 6f 75 74 6c 69 6e 65 73 20 | ks..This.documentation.outlines. |
228a0 | 74 68 65 20 73 65 74 75 70 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 61 6e 64 20 75 73 | the.setup,.configuration,.and.us |
228c0 | 61 67 65 20 6f 66 20 74 68 65 20 4e 41 54 36 34 20 66 65 61 74 75 72 65 20 69 6e 20 79 6f 75 72 | age.of.the.NAT64.feature.in.your |
228e0 | 20 70 72 6f 6a 65 63 74 2e 20 57 68 65 74 68 65 72 20 79 6f 75 20 61 72 65 20 74 72 61 6e 73 69 | .project..Whether.you.are.transi |
22900 | 74 69 6f 6e 69 6e 67 20 74 6f 20 49 50 76 36 20 6f 72 20 6e 65 65 64 20 74 6f 20 73 65 61 6d 6c | tioning.to.IPv6.or.need.to.seaml |
22920 | 65 73 73 6c 79 20 63 6f 6e 6e 65 63 74 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 64 65 76 69 | essly.connect.IPv4.and.IPv6.devi |
22940 | 63 65 73 2e 20 4e 41 54 36 34 20 69 73 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 | ces..NAT64.is.a.stateful.transla |
22960 | 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 | tion.mechanism.that.translates.I |
22980 | 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 | Pv6.addresses.to.IPv4.addresses. |
229a0 | 61 6e 64 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 36 20 61 64 64 72 65 | and.IPv4.addresses.to.IPv6.addre |
229c0 | 73 73 65 73 2e 20 4e 41 54 36 34 20 69 73 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 49 50 | sses..NAT64.is.used.to.enable.IP |
229e0 | 76 36 2d 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 49 50 76 34 20 | v6-only.clients.to.contact.IPv4. |
22a00 | 73 65 72 76 65 72 73 20 75 73 69 6e 67 20 75 6e 69 63 61 73 74 20 55 44 50 2c 20 54 43 50 2c 20 | servers.using.unicast.UDP,.TCP,. |
22a20 | 6f 72 20 49 43 4d 50 2e 00 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 | or.ICMP..:abbr:`NET.(Network.Ent |
22a40 | 69 74 79 20 54 69 74 6c 65 29 60 20 73 65 6c 65 63 74 6f 72 3a 20 60 60 30 30 60 60 20 4d 75 73 | ity.Title)`.selector:.``00``.Mus |
22a60 | 74 20 61 6c 77 61 79 73 20 62 65 20 30 30 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 6e 64 | t.always.be.00..This.setting.ind |
22a80 | 69 63 61 74 65 73 20 22 74 68 69 73 20 73 79 73 74 65 6d 22 20 6f 72 20 22 6c 6f 63 61 6c 20 73 | icates."this.system".or."local.s |
22aa0 | 79 73 74 65 6d 2e 22 00 3a 61 62 62 72 3a 60 4e 48 52 50 20 28 4e 65 78 74 20 48 6f 70 20 52 65 | ystem.".:abbr:`NHRP.(Next.Hop.Re |
22ac0 | 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 3a 72 66 63 3a 60 32 33 33 32 60 00 | solution.Protocol)`.:rfc:`2332`. |
22ae0 | 3a 61 62 62 72 3a 60 4e 50 54 76 36 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f | :abbr:`NPTv6.(IPv6-to-IPv6.Netwo |
22b00 | 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 6e 20 61 64 | rk.Prefix.Translation)`.is.an.ad |
22b20 | 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 61 73 | dress.translation.technology.bas |
22b40 | 65 64 20 6f 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2c 20 75 73 65 64 20 74 6f 20 63 6f 6e | ed.on.IPv6.networks,.used.to.con |
22b60 | 76 65 72 74 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 61 | vert.an.IPv6.address.prefix.in.a |
22b80 | 6e 20 49 50 76 36 20 6d 65 73 73 61 67 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 | n.IPv6.message.into.another.IPv6 |
22ba0 | 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6c 6c 20 74 68 69 73 20 61 64 | .address.prefix..We.call.this.ad |
22bc0 | 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 74 68 6f 64 20 4e 41 54 36 36 2e 20 | dress.translation.method.NAT66.. |
22be0 | 44 65 76 69 63 65 73 20 74 68 61 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 4e 41 54 36 36 20 66 | Devices.that.support.the.NAT66.f |
22c00 | 75 6e 63 74 69 6f 6e 20 61 72 65 20 63 61 6c 6c 65 64 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 | unction.are.called.NAT66.devices |
22c20 | 2c 20 77 68 69 63 68 20 63 61 6e 20 70 72 6f 76 69 64 65 20 4e 41 54 36 36 20 73 6f 75 72 63 65 | ,.which.can.provide.NAT66.source |
22c40 | 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 | .and.destination.address.transla |
22c60 | 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 73 2e 00 3a 61 62 62 72 3a 60 4e 54 50 20 28 4e 65 74 77 | tion.functions..:abbr:`NTP.(Netw |
22c80 | 6f 72 6b 20 54 69 6d 65 20 50 72 6f 74 6f 63 6f 6c 60 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b | ork.Time.Protocol`).is.a.network |
22ca0 | 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 63 6c 6f 63 6b 20 73 79 6e 63 68 72 6f 6e 69 | ing.protocol.for.clock.synchroni |
22cc0 | 7a 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 | zation.between.computer.systems. |
22ce0 | 6f 76 65 72 20 70 61 63 6b 65 74 2d 73 77 69 74 63 68 65 64 2c 20 76 61 72 69 61 62 6c 65 2d 6c | over.packet-switched,.variable-l |
22d00 | 61 74 65 6e 63 79 20 64 61 74 61 20 6e 65 74 77 6f 72 6b 73 2e 20 49 6e 20 6f 70 65 72 61 74 69 | atency.data.networks..In.operati |
22d20 | 6f 6e 20 73 69 6e 63 65 20 62 65 66 6f 72 65 20 31 39 38 35 2c 20 4e 54 50 20 69 73 20 6f 6e 65 | on.since.before.1985,.NTP.is.one |
22d40 | 20 6f 66 20 74 68 65 20 6f 6c 64 65 73 74 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c | .of.the.oldest.Internet.protocol |
22d60 | 73 20 69 6e 20 63 75 72 72 65 6e 74 20 75 73 65 2e 00 3a 61 62 62 72 3a 60 4f 53 50 46 20 28 4f | s.in.current.use..:abbr:`OSPF.(O |
22d80 | 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 29 60 20 69 73 20 61 20 72 | pen.Shortest.Path.First)`.is.a.r |
22da0 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 50 72 6f | outing.protocol.for.Internet.Pro |
22dc0 | 74 6f 63 6f 6c 20 28 49 50 29 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 75 73 65 73 20 61 20 6c | tocol.(IP).networks..It.uses.a.l |
22de0 | 69 6e 6b 20 73 74 61 74 65 20 72 6f 75 74 69 6e 67 20 28 4c 53 52 29 20 61 6c 67 6f 72 69 74 68 | ink.state.routing.(LSR).algorith |
22e00 | 6d 20 61 6e 64 20 66 61 6c 6c 73 20 69 6e 74 6f 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 69 6e | m.and.falls.into.the.group.of.in |
22e20 | 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 2c | terior.gateway.protocols.(IGPs), |
22e40 | 20 6f 70 65 72 61 74 69 6e 67 20 77 69 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 61 75 74 6f 6e | .operating.within.a.single.auton |
22e60 | 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 28 41 53 29 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 | omous.system.(AS)..It.is.defined |
22e80 | 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 32 20 69 6e 20 3a 72 66 63 3a 60 32 33 32 38 | .as.OSPF.Version.2.in.:rfc:`2328 |
22ea0 | 60 20 28 31 39 39 38 29 20 66 6f 72 20 49 50 76 34 2e 20 55 70 64 61 74 65 73 20 66 6f 72 20 49 | `.(1998).for.IPv4..Updates.for.I |
22ec0 | 50 76 36 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f | Pv6.are.specified.as.OSPF.Versio |
22ee0 | 6e 20 33 20 69 6e 20 3a 72 66 63 3a 60 35 33 34 30 60 20 28 32 30 30 38 29 2e 20 4f 53 50 46 20 | n.3.in.:rfc:`5340`.(2008)..OSPF. |
22f00 | 73 75 70 70 6f 72 74 73 20 74 68 65 20 3a 61 62 62 72 3a 60 43 49 44 52 20 28 43 6c 61 73 73 6c | supports.the.:abbr:`CIDR.(Classl |
22f20 | 65 73 73 20 49 6e 74 65 72 2d 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 64 72 65 | ess.Inter-Domain.Routing)`.addre |
22f40 | 73 73 69 6e 67 20 6d 6f 64 65 6c 2e 00 3a 61 62 62 72 3a 60 50 49 4d 20 28 50 72 6f 74 6f 63 6f | ssing.model..:abbr:`PIM.(Protoco |
22f60 | 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6d 75 73 74 20 62 | l.Independent.Multicast)`.must.b |
22f80 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 | e.configured.in.every.interface. |
22fa0 | 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 | of.every.participating.router..E |
22fc0 | 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c | very.router.must.also.have.the.l |
22fe0 | 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d | ocation.of.the.Rendevouz.Point.m |
23000 | 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 | anually.configured..Then,.unidir |
23020 | 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 | ectional.shared.trees.rooted.at. |
23040 | 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 | the.Rendevouz.Point.will.automat |
23060 | 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 | ically.be.built.for.multicast.di |
23080 | 73 74 72 69 62 75 74 69 6f 6e 2e 00 3a 61 62 62 72 3a 60 50 50 50 6f 45 20 28 50 6f 69 6e 74 2d | stribution..:abbr:`PPPoE.(Point- |
230a0 | 74 6f 2d 50 6f 69 6e 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 | to-Point.Protocol.over.Ethernet) |
230c0 | 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 65 6e 63 61 | `.is.a.network.protocol.for.enca |
230e0 | 70 73 75 6c 61 74 69 6e 67 20 50 50 50 20 66 72 61 6d 65 73 20 69 6e 73 69 64 65 20 45 74 68 65 | psulating.PPP.frames.inside.Ethe |
23100 | 72 6e 65 74 20 66 72 61 6d 65 73 2e 20 49 74 20 61 70 70 65 61 72 65 64 20 69 6e 20 31 39 39 39 | rnet.frames..It.appeared.in.1999 |
23120 | 2c 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 74 68 65 20 62 6f 6f 6d 20 6f 66 20 | ,.in.the.context.of.the.boom.of. |
23140 | 44 53 4c 20 61 73 20 74 68 65 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 74 75 6e 6e 65 6c 69 6e | DSL.as.the.solution.for.tunnelin |
23160 | 67 20 70 61 63 6b 65 74 73 20 6f 76 65 72 20 74 68 65 20 44 53 4c 20 63 6f 6e 6e 65 63 74 69 6f | g.packets.over.the.DSL.connectio |
23180 | 6e 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 49 53 50 73 20 28 49 6e 74 65 72 6e 65 74 20 53 | n.to.the.:abbr:`ISPs.(Internet.S |
231a0 | 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 73 29 60 20 49 50 20 6e 65 74 77 6f 72 6b 2c 20 61 | ervice.Providers)`.IP.network,.a |
231c0 | 6e 64 20 66 72 6f 6d 20 74 68 65 72 65 20 74 6f 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 | nd.from.there.to.the.rest.of.the |
231e0 | 20 49 6e 74 65 72 6e 65 74 2e 20 41 20 32 30 30 35 20 6e 65 74 77 6f 72 6b 69 6e 67 20 62 6f 6f | .Internet..A.2005.networking.boo |
23200 | 6b 20 6e 6f 74 65 64 20 74 68 61 74 20 22 4d 6f 73 74 20 44 53 4c 20 70 72 6f 76 69 64 65 72 73 | k.noted.that."Most.DSL.providers |
23220 | 20 75 73 65 20 50 50 50 6f 45 2c 20 77 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 | .use.PPPoE,.which.provides.authe |
23240 | 6e 74 69 63 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6d 70 72 | ntication,.encryption,.and.compr |
23260 | 65 73 73 69 6f 6e 2e 22 20 54 79 70 69 63 61 6c 20 75 73 65 20 6f 66 20 50 50 50 6f 45 20 69 6e | ession.".Typical.use.of.PPPoE.in |
23280 | 76 6f 6c 76 65 73 20 6c 65 76 65 72 61 67 69 6e 67 20 74 68 65 20 50 50 50 20 66 61 63 69 6c 69 | volves.leveraging.the.PPP.facili |
232a0 | 74 69 65 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 | ties.for.authenticating.the.user |
232c0 | 20 77 69 74 68 20 61 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2c 20 70 | .with.a.username.and.password,.p |
232e0 | 72 65 64 6f 6d 69 6e 61 74 65 6c 79 20 76 69 61 20 74 68 65 20 50 41 50 20 70 72 6f 74 6f 63 6f | redominately.via.the.PAP.protoco |
23300 | 6c 20 61 6e 64 20 6c 65 73 73 20 6f 66 74 65 6e 20 76 69 61 20 43 48 41 50 2e 00 3a 61 62 62 72 | l.and.less.often.via.CHAP..:abbr |
23320 | 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 61 | :`RAs.(Router.advertisements)`.a |
23340 | 72 65 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 38 36 31 23 73 65 63 74 69 | re.described.in.:rfc:`4861#secti |
23360 | 6f 6e 2d 34 2e 36 2e 32 60 2e 20 54 68 65 79 20 61 72 65 20 70 61 72 74 20 6f 66 20 77 68 61 74 | on-4.6.2`..They.are.part.of.what |
23380 | 20 69 73 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 | .is.known.as.:abbr:`SLAAC.(State |
233a0 | 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 | less.Address.Autoconfiguration)` |
233c0 | 2e 00 3a 61 62 62 72 3a 60 52 49 50 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f | ..:abbr:`RIP.(Routing.Informatio |
233e0 | 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 | n.Protocol)`.is.a.widely.deploye |
23400 | 64 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 | d.interior.gateway.protocol..RIP |
23420 | 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 69 6e 20 74 68 65 20 31 39 37 30 73 20 61 74 20 58 | .was.developed.in.the.1970s.at.X |
23440 | 65 72 6f 78 20 4c 61 62 73 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 58 4e 53 20 72 6f 75 | erox.Labs.as.part.of.the.XNS.rou |
23460 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 | ting.protocol..RIP.is.a.distance |
23480 | 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 69 73 20 62 61 73 65 64 20 6f 6e | -vector.protocol.and.is.based.on |
234a0 | 20 74 68 65 20 42 65 6c 6c 6d 61 6e 2d 46 6f 72 64 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 41 73 | .the.Bellman-Ford.algorithms..As |
234c0 | 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 52 49 50 | .a.distance-vector.protocol,.RIP |
234e0 | 20 72 6f 75 74 65 72 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 74 6f 20 69 74 73 20 6e 65 69 67 | .router.send.updates.to.its.neig |
23500 | 68 62 6f 72 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 74 68 75 73 20 61 6c 6c 6f 77 69 6e | hbors.periodically,.thus.allowin |
23520 | 67 20 74 68 65 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 6f 20 61 20 6b 6e 6f 77 6e 20 74 6f 70 | g.the.convergence.to.a.known.top |
23540 | 6f 6c 6f 67 79 2e 20 49 6e 20 65 61 63 68 20 75 70 64 61 74 65 2c 20 74 68 65 20 64 69 73 74 61 | ology..In.each.update,.the.dista |
23560 | 6e 63 65 20 74 6f 20 61 6e 79 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 62 65 | nce.to.any.given.network.will.be |
23580 | 20 62 72 6f 61 64 63 61 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 72 6f | .broadcast.to.its.neighboring.ro |
235a0 | 75 74 65 72 2e 00 3a 61 62 62 72 3a 60 52 50 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c | uter..:abbr:`RPKI.(Resource.Publ |
235c0 | 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 | ic.Key.Infrastructure)`.is.a.fra |
235e0 | 6d 65 77 6f 72 6b 20 3a 61 62 62 72 3a 60 50 4b 49 20 28 50 75 62 6c 69 63 20 4b 65 79 20 49 6e | mework.:abbr:`PKI.(Public.Key.In |
23600 | 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 | frastructure)`.designed.to.secur |
23620 | 65 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 | e.the.Internet.routing.infrastru |
23640 | 63 74 75 72 65 2e 20 49 74 20 61 73 73 6f 63 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 | cture..It.associates.BGP.route.a |
23660 | 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 77 69 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 | nnouncements.with.the.correct.or |
23680 | 69 67 69 6e 61 74 69 6e 67 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 | iginating.:abbr:`ASN.(Autonomus. |
236a0 | 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 | System.Number)`.which.BGP.router |
236c0 | 73 20 63 61 6e 20 74 68 65 6e 20 75 73 65 20 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 | s.can.then.use.to.check.each.rou |
236e0 | 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 | te.against.the.corresponding.:ab |
23700 | 62 72 3a 60 52 4f 41 20 28 52 6f 75 74 65 20 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 | br:`ROA.(Route.Origin.Authorisat |
23720 | 69 6f 6e 29 60 20 66 6f 72 20 76 61 6c 69 64 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 | ion)`.for.validity..RPKI.is.desc |
23740 | 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 53 | ribed.in.:rfc:`6480`..:abbr:`RPS |
23760 | 20 28 52 65 63 65 69 76 65 20 50 61 63 6b 65 74 20 53 74 65 65 72 69 6e 67 29 60 20 69 73 20 6c | .(Receive.Packet.Steering)`.is.l |
23780 | 6f 67 69 63 61 6c 6c 79 20 61 20 73 6f 66 74 77 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 | ogically.a.software.implementati |
237a0 | 6f 6e 20 6f 66 20 3a 61 62 62 72 3a 60 52 53 53 20 28 52 65 63 65 69 76 65 20 53 69 64 65 20 53 | on.of.:abbr:`RSS.(Receive.Side.S |
237c0 | 63 61 6c 69 6e 67 29 60 2e 20 42 65 69 6e 67 20 69 6e 20 73 6f 66 74 77 61 72 65 2c 20 69 74 20 | caling)`..Being.in.software,.it. |
237e0 | 69 73 20 6e 65 63 65 73 73 61 72 69 6c 79 20 63 61 6c 6c 65 64 20 6c 61 74 65 72 20 69 6e 20 74 | is.necessarily.called.later.in.t |
23800 | 68 65 20 64 61 74 61 70 61 74 68 2e 20 57 68 65 72 65 61 73 20 52 53 53 20 73 65 6c 65 63 74 73 | he.datapath..Whereas.RSS.selects |
23820 | 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 68 65 6e 63 65 20 43 50 55 20 74 68 61 74 20 77 69 | .the.queue.and.hence.CPU.that.wi |
23840 | 6c 6c 20 72 75 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 | ll.run.the.hardware.interrupt.ha |
23860 | 6e 64 6c 65 72 2c 20 52 50 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 43 50 55 20 74 6f 20 70 65 | ndler,.RPS.selects.the.CPU.to.pe |
23880 | 72 66 6f 72 6d 20 70 72 6f 74 6f 63 6f 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 61 62 6f 76 65 20 | rform.protocol.processing.above. |
238a0 | 74 68 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2e 20 54 68 69 73 20 69 73 20 61 | the.interrupt.handler..This.is.a |
238c0 | 63 63 6f 6d 70 6c 69 73 68 65 64 20 62 79 20 70 6c 61 63 69 6e 67 20 74 68 65 20 70 61 63 6b 65 | ccomplished.by.placing.the.packe |
238e0 | 74 20 6f 6e 20 74 68 65 20 64 65 73 69 72 65 64 20 43 50 55 27 73 20 62 61 63 6b 6c 6f 67 20 71 | t.on.the.desired.CPU's.backlog.q |
23900 | 75 65 75 65 20 61 6e 64 20 77 61 6b 69 6e 67 20 75 70 20 74 68 65 20 43 50 55 20 66 6f 72 20 70 | ueue.and.waking.up.the.CPU.for.p |
23920 | 72 6f 63 65 73 73 69 6e 67 2e 20 52 50 53 20 68 61 73 20 73 6f 6d 65 20 61 64 76 61 6e 74 61 67 | rocessing..RPS.has.some.advantag |
23940 | 65 73 20 6f 76 65 72 20 52 53 53 3a 00 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 | es.over.RSS:.:abbr:`SLAAC.(State |
23960 | 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 | less.Address.Autoconfiguration)` |
23980 | 20 3a 72 66 63 3a 60 34 38 36 32 60 2e 20 49 50 76 36 20 68 6f 73 74 73 20 63 61 6e 20 63 6f 6e | .:rfc:`4862`..IPv6.hosts.can.con |
239a0 | 66 69 67 75 72 65 20 74 68 65 6d 73 65 6c 76 65 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | figure.themselves.automatically. |
239c0 | 77 68 65 6e 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 | when.connected.to.an.IPv6.networ |
239e0 | 6b 20 75 73 69 6e 67 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 | k.using.the.Neighbor.Discovery.P |
23a00 | 72 6f 74 6f 63 6f 6c 20 76 69 61 20 3a 61 62 62 72 3a 60 49 43 4d 50 76 36 20 28 49 6e 74 65 72 | rotocol.via.:abbr:`ICMPv6.(Inter |
23a20 | 6e 65 74 20 43 6f 6e 74 72 6f 6c 20 4d 65 73 73 61 67 65 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 | net.Control.Message.Protocol.ver |
23a40 | 73 69 6f 6e 20 36 29 60 20 72 6f 75 74 65 72 20 64 69 73 63 6f 76 65 72 79 20 6d 65 73 73 61 67 | sion.6)`.router.discovery.messag |
23a60 | 65 73 2e 20 57 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 6e 65 | es..When.first.connected.to.a.ne |
23a80 | 74 77 6f 72 6b 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c | twork,.a.host.sends.a.link-local |
23aa0 | 20 72 6f 75 74 65 72 20 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 75 6c 74 69 63 61 73 74 20 72 | .router.solicitation.multicast.r |
23ac0 | 65 71 75 65 73 74 20 66 6f 72 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 | equest.for.its.configuration.par |
23ae0 | 61 6d 65 74 65 72 73 3b 20 72 6f 75 74 65 72 73 20 72 65 73 70 6f 6e 64 20 74 6f 20 73 75 63 68 | ameters;.routers.respond.to.such |
23b00 | 20 61 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 72 6f 75 74 65 72 20 61 64 76 65 72 74 69 | .a.request.with.a.router.adverti |
23b20 | 73 65 6d 65 6e 74 20 70 61 63 6b 65 74 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 49 6e 74 65 | sement.packet.that.contains.Inte |
23b40 | 72 6e 65 74 20 4c 61 79 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 | rnet.Layer.configuration.paramet |
23b60 | 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 4e 41 54 20 28 53 6f 75 72 63 65 20 4e 65 74 77 6f 72 6b | ers..:abbr:`SNAT.(Source.Network |
23b80 | 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 74 68 65 20 6d 6f | .Address.Translation)`.is.the.mo |
23ba0 | 73 74 20 63 6f 6d 6d 6f 6e 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 | st.common.form.of.:abbr:`NAT.(Ne |
23bc0 | 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 61 6e 64 20 | twork.Address.Translation)`.and. |
23be0 | 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 73 69 6d 70 6c 79 20 | is.typically.referred.to.simply. |
23c00 | 61 73 20 4e 41 54 2e 20 54 6f 20 62 65 20 6d 6f 72 65 20 63 6f 72 72 65 63 74 2c 20 77 68 61 74 | as.NAT..To.be.more.correct,.what |
23c20 | 20 6d 6f 73 74 20 70 65 6f 70 6c 65 20 72 65 66 65 72 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 | .most.people.refer.to.as.:abbr:` |
23c40 | 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e | NAT.(Network.Address.Translation |
23c60 | 29 60 20 69 73 20 61 63 74 75 61 6c 6c 79 20 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 3a 61 | )`.is.actually.the.process.of.:a |
23c80 | 62 62 72 3a 60 50 41 54 20 28 50 6f 72 74 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 | bbr:`PAT.(Port.Address.Translati |
23ca0 | 6f 6e 29 60 2c 20 6f 72 20 4e 41 54 20 6f 76 65 72 6c 6f 61 64 2e 20 53 4e 41 54 20 69 73 20 74 | on)`,.or.NAT.overload..SNAT.is.t |
23cc0 | 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 62 79 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 73 2f | ypically.used.by.internal.users/ |
23ce0 | 70 72 69 76 61 74 65 20 68 6f 73 74 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 49 6e 74 65 | private.hosts.to.access.the.Inte |
23d00 | 72 6e 65 74 20 2d 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 74 72 61 | rnet.-.the.source.address.is.tra |
23d20 | 6e 73 6c 61 74 65 64 20 61 6e 64 20 74 68 75 73 20 6b 65 70 74 20 70 72 69 76 61 74 65 2e 00 3a | nslated.and.thus.kept.private..: |
23d40 | 61 62 62 72 3a 60 53 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 34 20 53 6f 75 72 63 | abbr:`SNAT64.(IPv6-to-IPv4.Sourc |
23d60 | 65 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 73 74 61 | e.Address.Translation)`.is.a.sta |
23d80 | 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 | teful.translation.mechanism.that |
23da0 | 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 | .translates.IPv6.addresses.to.IP |
23dc0 | 76 34 20 61 64 64 72 65 73 73 65 73 2e 00 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c | v4.addresses..:abbr:`SNMP.(Simpl |
23de0 | 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 | e.Network.Management.Protocol)`. |
23e00 | 69 73 20 61 6e 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 70 72 6f 74 6f 63 6f 6c | is.an.Internet.Standard.protocol |
23e20 | 20 66 6f 72 20 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 69 | .for.collecting.and.organizing.i |
23e40 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 | nformation.about.managed.devices |
23e60 | 20 6f 6e 20 49 50 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 66 6f 72 20 6d 6f 64 69 66 79 69 6e | .on.IP.networks.and.for.modifyin |
23e80 | 67 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 64 65 76 | g.that.information.to.change.dev |
23ea0 | 69 63 65 20 62 65 68 61 76 69 6f 72 2e 20 44 65 76 69 63 65 73 20 74 68 61 74 20 74 79 70 69 63 | ice.behavior..Devices.that.typic |
23ec0 | 61 6c 6c 79 20 73 75 70 70 6f 72 74 20 53 4e 4d 50 20 69 6e 63 6c 75 64 65 20 63 61 62 6c 65 20 | ally.support.SNMP.include.cable. |
23ee0 | 6d 6f 64 65 6d 73 2c 20 72 6f 75 74 65 72 73 2c 20 73 77 69 74 63 68 65 73 2c 20 73 65 72 76 65 | modems,.routers,.switches,.serve |
23f00 | 72 73 2c 20 77 6f 72 6b 73 74 61 74 69 6f 6e 73 2c 20 70 72 69 6e 74 65 72 73 2c 20 61 6e 64 20 | rs,.workstations,.printers,.and. |
23f20 | 6d 6f 72 65 2e 00 3a 61 62 62 72 3a 60 53 4e 50 54 76 36 20 28 53 6f 75 72 63 65 20 49 50 76 36 | more..:abbr:`SNPTv6.(Source.IPv6 |
23f40 | 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 | -to-IPv6.Network.Prefix.Translat |
23f60 | 69 6f 6e 29 60 20 54 68 65 20 63 6f 6e 76 65 72 73 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 | ion)`.The.conversion.function.is |
23f80 | 20 6d 61 69 6e 6c 79 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 63 | .mainly.used.in.the.following.sc |
23fa0 | 65 6e 61 72 69 6f 73 3a 00 3a 61 62 62 72 3a 60 53 53 48 20 28 53 65 63 75 72 65 20 53 68 65 6c | enarios:.:abbr:`SSH.(Secure.Shel |
23fc0 | 6c 29 60 20 69 73 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6e 65 74 77 6f 72 6b 20 70 | l)`.is.a.cryptographic.network.p |
23fe0 | 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6f 70 65 72 61 74 69 6e 67 20 6e 65 74 77 6f 72 6b 20 73 65 | rotocol.for.operating.network.se |
24000 | 72 76 69 63 65 73 20 73 65 63 75 72 65 6c 79 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 | rvices.securely.over.an.unsecure |
24020 | 64 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 54 43 50 20 70 6f 72 74 | d.network..The.standard.TCP.port |
24040 | 20 66 6f 72 20 53 53 48 20 69 73 20 32 32 2e 20 54 68 65 20 62 65 73 74 20 6b 6e 6f 77 6e 20 65 | .for.SSH.is.22..The.best.known.e |
24060 | 78 61 6d 70 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 66 6f 72 20 72 65 6d 6f 74 65 | xample.application.is.for.remote |
24080 | 20 6c 6f 67 69 6e 20 74 6f 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 62 79 20 75 73 | .login.to.computer.systems.by.us |
240a0 | 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 | ers..:abbr:`SSTP.(Secure.Socket. |
240c0 | 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f | Tunneling.Protocol)`.is.a.form.o |
240e0 | 66 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 | f.:abbr:`VPN.(Virtual.Private.Ne |
24100 | 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d | twork)`.tunnel.that.provides.a.m |
24120 | 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 | echanism.to.transport.PPP.traffi |
24140 | 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 | c.through.an.SSL/TLS.channel..SS |
24160 | 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 | L/TLS.provides.transport-level.s |
24180 | 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e | ecurity.with.key.negotiation,.en |
241a0 | 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 | cryption.and.traffic.integrity.c |
241c0 | 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 | hecking..The.use.of.SSL/TLS.over |
241e0 | 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 | .TCP.port.443.allows.SSTP.to.pas |
24200 | 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c | s.through.virtually.all.firewall |
24220 | 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 | s.and.proxy.servers.except.for.a |
24240 | 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a | uthenticated.web.proxies..:abbr: |
24260 | 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 | `SSTP.(Secure.Socket.Tunneling.P |
24280 | 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 54 | rotocol)`.is.a.form.of.:abbr:`VT |
242a0 | 50 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e | P.(Virtual.Private.Network)`.tun |
242c0 | 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f | nel.that.provides.a.mechanism.to |
242e0 | 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 | .transport.PPP.traffic.through.a |
24300 | 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 | n.SSL/TLS.channel..SSL/TLS.provi |
24320 | 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 | des.transport-level.security.wit |
24340 | 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e | h.key.negotiation,.encryption.an |
24360 | 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 | d.traffic.integrity.checking..Th |
24380 | 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 | e.use.of.SSL/TLS.over.TCP.port.4 |
243a0 | 34 33 20 28 62 79 20 64 65 66 61 75 6c 74 2c 20 70 6f 72 74 20 63 61 6e 20 62 65 20 63 68 61 6e | 43.(by.default,.port.can.be.chan |
243c0 | 67 65 64 29 20 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 | ged).allows.SSTP.to.pass.through |
243e0 | 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f | .virtually.all.firewalls.and.pro |
24400 | 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 | xy.servers.except.for.authentica |
24420 | 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 54 50 20 28 53 70 61 | ted.web.proxies..:abbr:`STP.(Spa |
24440 | 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 6e 65 74 77 6f | nning.Tree.Protocol)`.is.a.netwo |
24460 | 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 62 75 69 6c 64 73 20 61 20 6c 6f 6f 70 2d 66 | rk.protocol.that.builds.a.loop-f |
24480 | 72 65 65 20 6c 6f 67 69 63 61 6c 20 74 6f 70 6f 6c 6f 67 79 20 66 6f 72 20 45 74 68 65 72 6e 65 | ree.logical.topology.for.Etherne |
244a0 | 74 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 20 6f | t.networks..The.basic.function.o |
244c0 | 66 20 53 54 50 20 69 73 20 74 6f 20 70 72 65 76 65 6e 74 20 62 72 69 64 67 65 20 6c 6f 6f 70 73 | f.STP.is.to.prevent.bridge.loops |
244e0 | 20 61 6e 64 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 72 61 64 69 61 74 69 6f 6e 20 74 68 61 | .and.the.broadcast.radiation.tha |
24500 | 74 20 72 65 73 75 6c 74 73 20 66 72 6f 6d 20 74 68 65 6d 2e 20 53 70 61 6e 6e 69 6e 67 20 74 72 | t.results.from.them..Spanning.tr |
24520 | 65 65 20 61 6c 73 6f 20 61 6c 6c 6f 77 73 20 61 20 6e 65 74 77 6f 72 6b 20 64 65 73 69 67 6e 20 | ee.also.allows.a.network.design. |
24540 | 74 6f 20 69 6e 63 6c 75 64 65 20 62 61 63 6b 75 70 20 6c 69 6e 6b 73 20 70 72 6f 76 69 64 69 6e | to.include.backup.links.providin |
24560 | 67 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 20 69 66 20 61 6e 20 61 63 74 69 76 65 20 6c | g.fault.tolerance.if.an.active.l |
24580 | 69 6e 6b 20 66 61 69 6c 73 2e 00 3a 61 62 62 72 3a 60 54 46 54 50 20 28 54 72 69 76 69 61 6c 20 | ink.fails..:abbr:`TFTP.(Trivial. |
245a0 | 46 69 6c 65 20 54 72 61 6e 73 66 65 72 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 73 69 | File.Transfer.Protocol)`.is.a.si |
245c0 | 6d 70 6c 65 2c 20 6c 6f 63 6b 73 74 65 70 20 66 69 6c 65 20 74 72 61 6e 73 66 65 72 20 70 72 6f | mple,.lockstep.file.transfer.pro |
245e0 | 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 | tocol.which.allows.a.client.to.g |
24600 | 65 74 20 61 20 66 69 6c 65 20 66 72 6f 6d 20 6f 72 20 70 75 74 20 61 20 66 69 6c 65 20 6f 6e 74 | et.a.file.from.or.put.a.file.ont |
24620 | 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 2e 20 4f 6e 65 20 6f 66 20 69 74 73 20 70 72 69 6d | o.a.remote.host..One.of.its.prim |
24640 | 61 72 79 20 75 73 65 73 20 69 73 20 69 6e 20 74 68 65 20 65 61 72 6c 79 20 73 74 61 67 65 73 20 | ary.uses.is.in.the.early.stages. |
24660 | 6f 66 20 6e 6f 64 65 73 20 62 6f 6f 74 69 6e 67 20 66 72 6f 6d 20 61 20 6c 6f 63 61 6c 20 61 72 | of.nodes.booting.from.a.local.ar |
24680 | 65 61 20 6e 65 74 77 6f 72 6b 2e 20 54 46 54 50 20 68 61 73 20 62 65 65 6e 20 75 73 65 64 20 66 | ea.network..TFTP.has.been.used.f |
246a0 | 6f 72 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 69 74 20 69 | or.this.application.because.it.i |
246c0 | 73 20 76 65 72 79 20 73 69 6d 70 6c 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 2e 00 3a 61 62 62 | s.very.simple.to.implement..:abb |
246e0 | 72 3a 60 56 4e 49 20 28 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 | r:`VNI.(Virtual.Network.Identifi |
24700 | 65 72 29 60 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 61 20 75 6e 69 71 | er)`.is.an.identifier.for.a.uniq |
24720 | 75 65 20 65 6c 65 6d 65 6e 74 20 6f 66 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 2e | ue.element.of.a.virtual.network. |
24740 | 20 20 49 6e 20 6d 61 6e 79 20 73 69 74 75 61 74 69 6f 6e 73 20 74 68 69 73 20 6d 61 79 20 72 65 | ..In.many.situations.this.may.re |
24760 | 70 72 65 73 65 6e 74 20 61 6e 20 4c 32 20 73 65 67 6d 65 6e 74 2c 20 68 6f 77 65 76 65 72 2c 20 | present.an.L2.segment,.however,. |
24780 | 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 66 6f | the.control.plane.defines.the.fo |
247a0 | 72 77 61 72 64 69 6e 67 20 73 65 6d 61 6e 74 69 63 73 20 6f 66 20 64 65 63 61 70 73 75 6c 61 74 | rwarding.semantics.of.decapsulat |
247c0 | 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 56 4e 49 20 4d 41 59 20 62 65 20 75 73 65 64 20 | ed.packets..The.VNI.MAY.be.used. |
247e0 | 61 73 20 70 61 72 74 20 6f 66 20 45 43 4d 50 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 | as.part.of.ECMP.forwarding.decis |
24800 | 69 6f 6e 73 20 6f 72 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 61 20 6d 65 63 68 61 6e 69 | ions.or.MAY.be.used.as.a.mechani |
24820 | 73 6d 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 6f 76 65 72 6c 61 | sm.to.distinguish.between.overla |
24840 | 70 70 69 6e 67 20 61 64 64 72 65 73 73 20 73 70 61 63 65 73 20 63 6f 6e 74 61 69 6e 65 64 20 69 | pping.address.spaces.contained.i |
24860 | 6e 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 20 77 68 65 6e 20 6c | n.the.encapsulated.packet.when.l |
24880 | 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 63 72 6f 73 73 20 43 50 55 73 2e 00 3a 61 62 62 72 | oad.balancing.across.CPUs..:abbr |
248a0 | 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 | :`VRF.(Virtual.Routing.and.Forwa |
248c0 | 72 64 69 6e 67 29 60 20 64 65 76 69 63 65 73 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 69 70 | rding)`.devices.combined.with.ip |
248e0 | 20 72 75 6c 65 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 | .rules.provides.the.ability.to.c |
24900 | 72 65 61 74 65 20 76 69 72 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 | reate.virtual.routing.and.forwar |
24920 | 64 69 6e 67 20 64 6f 6d 61 69 6e 73 20 28 61 6b 61 20 56 52 46 73 2c 20 56 52 46 2d 6c 69 74 65 | ding.domains.(aka.VRFs,.VRF-lite |
24940 | 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 63 29 20 69 6e 20 74 68 65 20 4c 69 6e 75 78 20 6e 65 | .to.be.specific).in.the.Linux.ne |
24960 | 74 77 6f 72 6b 20 73 74 61 63 6b 2e 20 4f 6e 65 20 75 73 65 20 63 61 73 65 20 69 73 20 74 68 65 | twork.stack..One.use.case.is.the |
24980 | 20 6d 75 6c 74 69 2d 74 65 6e 61 6e 63 79 20 70 72 6f 62 6c 65 6d 20 77 68 65 72 65 20 65 61 63 | .multi-tenancy.problem.where.eac |
249a0 | 68 20 74 65 6e 61 6e 74 20 68 61 73 20 74 68 65 69 72 20 6f 77 6e 20 75 6e 69 71 75 65 20 72 6f | h.tenant.has.their.own.unique.ro |
249c0 | 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 20 69 6e 20 74 68 65 20 76 65 72 79 20 6c 65 61 | uting.tables.and.in.the.very.lea |
249e0 | 73 74 20 6e 65 65 64 20 64 69 66 66 65 72 65 6e 74 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 | st.need.different.default.gatewa |
24a00 | 79 73 2e 00 3a 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 | ys..:abbr:`VXLAN.(Virtual.Extens |
24a20 | 69 62 6c 65 20 4c 41 4e 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 | ible.LAN)`.is.a.network.virtuali |
24a40 | 7a 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 61 74 74 65 6d 70 74 73 20 | zation.technology.that.attempts. |
24a60 | 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 70 72 6f 62 6c | to.address.the.scalability.probl |
24a80 | 65 6d 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6c 61 72 67 65 20 63 6c 6f 75 64 20 | ems.associated.with.large.cloud. |
24aa0 | 63 6f 6d 70 75 74 69 6e 67 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 20 49 74 20 75 73 65 73 20 61 | computing.deployments..It.uses.a |
24ac0 | 20 56 4c 41 4e 2d 6c 69 6b 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 65 63 68 6e 69 71 | .VLAN-like.encapsulation.techniq |
24ae0 | 75 65 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 4f 53 49 20 6c 61 79 65 72 20 32 20 45 74 | ue.to.encapsulate.OSI.layer.2.Et |
24b00 | 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 77 69 74 68 69 6e 20 6c 61 79 65 72 20 34 20 55 44 50 | hernet.frames.within.layer.4.UDP |
24b20 | 20 64 61 74 61 67 72 61 6d 73 2c 20 75 73 69 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 | .datagrams,.using.4789.as.the.de |
24b40 | 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | fault.IANA-assigned.destination. |
24b60 | 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 73 | UDP.port.number..VXLAN.endpoints |
24b80 | 2c 20 77 68 69 63 68 20 74 65 72 6d 69 6e 61 74 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 | ,.which.terminate.VXLAN.tunnels. |
24ba0 | 61 6e 64 20 6d 61 79 20 62 65 20 65 69 74 68 65 72 20 76 69 72 74 75 61 6c 20 6f 72 20 70 68 79 | and.may.be.either.virtual.or.phy |
24bc0 | 73 69 63 61 6c 20 73 77 69 74 63 68 20 70 6f 72 74 73 2c 20 61 72 65 20 6b 6e 6f 77 6e 20 61 73 | sical.switch.ports,.are.known.as |
24be0 | 20 3a 61 62 62 72 3a 60 56 54 45 50 73 20 28 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 65 6e 64 70 | .:abbr:`VTEPs.(VXLAN.tunnel.endp |
24c00 | 6f 69 6e 74 73 29 60 2e 00 3a 61 62 62 72 3a 60 57 41 50 20 28 57 69 72 65 6c 65 73 73 20 41 63 | oints)`..:abbr:`WAP.(Wireless.Ac |
24c20 | 63 65 73 73 2d 50 6f 69 6e 74 29 60 20 70 72 6f 76 69 64 65 73 20 6e 65 74 77 6f 72 6b 20 61 63 | cess-Point)`.provides.network.ac |
24c40 | 63 65 73 73 20 74 6f 20 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 69 6f 6e 73 20 69 66 20 74 | cess.to.connecting.stations.if.t |
24c60 | 68 65 20 70 68 79 73 69 63 61 6c 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 61 63 | he.physical.hardware.supports.ac |
24c80 | 74 69 6e 67 20 61 73 20 61 20 57 41 50 00 3a 61 62 62 72 3a 60 57 4c 41 4e 20 28 57 69 72 65 6c | ting.as.a.WAP.:abbr:`WLAN.(Wirel |
24ca0 | 65 73 73 20 4c 41 4e 29 60 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 20 38 30 32 2e | ess.LAN)`.interface.provide.802. |
24cc0 | 31 31 20 28 61 2f 62 2f 67 2f 6e 2f 61 63 29 20 77 69 72 65 6c 65 73 73 20 73 75 70 70 6f 72 74 | 11.(a/b/g/n/ac).wireless.support |
24ce0 | 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 29 | .(commonly.referred.to.as.Wi-Fi) |
24d00 | 20 62 79 20 6d 65 61 6e 73 20 6f 66 20 63 6f 6d 70 61 74 69 62 6c 65 20 68 61 72 64 77 61 72 65 | .by.means.of.compatible.hardware |
24d20 | 2e 20 49 66 20 79 6f 75 72 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2c 20 | ..If.your.hardware.supports.it,. |
24d40 | 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 6c 6f 67 69 63 61 6c 20 77 | VyOS.supports.multiple.logical.w |
24d60 | 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 | ireless.interfaces.per.physical. |
24d80 | 64 65 76 69 63 65 2e 00 3a 61 62 62 72 3a 60 57 50 41 20 28 57 69 2d 46 69 20 50 72 6f 74 65 63 | device..:abbr:`WPA.(Wi-Fi.Protec |
24da0 | 74 65 64 20 41 63 63 65 73 73 29 60 20 61 6e 64 20 57 50 41 32 20 45 6e 74 65 72 70 72 69 73 65 | ted.Access)`.and.WPA2.Enterprise |
24dc0 | 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 38 30 32 2e 31 78 20 62 61 73 65 | .in.combination.with.802.1x.base |
24de0 | 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 | d.authentication.can.be.used.to. |
24e00 | 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 6f 72 20 63 6f 6d 70 75 74 65 72 73 20 | authenticate.users.or.computers. |
24e20 | 69 6e 20 61 20 64 6f 6d 61 69 6e 2e 00 3a 61 62 62 72 3a 60 6d 47 52 45 20 28 4d 75 6c 74 69 70 | in.a.domain..:abbr:`mGRE.(Multip |
24e40 | 6f 69 6e 74 20 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 | oint.Generic.Routing.Encapsulati |
24e60 | 6f 6e 29 60 20 3a 72 66 63 3a 60 31 37 30 32 60 00 3a 63 66 67 63 6d 64 3a 60 61 64 76 2d 72 6f | on)`.:rfc:`1702`.:cfgcmd:`adv-ro |
24e80 | 75 74 65 72 20 3c 41 2e 42 2e 43 2e 44 3e 60 20 e2 80 93 20 72 6f 75 74 65 72 20 69 64 2c 20 77 | uter.<A.B.C.D>`.....router.id,.w |
24ea0 | 68 69 63 68 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 6e 65 65 64 20 74 6f | hich.link.advertisements.need.to |
24ec0 | 20 62 65 20 72 65 76 69 65 77 65 64 2e 00 3a 63 66 67 63 6d 64 3a 60 73 65 6c 66 2d 6f 72 69 67 | .be.reviewed..:cfgcmd:`self-orig |
24ee0 | 69 6e 61 74 65 60 20 64 69 73 70 6c 61 79 73 20 6f 6e 6c 79 20 73 65 6c 66 2d 6f 72 69 67 69 6e | inate`.displays.only.self-origin |
24f00 | 61 74 65 64 20 4c 53 41 73 20 66 72 6f 6d 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e | ated.LSAs.from.the.local.router. |
24f20 | 00 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 63 6f 6e 6e 74 72 61 63 6b 2d | .:cfgcmd:`set.service.conntrack- |
24f40 | 73 79 6e 63 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 20 70 65 65 72 20 31 39 32 2e 31 36 38 | sync.interface.eth0.peer.192.168 |
24f60 | 2e 30 2e 32 35 30 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 | .0.250`.:code:`set.service.webpr |
24f80 | 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 61 75 74 | oxy.url-filtering.squidguard.aut |
24fa0 | 6f 2d 75 70 64 61 74 65 20 75 70 64 61 74 65 2d 68 6f 75 72 20 32 33 60 00 3a 63 6f 64 65 3a 60 | o-update.update-hour.23`.:code:` |
24fc0 | 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 | set.service.webproxy.url-filteri |
24fe0 | 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 61 64 73 | ng.squidguard.block-category.ads |
25000 | 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 | `.:code:`set.service.webproxy.ur |
25020 | 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 | l-filtering.squidguard.block-cat |
25040 | 65 67 6f 72 79 20 6d 61 6c 77 61 72 65 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 | egory.malware`.:code:`set.servic |
25060 | 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e | e.webproxy.whitelist.destination |
25080 | 2d 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 60 00 3a 63 6f 64 65 3a 60 73 65 | -address.192.0.2.0/24`.:code:`se |
250a0 | 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 | t.service.webproxy.whitelist.des |
250c0 | 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 38 2e 35 31 2e 31 30 30 2e 33 33 60 00 | tination-address.198.51.100.33`. |
250e0 | 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 | :code:`set.service.webproxy.whit |
25100 | 65 6c 69 73 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 32 | elist.source-address.192.168.1.2 |
25120 | 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 | `.:code:`set.service.webproxy.wh |
25140 | 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 32 | itelist.source-address.192.168.2 |
25160 | 2e 30 2f 32 34 60 00 3a 6c 61 73 74 70 72 6f 6f 66 72 65 61 64 3a 32 30 32 31 2d 30 37 2d 31 32 | .0/24`.:lastproofread:2021-07-12 |
25180 | 00 3a 6f 70 63 6d 64 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 77 69 72 65 67 75 61 72 64 20 | .:opcmd:`generate.pki.wireguard. |
251a0 | 6b 65 79 2d 70 61 69 72 60 2e 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 00 3a 72 | key-pair`..:ref:`routing-bgp`.:r |
251c0 | 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 | ef:`routing-bgp`:.``set.vrf.name |
251e0 | 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 2e 2e 2e 60 60 00 3a 72 65 66 | .<name>.protocols.bgp....``.:ref |
25200 | 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 | :`routing-isis`.:ref:`routing-is |
25220 | 69 73 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f | is`:.``set.vrf.name.<name>.proto |
25240 | 63 6f 6c 73 20 69 73 69 73 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 | cols.isis....``.:ref:`routing-os |
25260 | 70 66 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 3a 20 60 60 73 65 74 20 76 | pf`.:ref:`routing-ospf`:.``set.v |
25280 | 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 2e 2e | rf.name.<name>.protocols.ospf... |
252a0 | 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 00 3a 72 65 66 3a 60 | .``.:ref:`routing-ospfv3`.:ref:` |
252c0 | 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 | routing-ospfv3`:.``set.vrf.name. |
252e0 | 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 76 33 20 2e 2e 2e 60 60 00 3a 72 | <name>.protocols.ospfv3....``.:r |
25300 | 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e | ef:`routing-static`.:ref:`routin |
25320 | 67 2d 73 74 61 74 69 63 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e | g-static`:.``set.vrf.name.<name> |
25340 | 20 70 72 6f 74 6f 63 6f 6c 73 20 73 74 61 74 69 63 20 2e 2e 2e 60 60 00 3a 72 66 63 3a 60 32 31 | .protocols.static....``.:rfc:`21 |
25360 | 33 31 60 20 73 74 61 74 65 73 3a 20 54 68 65 20 63 6c 69 65 6e 74 20 4d 41 59 20 63 68 6f 6f 73 | 31`.states:.The.client.MAY.choos |
25380 | 65 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 20 70 72 6f 76 69 64 65 20 74 68 65 20 69 64 65 6e | e.to.explicitly.provide.the.iden |
253a0 | 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 | tifier.through.the.'client.ident |
253c0 | 69 66 69 65 72 27 20 6f 70 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 63 6c 69 65 6e 74 20 73 75 70 | ifier'.option..If.the.client.sup |
253e0 | 70 6c 69 65 73 20 61 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 2c 20 74 68 65 | plies.a.'client.identifier',.the |
25400 | 20 63 6c 69 65 6e 74 20 4d 55 53 54 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 27 63 6c 69 65 6e | .client.MUST.use.the.same.'clien |
25420 | 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 69 6e 20 61 6c 6c 20 73 75 62 73 65 71 75 65 6e 74 20 | t.identifier'.in.all.subsequent. |
25440 | 6d 65 73 73 61 67 65 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 20 4d 55 53 54 20 75 73 | messages,.and.the.server.MUST.us |
25460 | 65 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 | e.that.identifier.to.identify.th |
25480 | 65 20 63 6c 69 65 6e 74 2e 00 3a 72 66 63 3a 60 32 31 33 36 60 20 42 61 73 65 64 00 3a 72 66 63 | e.client..:rfc:`2136`.Based.:rfc |
254a0 | 3a 60 32 33 32 38 60 2c 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 74 6f 20 3a 72 66 63 3a 60 | :`2328`,.the.successor.to.:rfc:` |
254c0 | 31 35 38 33 60 2c 20 73 75 67 67 65 73 74 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 73 65 63 | 1583`,.suggests.according.to.sec |
254e0 | 74 69 6f 6e 20 47 2e 32 20 28 63 68 61 6e 67 65 73 29 20 69 6e 20 73 65 63 74 69 6f 6e 20 31 36 | tion.G.2.(changes).in.section.16 |
25500 | 2e 34 2e 31 20 61 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 70 61 74 68 20 70 72 65 66 65 72 | .4.1.a.change.to.the.path.prefer |
25520 | 65 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 70 72 65 76 65 6e 74 73 20 70 6f 73 | ence.algorithm.that.prevents.pos |
25540 | 73 69 62 6c 65 20 72 6f 75 74 69 6e 67 20 6c 6f 6f 70 73 20 74 68 61 74 20 77 65 72 65 20 70 6f | sible.routing.loops.that.were.po |
25560 | 73 73 69 62 6c 65 20 69 6e 20 74 68 65 20 6f 6c 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4f 53 50 | ssible.in.the.old.version.of.OSP |
25580 | 46 76 32 2e 20 4d 6f 72 65 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 69 74 20 64 65 6d 61 6e 64 | Fv2..More.specifically.it.demand |
255a0 | 73 20 74 68 61 74 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 73 20 61 6e 64 20 69 6e 74 72 | s.that.inter-area.paths.and.intr |
255c0 | 61 2d 61 72 65 61 20 62 61 63 6b 62 6f 6e 65 20 70 61 74 68 20 61 72 65 20 6e 6f 77 20 6f 66 20 | a-area.backbone.path.are.now.of. |
255e0 | 65 71 75 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 62 75 74 20 73 74 69 6c 6c 20 62 6f 74 68 20 | equal.preference.but.still.both. |
25600 | 70 72 65 66 65 72 72 65 64 20 74 6f 20 65 78 74 65 72 6e 61 6c 20 70 61 74 68 73 2e 00 3a 76 79 | preferred.to.external.paths..:vy |
25620 | 74 61 73 6b 3a 60 54 33 36 34 32 60 20 64 65 73 63 72 69 62 65 73 20 61 20 6e 65 77 20 43 4c 49 | task:`T3642`.describes.a.new.CLI |
25640 | 20 73 75 62 73 79 73 74 65 6d 20 74 68 61 74 20 73 65 72 76 65 73 20 61 73 20 61 20 22 63 65 72 | .subsystem.that.serves.as.a."cer |
25660 | 74 73 74 6f 72 65 22 20 74 6f 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 72 65 71 75 69 72 69 6e | tstore".to.all.services.requirin |
25680 | 67 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 6b 65 79 28 73 29 2e | g.any.kind.of.encryption.key(s). |
256a0 | 20 49 6e 20 73 68 6f 72 74 2c 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 63 65 | .In.short,.public.and.private.ce |
256c0 | 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 77 20 73 74 6f 72 65 64 20 69 6e 20 50 4b 43 | rtificates.are.now.stored.in.PKC |
256e0 | 53 23 38 20 66 6f 72 6d 61 74 20 69 6e 20 74 68 65 20 72 65 67 75 6c 61 72 20 56 79 4f 53 20 43 | S#8.format.in.the.regular.VyOS.C |
25700 | 4c 49 2e 20 4b 65 79 73 20 63 61 6e 20 6e 6f 77 20 62 65 20 61 64 64 65 64 2c 20 65 64 69 74 65 | LI..Keys.can.now.be.added,.edite |
25720 | 64 2c 20 61 6e 64 20 64 65 6c 65 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 | d,.and.deleted.using.the.regular |
25740 | 20 73 65 74 2f 65 64 69 74 2f 64 65 6c 65 74 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 2e 00 3c | .set/edit/delete.CLI.commands..< |
25760 | 31 2d 36 35 35 33 35 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 2e 00 3c 61 61 3a 6e 6e 3a | 1-65535>:.Numbered.port..<aa:nn: |
25780 | 6e 6e 3e 3a 20 45 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 20 72 65 67 | nn>:.Extended.community.list.reg |
257a0 | 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a | ular.expression..<h:h:h:h:h:h:h: |
257c0 | 68 2f 78 3e 3a 20 49 50 76 36 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 | h/x>:.IPv6.prefix.to.match..<h:h |
257e0 | 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a | :h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: |
25800 | 20 49 50 76 36 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 | .IPv6.range.to.match..<h:h:h:h:h |
25820 | 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 | :h:h:h>:.IPv6.address.to.match.. |
25840 | 3c 6c 69 6e 65 73 3e 00 3c 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 66 72 6f 6d 20 33 34 | <lines>.<number>.must.be.from.34 |
25860 | 20 2d 20 31 37 33 2e 20 46 6f 72 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 69 74 20 73 | .-.173..For.80.MHz.channels.it.s |
25880 | 68 6f 75 6c 64 20 62 65 20 63 68 61 6e 6e 65 6c 20 2b 20 36 2e 00 3c 6e 75 6d 62 65 72 3e 20 e2 | hould.be.channel.+.6..<number>.. |
258a0 | 80 93 20 61 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 | ...area.identifier.through.which |
258c0 | 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 67 6f 65 73 2e 20 3c 41 2e 42 2e 43 2e 44 3e 20 | .a.virtual.link.goes..<A.B.C.D>. |
258e0 | e2 80 93 20 41 42 52 20 72 6f 75 74 65 72 2d 69 64 20 77 69 74 68 20 77 68 69 63 68 20 61 20 76 | ....ABR.router-id.with.which.a.v |
25900 | 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 2e 20 56 69 72 74 | irtual.link.is.established..Virt |
25920 | 75 61 6c 20 6c 69 6e 6b 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 62 | ual.link.must.be.configured.on.b |
25940 | 6f 74 68 20 72 6f 75 74 65 72 73 2e 00 3c 70 6f 72 74 20 6e 61 6d 65 3e 3a 20 4e 61 6d 65 64 20 | oth.routers..<port.name>:.Named. |
25960 | 70 6f 72 74 20 28 61 6e 79 20 6e 61 6d 65 20 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2c | port.(any.name.in./etc/services, |
25980 | 20 65 2e 67 2e 2c 20 68 74 74 70 29 2e 00 3c 72 74 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 52 6f 75 | .e.g.,.http)..<rt.aa:nn:nn>:.Rou |
259a0 | 74 65 20 54 61 72 67 65 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 | te.Target.regular.expression..<s |
259c0 | 6f 6f 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 53 69 74 65 20 6f 66 20 4f 72 69 67 69 6e 20 72 65 67 | oo.aa:nn:nn>:.Site.of.Origin.reg |
259e0 | 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 74 61 72 74 3e 2d 3c 65 6e 64 3e 3a 20 | ular.expression..<start>-<end>:. |
25a00 | 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 20 72 61 6e 67 65 20 28 65 2e 67 2e 2c 20 31 30 30 31 2d | Numbered.port.range.(e.g.,.1001- |
25a20 | 31 30 30 35 29 2e 00 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 53 75 62 6e 65 74 20 74 6f 20 6d 61 | 1005)..<x.x.x.x/x>:.Subnet.to.ma |
25a40 | 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 72 61 6e | tch..<x.x.x.x>-<x.x.x.x>:.IP.ran |
25a60 | 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 61 64 64 72 65 | ge.to.match..<x.x.x.x>:.IP.addre |
25a80 | 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 41 20 2a 2a 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2a 2a 20 | ss.to.match..A.**domain.group**. |
25aa0 | 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 64 6f 6d 61 69 | represents.a.collection.of.domai |
25ac0 | 6e 73 2e 00 41 20 2a 2a 6d 61 63 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 | ns..A.**mac.group**.represents.a |
25ae0 | 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2e 00 41 20 | .collection.of.mac.addresses..A. |
25b00 | 2a 2a 70 6f 72 74 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 6f 6e 6c 79 20 70 | **port.group**.represents.only.p |
25b20 | 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 6e 6f 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 50 | ort.numbers,.not.the.protocol..P |
25b40 | 6f 72 74 20 67 72 6f 75 70 73 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 66 6f 72 | ort.groups.can.be.referenced.for |
25b60 | 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d | .either.TCP.or.UDP..It.is.recomm |
25b80 | 65 6e 64 65 64 20 74 68 61 74 20 54 43 50 20 61 6e 64 20 55 44 50 20 67 72 6f 75 70 73 20 61 72 | ended.that.TCP.and.UDP.groups.ar |
25ba0 | 65 20 63 72 65 61 74 65 64 20 73 65 70 61 72 61 74 65 6c 79 20 74 6f 20 61 76 6f 69 64 20 61 63 | e.created.separately.to.avoid.ac |
25bc0 | 63 69 64 65 6e 74 61 6c 6c 79 20 66 69 6c 74 65 72 69 6e 67 20 75 6e 6e 65 63 65 73 73 61 72 79 | cidentally.filtering.unnecessary |
25be0 | 20 70 6f 72 74 73 2e 20 52 61 6e 67 65 73 20 6f 66 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 | .ports..Ranges.of.ports.can.be.s |
25c00 | 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 6e 67 20 60 2d 60 2e 00 41 20 2a 62 69 74 2a 20 69 | pecified.by.using.`-`..A.*bit*.i |
25c20 | 73 20 77 72 69 74 74 65 6e 20 61 73 20 2a 2a 62 69 74 2a 2a 2c 00 41 20 3a 61 62 62 72 3a 60 4e | s.written.as.**bit**,.A.:abbr:`N |
25c40 | 49 53 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 29 | IS.(Network.Information.Service) |
25c60 | 60 20 64 6f 6d 61 69 6e 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 62 65 20 75 73 65 64 20 66 | `.domain.can.be.set.to.be.used.f |
25c80 | 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 42 47 50 20 63 6f 6e 66 65 64 65 | or.DHCPv6.clients..A.BGP.confede |
25ca0 | 72 61 74 69 6f 6e 20 64 69 76 69 64 65 73 20 6f 75 72 20 41 53 20 69 6e 74 6f 20 73 75 62 2d 41 | ration.divides.our.AS.into.sub-A |
25cc0 | 53 65 73 20 74 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 71 75 | Ses.to.reduce.the.number.of.requ |
25ce0 | 69 72 65 64 20 49 42 47 50 20 70 65 65 72 69 6e 67 73 2e 20 57 69 74 68 69 6e 20 61 20 73 75 62 | ired.IBGP.peerings..Within.a.sub |
25d00 | 2d 41 53 20 77 65 20 73 74 69 6c 6c 20 72 65 71 75 69 72 65 20 66 75 6c 6c 2d 6d 65 73 68 20 49 | -AS.we.still.require.full-mesh.I |
25d20 | 42 47 50 20 62 75 74 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 73 75 62 2d 41 53 65 73 20 77 | BGP.but.between.these.sub-ASes.w |
25d40 | 65 20 75 73 65 20 73 6f 6d 65 74 68 69 6e 67 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 | e.use.something.that.looks.like. |
25d60 | 45 42 47 50 20 62 75 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 49 42 47 50 20 28 63 61 6c 6c | EBGP.but.behaves.like.IBGP.(call |
25d80 | 65 64 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 42 47 50 29 2e 20 43 6f 6e 66 65 64 65 72 61 | ed.confederation.BGP)..Confedera |
25da0 | 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a | tion.mechanism.is.described.in.: |
25dc0 | 72 66 63 3a 60 35 30 36 35 60 00 41 20 42 47 50 2d 73 70 65 61 6b 69 6e 67 20 72 6f 75 74 65 72 | rfc:`5065`.A.BGP-speaking.router |
25de0 | 20 6c 69 6b 65 20 56 79 4f 53 20 63 61 6e 20 72 65 74 72 69 65 76 65 20 52 4f 41 20 69 6e 66 6f | .like.VyOS.can.retrieve.ROA.info |
25e00 | 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 52 50 4b 49 20 22 52 65 6c 79 69 6e 67 20 50 61 72 74 79 | rmation.from.RPKI."Relying.Party |
25e20 | 20 73 6f 66 74 77 61 72 65 22 20 28 6f 66 74 65 6e 20 6a 75 73 74 20 63 61 6c 6c 65 64 20 61 6e | .software".(often.just.called.an |
25e40 | 20 22 52 50 4b 49 20 73 65 72 76 65 72 22 20 6f 72 20 22 52 50 4b 49 20 76 61 6c 69 64 61 74 6f | ."RPKI.server".or."RPKI.validato |
25e60 | 72 22 29 20 62 79 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 54 52 20 28 52 50 4b 49 20 74 6f | r").by.using.:abbr:`RTR.(RPKI.to |
25e80 | 20 52 6f 75 74 65 72 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 | .Router)`.protocol..There.are.se |
25ea0 | 76 65 72 61 6c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e | veral.open.source.implementation |
25ec0 | 73 20 74 6f 20 63 68 6f 6f 73 65 20 66 72 6f 6d 2c 20 73 75 63 68 20 61 73 20 4e 4c 4e 65 74 4c | s.to.choose.from,.such.as.NLNetL |
25ee0 | 61 62 73 27 20 52 6f 75 74 69 6e 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 52 75 73 | abs'.Routinator_.(written.in.Rus |
25f00 | 74 29 2c 20 43 6c 6f 75 64 66 6c 61 72 65 27 73 20 47 6f 52 54 52 5f 20 61 6e 64 20 4f 63 74 6f | t),.Cloudflare's.GoRTR_.and.Octo |
25f20 | 52 50 4b 49 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 47 6f 29 2c 20 61 6e 64 20 52 49 50 45 20 | RPKI_.(written.in.Go),.and.RIPE. |
25f40 | 4e 43 43 27 73 20 52 50 4b 49 20 56 61 6c 69 64 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 | NCC's.RPKI.Validator_.(written.i |
25f60 | 6e 20 4a 61 76 61 29 2e 20 54 68 65 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 64 65 73 | n.Java)..The.RTR.protocol.is.des |
25f80 | 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 32 31 30 60 2e 00 41 20 42 72 69 64 67 65 20 | cribed.in.:rfc:`8210`..A.Bridge. |
25fa0 | 69 73 20 61 20 77 61 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 77 6f 20 45 74 68 65 72 6e 65 74 | is.a.way.to.connect.two.Ethernet |
25fc0 | 20 73 65 67 6d 65 6e 74 73 20 74 6f 67 65 74 68 65 72 20 69 6e 20 61 20 70 72 6f 74 6f 63 6f 6c | .segments.together.in.a.protocol |
25fe0 | 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 77 61 79 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 66 6f | .independent.way..Packets.are.fo |
26000 | 72 77 61 72 64 65 64 20 62 61 73 65 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 61 64 64 72 65 73 | rwarded.based.on.Ethernet.addres |
26020 | 73 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 28 6c 69 6b 65 20 | s,.rather.than.IP.address.(like. |
26040 | 61 20 72 6f 75 74 65 72 29 2e 20 53 69 6e 63 65 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 64 | a.router)..Since.forwarding.is.d |
26060 | 6f 6e 65 20 61 74 20 4c 61 79 65 72 20 32 2c 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 | one.at.Layer.2,.all.protocols.ca |
26080 | 6e 20 67 6f 20 74 72 61 6e 73 70 61 72 65 6e 74 6c 79 20 74 68 72 6f 75 67 68 20 61 20 62 72 69 | n.go.transparently.through.a.bri |
260a0 | 64 67 65 2e 20 54 68 65 20 4c 69 6e 75 78 20 62 72 69 64 67 65 20 63 6f 64 65 20 69 6d 70 6c 65 | dge..The.Linux.bridge.code.imple |
260c0 | 6d 65 6e 74 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 74 68 65 20 41 4e 53 49 2f 49 45 45 45 20 | ments.a.subset.of.the.ANSI/IEEE. |
260e0 | 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 2e 00 41 20 47 52 45 20 74 75 6e 6e 65 6c 20 6f 70 | 802.1d.standard..A.GRE.tunnel.op |
26100 | 65 72 61 74 65 73 20 61 74 20 6c 61 79 65 72 20 33 20 6f 66 20 74 68 65 20 4f 53 49 20 6d 6f 64 | erates.at.layer.3.of.the.OSI.mod |
26120 | 65 6c 20 61 6e 64 20 69 73 20 72 65 70 72 65 73 65 6e 74 65 64 20 62 79 20 49 50 20 70 72 6f 74 | el.and.is.represented.by.IP.prot |
26140 | 6f 63 6f 6c 20 34 37 2e 20 54 68 65 20 6d 61 69 6e 20 62 65 6e 65 66 69 74 20 6f 66 20 61 20 47 | ocol.47..The.main.benefit.of.a.G |
26160 | 52 45 20 74 75 6e 6e 65 6c 20 69 73 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 | RE.tunnel.is.that.you.are.able.t |
26180 | 6f 20 63 61 72 72 79 20 6d 75 6c 74 69 70 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 73 69 64 | o.carry.multiple.protocols.insid |
261a0 | 65 20 74 68 65 20 73 61 6d 65 20 74 75 6e 6e 65 6c 2e 20 47 52 45 20 61 6c 73 6f 20 73 75 70 70 | e.the.same.tunnel..GRE.also.supp |
261c0 | 6f 72 74 73 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 75 70 70 6f | orts.multicast.traffic.and.suppo |
261e0 | 72 74 73 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 6c 65 76 65 72 | rts.routing.protocols.that.lever |
26200 | 61 67 65 20 6d 75 6c 74 69 63 61 73 74 20 74 6f 20 66 6f 72 6d 20 6e 65 69 67 68 62 6f 72 20 61 | age.multicast.to.form.neighbor.a |
26220 | 64 6a 61 63 65 6e 63 69 65 73 2e 00 41 20 52 75 6c 65 2d 53 65 74 20 63 61 6e 20 62 65 20 61 70 | djacencies..A.Rule-Set.can.be.ap |
26240 | 70 6c 69 65 64 20 74 6f 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 3a 00 41 20 53 4e 54 50 | plied.to.every.interface:.A.SNTP |
26260 | 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 | .server.address.can.be.specified |
26280 | 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 56 52 46 20 64 65 76 69 63 | .for.DHCPv6.clients..A.VRF.devic |
262a0 | 65 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 | e.is.created.with.an.associated. |
262c0 | 72 6f 75 74 65 20 74 61 62 6c 65 2e 20 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 | route.table..Network.interfaces. |
262e0 | 61 72 65 20 74 68 65 6e 20 65 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 20 64 65 76 69 63 | are.then.enslaved.to.a.VRF.devic |
26300 | 65 2e 00 41 20 56 79 4f 53 20 47 52 45 20 74 75 6e 6e 65 6c 20 63 61 6e 20 63 61 72 72 79 20 62 | e..A.VyOS.GRE.tunnel.can.carry.b |
26320 | 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 61 | oth.IPv4.and.IPv6.traffic.and.ca |
26340 | 6e 20 61 6c 73 6f 20 62 65 20 63 72 65 61 74 65 64 20 6f 76 65 72 20 65 69 74 68 65 72 20 49 50 | n.also.be.created.over.either.IP |
26360 | 76 34 20 28 67 72 65 29 20 6f 72 20 49 50 76 36 20 28 69 70 36 67 72 65 29 2e 00 41 20 56 79 4f | v4.(gre).or.IPv6.(ip6gre)..A.VyO |
26380 | 53 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 2d 20 65 | S.router.with.two.interfaces.-.e |
263a0 | 74 68 30 20 28 57 41 4e 29 20 61 6e 64 20 65 74 68 31 20 28 4c 41 4e 29 20 2d 20 69 73 20 72 65 | th0.(WAN).and.eth1.(LAN).-.is.re |
263c0 | 71 75 69 72 65 64 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 61 20 73 70 6c 69 74 2d 68 6f 72 69 | quired.to.implement.a.split-hori |
263e0 | 7a 6f 6e 20 44 4e 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 65 78 61 6d 70 6c | zon.DNS.configuration.for.exampl |
26400 | 65 2e 63 6f 6d 2e 00 41 20 62 61 73 69 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 | e.com..A.basic.configuration.req |
26420 | 75 69 72 65 73 20 61 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 20 28 73 6f 75 72 63 65 2d 61 64 | uires.a.tunnel.source.(source-ad |
26440 | 64 72 65 73 73 29 2c 20 61 20 74 75 6e 6e 65 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 72 65 | dress),.a.tunnel.destination.(re |
26460 | 6d 6f 74 65 29 2c 20 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 28 67 72 | mote),.an.encapsulation.type.(gr |
26480 | 65 29 2c 20 61 6e 64 20 61 6e 20 61 64 64 72 65 73 73 20 28 69 70 76 34 2f 69 70 76 36 29 2e 20 | e),.and.an.address.(ipv4/ipv6).. |
264a0 | 42 65 6c 6f 77 20 69 73 20 61 20 62 61 73 69 63 20 49 50 76 34 20 6f 6e 6c 79 20 63 6f 6e 66 69 | Below.is.a.basic.IPv4.only.confi |
264c0 | 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 61 20 56 79 | guration.example.taken.from.a.Vy |
264e0 | 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 | OS.router.and.a.Cisco.IOS.router |
26500 | 2e 20 54 68 65 20 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 68 | ..The.main.difference.between.th |
26520 | 65 73 65 20 74 77 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 69 73 20 74 68 61 74 20 56 | ese.two.configurations.is.that.V |
26540 | 79 4f 53 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6f 6e 66 | yOS.requires.you.explicitly.conf |
26560 | 69 67 75 72 65 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 2e 20 54 68 | igure.the.encapsulation.type..Th |
26580 | 65 20 43 69 73 63 6f 20 72 6f 75 74 65 72 20 64 65 66 61 75 6c 74 73 20 74 6f 20 47 52 45 20 49 | e.Cisco.router.defaults.to.GRE.I |
265a0 | 50 20 6f 74 68 65 72 77 69 73 65 20 69 74 20 77 6f 75 6c 64 20 68 61 76 65 20 74 6f 20 62 65 20 | P.otherwise.it.would.have.to.be. |
265c0 | 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 77 65 6c 6c 2e 00 41 20 62 61 73 69 63 20 69 6e 74 72 | configured.as.well..A.basic.intr |
265e0 | 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 | oduction.to.zone-based.firewalls |
26600 | 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 | .can.be.found.`here.<https://sup |
26620 | 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 | port.vyos.io/en/kb/articles/a-pr |
26640 | 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 | imer-to-zone-based-firewall>`_,. |
26660 | 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 | and.an.example.at.:ref:`examples |
26680 | 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 41 20 62 72 69 64 67 65 20 6e 61 6d 65 64 20 60 62 | -zone-policy`..A.bridge.named.`b |
266a0 | 72 31 30 30 60 00 41 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 | r100`.A.brief.description.what.t |
266c0 | 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 61 6c 6c 20 61 62 6f 75 74 2e 00 41 20 63 6c 61 73 | his.network.is.all.about..A.clas |
266e0 | 73 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 6d 61 74 63 68 20 66 69 6c 74 65 72 | s.can.have.multiple.match.filter |
26700 | 73 3a 00 41 20 63 6f 6d 6d 6f 6e 20 65 78 61 6d 70 6c 65 20 69 73 20 74 68 65 20 63 61 73 65 20 | s:.A.common.example.is.the.case. |
26720 | 6f 66 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 77 68 69 63 68 2c 20 69 6e 20 6f 72 64 65 72 | of.some.policies.which,.in.order |
26740 | 20 74 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 2c 20 74 68 65 79 20 6e 65 65 64 20 74 6f 20 62 | .to.be.effective,.they.need.to.b |
26760 | 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 | e.applied.to.an.interface.that.i |
26780 | 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 77 68 65 72 65 20 74 68 65 20 62 | s.directly.connected.where.the.b |
267a0 | 6f 74 74 6c 65 6e 65 63 6b 20 69 73 2e 20 49 66 20 79 6f 75 72 20 72 6f 75 74 65 72 20 69 73 20 | ottleneck.is..If.your.router.is. |
267c0 | 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 62 6f | not.directly.connected.to.the.bo |
267e0 | 74 74 6c 65 6e 65 63 6b 2c 20 62 75 74 20 73 6f 6d 65 20 68 6f 70 20 62 65 66 6f 72 65 20 69 74 | ttleneck,.but.some.hop.before.it |
26800 | 2c 20 79 6f 75 20 63 61 6e 20 65 6d 75 6c 61 74 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b | ,.you.can.emulate.the.bottleneck |
26820 | 20 62 79 20 65 6d 62 65 64 64 69 6e 67 20 79 6f 75 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 | .by.embedding.your.non-shaping.p |
26840 | 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 6f 6e | olicy.into.a.classful.shaping.on |
26860 | 65 20 73 6f 20 74 68 61 74 20 69 74 20 74 61 6b 65 73 20 65 66 66 65 63 74 2e 00 41 20 63 6f 6d | e.so.that.it.takes.effect..A.com |
26880 | 70 6c 65 74 65 20 4c 44 41 50 20 61 75 74 68 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 | plete.LDAP.auth.OpenVPN.configur |
268a0 | 61 74 69 6f 6e 20 63 6f 75 6c 64 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 65 20 66 6f 6c 6c 6f 77 | ation.could.look.like.the.follow |
268c0 | 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 | ing.example:.A.configuration.exa |
268e0 | 6d 70 6c 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f | mple.can.be.found.in.this.sectio |
26900 | 6e 2e 20 49 6e 20 74 68 69 73 20 73 69 6d 70 6c 69 66 69 65 64 20 73 63 65 6e 61 72 69 6f 2c 20 | n..In.this.simplified.scenario,. |
26920 | 6d 61 69 6e 20 74 68 69 6e 67 73 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 72 65 | main.things.to.be.considered.are |
26940 | 3a 00 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 20 77 69 6c 6c 20 62 65 20 73 | :.A.connection.attempt.will.be.s |
26960 | 68 6f 77 6e 20 61 73 3a 00 41 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 73 20 61 75 74 6f | hown.as:.A.default.route.is.auto |
26980 | 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 63 65 20 74 68 65 20 69 6e 74 | matically.installed.once.the.int |
269a0 | 65 72 66 61 63 65 20 69 73 20 75 70 2e 20 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 62 65 68 | erface.is.up..To.change.this.beh |
269c0 | 61 76 69 6f 72 20 75 73 65 20 74 68 65 20 60 60 6e 6f 2d 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 | avior.use.the.``no-default-route |
269e0 | 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 41 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e | ``.CLI.option..A.description.can |
26a00 | 20 62 65 20 61 64 64 65 64 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 75 6e 69 | .be.added.for.each.and.every.uni |
26a20 | 71 75 65 20 72 65 6c 61 79 20 49 44 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 | que.relay.ID..This.is.useful.to. |
26a40 | 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 6d 75 6c 74 69 70 6c 65 20 64 69 66 | distinguish.between.multiple.dif |
26a60 | 66 65 72 65 6e 74 20 70 6f 72 74 73 2f 61 70 70 6c 69 61 63 74 69 6f 6e 73 2e 00 41 20 64 69 73 | ferent.ports/appliactions..A.dis |
26a80 | 61 62 6c 65 64 20 67 72 6f 75 70 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d | abled.group.will.be.removed.from |
26aa0 | 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 61 6e 64 20 79 6f 75 72 20 72 6f 75 74 65 | .the.VRRP.process.and.your.route |
26ac0 | 72 20 77 69 6c 6c 20 6e 6f 74 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 56 52 52 50 20 66 | r.will.not.participate.in.VRRP.f |
26ae0 | 6f 72 20 74 68 61 74 20 56 52 49 44 2e 20 49 74 20 77 69 6c 6c 20 64 69 73 61 70 70 65 61 72 20 | or.that.VRID..It.will.disappear. |
26b00 | 66 72 6f 6d 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 6f | from.operational.mode.commands.o |
26b20 | 75 74 70 75 74 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 65 6e 74 65 72 20 74 68 65 20 62 61 63 | utput,.rather.than.enter.the.bac |
26b40 | 6b 75 70 20 73 74 61 74 65 2e 00 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 73 20 74 68 65 20 | kup.state..A.domain.name.is.the. |
26b60 | 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 63 6f 6d 70 75 | label.(name).assigned.to.a.compu |
26b80 | 74 65 72 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 69 73 20 74 68 75 73 20 75 6e 69 71 75 65 2e 20 | ter.network.and.is.thus.unique.. |
26ba0 | 56 79 4f 53 20 61 70 70 65 6e 64 73 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 | VyOS.appends.the.domain.name.as. |
26bc0 | 61 20 73 75 66 66 69 78 20 74 6f 20 61 6e 79 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 | a.suffix.to.any.unqualified.name |
26be0 | 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 79 6f 75 20 73 65 74 20 74 68 65 20 64 6f | ..For.example,.if.you.set.the.do |
26c00 | 6d 61 69 6e 20 6e 61 6d 65 20 60 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2c 20 61 6e 64 20 79 6f 75 | main.name.`example.com`,.and.you |
26c20 | 20 77 6f 75 6c 64 20 70 69 6e 67 20 74 68 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 | .would.ping.the.unqualified.name |
26c40 | 20 6f 66 20 60 63 72 75 78 60 2c 20 74 68 65 6e 20 56 79 4f 53 20 71 75 61 6c 69 66 69 65 73 20 | .of.`crux`,.then.VyOS.qualifies. |
26c60 | 74 68 65 20 6e 61 6d 65 20 74 6f 20 60 63 72 75 78 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2e 00 | the.name.to.`crux.example.com`.. |
26c80 | 41 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 70 72 6f 76 69 64 | A.dummy.interface.for.the.provid |
26ca0 | 65 72 2d 61 73 73 69 67 6e 65 64 20 49 50 3b 00 41 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 | er-assigned.IP;.A.firewall.mark. |
26cc0 | 60 60 66 77 6d 61 72 6b 60 60 20 61 6c 6c 6f 77 73 20 75 73 69 6e 67 20 6d 75 6c 74 69 70 6c 65 | ``fwmark``.allows.using.multiple |
26ce0 | 20 70 6f 72 74 73 20 66 6f 72 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 69 72 | .ports.for.high-availability.vir |
26d00 | 74 75 61 6c 2d 73 65 72 76 65 72 2e 20 49 74 20 75 73 65 73 20 66 77 6d 61 72 6b 20 76 61 6c 75 | tual-server..It.uses.fwmark.valu |
26d20 | 65 2e 00 41 20 66 75 6c 6c 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 54 75 6e 6e 65 6c 62 72 6f | e..A.full.example.of.a.Tunnelbro |
26d40 | 6b 65 72 2e 6e 65 74 20 63 6f 6e 66 69 67 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 3a | ker.net.config.can.be.found.at.: |
26d60 | 72 65 66 3a 60 68 65 72 65 20 3c 65 78 61 6d 70 6c 65 73 2d 74 75 6e 6e 65 6c 62 72 6f 6b 65 72 | ref:`here.<examples-tunnelbroker |
26d80 | 2d 69 70 76 36 3e 60 2e 00 41 20 67 65 6e 65 72 69 63 20 60 3c 6e 61 6d 65 3e 60 20 72 65 66 65 | -ipv6>`..A.generic.`<name>`.refe |
26da0 | 72 65 6e 63 69 6e 67 20 74 68 69 73 20 73 79 6e 63 20 73 65 72 76 69 63 65 2e 00 41 20 68 6f 73 | rencing.this.sync.service..A.hos |
26dc0 | 74 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e | tname.is.the.label.(name).assign |
26de0 | 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 28 61 20 68 6f 73 74 29 20 | ed.to.a.network.device.(a.host). |
26e00 | 6f 6e 20 61 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 73 74 | on.a.network.and.is.used.to.dist |
26e20 | 69 6e 67 75 69 73 68 20 6f 6e 65 20 64 65 76 69 63 65 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 20 | inguish.one.device.from.another. |
26e40 | 6f 6e 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 73 20 6f 72 20 6f 76 65 72 20 74 68 65 | on.specific.networks.or.over.the |
26e60 | 20 69 6e 74 65 72 6e 65 74 2e 20 4f 6e 20 74 68 65 20 6f 74 68 65 72 20 68 61 6e 64 20 74 68 69 | .internet..On.the.other.hand.thi |
26e80 | 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 61 6d 65 20 77 68 69 63 68 20 61 70 70 65 61 72 73 | s.will.be.the.name.which.appears |
26ea0 | 20 6f 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 70 72 6f 6d 70 74 2e 00 41 20 68 | .on.the.command.line.prompt..A.h |
26ec0 | 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 | uman.readable.description.what.t |
26ee0 | 68 69 73 20 43 41 20 69 73 20 61 62 6f 75 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c | his.CA.is.about..A.human.readabl |
26f00 | 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 63 65 72 74 69 66 69 63 | e.description.what.this.certific |
26f20 | 61 74 65 20 69 73 20 61 62 6f 75 74 2e 00 41 20 6c 6f 6f 6b 62 61 63 6b 20 69 6e 74 65 72 66 61 | ate.is.about..A.lookback.interfa |
26f40 | 63 65 20 69 73 20 61 6c 77 61 79 73 20 75 70 2c 20 74 68 75 73 20 69 74 20 63 6f 75 6c 64 20 62 | ce.is.always.up,.thus.it.could.b |
26f60 | 65 20 75 73 65 64 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 72 61 66 66 69 63 20 6f 72 | e.used.for.management.traffic.or |
26f80 | 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 61 6e 64 20 3a | .as.source/destination.for.and.: |
26fa0 | 61 62 62 72 3a 60 49 47 50 20 28 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 | abbr:`IGP.(Interior.Gateway.Prot |
26fc0 | 6f 63 6f 6c 29 60 20 6c 69 6b 65 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 20 73 | ocol)`.like.:ref:`routing-bgp`.s |
26fe0 | 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 | o.your.internal.BGP.link.is.not. |
27000 | 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 | dependent.on.physical.link.state |
27020 | 73 20 61 6e 64 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 68 6f | s.and.multiple.routes.can.be.cho |
27040 | 73 65 6e 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 41 20 3a 72 65 66 3a 60 | sen.to.the.destination..A.:ref:` |
27060 | 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 60 20 49 6e 74 65 72 66 61 63 65 20 73 68 6f 75 6c | dummy-interface`.Interface.shoul |
27080 | 64 20 61 6c 77 61 79 73 20 62 65 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 20 3a 72 65 | d.always.be.preferred.over.a.:re |
270a0 | 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 | f:`loopback-interface`.interface |
270c0 | 2e 00 41 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 | ..A.managed.device.is.a.network. |
270e0 | 6e 6f 64 65 20 74 68 61 74 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 6e 20 53 4e 4d 50 20 69 6e 74 | node.that.implements.an.SNMP.int |
27100 | 65 72 66 61 63 65 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 | erface.that.allows.unidirectiona |
27120 | 6c 20 28 72 65 61 64 2d 6f 6e 6c 79 29 20 6f 72 20 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 | l.(read-only).or.bidirectional.( |
27140 | 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 29 20 61 63 63 65 73 73 20 74 6f 20 6e 6f 64 65 2d 73 | read.and.write).access.to.node-s |
27160 | 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4d 61 6e 61 67 65 64 20 64 65 76 | pecific.information..Managed.dev |
27180 | 69 63 65 73 20 65 78 63 68 61 6e 67 65 20 6e 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f | ices.exchange.node-specific.info |
271a0 | 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 4e 4d 53 73 2e 20 53 6f 6d 65 74 69 6d 65 73 | rmation.with.the.NMSs..Sometimes |
271c0 | 20 63 61 6c 6c 65 64 20 6e 65 74 77 6f 72 6b 20 65 6c 65 6d 65 6e 74 73 2c 20 74 68 65 20 6d 61 | .called.network.elements,.the.ma |
271e0 | 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 20 74 79 70 65 20 6f 66 | naged.devices.can.be.any.type.of |
27200 | 20 64 65 76 69 63 65 2c 20 69 6e 63 6c 75 64 69 6e 67 2c 20 62 75 74 20 6e 6f 74 20 6c 69 6d 69 | .device,.including,.but.not.limi |
27220 | 74 65 64 20 74 6f 2c 20 72 6f 75 74 65 72 73 2c 20 61 63 63 65 73 73 20 73 65 72 76 65 72 73 2c | ted.to,.routers,.access.servers, |
27240 | 20 73 77 69 74 63 68 65 73 2c 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c 20 62 72 69 64 67 65 73 | .switches,.cable.modems,.bridges |
27260 | 2c 20 68 75 62 73 2c 20 49 50 20 74 65 6c 65 70 68 6f 6e 65 73 2c 20 49 50 20 76 69 64 65 6f 20 | ,.hubs,.IP.telephones,.IP.video. |
27280 | 63 61 6d 65 72 61 73 2c 20 63 6f 6d 70 75 74 65 72 20 68 6f 73 74 73 2c 20 61 6e 64 20 70 72 69 | cameras,.computer.hosts,.and.pri |
272a0 | 6e 74 65 72 73 2e 00 41 20 6d 61 74 63 68 20 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 | nters..A.match.filter.can.contai |
272c0 | 6e 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 77 69 6c 6c 20 6d 61 74 | n.multiple.criteria.and.will.mat |
272e0 | 63 68 20 74 72 61 66 66 69 63 20 69 66 20 61 6c 6c 20 74 68 6f 73 65 20 63 72 69 74 65 72 69 61 | ch.traffic.if.all.those.criteria |
27300 | 20 61 72 65 20 74 72 75 65 2e 00 41 20 6d 6f 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f | .are.true..A.monitored.static.ro |
27320 | 75 74 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 | ute.conditions.the.installation. |
27340 | 74 6f 20 74 68 65 20 52 49 42 20 6f 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 72 75 | to.the.RIB.on.the.BFD.session.ru |
27360 | 6e 6e 69 6e 67 20 73 74 61 74 65 3a 20 77 68 65 6e 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 | nning.state:.when.BFD.session.is |
27380 | 20 75 70 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 52 49 | .up.the.route.is.installed.to.RI |
273a0 | 42 2c 20 62 75 74 20 77 68 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 64 | B,.but.when.the.BFD.session.is.d |
273c0 | 6f 77 6e 20 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 52 49 42 2e 00 | own.it.is.removed.from.the.RIB.. |
273e0 | 41 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 65 78 65 | A.network.management.station.exe |
27400 | 63 75 74 65 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 20 | cutes.applications.that.monitor. |
27420 | 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 2e 20 4e 4d 53 | and.control.managed.devices..NMS |
27440 | 73 20 70 72 6f 76 69 64 65 20 74 68 65 20 62 75 6c 6b 20 6f 66 20 74 68 65 20 70 72 6f 63 65 73 | s.provide.the.bulk.of.the.proces |
27460 | 73 69 6e 67 20 61 6e 64 20 6d 65 6d 6f 72 79 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 | sing.and.memory.resources.requir |
27480 | 65 64 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 4f 6e 65 20 6f | ed.for.network.management..One.o |
274a0 | 72 20 6d 6f 72 65 20 4e 4d 53 73 20 6d 61 79 20 65 78 69 73 74 20 6f 6e 20 61 6e 79 20 6d 61 6e | r.more.NMSs.may.exist.on.any.man |
274c0 | 61 67 65 64 20 6e 65 74 77 6f 72 6b 2e 00 41 20 6e 65 77 20 69 6e 74 65 72 66 61 63 65 20 62 65 | aged.network..A.new.interface.be |
274e0 | 63 6f 6d 65 73 20 70 72 65 73 65 6e 74 20 60 60 50 6f 72 74 2d 63 68 61 6e 6e 65 6c 31 60 60 2c | comes.present.``Port-channel1``, |
27500 | 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 6b 65 20 61 6c 6c 6f 77 65 64 20 | .all.configuration.like.allowed. |
27520 | 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 2c 20 53 54 50 20 77 69 6c 6c 20 68 61 70 70 65 6e | VLAN.interfaces,.STP.will.happen |
27540 | 20 68 65 72 65 2e 00 41 20 70 61 63 6b 65 74 20 72 61 74 65 20 6c 69 6d 69 74 20 63 61 6e 20 62 | .here..A.packet.rate.limit.can.b |
27560 | 65 20 73 65 74 20 66 6f 72 20 61 20 72 75 6c 65 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 72 75 | e.set.for.a.rule.to.apply.the.ru |
27580 | 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 62 6f 76 65 20 6f 72 20 62 65 6c 6f 77 20 61 20 73 | le.to.traffic.above.or.below.a.s |
275a0 | 70 65 63 69 66 69 65 64 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 6f 20 63 6f 6e 66 69 67 75 72 65 | pecified.threshold..To.configure |
275c0 | 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 75 73 65 3a 00 41 20 70 61 63 6b 65 74 | .the.rate.limiting.use:.A.packet |
275e0 | 20 74 68 61 74 20 66 69 6e 64 73 20 61 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 | .that.finds.a.matching.entry.in. |
27600 | 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 68 69 74 29 20 69 73 | the.flowtable.(flowtable.hit).is |
27620 | 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 74 68 65 20 6f 75 74 70 75 74 20 6e 65 74 64 65 | .transmitted.to.the.output.netde |
27640 | 76 69 63 65 2c 20 68 65 6e 63 65 2c 20 70 61 63 6b 65 74 73 20 62 79 70 61 73 73 20 74 68 65 20 | vice,.hence,.packets.bypass.the. |
27660 | 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 20 61 6e 64 20 75 | classic.IP.forwarding.path.and.u |
27680 | 73 65 73 20 74 68 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 20 28 6f 72 61 6e 67 65 20 63 69 | ses.the.**Fast.Path**.(orange.ci |
276a0 | 72 63 6c 65 73 20 70 61 74 68 29 2e 20 54 68 65 20 76 69 73 69 62 6c 65 20 65 66 66 65 63 74 20 | rcles.path)..The.visible.effect. |
276c0 | 69 73 20 74 68 61 74 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 65 65 20 74 68 65 73 65 20 70 61 63 | is.that.you.do.not.see.these.pac |
276e0 | 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 6f 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 68 | kets.from.any.of.the.Netfilter.h |
27700 | 6f 6f 6b 73 20 63 6f 6d 69 6e 67 20 61 66 74 65 72 20 69 6e 67 72 65 73 73 2e 20 49 6e 20 63 61 | ooks.coming.after.ingress..In.ca |
27720 | 73 65 20 74 68 61 74 20 74 68 65 72 65 20 69 73 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 | se.that.there.is.no.matching.ent |
27740 | 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 6d | ry.in.the.flowtable.(flowtable.m |
27760 | 69 73 73 29 2c 20 74 68 65 20 70 61 63 6b 65 74 20 66 6f 6c 6c 6f 77 73 20 74 68 65 20 63 6c 61 | iss),.the.packet.follows.the.cla |
27780 | 73 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 2e 00 41 20 70 65 6e 61 6c | ssic.IP.forwarding.path..A.penal |
277a0 | 74 79 20 6f 66 20 31 30 30 30 20 69 73 20 61 73 73 65 73 73 65 64 20 65 61 63 68 20 74 69 6d 65 | ty.of.1000.is.assessed.each.time |
277c0 | 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c 73 2e 20 57 68 65 6e 20 74 68 65 20 70 65 6e 61 6c | .the.route.fails..When.the.penal |
277e0 | 74 69 65 73 20 72 65 61 63 68 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c | ties.reach.a.predefined.threshol |
27800 | 64 20 28 73 75 70 70 72 65 73 73 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 | d.(suppress-value),.the.router.s |
27820 | 74 6f 70 73 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 20 72 6f 75 74 65 2e 00 41 20 70 68 | tops.advertising.the.route..A.ph |
27840 | 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 | ysical.interface.is.required.to. |
27860 | 63 6f 6e 6e 65 63 74 20 74 68 69 73 20 4d 41 43 73 65 63 20 69 6e 73 74 61 6e 63 65 20 74 6f 2e | connect.this.MACsec.instance.to. |
27880 | 20 54 72 61 66 66 69 63 20 6c 65 61 76 69 6e 67 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 | .Traffic.leaving.this.interface. |
278a0 | 77 69 6c 6c 20 6e 6f 77 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2f 65 6e 63 72 79 70 | will.now.be.authenticated/encryp |
278c0 | 74 65 64 2e 00 41 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 | ted..A.pool.of.addresses.can.be. |
278e0 | 64 65 66 69 6e 65 64 20 62 79 20 75 73 69 6e 67 20 61 20 68 79 70 68 65 6e 20 62 65 74 77 65 65 | defined.by.using.a.hyphen.betwee |
27900 | 6e 20 74 77 6f 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 41 20 70 6f 72 74 20 63 61 6e 20 62 | n.two.IP.addresses:.A.port.can.b |
27920 | 65 20 73 65 74 20 77 69 74 68 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 | e.set.with.a.port.number.or.a.na |
27940 | 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 | me.which.is.here.defined:.``/etc |
27960 | 2f 73 65 72 76 69 63 65 73 60 60 2e 00 41 20 71 75 65 72 79 20 66 6f 72 20 77 68 69 63 68 20 74 | /services``..A.query.for.which.t |
27980 | 68 65 72 65 20 69 73 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 20 61 6e 73 77 65 | here.is.authoritatively.no.answe |
279a0 | 72 20 69 73 20 63 61 63 68 65 64 20 74 6f 20 71 75 69 63 6b 6c 79 20 64 65 6e 79 20 61 20 72 65 | r.is.cached.to.quickly.deny.a.re |
279c0 | 63 6f 72 64 27 73 20 65 78 69 73 74 65 6e 63 65 20 6c 61 74 65 72 20 6f 6e 2c 20 77 69 74 68 6f | cord's.existence.later.on,.witho |
279e0 | 75 74 20 70 75 74 74 69 6e 67 20 61 20 68 65 61 76 79 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 | ut.putting.a.heavy.load.on.the.r |
27a00 | 65 6d 6f 74 65 20 73 65 72 76 65 72 2e 20 49 6e 20 70 72 61 63 74 69 63 65 2c 20 63 61 63 68 65 | emote.server..In.practice,.cache |
27a20 | 73 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 61 74 75 72 61 74 65 64 20 77 69 74 68 20 68 75 6e 64 | s.can.become.saturated.with.hund |
27a40 | 72 65 64 73 20 6f 66 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 68 6f 73 74 73 20 77 68 69 63 68 | reds.of.thousands.of.hosts.which |
27a60 | 20 61 72 65 20 74 72 69 65 64 20 6f 6e 6c 79 20 6f 6e 63 65 2e 00 41 20 72 65 63 65 69 76 65 64 | .are.tried.only.once..A.received |
27a80 | 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 74 72 | .NHRP.Traffic.Indication.will.tr |
27aa0 | 69 67 67 65 72 20 74 68 65 20 72 65 73 6f 6c 75 74 69 6f 6e 20 61 6e 64 20 65 73 74 61 62 6c 69 | igger.the.resolution.and.establi |
27ac0 | 73 68 6d 65 6e 74 20 6f 66 20 61 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 2e 00 41 20 72 6f | shment.of.a.shortcut.route..A.ro |
27ae0 | 75 74 69 6e 67 20 74 61 62 6c 65 20 49 44 20 63 61 6e 20 6e 6f 74 20 62 65 20 6d 6f 64 69 66 69 | uting.table.ID.can.not.be.modifi |
27b00 | 65 64 20 6f 6e 63 65 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 2e 20 49 74 20 63 61 6e 20 6f | ed.once.it.is.assigned..It.can.o |
27b20 | 6e 6c 79 20 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 64 65 6c 65 74 69 6e 67 20 61 6e 64 20 72 | nly.be.changed.by.deleting.and.r |
27b40 | 65 2d 61 64 64 69 6e 67 20 74 68 65 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 41 20 72 75 6c | e-adding.the.VRF.instance..A.rul |
27b60 | 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 | e-set.is.a.named.collection.of.f |
27b80 | 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 | irewall.rules.that.can.be.applie |
27ba0 | 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 61 20 7a 6f 6e 65 2e 20 45 61 63 | d.to.an.interface.or.a.zone..Eac |
27bc0 | 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f | h.rule.is.numbered,.has.an.actio |
27be0 | 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 | n.to.apply.if.the.rule.is.matche |
27c00 | 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 | d,.and.the.ability.to.specify.th |
27c20 | 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 | e.criteria.to.match..Data.packet |
27c40 | 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 | s.go.through.the.rules.from.1.-. |
27c60 | 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 | 999999,.at.the.first.match.the.a |
27c80 | 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 | ction.of.the.rule.will.be.execut |
27ca0 | 65 64 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 | ed..A.rule-set.is.a.named.collec |
27cc0 | 74 69 6f 6e 20 6f 66 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 | tion.of.rules.that.can.be.applie |
27ce0 | 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 | d.to.an.interface..Each.rule.is. |
27d00 | 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 | numbered,.has.an.action.to.apply |
27d20 | 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 | .if.the.rule.is.matched,.and.the |
27d40 | 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 | .ability.to.specify.the.criteria |
27d60 | 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 | .to.match..Data.packets.go.throu |
27d80 | 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 | gh.the.rules.from.1.-.999999,.at |
27da0 | 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 | .the.first.match.the.action.of.t |
27dc0 | 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 41 20 73 63 72 69 | he.rule.will.be.executed..A.scri |
27de0 | 70 74 20 63 61 6e 20 62 65 20 72 75 6e 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 | pt.can.be.run.when.an.interface. |
27e00 | 73 74 61 74 65 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 2e 20 53 63 72 69 70 74 73 20 61 72 65 | state.change.occurs..Scripts.are |
27e20 | 20 72 75 6e 20 66 72 6f 6d 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 61 | .run.from./config/scripts,.for.a |
27e40 | 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 | .different.location.specify.the. |
27e60 | 66 75 6c 6c 20 70 61 74 68 3a 00 41 20 73 65 67 6d 65 6e 74 20 49 44 20 74 68 61 74 20 63 6f 6e | full.path:.A.segment.ID.that.con |
27e80 | 74 61 69 6e 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 63 61 6c 63 75 | tains.an.IP.address.prefix.calcu |
27ea0 | 6c 61 74 65 64 20 62 79 20 61 6e 20 49 47 50 20 69 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 70 | lated.by.an.IGP.in.the.service.p |
27ec0 | 72 6f 76 69 64 65 72 20 63 6f 72 65 20 6e 65 74 77 6f 72 6b 2e 20 50 72 65 66 69 78 20 53 49 44 | rovider.core.network..Prefix.SID |
27ee0 | 73 20 61 72 65 20 67 6c 6f 62 61 6c 6c 79 20 75 6e 69 71 75 65 2c 20 74 68 69 73 20 76 61 6c 75 | s.are.globally.unique,.this.valu |
27f00 | 65 20 69 6e 64 65 6e 74 69 66 79 20 69 74 00 41 20 73 65 6e 64 69 6e 67 20 73 74 61 74 69 6f 6e | e.indentify.it.A.sending.station |
27f20 | 20 28 63 6f 6d 70 75 74 65 72 20 6f 72 20 6e 65 74 77 6f 72 6b 20 73 77 69 74 63 68 29 20 6d 61 | .(computer.or.network.switch).ma |
27f40 | 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 64 61 74 61 20 66 61 73 74 65 72 20 74 68 | y.be.transmitting.data.faster.th |
27f60 | 61 6e 20 74 68 65 20 6f 74 68 65 72 20 65 6e 64 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e | an.the.other.end.of.the.link.can |
27f80 | 20 61 63 63 65 70 74 20 69 74 2e 20 55 73 69 6e 67 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2c 20 | .accept.it..Using.flow.control,. |
27fa0 | 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 73 69 67 6e 61 6c | the.receiving.station.can.signal |
27fc0 | 20 74 68 65 20 73 65 6e 64 65 72 20 72 65 71 75 65 73 74 69 6e 67 20 73 75 73 70 65 6e 73 69 6f | .the.sender.requesting.suspensio |
27fe0 | 6e 20 6f 66 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 75 6e 74 69 6c 20 74 68 65 20 72 65 63 | n.of.transmissions.until.the.rec |
28000 | 65 69 76 65 72 20 63 61 74 63 68 65 73 20 75 70 2e 00 41 20 73 68 61 72 65 64 20 6e 65 74 77 6f | eiver.catches.up..A.shared.netwo |
28020 | 72 6b 20 6e 61 6d 65 64 20 60 60 4e 45 54 31 60 60 20 73 65 72 76 65 73 20 73 75 62 6e 65 74 20 | rk.named.``NET1``.serves.subnet. |
28040 | 60 60 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 60 60 00 41 20 73 69 6d 70 6c 65 20 42 47 50 20 63 | ``2001:db8::/64``.A.simple.BGP.c |
28060 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 49 50 76 36 2e 00 41 20 73 69 6d 70 6c 65 20 | onfiguration.via.IPv6..A.simple. |
28080 | 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 69 6f 6e 20 28 52 45 44 29 20 70 6f 6c | Random.Early.Detection.(RED).pol |
280a0 | 69 63 79 20 77 6f 75 6c 64 20 73 74 61 72 74 20 72 61 6e 64 6f 6d 6c 79 20 64 72 6f 70 70 69 6e | icy.would.start.randomly.droppin |
280c0 | 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 | g.packets.from.a.queue.before.it |
280e0 | 20 72 65 61 63 68 65 73 20 69 74 73 20 71 75 65 75 65 20 6c 69 6d 69 74 20 74 68 75 73 20 61 76 | .reaches.its.queue.limit.thus.av |
28100 | 6f 69 64 69 6e 67 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 54 68 61 74 20 69 73 20 67 6f 6f 64 20 | oiding.congestion..That.is.good. |
28120 | 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 73 20 74 68 65 20 67 72 61 64 75 | for.TCP.connections.as.the.gradu |
28140 | 61 6c 20 64 72 6f 70 70 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 20 61 63 74 73 20 61 73 20 61 | al.dropping.of.packets.acts.as.a |
28160 | 20 73 69 67 6e 61 6c 20 66 6f 72 20 74 68 65 20 73 65 6e 64 65 72 20 74 6f 20 64 65 63 72 65 61 | .signal.for.the.sender.to.decrea |
28180 | 73 65 20 69 74 73 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 72 61 74 65 2e 00 41 20 73 69 6d 70 | se.its.transmission.rate..A.simp |
281a0 | 6c 65 20 65 42 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 41 20 73 69 6d 70 6c 65 20 | le.eBGP.configuration:.A.simple. |
281c0 | 65 78 61 6d 70 6c 65 20 6f 66 20 53 68 61 70 65 72 20 75 73 69 6e 67 20 70 72 69 6f 72 69 74 69 | example.of.Shaper.using.prioriti |
281e0 | 65 73 2e 00 41 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 6e 20 46 51 2d 43 6f | es..A.simple.example.of.an.FQ-Co |
28200 | 44 65 6c 20 70 6f 6c 69 63 79 20 77 6f 72 6b 69 6e 67 20 69 6e 73 69 64 65 20 61 20 53 68 61 70 | Del.policy.working.inside.a.Shap |
28220 | 65 72 20 6f 6e 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f | er.one..A.simplified.traffic.flo |
28240 | 77 20 64 69 61 67 72 61 6d 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 | w.diagram,.based.on.Netfilter.pa |
28260 | 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 | cket.flow,.is.shown.next,.in.ord |
28280 | 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 | er.to.have.a.full.view.and.under |
282a0 | 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 | standing.of.how.packets.are.proc |
282c0 | 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 74 | essed,.and.what.possible.paths.t |
282e0 | 72 61 66 66 69 63 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 | raffic.can.take..A.simplified.tr |
28300 | 61 66 66 69 63 20 66 6c 6f 77 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 | affic.flow,.based.on.Netfilter.p |
28320 | 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 | acket.flow,.is.shown.next,.in.or |
28340 | 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 | der.to.have.a.full.view.and.unde |
28360 | 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f | rstanding.of.how.packets.are.pro |
28380 | 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 | cessed,.and.what.possible.paths. |
283a0 | 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 | can.take..A.single.internal.netw |
283c0 | 6f 72 6b 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 55 73 65 20 74 68 | ork.and.external.network..Use.th |
283e0 | 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 73 69 6e 67 | e.NAT66.device.to.connect.a.sing |
28400 | 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 75 62 6c 69 63 20 6e | le.internal.network.and.public.n |
28420 | 65 74 77 6f 72 6b 2c 20 61 6e 64 20 74 68 65 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 69 6e 74 | etwork,.and.the.hosts.in.the.int |
28440 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 | ernal.network.use.IPv6.address.p |
28460 | 72 65 66 69 78 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 72 6f 75 74 69 6e | refixes.that.only.support.routin |
28480 | 67 20 77 69 74 68 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 61 6e 67 65 2e 20 57 68 65 6e 20 61 | g.within.the.local.range..When.a |
284a0 | 20 68 6f 73 74 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 63 | .host.in.the.internal.network.ac |
284c0 | 63 65 73 73 65 73 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 68 65 | cesses.the.external.network,.the |
284e0 | 20 73 6f 75 72 63 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 74 | .source.IPv6.address.prefix.in.t |
28500 | 68 65 20 6d 65 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 69 6e 74 | he.message.will.be.converted.int |
28520 | 6f 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | o.a.global.unicast.IPv6.address. |
28540 | 70 72 65 66 69 78 20 62 79 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 2e 00 41 20 73 74 | prefix.by.the.NAT66.device..A.st |
28560 | 61 74 69 6f 6e 20 61 63 74 73 20 61 73 20 61 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 20 61 63 63 | ation.acts.as.a.Wi-Fi.client.acc |
28580 | 65 73 73 69 6e 67 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 61 6e 20 61 76 | essing.the.network.through.an.av |
285a0 | 61 69 6c 61 62 6c 65 20 57 41 50 00 41 20 73 79 6e 63 20 67 72 6f 75 70 20 61 6c 6c 6f 77 73 20 | ailable.WAP.A.sync.group.allows. |
285c0 | 56 52 52 50 20 67 72 6f 75 70 73 20 74 6f 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 67 65 74 68 | VRRP.groups.to.transition.togeth |
285e0 | 65 72 2e 00 41 20 74 79 70 69 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e | er..A.typical.configuration.usin |
28600 | 67 20 32 20 6e 6f 64 65 73 2e 00 41 20 74 79 70 69 63 61 6c 20 70 72 6f 62 6c 65 6d 20 77 69 74 | g.2.nodes..A.typical.problem.wit |
28620 | 68 20 75 73 69 6e 67 20 4e 41 54 20 61 6e 64 20 68 6f 73 74 69 6e 67 20 70 75 62 6c 69 63 20 73 | h.using.NAT.and.hosting.public.s |
28640 | 65 72 76 65 72 73 20 69 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6e 74 65 72 6e | ervers.is.the.ability.for.intern |
28660 | 61 6c 20 73 79 73 74 65 6d 73 20 74 6f 20 72 65 61 63 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 | al.systems.to.reach.an.internal. |
28680 | 73 65 72 76 65 72 20 75 73 69 6e 67 20 69 74 27 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 | server.using.it's.external.IP.ad |
286a0 | 64 72 65 73 73 2e 20 54 68 65 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 75 | dress..The.solution.to.this.is.u |
286c0 | 73 75 61 6c 6c 79 20 74 68 65 20 75 73 65 20 6f 66 20 73 70 6c 69 74 2d 44 4e 53 20 74 6f 20 63 | sually.the.use.of.split-DNS.to.c |
286e0 | 6f 72 72 65 63 74 6c 79 20 70 6f 69 6e 74 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 74 6f 20 74 | orrectly.point.host.systems.to.t |
28700 | 68 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 68 65 6e 20 72 65 71 75 65 73 74 | he.internal.address.when.request |
28720 | 73 20 61 72 65 20 6d 61 64 65 20 69 6e 74 65 72 6e 61 6c 6c 79 2e 20 42 65 63 61 75 73 65 20 6d | s.are.made.internally..Because.m |
28740 | 61 6e 79 20 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 73 20 6c 61 63 6b 20 44 4e 53 20 69 6e | any.smaller.networks.lack.DNS.in |
28760 | 66 72 61 73 74 72 75 63 74 75 72 65 2c 20 61 20 77 6f 72 6b 2d 61 72 6f 75 6e 64 20 69 73 20 63 | frastructure,.a.work-around.is.c |
28780 | 6f 6d 6d 6f 6e 6c 79 20 64 65 70 6c 6f 79 65 64 20 74 6f 20 66 61 63 69 6c 69 74 61 74 65 20 74 | ommonly.deployed.to.facilitate.t |
287a0 | 68 65 20 74 72 61 66 66 69 63 20 62 79 20 4e 41 54 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 | he.traffic.by.NATing.the.request |
287c0 | 20 66 72 6f 6d 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 73 20 74 6f 20 74 68 65 20 73 6f 75 72 | .from.internal.hosts.to.the.sour |
287e0 | 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 | ce.address.of.the.internal.inter |
28800 | 66 61 63 65 20 6f 6e 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 41 20 75 73 65 72 20 66 72 69 | face.on.the.firewall..A.user.fri |
28820 | 65 6e 64 6c 79 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e | endly.alias.for.this.connection. |
28840 | 20 43 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 | .Can.be.used.instead.of.the.devi |
28860 | 63 65 20 6e 61 6d 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 41 20 75 73 65 72 20 | ce.name.when.connecting..A.user. |
28880 | 66 72 69 65 6e 64 6c 79 20 64 65 73 63 72 69 70 74 69 6f 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 | friendly.description.identifying |
288a0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 70 65 72 69 70 68 65 72 61 6c 2e 00 41 20 76 61 6c | .the.connected.peripheral..A.val |
288c0 | 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e | ue.of.0.disables.ARP.monitoring. |
288e0 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 00 41 20 76 61 6c 75 65 | .The.default.value.is.0..A.value |
28900 | 20 6f 66 20 32 39 36 20 77 6f 72 6b 73 20 77 65 6c 6c 20 6f 6e 20 76 65 72 79 20 73 6c 6f 77 20 | .of.296.works.well.on.very.slow. |
28920 | 6c 69 6e 6b 73 20 28 34 30 20 62 79 74 65 73 20 66 6f 72 20 54 43 50 2f 49 50 20 68 65 61 64 65 | links.(40.bytes.for.TCP/IP.heade |
28940 | 72 20 2b 20 32 35 36 20 62 79 74 65 73 20 6f 66 20 64 61 74 61 29 2e 00 41 20 76 65 72 79 20 73 | r.+.256.bytes.of.data)..A.very.s |
28960 | 6d 61 6c 6c 20 62 75 66 66 65 72 20 77 69 6c 6c 20 73 6f 6f 6e 20 73 74 61 72 74 20 64 72 6f 70 | mall.buffer.will.soon.start.drop |
28980 | 70 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 41 20 7a 6f 6e 65 20 6d 75 73 74 20 62 65 20 63 6f 6e | ping.packets..A.zone.must.be.con |
289a0 | 66 69 67 75 72 65 64 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 | figured.before.an.interface.is.a |
289c0 | 73 73 69 67 6e 65 64 20 74 6f 20 69 74 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 | ssigned.to.it.and.an.interface.c |
289e0 | 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 | an.be.assigned.to.only.a.single. |
28a00 | 7a 6f 6e 65 2e 00 41 43 4d 45 00 41 43 4d 45 20 44 69 72 65 63 74 6f 72 79 20 52 65 73 6f 75 72 | zone..ACME.ACME.Directory.Resour |
28a20 | 63 65 20 55 52 49 2e 00 41 50 49 00 41 52 50 00 41 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 77 69 | ce.URI..API.ARP.Above.command.wi |
28a40 | 6c 6c 20 75 73 65 20 60 31 30 2e 30 2e 30 2e 33 60 20 61 73 20 73 6f 75 72 63 65 20 49 50 76 34 | ll.use.`10.0.0.3`.as.source.IPv4 |
28a60 | 20 61 64 64 72 65 73 73 20 66 6f 72 20 61 6c 6c 20 52 41 44 49 55 53 20 71 75 65 72 69 65 73 20 | .address.for.all.RADIUS.queries. |
28a80 | 6f 6e 20 74 68 69 73 20 4e 41 53 2e 00 41 62 6f 76 65 2c 20 63 6f 6d 6d 61 6e 64 20 73 79 6e 74 | on.this.NAS..Above,.command.synt |
28aa0 | 61 78 20 69 73 6e 20 6e 6f 74 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 64 79 6e 61 6d 69 | ax.isn.noted.to.configure.dynami |
28ac0 | 63 20 64 6e 73 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 20 49 | c.dns.on.a.specific.interface..I |
28ae0 | 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6f 76 65 72 6c 6f 6f 6b 20 74 68 65 20 61 64 | t.is.possible.to.overlook.the.ad |
28b00 | 64 69 74 69 6f 6e 61 6c 20 61 64 64 72 65 73 73 20 6f 70 74 69 6f 6e 2c 20 77 65 62 2c 20 77 68 | ditional.address.option,.web,.wh |
28b20 | 65 6e 20 63 6f 6d 70 6c 65 74 65 69 6e 67 20 74 68 6f 73 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 64 | en.completeing.those.commands..d |
28b40 | 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 | dclient_.has.another.way.to.dete |
28b60 | 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 2c 20 75 73 69 6e 67 20 | rmine.the.WAN.IP.address,.using. |
28b80 | 61 20 77 65 62 2d 62 61 73 65 64 20 75 72 6c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 | a.web-based.url.to.determine.the |
28ba0 | 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 45 61 63 68 20 6f 66 20 74 68 65 20 63 6f 6d 6d 61 6e | .external.IP..Each.of.the.comman |
28bc0 | 64 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 62 65 20 6d 6f 64 69 66 69 65 | ds.above.will.need.to.be.modifie |
28be0 | 64 20 74 6f 20 75 73 65 20 27 77 65 62 27 20 61 73 20 74 68 65 20 27 69 6e 74 65 72 66 61 63 65 | d.to.use.'web'.as.the.'interface |
28c00 | 27 20 73 70 65 63 69 66 69 65 64 20 69 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 | '.specified.if.this.functionalit |
28c20 | 79 20 69 73 20 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 41 63 63 65 6c 65 72 61 74 69 6f | y.is.to.be.utilized..Acceleratio |
28c40 | 6e 00 41 63 63 65 70 74 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 | n.Accept.SSH.connections.for.the |
28c60 | 20 67 69 76 65 6e 20 60 3c 64 65 76 69 63 65 3e 60 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 60 3c | .given.`<device>`.on.TCP.port.`< |
28c80 | 70 6f 72 74 3e 60 2e 20 41 66 74 65 72 20 73 75 63 63 65 73 73 66 75 6c 6c 20 61 75 74 68 65 6e | port>`..After.successfull.authen |
28ca0 | 74 69 63 61 74 69 6f 6e 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 | tication.the.user.will.be.direct |
28cc0 | 6c 79 20 64 72 6f 70 70 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 73 65 72 69 | ly.dropped.to.the.connected.seri |
28ce0 | 61 6c 20 64 65 76 69 63 65 2e 00 41 63 63 65 70 74 20 6f 6e 6c 79 20 63 65 72 74 61 69 6e 20 70 | al.device..Accept.only.certain.p |
28d00 | 72 6f 74 6f 63 6f 6c 73 3a 20 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 72 65 70 6c 69 63 | rotocols:.You.may.want.to.replic |
28d20 | 61 74 65 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 66 6c 6f 77 73 20 64 65 70 65 6e 64 69 6e 67 | ate.the.state.of.flows.depending |
28d40 | 20 6f 6e 20 74 68 65 69 72 20 6c 61 79 65 72 20 34 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 63 63 65 | .on.their.layer.4.protocol..Acce |
28d60 | 70 74 20 70 65 65 72 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 2e 20 42 79 | pt.peer.interface.identifier..By |
28d80 | 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 41 63 63 65 70 74 61 | .default.is.not.defined..Accepta |
28da0 | 62 6c 65 20 72 61 74 65 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 28 65 2e 67 2e 20 31 2f | ble.rate.of.connections.(e.g..1/ |
28dc0 | 6d 69 6e 2c 20 36 30 2f 73 65 63 29 00 41 63 63 65 73 73 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 | min,.60/sec).Access.List.Policy. |
28de0 | 41 63 63 65 73 73 20 4c 69 73 74 73 00 41 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 74 61 6b 65 | Access.Lists.Action.must.be.take |
28e00 | 6e 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 2d 20 41 20 63 6f 6e 64 69 74 69 6f 6e 20 74 68 61 74 | n.immediately.-.A.condition.that |
28e20 | 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 | .should.be.corrected.immediately |
28e40 | 2c 20 73 75 63 68 20 61 73 20 61 20 63 6f 72 72 75 70 74 65 64 20 73 79 73 74 65 6d 20 64 61 74 | ,.such.as.a.corrupted.system.dat |
28e60 | 61 62 61 73 65 2e 00 41 63 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 | abase..Action.which.will.be.run. |
28e80 | 6f 6e 63 65 20 74 68 65 20 63 74 72 6c 2d 61 6c 74 2d 64 65 6c 20 6b 65 79 73 74 72 6f 6b 65 20 | once.the.ctrl-alt-del.keystroke. |
28ea0 | 69 73 20 72 65 63 65 69 76 65 64 2e 00 41 63 74 69 6f 6e 73 00 41 63 74 69 76 65 20 44 69 72 65 | is.received..Actions.Active.Dire |
28ec0 | 63 74 6f 72 79 00 41 63 74 69 76 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 62 61 63 6b 65 6e | ctory.Active.health.check.backen |
28ee0 | 64 20 73 65 72 76 65 72 00 41 64 64 20 4e 54 41 20 28 6e 65 67 61 74 69 76 65 20 74 72 75 73 74 | d.server.Add.NTA.(negative.trust |
28f00 | 20 61 6e 63 68 6f 72 29 20 66 6f 72 20 74 68 69 73 20 64 6f 6d 61 69 6e 2e 20 54 68 69 73 20 6d | .anchor).for.this.domain..This.m |
28f20 | 75 73 74 20 62 65 20 73 65 74 20 69 66 20 74 68 65 20 64 6f 6d 61 69 6e 20 64 6f 65 73 20 6e 6f | ust.be.set.if.the.domain.does.no |
28f40 | 74 20 73 75 70 70 6f 72 74 20 44 4e 53 53 45 43 2e 00 41 64 64 20 50 6f 77 65 72 20 43 6f 6e 73 | t.support.DNSSEC..Add.Power.Cons |
28f60 | 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 74 6f 20 42 65 61 63 6f 6e 20 61 6e 64 20 50 72 6f | traint.element.to.Beacon.and.Pro |
28f80 | 62 65 20 52 65 73 70 6f 6e 73 65 20 66 72 61 6d 65 73 2e 00 41 64 64 20 61 20 66 6f 72 77 61 72 | be.Response.frames..Add.a.forwar |
28fa0 | 64 69 6e 67 20 72 75 6c 65 20 6d 61 74 63 68 69 6e 67 20 55 44 50 20 70 6f 72 74 20 6f 6e 20 79 | ding.rule.matching.UDP.port.on.y |
28fc0 | 6f 75 72 20 69 6e 74 65 72 6e 65 74 20 72 6f 75 74 65 72 2e 00 41 64 64 20 61 20 68 6f 73 74 20 | our.internet.router..Add.a.host. |
28fe0 | 64 65 76 69 63 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 41 64 64 20 61 63 63 | device.to.the.container..Add.acc |
29000 | 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 61 6c 6c 6f 77 20 6f | ess-control.directive.to.allow.o |
29020 | 72 20 64 65 6e 79 20 75 73 65 72 73 20 61 6e 64 20 67 72 6f 75 70 73 2e 20 44 69 72 65 63 74 69 | r.deny.users.and.groups..Directi |
29040 | 76 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | ves.are.processed.in.the.followi |
29060 | 6e 67 20 6f 72 64 65 72 20 6f 66 20 70 72 65 63 65 64 65 6e 63 65 3a 20 60 60 64 65 6e 79 2d 75 | ng.order.of.precedence:.``deny-u |
29080 | 73 65 72 73 60 60 2c 20 60 60 61 6c 6c 6f 77 2d 75 73 65 72 73 60 60 2c 20 60 60 64 65 6e 79 2d | sers``,.``allow-users``,.``deny- |
290a0 | 67 72 6f 75 70 73 60 60 20 61 6e 64 20 60 60 61 6c 6c 6f 77 2d 67 72 6f 75 70 73 60 60 2e 00 41 | groups``.and.``allow-groups``..A |
290c0 | 64 64 20 63 75 73 74 6f 6d 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 2e | dd.custom.environment.variables. |
290e0 | 20 4d 75 6c 74 69 70 6c 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 | .Multiple.environment.variables. |
29100 | 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 | are.allowed..The.following.comma |
29120 | 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 65 20 6b 65 79 3d 76 61 6c 75 65 22 20 | nds.translate.to."-e.key=value". |
29140 | 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 2e 00 41 | when.the.container.is.created..A |
29160 | 64 64 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 60 60 | dd.default.routes.for.routing.`` |
29180 | 74 61 62 6c 65 20 31 30 60 60 20 61 6e 64 20 60 60 74 61 62 6c 65 20 31 31 60 60 00 41 64 64 20 | table.10``.and.``table.11``.Add. |
291a0 | 6d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 6f 6e 65 20 72 75 6c 65 20 77 | multiple.source.IP.in.one.rule.w |
291c0 | 69 74 68 20 73 61 6d 65 20 70 72 69 6f 72 69 74 79 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 | ith.same.priority.Add.new.port.t |
291e0 | 6f 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 | o.SSL-ports.acl..Ports.included. |
29200 | 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c 3a 20 34 34 33 | by.default.in.SSL-ports.acl:.443 |
29220 | 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 2e | .Add.new.port.to.Safe-ports.acl. |
29240 | 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 61 | .Ports.included.by.default.in.Sa |
29260 | 66 65 2d 70 6f 72 74 73 20 61 63 6c 3a 20 32 31 2c 20 37 30 2c 20 38 30 2c 20 32 31 30 2c 20 32 | fe-ports.acl:.21,.70,.80,.210,.2 |
29280 | 38 30 2c 20 34 34 33 2c 20 34 38 38 2c 20 35 39 31 2c 20 37 37 37 2c 20 38 37 33 2c 20 31 30 32 | 80,.443,.488,.591,.777,.873,.102 |
292a0 | 35 2d 36 35 35 33 35 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 63 6f 6d 6d 75 | 5-65535.Add.or.replace.BGP.commu |
292c0 | 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 | nity.attribute.in.format.``<0-65 |
292e0 | 35 33 35 3a 30 2d 36 35 35 33 35 3e 60 60 20 6f 72 20 66 72 6f 6d 20 77 65 6c 6c 2d 6b 6e 6f 77 | 535:0-65535>``.or.from.well-know |
29300 | 6e 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 | n.community.list.Add.or.replace. |
29320 | 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e | BGP.large-community.attribute.in |
29340 | 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 | .format.``<0-4294967295:0-429496 |
29360 | 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 00 41 64 64 20 70 6f 6c 69 63 79 20 | 7295:0-4294967295>``.Add.policy. |
29380 | 72 6f 75 74 65 20 6d 61 74 63 68 69 6e 67 20 56 4c 41 4e 20 73 6f 75 72 63 65 20 61 64 64 72 65 | route.matching.VLAN.source.addre |
293a0 | 73 73 65 73 00 41 64 64 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 6f 72 20 | sses.Add.public.key.portion.for. |
293c0 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 | the.certificate.named.`name`.to. |
293e0 | 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 | the.VyOS.CLI..Add.the.CAs.privat |
29400 | 65 20 6b 65 79 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 | e.key.to.the.VyOS.CLI..This.shou |
29420 | 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 2c 20 61 6e 64 20 69 | ld.never.leave.the.system,.and.i |
29440 | 73 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 | s.only.required.if.you.use.VyOS. |
29460 | 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 20 61 73 | as.your.certificate.generator.as |
29480 | 20 6d 65 6e 74 69 6f 6e 65 64 20 61 62 6f 76 65 2e 00 41 64 64 20 74 68 65 20 63 6f 6d 6d 61 6e | .mentioned.above..Add.the.comman |
294a0 | 64 73 20 66 72 6f 6d 20 53 6e 69 70 70 65 74 20 69 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 73 | ds.from.Snippet.in.the.Windows.s |
294c0 | 69 64 65 20 76 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 20 41 6c 73 6f 20 69 6d 70 6f 72 74 20 | ide.via.PowerShell..Also.import. |
294e0 | 74 68 65 20 72 6f 6f 74 20 43 41 20 63 65 72 74 20 74 6f 20 74 68 65 20 57 69 6e 64 6f 77 73 20 | the.root.CA.cert.to.the.Windows. |
29500 | e2 80 9c 54 72 75 73 74 65 64 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 | ...Trusted.Root.Certification.Au |
29520 | 74 68 6f 72 69 74 69 65 73 e2 80 9d 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 | thorities....and.establish.the.c |
29540 | 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 64 64 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 | onnection..Add.the.private.key.p |
29560 | 6f 72 74 69 6f 6e 20 6f 66 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 | ortion.of.this.certificate.to.th |
29580 | 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 | e.CLI..This.should.never.leave.t |
295a0 | 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 | he.system.as.it.is.used.to.decry |
295c0 | 70 74 20 74 68 65 20 64 61 74 61 2e 00 41 64 64 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 | pt.the.data..Add.the.public.CA.c |
295e0 | 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 43 41 20 6e 61 6d 65 64 20 60 6e 61 6d | ertificate.for.the.CA.named.`nam |
29600 | 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 69 6e 67 20 61 20 32 46 41 | e`.to.the.VyOS.CLI..Adding.a.2FA |
29620 | 20 77 69 74 68 20 61 6e 20 4f 54 50 2d 6b 65 79 00 41 64 64 69 74 69 6f 6e 61 6c 20 67 6c 6f 62 | .with.an.OTP-key.Additional.glob |
29640 | 61 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 73 65 74 2c 20 69 6e 63 6c 75 64 69 6e 67 | al.parameters.are.set,.including |
29660 | 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c | .the.maximum.number.connection.l |
29680 | 69 6d 69 74 20 6f 66 20 34 30 30 30 20 61 6e 64 20 61 20 6d 69 6e 69 6d 75 6d 20 54 4c 53 20 76 | imit.of.4000.and.a.minimum.TLS.v |
296a0 | 65 72 73 69 6f 6e 20 6f 66 20 31 2e 33 2e 00 41 64 64 69 74 69 6f 6e 61 6c 20 6f 70 74 69 6f 6e | ersion.of.1.3..Additional.option |
296c0 | 20 74 6f 20 72 75 6e 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 3a 61 62 62 72 | .to.run.TFTP.server.in.the.:abbr |
296e0 | 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 | :`VRF.(Virtual.Routing.and.Forwa |
29700 | 72 64 69 6e 67 29 60 20 63 6f 6e 74 65 78 74 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 | rding)`.context.Additionally.you |
29720 | 20 73 68 6f 75 6c 64 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 66 | .should.keep.in.mind.that.this.f |
29740 | 65 61 74 75 72 65 20 66 75 6e 64 61 6d 65 6e 74 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 | eature.fundamentally.disables.th |
29760 | 65 20 61 62 69 6c 69 74 79 20 74 6f 20 75 73 65 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 | e.ability.to.use.widely.deployed |
29780 | 20 42 47 50 20 66 65 61 74 75 72 65 73 2e 20 42 47 50 20 75 6e 6e 75 6d 62 65 72 65 64 2c 20 68 | .BGP.features..BGP.unnumbered,.h |
297a0 | 6f 73 74 6e 61 6d 65 20 73 75 70 70 6f 72 74 2c 20 41 53 34 2c 20 41 64 64 70 61 74 68 2c 20 52 | ostname.support,.AS4,.Addpath,.R |
297c0 | 6f 75 74 65 20 52 65 66 72 65 73 68 2c 20 4f 52 46 2c 20 44 79 6e 61 6d 69 63 20 43 61 70 61 62 | oute.Refresh,.ORF,.Dynamic.Capab |
297e0 | 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 67 72 61 63 65 66 75 6c 20 72 65 73 74 61 72 74 2e 00 41 | ilities,.and.graceful.restart..A |
29800 | 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 65 61 63 68 20 63 6c 69 65 6e 74 20 6e 65 65 64 73 20 61 | dditionally,.each.client.needs.a |
29820 | 20 63 6f 70 79 20 6f 66 20 63 61 20 63 65 72 74 20 61 6e 64 20 69 74 73 20 6f 77 6e 20 63 6c 69 | .copy.of.ca.cert.and.its.own.cli |
29840 | 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 2e 20 54 68 65 20 66 69 6c 65 | ent.key.and.cert.files..The.file |
29860 | 73 20 61 72 65 20 70 6c 61 69 6e 74 65 78 74 20 73 6f 20 74 68 65 79 20 6d 61 79 20 62 65 20 63 | s.are.plaintext.so.they.may.be.c |
29880 | 6f 70 69 65 64 20 65 69 74 68 65 72 20 6d 61 6e 75 61 6c 6c 79 20 66 72 6f 6d 20 74 68 65 20 43 | opied.either.manually.from.the.C |
298a0 | 4c 49 2e 20 43 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 20 73 68 | LI..Client.key.and.cert.files.sh |
298c0 | 6f 75 6c 64 20 62 65 20 73 69 67 6e 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 70 65 72 20 63 | ould.be.signed.with.the.proper.c |
298e0 | 61 20 63 65 72 74 20 61 6e 64 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 | a.cert.and.generated.on.the.serv |
29900 | 65 72 20 73 69 64 65 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 77 65 20 77 61 6e 74 20 74 | er.side..Additionally,.we.want.t |
29920 | 6f 20 75 73 65 20 56 50 4e 73 20 6f 6e 6c 79 20 6f 6e 20 6f 75 72 20 65 74 68 31 20 69 6e 74 65 | o.use.VPNs.only.on.our.eth1.inte |
29940 | 72 66 61 63 65 20 28 74 68 65 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 6e | rface.(the.external.interface.in |
29960 | 20 74 68 65 20 69 6d 61 67 65 20 61 62 6f 76 65 29 00 41 64 64 72 65 73 73 00 41 64 64 72 65 73 | .the.image.above).Address.Addres |
29980 | 73 20 43 6f 6e 76 65 72 73 69 6f 6e 00 41 64 64 72 65 73 73 20 46 61 6d 69 6c 69 65 73 00 41 64 | s.Conversion.Address.Families.Ad |
299a0 | 64 72 65 73 73 20 47 72 6f 75 70 73 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 20 73 68 61 6c 6c 20 | dress.Groups.Address.pool.shall. |
299c0 | 62 65 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 30 30 60 60 20 74 68 72 6f 75 67 68 20 60 60 32 | be.``2001:db8::100``.through.``2 |
299e0 | 30 30 31 3a 64 62 38 3a 3a 31 39 39 60 60 2e 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 73 00 41 64 | 001:db8::199``..Address.pools.Ad |
29a00 | 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 | dress.to.listen.for.HTTPS.reques |
29a20 | 74 73 00 41 64 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 | ts.Adds.registry.to.list.of.unqu |
29a40 | 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 | alified-search-registries..By.de |
29a60 | 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e | fault,.for.any.image.that.does.n |
29a80 | 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 | ot.include.the.registry.in.the.i |
29aa0 | 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e | mage.name,.VyOS.will.use.docker. |
29ac0 | 69 6f 20 61 6e 64 20 71 75 61 79 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 | io.and.quay.io.as.the.container. |
29ae0 | 72 65 67 69 73 74 72 79 2e 00 41 64 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 | registry..Adds.registry.to.list. |
29b00 | 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 | of.unqualified-search-registries |
29b20 | 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 | ..By.default,.for.any.image.that |
29b40 | 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 | .does.not.include.the.registry.i |
29b60 | 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 6f 73 20 77 69 6c 6c 20 75 73 65 20 | n.the.image.name,.Vyos.will.use. |
29b80 | 64 6f 63 6b 65 72 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 | docker.io.as.the.container.regis |
29ba0 | 74 72 79 2e 00 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 44 69 73 74 61 6e 63 65 00 41 64 76 | try..Administrative.Distance.Adv |
29bc0 | 61 6e 63 65 64 20 49 6e 74 65 72 66 61 63 65 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 | anced.Interface.Options.Advanced |
29be0 | 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | .Options.Advanced.configuration. |
29c00 | 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 70 70 6c 79 20 73 6f | can.be.used.in.order.to.apply.so |
29c20 | 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2c 20 61 6e 64 20 77 69 74 | urce.or.destination.NAT,.and.wit |
29c40 | 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 | hin.a.single.rule,.be.able.to.de |
29c60 | 66 69 6e 65 20 6d 75 6c 74 69 70 6c 65 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 | fine.multiple.translated.address |
29c80 | 65 73 2c 20 73 6f 20 4e 41 54 20 62 61 6c 61 6e 63 65 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 | es,.so.NAT.balances.the.translat |
29ca0 | 69 6f 6e 73 20 61 6d 6f 6e 67 20 74 68 65 6d 2e 00 41 64 76 61 6e 74 61 67 65 73 20 6f 66 20 4f | ions.among.them..Advantages.of.O |
29cc0 | 70 65 6e 56 50 4e 20 61 72 65 3a 00 41 64 76 65 72 74 69 73 65 20 44 4e 53 20 73 65 72 76 65 72 | penVPN.are:.Advertise.DNS.server |
29ce0 | 20 70 65 72 20 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c | .per.https://tools.ietf.org/html |
29d00 | 2f 72 66 63 36 31 30 36 00 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 4e 41 54 36 34 20 50 72 65 | /rfc6106.Advertising.a.NAT64.Pre |
29d20 | 66 69 78 00 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 50 72 65 66 69 78 00 41 66 74 65 72 20 63 | fix.Advertising.a.Prefix.After.c |
29d40 | 6f 6d 6d 69 74 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 73 20 77 69 | ommit.the.plaintext.passwords.wi |
29d60 | 6c 6c 20 62 65 20 68 61 73 68 65 64 20 61 6e 64 20 73 74 6f 72 65 64 20 69 6e 20 79 6f 75 72 20 | ll.be.hashed.and.stored.in.your. |
29d80 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 43 4c 49 | configuration..The.resulting.CLI |
29da0 | 20 63 6f 6e 66 69 67 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 41 66 74 65 72 20 63 6f | .config.will.look.like:.After.co |
29dc0 | 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 63 61 | mmitting.the.configuration.we.ca |
29de0 | 6e 20 76 65 72 69 66 79 20 61 6c 6c 20 6c 65 61 6b 65 64 20 72 6f 75 74 65 73 20 61 72 65 20 69 | n.verify.all.leaked.routes.are.i |
29e00 | 6e 73 74 61 6c 6c 65 64 2c 20 61 6e 64 20 74 72 79 20 74 6f 20 49 43 4d 50 20 70 69 6e 67 20 50 | nstalled,.and.try.to.ICMP.ping.P |
29e20 | 43 31 20 66 72 6f 6d 20 50 43 33 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 | C1.from.PC3..After.the.PKI.certs |
29e40 | 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e | .are.all.set.up.we.can.start.con |
29e60 | 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 | figuring.our.IPSec/IKE.proposals |
29e80 | 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 | .used.for.key-exchange.end.data. |
29ea0 | 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 | encryption..The.used.encryption. |
29ec0 | 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 | ciphers.and.integrity.algorithms |
29ee0 | 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f | .vary.from.operating.system.to.o |
29f00 | 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 | perating.system..The.ones.used.i |
29f20 | 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 | n.this.example.are.validated.to. |
29f40 | 77 6f 72 6b 20 6f 6e 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b | work.on.Windows.10..After.the.PK |
29f60 | 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 | I.certs.are.all.set.up.we.can.st |
29f80 | 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 | art.configuring.our.IPSec/IKE.pr |
29fa0 | 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e | oposals.used.for.key-exchange.en |
29fc0 | 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 | d.data.encryption..The.used.encr |
29fe0 | 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 | yption.ciphers.and.integrity.alg |
2a000 | 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 | orithms.vary.from.operating.syst |
2a020 | 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 | em.to.operating.system..The.ones |
2a040 | 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 70 6f 73 74 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 | .used.in.this.post.are.validated |
2a060 | 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 62 6f 74 68 20 57 69 6e 64 6f 77 73 20 31 30 20 61 6e 64 20 | .to.work.on.both.Windows.10.and. |
2a080 | 69 4f 53 2f 69 50 61 64 4f 53 20 31 34 20 74 6f 20 31 37 2e 00 41 66 74 65 72 20 77 65 20 68 61 | iOS/iPadOS.14.to.17..After.we.ha |
2a0a0 | 76 65 20 69 6d 70 6f 72 74 65 64 20 74 68 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 28 73 | ve.imported.the.CA.certificate(s |
2a0c0 | 29 20 77 65 20 63 61 6e 20 6e 6f 77 20 69 6d 70 6f 72 74 20 61 6e 64 20 61 64 64 20 63 65 72 74 | ).we.can.now.import.and.add.cert |
2a0e0 | 69 66 69 63 61 74 65 73 20 75 73 65 64 20 62 79 20 73 65 72 76 69 63 65 73 20 6f 6e 20 74 68 69 | ificates.used.by.services.on.thi |
2a100 | 73 20 72 6f 75 74 65 72 2e 00 41 66 74 65 72 20 79 6f 75 20 6f 62 74 61 69 6e 65 64 20 79 6f 75 | s.router..After.you.obtained.you |
2a120 | 72 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 63 61 6e 20 69 6d 70 | r.server.certificate.you.can.imp |
2a140 | 6f 72 74 20 69 74 20 66 72 6f 6d 20 61 20 66 69 6c 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 | ort.it.from.a.file.on.the.local. |
2a160 | 66 69 6c 65 73 79 73 74 65 6d 2c 20 6f 72 20 70 61 73 74 65 20 69 74 20 69 6e 74 6f 20 74 68 65 | filesystem,.or.paste.it.into.the |
2a180 | 20 43 4c 49 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 65 6e 74 65 | .CLI..Please.note.that.when.ente |
2a1a0 | 72 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6d 61 6e 75 61 6c 6c 79 20 79 6f | ring.the.certificate.manually.yo |
2a1c0 | 75 20 6e 65 65 64 20 74 6f 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e | u.need.to.strip.the.``-----BEGIN |
2a1e0 | 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d | .KEY-----``.and.``-----END.KEY-- |
2a200 | 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 | ---``.tags..Also,.the.certificat |
2a220 | 65 20 6f 72 20 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 | e.or.key.needs.to.be.presented.i |
2a240 | 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 | n.a.single.line.without.line.bre |
2a260 | 61 6b 73 20 28 60 60 5c 6e 60 60 29 2e 00 41 67 65 6e 74 20 2d 20 73 6f 66 74 77 61 72 65 20 77 | aks.(``\n``)..Agent.-.software.w |
2a280 | 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 41 6c 65 | hich.runs.on.managed.devices.Ale |
2a2a0 | 72 74 00 41 6c 67 6f 72 69 74 68 6d 00 41 6c 69 61 73 65 73 00 41 6c 6c 20 44 4e 53 20 72 65 71 | rt.Algorithm.Aliases.All.DNS.req |
2a2c0 | 75 65 73 74 73 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 6d 75 73 74 20 62 65 20 66 6f | uests.for.example.com.must.be.fo |
2a2e0 | 72 77 61 72 64 65 64 20 74 6f 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 61 74 20 31 39 32 2e 30 | rwarded.to.a.DNS.server.at.192.0 |
2a300 | 2e 32 2e 32 35 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 63 61 66 65 3a 3a 31 00 41 6c 6c 20 | .2.254.and.2001:db8:cafe::1.All. |
2a320 | 53 4e 4d 50 20 4d 49 42 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 65 61 63 68 20 69 6d | SNMP.MIBs.are.located.in.each.im |
2a340 | 61 67 65 20 6f 66 20 56 79 4f 53 20 68 65 72 65 3a 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 73 | age.of.VyOS.here:.``/usr/share/s |
2a360 | 6e 6d 70 2f 6d 69 62 73 2f 60 60 00 41 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 57 57 41 4e 20 63 | nmp/mibs/``.All.available.WWAN.c |
2a380 | 61 72 64 73 20 68 61 76 65 20 61 20 62 75 69 6c 64 20 69 6e 2c 20 72 65 70 72 6f 67 72 61 6d 6d | ards.have.a.build.in,.reprogramm |
2a3a0 | 61 62 6c 65 20 66 69 72 6d 77 61 72 65 2e 20 4d 6f 73 74 20 6f 66 20 74 68 65 20 76 65 6e 64 6f | able.firmware..Most.of.the.vendo |
2a3c0 | 72 73 20 70 72 6f 76 69 64 65 20 61 20 72 65 67 75 6c 61 72 20 75 70 64 61 74 65 20 74 6f 20 74 | rs.provide.a.regular.update.to.t |
2a3e0 | 68 65 20 66 69 72 6d 77 61 72 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 62 61 73 65 62 61 6e 64 | he.firmware.used.in.the.baseband |
2a400 | 20 63 68 69 70 2e 00 41 6c 6c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 73 68 6f 75 6c 64 20 62 | .chip..All.certificates.should.b |
2a420 | 65 20 73 74 6f 72 65 64 20 6f 6e 20 56 79 4f 53 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 | e.stored.on.VyOS.under.``/config |
2a440 | 2f 61 75 74 68 60 60 2e 20 49 66 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 74 | /auth``..If.certificates.are.not |
2a460 | 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 64 69 72 65 63 | .stored.in.the.``/config``.direc |
2a480 | 74 6f 72 79 20 74 68 65 79 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 69 67 72 61 74 65 64 20 64 | tory.they.will.not.be.migrated.d |
2a4a0 | 75 72 69 6e 67 20 61 20 73 6f 66 74 77 61 72 65 20 75 70 64 61 74 65 2e 00 41 6c 6c 20 66 61 63 | uring.a.software.update..All.fac |
2a4c0 | 69 6c 69 74 69 65 73 00 41 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 75 73 65 64 20 66 6f 72 20 | ilities.All.interfaces.used.for. |
2a4e0 | 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | the.DHCP.relay.must.be.configure |
2a500 | 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 75 70 6c 69 6e 6b 20 74 6f 20 74 | d..This.includes.the.uplink.to.t |
2a520 | 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6c 6c 20 69 74 65 6d 73 20 69 6e 20 61 20 73 | he.DHCP.server..All.items.in.a.s |
2a540 | 79 6e 63 20 67 72 6f 75 70 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 6c 79 20 63 6f | ync.group.should.be.similarly.co |
2a560 | 6e 66 69 67 75 72 65 64 2e 20 49 66 20 6f 6e 65 20 56 52 52 50 20 67 72 6f 75 70 20 69 73 20 73 | nfigured..If.one.VRRP.group.is.s |
2a580 | 65 74 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 65 6d 70 74 69 6f 6e 20 64 65 6c | et.to.a.different.preemption.del |
2a5a0 | 61 79 20 6f 72 20 70 72 69 6f 72 69 74 79 2c 20 69 74 20 77 6f 75 6c 64 20 72 65 73 75 6c 74 20 | ay.or.priority,.it.would.result. |
2a5c0 | 69 6e 20 61 6e 20 65 6e 64 6c 65 73 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 6c 6f 6f 70 2e 00 41 | in.an.endless.transition.loop..A |
2a5e0 | 6c 6c 20 6f 74 68 65 72 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 66 6f | ll.other.DNS.requests.will.be.fo |
2a600 | 72 77 61 72 64 65 64 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 20 6f 66 20 44 4e | rwarded.to.a.different.set.of.DN |
2a620 | 53 20 73 65 72 76 65 72 73 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 2c 20 31 39 32 2e 30 2e 32 2e | S.servers.at.192.0.2.1,.192.0.2. |
2a640 | 32 2c 20 32 30 30 31 3a 64 62 38 3a 3a 31 3a 66 66 66 66 20 61 6e 64 20 32 30 30 31 3a 64 62 38 | 2,.2001:db8::1:ffff.and.2001:db8 |
2a660 | 3a 3a 32 3a 66 66 66 66 00 41 6c 6c 20 72 65 70 6c 79 20 73 69 7a 65 73 20 61 72 65 20 61 63 63 | ::2:ffff.All.reply.sizes.are.acc |
2a680 | 65 70 74 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 41 6c 6c 20 72 6f 75 74 65 72 73 20 69 6e | epted.by.default..All.routers.in |
2a6a0 | 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 61 67 72 65 65 20 6f 6e 20 74 | .the.PIM.network.must.agree.on.t |
2a6c0 | 68 65 73 65 20 76 61 6c 75 65 73 2e 00 41 6c 6c 20 73 63 72 69 70 74 73 20 65 78 63 65 63 75 74 | hese.values..All.scripts.excecut |
2a6e0 | 65 64 20 74 68 69 73 20 77 61 79 20 61 72 65 20 65 78 65 63 75 74 65 64 20 61 73 20 72 6f 6f 74 | ed.this.way.are.executed.as.root |
2a700 | 20 75 73 65 72 20 2d 20 74 68 69 73 20 6d 61 79 20 62 65 20 64 61 6e 67 65 72 6f 75 73 2e 20 54 | .user.-.this.may.be.dangerous..T |
2a720 | 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 | ogether.with.:ref:`command-scrip |
2a740 | 74 69 6e 67 60 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 6f 6d | ting`.this.can.be.used.for.autom |
2a760 | 61 74 69 6e 67 20 28 72 65 2d 29 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 41 6c 6c 20 74 68 | ating.(re-)configuration..All.th |
2a780 | 65 73 65 20 72 75 6c 65 73 20 77 69 74 68 20 4f 54 43 20 77 69 6c 6c 20 68 65 6c 70 20 74 6f 20 | ese.rules.with.OTC.will.help.to. |
2a7a0 | 64 65 74 65 63 74 20 61 6e 64 20 6d 69 74 69 67 61 74 65 20 72 6f 75 74 65 20 6c 65 61 6b 73 20 | detect.and.mitigate.route.leaks. |
2a7c0 | 61 6e 64 20 68 61 70 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6c 6f 63 61 | and.happen.automatically.if.loca |
2a7e0 | 6c 2d 72 6f 6c 65 20 69 73 20 73 65 74 2e 00 41 6c 6c 20 74 68 6f 73 65 20 70 72 6f 74 6f 63 6f | l-role.is.set..All.those.protoco |
2a800 | 6c 73 20 61 72 65 20 67 72 6f 75 70 65 64 20 75 6e 64 65 72 20 60 60 69 6e 74 65 72 66 61 63 65 | ls.are.grouped.under.``interface |
2a820 | 73 20 74 75 6e 6e 65 6c 60 60 20 69 6e 20 56 79 4f 53 2e 20 4c 65 74 27 73 20 74 61 6b 65 20 61 | s.tunnel``.in.VyOS..Let's.take.a |
2a840 | 20 63 6c 6f 73 65 72 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e | .closer.look.at.the.protocols.an |
2a860 | 64 20 6f 70 74 69 6f 6e 73 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 20 62 79 | d.options.currently.supported.by |
2a880 | 20 56 79 4f 53 2e 00 41 6c 6c 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 73 | .VyOS..All.traffic.between.zones |
2a8a0 | 20 69 73 20 61 66 66 65 63 74 65 64 20 62 79 20 65 78 69 73 74 69 6e 67 20 70 6f 6c 69 63 69 65 | .is.affected.by.existing.policie |
2a8c0 | 73 00 41 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 64 20 66 72 6f 6d 20 61 6e 20 69 6e 74 | s.All.traffic.to.and.from.an.int |
2a8e0 | 65 72 66 61 63 65 20 77 69 74 68 69 6e 20 61 20 7a 6f 6e 65 20 69 73 20 70 65 72 6d 69 74 74 65 | erface.within.a.zone.is.permitte |
2a900 | 64 2e 00 41 6c 6c 20 74 75 6e 6e 65 6c 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 | d..All.tunnel.sessions.can.be.ch |
2a920 | 65 63 6b 65 64 20 76 69 61 3a 00 41 6c 6c 6f 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 73 20 69 70 | ecked.via:.Allocation.clients.ip |
2a940 | 20 61 64 64 72 65 73 73 65 73 20 62 79 20 52 41 44 49 55 53 00 41 6c 6c 6f 77 20 60 60 73 73 68 | .addresses.by.RADIUS.Allow.``ssh |
2a960 | 60 60 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 41 6c 6c 6f 77 20 61 63 63 | ``.dynamic-protection..Allow.acc |
2a980 | 65 73 73 20 74 6f 20 73 69 74 65 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e 20 77 69 74 68 6f 75 74 | ess.to.sites.in.a.domain.without |
2a9a0 | 20 72 65 74 72 69 65 76 69 6e 67 20 74 68 65 6d 20 66 72 6f 6d 20 74 68 65 20 50 72 6f 78 79 20 | .retrieving.them.from.the.Proxy. |
2a9c0 | 63 61 63 68 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c | cache..Specifying."vyos.net".wil |
2a9e0 | 6c 20 61 6c 6c 6f 77 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 74 20 62 75 74 20 74 | l.allow.access.to.vyos.net.but.t |
2aa00 | 68 65 20 70 61 67 65 73 20 61 63 63 65 73 73 65 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 61 | he.pages.accessed.will.not.be.ca |
2aa20 | 63 68 65 64 2e 20 49 74 20 75 73 65 66 75 6c 20 66 6f 72 20 77 6f 72 6b 69 6e 67 20 61 72 6f 75 | ched..It.useful.for.working.arou |
2aa40 | 6e 64 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 | nd.problems.with."If-Modified-Si |
2aa60 | 6e 63 65 22 20 63 68 65 63 6b 69 6e 67 20 61 74 20 63 65 72 74 61 69 6e 20 73 69 74 65 73 2e 00 | nce".checking.at.certain.sites.. |
2aa80 | 41 6c 6c 6f 77 20 62 67 70 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 65 78 74 65 6e | Allow.bgp.to.negotiate.the.exten |
2aaa0 | 64 65 64 2d 6e 65 78 74 68 6f 70 20 63 61 70 61 62 69 6c 69 74 79 20 77 69 74 68 20 69 74 e2 80 | ded-nexthop.capability.with.it.. |
2aac0 | 99 73 20 70 65 65 72 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 | .s.peer..If.you.are.peering.over |
2aae0 | 20 61 20 49 50 76 36 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 74 68 65 6e 20 | .a.IPv6.Link-Local.address.then. |
2ab00 | 74 68 69 73 20 63 61 70 61 62 69 6c 69 74 79 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 61 75 74 | this.capability.is.turned.on.aut |
2ab20 | 6f 6d 61 74 69 63 61 6c 6c 79 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f | omatically..If.you.are.peering.o |
2ab40 | 76 65 72 20 61 20 49 50 76 36 20 47 6c 6f 62 61 6c 20 41 64 64 72 65 73 73 20 74 68 65 6e 20 74 | ver.a.IPv6.Global.Address.then.t |
2ab60 | 75 72 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 61 6c 6c 6f | urning.on.this.command.will.allo |
2ab80 | 77 20 42 47 50 20 74 6f 20 69 6e 73 74 61 6c 6c 20 49 50 76 34 20 72 6f 75 74 65 73 20 77 69 74 | w.BGP.to.install.IPv4.routes.wit |
2aba0 | 68 20 49 50 76 36 20 6e 65 78 74 68 6f 70 73 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 | h.IPv6.nexthops.if.you.do.not.ha |
2abc0 | 76 65 20 49 50 76 34 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 | ve.IPv4.configured.on.interfaces |
2abe0 | 2e 00 41 6c 6c 6f 77 20 65 78 70 6c 69 63 69 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f | ..Allow.explicit.IPv6.address.fo |
2ac00 | 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 41 6c 6c 6f 77 20 68 6f 73 74 20 6e 65 74 77 | r.the.interface..Allow.host.netw |
2ac20 | 6f 72 6b 69 6e 67 20 69 6e 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 20 54 68 65 20 6e 65 74 77 6f | orking.in.a.container..The.netwo |
2ac40 | 72 6b 20 73 74 61 63 6b 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 6e 6f 74 | rk.stack.of.the.container.is.not |
2ac60 | 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 61 6e 64 20 77 69 6c 6c | .isolated.from.the.host.and.will |
2ac80 | 20 75 73 65 20 74 68 65 20 68 6f 73 74 20 49 50 2e 00 41 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 | .use.the.host.IP..Allow.listing. |
2aca0 | 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 73 20 74 6f 20 62 65 20 | additional.custom.domains.to.be. |
2acc0 | 62 72 6f 77 73 65 64 20 28 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 | browsed.(in.addition.to.the.defa |
2ace0 | 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 29 20 73 6f 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 | ult.``local``).so.that.they.can. |
2ad00 | 62 65 20 72 65 66 6c 65 63 74 65 64 2e 00 41 6c 6c 6f 77 20 74 68 69 73 20 42 46 44 20 70 65 65 | be.reflected..Allow.this.BFD.pee |
2ad20 | 72 20 74 6f 20 6e 6f 74 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 00 41 | r.to.not.be.directly.connected.A |
2ad40 | 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 53 | llowed.values.fpr.TCP.flags:.``S |
2ad60 | 59 4e 60 60 2c 20 60 60 41 43 4b 60 60 2c 20 60 60 46 49 4e 60 60 2c 20 60 60 52 53 54 60 60 2c | YN``,.``ACK``,.``FIN``,.``RST``, |
2ad80 | 20 60 60 55 52 47 60 60 2c 20 60 60 50 53 48 60 60 2c 20 60 60 41 4c 4c 60 60 20 57 68 65 6e 20 | .``URG``,.``PSH``,.``ALL``.When. |
2ada0 | 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 | specifying.more.than.one.flag,.f |
2adc0 | 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 2e 20 | lags.should.be.comma.separated.. |
2ade0 | 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 | The.``!``.negate.the.selected.pr |
2ae00 | 6f 74 6f 63 6f 6c 2e 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 | otocol..Allowed.values.fpr.TCP.f |
2ae20 | 6c 61 67 73 3a 20 60 60 61 63 6b 60 60 2c 20 60 60 63 77 72 60 60 2c 20 60 60 65 63 6e 60 60 2c | lags:.``ack``,.``cwr``,.``ecn``, |
2ae40 | 20 60 60 66 69 6e 60 60 2c 20 60 60 70 73 68 60 60 2c 20 60 60 72 73 74 60 60 2c 20 60 60 73 79 | .``fin``,.``psh``,.``rst``,.``sy |
2ae60 | 6e 60 60 20 61 6e 64 20 60 60 75 72 67 60 60 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 | n``.and.``urg``..Multiple.values |
2ae80 | 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2c 20 61 6e 64 20 66 6f 72 20 69 6e 76 65 72 74 65 64 | .are.supported,.and.for.inverted |
2aea0 | 20 73 65 6c 65 63 74 69 6f 6e 20 75 73 65 20 60 60 6e 6f 74 60 60 2c 20 61 73 20 73 68 6f 77 6e | .selection.use.``not``,.as.shown |
2aec0 | 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 41 6c 6c 6f 77 73 20 73 70 65 63 69 66 69 63 | .in.the.example..Allows.specific |
2aee0 | 20 56 4c 41 4e 20 49 44 73 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 | .VLAN.IDs.to.pass.through.the.br |
2af00 | 69 64 67 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 61 6e 20 | idge.member.interface..This.can. |
2af20 | 65 69 74 68 65 72 20 62 65 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 56 4c 41 4e 20 69 64 20 | either.be.an.individual.VLAN.id. |
2af40 | 6f 72 20 61 20 72 61 6e 67 65 20 6f 66 20 56 4c 41 4e 20 69 64 73 20 64 65 6c 69 6d 69 74 65 64 | or.a.range.of.VLAN.ids.delimited |
2af60 | 20 62 79 20 61 20 68 79 70 68 65 6e 2e 00 41 6c 6c 6f 77 73 20 74 6f 20 64 65 66 69 6e 65 20 55 | .by.a.hyphen..Allows.to.define.U |
2af80 | 52 4c 20 70 61 74 68 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 61 20 73 70 65 | RL.path.matching.rules.for.a.spe |
2afa0 | 63 69 66 69 63 20 73 65 72 76 69 63 65 2e 00 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e | cific.service..Allows.you.to.con |
2afc0 | 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f | figure.the.next-hop.interface.fo |
2afe0 | 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 | r.an.interface-based.IPv4.static |
2b000 | 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 | .route..`<interface>`.will.be.th |
2b020 | 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 | e.next-hop.interface.where.traff |
2b040 | 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 | ic.is.routed.for.the.given.`<sub |
2b060 | 6e 65 74 3e 60 2e 00 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | net>`..Allows.you.to.configure.t |
2b080 | 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 | he.next-hop.interface.for.an.int |
2b0a0 | 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 | erface-based.IPv6.static.route.. |
2b0c0 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 | `<interface>`.will.be.the.next-h |
2b0e0 | 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f | op.interface.where.traffic.is.ro |
2b100 | 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 | uted.for.the.given.`<subnet>`..A |
2b120 | 6c 72 65 61 64 79 20 6c 65 61 72 6e 65 64 20 6b 6e 6f 77 6e 5f 68 6f 73 74 73 20 66 69 6c 65 73 | lready.learned.known_hosts.files |
2b140 | 20 6f 66 20 63 6c 69 65 6e 74 73 20 6e 65 65 64 20 61 6e 20 75 70 64 61 74 65 20 61 73 20 74 68 | .of.clients.need.an.update.as.th |
2b160 | 65 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 63 68 61 6e 67 65 2e 00 41 6c 73 6f 2c 20 | e.public.key.will.change..Also,. |
2b180 | 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 69 73 20 61 6e 20 61 63 74 69 6f 6e 20 | **default-action**.is.an.action. |
2b1a0 | 74 68 61 74 20 74 61 6b 65 73 20 70 6c 61 63 65 20 77 68 65 6e 65 76 65 72 20 61 20 70 61 63 6b | that.takes.place.whenever.a.pack |
2b1c0 | 65 74 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 6c 65 20 69 6e 20 69 74 | et.does.not.match.any.rule.in.it |
2b1e0 | 27 73 20 63 68 61 69 6e 2e 20 46 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 70 6f 73 73 69 | 's.chain..For.base.chains,.possi |
2b200 | 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e | ble.options.for.**default-action |
2b220 | 2a 2a 20 61 72 65 20 2a 2a 61 63 63 65 70 74 2a 2a 20 6f 72 20 2a 2a 64 72 6f 70 2a 2a 2e 00 41 | **.are.**accept**.or.**drop**..A |
2b240 | 6c 73 6f 2c 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 | lso,.for.backwards.compatibility |
2b260 | 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 75 73 65 73 20 | .this.configuration,.which.uses. |
2b280 | 67 65 6e 65 72 69 63 20 69 6e 74 65 72 66 61 63 65 20 64 65 66 69 6e 69 74 69 6f 6e 2c 20 69 73 | generic.interface.definition,.is |
2b2a0 | 20 73 74 69 6c 6c 20 76 61 6c 69 64 3a 00 41 6c 73 6f 2c 20 66 6f 72 20 74 68 6f 73 65 20 77 68 | .still.valid:.Also,.for.those.wh |
2b2c0 | 6f 20 68 61 76 65 6e 27 74 20 75 70 64 61 74 65 64 20 74 6f 20 6e 65 77 65 72 20 76 65 72 73 69 | o.haven't.updated.to.newer.versi |
2b2e0 | 6f 6e 2c 20 6c 65 67 61 63 79 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 73 74 69 6c | on,.legacy.documentation.is.stil |
2b300 | 6c 20 70 72 65 73 65 6e 74 20 61 6e 64 20 76 61 6c 69 64 20 66 6f 72 20 61 6c 6c 20 73 61 67 69 | l.present.and.valid.for.all.sagi |
2b320 | 74 74 61 20 76 65 72 73 69 6f 6e 20 70 72 69 6f 72 20 74 6f 20 56 79 4f 53 20 31 2e 34 2d 72 6f | tta.version.prior.to.VyOS.1.4-ro |
2b340 | 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 3a 00 41 6c 73 6f 2c 20 69 6e 20 3a 72 65 | lling-202308040557:.Also,.in.:re |
2b360 | 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2c 20 72 65 64 69 72 65 63 74 69 6f 6e | f:`destination-nat`,.redirection |
2b380 | 20 74 6f 20 6c 6f 63 61 6c 68 6f 73 74 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 20 | .to.localhost.is.supported..The. |
2b3a0 | 72 65 64 69 72 65 63 74 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 61 20 73 70 65 63 69 61 6c 20 | redirect.statement.is.a.special. |
2b3c0 | 66 6f 72 6d 20 6f 66 20 64 6e 61 74 20 77 68 69 63 68 20 61 6c 77 61 79 73 20 74 72 61 6e 73 6c | form.of.dnat.which.always.transl |
2b3e0 | 61 74 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 6f 20 | ates.the.destination.address.to. |
2b400 | 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 e2 80 99 73 20 6f 6e 65 2e 00 41 6c 74 65 72 6e 61 74 | the.local.host...s.one..Alternat |
2b420 | 65 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 73 00 41 6c 74 65 72 6e 61 74 65 20 72 6f 75 74 69 | e.Routing.Tables.Alternate.routi |
2b440 | 6e 67 20 74 61 62 6c 65 73 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 70 6f 6c 69 63 79 20 62 | ng.tables.are.used.with.policy.b |
2b460 | 61 73 65 64 20 72 6f 75 74 69 6e 67 20 62 79 20 75 74 69 6c 69 7a 69 6e 67 20 3a 72 65 66 3a 60 | ased.routing.by.utilizing.:ref:` |
2b480 | 76 72 66 60 2e 00 41 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 | vrf`..Alternative.to.multicast,. |
2b4a0 | 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 | the.remote.IPv4.address.of.the.V |
2b4c0 | 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 63 61 6e 20 62 65 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e | XLAN.tunnel.can.be.set.directly. |
2b4e0 | 20 4c 65 74 27 73 20 63 68 61 6e 67 65 20 74 68 65 20 4d 75 6c 74 69 63 61 73 74 20 65 78 61 6d | .Let's.change.the.Multicast.exam |
2b500 | 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 3a 00 41 6c 77 61 79 73 20 65 78 63 6c 75 64 65 20 74 | ple.from.above:.Always.exclude.t |
2b520 | 68 69 73 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 6e 79 20 64 65 66 69 6e 65 64 20 72 61 6e | his.address.from.any.defined.ran |
2b540 | 67 65 2e 20 54 68 69 73 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 61 | ge..This.address.will.never.be.a |
2b560 | 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6e 20 2a | ssigned.by.the.DHCP.server..An.* |
2b580 | 2a 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 | *interface.group**.represents.a. |
2b5a0 | 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6e 20 41 53 20 | collection.of.interfaces..An.AS. |
2b5c0 | 69 73 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 67 72 6f 75 70 20 6f 66 20 6f 6e 65 20 6f 72 20 6d | is.a.connected.group.of.one.or.m |
2b5e0 | 6f 72 65 20 49 50 20 70 72 65 66 69 78 65 73 20 72 75 6e 20 62 79 20 6f 6e 65 20 6f 72 20 6d 6f | ore.IP.prefixes.run.by.one.or.mo |
2b600 | 72 65 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 6f 72 73 20 77 68 69 63 68 20 68 61 73 20 61 | re.network.operators.which.has.a |
2b620 | 20 53 49 4e 47 4c 45 20 61 6e 64 20 43 4c 45 41 52 4c 59 20 44 45 46 49 4e 45 44 20 72 6f 75 74 | .SINGLE.and.CLEARLY.DEFINED.rout |
2b640 | 69 6e 67 20 70 6f 6c 69 63 79 2e 00 41 6e 20 49 50 76 34 20 54 43 50 20 66 69 6c 74 65 72 20 77 | ing.policy..An.IPv4.TCP.filter.w |
2b660 | 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 6e 20 49 | ill.only.match.packets.with.an.I |
2b680 | 50 76 34 20 68 65 61 64 65 72 20 6c 65 6e 67 74 68 20 6f 66 20 32 30 20 62 79 74 65 73 20 28 77 | Pv4.header.length.of.20.bytes.(w |
2b6a0 | 68 69 63 68 20 69 73 20 74 68 65 20 6d 61 6a 6f 72 69 74 79 20 6f 66 20 49 50 76 34 20 70 61 63 | hich.is.the.majority.of.IPv4.pac |
2b6c0 | 6b 65 74 73 20 61 6e 79 77 61 79 29 2e 00 41 6e 20 53 4e 4d 50 2d 6d 61 6e 61 67 65 64 20 6e 65 | kets.anyway)..An.SNMP-managed.ne |
2b6e0 | 74 77 6f 72 6b 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 6b 65 79 20 63 6f 6d 70 | twork.consists.of.three.key.comp |
2b700 | 6f 6e 65 6e 74 73 3a 00 41 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 73 70 65 63 69 66 79 | onents:.An.`<interface>`.specify |
2b720 | 69 6e 67 20 77 68 69 63 68 20 73 6c 61 76 65 20 69 73 20 74 68 65 20 70 72 69 6d 61 72 79 20 64 | ing.which.slave.is.the.primary.d |
2b740 | 65 76 69 63 65 2e 20 54 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 77 69 6c 6c | evice..The.specified.device.will |
2b760 | 20 61 6c 77 61 79 73 20 62 65 20 74 68 65 20 61 63 74 69 76 65 20 73 6c 61 76 65 20 77 68 69 6c | .always.be.the.active.slave.whil |
2b780 | 65 20 69 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 4f 6e 6c 79 20 77 68 65 6e 20 74 68 65 | e.it.is.available..Only.when.the |
2b7a0 | 20 70 72 69 6d 61 72 79 20 69 73 20 6f 66 66 2d 6c 69 6e 65 20 77 69 6c 6c 20 61 6c 74 65 72 6e | .primary.is.off-line.will.altern |
2b7c0 | 61 74 65 20 64 65 76 69 63 65 73 20 62 65 20 75 73 65 64 2e 20 54 68 69 73 20 69 73 20 75 73 65 | ate.devices.be.used..This.is.use |
2b7e0 | 66 75 6c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 69 73 20 70 72 65 66 65 72 72 65 64 20 | ful.when.one.slave.is.preferred. |
2b800 | 6f 76 65 72 20 61 6e 6f 74 68 65 72 2c 20 65 2e 67 2e 2c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 | over.another,.e.g.,.when.one.sla |
2b820 | 76 65 20 68 61 73 20 68 69 67 68 65 72 20 74 68 72 6f 75 67 68 70 75 74 20 74 68 61 6e 20 61 6e | ve.has.higher.throughput.than.an |
2b840 | 6f 74 68 65 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 | other..An.additional.layer.of.sy |
2b860 | 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f | mmetric-key.crypto.can.be.used.o |
2b880 | 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 00 | n.top.of.the.asymmetric.crypto.. |
2b8a0 | 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 | An.additional.layer.of.symmetric |
2b8c0 | 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f | -key.crypto.can.be.used.on.top.o |
2b8e0 | 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 63 6f | f.the.asymmetric.crypto..This.co |
2b900 | 6d 6d 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 73 20 66 6f 72 20 | mmand.automatically.creates.for. |
2b920 | 79 6f 75 20 74 68 65 20 72 65 71 75 69 72 65 64 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | you.the.required.CLI.command.to. |
2b940 | 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 50 53 4b 20 66 6f 72 20 61 20 67 69 76 65 6e 20 70 65 65 | install.this.PSK.for.a.given.pee |
2b960 | 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 | r..An.additional.layer.of.symmet |
2b980 | 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f | ric-key.crypto.can.be.used.on.to |
2b9a0 | 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 | p.of.the.asymmetric.crypto..This |
2b9c0 | 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 41 6e 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 | .is.optional..An.advantage.of.th |
2b9e0 | 69 73 20 73 63 68 65 6d 65 20 69 73 20 74 68 61 74 20 79 6f 75 20 67 65 74 20 61 20 72 65 61 6c | is.scheme.is.that.you.get.a.real |
2ba00 | 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 2c | .interface.with.its.own.address, |
2ba20 | 20 77 68 69 63 68 20 6d 61 6b 65 73 20 69 74 20 65 61 73 69 65 72 20 74 6f 20 73 65 74 75 70 20 | .which.makes.it.easier.to.setup. |
2ba40 | 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 6f 72 20 75 73 65 20 64 79 6e 61 6d 69 63 20 72 6f 75 | static.routes.or.use.dynamic.rou |
2ba60 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f | ting.protocols.without.having.to |
2ba80 | 20 6d 6f 64 69 66 79 20 49 50 73 65 63 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 6f 74 68 65 | .modify.IPsec.policies..The.othe |
2baa0 | 72 20 61 64 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 20 69 74 20 67 72 65 61 74 6c 79 20 73 | r.advantage.is.that.it.greatly.s |
2bac0 | 69 6d 70 6c 69 66 69 65 73 20 72 6f 75 74 65 72 20 74 6f 20 72 6f 75 74 65 72 20 63 6f 6d 6d 75 | implifies.router.to.router.commu |
2bae0 | 6e 69 63 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 20 77 69 | nication,.which.can.be.tricky.wi |
2bb00 | 74 68 20 70 6c 61 69 6e 20 49 50 73 65 63 20 62 65 63 61 75 73 65 20 74 68 65 20 65 78 74 65 72 | th.plain.IPsec.because.the.exter |
2bb20 | 6e 61 6c 20 6f 75 74 67 6f 69 6e 67 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 | nal.outgoing.address.of.the.rout |
2bb40 | 65 72 20 75 73 75 61 6c 6c 79 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 74 68 65 20 49 50 73 | er.usually.doesn't.match.the.IPs |
2bb60 | 65 63 20 70 6f 6c 69 63 79 20 6f 66 20 74 79 70 69 63 61 6c 20 73 69 74 65 2d 74 6f 2d 73 69 74 | ec.policy.of.typical.site-to-sit |
2bb80 | 65 20 73 65 74 75 70 20 61 6e 64 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 73 70 65 63 | e.setup.and.you.need.to.add.spec |
2bba0 | 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 69 74 2c 20 6f 72 20 61 64 6a | ial.configuration.for.it,.or.adj |
2bbc0 | 75 73 74 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 6f 75 74 67 6f | ust.the.source.address.for.outgo |
2bbe0 | 69 6e 67 20 74 72 61 66 66 69 63 20 6f 66 20 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 | ing.traffic.of.your.applications |
2bc00 | 2e 20 47 52 45 2f 49 50 73 65 63 20 68 61 73 20 6e 6f 20 73 75 63 68 20 70 72 6f 62 6c 65 6d 20 | ..GRE/IPsec.has.no.such.problem. |
2bc20 | 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 66 6f | and.is.completely.transparent.fo |
2bc40 | 72 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 41 6e 20 61 67 65 6e 74 20 69 73 20 | r.the.applications..An.agent.is. |
2bc60 | 61 20 6e 65 74 77 6f 72 6b 2d 6d 61 6e 61 67 65 6d 65 6e 74 20 73 6f 66 74 77 61 72 65 20 6d 6f | a.network-management.software.mo |
2bc80 | 64 75 6c 65 20 74 68 61 74 20 72 65 73 69 64 65 73 20 6f 6e 20 61 20 6d 61 6e 61 67 65 64 20 64 | dule.that.resides.on.a.managed.d |
2bca0 | 65 76 69 63 65 2e 20 41 6e 20 61 67 65 6e 74 20 68 61 73 20 6c 6f 63 61 6c 20 6b 6e 6f 77 6c 65 | evice..An.agent.has.local.knowle |
2bcc0 | 64 67 65 20 6f 66 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e | dge.of.management.information.an |
2bce0 | 64 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f | d.translates.that.information.to |
2bd00 | 20 6f 72 20 66 72 6f 6d 20 61 6e 20 53 4e 4d 50 2d 73 70 65 63 69 66 69 63 20 66 6f 72 6d 2e 00 | .or.from.an.SNMP-specific.form.. |
2bd20 | 41 6e 20 61 6c 74 65 72 6e 61 74 65 20 63 6f 6d 6d 61 6e 64 20 63 6f 75 6c 64 20 62 65 20 22 6d | An.alternate.command.could.be."m |
2bd40 | 70 6c 73 2d 74 65 20 6f 6e 22 20 28 54 72 61 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 29 | pls-te.on".(Traffic.Engineering) |
2bd60 | 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 | .An.arbitrary.netmask.can.be.app |
2bd80 | 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d | lied.to.mask.addresses.to.only.m |
2bda0 | 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e | atch.against.a.specific.portion. |
2bdc0 | 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 | .An.arbitrary.netmask.can.be.app |
2bde0 | 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d | lied.to.mask.addresses.to.only.m |
2be00 | 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e | atch.against.a.specific.portion. |
2be20 | 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 | .This.is.particularly.useful.wit |
2be40 | 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c | h.IPv6.and.a.zone-based.firewall |
2be60 | 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 | .as.rules.will.remain.valid.if.t |
2be80 | 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 | he.IPv6.prefix.changes.and.the.h |
2bea0 | 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 | ost.portion.of.systems.IPv6.addr |
2bec0 | 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 | ess.is.static.(for.example,.with |
2bee0 | 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 | .SLAAC.or.`tokenised.IPv6.addres |
2bf00 | 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 | ses.<https://datatracker.ietf.or |
2bf20 | 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 | g/doc/id/draft-chown-6man-tokeni |
2bf40 | 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 | sed-ipv6-identifiers-02.txt>`_). |
2bf60 | 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c | An.arbitrary.netmask.can.be.appl |
2bf80 | 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 | ied.to.mask.addresses.to.only.ma |
2bfa0 | 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 | tch.against.a.specific.portion.. |
2bfc0 | 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 | This.is.particularly.useful.with |
2bfe0 | 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 | .IPv6.and.a.zone-based.firewall. |
2c000 | 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 | as.rules.will.remain.valid.if.th |
2c020 | 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f | e.IPv6.prefix.changes.and.the.ho |
2c040 | 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 | st.portion.of.systems.IPv6.addre |
2c060 | 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 | ss.is.static.(for.example,.with. |
2c080 | 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 | SLAAC.or.`tokenised.IPv6.address |
2c0a0 | 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 | es.<https://datatracker.ietf.org |
2c0c0 | 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 | /doc/id/draft-chown-6man-tokenis |
2c0e0 | 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 2e 00 | ed-ipv6-identifiers-02.txt>`_).. |
2c100 | 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c | An.arbitrary.netmask.can.be.appl |
2c120 | 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 | ied.to.mask.addresses.to.only.ma |
2c140 | 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 | tch.against.a.specific.portion.. |
2c160 | 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 | This.is.particularly.useful.with |
2c180 | 20 49 50 76 36 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 | .IPv6.as.rules.will.remain.valid |
2c1a0 | 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 | .if.the.IPv6.prefix.changes.and. |
2c1c0 | 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 | the.host.portion.of.systems.IPv6 |
2c1e0 | 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c | .address.is.static.(for.example, |
2c200 | 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 | .with.SLAAC.or.`tokenised.IPv6.a |
2c220 | 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 | ddresses.<https://datatracker.ie |
2c240 | 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 | tf.org/doc/id/draft-chown-6man-t |
2c260 | 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 | okenised-ipv6-identifiers-02.txt |
2c280 | 3e 60 5f 29 00 41 6e 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f | >`_).An.basic.introduction.to.zo |
2c2a0 | 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 | ne-based.firewalls.can.be.found. |
2c2c0 | 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 | `here.<https://support.vyos.io/e |
2c2e0 | 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 | n/kb/articles/a-primer-to-zone-b |
2c300 | 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 | ased-firewall>`_,.and.an.example |
2c320 | 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e | .at.:ref:`examples-zone-policy`. |
2c340 | 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 | .An.example.of.a.configuration.t |
2c360 | 68 61 74 20 73 65 6e 64 73 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 6d 65 74 72 69 63 73 20 74 | hat.sends.``telegraf``.metrics.t |
2c380 | 6f 20 72 65 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 20 32 60 60 00 41 6e 20 65 78 61 6d 70 | o.remote.``InfluxDB.2``.An.examp |
2c3a0 | 6c 65 20 6f 66 20 63 72 65 61 74 69 6e 67 20 61 20 56 4c 41 4e 2d 61 77 61 72 65 20 62 72 69 64 | le.of.creating.a.VLAN-aware.brid |
2c3c0 | 67 65 20 69 73 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 | ge.is.as.follows:.An.example.of. |
2c3e0 | 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 74 68 | key.generation:.An.example.of.th |
2c400 | 65 20 64 61 74 61 20 63 61 70 74 75 72 65 64 20 62 79 20 61 20 46 52 45 45 52 41 44 49 55 53 20 | e.data.captured.by.a.FREERADIUS. |
2c420 | 73 65 72 76 65 72 20 77 69 74 68 20 73 71 6c 20 61 63 63 6f 75 6e 74 69 6e 67 3a 00 41 6e 20 65 | server.with.sql.accounting:.An.e |
2c440 | 78 61 6d 70 6c 65 3a 00 41 6e 20 6f 70 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 61 20 71 | xample:.An.option.that.takes.a.q |
2c460 | 75 6f 74 65 64 20 73 74 72 69 6e 67 20 69 73 20 73 65 74 20 62 79 20 72 65 70 6c 61 63 69 6e 67 | uoted.string.is.set.by.replacing |
2c480 | 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 | .all.quote.characters.with.the.s |
2c4a0 | 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 60 20 69 6e 73 69 64 65 20 74 68 65 20 73 74 61 74 | tring.``"``.inside.the.stat |
2c4c0 | 69 63 2d 6d 61 70 70 69 6e 67 2d 70 61 72 61 6d 65 74 65 72 73 20 76 61 6c 75 65 2e 20 54 68 65 | ic-mapping-parameters.value..The |
2c4e0 | 20 72 65 73 75 6c 74 69 6e 67 20 6c 69 6e 65 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 77 69 | .resulting.line.in.dhcpd.conf.wi |
2c500 | 6c 6c 20 62 65 20 60 60 6f 70 74 69 6f 6e 20 70 78 65 6c 69 6e 75 78 2e 63 6f 6e 66 69 67 66 69 | ll.be.``option.pxelinux.configfi |
2c520 | 6c 65 20 22 70 78 65 6c 69 6e 75 78 2e 63 66 67 2f 30 31 2d 30 30 2d 31 35 2d 31 37 2d 34 34 2d | le."pxelinux.cfg/01-00-15-17-44- |
2c540 | 32 64 2d 61 61 22 3b 60 60 2e 00 41 6e 61 6c 79 73 69 73 20 6f 6e 20 77 68 61 74 20 68 61 70 70 | 2d-aa";``..Analysis.on.what.happ |
2c560 | 65 6e 73 20 66 6f 72 20 64 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 41 6e 64 20 | ens.for.desired.connection:.And. |
2c580 | 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 | base.chain.for.traffic.generated |
2c5a0 | 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | .by.the.router.is.``set.firewall |
2c5c0 | 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 62 61 | .ipv4.output.filter....``.And.ba |
2c5e0 | 73 65 20 63 68 61 69 6e 20 66 6f 72 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 | se.chain.for.traffic.generated.b |
2c600 | 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 | y.the.router.is.``set.firewall.i |
2c620 | 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 63 6f 6e 74 | pv6.output.filter....``.And.cont |
2c640 | 65 6e 74 20 6f 66 20 74 68 65 20 73 63 72 69 70 74 3a 00 41 6e 64 20 66 6f 72 20 69 70 76 36 3a | ent.of.the.script:.And.for.ipv6: |
2c660 | 00 41 6e 64 20 6e 65 78 74 2c 20 73 6f 6d 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 | .And.next,.some.configuration.ex |
2c680 | 61 6d 70 6c 65 20 77 68 65 72 65 20 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 3a 00 41 6e 64 | ample.where.groups.are.used:.And |
2c6a0 | 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 3a 00 41 6e 64 20 74 68 65 20 64 69 66 66 65 | .op-mode.commands:.And.the.diffe |
2c6c0 | 72 65 6e 74 20 49 50 76 34 20 2a 2a 72 65 73 65 74 2a 2a 20 63 6f 6d 6d 61 6e 64 73 20 61 76 61 | rent.IPv4.**reset**.commands.ava |
2c6e0 | 69 6c 61 62 6c 65 3a 00 41 6e 64 20 74 68 65 6e 20 68 61 73 68 20 69 73 20 72 65 64 75 63 65 64 | ilable:.And.then.hash.is.reduced |
2c700 | 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 6e 74 2e 00 41 6e 64 2c 20 74 6f 20 70 72 69 | .modulo.slave.count..And,.to.pri |
2c720 | 6e 74 20 6f 6e 6c 79 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 | nt.only.bridge.firewall.informat |
2c740 | 69 6f 6e 3a 00 41 6e 6f 74 68 65 72 20 74 65 72 6d 20 6f 66 74 65 6e 20 75 73 65 64 20 66 6f 72 | ion:.Another.term.often.used.for |
2c760 | 20 44 4e 41 54 20 69 73 20 2a 2a 31 2d 74 6f 2d 31 20 4e 41 54 2a 2a 2e 20 46 6f 72 20 61 20 31 | .DNAT.is.**1-to-1.NAT**..For.a.1 |
2c780 | 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 62 6f 74 68 20 44 4e | -to-1.NAT.configuration,.both.DN |
2c7a0 | 41 54 20 61 6e 64 20 53 4e 41 54 20 61 72 65 20 75 73 65 64 20 74 6f 20 4e 41 54 20 61 6c 6c 20 | AT.and.SNAT.are.used.to.NAT.all. |
2c7c0 | 74 72 61 66 66 69 63 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 | traffic.from.an.external.IP.addr |
2c7e0 | 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e | ess.to.an.internal.IP.address.an |
2c800 | 64 20 76 69 63 65 2d 76 65 72 73 61 2e 00 41 6e 6f 74 68 65 72 20 74 68 69 6e 67 20 74 6f 20 6b | d.vice-versa..Another.thing.to.k |
2c820 | 65 65 70 20 69 6e 20 6d 69 6e 64 20 77 69 74 68 20 4c 44 50 20 69 73 20 74 68 61 74 20 6d 75 63 | eep.in.mind.with.LDP.is.that.muc |
2c840 | 68 20 6c 69 6b 65 20 42 47 50 2c 20 69 74 20 69 73 20 61 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 | h.like.BGP,.it.is.a.protocol.tha |
2c860 | 74 20 72 75 6e 73 20 6f 6e 20 74 6f 70 20 6f 66 20 54 43 50 2e 20 49 74 20 68 6f 77 65 76 65 72 | t.runs.on.top.of.TCP..It.however |
2c880 | 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 20 61 62 69 6c 69 74 79 20 74 6f 20 64 6f 20 | .does.not.have.an.ability.to.do. |
2c8a0 | 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 61 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c | something.like.a.refresh.capabil |
2c8c0 | 69 74 79 20 6c 69 6b 65 20 42 47 50 73 20 72 6f 75 74 65 20 72 65 66 72 65 73 68 20 63 61 70 61 | ity.like.BGPs.route.refresh.capa |
2c8e0 | 62 69 6c 69 74 79 2e 20 54 68 65 72 65 66 6f 72 65 20 6f 6e 65 20 6d 69 67 68 74 20 68 61 76 65 | bility..Therefore.one.might.have |
2c900 | 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 61 20 63 61 70 | .to.reset.the.neighbor.for.a.cap |
2c920 | 61 62 69 6c 69 74 79 20 63 68 61 6e 67 65 20 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | ability.change.or.a.configuratio |
2c940 | 6e 20 63 68 61 6e 67 65 20 74 6f 20 77 6f 72 6b 2e 00 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 | n.change.to.work..Apple.iOS/iPad |
2c960 | 4f 53 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 | OS.expects.the.server.name.to.be |
2c980 | 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 | .also.used.in.the.server's.certi |
2c9a0 | 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 | ficate.common.name,.so.it's.best |
2c9c0 | 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 | .to.use.this.DNS.name.for.your.V |
2c9e0 | 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 | PN.connection..Apply.a.route-map |
2ca00 | 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 | .filter.to.routes.for.the.specif |
2ca20 | 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 | ied.protocol..Apply.a.route-map. |
2ca40 | 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 | filter.to.routes.for.the.specifi |
2ca60 | 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f | ed.protocol..The.following.proto |
2ca80 | 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 | cols.can.be.used:.any,.babel,.bg |
2caa0 | 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 | p,.connected,.eigrp,.isis,.kerne |
2cac0 | 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c | l,.ospf,.rip,.static,.table.Appl |
2cae0 | 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 | y.a.route-map.filter.to.routes.f |
2cb00 | 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 | or.the.specified.protocol..The.f |
2cb20 | 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 | ollowing.protocols.can.be.used:. |
2cb40 | 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 | any,.babel,.bgp,.connected,.isis |
2cb60 | 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c | ,.kernel,.ospfv3,.ripng,.static, |
2cb80 | 20 74 61 62 6c 65 00 41 70 70 6c 79 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 2a | .table.Apply.routing.policy.to.* |
2cba0 | 2a 69 6e 62 6f 75 6e 64 2a 2a 20 64 69 72 65 63 74 69 6f 6e 20 6f 66 20 6f 75 74 20 56 4c 41 4e | *inbound**.direction.of.out.VLAN |
2cbc0 | 20 69 6e 74 65 72 66 61 63 65 73 00 41 70 70 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 | .interfaces.Applying.a.Rule-Set. |
2cbe0 | 74 6f 20 61 20 5a 6f 6e 65 00 41 70 70 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f | to.a.Zone.Applying.a.Rule-Set.to |
2cc00 | 20 61 6e 20 49 6e 74 65 72 66 61 63 65 00 41 70 70 6c 79 69 6e 67 20 61 20 74 72 61 66 66 69 63 | .an.Interface.Applying.a.traffic |
2cc20 | 20 70 6f 6c 69 63 79 00 41 72 65 61 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 41 72 65 61 20 | .policy.Area.Configuration.Area. |
2cc40 | 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 30 30 30 31 60 60 20 49 53 2d 49 53 20 61 72 65 61 20 | identifier:.``0001``.IS-IS.area. |
2cc60 | 6e 75 6d 62 65 72 20 28 6e 75 6d 62 65 72 69 63 61 6c 20 61 72 65 61 20 60 60 31 60 60 29 00 41 | number.(numberical.area.``1``).A |
2cc80 | 72 67 75 6d 65 6e 74 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 70 61 73 73 65 64 20 74 6f | rguments.which.will.be.passed.to |
2cca0 | 20 74 68 65 20 65 78 65 63 75 74 61 62 6c 65 2e 00 41 72 69 73 74 61 20 45 4f 53 00 41 72 75 62 | .the.executable..Arista.EOS.Arub |
2ccc0 | 61 2f 48 50 00 41 73 20 49 6e 74 65 72 6e 65 74 20 77 69 64 65 20 50 4d 54 55 20 64 69 73 63 6f | a/HP.As.Internet.wide.PMTU.disco |
2cce0 | 76 65 72 79 20 72 61 72 65 6c 79 20 77 6f 72 6b 73 2c 20 77 65 20 73 6f 6d 65 74 69 6d 65 73 20 | very.rarely.works,.we.sometimes. |
2cd00 | 6e 65 65 64 20 74 6f 20 63 6c 61 6d 70 20 6f 75 72 20 54 43 50 20 4d 53 53 20 76 61 6c 75 65 20 | need.to.clamp.our.TCP.MSS.value. |
2cd20 | 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 61 6c 75 65 2e 20 54 68 69 73 20 69 73 20 61 20 66 | to.a.specific.value..This.is.a.f |
2cd40 | 69 65 6c 64 20 69 6e 20 74 68 65 20 54 43 50 20 6f 70 74 69 6f 6e 73 20 70 61 72 74 20 6f 66 20 | ield.in.the.TCP.options.part.of. |
2cd60 | 61 20 53 59 4e 20 70 61 63 6b 65 74 2e 20 42 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 4d 53 53 | a.SYN.packet..By.setting.the.MSS |
2cd80 | 20 76 61 6c 75 65 2c 20 79 6f 75 20 61 72 65 20 74 65 6c 6c 69 6e 67 20 74 68 65 20 72 65 6d 6f | .value,.you.are.telling.the.remo |
2cda0 | 74 65 20 73 69 64 65 20 75 6e 65 71 75 69 76 6f 63 61 6c 6c 79 20 27 64 6f 20 6e 6f 74 20 74 72 | te.side.unequivocally.'do.not.tr |
2cdc0 | 79 20 74 6f 20 73 65 6e 64 20 6d 65 20 70 61 63 6b 65 74 73 20 62 69 67 67 65 72 20 74 68 61 6e | y.to.send.me.packets.bigger.than |
2cde0 | 20 74 68 69 73 20 76 61 6c 75 65 27 2e 00 41 73 20 53 53 54 50 20 70 72 6f 76 69 64 65 73 20 50 | .this.value'..As.SSTP.provides.P |
2ce00 | 50 50 20 76 69 61 20 61 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 20 74 68 65 20 75 73 65 | PP.via.a.SSL/TLS.channel.the.use |
2ce20 | 20 6f 66 20 65 69 74 68 65 72 20 70 75 62 6c 69 63 61 6c 6c 79 20 73 69 67 6e 65 64 20 63 65 72 | .of.either.publically.signed.cer |
2ce40 | 74 69 66 69 63 61 74 65 73 20 61 73 20 77 65 6c 6c 20 61 73 20 61 20 70 72 69 76 61 74 65 20 50 | tificates.as.well.as.a.private.P |
2ce60 | 4b 49 20 69 73 20 72 65 71 75 69 72 65 64 2e 00 41 73 20 56 79 4f 53 20 69 73 20 4c 69 6e 75 78 | KI.is.required..As.VyOS.is.Linux |
2ce80 | 20 62 61 73 65 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 69 73 20 | .based.the.default.port.used.is. |
2cea0 | 6e 6f 74 20 75 73 69 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 | not.using.4789.as.the.default.IA |
2cec0 | 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 | NA-assigned.destination.UDP.port |
2cee0 | 20 6e 75 6d 62 65 72 2e 20 49 6e 73 74 65 61 64 20 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 4c | .number..Instead.VyOS.uses.the.L |
2cf00 | 69 6e 75 78 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 00 41 73 20 56 79 | inux.default.port.of.8472..As.Vy |
2cf20 | 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 61 6e 64 20 74 68 65 72 65 20 77 | OS.is.based.on.Linux.and.there.w |
2cf40 | 61 73 20 6e 6f 20 6f 66 66 69 63 69 61 6c 20 49 41 4e 41 20 70 6f 72 74 20 61 73 73 69 67 6e 65 | as.no.official.IANA.port.assigne |
2cf60 | 64 20 66 6f 72 20 56 58 4c 41 4e 2c 20 56 79 4f 53 20 75 73 65 73 20 61 20 64 65 66 61 75 6c 74 | d.for.VXLAN,.VyOS.uses.a.default |
2cf80 | 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 | .port.of.8472..You.can.change.th |
2cfa0 | 65 20 70 6f 72 74 20 6f 6e 20 61 20 70 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 | e.port.on.a.per.VXLAN.interface. |
2cfc0 | 62 61 73 69 73 20 74 6f 20 67 65 74 20 69 74 20 77 6f 72 6b 69 6e 67 20 61 63 72 6f 73 73 20 6d | basis.to.get.it.working.across.m |
2cfe0 | 75 6c 74 69 70 6c 65 20 76 65 6e 64 6f 72 73 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 | ultiple.vendors..As.VyOS.is.base |
2d000 | 64 20 6f 6e 20 4c 69 6e 75 78 20 69 74 20 6c 65 76 65 72 61 67 65 73 20 69 74 73 20 66 69 72 65 | d.on.Linux.it.leverages.its.fire |
2d020 | 77 61 6c 6c 2e 20 54 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 | wall..The.Netfilter.project.crea |
2d040 | 74 65 64 20 69 70 74 61 62 6c 65 73 20 61 6e 64 20 69 74 73 20 73 75 63 63 65 73 73 6f 72 20 6e | ted.iptables.and.its.successor.n |
2d060 | 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 | ftables.for.the.Linux.kernel.to. |
2d080 | 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 64 61 74 61 20 66 6c 6f | work.directly.on.packet.data.flo |
2d0a0 | 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 | ws..This.now.extends.the.concept |
2d0c0 | 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 | .of.zone-based.security.to.allow |
2d0e0 | 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 | .for.manipulating.the.data.at.mu |
2d100 | 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 | ltiple.stages.once.accepted.by.t |
2d120 | 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 | he.network.interface.and.the.dri |
2d140 | 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 | ver.before.being.handed.off.to.t |
2d160 | 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 2c 20 61 20 77 65 62 20 73 65 72 76 | he.destination.(e.g.,.a.web.serv |
2d180 | 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 41 73 20 56 79 4f 53 20 6d | er.OR.another.device)..As.VyOS.m |
2d1a0 | 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 51 4d 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f | akes.use.of.the.QMI.interface.to |
2d1c0 | 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 57 57 41 4e 20 6d 6f 64 65 6d 20 63 61 72 64 73 | .connect.to.the.WWAN.modem.cards |
2d1e0 | 2c 20 61 6c 73 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 63 61 6e 20 62 65 20 72 65 70 72 6f | ,.also.the.firmware.can.be.repro |
2d200 | 67 72 61 6d 6d 65 64 2e 00 41 73 20 61 20 72 65 66 65 72 65 6e 63 65 3a 20 66 6f 72 20 31 30 6d | grammed..As.a.reference:.for.10m |
2d220 | 62 69 74 2f 73 20 6f 6e 20 49 6e 74 65 6c 2c 20 79 6f 75 20 6d 69 67 68 74 20 6e 65 65 64 20 61 | bit/s.on.Intel,.you.might.need.a |
2d240 | 74 20 6c 65 61 73 74 20 31 30 6b 62 79 74 65 20 62 75 66 66 65 72 20 69 66 20 79 6f 75 20 77 61 | t.least.10kbyte.buffer.if.you.wa |
2d260 | 6e 74 20 74 6f 20 72 65 61 63 68 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 65 64 20 72 61 74 65 | nt.to.reach.your.configured.rate |
2d280 | 2e 00 41 73 20 61 20 72 65 73 75 6c 74 2c 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 | ..As.a.result,.the.processing.of |
2d2a0 | 20 65 61 63 68 20 70 61 63 6b 65 74 20 62 65 63 6f 6d 65 73 20 6d 6f 72 65 20 65 66 66 69 63 69 | .each.packet.becomes.more.effici |
2d2c0 | 65 6e 74 2c 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 6c 65 76 65 72 61 67 69 6e 67 20 68 61 72 64 | ent,.potentially.leveraging.hard |
2d2e0 | 77 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 69 6e 67 20 73 75 70 70 6f | ware.encryption.offloading.suppo |
2d300 | 72 74 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 41 73 20 61 | rt.available.in.the.kernel..As.a |
2d320 | 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 61 70 70 6c 79 69 6e 67 20 70 6f 6c 69 63 79 | n.alternative.to.applying.policy |
2d340 | 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 64 69 72 65 63 74 6c 79 2c 20 61 20 7a 6f 6e | .to.an.interface.directly,.a.zon |
2d360 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 | e-based.firewall.can.be.created. |
2d380 | 74 6f 20 73 69 6d 70 6c 69 66 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 6e 20 6d | to.simplify.configuration.when.m |
2d3a0 | 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 | ultiple.interfaces.belong.to.the |
2d3c0 | 20 73 61 6d 65 20 73 65 63 75 72 69 74 79 20 7a 6f 6e 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 | .same.security.zone..Instead.of. |
2d3e0 | 61 70 70 6c 79 69 6e 67 20 72 75 6c 65 2d 73 65 74 73 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 | applying.rule-sets.to.interfaces |
2d400 | 2c 20 74 68 65 79 20 61 72 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 7a 6f 6e | ,.they.are.applied.to.source.zon |
2d420 | 65 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 7a 6f 6e 65 20 70 61 69 72 73 2e 00 41 73 20 62 6f 74 | e-destination.zone.pairs..As.bot |
2d440 | 68 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 41 70 70 6c 65 20 69 4f | h.Microsoft.Windows.and.Apple.iO |
2d460 | 53 2f 69 50 61 64 4f 53 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 61 20 63 65 72 74 61 69 6e 20 | S/iPadOS.only.support.a.certain. |
2d480 | 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e | set.of.encryption.ciphers.and.in |
2d4a0 | 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 77 65 20 77 69 6c 6c 20 76 61 6c 69 64 | tegrity.algorithms.we.will.valid |
2d4c0 | 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 49 4b 45 2f 45 53 50 20 70 72 6f 70 6f | ate.the.configured.IKE/ESP.propo |
2d4e0 | 73 61 6c 73 20 61 6e 64 20 6f 6e 6c 79 20 6c 69 73 74 20 74 68 65 20 63 6f 6d 70 61 74 69 62 6c | sals.and.only.list.the.compatibl |
2d500 | 65 20 6f 6e 65 73 20 74 6f 20 74 68 65 20 75 73 65 72 20 e2 80 94 20 69 66 20 6d 75 6c 74 69 70 | e.ones.to.the.user.....if.multip |
2d520 | 6c 65 20 61 72 65 20 64 65 66 69 6e 65 64 2e 20 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 | le.are.defined..If.there.are.no. |
2d540 | 6d 61 74 63 68 69 6e 67 20 70 72 6f 70 6f 73 61 6c 73 20 66 6f 75 6e 64 20 e2 80 94 20 77 65 20 | matching.proposals.found.....we. |
2d560 | 63 61 6e 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 79 | can.not.generate.a.profile.for.y |
2d580 | 6f 75 2e 00 41 73 20 64 65 73 63 72 69 62 65 64 2c 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 77 | ou..As.described,.first.packet.w |
2d5a0 | 69 6c 6c 20 62 65 20 65 76 61 6c 75 61 74 65 64 20 62 79 20 61 6c 6c 20 74 68 65 20 66 69 72 65 | ill.be.evaluated.by.all.the.fire |
2d5c0 | 77 61 6c 6c 20 70 61 74 68 2c 20 73 6f 20 64 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e | wall.path,.so.desired.connection |
2d5e0 | 20 73 68 6f 75 6c 64 20 62 65 20 65 78 70 6c 69 63 69 74 65 6c 79 20 61 63 63 65 70 74 65 64 2e | .should.be.explicitely.accepted. |
2d600 | 20 53 61 6d 65 20 74 68 69 6e 67 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f | .Same.thing.should.be.taken.into |
2d620 | 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 74 72 61 66 66 69 63 20 69 6e 20 72 65 76 65 72 73 65 20 | .account.for.traffic.in.reverse. |
2d640 | 6f 72 64 65 72 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 73 74 61 74 65 20 70 6f 6c 69 63 | order..In.most.cases.state.polic |
2d660 | 69 65 73 20 61 72 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 63 63 65 70 74 20 | ies.are.used.in.order.to.accept. |
2d680 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 6e 20 72 65 76 65 72 73 65 20 70 61 74 63 68 2e 00 41 73 20 | connection.in.reverse.patch..As. |
2d6a0 | 6d 6f 72 65 20 61 6e 64 20 6d 6f 72 65 20 72 6f 75 74 65 72 73 20 72 75 6e 20 6f 6e 20 48 79 70 | more.and.more.routers.run.on.Hyp |
2d6c0 | 65 72 76 69 73 6f 72 73 2c 20 65 78 70 65 63 69 61 6c 6c 79 20 77 69 74 68 20 61 20 3a 61 62 62 | ervisors,.expecially.with.a.:abb |
2d6e0 | 72 3a 60 4e 4f 53 20 28 4e 65 74 77 6f 72 6b 20 4f 70 65 72 61 74 69 6e 67 20 53 79 73 74 65 6d | r:`NOS.(Network.Operating.System |
2d700 | 29 60 20 61 73 20 56 79 4f 53 2c 20 69 74 20 6d 61 6b 65 73 20 66 65 77 65 72 20 61 6e 64 20 66 | )`.as.VyOS,.it.makes.fewer.and.f |
2d720 | 65 77 65 72 20 73 65 6e 73 65 20 74 6f 20 75 73 65 20 73 74 61 74 69 63 20 72 65 73 6f 75 72 63 | ewer.sense.to.use.static.resourc |
2d740 | 65 20 62 69 6e 64 69 6e 67 73 20 6c 69 6b 65 20 60 60 73 6d 70 2d 61 66 66 69 6e 69 74 79 60 60 | e.bindings.like.``smp-affinity`` |
2d760 | 20 61 73 20 70 72 65 73 65 6e 74 20 69 6e 20 56 79 4f 53 20 31 2e 32 20 61 6e 64 20 65 61 72 6c | .as.present.in.VyOS.1.2.and.earl |
2d780 | 69 65 72 20 74 6f 20 70 69 6e 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e | ier.to.pin.certain.interrupt.han |
2d7a0 | 64 6c 65 72 73 20 74 6f 20 73 70 65 63 69 66 69 63 20 43 50 55 73 2e 00 41 73 20 6e 65 74 77 6f | dlers.to.specific.CPUs..As.netwo |
2d7c0 | 72 6b 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 | rk.address.translation.modifies. |
2d7e0 | 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 70 61 | the.IP.address.information.in.pa |
2d800 | 63 6b 65 74 73 2c 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6d 61 79 20 76 | ckets,.NAT.implementations.may.v |
2d820 | 61 72 79 20 69 6e 20 74 68 65 69 72 20 73 70 65 63 69 66 69 63 20 62 65 68 61 76 69 6f 72 20 69 | ary.in.their.specific.behavior.i |
2d840 | 6e 20 76 61 72 69 6f 75 73 20 61 64 64 72 65 73 73 69 6e 67 20 63 61 73 65 73 20 61 6e 64 20 74 | n.various.addressing.cases.and.t |
2d860 | 68 65 69 72 20 65 66 66 65 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 2e 20 | heir.effect.on.network.traffic.. |
2d880 | 54 68 65 20 73 70 65 63 69 66 69 63 73 20 6f 66 20 4e 41 54 20 62 65 68 61 76 69 6f 72 20 61 72 | The.specifics.of.NAT.behavior.ar |
2d8a0 | 65 20 6e 6f 74 20 63 6f 6d 6d 6f 6e 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 76 65 6e | e.not.commonly.documented.by.ven |
2d8c0 | 64 6f 72 73 20 6f 66 20 65 71 75 69 70 6d 65 6e 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 4e 41 54 | dors.of.equipment.containing.NAT |
2d8e0 | 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 00 41 73 20 6f 66 20 56 79 4f 53 20 31 2e 34 | .implementations..As.of.VyOS.1.4 |
2d900 | 2c 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 63 61 6e 20 | ,.OpenVPN.site-to-site.mode.can. |
2d920 | 75 73 65 20 65 69 74 68 65 72 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 20 6f 72 20 78 2e | use.either.pre-shared.keys.or.x. |
2d940 | 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 | 509.certificates..As.per.default |
2d960 | 20 61 6e 64 20 69 66 20 6e 6f 74 20 6f 74 68 65 72 77 69 73 65 20 64 65 66 69 6e 65 64 2c 20 6d | .and.if.not.otherwise.defined,.m |
2d980 | 73 63 68 61 70 2d 76 32 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 | schap-v2.is.being.used.for.authe |
2d9a0 | 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 6d 70 70 65 20 31 32 38 2d 62 69 74 20 28 73 74 61 74 | ntication.and.mppe.128-bit.(stat |
2d9c0 | 65 6c 65 73 73 29 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 49 66 20 6e 6f 20 67 61 74 | eless).for.encryption..If.no.gat |
2d9e0 | 65 77 61 79 2d 61 64 64 72 65 73 73 20 69 73 20 73 65 74 20 77 69 74 68 69 6e 20 74 68 65 20 63 | eway-address.is.set.within.the.c |
2da00 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 6c 6f 77 65 73 74 20 49 50 20 6f 75 74 20 | onfiguration,.the.lowest.IP.out. |
2da20 | 6f 66 20 74 68 65 20 2f 32 34 20 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f 6c 20 69 73 20 62 65 69 | of.the./24.client-ip-pool.is.bei |
2da40 | 6e 67 20 75 73 65 64 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 69 6e 20 74 68 65 20 65 78 | ng.used..For.instance,.in.the.ex |
2da60 | 61 6d 70 6c 65 20 62 65 6c 6f 77 20 69 74 20 77 6f 75 6c 64 20 62 65 20 31 39 32 2e 31 36 38 2e | ample.below.it.would.be.192.168. |
2da80 | 30 2e 31 2e 00 41 73 20 73 61 69 64 20 62 65 66 6f 72 65 2c 20 6f 6e 63 65 20 66 69 72 65 77 61 | 0.1..As.said.before,.once.firewa |
2daa0 | 6c 6c 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 2c 20 74 68 65 79 20 63 61 6e 20 | ll.groups.are.created,.they.can. |
2dac0 | 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 65 69 74 68 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c | be.referenced.either.in.firewall |
2dae0 | 2c 20 6e 61 74 2c 20 6e 61 74 36 36 20 61 6e 64 2f 6f 72 20 70 6f 6c 69 63 79 2d 72 6f 75 74 65 | ,.nat,.nat66.and/or.policy-route |
2db00 | 20 72 75 6c 65 73 2e 00 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 | .rules..As.shown.in.the.example. |
2db20 | 61 62 6f 76 65 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 | above,.one.of.the.possibilities. |
2db40 | 74 6f 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6d 61 72 | to.match.packets.is.based.on.mar |
2db60 | 6b 73 20 64 6f 6e 65 20 62 79 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2c 20 60 74 68 61 74 20 63 | ks.done.by.the.firewall,.`that.c |
2db80 | 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 66 6c 65 78 | an.give.you.a.great.deal.of.flex |
2dba0 | 69 62 69 6c 69 74 79 60 5f 2e 00 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 | ibility`_..As.shown.in.the.last. |
2dbc0 | 63 6f 6d 6d 61 6e 64 20 6f 66 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 | command.of.the.example.above,.th |
2dbe0 | 65 20 60 71 75 65 75 65 2d 74 79 70 65 60 20 73 65 74 74 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 | e.`queue-type`.setting.allows.th |
2dc00 | 65 73 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 | ese.combinations..You.will.be.ab |
2dc20 | 6c 65 20 74 6f 20 75 73 65 20 69 74 20 69 6e 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 2e 00 41 | le.to.use.it.in.many.policies..A |
2dc40 | 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c | s.the.example.image.below.shows, |
2dc60 | 20 74 68 65 20 64 65 76 69 63 65 20 6e 6f 77 20 6e 65 65 64 73 20 72 75 6c 65 73 20 74 6f 20 61 | .the.device.now.needs.rules.to.a |
2dc80 | 6c 6c 6f 77 2f 62 6c 6f 63 6b 20 74 72 61 66 66 69 63 20 74 6f 20 6f 72 20 66 72 6f 6d 20 74 68 | llow/block.traffic.to.or.from.th |
2dca0 | 65 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 | e.services.running.on.the.device |
2dcc0 | 20 74 68 61 74 20 68 61 76 65 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 74 | .that.have.open.connections.on.t |
2dce0 | 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d | hat.interface..As.the.example.im |
2dd00 | 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 20 77 61 73 20 | age.below.shows,.the.device.was. |
2dd20 | 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 72 75 6c 65 73 20 62 6c 6f 63 6b 69 6e 67 20 69 | configured.with.rules.blocking.i |
2dd40 | 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 61 | nbound.or.outbound.traffic.on.ea |
2dd60 | 63 68 20 69 6e 74 65 72 66 61 63 65 2e 00 41 73 20 74 68 65 20 6e 61 6d 65 20 69 6d 70 6c 69 65 | ch.interface..As.the.name.implie |
2dd80 | 73 2c 20 69 74 27 73 20 49 50 76 34 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 49 50 76 | s,.it's.IPv4.encapsulated.in.IPv |
2dda0 | 36 2c 20 61 73 20 73 69 6d 70 6c 65 20 61 73 20 74 68 61 74 2e 00 41 73 20 77 65 6c 6c 20 61 73 | 6,.as.simple.as.that..As.well.as |
2ddc0 | 20 74 68 65 20 62 65 6c 6f 77 20 74 6f 20 61 6c 6c 6f 77 20 4e 41 54 2d 74 72 61 76 65 72 73 61 | .the.below.to.allow.NAT-traversa |
2dde0 | 6c 20 28 77 68 65 6e 20 4e 41 54 20 69 73 20 64 65 74 65 63 74 65 64 20 62 79 20 74 68 65 20 56 | l.(when.NAT.is.detected.by.the.V |
2de00 | 50 4e 20 63 6c 69 65 6e 74 2c 20 45 53 50 20 69 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 | PN.client,.ESP.is.encapsulated.i |
2de20 | 6e 20 55 44 50 20 66 6f 72 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 29 3a 00 41 73 20 77 69 74 | n.UDP.for.NAT-traversal):.As.wit |
2de40 | 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 63 61 | h.other.policies,.Round-Robin.ca |
2de60 | 6e 20 65 6d 62 65 64 5f 20 61 6e 6f 74 68 65 72 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 | n.embed_.another.policy.into.a.c |
2de80 | 6c 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 | lass.through.the.``queue-type``. |
2dea0 | 73 65 74 74 69 6e 67 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c | setting..As.with.other.policies, |
2dec0 | 20 53 68 61 70 65 72 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 | .Shaper.can.embed_.other.policie |
2dee0 | 73 20 69 6e 74 6f 20 69 74 73 20 63 6c 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 | s.into.its.classes.through.the.` |
2df00 | 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 20 61 6e 64 20 74 68 65 6e 20 63 | `queue-type``.setting.and.then.c |
2df20 | 6f 6e 66 69 67 75 72 65 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 73 2e 00 41 73 20 77 69 | onfigure.their.parameters..As.wi |
2df40 | 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 61 6e 20 64 65 66 69 6e | th.other.policies,.you.can.defin |
2df60 | 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 72 75 6c | e.different.type.of.matching.rul |
2df80 | 65 73 20 66 6f 72 20 79 6f 75 72 20 63 6c 61 73 73 65 73 3a 00 41 73 20 77 69 74 68 20 6f 74 68 | es.for.your.classes:.As.with.oth |
2dfa0 | 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 | er.policies,.you.can.embed_.othe |
2dfc0 | 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f 20 74 68 65 20 63 6c 61 73 73 65 73 20 28 61 6e 64 | r.policies.into.the.classes.(and |
2dfe0 | 20 64 65 66 61 75 6c 74 29 20 6f 66 20 79 6f 75 72 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 | .default).of.your.Priority.Queue |
2e000 | 20 70 6f 6c 69 63 79 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 | .policy.through.the.``queue-type |
2e020 | 60 60 20 73 65 74 74 69 6e 67 3a 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 20 69 6e 20 74 68 | ``.setting:.As.you.can.see.in.th |
2e040 | 65 20 65 78 61 6d 70 6c 65 20 68 65 72 65 2c 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 74 | e.example.here,.you.can.assign.t |
2e060 | 68 65 20 73 61 6d 65 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 73 65 76 65 72 61 6c 20 69 6e 74 65 | he.same.rule-set.to.several.inte |
2e080 | 72 66 61 63 65 73 2e 20 41 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 68 61 | rfaces..An.interface.can.only.ha |
2e0a0 | 76 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 20 70 65 72 20 63 68 61 69 6e 2e 00 41 73 20 79 6f | ve.one.rule-set.per.chain..As.yo |
2e0c0 | 75 20 63 61 6e 20 73 65 65 2c 20 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 20 63 6f 6e 66 69 | u.can.see,.Leaf2.and.Leaf3.confi |
2e0e0 | 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6c 6d 6f 73 74 20 69 64 65 6e 74 69 63 61 6c 2e 20 54 68 | guration.is.almost.identical..Th |
2e100 | 65 72 65 20 61 72 65 20 6c 6f 74 73 20 6f 66 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 2c 20 | ere.are.lots.of.commands.above,. |
2e120 | 49 27 6c 6c 20 74 72 79 20 74 6f 20 69 6e 74 6f 20 6d 6f 72 65 20 64 65 74 61 69 6c 20 62 65 6c | I'll.try.to.into.more.detail.bel |
2e140 | 6f 77 2c 20 63 6f 6d 6d 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 73 20 61 72 65 20 70 6c 61 | ow,.command.descriptions.are.pla |
2e160 | 63 65 64 20 75 6e 64 65 72 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 62 6f 78 65 73 3a 00 41 73 73 | ced.under.the.command.boxes:.Ass |
2e180 | 69 67 6e 20 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 72 69 64 | ign.`<member>`.interface.to.brid |
2e1a0 | 67 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 41 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 | ge.`<interface>`..A.completion.h |
2e1c0 | 65 6c 70 65 72 20 77 69 6c 6c 20 68 65 6c 70 20 79 6f 75 20 77 69 74 68 20 61 6c 6c 20 61 6c 6c | elper.will.help.you.with.all.all |
2e1e0 | 6f 77 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 62 72 69 | owed.interfaces.which.can.be.bri |
2e200 | 64 67 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 3a 72 65 66 3a 60 65 74 68 65 72 6e | dged..This.includes.:ref:`ethern |
2e220 | 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 62 6f 6e 64 2d 69 6e 74 65 72 66 | et-interface`,.:ref:`bond-interf |
2e240 | 61 63 65 60 2c 20 3a 72 65 66 3a 60 6c 32 74 70 76 33 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a | ace`,.:ref:`l2tpv3-interface`,.: |
2e260 | 72 65 66 3a 60 6f 70 65 6e 76 70 6e 60 2c 20 3a 72 65 66 3a 60 76 78 6c 61 6e 2d 69 6e 74 65 72 | ref:`openvpn`,.:ref:`vxlan-inter |
2e280 | 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 77 69 72 65 6c 65 73 73 2d 69 6e 74 65 72 66 61 63 65 60 | face`,.:ref:`wireless-interface` |
2e2a0 | 2c 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 61 6e 64 20 3a 72 | ,.:ref:`tunnel-interface`.and.:r |
2e2c0 | 65 66 3a 60 67 65 6e 65 76 65 2d 69 6e 74 65 72 66 61 63 65 60 2e 00 41 73 73 69 67 6e 20 61 20 | ef:`geneve-interface`..Assign.a. |
2e2e0 | 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e 64 20 74 6f 20 61 20 72 75 6c 65 00 41 73 73 69 67 | specific.backend.to.a.rule.Assig |
2e300 | 6e 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 | n.interface.identified.by.`<inte |
2e320 | 72 66 61 63 65 3e 60 20 74 6f 20 56 52 46 20 6e 61 6d 65 64 20 60 3c 6e 61 6d 65 3e 60 2e 00 41 | rface>`.to.VRF.named.`<name>`..A |
2e340 | 73 73 69 67 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 50 6f 72 74 43 | ssign.member.interfaces.to.PortC |
2e360 | 68 61 6e 6e 65 6c 00 41 73 73 69 67 6e 20 73 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 73 20 | hannel.Assign.static.IP.address. |
2e380 | 74 6f 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 41 73 73 69 67 6e 20 74 68 65 20 | to.`<user>`.account..Assign.the. |
2e3a0 | 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 66 6f 72 20 60 | IP.address.to.this.machine.for.` |
2e3c0 | 3c 74 69 6d 65 3e 60 20 73 65 63 6f 6e 64 73 2e 00 41 73 73 69 67 6e 20 74 68 65 20 53 53 48 20 | <time>`.seconds..Assign.the.SSH. |
2e3e0 | 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 60 3c 6b 65 79 3e 60 20 69 64 65 6e 74 | public.key.portion.`<key>`.ident |
2e400 | 69 66 69 65 64 20 62 79 20 70 65 72 2d 6b 65 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 | ified.by.per-key.`<identifier>`. |
2e420 | 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 2e 00 | to.the.local.user.`<username>`.. |
2e440 | 41 73 73 6f 63 69 61 74 65 73 20 74 68 65 20 70 72 65 76 69 6f 75 73 6c 79 20 67 65 6e 65 72 61 | Associates.the.previously.genera |
2e460 | 74 65 64 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 57 69 | ted.private.key.to.a.specific.Wi |
2e480 | 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 70 72 69 76 61 74 65 20 6b | reGuard.interface..The.private.k |
2e4a0 | 65 79 20 63 61 6e 20 62 65 20 67 65 6e 65 72 61 74 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 | ey.can.be.generate.via.the.comma |
2e4c0 | 6e 64 00 41 73 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c | nd.Assure.that.your.firewall.rul |
2e4e0 | 65 73 20 61 6c 6c 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 2c 20 69 6e 20 77 68 69 63 68 20 63 | es.allow.the.traffic,.in.which.c |
2e500 | 61 73 65 20 79 6f 75 20 68 61 76 65 20 61 20 77 6f 72 6b 69 6e 67 20 56 50 4e 20 75 73 69 6e 67 | ase.you.have.a.working.VPN.using |
2e520 | 20 57 69 72 65 47 75 61 72 64 2e 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 | .WireGuard..Assured.Forwarding(A |
2e540 | 46 29 20 31 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 32 00 | F).11.Assured.Forwarding(AF).12. |
2e560 | 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 33 00 41 73 73 75 72 65 | Assured.Forwarding(AF).13.Assure |
2e580 | 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 | d.Forwarding(AF).21.Assured.Forw |
2e5a0 | 61 72 64 69 6e 67 28 41 46 29 20 32 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 | arding(AF).22.Assured.Forwarding |
2e5c0 | 28 41 46 29 20 32 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 | (AF).23.Assured.Forwarding(AF).3 |
2e5e0 | 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 32 00 41 73 73 75 | 1.Assured.Forwarding(AF).32.Assu |
2e600 | 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 33 00 41 73 73 75 72 65 64 20 46 6f | red.Forwarding(AF).33.Assured.Fo |
2e620 | 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 | rwarding(AF).41.Assured.Forwardi |
2e640 | 6e 67 28 41 46 29 20 34 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 | ng(AF).42.Assured.Forwarding(AF) |
2e660 | 20 34 33 00 41 74 20 65 76 65 72 79 20 72 6f 75 6e 64 2c 20 74 68 65 20 64 65 66 69 63 69 74 20 | .43.At.every.round,.the.deficit. |
2e680 | 63 6f 75 6e 74 65 72 20 61 64 64 73 20 74 68 65 20 71 75 61 6e 74 75 6d 20 73 6f 20 74 68 61 74 | counter.adds.the.quantum.so.that |
2e6a0 | 20 65 76 65 6e 20 6c 61 72 67 65 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 | .even.large.packets.will.have.th |
2e6c0 | 65 69 72 20 6f 70 70 6f 72 74 75 6e 69 74 79 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 2e 00 | eir.opportunity.to.be.dequeued.. |
2e6e0 | 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 69 74 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f | At.the.moment.it.not.possible.to |
2e700 | 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 77 68 6f 6c 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 20 | .look.at.the.whole.firewall.log. |
2e720 | 77 69 74 68 20 56 79 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 | with.VyOS.operational.commands.. |
2e740 | 41 6c 6c 20 6c 6f 67 73 20 77 69 6c 6c 20 73 61 76 65 20 74 6f 20 60 60 2f 76 61 72 2f 6c 6f 67 | All.logs.will.save.to.``/var/log |
2e760 | 73 2f 6d 65 73 73 61 67 65 73 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 67 72 65 | s/messages``..For.example:.``gre |
2e780 | 70 20 27 31 30 2e 31 30 2e 30 2e 31 30 27 20 2f 76 61 72 2f 6c 6f 67 2f 6d 65 73 73 61 67 65 73 | p.'10.10.0.10'./var/log/messages |
2e7a0 | 60 60 00 41 74 20 74 68 65 20 74 69 6d 65 20 6f 66 20 74 68 69 73 20 77 72 69 74 69 6e 67 20 74 | ``.At.the.time.of.this.writing.t |
2e7c0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 73 75 70 70 6f 72 | he.following.displays.are.suppor |
2e7e0 | 74 65 64 3a 00 41 74 20 76 65 72 79 20 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 33 4d | ted:.At.very.low.rates.(below.3M |
2e800 | 62 69 74 29 2c 20 62 65 73 69 64 65 73 20 74 75 6e 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 28 | bit),.besides.tuning.`quantum`.( |
2e820 | 33 30 30 20 6b 65 65 70 73 20 62 65 69 6e 67 20 6f 6b 29 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f | 300.keeps.being.ok).you.may.also |
2e840 | 20 77 61 6e 74 20 74 6f 20 69 6e 63 72 65 61 73 65 20 60 74 61 72 67 65 74 60 20 74 6f 20 73 6f | .want.to.increase.`target`.to.so |
2e860 | 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 31 35 6d 73 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 60 | mething.like.15ms.and.increase.` |
2e880 | 69 6e 74 65 72 76 61 6c 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 61 72 6f 75 6e 64 20 31 35 | interval`.to.something.around.15 |
2e8a0 | 30 20 6d 73 2e 00 41 74 74 61 63 68 65 73 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6e 65 74 77 | 0.ms..Attaches.user-defined.netw |
2e8c0 | 6f 72 6b 20 74 6f 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 20 4f 6e 6c 79 20 6f 6e 65 20 6e 65 74 | ork.to.a.container..Only.one.net |
2e8e0 | 77 6f 72 6b 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 6d 75 73 74 20 | work.must.be.specified.and.must. |
2e900 | 61 6c 72 65 61 64 79 20 65 78 69 73 74 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 41 75 | already.exist..Authentication.Au |
2e920 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 45 41 50 6f 4c 29 00 41 75 74 68 65 6e 74 69 63 61 74 | thentication.(EAPoL).Authenticat |
2e940 | 69 6f 6e 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 41 75 74 68 65 6e 74 69 63 61 74 | ion.Advanced.Options.Authenticat |
2e960 | 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 69 64 2e 00 41 75 74 68 65 | ion.application.client-id..Authe |
2e980 | 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 73 65 63 | ntication.application.client-sec |
2e9a0 | 72 65 74 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 | ret..Authentication.application. |
2e9c0 | 74 65 6e 61 6e 74 2d 69 64 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 64 6f 6e 65 | tenant-id.Authentication.is.done |
2e9e0 | 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 60 60 6f 70 65 6e 76 70 6e 2d 61 75 74 68 2d 6c 64 61 | .by.using.the.``openvpn-auth-lda |
2ea00 | 70 2e 73 6f 60 60 20 70 6c 75 67 69 6e 20 77 68 69 63 68 20 69 73 20 73 68 69 70 70 65 64 20 77 | p.so``.plugin.which.is.shipped.w |
2ea20 | 69 74 68 20 65 76 65 72 79 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2e 20 41 20 64 | ith.every.VyOS.installation..A.d |
2ea40 | 65 64 69 63 61 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 20 69 73 20 72 | edicated.configuration.file.is.r |
2ea60 | 65 71 75 69 72 65 64 2e 20 49 74 20 69 73 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 | equired..It.is.best.practise.to. |
2ea80 | 73 74 6f 72 65 20 69 74 20 69 6e 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 74 6f 20 73 75 72 76 69 | store.it.in.``/config``.to.survi |
2eaa0 | 76 65 20 69 6d 61 67 65 20 75 70 64 61 74 65 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | ve.image.updates.Authentication. |
2eac0 | 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6e 61 6d 65 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | organization.name.Authentication |
2eae0 | 20 74 6f 6b 65 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 e2 80 93 20 74 6f 20 76 65 72 | .token.Authentication.....to.ver |
2eb00 | 69 66 79 20 74 68 61 74 20 74 68 65 20 6d 65 73 73 61 67 65 20 69 73 20 66 72 6f 6d 20 61 20 76 | ify.that.the.message.is.from.a.v |
2eb20 | 61 6c 69 64 20 73 6f 75 72 63 65 2e 00 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 74 6f 6b 65 6e | alid.source..Authorization.token |
2eb40 | 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e 20 43 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 | .Automatic.VLAN.Creation.Automat |
2eb60 | 69 63 20 56 4c 41 4e 20 63 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 | ic.VLAN.creation.Automatically.c |
2eb80 | 72 65 61 74 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 52 49 50 20 70 | reate.BFD.session.for.each.RIP.p |
2eba0 | 65 65 72 20 64 69 73 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | eer.discovered.in.this.interface |
2ebc0 | 2e 20 57 68 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 6d 6f 6e 69 74 6f 72 20 73 | ..When.the.BFD.session.monitor.s |
2ebe0 | 69 67 6e 61 6c 69 7a 65 20 74 68 61 74 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 64 6f 77 6e 20 74 | ignalize.that.the.link.is.down.t |
2ec00 | 68 65 20 52 49 50 20 70 65 65 72 20 69 73 20 72 65 6d 6f 76 65 64 20 61 6e 64 20 61 6c 6c 20 74 | he.RIP.peer.is.removed.and.all.t |
2ec20 | 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 | he.learned.routes.associated.wit |
2ec40 | 68 20 74 68 61 74 20 70 65 65 72 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 41 75 74 6f 6d 61 74 | h.that.peer.are.removed..Automat |
2ec60 | 69 63 61 6c 6c 79 20 72 65 62 6f 6f 74 20 73 79 73 74 65 6d 20 6f 6e 20 6b 65 72 6e 65 6c 20 70 | ically.reboot.system.on.kernel.p |
2ec80 | 61 6e 69 63 20 61 66 74 65 72 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 41 75 74 6f 6e 6f 6d 6f 75 | anic.after.60.seconds..Autonomou |
2eca0 | 73 20 53 79 73 74 65 6d 73 00 41 76 6f 69 64 69 6e 67 20 22 6c 65 61 6b 79 22 20 4e 41 54 00 41 | s.Systems.Avoiding."leaky".NAT.A |
2ecc0 | 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 00 42 46 44 00 42 46 44 20 53 74 61 74 69 | zure-data-explorer.BFD.BFD.Stati |
2ece0 | 63 20 52 6f 75 74 65 20 4d 6f 6e 69 74 6f 72 69 6e 67 00 42 46 44 20 73 65 6e 64 73 20 6c 6f 74 | c.Route.Monitoring.BFD.sends.lot |
2ed00 | 73 20 6f 66 20 73 6d 61 6c 6c 20 55 44 50 20 70 61 63 6b 65 74 73 20 76 65 72 79 20 71 75 69 63 | s.of.small.UDP.packets.very.quic |
2ed20 | 6b 6c 79 20 74 6f 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 74 68 65 20 70 65 65 72 20 69 73 20 | kly.to.ensures.that.the.peer.is. |
2ed40 | 73 74 69 6c 6c 20 61 6c 69 76 65 2e 00 42 47 50 00 42 47 50 20 2d 20 41 53 20 50 61 74 68 20 50 | still.alive..BGP.BGP.-.AS.Path.P |
2ed60 | 6f 6c 69 63 79 00 42 47 50 20 2d 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d | olicy.BGP.-.Community.List.BGP.- |
2ed80 | 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 4c | .Extended.Community.List.BGP.-.L |
2eda0 | 61 72 67 65 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 45 78 61 6d 70 6c 65 00 | arge.Community.List.BGP.Example. |
2edc0 | 42 47 50 20 52 6f 75 74 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 53 63 61 | BGP.Router.Configuration.BGP.Sca |
2ede0 | 6c 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 61 67 67 72 65 67 61 74 6f | ling.Configuration.BGP.aggregato |
2ee00 | 72 20 61 74 74 72 69 62 75 74 65 3a 20 41 53 20 6e 75 6d 62 65 72 20 6f 72 20 49 50 20 61 64 64 | r.attribute:.AS.number.or.IP.add |
2ee20 | 72 65 73 73 20 6f 66 20 61 6e 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 00 42 47 50 20 61 73 2d 70 | ress.of.an.aggregation..BGP.as-p |
2ee40 | 61 74 68 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 61 74 6f 6d 69 63 20 61 67 | ath.list.to.match..BGP.atomic.ag |
2ee60 | 67 72 65 67 61 74 65 20 61 74 74 72 69 62 75 74 65 2e 00 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 | gregate.attribute..BGP.community |
2ee80 | 2d 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d | -list.to.match..BGP.extended.com |
2eea0 | 6d 75 6e 69 74 79 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 72 6f 6c 65 73 20 61 72 65 20 64 | munity.to.match..BGP.roles.are.d |
2eec0 | 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 70 72 | efined.in.RFC.:rfc:`9234`.and.pr |
2eee0 | 6f 76 69 64 65 20 61 6e 20 65 61 73 79 20 77 61 79 20 74 6f 20 61 64 64 20 72 6f 75 74 65 20 6c | ovide.an.easy.way.to.add.route.l |
2ef00 | 65 61 6b 20 70 72 65 76 65 6e 74 69 6f 6e 2c 20 64 65 74 65 63 74 69 6f 6e 20 61 6e 64 20 6d 69 | eak.prevention,.detection.and.mi |
2ef20 | 74 69 67 61 74 69 6f 6e 2e 20 54 68 65 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 76 61 6c 75 65 20 69 | tigation..The.local.Role.value.i |
2ef40 | 73 20 6e 65 67 6f 74 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 42 47 50 20 52 6f | s.negotiated.with.the.new.BGP.Ro |
2ef60 | 6c 65 20 63 61 70 61 62 69 6c 69 74 79 20 77 68 69 63 68 20 68 61 73 20 61 20 62 75 69 6c 74 2d | le.capability.which.has.a.built- |
2ef80 | 69 6e 20 63 68 65 63 6b 20 6f 66 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 76 61 | in.check.of.the.corresponding.va |
2efa0 | 6c 75 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 69 73 6d 61 74 63 68 20 74 68 65 20 6e | lue..In.case.of.a.mismatch.the.n |
2efc0 | 65 77 20 4f 50 45 4e 20 52 6f 6c 65 73 20 4d 69 73 6d 61 74 63 68 20 4e 6f 74 69 66 69 63 61 74 | ew.OPEN.Roles.Mismatch.Notificat |
2efe0 | 69 6f 6e 20 3c 32 2c 20 31 31 3e 20 77 6f 75 6c 64 20 62 65 20 73 65 6e 74 2e 20 54 68 65 20 63 | ion.<2,.11>.would.be.sent..The.c |
2f000 | 6f 72 72 65 63 74 20 52 6f 6c 65 20 70 61 69 72 73 20 61 72 65 3a 00 42 47 50 20 72 6f 75 74 65 | orrect.Role.pairs.are:.BGP.route |
2f020 | 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 | rs.connected.inside.the.same.AS. |
2f040 | 74 68 72 6f 75 67 68 20 42 47 50 20 62 65 6c 6f 6e 67 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 | through.BGP.belong.to.an.interna |
2f060 | 6c 20 42 47 50 20 73 65 73 73 69 6f 6e 2c 20 6f 72 20 49 42 47 50 2e 20 49 6e 20 6f 72 64 65 72 | l.BGP.session,.or.IBGP..In.order |
2f080 | 20 74 6f 20 70 72 65 76 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6c 6f 6f 70 73 2c | .to.prevent.routing.table.loops, |
2f0a0 | 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 | .IBGP.speaker.does.not.advertise |
2f0c0 | 20 49 42 47 50 2d 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 74 6f 20 6f 74 68 65 72 20 49 42 | .IBGP-learned.routes.to.other.IB |
2f0e0 | 47 50 20 73 70 65 61 6b 65 72 20 28 53 70 6c 69 74 20 48 6f 72 69 7a 6f 6e 20 6d 65 63 68 61 6e | GP.speaker.(Split.Horizon.mechan |
2f100 | 69 73 6d 29 2e 20 41 73 20 73 75 63 68 2c 20 49 42 47 50 20 72 65 71 75 69 72 65 73 20 61 20 66 | ism)..As.such,.IBGP.requires.a.f |
2f120 | 75 6c 6c 20 6d 65 73 68 20 6f 66 20 61 6c 6c 20 70 65 65 72 73 2e 20 46 6f 72 20 6c 61 72 67 65 | ull.mesh.of.all.peers..For.large |
2f140 | 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 69 73 20 71 75 69 63 6b 6c 79 20 62 65 63 6f 6d 65 73 20 | .networks,.this.quickly.becomes. |
2f160 | 75 6e 73 63 61 6c 61 62 6c 65 2e 00 42 47 50 20 72 6f 75 74 65 73 20 6d 61 79 20 62 65 20 6c 65 | unscalable..BGP.routes.may.be.le |
2f180 | 61 6b 65 64 20 28 69 2e 65 2e 20 63 6f 70 69 65 64 29 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 | aked.(i.e..copied).between.a.uni |
2f1a0 | 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 | cast.VRF.RIB.and.the.VPN.SAFI.RI |
2f1c0 | 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 66 6f 72 20 75 73 65 20 69 6e 20 | B.of.the.default.VRF.for.use.in. |
2f1e0 | 4d 50 4c 53 2d 62 61 73 65 64 20 4c 33 56 50 4e 73 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 | MPLS-based.L3VPNs..Unicast.route |
2f200 | 73 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 6c 65 61 6b 65 64 20 62 65 74 77 65 65 6e 20 61 6e 79 | s.may.also.be.leaked.between.any |
2f220 | 20 56 52 46 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 75 6e 69 63 61 73 74 20 52 49 42 | .VRFs.(including.the.unicast.RIB |
2f240 | 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 42 47 50 20 69 6e 73 74 61 6e 63 65 29 2e 20 41 | .of.the.default.BGP.instance)..A |
2f260 | 20 73 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 | .shortcut.syntax.is.also.availab |
2f280 | 6c 65 20 66 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 6f | le.for.specifying.leaking.from.o |
2f2a0 | 6e 65 20 56 52 46 20 74 6f 20 61 6e 6f 74 68 65 72 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 | ne.VRF.to.another.VRF.using.the. |
2f2c0 | 64 65 66 61 75 6c 74 20 69 6e 73 74 61 6e 63 65 e2 80 99 73 20 56 50 4e 20 52 49 42 20 61 73 20 | default.instance...s.VPN.RIB.as. |
2f2e0 | 74 68 65 20 69 6e 74 65 6d 65 64 69 61 72 79 20 2e 20 41 20 63 6f 6d 6d 6f 6e 20 61 70 70 6c 69 | the.intemediary...A.common.appli |
2f300 | 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 56 52 46 2d 56 52 46 20 66 65 61 74 75 72 65 20 69 73 | cation.of.the.VRF-VRF.feature.is |
2f320 | 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 63 75 73 74 6f 6d 65 72 e2 80 99 73 20 70 72 69 76 61 | .to.connect.a.customer...s.priva |
2f340 | 74 65 20 72 6f 75 74 69 6e 67 20 64 6f 6d 61 69 6e 20 74 6f 20 61 20 70 72 6f 76 69 64 65 72 e2 | te.routing.domain.to.a.provider. |
2f360 | 80 99 73 20 56 50 4e 20 73 65 72 76 69 63 65 2e 20 4c 65 61 6b 69 6e 67 20 69 73 20 63 6f 6e 66 | ..s.VPN.service..Leaking.is.conf |
2f380 | 69 67 75 72 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 6f 66 | igured.from.the.point.of.view.of |
2f3a0 | 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 56 52 46 3a 20 69 6d 70 6f 72 74 20 72 65 66 65 72 | .an.individual.VRF:.import.refer |
2f3c0 | 73 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d 20 56 50 4e 20 74 6f 20 61 | s.to.routes.leaked.from.VPN.to.a |
2f3e0 | 20 75 6e 69 63 61 73 74 20 56 52 46 2c 20 77 68 65 72 65 61 73 20 65 78 70 6f 72 74 20 72 65 66 | .unicast.VRF,.whereas.export.ref |
2f400 | 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 | ers.to.routes.leaked.from.a.unic |
2f420 | 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 42 61 62 65 6c 00 42 61 62 65 6c 20 61 20 64 75 | ast.VRF.to.VPN..Babel.Babel.a.du |
2f440 | 61 6c 20 73 74 61 63 6b 20 70 72 6f 74 6f 63 6f 6c 2e 20 41 20 73 69 6e 67 6c 65 20 42 61 62 65 | al.stack.protocol..A.single.Babe |
2f460 | 6c 20 69 6e 73 74 61 6e 63 65 20 69 73 20 61 62 6c 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 72 6f | l.instance.is.able.to.perform.ro |
2f480 | 75 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 42 61 | uting.for.both.IPv4.and.IPv6..Ba |
2f4a0 | 62 65 6c 20 69 73 20 61 20 6d 6f 64 65 72 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | bel.is.a.modern.routing.protocol |
2f4c0 | 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 72 6f 62 75 73 74 20 61 6e 64 20 65 66 66 69 63 | .designed.to.be.robust.and.effic |
2f4e0 | 69 65 6e 74 20 62 6f 74 68 20 69 6e 20 6f 72 64 69 6e 61 72 79 20 77 69 72 65 64 20 6e 65 74 77 | ient.both.in.ordinary.wired.netw |
2f500 | 6f 72 6b 73 20 61 6e 64 20 69 6e 20 77 69 72 65 6c 65 73 73 20 6d 65 73 68 20 6e 65 74 77 6f 72 | orks.and.in.wireless.mesh.networ |
2f520 | 6b 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 75 73 65 73 20 68 6f 70 2d 63 6f 75 6e | ks..By.default,.it.uses.hop-coun |
2f540 | 74 20 6f 6e 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 20 76 61 72 69 61 6e | t.on.wired.networks.and.a.varian |
2f560 | 74 20 6f 66 20 45 54 58 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 49 74 20 63 | t.of.ETX.on.wireless.links,.It.c |
2f580 | 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 61 6b 65 20 72 61 64 69 6f 20 64 | an.be.configured.to.take.radio.d |
2f5a0 | 69 76 65 72 73 69 74 79 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 74 6f 20 61 75 74 | iversity.into.account.and.to.aut |
2f5c0 | 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6f 6d 70 75 74 65 20 61 20 6c 69 6e 6b 27 73 20 6c 61 74 65 | omatically.compute.a.link's.late |
2f5e0 | 6e 63 79 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 69 74 20 69 6e 20 74 68 65 20 6d 65 74 72 69 63 | ncy.and.include.it.in.the.metric |
2f600 | 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 36 36 60 2e 00 | ..It.is.defined.in.:rfc:`8966`.. |
2f620 | 42 61 63 6b 65 6e 64 00 42 61 6c 61 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 42 61 6c 61 | Backend.Balance.algorithms:.Bala |
2f640 | 6e 63 69 6e 67 20 52 75 6c 65 73 00 42 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 64 | ncing.Rules.Balancing.based.on.d |
2f660 | 6f 6d 61 69 6e 20 6e 61 6d 65 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 00 42 61 6e | omain.name.Bandwidth.Shaping.Ban |
2f680 | 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 00 42 | dwidth.Shaping.for.local.users.B |
2f6a0 | 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 | andwidth.rate.limits.can.be.set. |
2f6c0 | 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 52 41 44 49 55 53 20 62 61 73 65 64 20 | for.local.users.or.RADIUS.based. |
2f6e0 | 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 | attributes..Bandwidth.rate.limit |
2f700 | 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 | s.can.be.set.for.local.users.or. |
2f720 | 76 69 61 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e | via.RADIUS.based.attributes..Ban |
2f740 | 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f | dwidth.rate.limits.can.be.set.fo |
2f760 | 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 | r.local.users.within.the.configu |
2f780 | 72 61 74 69 6f 6e 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 | ration.or.via.RADIUS.based.attri |
2f7a0 | 62 75 74 65 73 2e 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 | butes..Base.chain.is.for.traffic |
2f7c0 | 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 | .toward.the.router.is.``set.fire |
2f7e0 | 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 | wall.ipv4.input.filter....``.Bas |
2f800 | 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 | e.chain.is.for.traffic.toward.th |
2f820 | 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 | e.router.is.``set.firewall.ipv6. |
2f840 | 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 6c 69 6e 65 20 44 4d 56 50 | input.filter....``.Baseline.DMVP |
2f860 | 4e 20 74 6f 70 6f 6c 6f 67 79 00 42 61 73 69 63 20 43 6f 6e 63 65 70 74 73 00 42 61 73 69 63 20 | N.topology.Basic.Concepts.Basic. |
2f880 | 63 6f 6d 6d 61 6e 64 73 00 42 61 73 69 63 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 | commands.Basic.filtering.can.be. |
2f8a0 | 64 6f 6e 65 20 75 73 69 6e 67 20 61 63 63 65 73 73 2d 6c 69 73 74 20 61 6e 64 20 61 63 63 65 73 | done.using.access-list.and.acces |
2f8c0 | 73 2d 6c 69 73 74 36 2e 00 42 61 73 69 63 20 66 69 6c 74 65 72 69 6e 67 20 63 6f 75 6c 64 20 61 | s-list6..Basic.filtering.could.a |
2f8e0 | 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 00 | lso.be.applied.to.IPv6.traffic.. |
2f900 | 42 61 73 69 63 20 73 65 74 75 70 00 42 65 20 73 75 72 65 20 74 6f 20 73 65 74 20 61 20 73 61 6e | Basic.setup.Be.sure.to.set.a.san |
2f920 | 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 | e.default.config.in.the.default. |
2f940 | 63 6f 6e 66 69 67 20 66 69 6c 65 2c 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 | config.file,.this.will.be.loaded |
2f960 | 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 61 74 20 61 20 75 73 65 72 20 69 73 20 61 75 74 68 | .in.the.case.that.a.user.is.auth |
2f980 | 65 6e 74 69 63 61 74 65 64 20 61 6e 64 20 6e 6f 20 66 69 6c 65 20 69 73 20 66 6f 75 6e 64 20 69 | enticated.and.no.file.is.found.i |
2f9a0 | 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 72 65 63 74 6f 72 79 20 6d 61 74 63 68 | n.the.configured.directory.match |
2f9c0 | 69 6e 67 20 74 68 65 20 75 73 65 72 73 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 2e 00 42 65 | ing.the.users.username/group..Be |
2f9e0 | 61 6d 66 6f 72 6d 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 3a 00 42 65 63 61 75 73 65 20 | amforming.capabilities:.Because. |
2fa00 | 61 6e 20 61 67 67 72 65 67 61 74 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 61 63 74 69 76 65 20 77 | an.aggregator.cannot.be.active.w |
2fa20 | 69 74 68 6f 75 74 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 | ithout.at.least.one.available.li |
2fa40 | 6e 6b 2c 20 73 65 74 74 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 30 20 6f 72 20 | nk,.setting.this.option.to.0.or. |
2fa60 | 74 6f 20 31 20 68 61 73 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 65 66 66 65 63 74 2e 00 | to.1.has.the.exact.same.effect.. |
2fa80 | 42 65 63 61 75 73 65 20 65 78 69 73 74 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 64 6f 20 6e 6f 74 | Because.existing.sessions.do.not |
2faa0 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 61 69 6c 20 6f 76 65 72 20 74 6f 20 61 20 6e 65 | .automatically.fail.over.to.a.ne |
2fac0 | 77 20 70 61 74 68 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 63 61 6e 20 62 65 | w.path,.the.session.table.can.be |
2fae0 | 20 66 6c 75 73 68 65 64 20 6f 6e 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 | .flushed.on.each.connection.stat |
2fb00 | 65 20 63 68 61 6e 67 65 3a 00 42 65 66 6f 72 65 20 65 6e 61 62 6c 69 6e 67 20 61 6e 79 20 68 61 | e.change:.Before.enabling.any.ha |
2fb20 | 72 64 77 61 72 65 20 73 65 67 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 20 61 20 63 6f | rdware.segmentation.offload.a.co |
2fb40 | 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 69 73 20 | rresponding.software.offload.is. |
2fb60 | 72 65 71 75 69 72 65 64 20 69 6e 20 47 53 4f 2e 20 4f 74 68 65 72 77 69 73 65 20 69 74 20 62 65 | required.in.GSO..Otherwise.it.be |
2fb80 | 63 6f 6d 65 73 20 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 61 20 66 72 61 6d 65 20 74 6f 20 62 65 | comes.possible.for.a.frame.to.be |
2fba0 | 20 72 65 2d 72 6f 75 74 65 64 20 62 65 74 77 65 65 6e 20 64 65 76 69 63 65 73 20 61 6e 64 20 65 | .re-routed.between.devices.and.e |
2fbc0 | 6e 64 20 75 70 20 62 65 69 6e 67 20 75 6e 61 62 6c 65 20 74 6f 20 62 65 20 74 72 61 6e 73 6d 69 | nd.up.being.unable.to.be.transmi |
2fbe0 | 74 74 65 64 2e 00 42 65 66 6f 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 61 70 70 | tted..Before.you.are.able.to.app |
2fc00 | 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 61 20 7a 6f 6e 65 20 79 6f 75 20 68 61 76 65 | ly.a.rule-set.to.a.zone.you.have |
2fc20 | 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 7a 6f 6e 65 73 20 66 69 72 73 74 2e 00 42 65 6c 6f | .to.create.the.zones.first..Belo |
2fc40 | 77 20 66 6c 6f 77 2d 63 68 61 72 74 20 63 6f 75 6c 64 20 62 65 20 61 20 71 75 69 63 6b 20 72 65 | w.flow-chart.could.be.a.quick.re |
2fc60 | 66 65 72 65 6e 63 65 20 66 6f 72 20 74 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 63 6f 6d | ference.for.the.close-action.com |
2fc80 | 62 69 6e 61 74 69 6f 6e 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 68 6f 77 20 74 68 65 20 70 65 | bination.depending.on.how.the.pe |
2fca0 | 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 42 65 6c 6f 77 20 69 73 20 61 6e 20 65 78 | er.is.configured..Below.is.an.ex |
2fcc0 | 61 6d 70 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c 4e 53 3a 00 42 65 73 74 20 65 | ample.to.configure.a.LNS:.Best.e |
2fce0 | 66 66 6f 72 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 61 75 6c 74 00 42 65 74 77 65 65 6e 20 63 | ffort.traffic,.default.Between.c |
2fd00 | 6f 6d 70 75 74 65 72 73 2c 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 | omputers,.the.most.common.config |
2fd20 | 75 72 61 74 69 6f 6e 20 75 73 65 64 20 77 61 73 20 22 38 4e 31 22 3a 20 65 69 67 68 74 20 62 69 | uration.used.was."8N1":.eight.bi |
2fd40 | 74 20 63 68 61 72 61 63 74 65 72 73 2c 20 77 69 74 68 20 6f 6e 65 20 73 74 61 72 74 20 62 69 74 | t.characters,.with.one.start.bit |
2fd60 | 2c 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 2c 20 61 6e 64 20 6e 6f 20 70 61 72 69 74 79 20 62 69 | ,.one.stop.bit,.and.no.parity.bi |
2fd80 | 74 2e 20 54 68 75 73 20 31 30 20 42 61 75 64 20 74 69 6d 65 73 20 61 72 65 20 75 73 65 64 20 74 | t..Thus.10.Baud.times.are.used.t |
2fda0 | 6f 20 73 65 6e 64 20 61 20 73 69 6e 67 6c 65 20 63 68 61 72 61 63 74 65 72 2c 20 61 6e 64 20 73 | o.send.a.single.character,.and.s |
2fdc0 | 6f 20 64 69 76 69 64 69 6e 67 20 74 68 65 20 73 69 67 6e 61 6c 6c 69 6e 67 20 62 69 74 2d 72 61 | o.dividing.the.signalling.bit-ra |
2fde0 | 74 65 20 62 79 20 74 65 6e 20 72 65 73 75 6c 74 73 20 69 6e 20 74 68 65 20 6f 76 65 72 61 6c 6c | te.by.ten.results.in.the.overall |
2fe00 | 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 73 70 65 65 64 20 69 6e 20 63 68 61 72 61 63 74 65 72 | .transmission.speed.in.character |
2fe20 | 73 20 70 65 72 20 73 65 63 6f 6e 64 2e 20 54 68 69 73 20 69 73 20 61 6c 73 6f 20 74 68 65 20 64 | s.per.second..This.is.also.the.d |
2fe40 | 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 20 69 66 20 6e 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 | efault.setting.if.none.of.those. |
2fe60 | 6f 70 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 2e 00 42 69 64 69 72 65 63 74 69 6f 6e | options.are.defined..Bidirection |
2fe80 | 61 6c 20 4e 41 54 00 42 69 6e 61 72 79 20 76 61 6c 75 65 00 42 69 6e 64 20 63 6f 6e 74 61 69 6e | al.NAT.Binary.value.Bind.contain |
2fea0 | 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e | er.network.to.a.given.VRF.instan |
2fec0 | 63 65 2e 00 42 69 6e 64 20 6c 69 73 74 65 6e 65 72 20 74 6f 20 73 70 65 63 69 66 69 63 20 69 6e | ce..Bind.listener.to.specific.in |
2fee0 | 74 65 72 66 61 63 65 2f 61 64 64 72 65 73 73 2c 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 49 | terface/address,.mandatory.for.I |
2ff00 | 50 76 36 00 42 69 6e 64 73 20 65 74 68 31 2e 32 34 31 20 61 6e 64 20 76 78 6c 61 6e 32 34 31 20 | Pv6.Binds.eth1.241.and.vxlan241. |
2ff20 | 74 6f 20 65 61 63 68 20 6f 74 68 65 72 20 62 79 20 6d 61 6b 69 6e 67 20 74 68 65 6d 20 62 6f 74 | to.each.other.by.making.them.bot |
2ff40 | 68 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 74 68 65 20 73 61 6d 65 20 | h.member.interfaces.of.the.same. |
2ff60 | 62 72 69 64 67 65 2e 00 42 6c 61 63 6b 68 6f 6c 65 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 | bridge..Blackhole.Block.source.I |
2ff80 | 50 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 53 75 62 73 65 71 75 65 6e 74 20 62 6c 6f 63 6b 73 20 | P.in.seconds..Subsequent.blocks. |
2ffa0 | 69 6e 63 72 65 61 73 65 20 62 79 20 61 20 66 61 63 74 6f 72 20 6f 66 20 31 2e 35 20 54 68 65 20 | increase.by.a.factor.of.1.5.The. |
2ffc0 | 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 2e 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 | default.is.120..Block.source.IP. |
2ffe0 | 77 68 65 6e 20 74 68 65 69 72 20 63 75 6d 75 6c 61 74 69 76 65 20 61 74 74 61 63 6b 20 73 63 6f | when.their.cumulative.attack.sco |
30000 | 72 65 20 65 78 63 65 65 64 73 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 65 20 64 65 66 61 75 6c | re.exceeds.threshold..The.defaul |
30020 | 74 20 69 73 20 33 30 2e 00 42 6c 6f 63 6b 69 6e 67 20 63 61 6c 6c 20 77 69 74 68 20 6e 6f 20 74 | t.is.30..Blocking.call.with.no.t |
30040 | 69 6d 65 6f 75 74 2e 20 53 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 75 6e 72 65 73 | imeout..System.will.become.unres |
30060 | 70 6f 6e 73 69 76 65 20 69 66 20 73 63 72 69 70 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 74 75 72 | ponsive.if.script.does.not.retur |
30080 | 6e 21 00 42 6f 61 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 | n!.Boarder.Gateway.Protocol.(BGP |
300a0 | 29 20 6f 72 69 67 69 6e 20 63 6f 64 65 20 74 6f 20 6d 61 74 63 68 2e 00 42 6f 6e 64 20 2f 20 4c | ).origin.code.to.match..Bond./.L |
300c0 | 69 6e 6b 20 41 67 67 72 65 67 61 74 69 6f 6e 00 42 6f 6e 64 20 6f 70 74 69 6f 6e 73 00 42 6f 6f | ink.Aggregation.Bond.options.Boo |
300e0 | 74 20 69 6d 61 67 65 20 6c 65 6e 67 74 68 20 69 6e 20 35 31 32 2d 6f 63 74 65 74 20 62 6c 6f 63 | t.image.length.in.512-octet.bloc |
30100 | 6b 73 00 42 6f 6f 74 73 74 72 61 70 20 66 69 6c 65 20 6e 61 6d 65 00 42 6f 74 68 20 49 50 76 34 | ks.Bootstrap.file.name.Both.IPv4 |
30120 | 20 61 6e 64 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 74 20 69 73 20 70 6f 73 73 69 62 6c 65 2e | .and.IPv6.multicast.is.possible. |
30140 | 00 42 6f 74 68 20 6c 6f 63 61 6c 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 61 6e 64 20 72 65 6d | .Both.local.administered.and.rem |
30160 | 6f 74 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 | ote.administered.:abbr:`RADIUS.( |
30180 | 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 | Remote.Authentication.Dial-In.Us |
301a0 | 65 72 20 53 65 72 76 69 63 65 29 60 20 61 63 63 6f 75 6e 74 73 20 61 72 65 20 73 75 70 70 6f 72 | er.Service)`.accounts.are.suppor |
301c0 | 74 65 64 2e 00 42 6f 74 68 20 72 65 70 6c 69 65 73 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 74 | ted..Both.replies.and.requests.t |
301e0 | 79 70 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 | ype.gratuitous.arp.will.trigger. |
30200 | 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2c 20 69 66 20 | the.ARP.table.to.be.updated,.if. |
30220 | 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e 2e 00 42 72 61 6e 63 68 20 31 27 73 20 72 | this.setting.is.on..Branch.1's.r |
30240 | 6f 75 74 65 72 20 6d 69 67 68 74 20 68 61 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c | outer.might.have.the.following.l |
30260 | 69 6e 65 73 3a 00 42 72 69 64 67 65 00 42 72 69 64 67 65 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e | ines:.Bridge.Bridge.Firewall.Con |
30280 | 66 69 67 75 72 61 74 69 6f 6e 00 42 72 69 64 67 65 20 4f 70 74 69 6f 6e 73 00 42 72 69 64 67 65 | figuration.Bridge.Options.Bridge |
302a0 | 20 52 75 6c 65 73 00 42 72 69 64 67 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 49 50 20 61 64 64 72 | .Rules.Bridge.answers.on.IP.addr |
302c0 | 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 | ess.192.0.2.1/24.and.2001:db8::f |
302e0 | 66 66 66 2f 36 34 00 42 72 69 64 67 65 20 6d 61 78 69 6d 75 6d 20 61 67 69 6e 67 20 60 3c 74 69 | fff/64.Bridge.maximum.aging.`<ti |
30300 | 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 32 30 29 2e 00 42 | me>`.in.seconds.(default:.20)..B |
30320 | 72 69 64 67 65 3a 00 42 75 72 73 74 20 63 6f 75 6e 74 00 42 75 73 69 6e 65 73 73 20 55 73 65 72 | ridge:.Burst.count.Business.User |
30340 | 73 00 42 75 74 20 62 65 66 6f 72 65 20 6c 65 61 72 6e 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 75 | s.But.before.learning.to.configu |
30360 | 72 65 20 79 6f 75 72 20 70 6f 6c 69 63 79 2c 20 77 65 20 77 69 6c 6c 20 77 61 72 6e 20 79 6f 75 | re.your.policy,.we.will.warn.you |
30380 | 20 61 62 6f 75 74 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 | .about.the.different.units.you.c |
303a0 | 61 6e 20 75 73 65 20 61 6e 64 20 61 6c 73 6f 20 73 68 6f 77 20 79 6f 75 20 77 68 61 74 20 2a 63 | an.use.and.also.show.you.what.*c |
303c0 | 6c 61 73 73 65 73 2a 20 61 72 65 20 61 6e 64 20 68 6f 77 20 74 68 65 79 20 77 6f 72 6b 2c 20 61 | lasses*.are.and.how.they.work,.a |
303e0 | 73 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 72 65 71 75 69 72 65 20 79 6f 75 20 | s.some.policies.may.require.you. |
30400 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 | to.configure.them..By.default.VR |
30420 | 52 50 20 75 73 65 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f | RP.uses.multicast.packets..If.yo |
30440 | 75 72 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 | ur.network.does.not.support.mult |
30460 | 69 63 61 73 74 20 66 6f 72 20 77 68 61 74 65 76 65 72 20 72 65 61 73 6f 6e 2c 20 79 6f 75 20 63 | icast.for.whatever.reason,.you.c |
30480 | 61 6e 20 6d 61 6b 65 20 56 52 52 50 20 75 73 65 20 75 6e 69 63 61 73 74 20 63 6f 6d 6d 75 6e 69 | an.make.VRRP.use.unicast.communi |
304a0 | 63 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 | cation.instead..By.default.VRRP. |
304c0 | 75 73 65 73 20 70 72 65 65 6d 70 74 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 | uses.preemption..You.can.disable |
304e0 | 20 69 74 20 77 69 74 68 20 74 68 65 20 22 6e 6f 2d 70 72 65 65 6d 70 74 22 20 6f 70 74 69 6f 6e | .it.with.the."no-preempt".option |
30500 | 3a 00 42 79 20 64 65 66 61 75 6c 74 20 60 73 74 72 69 63 74 2d 6c 73 61 2d 63 68 65 63 6b 69 6e | :.By.default.`strict-lsa-checkin |
30520 | 67 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 6e 20 74 68 65 20 68 65 6c 70 65 72 | g`.is.configured.then.the.helper |
30540 | 20 77 69 6c 6c 20 61 62 6f 72 74 20 74 68 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 | .will.abort.the.Graceful.Restart |
30560 | 20 77 68 65 6e 20 61 20 4c 53 41 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 20 77 68 69 63 68 20 | .when.a.LSA.change.occurs.which. |
30580 | 61 66 66 65 63 74 73 20 74 68 65 20 72 65 73 74 61 72 74 69 6e 67 20 72 6f 75 74 65 72 2e 00 42 | affects.the.restarting.router..B |
305a0 | 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 74 68 65 20 70 6f 72 74 20 | y.default.the.scope.of.the.port. |
305c0 | 62 69 6e 64 69 6e 67 73 20 66 6f 72 20 75 6e 62 6f 75 6e 64 20 73 6f 63 6b 65 74 73 20 69 73 20 | bindings.for.unbound.sockets.is. |
305e0 | 6c 69 6d 69 74 65 64 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 2e 20 54 68 61 74 | limited.to.the.default.VRF..That |
30600 | 20 69 73 2c 20 69 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 61 74 63 68 65 64 20 62 79 20 70 | .is,.it.will.not.be.matched.by.p |
30620 | 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 6e | ackets.arriving.on.interfaces.en |
30640 | 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 20 61 6e 64 20 70 72 6f 63 65 73 73 65 73 20 6d 61 | slaved.to.a.VRF.and.processes.ma |
30660 | 79 20 62 69 6e 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 6f 72 74 20 69 66 20 74 68 65 79 20 | y.bind.to.the.same.port.if.they. |
30680 | 62 69 6e 64 20 74 6f 20 61 20 56 52 46 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 46 52 52 20 77 | bind.to.a.VRF..By.default,.FRR.w |
306a0 | 69 6c 6c 20 62 72 69 6e 67 20 75 70 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6d 69 6e 69 6d 61 | ill.bring.up.peering.with.minima |
306c0 | 6c 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 74 68 65 20 62 6f 74 68 | l.common.capability.for.the.both |
306e0 | 20 73 69 64 65 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6c 6f 63 61 | .sides..For.example,.if.the.loca |
30700 | 6c 20 72 6f 75 74 65 72 20 68 61 73 20 75 6e 69 63 61 73 74 20 61 6e 64 20 6d 75 6c 74 69 63 61 | l.router.has.unicast.and.multica |
30720 | 73 74 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 20 72 65 6d 6f 74 65 20 72 | st.capabilities.and.the.remote.r |
30740 | 6f 75 74 65 72 20 6f 6e 6c 79 20 68 61 73 20 75 6e 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 | outer.only.has.unicast.capabilit |
30760 | 79 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 | y.the.local.router.will.establis |
30780 | 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 75 6e 69 63 61 73 74 20 6f 6e | h.the.connection.with.unicast.on |
307a0 | 6c 79 20 63 61 70 61 62 69 6c 69 74 79 2e 20 57 68 65 6e 20 74 68 65 72 65 20 61 72 65 20 6e 6f | ly.capability..When.there.are.no |
307c0 | 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 46 52 52 20 73 65 6e 64 73 20 | .common.capabilities,.FRR.sends. |
307e0 | 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 61 6e 64 | Unsupported.Capability.error.and |
30800 | 20 74 68 65 6e 20 72 65 73 65 74 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 42 79 20 | .then.resets.the.connection..By. |
30820 | 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 | default,.VyOS.does.not.advertise |
30840 | 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 28 30 2e 30 2e 30 2e 30 2f 30 29 20 65 76 65 | .a.default.route.(0.0.0.0/0).eve |
30860 | 6e 20 69 66 20 69 74 20 69 73 20 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 57 68 65 | n.if.it.is.in.routing.table..Whe |
30880 | 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 64 65 66 61 75 6c 74 20 72 | n.you.want.to.announce.default.r |
308a0 | 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 65 72 2c 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d | outes.to.the.peer,.use.this.comm |
308c0 | 61 6e 64 2e 20 55 73 69 6e 67 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 | and..Using.optional.argument.:cf |
308e0 | 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 79 6f 75 20 63 61 6e 20 69 6e 6a 65 63 74 20 | gcmd:`route-map`.you.can.inject. |
30900 | 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 6f 20 67 69 76 65 6e 20 6e 65 69 67 68 | the.default.route.to.given.neigh |
30920 | 62 6f 72 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 74 68 | bor.only.if.the.conditions.in.th |
30940 | 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 20 6d 65 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c | e.route.map.are.met..By.default, |
30960 | 20 61 20 6e 65 77 20 74 6f 6b 65 6e 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 65 76 65 72 79 20 | .a.new.token.is.generated.every. |
30980 | 33 30 20 73 65 63 6f 6e 64 73 20 62 79 20 74 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 6c 69 63 61 | 30.seconds.by.the.mobile.applica |
309a0 | 74 69 6f 6e 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 65 6e 73 61 74 65 20 66 6f 72 | tion..In.order.to.compensate.for |
309c0 | 20 70 6f 73 73 69 62 6c 65 20 74 69 6d 65 2d 73 6b 65 77 20 62 65 74 77 65 65 6e 20 74 68 65 20 | .possible.time-skew.between.the. |
309e0 | 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 2c 20 61 6e 20 65 78 74 72 61 20 | client.and.the.server,.an.extra. |
30a00 | 74 6f 6b 65 6e 20 62 65 66 6f 72 65 20 61 6e 64 20 61 66 74 65 72 20 74 68 65 20 63 75 72 72 65 | token.before.and.after.the.curre |
30a20 | 6e 74 20 74 69 6d 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 | nt.time.is.allowed..This.allows. |
30a40 | 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 33 30 20 73 65 63 6f | for.a.time.skew.of.up.to.30.seco |
30a60 | 6e 64 73 20 62 65 74 77 65 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 | nds.between.authentication.serve |
30a80 | 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 64 64 63 6c 69 65 | r.and.client..By.default,.ddclie |
30aa0 | 6e 74 5f 20 77 69 6c 6c 20 75 70 64 61 74 65 20 61 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 72 65 | nt_.will.update.a.dynamic.dns.re |
30ac0 | 63 6f 72 64 20 75 73 69 6e 67 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 | cord.using.the.IP.address.direct |
30ae0 | 6c 79 20 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 | ly.attached.to.the.interface..If |
30b00 | 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 69 73 20 62 65 68 69 6e 64 20 4e 41 | .your.VyOS.instance.is.behind.NA |
30b20 | 54 2c 20 79 6f 75 72 20 72 65 63 6f 72 64 20 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 74 | T,.your.record.will.be.updated.t |
30b40 | 6f 20 70 6f 69 6e 74 20 74 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 49 50 2e 00 42 79 20 | o.point.to.your.internal.IP..By. |
30b60 | 64 65 66 61 75 6c 74 2c 20 65 6e 61 62 6c 69 6e 67 20 52 50 4b 49 20 64 6f 65 73 20 6e 6f 74 20 | default,.enabling.RPKI.does.not. |
30b80 | 63 68 61 6e 67 65 20 62 65 73 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 49 6e 20 70 | change.best.path.selection..In.p |
30ba0 | 61 72 74 69 63 75 6c 61 72 2c 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 20 77 69 6c 6c | articular,.invalid.prefixes.will |
30bc0 | 20 73 74 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 64 75 72 69 6e 67 20 62 65 73 74 | .still.be.considered.during.best |
30be0 | 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 6f | .path.selection..However,.the.ro |
30c00 | 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 69 67 6e 6f 72 65 | uter.can.be.configured.to.ignore |
30c20 | 20 61 6c 6c 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2e 00 42 79 20 64 65 66 61 75 6c | .all.invalid.prefixes..By.defaul |
30c40 | 74 2c 20 69 74 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 70 6c 61 6e 6e 65 64 20 61 6e 64 20 | t,.it.supports.both.planned.and. |
30c60 | 75 6e 70 6c 61 6e 6e 65 64 20 6f 75 74 61 67 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6c | unplanned.outages..By.default,.l |
30c80 | 6f 63 61 6c 6c 79 20 61 64 76 65 72 74 69 73 65 64 20 70 72 65 66 69 78 65 73 20 75 73 65 20 74 | ocally.advertised.prefixes.use.t |
30ca0 | 68 65 20 69 6d 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c 20 74 6f 20 65 6e 63 6f 64 65 | he.implicit-null.label.to.encode |
30cc0 | 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 4c 52 49 2e 00 42 79 20 64 65 66 61 75 6c | .in.the.outgoing.NLRI..By.defaul |
30ce0 | 74 2c 20 6e 67 69 6e 78 20 65 78 70 6f 73 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 20 6f | t,.nginx.exposes.the.local.API.o |
30d00 | 6e 20 61 6c 6c 20 76 69 72 74 75 61 6c 20 73 65 72 76 65 72 73 2e 20 55 73 65 20 74 68 69 73 20 | n.all.virtual.servers..Use.this. |
30d20 | 74 6f 20 72 65 73 74 72 69 63 74 20 6e 67 69 6e 78 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 | to.restrict.nginx.to.one.or.more |
30d40 | 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 72 65 63 6f | .virtual.hosts..By.default,.reco |
30d60 | 72 64 65 64 20 66 6c 6f 77 73 20 77 69 6c 6c 20 62 65 20 73 61 76 65 64 20 69 6e 74 65 72 6e 61 | rded.flows.will.be.saved.interna |
30d80 | 6c 6c 79 20 61 6e 64 20 63 61 6e 20 62 65 20 6c 69 73 74 65 64 20 77 69 74 68 20 74 68 65 20 43 | lly.and.can.be.listed.with.the.C |
30da0 | 4c 49 20 63 6f 6d 6d 61 6e 64 2e 20 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 75 73 69 6e | LI.command..You.may.disable.usin |
30dc0 | 67 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 77 69 74 68 | g.the.local.in-memory.table.with |
30de0 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 42 47 | .the.command:.By.default,.the.BG |
30e00 | 50 20 70 72 65 66 69 78 20 69 73 20 61 64 76 65 72 74 69 73 65 64 20 65 76 65 6e 20 69 66 20 69 | P.prefix.is.advertised.even.if.i |
30e20 | 74 27 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 | t's.not.present.in.the.routing.t |
30e40 | 61 62 6c 65 2e 20 54 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 64 69 66 66 65 72 73 20 66 72 6f | able..This.behaviour.differs.fro |
30e60 | 6d 20 74 68 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 73 6f 6d 65 20 76 65 6e | m.the.implementation.of.some.ven |
30e80 | 64 6f 72 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 69 73 20 62 72 69 64 67 69 6e 67 20 | dors..By.default,.this.bridging. |
30ea0 | 69 73 20 61 6c 6c 6f 77 65 64 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 77 68 65 6e 20 56 79 4f | is.allowed..By.default,.when.VyO |
30ec0 | 53 20 72 65 63 65 69 76 65 73 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 | S.receives.an.ICMP.echo.request. |
30ee0 | 70 61 63 6b 65 74 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 69 74 73 65 6c 66 2c 20 69 74 20 77 | packet.destined.for.itself,.it.w |
30f00 | 69 6c 6c 20 61 6e 73 77 65 72 20 77 69 74 68 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 70 | ill.answer.with.an.ICMP.echo.rep |
30f20 | 6c 79 2c 20 75 6e 6c 65 73 73 20 79 6f 75 20 61 76 6f 69 64 20 69 74 20 74 68 72 6f 75 67 68 20 | ly,.unless.you.avoid.it.through. |
30f40 | 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 00 42 79 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 45 74 | its.firewall..By.using.Pseudo-Et |
30f60 | 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 72 65 20 77 69 6c 6c 20 62 65 20 | hernet.interfaces.there.will.be. |
30f80 | 6c 65 73 73 20 73 79 73 74 65 6d 20 6f 76 65 72 68 65 61 64 20 63 6f 6d 70 61 72 65 64 20 74 6f | less.system.overhead.compared.to |
30fa0 | 20 72 75 6e 6e 69 6e 67 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 62 72 69 64 67 69 6e 67 20 | .running.a.traditional.bridging. |
30fc0 | 61 70 70 72 6f 61 63 68 2e 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 | approach..Pseudo-Ethernet.interf |
30fe0 | 61 63 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 77 6f 72 6b 61 72 6f | aces.can.also.be.used.to.workaro |
31000 | 75 6e 64 20 74 68 65 20 67 65 6e 65 72 61 6c 20 6c 69 6d 69 74 20 6f 66 20 34 30 39 36 20 76 69 | und.the.general.limit.of.4096.vi |
31020 | 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 | rtual.LANs.(VLANs).per.physical. |
31040 | 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2c 20 73 69 6e 63 65 20 74 68 61 74 20 6c 69 6d 69 74 20 | Ethernet.port,.since.that.limit. |
31060 | 69 73 20 77 69 74 68 20 72 65 73 70 65 63 74 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 | is.with.respect.to.a.single.MAC. |
31080 | 61 64 64 72 65 73 73 2e 00 42 79 70 61 73 73 69 6e 67 20 74 68 65 20 77 65 62 70 72 6f 78 79 00 | address..Bypassing.the.webproxy. |
310a0 | 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 00 43 52 49 54 49 | CA.(Certificate.Authority).CRITI |
310c0 | 43 2f 45 43 50 00 43 61 6c 6c 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c | C/ECP.Call.another.route-map.pol |
310e0 | 69 63 79 20 6f 6e 20 6d 61 74 63 68 2e 00 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 | icy.on.match..Capability.Negotia |
31100 | 74 69 6f 6e 00 43 65 72 74 61 69 6e 20 76 65 6e 64 6f 72 73 20 75 73 65 20 62 72 6f 61 64 63 61 | tion.Certain.vendors.use.broadca |
31120 | 73 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 69 72 20 65 71 75 69 70 6d 65 6e 74 20 | sts.to.identify.their.equipment. |
31140 | 77 69 74 68 69 6e 20 6f 6e 65 20 65 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 2e 20 55 6e 66 | within.one.ethernet.segment..Unf |
31160 | 6f 72 74 75 6e 61 74 65 6c 79 20 69 66 20 79 6f 75 20 73 70 6c 69 74 20 79 6f 75 72 20 6e 65 74 | ortunately.if.you.split.your.net |
31180 | 77 6f 72 6b 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 20 79 6f 75 20 6c 6f 6f | work.with.multiple.VLANs.you.loo |
311a0 | 73 65 20 74 68 65 20 61 62 69 6c 69 74 79 20 6f 66 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f | se.the.ability.of.identifying.yo |
311c0 | 75 72 20 65 71 75 69 70 6d 65 6e 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 | ur.equipment..Certificate.Author |
311e0 | 69 74 79 20 28 43 41 29 00 43 65 72 74 69 66 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 | ity.(CA).Certificate.revocation. |
31200 | 6c 69 73 74 20 69 6e 20 50 45 4d 20 66 6f 72 6d 61 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 73 | list.in.PEM.format..Certificates |
31220 | 00 43 68 61 6e 67 65 20 73 79 73 74 65 6d 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 74 | .Change.system.keyboard.layout.t |
31240 | 6f 20 67 69 76 65 6e 20 6c 61 6e 67 75 61 67 65 2e 00 43 68 61 6e 67 65 20 74 68 65 20 64 65 66 | o.given.language..Change.the.def |
31260 | 61 75 6c 74 2d 61 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 73 65 74 74 69 6e 67 2e 00 43 | ault-action.with.this.setting..C |
31280 | 68 61 6e 67 65 73 20 69 6e 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 72 65 71 75 69 72 65 20 74 | hanges.in.BGP.policies.require.t |
312a0 | 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 62 65 20 63 6c 65 61 72 65 64 2e 20 43 6c | he.BGP.session.to.be.cleared..Cl |
312c0 | 65 61 72 69 6e 67 20 68 61 73 20 61 20 6c 61 72 67 65 20 6e 65 67 61 74 69 76 65 20 69 6d 70 61 | earing.has.a.large.negative.impa |
312e0 | 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 53 6f 66 74 20 72 | ct.on.network.operations..Soft.r |
31300 | 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 67 65 | econfiguration.enables.you.to.ge |
31320 | 6e 65 72 61 74 65 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 61 20 6e 65 | nerate.inbound.updates.from.a.ne |
31340 | 69 67 68 62 6f 72 2c 20 63 68 61 6e 67 65 20 61 6e 64 20 61 63 74 69 76 61 74 65 20 42 47 50 20 | ighbor,.change.and.activate.BGP. |
31360 | 70 6f 6c 69 63 69 65 73 20 77 69 74 68 6f 75 74 20 63 6c 65 61 72 69 6e 67 20 74 68 65 20 42 47 | policies.without.clearing.the.BG |
31380 | 50 20 73 65 73 73 69 6f 6e 2e 00 43 68 61 6e 67 65 73 20 74 6f 20 74 68 65 20 4e 41 54 20 73 79 | P.session..Changes.to.the.NAT.sy |
313a0 | 73 74 65 6d 20 6f 6e 6c 79 20 61 66 66 65 63 74 20 6e 65 77 6c 79 20 65 73 74 61 62 6c 69 73 68 | stem.only.affect.newly.establish |
313c0 | 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 41 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 | ed.connections..Already.establis |
313e0 | 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 6e 6f 74 20 61 66 66 65 63 74 65 64 | hed.connections.are.not.affected |
31400 | 2e 00 43 68 61 6e 67 69 6e 67 20 74 68 65 20 6b 65 79 6d 61 70 20 6f 6e 6c 79 20 68 61 73 20 61 | ..Changing.the.keymap.only.has.a |
31420 | 6e 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2c 20 | n.effect.on.the.system.console,. |
31440 | 75 73 69 6e 67 20 53 53 48 20 6f 72 20 53 65 72 69 61 6c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 | using.SSH.or.Serial.remote.acces |
31460 | 73 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 20 | s.to.the.device.is.not.affected. |
31480 | 61 73 20 74 68 65 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 68 65 72 65 20 63 6f 72 72 | as.the.keyboard.layout.here.corr |
314a0 | 65 73 70 6f 6e 64 73 20 74 6f 20 79 6f 75 72 20 61 63 63 65 73 73 20 73 79 73 74 65 6d 2e 00 43 | esponds.to.your.access.system..C |
314c0 | 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 28 49 45 45 45 20 38 30 32 2e 31 31 29 2c 20 66 6f 72 | hannel.number.(IEEE.802.11),.for |
314e0 | 20 32 2e 34 47 68 7a 20 28 38 30 32 2e 31 31 20 62 2f 67 2f 6e 29 20 63 68 61 6e 6e 65 6c 73 20 | .2.4Ghz.(802.11.b/g/n).channels. |
31500 | 72 61 6e 67 65 20 66 72 6f 6d 20 31 2d 31 34 2e 20 4f 6e 20 35 47 68 7a 20 28 38 30 32 2e 31 31 | range.from.1-14..On.5Ghz.(802.11 |
31520 | 20 61 2f 68 2f 6a 2f 6e 2f 61 63 29 20 63 68 61 6e 6e 65 6c 73 20 61 76 61 69 6c 61 62 6c 65 20 | .a/h/j/n/ac).channels.available. |
31540 | 61 72 65 20 30 2c 20 33 34 20 74 6f 20 31 37 33 00 43 68 65 63 6b 20 69 66 20 74 68 65 20 49 6e | are.0,.34.to.173.Check.if.the.In |
31560 | 74 65 6c c2 ae 20 51 41 54 20 64 65 76 69 63 65 20 69 73 20 75 70 20 61 6e 64 20 72 65 61 64 79 | tel...QAT.device.is.up.and.ready |
31580 | 20 74 6f 20 64 6f 20 74 68 65 20 6a 6f 62 2e 00 43 68 65 63 6b 20 73 74 61 74 75 73 00 43 68 65 | .to.do.the.job..Check.status.Che |
315a0 | 63 6b 20 74 68 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 | ck.the.many.parameters.available |
315c0 | 20 66 6f 72 20 74 68 65 20 60 73 68 6f 77 20 69 70 76 36 20 72 6f 75 74 65 60 20 63 6f 6d 6d 61 | .for.the.`show.ipv6.route`.comma |
315e0 | 6e 64 3a 00 43 68 65 63 6b 3a 00 43 68 65 63 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 | nd:.Check:.Checking.connections. |
31600 | 43 68 65 63 6b 73 00 43 68 6f 6f 73 65 20 79 6f 75 72 20 60 60 64 69 72 65 63 74 6f 72 79 60 60 | Checks.Choose.your.``directory`` |
31620 | 20 6c 6f 63 61 74 69 6f 6e 20 63 61 72 65 66 75 6c 6c 79 20 6f 72 20 79 6f 75 20 77 69 6c 6c 20 | .location.carefully.or.you.will. |
31640 | 6c 6f 6f 73 65 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 69 6d 61 67 65 20 75 70 67 72 61 | loose.the.content.on.image.upgra |
31660 | 64 65 73 2e 20 41 6e 79 20 64 69 72 65 63 74 6f 72 79 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 | des..Any.directory.under.``/conf |
31680 | 69 67 60 60 20 69 73 20 73 61 76 65 20 61 74 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 | ig``.is.save.at.this.will.be.mig |
316a0 | 72 61 74 65 64 2e 00 43 69 73 63 6f 20 43 61 74 61 6c 79 73 74 00 43 69 73 63 6f 20 61 6e 64 20 | rated..Cisco.Catalyst.Cisco.and. |
316c0 | 41 6c 6c 69 65 64 20 54 65 6c 65 73 79 6e 20 63 61 6c 6c 20 69 74 20 50 72 69 76 61 74 65 20 56 | Allied.Telesyn.call.it.Private.V |
316e0 | 4c 41 4e 00 43 6c 61 6d 70 20 4d 53 53 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 49 50 00 | LAN.Clamp.MSS.for.a.specific.IP. |
31700 | 43 6c 61 73 73 20 74 72 65 61 74 6d 65 6e 74 00 43 6c 61 73 73 65 73 00 43 6c 61 73 73 6c 65 73 | Class.treatment.Classes.Classles |
31720 | 73 20 73 74 61 74 69 63 20 72 6f 75 74 65 00 43 6c 65 61 72 20 61 6c 6c 20 42 47 50 20 65 78 74 | s.static.route.Clear.all.BGP.ext |
31740 | 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 43 6c 69 65 6e 74 00 43 6c 69 65 6e 74 20 41 64 64 72 65 | communities..Client.Client.Addre |
31760 | 73 73 20 50 6f 6f 6c 73 00 43 6c 69 65 6e 74 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 | ss.Pools.Client.Authentication.C |
31780 | 6c 69 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 49 50 20 50 6f | lient.Configuration.Client.IP.Po |
317a0 | 6f 6c 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 43 6c 69 65 6e 74 20 49 50 20 61 64 | ol.Advanced.Options.Client.IP.ad |
317c0 | 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 76 69 64 65 64 20 66 72 6f 6d 20 70 6f | dresses.will.be.provided.from.po |
317e0 | 6f 6c 20 60 31 39 32 2e 30 2e 32 2e 30 2f 32 35 60 00 43 6c 69 65 6e 74 20 53 69 64 65 00 43 6c | ol.`192.0.2.0/25`.Client.Side.Cl |
31800 | 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e | ient.configuration.Client.domain |
31820 | 20 6e 61 6d 65 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 00 43 6c 69 65 6e | .name.Client.domain.search.Clien |
31840 | 74 20 69 73 6f 6c 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 | t.isolation.can.be.used.to.preve |
31860 | 6e 74 20 6c 6f 77 2d 6c 65 76 65 6c 20 62 72 69 64 67 69 6e 67 20 6f 66 20 66 72 61 6d 65 73 20 | nt.low-level.bridging.of.frames. |
31880 | 62 65 74 77 65 65 6e 20 61 73 73 6f 63 69 61 74 65 64 20 73 74 61 74 69 6f 6e 73 20 69 6e 20 74 | between.associated.stations.in.t |
318a0 | 68 65 20 42 53 53 2e 00 43 6c 69 65 6e 74 3a 00 43 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e | he.BSS..Client:.Clients.are.iden |
318c0 | 74 69 66 69 65 64 20 62 79 20 74 68 65 20 43 4e 20 66 69 65 6c 64 20 6f 66 20 74 68 65 69 72 20 | tified.by.the.CN.field.of.their. |
318e0 | 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d | x.509.certificates,.in.this.exam |
31900 | 70 6c 65 20 74 68 65 20 43 4e 20 69 73 20 60 60 63 6c 69 65 6e 74 30 60 60 3a 00 43 6c 69 65 6e | ple.the.CN.is.``client0``:.Clien |
31920 | 74 73 20 72 65 63 65 69 76 69 6e 67 20 61 64 76 65 72 74 69 73 65 20 6d 65 73 73 61 67 65 73 20 | ts.receiving.advertise.messages. |
31940 | 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 63 68 6f 6f 73 65 20 74 68 65 | from.multiple.servers.choose.the |
31960 | 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 65 66 65 72 65 | .server.with.the.highest.prefere |
31980 | 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 72 61 6e 67 65 20 66 6f 72 20 74 68 69 73 20 76 61 | nce.value..The.range.for.this.va |
319a0 | 6c 75 65 20 69 73 20 60 60 30 2e 2e 2e 32 35 35 60 60 2e 00 43 6c 6f 63 6b 20 64 61 65 6d 6f 6e | lue.is.``0...255``..Clock.daemon |
319c0 | 00 43 6f 6d 6d 61 6e 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 | .Command.completion.can.be.used. |
319e0 | 74 6f 20 6c 69 73 74 20 61 76 61 69 6c 61 62 6c 65 20 74 69 6d 65 20 7a 6f 6e 65 73 2e 20 54 68 | to.list.available.time.zones..Th |
31a00 | 65 20 61 64 6a 75 73 74 6d 65 6e 74 20 66 6f 72 20 64 61 79 6c 69 67 68 74 20 74 69 6d 65 20 77 | e.adjustment.for.daylight.time.w |
31a20 | 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 61 73 | ill.take.place.automatically.bas |
31a40 | 65 64 20 6f 6e 20 74 68 65 20 74 69 6d 65 20 6f 66 20 79 65 61 72 2e 00 43 6f 6d 6d 61 6e 64 20 | ed.on.the.time.of.year..Command. |
31a60 | 66 6f 72 20 64 69 73 61 62 6c 69 6e 67 20 61 20 72 75 6c 65 20 62 75 74 20 6b 65 65 70 20 69 74 | for.disabling.a.rule.but.keep.it |
31a80 | 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 43 6f 6d 6d 61 6e 64 20 73 | .in.the.configuration..Command.s |
31aa0 | 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 62 65 20 65 78 74 65 6e 64 65 64 20 74 6f 20 6c 69 | hould.probably.be.extended.to.li |
31ac0 | 73 74 20 61 6c 73 6f 20 74 68 65 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 73 69 | st.also.the.real.interfaces.assi |
31ae0 | 67 6e 65 64 20 74 6f 20 74 68 69 73 20 6f 6e 65 20 56 52 46 20 74 6f 20 67 65 74 20 61 20 62 65 | gned.to.this.one.VRF.to.get.a.be |
31b00 | 74 74 65 72 20 6f 76 65 72 76 69 65 77 2e 00 43 6f 6d 6d 61 6e 64 20 75 73 65 64 20 74 6f 20 75 | tter.overview..Command.used.to.u |
31b20 | 70 64 61 74 65 20 47 65 6f 49 50 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 66 69 72 65 77 61 6c | pdate.GeoIP.database.and.firewal |
31b40 | 6c 20 73 65 74 73 2e 00 43 6f 6d 6d 61 6e 64 73 00 43 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 | l.sets..Commands.Common.configur |
31b60 | 61 74 69 6f 6e 2c 20 76 61 6c 69 64 20 66 6f 72 20 62 6f 74 68 20 70 72 69 6d 61 72 79 20 61 6e | ation,.valid.for.both.primary.an |
31b80 | 64 20 73 65 63 6f 6e 64 61 72 79 20 6e 6f 64 65 2e 00 43 6f 6d 6d 6f 6e 20 69 6e 74 65 72 66 61 | d.secondary.node..Common.interfa |
31ba0 | 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6d 6d 6f 6e 20 70 61 72 61 6d 65 74 65 | ce.configuration.Common.paramete |
31bc0 | 72 73 00 43 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 | rs.Confederation.Configuration.C |
31be0 | 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 e2 80 93 20 45 6e 63 72 79 70 74 69 6f 6e 20 6f 66 | onfidentiality.....Encryption.of |
31c00 | 20 70 61 63 6b 65 74 73 20 74 6f 20 70 72 65 76 65 6e 74 20 73 6e 6f 6f 70 69 6e 67 20 62 79 20 | .packets.to.prevent.snooping.by. |
31c20 | 61 6e 20 75 6e 61 75 74 68 6f 72 69 7a 65 64 20 73 6f 75 72 63 65 2e 00 43 6f 6e 66 69 67 75 72 | an.unauthorized.source..Configur |
31c40 | 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 6c 65 00 43 6f 6e 66 | ation.Configuration.Example.Conf |
31c60 | 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 6c 65 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | iguration.Examples.Configuration |
31c80 | 20 47 75 69 64 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 4f 70 74 69 6f 6e 73 00 43 6f 6e | .Guide.Configuration.Options.Con |
31ca0 | 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 | figuration.commands.covered.in.t |
31cc0 | 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 | his.section:.Configuration.comma |
31ce0 | 6e 64 73 20 66 6f 72 20 74 68 65 20 70 72 69 76 61 74 65 20 61 6e 64 20 70 75 62 6c 69 63 20 6b | nds.for.the.private.and.public.k |
31d00 | 65 79 20 77 69 6c 6c 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 73 63 72 65 | ey.will.be.displayed.on.the.scre |
31d20 | 65 6e 20 77 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 65 74 20 6f 6e 20 74 68 65 20 | en.which.needs.to.be.set.on.the. |
31d40 | 72 6f 75 74 65 72 20 66 69 72 73 74 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 | router.first..Note.the.command.w |
31d60 | 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d | ith.the.public.key.(set.pki.key- |
31d80 | 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 | pair.ipsec-LEFT.public.key.'MIIB |
31da0 | 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 | IjANBgkqh...')..Then.do.the.same |
31dc0 | 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 | .on.the.opposite.router:.Configu |
31de0 | 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 2e 20 4e 6f | ration.commands.will.display..No |
31e00 | 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b | te.the.command.with.the.public.k |
31e20 | 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 | ey.(set.pki.key-pair.ipsec-LEFT. |
31e40 | 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 | public.key.'MIIBIjANBgkqh...').. |
31e60 | 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 | Then.do.the.same.on.the.opposite |
31e80 | 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 3a 00 | .router:.Configuration.example:. |
31ea0 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 73 65 20 65 78 70 6f 72 74 65 64 | Configuration.for.these.exported |
31ec0 | 20 72 6f 75 74 65 73 20 6d 75 73 74 2c 20 61 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 73 70 65 63 | .routes.must,.at.a.minimum,.spec |
31ee0 | 69 66 79 20 74 68 65 73 65 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 | ify.these.two.parameters..Config |
31f00 | 75 72 61 74 69 6f 6e 20 6f 66 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 | uration.of.:ref:`routing-static` |
31f20 | 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 66 61 69 6c 6f 76 65 | .Configuration.of.a.DHCP.failove |
31f40 | 72 20 70 61 69 72 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 6c 65 | r.pair.Configuration.of.route.le |
31f60 | 61 6b 69 6e 67 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 | aking.between.a.unicast.VRF.RIB. |
31f80 | 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 | and.the.VPN.SAFI.RIB.of.the.defa |
31fa0 | 75 6c 74 20 56 52 46 20 69 73 20 61 63 63 6f 6d 70 6c 69 73 68 65 64 20 76 69 61 20 63 6f 6d 6d | ult.VRF.is.accomplished.via.comm |
31fc0 | 61 6e 64 73 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 20 56 52 46 20 61 64 64 | ands.in.the.context.of.a.VRF.add |
31fe0 | 72 65 73 73 2d 66 61 6d 69 6c 79 2e 00 43 6f 6e 66 69 67 75 72 65 00 43 6f 6e 66 69 67 75 72 65 | ress-family..Configure.Configure |
32000 | 20 3a 61 62 62 72 3a 60 4d 54 55 20 28 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f | .:abbr:`MTU.(Maximum.Transmissio |
32020 | 6e 20 55 6e 69 74 29 60 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e | n.Unit)`.on.given.`<interface>`. |
32040 | 20 49 74 20 69 73 20 74 68 65 20 73 69 7a 65 20 28 69 6e 20 62 79 74 65 73 29 20 6f 66 20 74 68 | .It.is.the.size.(in.bytes).of.th |
32060 | 65 20 6c 61 72 67 65 73 74 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 20 73 65 6e 74 20 6f 6e | e.largest.ethernet.frame.sent.on |
32080 | 20 74 68 69 73 20 6c 69 6e 6b 2e 00 43 6f 6e 66 69 67 75 72 65 20 42 46 44 00 43 6f 6e 66 69 67 | .this.link..Configure.BFD.Config |
320a0 | 75 72 65 20 44 4e 53 20 60 3c 72 65 63 6f 72 64 3e 60 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 | ure.DNS.`<record>`.which.should. |
320c0 | 62 65 20 75 70 64 61 74 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 6d 75 6c 74 | be.updated..This.can.be.set.mult |
320e0 | 69 70 6c 65 20 74 69 6d 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 7a 6f 6e 65 | iple.times..Configure.DNS.`<zone |
32100 | 3e 60 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 45 4e 45 | >`.to.be.updated..Configure.GENE |
32120 | 56 45 20 74 75 6e 6e 65 6c 20 66 61 72 20 65 6e 64 2f 72 65 6d 6f 74 65 20 74 75 6e 6e 65 6c 20 | VE.tunnel.far.end/remote.tunnel. |
32140 | 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 | endpoint..Configure.Graceful.Res |
32160 | 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 33 60 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 2e | tart.:rfc:`3623`.helper.support. |
32180 | 20 42 79 20 64 65 66 61 75 6c 74 2c 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 69 73 20 64 | .By.default,.helper.support.is.d |
321a0 | 69 73 61 62 6c 65 64 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 20 54 68 69 73 | isabled.for.all.neighbours..This |
321c0 | 20 63 6f 6e 66 69 67 20 65 6e 61 62 6c 65 73 2f 64 69 73 61 62 6c 65 73 20 68 65 6c 70 65 72 20 | .config.enables/disables.helper. |
321e0 | 73 75 70 70 6f 72 74 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 20 66 6f 72 20 61 6c 6c 20 6e | support.on.this.router.for.all.n |
32200 | 65 69 67 68 62 6f 75 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 | eighbours..Configure.Graceful.Re |
32220 | 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 33 60 20 72 65 73 74 61 72 74 69 6e 67 20 73 75 70 | start.:rfc:`3623`.restarting.sup |
32240 | 70 6f 72 74 2e 20 57 68 65 6e 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 | port..When.enabled,.the.default. |
32260 | 67 72 61 63 65 20 70 65 72 69 6f 64 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e | grace.period.is.120.seconds..Con |
32280 | 66 69 67 75 72 65 20 49 43 4d 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 | figure.ICMP.threshold.parameters |
322a0 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 44 48 | ..Configure.IP.address.of.the.DH |
322c0 | 43 50 20 60 3c 73 65 72 76 65 72 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 | CP.`<server>`.which.will.handle. |
322e0 | 74 68 65 20 72 65 6c 61 79 65 64 20 70 61 63 6b 65 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 | the.relayed.packets..Configure.R |
32300 | 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 | ADIUS.`<server>`.and.its.require |
32320 | 64 20 70 6f 72 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 | d.port.for.authentication.reques |
32340 | 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 | ts..Configure.RADIUS.`<server>`. |
32360 | 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 64 20 73 68 61 72 65 64 20 60 3c 73 65 63 72 65 74 | and.its.required.shared.`<secret |
32380 | 3e 60 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 52 41 | >`.for.communicating.with.the.RA |
323a0 | 44 49 55 53 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 53 4e 41 54 20 72 75 6c 65 | DIUS.server..Configure.SNAT.rule |
323c0 | 20 28 34 30 29 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 | .(40).to.only.NAT.packets.with.a |
323e0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 30 2e 32 2e | .destination.address.of.192.0.2. |
32400 | 31 2e 00 43 6f 6e 66 69 67 75 72 65 20 54 43 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d | 1..Configure.TCP.threshold.param |
32420 | 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 65 20 55 44 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 | eters.Configure.UDP.threshold.pa |
32440 | 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 | rameters.Configure.`<message>`.w |
32460 | 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 20 75 73 65 72 20 68 61 73 20 6c 6f 67 | hich.is.shown.after.user.has.log |
32480 | 67 65 64 20 69 6e 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e 00 43 6f 6e 66 69 67 75 72 65 20 | ged.in.to.the.system..Configure. |
324a0 | 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 64 75 72 69 6e | `<message>`.which.is.shown.durin |
324c0 | 67 20 53 53 48 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 62 65 66 6f 72 65 20 61 20 75 73 65 72 20 | g.SSH.connect.and.before.a.user. |
324e0 | 69 73 20 6c 6f 67 67 65 64 20 69 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f | is.logged.in..Configure.`<passwo |
32500 | 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 | rd>`.used.when.authenticating.th |
32520 | 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 | e.update.request.for.DynDNS.serv |
32540 | 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 | ice.identified.by.`<service-name |
32560 | 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 | >`..Configure.`<password>`.used. |
32580 | 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 | when.authenticating.the.update.r |
325a0 | 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 | equest.for.DynDNS.service.identi |
325c0 | 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 | fied.by.`<service>`..Configure.` |
325e0 | 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 | <username>`.used.when.authentica |
32600 | 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 | ting.the.update.request.for.DynD |
32620 | 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | NS.service.identified.by.`<servi |
32640 | 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e | ce-name>`..Configure.`<username> |
32660 | 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 | `.used.when.authenticating.the.u |
32680 | 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 | pdate.request.for.DynDNS.service |
326a0 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 20 46 6f 72 20 | .identified.by.`<service>`..For. |
326c0 | 4e 61 6d 65 63 68 65 61 70 2c 20 73 65 74 20 74 68 65 20 3c 64 6f 6d 61 69 6e 3e 20 79 6f 75 20 | Namecheap,.set.the.<domain>.you. |
326e0 | 77 69 73 68 20 74 6f 20 75 70 64 61 74 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 55 52 4c 20 | wish.to.update..Configure.a.URL. |
32700 | 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 | that.contains.information.about. |
32720 | 69 6d 61 67 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 | images..Configure.a.sFlow.agent. |
32740 | 61 64 64 72 65 73 73 2e 20 49 74 20 63 61 6e 20 62 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 | address..It.can.be.IPv4.or.IPv6. |
32760 | 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 6d 75 73 74 20 73 65 74 20 74 68 65 20 73 61 | address,.but.you.must.set.the.sa |
32780 | 6d 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 73 | me.protocol,.which.is.used.for.s |
327a0 | 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 20 61 64 64 72 65 73 73 65 73 2e 20 42 79 20 64 65 66 | Flow.collector.addresses..By.def |
327c0 | 61 75 6c 74 2c 20 75 73 69 6e 67 20 72 6f 75 74 65 72 2d 69 64 20 66 72 6f 6d 20 42 47 50 20 6f | ault,.using.router-id.from.BGP.o |
327e0 | 72 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 2c 20 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 | r.OSPF.protocol,.or.the.primary. |
32800 | 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 69 6e 74 65 72 66 | IP.address.from.the.first.interf |
32820 | 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f | ace..Configure.a.static.route.fo |
32840 | 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 | r.<subnet>.using.gateway.<addres |
32860 | 73 3e 20 2c 20 75 73 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 6f 20 69 6e 64 65 6e | s>.,.use.source.address.to.inden |
32880 | 74 69 66 79 20 74 68 65 20 70 65 65 72 20 77 68 65 6e 20 69 73 20 6d 75 6c 74 69 2d 68 6f 70 20 | tify.the.peer.when.is.multi-hop. |
328a0 | 73 65 73 73 69 6f 6e 20 61 6e 64 20 74 68 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 | session.and.the.gateway.address. |
328c0 | 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e | as.BFD.peer.destination.address. |
328e0 | 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 | .Configure.a.static.route.for.<s |
32900 | 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 61 | ubnet>.using.gateway.<address>.a |
32920 | 6e 64 20 75 73 65 20 74 68 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 | nd.use.the.gateway.address.as.BF |
32940 | 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 | D.peer.destination.address..Conf |
32960 | 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 | igure.address.of.NetFlow.collect |
32980 | 6f 72 2e 20 4e 65 74 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e | or..NetFlow.server.at.`<address> |
329a0 | 60 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 | `.can.be.both.listening.on.an.IP |
329c0 | 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 | v4.or.IPv6.address..Configure.ad |
329e0 | 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 | dress.of.sFlow.collector..sFlow. |
32a00 | 73 65 72 76 65 72 20 61 74 20 3c 61 64 64 72 65 73 73 3e 20 63 61 6e 20 62 65 20 62 6f 74 68 20 | server.at.<address>.can.be.both. |
32a20 | 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 | listening.on.an.IPv4.or.IPv6.add |
32a40 | 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 | ress..Configure.address.of.sFlow |
32a60 | 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 | .collector..sFlow.server.at.`<ad |
32a80 | 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 | dress>`.can.be.an.IPv4.or.IPv6.a |
32aa0 | 64 64 72 65 73 73 2e 20 42 75 74 20 79 6f 75 20 63 61 6e 6e 6f 74 20 65 78 70 6f 72 74 20 74 6f | ddress..But.you.cannot.export.to |
32ac0 | 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 63 6f 6c 6c 65 63 74 6f 72 73 20 61 | .both.IPv4.and.IPv6.collectors.a |
32ae0 | 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 21 00 43 6f 6e 66 69 67 75 72 65 20 61 67 65 6e 74 | t.the.same.time!.Configure.agent |
32b00 | 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 | .IP.address.associated.with.this |
32b20 | 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 67 67 72 65 67 61 74 69 6f | .interface..Configure.aggregatio |
32b40 | 6e 20 64 65 6c 61 79 20 74 69 6d 65 72 20 69 6e 74 65 72 76 61 6c 2e 00 43 6f 6e 66 69 67 75 72 | n.delay.timer.interval..Configur |
32b60 | 65 20 61 6c 65 72 74 20 73 63 72 69 70 74 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 65 78 65 63 | e.alert.script.that.will.be.exec |
32b80 | 75 74 65 64 20 77 68 65 6e 20 61 6e 20 61 74 74 61 63 6b 20 69 73 20 64 65 74 65 63 74 65 64 2e | uted.when.an.attack.is.detected. |
32ba0 | 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 20 61 63 63 6f 75 6e 74 69 6e 67 20 73 65 72 76 65 72 20 | .Configure.an.accounting.server. |
32bc0 | 61 6e 64 20 65 6e 61 62 6c 65 20 61 63 63 6f 75 6e 74 69 6e 67 20 77 69 74 68 3a 00 43 6f 6e 66 | and.enable.accounting.with:.Conf |
32be0 | 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 | igure.and.enable.collection.of.f |
32c00 | 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 | low.information.for.the.interfac |
32c20 | 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 69 6e 74 65 72 66 61 63 65 3e 2e 00 43 6f 6e | e.identified.by.<interface>..Con |
32c40 | 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 | figure.and.enable.collection.of. |
32c60 | 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 | flow.information.for.the.interfa |
32c80 | 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 | ce.identified.by.`<interface>`.. |
32ca0 | 43 6f 6e 66 69 67 75 72 65 20 61 75 74 6f 2d 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 6e 65 77 20 | Configure.auto-checking.for.new. |
32cc0 | 69 6d 61 67 65 73 00 43 6f 6e 66 69 67 75 72 65 20 62 61 63 6b 65 6e 64 20 60 3c 6e 61 6d 65 3e | images.Configure.backend.`<name> |
32ce0 | 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 62 6f 74 | `.mode.TCP.or.HTTP.Configure.bot |
32d00 | 68 20 72 6f 75 74 65 72 73 20 28 61 20 61 6e 64 20 62 29 20 66 6f 72 20 44 48 43 50 76 36 2d 50 | h.routers.(a.and.b).for.DHCPv6-P |
32d20 | 44 20 76 69 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 3a 00 43 6f 6e 66 69 67 75 72 65 | D.via.dummy.interface:.Configure |
32d40 | 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 74 72 61 66 66 69 | .direction.for.processing.traffi |
32d60 | 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 72 20 6f 6e 65 20 6f 72 20 74 77 6f 20 73 | c..Configure.either.one.or.two.s |
32d80 | 74 6f 70 20 62 69 74 73 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 6f 6e 65 20 73 | top.bits..This.defaults.to.one.s |
32da0 | 74 6f 70 20 62 69 74 73 20 69 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 | top.bits.if.left.unconfigured..C |
32dc0 | 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 72 20 73 65 76 65 6e 20 6f 72 20 65 69 67 68 74 20 64 | onfigure.either.seven.or.eight.d |
32de0 | 61 74 61 20 62 69 74 73 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 65 69 67 68 74 | ata.bits..This.defaults.to.eight |
32e00 | 20 64 61 74 61 20 62 69 74 73 20 69 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e | .data.bits.if.left.unconfigured. |
32e20 | 00 43 6f 6e 66 69 67 75 72 65 20 67 65 6e 65 72 61 6c 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 | .Configure.general.threshold.par |
32e40 | 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 68 6f 77 20 6c 6f 6e 67 20 61 6e 20 49 | ameters..Configure.how.long.an.I |
32e60 | 50 20 28 61 74 74 61 63 6b 65 72 29 20 73 68 6f 75 6c 64 20 62 65 20 6b 65 70 74 20 69 6e 20 62 | P.(attacker).should.be.kept.in.b |
32e80 | 6c 6f 63 6b 65 64 20 73 74 61 74 65 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 | locked.state..Default.value.is.1 |
32ea0 | 39 30 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 69 64 67 65 | 900..Configure.individual.bridge |
32ec0 | 20 70 6f 72 74 20 60 3c 70 72 69 6f 72 69 74 79 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e | .port.`<priority>`..Configure.in |
32ee0 | 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 74 68 20 6f 6e 65 20 6f | terface.`<interface>`.with.one.o |
32f00 | 72 20 6d 6f 72 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 65 73 2e 00 43 6f 6e 66 | r.more.interface.addresses..Conf |
32f20 | 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 2d 73 70 65 63 69 66 69 63 20 48 6f 73 74 2f 52 6f | igure.interface-specific.Host/Ro |
32f40 | 75 74 65 72 20 62 65 68 61 76 69 6f 75 72 2e 20 49 66 20 73 65 74 2c 20 74 68 65 20 69 6e 74 65 | uter.behaviour..If.set,.the.inte |
32f60 | 72 66 61 63 65 20 77 69 6c 6c 20 73 77 69 74 63 68 20 74 6f 20 68 6f 73 74 20 6d 6f 64 65 20 61 | rface.will.switch.to.host.mode.a |
32f80 | 6e 64 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 | nd.IPv6.forwarding.will.be.disab |
32fa0 | 6c 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 | led.on.this.interface..Configure |
32fc0 | 20 6c 69 73 74 65 6e 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 6d 69 72 72 6f 72 69 6e 67 20 | .listen.interface.for.mirroring. |
32fe0 | 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 61 64 | traffic..Configure.local.IPv4.ad |
33000 | 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 73 66 6c 6f 77 2e 00 43 6f 6e 66 69 | dress.to.listen.for.sflow..Confi |
33020 | 67 75 72 65 20 6e 65 77 20 53 4e 4d 50 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 | gure.new.SNMP.user.named."vyos". |
33040 | 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 22 76 79 6f 73 31 32 33 34 35 36 37 38 22 00 43 6f 6e | with.password."vyos12345678".Con |
33060 | 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 | figure.next-hop.`<address>`.and. |
33080 | 60 3c 74 61 72 67 65 74 2d 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 | `<target-address>`.for.an.IPv4.s |
330a0 | 74 61 74 69 63 20 72 6f 75 74 65 2e 20 53 70 65 63 69 66 79 20 74 68 65 20 74 61 72 67 65 74 20 | tatic.route..Specify.the.target. |
330c0 | 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 | IPv4.address.for.health.checking |
330e0 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 | ..Configure.next-hop.`<address>` |
33100 | 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 | .for.an.IPv4.static.route..Multi |
33120 | 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 | ple.static.routes.can.be.created |
33140 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 | ..Configure.next-hop.`<address>` |
33160 | 20 66 6f 72 20 61 6e 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 | .for.an.IPv6.static.route..Multi |
33180 | 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 | ple.static.routes.can.be.created |
331a0 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 72 65 64 65 66 69 6e 65 | ..Configure.one.of.the.predefine |
331c0 | 64 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 70 72 6f 66 69 6c 65 73 2e 00 43 | d.system.performance.profiles..C |
331e0 | 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 74 74 72 69 62 75 74 65 73 20 | onfigure.one.or.more.attributes. |
33200 | 74 6f 20 74 68 65 20 67 69 76 65 6e 20 4e 54 50 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 | to.the.given.NTP.server..Configu |
33220 | 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 73 65 72 76 65 72 73 20 66 6f 72 20 73 79 6e 63 68 | re.one.or.more.servers.for.synch |
33240 | 72 6f 6e 69 73 61 74 69 6f 6e 2e 20 53 65 72 76 65 72 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 65 | ronisation..Server.name.can.be.e |
33260 | 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 3a 61 62 62 72 3a 60 46 51 | ither.an.IP.address.or.:abbr:`FQ |
33280 | 44 4e 20 28 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 29 | DN.(Fully.Qualified.Domain.Name) |
332a0 | 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 70 74 69 6f 6e 61 6c 20 54 54 4c 20 76 61 6c 75 65 20 | `..Configure.optional.TTL.value. |
332c0 | 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 72 65 73 6f 75 72 63 65 20 72 65 63 6f 72 64 2e 20 54 68 | on.the.given.resource.record..Th |
332e0 | 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 | is.defaults.to.600.seconds..Conf |
33300 | 69 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 | igure.physical.interface.duplex. |
33320 | 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 | setting..Configure.physical.inte |
33340 | 72 66 61 63 65 20 73 70 65 65 64 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 | rface.speed.setting..Configure.p |
33360 | 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 69 6e | ort.mirroring.for.`interface`.in |
33380 | 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 | bound.traffic.and.copy.the.traff |
333a0 | 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 | ic.to.`monitor-interface`.Config |
333c0 | 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 | ure.port.mirroring.for.`interfac |
333e0 | 65 60 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 | e`.outbound.traffic.and.copy.the |
33400 | 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 | .traffic.to.`monitor-interface`. |
33420 | 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 | Configure.port.number.of.remote. |
33440 | 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e | VXLAN.endpoint..Configure.port.n |
33460 | 75 6d 62 65 72 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 66 6c 6f 77 20 63 6f 6e 65 63 | umber.to.be.used.for.sflow.conec |
33480 | 74 69 6f 6e 2e 20 44 65 66 61 75 6c 74 20 70 6f 72 74 20 69 73 20 36 33 34 33 2e 00 43 6f 6e 66 | tion..Default.port.is.6343..Conf |
334a0 | 69 67 75 72 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 | igure.protocol.used.for.communic |
334c0 | 61 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 68 6f 73 74 2e 20 54 68 69 | ation.to.remote.syslog.host..Thi |
334e0 | 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 55 44 50 20 6f 72 20 54 43 50 2e 00 43 6f 6e 66 | s.can.be.either.UDP.or.TCP..Conf |
33500 | 69 67 75 72 65 20 70 72 6f 78 79 20 70 6f 72 74 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 | igure.proxy.port.if.it.does.not. |
33520 | 6c 69 73 74 65 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 38 30 2e 00 43 | listen.to.the.default.port.80..C |
33540 | 6f 6e 66 69 67 75 72 65 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 49 50 76 34 20 6f 72 20 49 50 76 | onfigure.sFlow.agent.IPv4.or.IPv |
33560 | 36 20 61 64 64 72 65 73 73 00 43 6f 6e 66 69 67 75 72 65 20 73 63 68 65 64 75 6c 65 20 63 6f 75 | 6.address.Configure.schedule.cou |
33580 | 6e 74 65 72 2d 70 6f 6c 6c 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 | nter-polling.in.seconds.(default |
335a0 | 3a 20 33 30 29 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 | :.30).Configure.service.`<name>` |
335c0 | 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 | .mode.TCP.or.HTTP.Configure.serv |
335e0 | 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 75 73 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 | ice.`<name>`.to.use.the.backend. |
33600 | 3c 6e 61 6d 65 3e 00 43 6f 6e 66 69 67 75 72 65 20 73 65 73 73 69 6f 6e 20 74 69 6d 65 6f 75 74 | <name>.Configure.session.timeout |
33620 | 20 61 66 74 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 6c 6f | .after.which.the.user.will.be.lo |
33640 | 67 67 65 64 20 6f 75 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 73 79 73 74 65 6d 20 64 6f 6d 61 69 | gged.out..Configure.system.domai |
33660 | 6e 20 6e 61 6d 65 2e 20 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 | n.name..A.domain.name.must.start |
33680 | 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c | .and.end.with.a.letter.or.digit, |
336a0 | 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 | .and.have.as.interior.characters |
336c0 | 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 | .only.letters,.digits,.or.a.hyph |
336e0 | 65 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 41 2d 73 69 64 65 20 72 6f 75 74 65 72 20 | en..Configure.the.A-side.router. |
33700 | 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f | for.NPTv6.using.the.prefixes.abo |
33720 | 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 42 2d 73 69 64 65 20 72 6f 75 74 65 72 20 | ve:.Configure.the.B-side.router. |
33740 | 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f | for.NPTv6.using.the.prefixes.abo |
33760 | 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 44 4e 53 20 60 3c 73 65 72 76 65 72 3e 60 | ve:.Configure.the.DNS.`<server>` |
33780 | 20 49 50 2f 46 51 44 4e 20 75 73 65 64 20 77 68 65 6e 20 75 70 64 61 74 69 6e 67 20 74 68 69 73 | .IP/FQDN.used.when.updating.this |
337a0 | 20 64 79 6e 61 6d 69 63 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 | .dynamic.assignment..Configure.t |
337c0 | 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f | he.IPv4.or.IPv6.listen.address.o |
337e0 | 66 20 74 68 65 20 54 46 54 50 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 76 34 | f.the.TFTP.server..Multiple.IPv4 |
33800 | 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 67 69 76 65 6e | .and.IPv6.addresses.can.be.given |
33820 | 2e 20 54 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6f 6e 65 20 54 46 54 50 20 73 65 72 76 65 72 20 | ..There.will.be.one.TFTP.server. |
33840 | 69 6e 73 74 61 6e 63 65 73 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 65 61 63 68 20 49 50 20 61 | instances.listening.on.each.IP.a |
33860 | 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | ddress..Configure.the.connection |
33880 | 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 | .tracking.protocol.helper.module |
338a0 | 73 2e 20 41 6c 6c 20 6d 6f 64 75 6c 65 73 20 61 72 65 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 | s..All.modules.are.enable.by.def |
338c0 | 61 75 6c 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 | ault..Configure.the.discrete.por |
338e0 | 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 | t.under.which.the.RADIUS.server. |
33900 | 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 | can.be.reached..Configure.the.di |
33920 | 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 54 41 43 41 | screte.port.under.which.the.TACA |
33940 | 43 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 | CS.server.can.be.reached..Config |
33960 | 75 72 65 20 74 68 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 72 65 76 65 72 73 65 2d 70 | ure.the.load-balancing.reverse-p |
33980 | 72 6f 78 79 20 73 65 72 76 69 63 65 20 66 6f 72 20 48 54 54 50 2e 00 43 6f 6e 66 69 67 75 72 65 | roxy.service.for.HTTP..Configure |
339a0 | 20 74 72 61 66 66 69 63 20 63 61 70 74 75 72 65 20 6d 6f 64 65 2e 00 43 6f 6e 66 69 67 75 72 65 | .traffic.capture.mode..Configure |
339c0 | 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 | .user.defined.:abbr:`MAC.(Media. |
339e0 | 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 73 73 20 6f 6e 20 67 69 76 65 | Access.Control)`.address.on.give |
33a00 | 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 77 61 74 65 72 | n.`<interface>`..Configure.water |
33a20 | 6d 61 72 6b 20 77 61 72 6e 69 6e 67 20 67 65 6e 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 6e 20 49 | mark.warning.generation.for.an.I |
33a40 | 47 4d 50 20 67 72 6f 75 70 20 6c 69 6d 69 74 2e 20 47 65 6e 65 72 61 74 65 73 20 77 61 72 6e 69 | GMP.group.limit..Generates.warni |
33a60 | 6e 67 20 6f 6e 63 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 6f 75 70 20 6c 69 6d | ng.once.the.configured.group.lim |
33a80 | 69 74 20 69 73 20 72 65 61 63 68 65 64 20 77 68 69 6c 65 20 61 64 64 69 6e 67 20 6e 65 77 20 67 | it.is.reached.while.adding.new.g |
33aa0 | 72 6f 75 70 73 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 | roups..Configured.routing.table. |
33ac0 | 60 3c 69 64 3e 60 20 69 73 20 75 73 65 64 20 62 79 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 | `<id>`.is.used.by.VRF.`<name>`.. |
33ae0 | 43 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 65 00 43 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 | Configured.value.Configures.the. |
33b00 | 42 47 50 20 73 70 65 61 6b 65 72 20 73 6f 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 61 63 63 65 | BGP.speaker.so.that.it.only.acce |
33b20 | 70 74 73 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 2c 20 62 75 | pts.inbound.connections.from,.bu |
33b40 | 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 69 74 69 61 74 65 20 6f 75 74 62 6f 75 6e 64 20 63 6f 6e | t.does.not.initiate.outbound.con |
33b60 | 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f | nections.to.the.peer.or.peer.gro |
33b80 | 75 70 2e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 | up..Configuring.IPoE.Server.Conf |
33ba0 | 69 67 75 72 69 6e 67 20 49 50 73 65 63 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 32 54 50 20 53 | iguring.IPsec.Configuring.L2TP.S |
33bc0 | 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 | erver.Configuring.LNS.(L2TP.Netw |
33be0 | 6f 72 6b 20 53 65 72 76 65 72 29 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 50 6f 45 20 53 65 | ork.Server).Configuring.PPPoE.Se |
33c00 | 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 54 50 20 53 65 72 76 65 72 00 43 6f 6e | rver.Configuring.PPTP.Server.Con |
33c20 | 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 00 43 6f 6e 66 69 | figuring.RADIUS.accounting.Confi |
33c40 | 67 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6f 6e | guring.RADIUS.authentication.Con |
33c60 | 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 | figuring.SSTP.Server.Configuring |
33c80 | 20 53 53 54 50 20 63 6c 69 65 6e 74 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 56 79 4f 53 20 74 6f | .SSTP.client.Configuring.VyOS.to |
33ca0 | 20 61 63 74 20 61 73 20 79 6f 75 72 20 49 50 53 65 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e | .act.as.your.IPSec.access.concen |
33cc0 | 74 72 61 74 6f 72 20 69 73 20 6f 6e 65 20 74 68 69 6e 67 2c 20 62 75 74 20 79 6f 75 20 70 72 6f | trator.is.one.thing,.but.you.pro |
33ce0 | 62 61 62 6c 79 20 6e 65 65 64 20 74 6f 20 73 65 74 75 70 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 | bably.need.to.setup.your.client. |
33d00 | 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 73 6f 20 74 68 65 79 | connecting.to.the.server.so.they |
33d20 | 20 63 61 6e 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 49 50 53 65 63 20 67 61 74 65 77 61 79 2e 00 | .can.talk.to.the.IPSec.gateway.. |
33d40 | 43 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 20 69 73 20 | Configuring.a.listen-address.is. |
33d60 | 65 73 73 65 6e 74 69 61 6c 20 66 6f 72 20 74 68 65 20 73 65 72 76 69 63 65 20 74 6f 20 77 6f 72 | essential.for.the.service.to.wor |
33d80 | 6b 2e 00 43 6f 6e 6e 65 63 74 2f 44 69 73 63 6f 6e 6e 65 63 74 00 43 6f 6e 6e 65 63 74 65 64 20 | k..Connect/Disconnect.Connected. |
33da0 | 63 6c 69 65 6e 74 20 73 68 6f 75 6c 64 20 75 73 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 73 | client.should.use.`<address>`.as |
33dc0 | 20 74 68 65 69 72 20 44 4e 53 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .their.DNS.server..This.command. |
33de0 | 61 63 63 65 70 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 | accepts.both.IPv4.and.IPv6.addre |
33e00 | 73 73 65 73 2e 20 55 70 20 74 6f 20 74 77 6f 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 | sses..Up.to.two.nameservers.can. |
33e20 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 49 50 76 34 2c 20 75 70 20 74 6f 20 74 68 | be.configured.for.IPv4,.up.to.th |
33e40 | 72 65 65 20 66 6f 72 20 49 50 76 36 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 | ree.for.IPv6..Connections.to.the |
33e60 | 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c | .RPKI.caching.server.can.not.onl |
33e80 | 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 | y.be.established.by.HTTP/TLS.but |
33ea0 | 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 | .you.can.also.rely.on.a.secure.S |
33ec0 | 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 | SH.session.to.the.server..To.ena |
33ee0 | 62 6c 65 20 53 53 48 20 79 6f 75 20 66 69 72 73 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 | ble.SSH.you.first.need.to.create |
33f00 | 20 79 6f 75 72 73 65 6c 73 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 | .yoursels.an.SSH.client.keypair. |
33f20 | 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 | using.``generate.ssh.client-key. |
33f40 | 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 | /config/auth/id_rsa_rpki``..Once |
33f60 | 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 | .your.key.is.created.you.can.set |
33f80 | 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 | up.the.connection..Connections.t |
33fa0 | 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f | o.the.RPKI.caching.server.can.no |
33fc0 | 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c | t.only.be.established.by.HTTP/TL |
33fe0 | 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 | S.but.you.can.also.rely.on.a.sec |
34000 | 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 | ure.SSH.session.to.the.server..T |
34020 | 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 | o.enable.SSH,.first.you.need.to. |
34040 | 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 | create.an.SSH.client.keypair.usi |
34060 | 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f | ng.``generate.ssh.client-key./co |
34080 | 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f | nfig/auth/id_rsa_rpki``..Once.yo |
340a0 | 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 | ur.key.is.created.you.can.setup. |
340c0 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 74 72 61 63 6b 00 43 6f 6e 6e 74 72 | the.connection..Conntrack.Conntr |
340e0 | 61 63 6b 20 53 79 6e 63 00 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 20 45 78 61 6d 70 6c 65 00 | ack.Sync.Conntrack.Sync.Example. |
34100 | 43 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 00 43 6f 6e 6e 74 72 61 63 6b | Conntrack.ignore.rules.Conntrack |
34120 | 20 6c 6f 67 00 43 6f 6e 73 6f 6c 65 00 43 6f 6e 73 6f 6c 65 20 53 65 72 76 65 72 00 43 6f 6e 73 | .log.Console.Console.Server.Cons |
34140 | 74 72 61 69 6e 20 74 68 65 20 6d 65 6d 6f 72 79 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 74 68 | train.the.memory.available.to.th |
34160 | 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 43 6f 6e 74 61 69 6e 65 72 00 43 6f 6e 74 61 69 6e 65 72 | e.container..Container.Container |
34180 | 20 4e 65 74 77 6f 72 6b 73 00 43 6f 6e 74 61 69 6e 65 72 20 52 65 67 69 73 74 72 79 00 43 6f 6e | .Networks.Container.Registry.Con |
341a0 | 74 72 61 63 6b 20 54 69 6d 65 6f 75 74 73 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 65 | track.Timeouts.Convert.the.addre |
341c0 | 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 30 3a 3a 2f 36 34 | ss.prefix.of.a.single.`fc00::/64 |
341e0 | 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 31 3a 3a 2f 36 34 60 00 43 6f 6e 76 65 72 74 | `.network.to.`fc01::/64`.Convert |
34200 | 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 | .the.address.prefix.of.a.single. |
34220 | 60 66 63 30 31 3a 3a 2f 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 30 3a 3a 2f 36 | `fc01::/64`.network.to.`fc00::/6 |
34240 | 34 60 00 43 6f 70 79 20 74 68 65 20 6b 65 79 2c 20 61 73 20 69 74 20 69 73 20 6e 6f 74 20 73 74 | 4`.Copy.the.key,.as.it.is.not.st |
34260 | 6f 72 65 64 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2e 20 42 65 | ored.on.the.local.filesystem..Be |
34280 | 63 61 75 73 65 20 69 74 20 69 73 20 61 20 73 79 6d 6d 65 74 72 69 63 20 6b 65 79 2c 20 6f 6e 6c | cause.it.is.a.symmetric.key,.onl |
342a0 | 79 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 70 65 65 72 20 73 68 6f 75 6c 64 20 68 61 76 65 20 | y.you.and.your.peer.should.have. |
342c0 | 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 69 74 73 20 63 6f 6e 74 65 6e 74 2e 20 4d 61 6b 65 20 73 | knowledge.of.its.content..Make.s |
342e0 | 75 72 65 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 74 68 65 20 6b 65 79 20 69 6e 20 61 20 | ure.you.distribute.the.key.in.a. |
34300 | 73 61 66 65 20 6d 61 6e 6e 65 72 2c 00 43 6f 75 6e 74 72 79 20 63 6f 64 65 20 28 49 53 4f 2f 49 | safe.manner,.Country.code.(ISO/I |
34320 | 45 43 20 33 31 36 36 2d 31 29 2e 20 55 73 65 64 20 74 6f 20 73 65 74 20 72 65 67 75 6c 61 74 6f | EC.3166-1)..Used.to.set.regulato |
34340 | 72 79 20 64 6f 6d 61 69 6e 2e 20 53 65 74 20 61 73 20 6e 65 65 64 65 64 20 74 6f 20 69 6e 64 69 | ry.domain..Set.as.needed.to.indi |
34360 | 63 61 74 65 20 63 6f 75 6e 74 72 79 20 69 6e 20 77 68 69 63 68 20 64 65 76 69 63 65 20 69 73 20 | cate.country.in.which.device.is. |
34380 | 6f 70 65 72 61 74 69 6e 67 2e 20 54 68 69 73 20 63 61 6e 20 6c 69 6d 69 74 20 61 76 61 69 6c 61 | operating..This.can.limit.availa |
343a0 | 62 6c 65 20 63 68 61 6e 6e 65 6c 73 20 61 6e 64 20 74 72 61 6e 73 6d 69 74 20 70 6f 77 65 72 2e | ble.channels.and.transmit.power. |
343c0 | 00 43 72 65 61 74 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 | .Creat.community-list.policy.ide |
343e0 | 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 20 65 78 | ntified.by.name.<text>..Creat.ex |
34400 | 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 | tcommunity-list.policy.identifie |
34420 | 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 | d.by.name.<text>..Create.DHCP.ad |
34440 | 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 | dress.range.with.a.range.id.of.` |
34460 | 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d | <n>`..DHCP.leases.are.taken.from |
34480 | 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 61 72 74 73 20 61 74 20 61 | .this.pool..The.pool.starts.at.a |
344a0 | 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 | ddress.`<address>`..Create.DHCP. |
344c0 | 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 | address.range.with.a.range.id.of |
344e0 | 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 | .`<n>`..DHCP.leases.are.taken.fr |
34500 | 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 6f 70 73 20 77 69 74 | om.this.pool..The.pool.stops.wit |
34520 | 68 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 4e | h.address.`<address>`..Create.DN |
34540 | 53 20 72 65 63 6f 72 64 20 70 65 72 20 63 6c 69 65 6e 74 20 6c 65 61 73 65 2c 20 62 79 20 61 64 | S.record.per.client.lease,.by.ad |
34560 | 64 69 6e 67 20 63 6c 69 65 6e 74 73 20 74 6f 20 2f 65 74 63 2f 68 6f 73 74 73 20 66 69 6c 65 2e | ding.clients.to./etc/hosts.file. |
34580 | 20 45 6e 74 72 79 20 77 69 6c 6c 20 68 61 76 65 20 66 6f 72 6d 61 74 3a 20 60 3c 73 68 61 72 65 | .Entry.will.have.format:.`<share |
345a0 | 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 | d-network-name>_<hostname>.<doma |
345c0 | 69 6e 2d 6e 61 6d 65 3e 60 00 43 72 65 61 74 65 20 60 3c 75 73 65 72 3e 60 20 66 6f 72 20 6c 6f | in-name>`.Create.`<user>`.for.lo |
345e0 | 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 | cal.authentication.on.this.syste |
34600 | 6d 2e 20 54 68 65 20 75 73 65 72 73 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 73 65 | m..The.users.password.will.be.se |
34620 | 74 20 74 6f 20 60 3c 70 61 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 20 62 61 73 69 63 20 62 72 | t.to.`<pass>`..Create.a.basic.br |
34640 | 69 64 67 65 00 43 72 65 61 74 65 20 61 20 66 69 6c 65 20 6e 61 6d 65 64 20 60 60 56 79 4f 53 2d | idge.Create.a.file.named.``VyOS- |
34660 | 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 34 34 36 34 31 2e 43 6f 6e 66 69 67 4d 67 6d 74 2d 43 6f 6d | 1.3.6.1.4.1.44641.ConfigMgmt-Com |
34680 | 6d 61 6e 64 73 60 60 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 74 | mands``.using.the.following.cont |
346a0 | 65 6e 74 3a 00 43 72 65 61 74 65 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c | ent:.Create.a.load.balancing.rul |
346c0 | 65 2c 20 69 74 20 63 61 6e 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 31 20 | e,.it.can.be.a.number.between.1. |
346e0 | 61 6e 64 20 39 39 39 39 3a 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 3a 61 62 62 72 3a 60 43 41 | and.9999:.Create.a.new.:abbr:`CA |
34700 | 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 6f 75 | .(Certificate.Authority)`.and.ou |
34720 | 74 70 75 74 20 74 68 65 20 43 41 73 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 | tput.the.CAs.public.and.private. |
34740 | 6b 65 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 | key.on.the.console..Create.a.new |
34760 | 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 | .DHCP.static.mapping.named.`<des |
34780 | 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 | cription>`.which.is.valid.for.th |
347a0 | 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 69 74 73 20 44 48 43 50 20 75 6e | e.host.identified.by.its.DHCP.un |
347c0 | 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 49 44 29 20 60 3c 69 64 65 6e 74 69 66 | ique.identifier.(DUID).`<identif |
347e0 | 69 65 72 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 | ier>`..Create.a.new.DHCP.static. |
34800 | 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 | mapping.named.`<description>`.wh |
34820 | 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 | ich.is.valid.for.the.host.identi |
34840 | 66 69 65 64 20 62 79 20 69 74 73 20 4d 41 43 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 | fied.by.its.MAC.`<address>`..Cre |
34860 | 61 74 65 20 61 20 6e 65 77 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 69 6e 74 65 | ate.a.new.VLAN.interface.on.inte |
34880 | 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 75 73 69 6e 67 20 74 68 65 20 56 4c | rface.`<interface>`.using.the.VL |
348a0 | 41 4e 20 6e 75 6d 62 65 72 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 60 3c 76 6c 61 6e 2d 69 64 | AN.number.provided.via.`<vlan-id |
348c0 | 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 | >`..Create.a.new.public/private. |
348e0 | 6b 65 79 70 61 69 72 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 | keypair.and.output.the.certifica |
34900 | 74 65 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 | te.on.the.console..Create.a.new. |
34920 | 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 72 20 77 68 69 63 68 20 69 73 20 | public/private.keypair.which.is. |
34940 | 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 43 41 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 | signed.by.the.CA.referenced.by.` |
34960 | 63 61 2d 6e 61 6d 65 60 2e 20 54 68 65 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 | ca-name`..The.signed.certificate |
34980 | 20 69 73 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 | .is.then.output.to.the.console.. |
349a0 | 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 | Create.a.new.self-signed.certifi |
349c0 | 63 61 74 65 2e 20 54 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 69 73 20 74 68 65 6e | cate..The.public/private.is.then |
349e0 | 20 73 68 6f 77 6e 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 | .shown.on.the.console..Create.a. |
34a00 | 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 | new.subordinate.:abbr:`CA.(Certi |
34a20 | 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 20 75 | ficate.Authority)`.and.sign.it.u |
34a40 | 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 64 20 | sing.the.private.key.referenced. |
34a60 | 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 6f 72 | by.`ca-name`..Create.a.new.subor |
34a80 | 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 | dinate.:abbr:`CA.(Certificate.Au |
34aa0 | 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 65 20 | thority)`.and.sign.it.using.the. |
34ac0 | 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 6e 61 6d 65 60 | private.key.referenced.by.`name` |
34ae0 | 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 | ..Create.a.peer.as.you.would.whe |
34b00 | 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 | n.you.specify.an.ASN,.except.tha |
34b20 | 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 69 73 20 64 69 66 66 65 72 65 6e 74 20 | t.if.the.peers.ASN.is.different. |
34b40 | 74 68 61 6e 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 | than.mine.as.specified.under.the |
34b60 | 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 | .:cfgcmd:`protocols.bgp.<asn>`.c |
34b80 | 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 | ommand.the.connection.will.be.de |
34ba0 | 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 | nied..Create.a.peer.as.you.would |
34bc0 | 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 | .when.you.specify.an.ASN,.except |
34be0 | 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 69 73 20 74 68 65 20 73 61 | .that.if.the.peers.ASN.is.the.sa |
34c00 | 6d 65 20 61 73 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 68 | me.as.mine.as.specified.under.th |
34c20 | 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 | e.:cfgcmd:`protocols.bgp.<asn>`. |
34c40 | 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 | command.the.connection.will.be.d |
34c60 | 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 73 74 61 74 69 63 20 68 6f 73 74 6e 61 6d 65 20 | enied..Create.a.static.hostname. |
34c80 | 6d 61 70 70 69 6e 67 20 77 68 69 63 68 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 | mapping.which.will.always.resolv |
34ca0 | 65 20 74 68 65 20 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 74 6f 20 49 50 20 61 64 | e.the.name.`<hostname>`.to.IP.ad |
34cc0 | 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 73 2d 70 61 74 | dress.`<address>`..Create.as-pat |
34ce0 | 68 2d 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 | h-policy.identified.by.name.<tex |
34d00 | 74 3e 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 | t>..Create.firewall.rule.in.forw |
34d20 | 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 66 6c 6f 77 | ard.chain,.and.define.which.flow |
34d40 | 74 62 61 6c 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 | tbale.should.be.used..Only.appli |
34d60 | 63 61 62 6c 65 20 69 66 20 61 63 74 69 6f 6e 20 69 73 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 | cable.if.action.is.``offload``.. |
34d80 | 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 | Create.firewall.rule.in.forward. |
34da0 | 63 68 61 69 6e 2c 20 61 6e 64 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f | chain,.and.set.action.to.``offlo |
34dc0 | 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 3a 20 63 72 65 61 | ad``..Create.firewall.rule:.crea |
34de0 | 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2c 20 73 65 74 74 69 6e 67 20 61 63 74 69 | te.a.firewall.rule,.setting.acti |
34e00 | 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 20 61 6e 64 20 75 73 69 6e 67 20 64 65 73 69 | on.to.``offload``.and.using.desi |
34e20 | 72 65 64 20 66 6c 6f 77 74 61 62 6c 65 20 66 6f 72 20 60 60 6f 66 66 6c 6f 61 64 2d 74 61 72 67 | red.flowtable.for.``offload-targ |
34e40 | 65 74 60 60 2e 00 43 72 65 61 74 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 63 72 65 61 74 65 20 66 | et``..Create.flowtable:.create.f |
34e60 | 6c 6f 77 74 61 62 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 69 6e 74 | lowtable,.which.includes.the.int |
34e80 | 65 72 66 61 63 65 73 20 74 68 61 74 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 | erfaces.that.are.going.to.be.use |
34ea0 | 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e 00 43 72 65 61 74 65 20 6c 61 72 67 65 | d.by.the.flowtable..Create.large |
34ec0 | 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 | -community-list.policy.identifie |
34ee0 | 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 6e 61 6d 65 64 20 60 | d.by.name.<text>..Create.named.` |
34f00 | 3c 61 6c 69 61 73 3e 60 20 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 61 74 | <alias>`.for.the.configured.stat |
34f20 | 69 63 20 6d 61 70 70 69 6e 67 20 66 6f 72 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 2e 20 54 68 75 | ic.mapping.for.`<hostname>`..Thu |
34f40 | 73 20 74 68 65 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 3a 63 66 67 | s.the.address.configured.as.:cfg |
34f60 | 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 73 74 61 74 69 63 2d 68 6f 73 74 2d 6d 61 70 70 | cmd:`set.system.static-host-mapp |
34f80 | 69 6e 67 20 68 6f 73 74 2d 6e 61 6d 65 20 3c 68 6f 73 74 6e 61 6d 65 3e 20 69 6e 65 74 20 3c 61 | ing.host-name.<hostname>.inet.<a |
34fa0 | 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 76 69 61 20 6d 75 6c 74 | ddress>`.can.be.reached.via.mult |
34fc0 | 69 70 6c 65 20 6e 61 6d 65 73 2e 00 43 72 65 61 74 65 20 6e 65 77 20 3a 72 66 63 3a 60 32 31 33 | iple.names..Create.new.:rfc:`213 |
34fe0 | 36 60 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 | 6`.DNS.update.configuration.whic |
35000 | 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 | h.will.update.the.IP.address.ass |
35020 | 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 | igned.to.`<interface>`.on.the.se |
35040 | 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 | rvice.you.configured.under.`<ser |
35060 | 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 56 52 46 20 69 6e 73 74 | vice-name>`..Create.new.VRF.inst |
35080 | 61 6e 63 65 20 77 69 74 68 20 60 3c 6e 61 6d 65 3e 60 2e 20 54 68 65 20 6e 61 6d 65 20 69 73 20 | ance.with.`<name>`..The.name.is. |
350a0 | 75 73 65 64 20 77 68 65 6e 20 70 6c 61 63 69 6e 67 20 69 6e 64 69 76 69 64 75 61 6c 20 69 6e 74 | used.when.placing.individual.int |
350c0 | 65 72 66 61 63 65 73 20 69 6e 74 6f 20 74 68 65 20 56 52 46 2e 00 43 72 65 61 74 65 20 6e 65 77 | erfaces.into.the.VRF..Create.new |
350e0 | 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .dynamic.DNS.update.configuratio |
35100 | 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 72 65 | n.which.will.update.the.IP.addre |
35120 | 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 | ss.assigned.to.`<interface>`.on. |
35140 | 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 | the.service.you.configured.under |
35160 | 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 73 79 | .`<service-name>`..Create.new.sy |
35180 | 73 74 65 6d 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 60 3c 6e 61 6d 65 3e 60 | stem.user.with.username.`<name>` |
351a0 | 20 61 6e 64 20 72 65 61 6c 2d 6e 61 6d 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 73 74 | .and.real-name.specified.by.`<st |
351c0 | 72 69 6e 67 3e 60 2e 00 43 72 65 61 74 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 | ring>`..Create.service.`<name>`. |
351e0 | 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 3c 70 6f 72 74 3e 00 43 72 65 61 74 65 73 20 61 20 6e 61 | to.listen.on.<port>.Creates.a.na |
35200 | 6d 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 00 43 72 65 61 74 65 73 20 6c 6f | med.container.network.Creates.lo |
35220 | 63 61 6c 20 49 50 6f 45 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 3d 2a 2a 3c 69 | cal.IPoE.user.with.username=**<i |
35240 | 6e 74 65 72 66 61 63 65 3e 2a 2a 20 61 6e 64 20 70 61 73 73 77 6f 72 64 3d 2a 2a 3c 4d 41 43 3e | nterface>**.and.password=**<MAC> |
35260 | 2a 2a 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 00 43 72 65 61 74 65 73 20 73 74 61 74 69 63 20 | **.(mac-address).Creates.static. |
35280 | 70 65 65 72 20 6d 61 70 70 69 6e 67 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 | peer.mapping.of.protocol-address |
352a0 | 20 74 6f 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d | .to.:abbr:`NBMA.(Non-broadcast.m |
352c0 | 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 73 73 | ultiple-access.network)`.address |
352e0 | 2e 00 43 72 65 61 74 69 6e 67 20 61 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 | ..Creating.a.bridge.interface.is |
35300 | 20 76 65 72 79 20 73 69 6d 70 6c 65 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 | .very.simple..In.this.example,.w |
35320 | 65 20 77 69 6c 6c 20 68 61 76 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 66 6c 6f 77 20 74 61 62 | e.will.have:.Creating.a.flow.tab |
35340 | 6c 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 43 72 | le:.Creating.a.traffic.policy.Cr |
35360 | 65 61 74 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 75 73 69 6e 67 20 66 6c 6f 77 20 74 61 62 6c | eating.rules.for.using.flow.tabl |
35380 | 65 73 3a 00 43 72 65 64 65 6e 74 69 61 6c 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 68 | es:.Credentials.can.be.defined.h |
353a0 | 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 61 | ere.and.will.only.be.used.when.a |
353c0 | 64 64 69 6e 67 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 74 6f 20 74 68 65 20 73 | dding.a.container.image.to.the.s |
353e0 | 79 73 74 65 6d 2e 00 43 72 69 74 69 63 61 6c 00 43 72 69 74 69 63 61 6c 20 63 6f 6e 64 69 74 69 | ystem..Critical.Critical.conditi |
35400 | 6f 6e 73 20 2d 20 65 2e 67 2e 20 68 61 72 64 20 64 72 69 76 65 20 65 72 72 6f 72 73 2e 00 43 72 | ons.-.e.g..hard.drive.errors..Cr |
35420 | 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 35 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 | ystalfontz.CFA-533.Crystalfontz. |
35440 | 43 46 41 2d 36 33 31 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 33 00 43 72 79 | CFA-631.Crystalfontz.CFA-633.Cry |
35460 | 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 35 00 43 75 72 20 48 6f 70 20 4c 69 6d 69 74 00 | stalfontz.CFA-635.Cur.Hop.Limit. |
35480 | 43 75 72 72 65 6e 74 6c 79 20 64 6f 65 73 20 6e 6f 74 20 64 6f 20 6d 75 63 68 20 61 73 20 63 61 | Currently.does.not.do.much.as.ca |
354a0 | 63 68 69 6e 67 20 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 43 75 72 72 65 6e | ching.is.not.implemented..Curren |
354c0 | 74 6c 79 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 69 73 20 73 75 70 70 6f 72 74 65 64 | tly.dynamic.routing.is.supported |
354e0 | 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 00 43 75 | .for.the.following.protocols:.Cu |
35500 | 73 74 6f 6d 20 46 69 6c 65 00 43 75 73 74 6f 6d 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c | stom.File.Custom.bridge.firewall |
35520 | 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 20 77 69 74 68 20 63 6f 6d 6d 61 | .chains.can.be.create.with.comma |
35540 | 6e 64 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 6e 61 6d 65 20 3c 6e | nd.``set.firewall.bridge.name.<n |
35560 | 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 | ame>....``..In.order.to.use.such |
35580 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 61 63 74 69 6f | .custom.chain,.a.rule.with.actio |
355a0 | 6e 20 6a 75 6d 70 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 74 61 72 67 65 | n.jump,.and.the.appropiate.targe |
355c0 | 74 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 | t.should.be.defined.in.a.base.ch |
355e0 | 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 | ain..Custom.firewall.chains.can. |
35600 | 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 | be.created,.with.commands.``set. |
35620 | 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 5b 6e 61 6d 65 20 7c 20 69 | firewall.[ipv4.|.ipv6].[name.|.i |
35640 | 70 76 36 2d 6e 61 6d 65 5d 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 | pv6-name].<name>....``..In.order |
35660 | 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c | .to.use.such.custom.chain,.a.rul |
35680 | 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 | e.with.**action.jump**,.and.the. |
356a0 | 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 | appropiate.**target**.should.be. |
356c0 | 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 | defined.in.a.base.chain..Custom. |
356e0 | 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 | firewall.chains.can.be.created,. |
35700 | 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 | with.commands.``set.firewall.ipv |
35720 | 34 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f | 4.name.<name>....``..In.order.to |
35740 | 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 | .use.such.custom.chain,.a.rule.w |
35760 | 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 | ith.**action.jump**,.and.the.app |
35780 | 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 | ropiate.**target**.should.be.def |
357a0 | 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 | ined.in.a.base.chain..Custom.fir |
357c0 | 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 | ewall.chains.can.be.created,.wit |
357e0 | 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6e | h.commands.``set.firewall.ipv6.n |
35800 | 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 | ame.<name>....``..In.order.to.us |
35820 | 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 | e.such.custom.chain,.a.rule.with |
35840 | 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 | .**action.jump**,.and.the.approp |
35860 | 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 | iate.**target**.should.be.define |
35880 | 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 68 65 61 6c 74 68 | d.in.a.base.chain..Custom.health |
358a0 | 2d 63 68 65 63 6b 20 73 63 72 69 70 74 20 61 6c 6c 6f 77 73 20 63 68 65 63 6b 69 6e 67 20 72 65 | -check.script.allows.checking.re |
358c0 | 61 6c 2d 73 65 72 76 65 72 20 61 76 61 69 6c 61 62 69 6c 69 74 79 00 43 75 73 74 6f 6d 69 7a 65 | al-server.availability.Customize |
358e0 | 64 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 2c 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 | d.ignore.rules,.based.on.a.packe |
35900 | 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 44 43 4f 20 63 61 6e 20 62 65 20 | t.and.flow.selector..DCO.can.be. |
35920 | 65 6e 61 62 6c 65 64 20 66 6f 72 20 62 6f 74 68 20 6e 65 77 20 61 6e 64 20 65 78 69 73 74 69 6e | enabled.for.both.new.and.existin |
35940 | 67 20 74 75 6e 6e 65 6c 73 2c 56 79 4f 53 20 61 64 64 73 20 61 6e 20 6f 70 74 69 6f 6e 20 69 6e | g.tunnels,VyOS.adds.an.option.in |
35960 | 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 72 65 | .each.tunnel.configuration.where |
35980 | 20 77 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 20 2e 54 | .we.can.enable.this.function...T |
359a0 | 68 65 20 63 75 72 72 65 6e 74 20 62 65 73 74 20 70 72 61 63 74 69 63 65 20 69 73 20 74 6f 20 63 | he.current.best.practice.is.to.c |
359c0 | 72 65 61 74 65 20 61 20 6e 65 77 20 74 75 6e 6e 65 6c 20 77 69 74 68 20 44 43 4f 20 74 6f 20 6d | reate.a.new.tunnel.with.DCO.to.m |
359e0 | 69 6e 69 6d 69 7a 65 20 74 68 65 20 63 68 61 6e 63 65 20 6f 66 20 70 72 6f 62 6c 65 6d 73 20 77 | inimize.the.chance.of.problems.w |
35a00 | 69 74 68 20 65 78 69 73 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 44 43 4f 20 73 75 70 70 6f 72 | ith.existing.clients..DCO.suppor |
35a20 | 74 20 69 73 20 61 20 70 65 72 2d 74 75 6e 6e 65 6c 20 6f 70 74 69 6f 6e 20 61 6e 64 20 69 74 20 | t.is.a.per-tunnel.option.and.it. |
35a40 | 69 73 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 62 79 20 | is.not.automatically.enabled.by. |
35a60 | 64 65 66 61 75 6c 74 20 66 6f 72 20 6e 65 77 20 6f 72 20 75 70 67 72 61 64 65 64 20 74 75 6e 6e | default.for.new.or.upgraded.tunn |
35a80 | 65 6c 73 2e 20 45 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 63 6f 6e 74 69 | els..Existing.tunnels.will.conti |
35aa0 | 6e 75 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 74 68 65 79 20 68 61 76 65 20 69 6e 20 | nue.to.function.as.they.have.in. |
35ac0 | 74 68 65 20 70 61 73 74 2e 00 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 00 44 48 20 47 72 6f | the.past..DDoS.Protection.DH.Gro |
35ae0 | 75 70 20 31 34 00 44 48 43 50 20 52 65 6c 61 79 00 44 48 43 50 20 53 65 72 76 65 72 00 44 48 43 | up.14.DHCP.Relay.DHCP.Server.DHC |
35b00 | 50 20 66 61 69 6c 6f 76 65 72 20 70 61 72 61 6d 65 74 65 72 73 00 44 48 43 50 20 6c 65 61 73 65 | P.failover.parameters.DHCP.lease |
35b20 | 20 72 61 6e 67 65 00 44 48 43 50 20 72 61 6e 67 65 20 73 70 61 6e 73 20 66 72 6f 6d 20 60 31 39 | .range.DHCP.range.spans.from.`19 |
35b40 | 32 2e 31 36 38 2e 31 38 39 2e 31 30 60 20 2d 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 30 | 2.168.189.10`.-.`192.168.189.250 |
35b60 | 60 00 44 48 43 50 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 20 73 65 72 76 65 72 | `.DHCP.relay.example.DHCP.server |
35b80 | 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 31 30 2e 30 | .is.located.at.IPv4.address.10.0 |
35ba0 | 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 44 48 43 50 76 36 20 61 64 64 72 65 73 73 | .1.4.on.``eth2``..DHCPv6.address |
35bc0 | 20 70 6f 6f 6c 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 | .pools.must.be.configured.for.th |
35be0 | 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 76 36 20 73 65 72 76 | e.system.to.act.as.a.DHCPv6.serv |
35c00 | 65 72 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 64 65 73 63 72 69 | er..The.following.example.descri |
35c20 | 62 65 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 2e 00 44 48 43 50 76 36 20 72 65 | bes.a.common.scenario..DHCPv6.re |
35c40 | 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 76 36 20 72 65 71 75 65 73 74 73 20 61 72 65 20 | lay.example.DHCPv6.requests.are. |
35c60 | 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 60 6c 69 73 74 65 | received.by.the.router.on.`liste |
35c80 | 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 60 20 60 60 65 74 68 31 60 60 00 44 4d 56 50 4e 00 44 | ning.interface`.``eth1``.DMVPN.D |
35ca0 | 4d 56 50 4e 20 65 78 61 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6e 65 74 77 6f | MVPN.example.network.DMVPN.netwo |
35cc0 | 72 6b 00 44 4d 56 50 4e 20 6f 6e 6c 79 20 61 75 74 6f 6d 61 74 65 73 20 74 68 65 20 74 75 6e 6e | rk.DMVPN.only.automates.the.tunn |
35ce0 | 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 20 61 6e 64 20 73 65 74 75 70 2e | el.endpoint.discovery.and.setup. |
35d00 | 20 41 20 63 6f 6d 70 6c 65 74 65 20 73 6f 6c 75 74 69 6f 6e 20 61 6c 73 6f 20 69 6e 63 6f 72 70 | .A.complete.solution.also.incorp |
35d20 | 6f 72 61 74 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | orates.the.use.of.a.routing.prot |
35d40 | 6f 63 6f 6c 2e 20 42 47 50 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 77 65 6c 6c 20 73 | ocol..BGP.is.particularly.well.s |
35d60 | 75 69 74 65 64 20 66 6f 72 20 75 73 65 20 77 69 74 68 20 44 4d 56 50 4e 2e 00 44 4e 41 54 00 44 | uited.for.use.with.DMVPN..DNAT.D |
35d80 | 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 | NAT.is.typically.referred.to.as. |
35da0 | 61 20 2a 2a 50 6f 72 74 20 46 6f 72 77 61 72 64 2a 2a 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 56 | a.**Port.Forward**..When.using.V |
35dc0 | 79 4f 53 20 61 73 20 61 20 4e 41 54 20 72 6f 75 74 65 72 20 61 6e 64 20 66 69 72 65 77 61 6c 6c | yOS.as.a.NAT.router.and.firewall |
35de0 | 2c 20 61 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 61 73 6b 20 69 73 | ,.a.common.configuration.task.is |
35e00 | 20 74 6f 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f | .to.redirect.incoming.traffic.to |
35e20 | 20 61 20 73 79 73 74 65 6d 20 62 65 68 69 6e 64 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 44 | .a.system.behind.the.firewall..D |
35e40 | 4e 41 54 20 72 75 6c 65 20 31 30 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 | NAT.rule.10.replaces.the.destina |
35e60 | 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 61 6e 20 69 6e 62 6f 75 6e 64 20 70 61 63 6b 65 | tion.address.of.an.inbound.packe |
35e80 | 74 20 77 69 74 68 20 31 39 32 2e 30 2e 32 2e 31 30 00 44 4e 41 54 36 36 00 44 4e 53 20 46 6f 72 | t.with.192.0.2.10.DNAT66.DNS.For |
35ea0 | 77 61 72 64 69 6e 67 00 44 4e 53 20 6e 61 6d 65 20 73 65 72 76 65 72 73 00 44 4e 53 20 73 65 61 | warding.DNS.name.servers.DNS.sea |
35ec0 | 72 63 68 20 6c 69 73 74 20 74 6f 20 61 64 76 65 72 74 69 73 65 00 44 4e 53 20 73 65 72 76 65 72 | rch.list.to.advertise.DNS.server |
35ee0 | 20 49 50 76 34 20 61 64 64 72 65 73 73 00 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 | .IPv4.address.DNS.server.is.loca |
35f00 | 74 65 64 20 61 74 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 60 60 00 44 4e 53 53 4c 00 | ted.at.``2001:db8::ffff``.DNSSL. |
35f20 | 44 53 43 50 20 76 61 6c 75 65 73 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 32 34 37 34 60 20 61 | DSCP.values.as.per.:rfc:`2474`.a |
35f40 | 6e 64 20 3a 72 66 63 3a 60 34 35 39 35 60 3a 00 44 53 53 53 2f 43 43 4b 20 4d 6f 64 65 20 69 6e | nd.:rfc:`4595`:.DSSS/CCK.Mode.in |
35f60 | 20 34 30 20 4d 48 7a 2c 20 74 68 69 73 20 73 65 74 73 20 60 60 5b 44 53 53 53 5f 43 43 4b 2d 34 | .40.MHz,.this.sets.``[DSSS_CCK-4 |
35f80 | 30 5d 60 60 00 44 61 74 61 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 44 42 2d 49 50 2e 63 | 0]``.Data.is.provided.by.DB-IP.c |
35fa0 | 6f 6d 20 75 6e 64 65 72 20 43 43 2d 42 59 2d 34 2e 30 20 6c 69 63 65 6e 73 65 2e 20 41 74 74 72 | om.under.CC-BY-4.0.license..Attr |
35fc0 | 69 62 75 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2c 20 70 65 72 6d 69 74 73 20 72 65 64 69 73 74 | ibution.required,.permits.redist |
35fe0 | 72 69 62 75 74 69 6f 6e 20 73 6f 20 77 65 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 61 20 64 61 74 | ribution.so.we.can.include.a.dat |
36000 | 61 62 61 73 65 20 69 6e 20 69 6d 61 67 65 73 28 7e 33 4d 42 20 63 6f 6d 70 72 65 73 73 65 64 29 | abase.in.images(~3MB.compressed) |
36020 | 2e 20 49 6e 63 6c 75 64 65 73 20 63 72 6f 6e 20 73 63 72 69 70 74 20 28 6d 61 6e 75 61 6c 6c 79 | ..Includes.cron.script.(manually |
36040 | 20 63 61 6c 6c 61 62 6c 65 20 62 79 20 6f 70 2d 6d 6f 64 65 20 75 70 64 61 74 65 20 67 65 6f 69 | .callable.by.op-mode.update.geoi |
36060 | 70 29 20 74 6f 20 6b 65 65 70 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 72 75 6c 65 73 20 75 70 | p).to.keep.database.and.rules.up |
36080 | 64 61 74 65 64 2e 00 44 65 62 75 67 00 44 65 62 75 67 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 | dated..Debug.Debug-level.message |
360a0 | 73 20 2d 20 4d 65 73 73 61 67 65 73 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d | s.-.Messages.that.contain.inform |
360c0 | 61 74 69 6f 6e 20 6e 6f 72 6d 61 6c 6c 79 20 6f 66 20 75 73 65 20 6f 6e 6c 79 20 77 68 65 6e 20 | ation.normally.of.use.only.when. |
360e0 | 64 65 62 75 67 67 69 6e 67 20 61 20 70 72 6f 67 72 61 6d 2e 00 44 65 66 61 75 6c 74 00 44 65 66 | debugging.a.program..Default.Def |
36100 | 61 75 6c 74 20 31 2e 00 44 65 66 61 75 6c 74 20 47 61 74 65 77 61 79 2f 52 6f 75 74 65 00 44 65 | ault.1..Default.Gateway/Route.De |
36120 | 66 61 75 6c 74 20 52 6f 75 74 65 72 20 50 72 65 66 65 72 65 6e 63 65 00 44 65 66 61 75 6c 74 20 | fault.Router.Preference.Default. |
36140 | 62 65 68 61 76 69 6f 72 20 2d 20 64 6f 6e 27 74 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 | behavior.-.don't.ask.client.for. |
36160 | 6d 70 70 65 2c 20 62 75 74 20 61 6c 6c 6f 77 20 69 74 20 69 66 20 63 6c 69 65 6e 74 20 77 61 6e | mppe,.but.allow.it.if.client.wan |
36180 | 74 73 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 52 41 44 49 55 53 20 6d 61 79 20 | ts..Please.note.that.RADIUS.may. |
361a0 | 6f 76 65 72 72 69 64 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 62 79 20 4d 53 2d 4d 50 50 45 2d | override.this.option.by.MS-MPPE- |
361c0 | 45 6e 63 72 79 70 74 69 6f 6e 2d 50 6f 6c 69 63 79 20 61 74 74 72 69 62 75 74 65 2e 00 44 65 66 | Encryption-Policy.attribute..Def |
361e0 | 61 75 6c 74 20 67 61 74 65 77 61 79 20 61 6e 64 20 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 61 | ault.gateway.and.DNS.server.is.a |
36200 | 74 20 60 31 39 32 2e 30 2e 32 2e 32 35 34 60 00 44 65 66 61 75 6c 74 20 69 73 20 35 31 32 20 4d | t.`192.0.2.254`.Default.is.512.M |
36220 | 42 2e 20 55 73 65 20 30 20 4d 42 20 66 6f 72 20 75 6e 6c 69 6d 69 74 65 64 20 6d 65 6d 6f 72 79 | B..Use.0.MB.for.unlimited.memory |
36240 | 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 2e 00 | ..Default.is.``any-available``.. |
36260 | 44 65 66 61 75 6c 74 20 69 73 20 60 60 69 63 6d 70 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 | Default.is.``icmp``..Default.is. |
36280 | 74 6f 20 64 65 74 65 63 74 73 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 20 63 | to.detects.physical.link.state.c |
362a0 | 68 61 6e 67 65 73 2e 00 44 65 66 61 75 6c 74 20 70 6f 72 74 20 69 73 20 33 31 32 38 2e 00 44 65 | hanges..Default.port.is.3128..De |
362c0 | 66 61 75 6c 74 3a 20 31 00 44 65 66 61 75 6c 74 3a 20 34 34 33 00 44 65 66 61 75 6c 74 73 20 74 | fault:.1.Default:.443.Defaults.t |
362e0 | 6f 20 27 75 69 64 27 00 44 65 66 61 75 6c 74 73 20 74 6f 20 32 32 35 2e 30 2e 30 2e 35 30 2e 00 | o.'uid'.Defaults.to.225.0.0.50.. |
36300 | 44 65 66 61 75 6c 74 73 20 74 6f 20 60 60 75 73 60 60 2e 00 44 65 66 69 6e 65 20 43 6f 6e 65 63 | Defaults.to.``us``..Define.Conec |
36320 | 74 69 6f 6e 20 54 69 6d 65 6f 75 74 73 00 44 65 66 69 6e 65 20 49 50 76 34 20 6f 72 20 49 50 76 | tion.Timeouts.Define.IPv4.or.IPv |
36340 | 36 20 70 72 65 66 69 78 20 66 6f 72 20 61 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d | 6.prefix.for.a.given.network.nam |
36360 | 65 2e 20 4f 6e 6c 79 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 6f 6e 65 20 49 50 76 36 20 70 72 | e..Only.one.IPv4.and.one.IPv6.pr |
36380 | 65 66 69 78 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 6e 65 74 77 6f 72 6b 20 6e 61 6d | efix.can.be.used.per.network.nam |
363a0 | 65 2e 00 44 65 66 69 6e 65 20 49 50 76 34 2f 49 50 76 36 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 | e..Define.IPv4/IPv6.management.a |
363c0 | 64 64 72 65 73 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 76 69 61 20 4c 4c 44 50 2e 20 4d 75 6c | ddress.transmitted.via.LLDP..Mul |
363e0 | 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 20 | tiple.addresses.can.be.defined.. |
36400 | 4f 6e 6c 79 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 | Only.addresses.connected.to.the. |
36420 | 73 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 44 65 66 69 | system.will.be.transmitted..Defi |
36440 | 6e 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 67 72 6f 75 70 2e | ne.a.IPv4.or.IPv6.Network.group. |
36460 | 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 61 20 49 50 76 36 20 61 64 64 72 65 73 73 | .Define.a.IPv4.or.a.IPv6.address |
36480 | 20 67 72 6f 75 70 00 44 65 66 69 6e 65 20 61 20 5a 6f 6e 65 00 44 65 66 69 6e 65 20 61 20 64 69 | .group.Define.a.Zone.Define.a.di |
364a0 | 73 63 72 65 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 31 30 30 2e | screte.source.IP.address.of.100. |
364c0 | 36 34 2e 30 2e 31 20 66 6f 72 20 53 4e 41 54 20 72 75 6c 65 20 32 30 00 44 65 66 69 6e 65 20 61 | 64.0.1.for.SNAT.rule.20.Define.a |
364e0 | 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 6d 61 63 20 67 72 6f 75 | .domain.group..Define.a.mac.grou |
36500 | 70 2e 00 44 65 66 69 6e 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 2e 20 41 20 70 6f 72 74 20 6e | p..Define.a.port.group..A.port.n |
36520 | 61 6d 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 61 6d 65 20 64 65 66 69 6e 65 64 20 69 6e 20 2f | ame.can.be.any.name.defined.in./ |
36540 | 65 74 63 2f 73 65 72 76 69 63 65 73 2e 20 65 2e 67 2e 3a 20 68 74 74 70 00 44 65 66 69 6e 65 20 | etc/services..e.g.:.http.Define. |
36560 | 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 53 53 48 | allowed.ciphers.used.for.the.SSH |
36580 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 20 6e 75 6d 62 65 72 20 6f 66 20 61 6c 6c 6f 77 65 64 | .connection..A.number.of.allowed |
365a0 | 20 63 69 70 68 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2c 20 75 73 65 20 6d | .ciphers.can.be.specified,.use.m |
365c0 | 75 6c 74 69 70 6c 65 20 6f 63 63 75 72 72 65 6e 63 65 73 20 74 6f 20 61 6c 6c 6f 77 20 6d 75 6c | ultiple.occurrences.to.allow.mul |
365e0 | 74 69 70 6c 65 20 63 69 70 68 65 72 73 2e 00 44 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 | tiple.ciphers..Define.an.interfa |
36600 | 63 65 20 67 72 6f 75 70 2e 20 57 69 6c 64 63 61 72 64 20 61 72 65 20 61 63 63 65 70 74 65 64 20 | ce.group..Wildcard.are.accepted. |
36620 | 74 6f 6f 2e 00 44 65 66 69 6e 65 20 62 65 68 61 76 69 6f 72 20 66 6f 72 20 67 72 61 74 75 69 74 | too..Define.behavior.for.gratuit |
36640 | 6f 75 73 20 41 52 50 20 66 72 61 6d 65 73 20 77 68 6f 27 73 20 49 50 20 69 73 20 6e 6f 74 20 61 | ous.ARP.frames.who's.IP.is.not.a |
36660 | 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e | lready.present.in.the.ARP.table. |
36680 | 20 49 66 20 63 6f 6e 66 69 67 75 72 65 64 20 63 72 65 61 74 65 20 6e 65 77 20 65 6e 74 72 69 65 | .If.configured.create.new.entrie |
366a0 | 73 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 | s.in.the.ARP.table..Define.diffe |
366c0 | 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 | rent.modes.for.IP.directed.broad |
366e0 | 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 | cast.forwarding.as.described.in. |
36700 | 3a 72 66 63 3a 60 31 38 31 32 60 20 61 6e 64 20 3a 72 66 63 3a 60 32 36 34 34 60 2e 00 44 65 66 | :rfc:`1812`.and.:rfc:`2644`..Def |
36720 | 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 | ine.different.modes.for.sending. |
36740 | 72 65 70 6c 69 65 73 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 72 65 63 65 69 76 65 64 20 | replies.in.response.to.received. |
36760 | 41 52 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 20 72 65 73 6f 6c 76 65 20 6c 6f 63 61 6c 20 | ARP.requests.that.resolve.local. |
36780 | 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 44 65 66 69 6e 65 20 64 69 66 66 | target.IP.addresses:.Define.diff |
367a0 | 65 72 65 6e 74 20 72 65 73 74 72 69 63 74 69 6f 6e 20 6c 65 76 65 6c 73 20 66 6f 72 20 61 6e 6e | erent.restriction.levels.for.ann |
367c0 | 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 | ouncing.the.local.source.IP.addr |
367e0 | 65 73 73 20 66 72 6f 6d 20 49 50 20 70 61 63 6b 65 74 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 | ess.from.IP.packets.in.ARP.reque |
36800 | 73 74 73 20 73 65 6e 74 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 44 65 66 69 6e 65 20 68 6f | sts.sent.on.interface..Define.ho |
36820 | 77 20 74 6f 20 68 61 6e 64 6c 65 20 6c 65 61 66 2d 73 65 6f 6e 64 73 2e 00 44 65 66 69 6e 65 20 | w.to.handle.leaf-seonds..Define. |
36840 | 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f | interfaces.to.be.used.in.the.flo |
36860 | 77 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 65 6e 67 74 68 20 6f 66 20 70 61 63 6b 65 74 20 | wtable..Define.length.of.packet. |
36880 | 70 61 79 6c 6f 61 64 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 6e 20 6e 65 74 6c 69 6e 6b 20 6d 65 | payload.to.include.in.netlink.me |
368a0 | 73 73 61 67 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c | ssage..Only.applicable.if.rule.l |
368c0 | 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 | og.is.enable.and.log.group.is.de |
368e0 | 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6c 6f 67 20 67 72 6f 75 70 20 74 6f 20 73 65 6e 64 20 | fined..Define.log.group.to.send. |
36900 | 6d 65 73 73 61 67 65 20 74 6f 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 | message.to..Only.applicable.if.r |
36920 | 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 6f 67 2d 6c 65 | ule.log.is.enable..Define.log-le |
36940 | 76 65 6c 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 | vel..Only.applicable.if.rule.log |
36960 | 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 | .is.enable..Define.number.of.pac |
36980 | 6b 65 74 73 20 74 6f 20 71 75 65 75 65 20 69 6e 73 69 64 65 20 74 68 65 20 6b 65 72 6e 65 6c 20 | kets.to.queue.inside.the.kernel. |
369a0 | 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 74 68 65 6d 20 74 6f 20 75 73 65 72 73 70 61 63 65 | before.sending.them.to.userspace |
369c0 | 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 | ..Only.applicable.if.rule.log.is |
369e0 | 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 | .enable.and.log.group.is.defined |
36a00 | 2e 00 44 65 66 69 6e 65 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 75 70 | ..Define.the.time.interval.to.up |
36a20 | 64 61 74 65 20 74 68 65 20 6c 6f 63 61 6c 20 63 61 63 68 65 00 44 65 66 69 6e 65 20 74 68 65 20 | date.the.local.cache.Define.the. |
36a40 | 7a 6f 6e 65 20 61 73 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 20 41 20 6c 6f 63 61 6c 20 7a 6f | zone.as.a.local.zone..A.local.zo |
36a60 | 6e 65 20 68 61 73 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 | ne.has.no.interfaces.and.will.be |
36a80 | 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 44 | .applied.to.the.router.itself..D |
36aa0 | 65 66 69 6e 65 20 74 79 70 65 20 6f 66 20 6f 66 66 6c 6f 61 64 20 74 6f 20 62 65 20 75 73 65 64 | efine.type.of.offload.to.be.used |
36ac0 | 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 60 60 68 61 72 64 77 61 72 65 60 60 20 | .by.the.flowtable:.``hardware``. |
36ae0 | 6f 72 20 60 60 73 6f 66 74 77 61 72 65 60 60 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 60 60 73 | or.``software``..By.default,.``s |
36b00 | 6f 66 74 77 61 72 65 60 60 20 6f 66 66 6c 6f 61 64 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e | oftware``.offload.is.used..Defin |
36b20 | 65 64 20 74 68 65 20 49 50 76 34 2c 20 49 50 76 36 20 6f 72 20 46 51 44 4e 20 61 6e 64 20 70 6f | ed.the.IPv4,.IPv6.or.FQDN.and.po |
36b40 | 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 63 61 63 68 69 6e 67 20 52 50 4b 49 20 63 61 | rt.number.of.the.caching.RPKI.ca |
36b60 | 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 2e 00 44 65 | ching.instance.which.is.used..De |
36b80 | 66 69 6e 65 73 20 61 6c 74 65 72 6e 61 74 65 20 73 6f 75 72 63 65 73 20 66 6f 72 20 6d 75 6c 74 | fines.alternate.sources.for.mult |
36ba0 | 69 63 61 73 74 69 6e 67 20 61 6e 64 20 49 47 4d 50 20 64 61 74 61 2e 20 54 68 65 20 6e 65 74 77 | icasting.and.IGMP.data..The.netw |
36bc0 | 6f 72 6b 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 6f 6e 20 74 68 65 20 66 6f 6c 6c 6f | ork.address.must.be.on.the.follo |
36be0 | 77 69 6e 67 20 66 6f 72 6d 61 74 20 27 61 2e 62 2e 63 2e 64 2f 6e 27 2e 20 42 79 20 64 65 66 61 | wing.format.'a.b.c.d/n'..By.defa |
36c00 | 75 6c 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 63 63 65 70 74 20 64 61 74 61 | ult,.the.router.will.accept.data |
36c20 | 20 66 72 6f 6d 20 73 6f 75 72 63 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 | .from.sources.on.the.same.networ |
36c40 | 6b 20 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e | k.as.configured.on.an.interface. |
36c60 | 20 49 66 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 20 6c 69 65 73 20 6f 6e | .If.the.multicast.source.lies.on |
36c80 | 20 61 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 | .a.remote.network,.one.must.defi |
36ca0 | 6e 65 20 66 72 6f 6d 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 | ne.from.where.traffic.should.be. |
36cc0 | 61 63 63 65 70 74 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6e 20 6f 66 66 2d 4e 42 4d 41 20 6e 65 | accepted..Defines.an.off-NBMA.ne |
36ce0 | 74 77 6f 72 6b 20 70 72 65 66 69 78 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 47 52 45 20 69 | twork.prefix.for.which.the.GRE.i |
36d00 | 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 67 61 74 65 77 61 79 2e 20 | nterface.will.act.as.a.gateway.. |
36d20 | 54 68 69 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 64 65 66 69 6e 69 6e 67 20 | This.an.alternative.to.defining. |
36d40 | 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 73 68 6f 72 74 63 75 74 2d 64 | local.interfaces.with.shortcut-d |
36d60 | 65 73 74 69 6e 61 74 69 6f 6e 20 66 6c 61 67 2e 00 44 65 66 69 6e 65 73 20 62 6c 61 63 6b 68 6f | estination.flag..Defines.blackho |
36d80 | 6c 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 | le.distance.for.this.route,.rout |
36da0 | 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 | es.with.smaller.administrative.d |
36dc0 | 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f | istance.are.elected.prior.to.tho |
36de0 | 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e | se.with.a.higher.distance..Defin |
36e00 | 65 73 20 6d 69 6e 69 6d 75 6d 20 61 63 63 65 70 74 61 62 6c 65 20 4d 54 55 2e 20 49 66 20 63 6c | es.minimum.acceptable.MTU..If.cl |
36e20 | 69 65 6e 74 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 6c 65 73 73 20 | ient.will.try.to.negotiate.less. |
36e40 | 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 4d 54 55 20 74 68 65 6e 20 69 74 20 77 69 6c 6c 20 | then.specified.MTU.then.it.will. |
36e60 | 62 65 20 4e 41 4b 65 64 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 20 69 66 20 72 65 6a 65 | be.NAKed.or.disconnected.if.reje |
36e80 | 63 74 73 20 67 72 65 61 74 65 72 20 4d 54 55 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | cts.greater.MTU..Default.value.i |
36ea0 | 73 20 2a 2a 31 30 30 2a 2a 2e 00 44 65 66 69 6e 65 73 20 6e 65 78 74 2d 68 6f 70 20 64 69 73 74 | s.**100**..Defines.next-hop.dist |
36ec0 | 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 | ance.for.this.route,.routes.with |
36ee0 | 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 | .smaller.administrative.distance |
36f00 | 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 | .are.elected.prior.to.those.with |
36f20 | 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 70 72 65 66 | .a.higher.distance..Defines.pref |
36f40 | 65 72 72 65 64 20 4d 52 55 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 | erred.MRU..By.default.is.not.def |
36f60 | 69 6e 65 64 2e 00 44 65 66 69 6e 65 73 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 68 65 63 | ined..Defines.protocols.for.chec |
36f80 | 6b 69 6e 67 20 41 52 50 2c 20 49 43 4d 50 2c 20 54 43 50 00 44 65 66 69 6e 65 73 20 74 68 65 20 | king.ARP,.ICMP,.TCP.Defines.the. |
36fa0 | 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 | maximum.`<number>`.of.unanswered |
36fc0 | 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 | .echo.requests..Upon.reaching.th |
36fe0 | 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 | e.value.`<number>`,.the.session. |
37000 | 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d | will.be.reset..Defines.the.maxim |
37020 | 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f | um.`<number>`.of.unanswered.echo |
37040 | 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c | .requests..Upon.reaching.the.val |
37060 | 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 | ue.`<number>`,.the.session.will. |
37080 | 62 65 20 72 65 73 65 74 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 2a 2a | be.reset..Default.value.is.**3** |
370a0 | 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 61 | ..Defines.the.specified.device.a |
370c0 | 73 20 61 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 20 41 76 61 69 6c 61 62 6c 65 20 63 6f | s.a.system.console..Available.co |
370e0 | 6e 73 6f 6c 65 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 28 73 65 65 20 63 6f 6d 70 6c 65 | nsole.devices.can.be.(see.comple |
37100 | 74 69 6f 6e 20 68 65 6c 70 65 72 29 3a 00 44 65 66 69 6e 69 6e 67 20 50 65 65 72 73 00 44 65 6c | tion.helper):.Defining.Peers.Del |
37120 | 65 67 61 74 65 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 72 61 6e 67 65 20 69 6e | egate.prefixes.from.the.range.in |
37140 | 64 69 63 61 74 65 64 20 62 79 20 74 68 65 20 73 74 61 72 74 20 61 6e 64 20 73 74 6f 70 20 71 75 | dicated.by.the.start.and.stop.qu |
37160 | 61 6c 69 66 69 65 72 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 | alifier..Delete.BGP.communities. |
37180 | 6d 61 74 63 68 69 6e 67 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c | matching.the.community-list..Del |
371a0 | 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 | ete.BGP.communities.matching.the |
371c0 | 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 4c 6f | .large-community-list..Delete.Lo |
371e0 | 67 73 00 44 65 6c 65 74 65 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 63 6f 6e 74 61 69 6e 65 72 | gs.Delete.a.particular.container |
37200 | 20 69 6d 61 67 65 20 62 61 73 65 64 20 6f 6e 20 69 74 27 73 20 69 6d 61 67 65 20 49 44 2e 20 59 | .image.based.on.it's.image.ID..Y |
37220 | 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 6c 65 74 65 20 61 6c 6c 20 63 6f 6e 74 61 69 6e 65 72 | ou.can.also.delete.all.container |
37240 | 20 69 6d 61 67 65 73 20 61 74 20 6f 6e 63 65 2e 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 | .images.at.once..Delete.all.BGP. |
37260 | 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 6c 61 72 67 65 | communities.Delete.all.BGP.large |
37280 | 2d 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | -communities.Delete.default.rout |
372a0 | 65 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 2e 00 44 65 6c 65 74 65 73 20 74 68 65 20 73 | e.from.the.system..Deletes.the.s |
372c0 | 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 66 69 6c 65 20 3c 74 65 78 74 | pecified.user-defined.file.<text |
372e0 | 3e 20 69 6e 20 74 68 65 20 2f 76 61 72 2f 6c 6f 67 2f 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 | >.in.the./var/log/user.directory |
37300 | 00 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 6e 6f 74 20 | .Depending.on.the.location,.not. |
37320 | 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 62 65 20 61 76 61 | all.of.these.channels.may.be.ava |
37340 | 69 6c 61 62 6c 65 20 66 6f 72 20 75 73 65 21 00 44 65 73 63 72 69 70 74 69 6f 6e 00 44 65 73 70 | ilable.for.use!.Description.Desp |
37360 | 69 74 65 20 74 68 65 20 44 72 6f 70 2d 54 61 69 6c 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f | ite.the.Drop-Tail.policy.does.no |
37380 | 74 20 73 6c 6f 77 20 64 6f 77 6e 20 70 61 63 6b 65 74 73 2c 20 69 66 20 6d 61 6e 79 20 70 61 63 | t.slow.down.packets,.if.many.pac |
373a0 | 6b 65 74 73 20 61 72 65 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 74 68 65 79 20 63 6f 75 6c 64 20 | kets.are.to.be.sent,.they.could. |
373c0 | 67 65 74 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 72 79 69 6e 67 20 74 6f 20 67 65 74 20 65 | get.dropped.when.trying.to.get.e |
373e0 | 6e 71 75 65 75 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 2e 20 54 68 69 73 20 63 61 6e 20 68 61 | nqueued.at.the.tail..This.can.ha |
37400 | 70 70 65 6e 20 69 66 20 74 68 65 20 71 75 65 75 65 20 68 61 73 20 73 74 69 6c 6c 20 6e 6f 74 20 | ppen.if.the.queue.has.still.not. |
37420 | 62 65 65 6e 20 61 62 6c 65 20 74 6f 20 72 65 6c 65 61 73 65 20 65 6e 6f 75 67 68 20 70 61 63 6b | been.able.to.release.enough.pack |
37440 | 65 74 73 20 66 72 6f 6d 20 69 74 73 20 68 65 61 64 2e 00 44 65 73 70 69 74 65 20 74 68 65 20 66 | ets.from.its.head..Despite.the.f |
37460 | 61 63 74 20 74 68 61 74 20 41 44 20 69 73 20 61 20 73 75 70 65 72 73 65 74 20 6f 66 20 4c 44 41 | act.that.AD.is.a.superset.of.LDA |
37480 | 50 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 41 64 64 72 65 73 73 00 44 65 73 74 69 6e 61 74 69 6f | P.Destination.Address.Destinatio |
374a0 | 6e 20 4e 41 54 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 50 72 65 66 69 78 00 44 65 74 61 69 6c 65 | n.NAT.Destination.Prefix.Detaile |
374c0 | 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 63 69 73 63 6f 22 20 61 6e 64 20 | d.information.about."cisco".and. |
374e0 | 22 69 62 6d 22 20 6d 6f 64 65 6c 73 20 64 69 66 66 65 72 65 6e 63 65 73 20 63 61 6e 20 62 65 20 | "ibm".models.differences.can.be. |
37500 | 66 6f 75 6e 64 20 69 6e 20 3a 72 66 63 3a 60 33 35 30 39 60 2e 20 41 20 22 73 68 6f 72 74 63 75 | found.in.:rfc:`3509`..A."shortcu |
37520 | 74 22 20 6d 6f 64 65 6c 20 61 6c 6c 6f 77 73 20 41 42 52 20 74 6f 20 63 72 65 61 74 65 20 72 6f | t".model.allows.ABR.to.create.ro |
37540 | 75 74 65 73 20 62 65 74 77 65 65 6e 20 61 72 65 61 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 | utes.between.areas.based.on.the. |
37560 | 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 74 68 65 20 61 72 65 61 73 20 63 6f 6e 6e 65 63 74 65 64 20 | topology.of.the.areas.connected. |
37580 | 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 62 75 74 20 6e 6f 74 20 75 73 69 6e 67 20 61 20 62 | to.this.router.but.not.using.a.b |
375a0 | 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 6e 20 63 61 73 65 20 69 66 20 6e 6f 6e 2d 62 61 63 6b | ackbone.area.in.case.if.non-back |
375c0 | 62 6f 6e 65 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 63 68 65 61 70 65 72 2e 20 46 6f 72 20 | bone.route.will.be.cheaper..For. |
375e0 | 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 73 68 6f 72 74 63 75 74 | more.information.about."shortcut |
37600 | 22 20 6d 6f 64 65 6c 2c 20 73 65 65 20 3a 74 3a 60 6f 73 70 66 2d 73 68 6f 72 74 63 75 74 2d 61 | ".model,.see.:t:`ospf-shortcut-a |
37620 | 62 72 2d 30 32 2e 74 78 74 60 00 44 65 74 65 72 6d 69 6e 65 73 20 68 6f 77 20 6f 70 65 6e 6e 68 | br-02.txt`.Determines.how.opennh |
37640 | 72 70 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 73 6f 66 74 20 73 77 69 74 63 68 20 74 68 65 | rp.daemon.should.soft.switch.the |
37660 | 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 6d | .multicast.traffic..Currently,.m |
37680 | 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 63 61 70 74 75 72 65 64 20 62 79 20 | ulticast.traffic.is.captured.by. |
376a0 | 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 75 73 69 6e 67 20 61 20 70 61 63 6b 65 74 20 73 | opennhrp.daemon.using.a.packet.s |
376c0 | 6f 63 6b 65 74 2c 20 61 6e 64 20 72 65 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 70 72 6f 70 65 72 | ocket,.and.resent.back.to.proper |
376e0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 6d | .destinations..This.means.that.m |
37700 | 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 20 73 65 6e 64 69 6e 67 20 69 73 20 43 50 55 20 69 | ulticast.packet.sending.is.CPU.i |
37720 | 6e 74 65 6e 73 69 76 65 2e 00 44 65 76 69 63 65 20 69 73 20 69 6e 63 61 70 61 62 6c 65 20 6f 66 | ntensive..Device.is.incapable.of |
37740 | 20 34 30 20 4d 48 7a 2c 20 64 6f 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 2e 20 54 68 69 73 20 | .40.MHz,.do.not.advertise..This. |
37760 | 73 65 74 73 20 60 60 5b 34 30 2d 49 4e 54 4f 4c 45 52 41 4e 54 5d 60 60 00 44 65 76 69 63 65 73 | sets.``[40-INTOLERANT]``.Devices |
37780 | 20 65 76 61 6c 75 61 74 69 6e 67 20 77 68 65 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 | .evaluating.whether.an.IPv4.addr |
377a0 | 65 73 73 20 69 73 20 70 75 62 6c 69 63 20 6d 75 73 74 20 62 65 20 75 70 64 61 74 65 64 20 74 6f | ess.is.public.must.be.updated.to |
377c0 | 20 72 65 63 6f 67 6e 69 7a 65 20 74 68 65 20 6e 65 77 20 61 64 64 72 65 73 73 20 73 70 61 63 65 | .recognize.the.new.address.space |
377e0 | 2e 20 41 6c 6c 6f 63 61 74 69 6e 67 20 6d 6f 72 65 20 70 72 69 76 61 74 65 20 49 50 76 34 20 61 | ..Allocating.more.private.IPv4.a |
37800 | 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 4e 41 54 20 64 65 76 69 63 65 73 20 6d 69 67 | ddress.space.for.NAT.devices.mig |
37820 | 68 74 20 70 72 6f 6c 6f 6e 67 20 74 68 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 49 50 76 | ht.prolong.the.transition.to.IPv |
37840 | 36 2e 00 44 69 66 66 65 72 65 6e 74 20 4e 41 54 20 54 79 70 65 73 00 44 69 66 66 69 65 2d 48 65 | 6..Different.NAT.Types.Diffie-He |
37860 | 6c 6c 6d 61 6e 20 70 61 72 61 6d 65 74 65 72 73 00 44 69 72 65 63 74 69 6f 6e 3a 20 2a 2a 69 6e | llman.parameters.Direction:.**in |
37880 | 2a 2a 20 61 6e 64 20 2a 2a 6f 75 74 2a 2a 2e 20 50 72 6f 74 65 63 74 20 70 75 62 6c 69 63 20 6e | **.and.**out**..Protect.public.n |
378a0 | 65 74 77 6f 72 6b 20 66 72 6f 6d 20 65 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 2c 20 61 6e | etwork.from.external.attacks,.an |
378c0 | 64 20 69 64 65 6e 74 69 66 79 20 69 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 20 74 6f 77 61 | d.identify.internal.attacks.towa |
378e0 | 72 64 73 20 69 6e 74 65 72 6e 65 74 2e 00 44 69 73 61 62 6c 65 20 28 6c 6f 63 6b 29 20 61 63 63 | rds.internet..Disable.(lock).acc |
37900 | 6f 75 6e 74 2e 20 55 73 65 72 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 6c | ount..User.will.not.be.able.to.l |
37920 | 6f 67 20 69 6e 2e 00 44 69 73 61 62 6c 65 20 43 50 55 20 70 6f 77 65 72 20 73 61 76 69 6e 67 20 | og.in..Disable.CPU.power.saving. |
37940 | 6d 65 63 68 61 6e 69 73 6d 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 43 20 73 74 61 74 65 | mechanisms.also.known.as.C.state |
37960 | 73 2e 00 44 69 73 61 62 6c 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 | s..Disable.Compression.Control.P |
37980 | 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 2e 20 43 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 | rotocol.(CCP)..CCP.is.enabled.by |
379a0 | 20 64 65 66 61 75 6c 74 2e 00 44 69 73 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e | .default..Disable.MLD.reports.an |
379c0 | 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c | d.query.on.the.interface..Disabl |
379e0 | 65 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 44 69 73 61 62 6c 65 20 61 20 42 46 | e.`<user>`.account..Disable.a.BF |
37a00 | 44 20 70 65 65 72 00 44 69 73 61 62 6c 65 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 00 44 69 73 61 | D.peer.Disable.a.container..Disa |
37a20 | 62 6c 65 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 00 44 | ble.a.given.container.registry.D |
37a40 | 69 73 61 62 6c 65 20 61 6c 6c 20 6f 70 74 69 6f 6e 61 6c 20 43 50 55 20 6d 69 74 69 67 61 74 69 | isable.all.optional.CPU.mitigati |
37a60 | 6f 6e 73 2e 20 54 68 69 73 20 69 6d 70 72 6f 76 65 73 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 | ons..This.improves.system.perfor |
37a80 | 6d 61 6e 63 65 2c 20 62 75 74 20 69 74 20 6d 61 79 20 61 6c 73 6f 20 65 78 70 6f 73 65 20 75 73 | mance,.but.it.may.also.expose.us |
37aa0 | 65 72 73 20 74 6f 20 73 65 76 65 72 61 6c 20 43 50 55 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 69 | ers.to.several.CPU.vulnerabiliti |
37ac0 | 65 73 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 67 67 69 6e 67 20 76 | es..Disable.connection.logging.v |
37ae0 | 69 61 20 53 79 73 6c 6f 67 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 20 6c 6f 6f | ia.Syslog..Disable.conntrack.loo |
37b00 | 73 65 20 74 72 61 63 6b 20 6f 70 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 64 68 63 70 2d 72 65 6c | se.track.option.Disable.dhcp-rel |
37b20 | 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 64 68 63 70 76 36 2d 72 65 6c 61 79 | ay.service..Disable.dhcpv6-relay |
37b40 | 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 | .service..Disable.given.`<interf |
37b60 | 61 63 65 3e 60 2e 20 49 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e 20 61 64 6d 69 | ace>`..It.will.be.placed.in.admi |
37b80 | 6e 69 73 74 72 61 74 69 76 65 6c 79 20 64 6f 77 6e 20 28 60 60 41 2f 44 60 60 29 20 73 74 61 74 | nistratively.down.(``A/D``).stat |
37ba0 | 65 2e 00 44 69 73 61 62 6c 65 20 69 6d 6d 65 64 69 61 74 65 20 73 65 73 73 69 6f 6e 20 72 65 73 | e..Disable.immediate.session.res |
37bc0 | 65 74 20 69 66 20 70 65 65 72 27 73 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6e 6b 20 67 6f 65 73 | et.if.peer's.connected.link.goes |
37be0 | 20 64 6f 77 6e 2e 00 44 69 73 61 62 6c 65 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 64 20 61 75 | .down..Disable.password.based.au |
37c00 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 4c 6f 67 69 6e 20 76 69 61 20 53 53 48 20 6b 65 79 73 | thentication..Login.via.SSH.keys |
37c20 | 20 6f 6e 6c 79 2e 20 54 68 69 73 20 68 61 72 64 65 6e 73 20 73 65 63 75 72 69 74 79 21 00 44 69 | .only..This.hardens.security!.Di |
37c40 | 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 50 49 4d 20 | sable.sending.and.receiving.PIM. |
37c60 | 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | control.packets.on.the.interface |
37c80 | 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 68 | ..Disable.the.host.validation.th |
37ca0 | 72 6f 75 67 68 20 72 65 76 65 72 73 65 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 20 2d 20 63 61 6e 20 | rough.reverse.DNS.lookups.-.can. |
37cc0 | 73 70 65 65 64 75 70 20 6c 6f 67 69 6e 20 74 69 6d 65 20 77 68 65 6e 20 72 65 76 65 72 73 65 20 | speedup.login.time.when.reverse. |
37ce0 | 6c 6f 6f 6b 75 70 20 69 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 2e 00 44 69 73 61 62 6c 65 20 | lookup.is.not.possible..Disable. |
37d00 | 74 68 65 20 70 65 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 74 | the.peer.configuration.Disable.t |
37d20 | 68 69 73 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 | his.IPv4.static.route.entry..Dis |
37d40 | 61 62 6c 65 20 74 68 69 73 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 | able.this.IPv6.static.route.entr |
37d60 | 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 | y..Disable.this.service..Disable |
37d80 | 20 74 72 61 6e 73 6d 69 74 20 6f 66 20 4c 4c 44 50 20 66 72 61 6d 65 73 20 6f 6e 20 67 69 76 65 | .transmit.of.LLDP.frames.on.give |
37da0 | 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 55 73 65 66 75 6c 20 74 6f 20 65 78 63 6c 75 | n.`<interface>`..Useful.to.exclu |
37dc0 | 64 65 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 4c 4c 44 50 20 | de.certain.interfaces.from.LLDP. |
37de0 | 77 68 65 6e 20 60 60 61 6c 6c 60 60 20 68 61 76 65 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 2e 00 | when.``all``.have.been.enabled.. |
37e00 | 44 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 2d 20 6e 6f 20 6b 65 72 6e 65 6c 20 | Disabled.by.default.-.no.kernel. |
37e20 | 6d 6f 64 75 6c 65 20 6c 6f 61 64 65 64 2e 00 44 69 73 61 62 6c 65 73 20 63 61 63 68 69 6e 67 20 | module.loaded..Disables.caching. |
37e40 | 6f 66 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 66 6f 72 77 61 72 64 | of.peer.information.from.forward |
37e60 | 65 64 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 79 20 70 61 63 6b 65 74 73 | ed.NHRP.Resolution.Reply.packets |
37e80 | 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 75 63 65 20 6d 65 6d | ..This.can.be.used.to.reduce.mem |
37ea0 | 6f 72 79 20 63 6f 6e 73 75 6d 70 74 69 6f 6e 20 6f 6e 20 62 69 67 20 4e 42 4d 41 20 73 75 62 6e | ory.consumption.on.big.NBMA.subn |
37ec0 | 65 74 73 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 | ets..Disables.interface-based.IP |
37ee0 | 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 | v4.static.route..Disables.interf |
37f00 | 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 | ace-based.IPv6.static.route..Dis |
37f20 | 61 62 6c 65 73 20 71 75 69 63 6b 6c 65 61 76 65 20 6d 6f 64 65 2e 20 49 6e 20 74 68 69 73 20 6d | ables.quickleave.mode..In.this.m |
37f40 | 6f 64 65 20 74 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 20 4c | ode.the.daemon.will.not.send.a.L |
37f60 | 65 61 76 65 20 49 47 4d 50 20 6d 65 73 73 61 67 65 20 75 70 73 74 72 65 61 6d 20 61 73 20 73 6f | eave.IGMP.message.upstream.as.so |
37f80 | 6f 6e 20 61 73 20 69 74 20 72 65 63 65 69 76 65 73 20 61 20 4c 65 61 76 65 20 6d 65 73 73 61 67 | on.as.it.receives.a.Leave.messag |
37fa0 | 65 20 66 6f 72 20 61 6e 79 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 20 | e.for.any.downstream.interface.. |
37fc0 | 54 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 61 73 6b 20 66 6f 72 20 4d 65 6d 62 | The.daemon.will.not.ask.for.Memb |
37fe0 | 65 72 73 68 69 70 20 72 65 70 6f 72 74 73 20 6f 6e 20 74 68 65 20 64 6f 77 6e 73 74 72 65 61 6d | ership.reports.on.the.downstream |
38000 | 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 69 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 | .interfaces,.and.if.a.report.is. |
38020 | 72 65 63 65 69 76 65 64 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 6e 6f 74 20 6a 6f 69 6e 65 64 | received.the.group.is.not.joined |
38040 | 20 61 67 61 69 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 2e 00 44 69 73 61 62 6c 65 73 20 77 65 | .again.the.upstream..Disables.we |
38060 | 62 20 66 69 6c 74 65 72 69 6e 67 20 77 69 74 68 6f 75 74 20 64 69 73 63 61 72 64 69 6e 67 20 63 | b.filtering.without.discarding.c |
38080 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 73 20 77 65 62 20 70 72 6f 78 79 | onfiguration..Disables.web.proxy |
380a0 | 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6d 6f 64 65 20 61 74 20 61 20 6c 69 73 74 65 6e 69 6e 67 | .transparent.mode.at.a.listening |
380c0 | 20 61 64 64 72 65 73 73 2e 00 44 69 73 61 62 6c 69 6e 67 20 41 64 76 65 72 74 69 73 65 6d 65 6e | .address..Disabling.Advertisemen |
380e0 | 74 73 00 44 69 73 61 62 6c 69 6e 67 20 61 20 56 52 52 50 20 67 72 6f 75 70 00 44 69 73 61 62 6c | ts.Disabling.a.VRRP.group.Disabl |
38100 | 69 6e 67 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 6e 20 74 68 65 20 6c 69 6e 6b 20 62 | ing.the.encryption.on.the.link.b |
38120 | 79 20 72 65 6d 6f 76 69 6e 67 20 60 60 73 65 63 75 72 69 74 79 20 65 6e 63 72 79 70 74 60 60 20 | y.removing.``security.encrypt``. |
38140 | 77 69 6c 6c 20 73 68 6f 77 20 74 68 65 20 75 6e 65 6e 63 72 79 70 74 65 64 20 62 75 74 20 61 75 | will.show.the.unencrypted.but.au |
38160 | 74 68 65 6e 74 69 63 61 74 65 64 20 63 6f 6e 74 65 6e 74 2e 00 44 69 73 61 64 76 61 6e 74 61 67 | thenticated.content..Disadvantag |
38180 | 65 73 20 61 72 65 3a 00 44 69 73 61 73 73 6f 63 69 61 74 65 20 73 74 61 74 69 6f 6e 73 20 62 61 | es.are:.Disassociate.stations.ba |
381a0 | 73 65 64 20 6f 6e 20 65 78 63 65 73 73 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 66 61 | sed.on.excessive.transmission.fa |
381c0 | 69 6c 75 72 65 73 20 6f 72 20 6f 74 68 65 72 20 69 6e 64 69 63 61 74 69 6f 6e 73 20 6f 66 20 63 | ilures.or.other.indications.of.c |
381e0 | 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 73 73 2e 00 44 69 73 70 6c 61 79 20 49 50 76 34 20 72 6f 75 | onnection.loss..Display.IPv4.rou |
38200 | 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | ting.table.for.VRF.identified.by |
38220 | 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 | .`<name>`..Display.IPv6.routing. |
38240 | 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 | table.for.VRF.identified.by.`<na |
38260 | 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 4c 6f 67 73 00 44 69 73 70 6c 61 79 20 4f 54 50 20 6b | me>`..Display.Logs.Display.OTP.k |
38280 | 65 79 20 66 6f 72 20 75 73 65 72 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 61 75 74 68 6f 72 69 7a | ey.for.user.Display.all.authoriz |
382a0 | 61 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | ation.attempts.of.the.specified. |
382c0 | 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c | image.Display.all.known.ARP.tabl |
382e0 | 65 20 65 6e 74 72 69 65 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 20 6f | e.entries.on.a.given.interface.o |
38300 | 6e 6c 79 20 28 60 65 74 68 31 60 29 3a 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 | nly.(`eth1`):.Display.all.known. |
38320 | 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 73 70 61 6e 6e 69 6e 67 20 61 63 72 6f 73 | ARP.table.entries.spanning.acros |
38340 | 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 | s.all.interfaces.Display.content |
38360 | 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f | s.of.a.specified.user-defined.lo |
38380 | 67 20 66 69 6c 65 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 | g.file.of.the.specified.image.Di |
383a0 | 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 6c 6c 20 6d 61 73 74 65 72 20 6c 6f 67 | splay.contents.of.all.master.log |
383c0 | 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 | .files.of.the.specified.image.Di |
383e0 | 73 70 6c 61 79 20 6c 61 73 74 20 6c 69 6e 65 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 6c | splay.last.lines.of.the.system.l |
38400 | 6f 67 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 | og.of.the.specified.image.Displa |
38420 | 79 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 | y.list.of.all.user-defined.log.f |
38440 | 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 | iles.of.the.specified.image.Disp |
38460 | 6c 61 79 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 67 69 76 65 6e 20 63 61 74 65 67 6f 72 79 20 | lay.log.files.of.given.category. |
38480 | 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 | on.the.console..Use.tab.completi |
384a0 | 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 63 61 | on.to.get.a.list.of.available.ca |
384c0 | 74 65 67 6f 72 69 65 73 2e 20 54 68 6f 73 20 63 61 74 65 67 6f 72 69 65 73 20 63 6f 75 6c 64 20 | tegories..Thos.categories.could. |
384e0 | 62 65 3a 20 61 6c 6c 2c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 20 63 6c 75 73 74 65 72 2c | be:.all,.authorization,.cluster, |
38500 | 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2c 20 64 68 63 70 2c 20 64 69 72 65 63 74 6f 72 79 | .conntrack-sync,.dhcp,.directory |
38520 | 2c 20 64 6e 73 2c 20 66 69 6c 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 68 74 74 70 73 2c 20 69 6d | ,.dns,.file,.firewall,.https,.im |
38540 | 61 67 65 20 6c 6c 64 70 2c 20 6e 61 74 2c 20 6f 70 65 6e 76 70 6e 2c 20 73 6e 6d 70 2c 20 74 61 | age.lldp,.nat,.openvpn,.snmp,.ta |
38560 | 69 6c 2c 20 76 70 6e 2c 20 76 72 72 70 00 44 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 | il,.vpn,.vrrp.Displays.informati |
38580 | 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 20 64 69 73 63 6f 76 65 72 65 | on.about.all.neighbors.discovere |
385a0 | 64 20 76 69 61 20 4c 4c 44 50 2e 00 44 69 73 70 6c 61 79 73 20 71 75 65 75 65 20 69 6e 66 6f 72 | d.via.LLDP..Displays.queue.infor |
385c0 | 6d 61 74 69 6f 6e 20 66 6f 72 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 | mation.for.a.PPPoE.interface..Di |
385e0 | 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 | splays.the.route.packets.taken.t |
38600 | 6f 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 75 74 69 6c 69 7a 69 6e 67 20 56 52 46 20 69 | o.a.network.host.utilizing.VRF.i |
38620 | 6e 73 74 61 6e 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 20 | nstance.identified.by.`<name>`.. |
38640 | 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6f 70 74 69 | When.using.the.IPv4.or.IPv6.opti |
38660 | 6f 6e 2c 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 | on,.displays.the.route.packets.t |
38680 | 61 6b 65 6e 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 68 6f 73 74 73 20 49 50 20 61 64 64 72 65 | aken.to.the.given.hosts.IP.addre |
386a0 | 73 73 20 66 61 6d 69 6c 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 66 75 6c | ss.family..This.option.is.useful |
386c0 | 20 77 68 65 6e 20 74 68 65 20 68 6f 73 74 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 | .when.the.host.is.specified.as.a |
386e0 | 20 68 6f 73 74 6e 61 6d 65 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 6e 20 49 50 20 61 64 64 72 | .hostname.rather.than.an.IP.addr |
38700 | 65 73 73 2e 00 44 6f 20 2a 6e 6f 74 2a 20 6d 61 6e 75 61 6c 6c 79 20 65 64 69 74 20 60 2f 65 74 | ess..Do.*not*.manually.edit.`/et |
38720 | 63 2f 68 6f 73 74 73 60 2e 20 54 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 | c/hosts`..This.file.will.automat |
38740 | 69 63 61 6c 6c 79 20 62 65 20 72 65 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 62 6f 6f 74 20 62 61 | ically.be.regenerated.on.boot.ba |
38760 | 73 65 64 20 6f 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 | sed.on.the.settings.in.this.sect |
38780 | 69 6f 6e 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 79 6f 75 27 6c 6c 20 6c 6f 73 65 20 61 6c 6c | ion,.which.means.you'll.lose.all |
387a0 | 20 79 6f 75 72 20 6d 61 6e 75 61 6c 20 65 64 69 74 73 2e 20 49 6e 73 74 65 61 64 2c 20 63 6f 6e | .your.manual.edits..Instead,.con |
387c0 | 66 69 67 75 72 65 20 73 74 61 74 69 63 20 68 6f 73 74 20 6d 61 70 70 69 6e 67 73 20 61 73 20 66 | figure.static.host.mappings.as.f |
387e0 | 6f 6c 6c 6f 77 73 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 34 20 6e 65 78 74 68 6f | ollows..Do.not.allow.IPv4.nextho |
38800 | 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 | p.tracking.to.resolve.via.the.de |
38820 | 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 | fault.route..This.parameter.is.c |
38840 | 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e | onfigured.per-VRF,.so.the.comman |
38860 | 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 | d.is.also.available.in.the.VRF.s |
38880 | 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 36 20 6e 65 78 74 68 6f | ubnode..Do.not.allow.IPv6.nextho |
388a0 | 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 | p.tracking.to.resolve.via.the.de |
388c0 | 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 | fault.route..This.parameter.is.c |
388e0 | 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e | onfigured.per-VRF,.so.the.comman |
38900 | 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 | d.is.also.available.in.the.VRF.s |
38920 | 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 73 73 69 67 6e 20 61 20 6c 69 6e 6b 2d 6c 6f 63 | ubnode..Do.not.assign.a.link-loc |
38940 | 61 6c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | al.IPv6.address.to.this.interfac |
38960 | 65 2e 00 44 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 20 61 73 20 74 68 65 20 66 | e..Do.not.configure.IFB.as.the.f |
38980 | 69 72 73 74 20 73 74 65 70 2e 20 46 69 72 73 74 20 63 72 65 61 74 65 20 65 76 65 72 79 74 68 69 | irst.step..First.create.everythi |
389a0 | 6e 67 20 65 6c 73 65 20 6f 66 20 79 6f 75 72 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 2c 20 | ng.else.of.your.traffic-policy,. |
389c0 | 61 6e 64 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 2e 20 | and.then.you.can.configure.IFB.. |
389e0 | 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 6d 69 67 68 74 20 67 65 74 20 74 68 65 20 60 60 52 54 | Otherwise.you.might.get.the.``RT |
38a00 | 4e 45 54 4c 49 4e 4b 20 61 6e 73 77 65 72 3a 20 46 69 6c 65 20 65 78 69 73 74 73 60 60 20 65 72 | NETLINK.answer:.File.exists``.er |
38a20 | 72 6f 72 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 6f 6c 76 65 64 20 77 69 74 68 20 60 60 | ror,.which.can.be.solved.with.`` |
38a40 | 73 75 64 6f 20 69 70 20 6c 69 6e 6b 20 64 65 6c 65 74 65 20 69 66 62 30 60 60 2e 00 44 6f 20 6e | sudo.ip.link.delete.ifb0``..Do.n |
38a60 | 6f 74 20 73 65 6e 64 20 48 61 72 64 20 52 65 73 65 74 20 43 45 41 53 45 20 4e 6f 74 69 66 69 63 | ot.send.Hard.Reset.CEASE.Notific |
38a80 | 61 74 69 6f 6e 20 66 6f 72 20 22 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 52 65 73 65 74 22 | ation.for."Administrative.Reset" |
38aa0 | 20 65 76 65 6e 74 73 2e 20 57 68 65 6e 20 73 65 74 20 61 6e 64 20 47 72 61 63 65 66 75 6c 20 52 | .events..When.set.and.Graceful.R |
38ac0 | 65 73 74 61 72 74 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 69 | estart.Notification.capability.i |
38ae0 | 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 70 65 65 72 73 2c 20 47 | s.exchanged.between.the.peers,.G |
38b00 | 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 70 72 6f 63 65 64 75 72 65 73 20 61 70 70 6c 79 | raceful.Restart.procedures.apply |
38b20 | 2c 20 61 6e 64 20 72 6f 75 74 65 73 20 77 69 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 2e 00 44 | ,.and.routes.will.be.retained..D |
38b40 | 6f 20 6e 6f 74 20 75 73 65 20 74 68 65 20 6c 6f 63 61 6c 20 60 60 2f 65 74 63 2f 68 6f 73 74 73 | o.not.use.the.local.``/etc/hosts |
38b60 | 60 60 20 66 69 6c 65 20 69 6e 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 56 79 4f 53 | ``.file.in.name.resolution..VyOS |
38b80 | 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 | .DHCP.server.will.use.this.file. |
38ba0 | 74 6f 20 61 64 64 20 72 65 73 6f 6c 76 65 72 73 20 74 6f 20 61 73 73 69 67 6e 65 64 20 61 64 64 | to.add.resolvers.to.assigned.add |
38bc0 | 72 65 73 73 65 73 2e 00 44 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 62 65 20 75 73 65 64 | resses..Does.not.need.to.be.used |
38be0 | 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 70 72 6f 78 79 5f 61 72 70 2e 00 44 6f 6d 61 69 6e | .together.with.proxy_arp..Domain |
38c00 | 00 44 6f 6d 61 69 6e 20 47 72 6f 75 70 73 00 44 6f 6d 61 69 6e 20 4e 61 6d 65 00 44 6f 6d 61 69 | .Domain.Groups.Domain.Name.Domai |
38c20 | 6e 20 6e 61 6d 65 28 73 29 20 66 6f 72 20 77 68 69 63 68 20 74 6f 20 6f 62 74 61 69 6e 20 63 65 | n.name(s).for.which.to.obtain.ce |
38c40 | 72 74 69 66 69 63 61 74 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 63 61 6e 20 69 6e 63 6c 75 | rtificate.Domain.names.can.inclu |
38c60 | 64 65 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 72 73 2c 20 68 79 70 68 65 6e 73 20 61 6e 64 | de.letters,.numbers,.hyphens.and |
38c80 | 20 70 65 72 69 6f 64 73 20 77 69 74 68 20 61 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f | .periods.with.a.maximum.length.o |
38ca0 | 66 20 32 35 33 20 63 68 61 72 61 63 74 65 72 73 2e 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 74 | f.253.characters..Domain.names.t |
38cc0 | 6f 20 61 70 70 6c 79 2c 20 6d 75 6c 74 69 70 6c 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 63 | o.apply,.multiple.domain-names.c |
38ce0 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 44 6f 6d 61 69 6e 20 73 65 61 72 63 68 20 6f | an.be.specified..Domain.search.o |
38d00 | 72 64 65 72 00 44 6f 6e 27 74 20 62 65 20 61 66 72 61 69 64 20 74 68 61 74 20 79 6f 75 20 6e 65 | rder.Don't.be.afraid.that.you.ne |
38d20 | 65 64 20 74 6f 20 72 65 2d 64 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 | ed.to.re-do.your.configuration.. |
38d40 | 4b 65 79 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 68 61 6e 64 6c 65 64 2c 20 61 | Key.transformation.is.handled,.a |
38d60 | 73 20 61 6c 77 61 79 73 2c 20 62 79 20 6f 75 72 20 6d 69 67 72 61 74 69 6f 6e 20 73 63 72 69 70 | s.always,.by.our.migration.scrip |
38d80 | 74 73 2c 20 73 6f 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 61 20 73 6d 6f 6f 74 68 20 74 72 61 | ts,.so.this.will.be.a.smooth.tra |
38da0 | 6e 73 69 74 69 6f 6e 20 66 6f 72 20 79 6f 75 21 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 | nsition.for.you!.Don't.forget,.t |
38dc0 | 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | he.CIDR.declared.in.the.network. |
38de0 | 73 74 61 74 65 6d 65 6e 74 20 2a 2a 4d 55 53 54 20 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 | statement.**MUST.exist.in.your.r |
38e00 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 | outing.table.(dynamic.or.static) |
38e20 | 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 | ,.the.best.way.to.make.sure.that |
38e40 | 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f | .is.true.is.creating.a.static.ro |
38e60 | 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 | ute:**.Don't.forget,.the.CIDR.de |
38e80 | 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 | clared.in.the.network.statement. |
38ea0 | 4d 55 53 54 20 2a 2a 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 | MUST.**exist.in.your.routing.tab |
38ec0 | 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 | le.(dynamic.or.static),.the.best |
38ee0 | 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 | .way.to.make.sure.that.is.true.i |
38f00 | 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e | s.creating.a.static.route:**.Don |
38f20 | 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 64 20 2f | 't.get.confused.about.the.used./ |
38f40 | 33 31 20 74 75 6e 6e 65 6c 20 73 75 62 6e 65 74 2e 20 3a 72 66 63 3a 60 33 30 32 31 60 20 67 69 | 31.tunnel.subnet..:rfc:`3021`.gi |
38f60 | 76 65 73 20 79 6f 75 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 | ves.you.additional.information.f |
38f80 | 6f 72 20 75 73 69 6e 67 20 2f 33 31 20 73 75 62 6e 65 74 73 20 6f 6e 20 70 6f 69 6e 74 2d 74 6f | or.using./31.subnets.on.point-to |
38fa0 | 2d 70 6f 69 6e 74 20 6c 69 6e 6b 73 2e 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 | -point.links..Download.bandwidth |
38fc0 | 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 44 | .limit.in.kbit/s.for.`<user>`..D |
38fe0 | 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f | ownload.bandwidth.limit.in.kbit/ |
39000 | 73 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 | s.for.user.on.interface.`<interf |
39020 | 61 63 65 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 65 20 63 6f 6d 70 6c 65 74 65 20 | ace>`..Download/Update.complete. |
39040 | 62 6c 61 63 6b 6c 69 73 74 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 65 20 70 61 72 74 69 61 | blacklist.Download/Update.partia |
39060 | 6c 20 62 6c 61 63 6b 6c 69 73 74 2e 00 44 72 6f 70 20 41 53 2d 4e 55 4d 42 45 52 20 66 72 6f 6d | l.blacklist..Drop.AS-NUMBER.from |
39080 | 20 74 68 65 20 42 47 50 20 41 53 20 70 61 74 68 2e 00 44 72 6f 70 20 54 61 69 6c 00 44 72 6f 70 | .the.BGP.AS.path..Drop.Tail.Drop |
390a0 | 20 72 61 74 65 00 44 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 20 72 65 70 6f 72 74 65 64 20 6f | .rate.Dropped.packets.reported.o |
390c0 | 6e 20 44 52 4f 50 4d 4f 4e 20 4e 65 74 6c 69 6e 6b 20 63 68 61 6e 6e 65 6c 20 62 79 20 4c 69 6e | n.DROPMON.Netlink.channel.by.Lin |
390e0 | 75 78 20 6b 65 72 6e 65 6c 20 61 72 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 74 68 65 20 73 | ux.kernel.are.exported.via.the.s |
39100 | 74 61 6e 64 61 72 64 20 73 46 6c 6f 77 20 76 35 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 72 | tandard.sFlow.v5.extension.for.r |
39120 | 65 70 6f 72 74 69 6e 67 20 64 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 00 44 75 61 6c 2d 53 74 | eporting.dropped.packets.Dual-St |
39140 | 61 63 6b 20 49 50 76 34 2f 49 50 76 36 20 70 72 6f 76 69 73 69 6f 6e 69 6e 67 20 77 69 74 68 20 | ack.IPv4/IPv6.provisioning.with. |
39160 | 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 44 75 6d 6d 79 00 44 75 6d 6d 79 20 69 6e | Prefix.Delegation.Dummy.Dummy.in |
39180 | 74 65 72 66 61 63 65 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 | terface.Dummy.interfaces.can.be. |
391a0 | 75 73 65 64 20 61 73 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 6c 77 61 79 73 20 73 | used.as.interfaces.that.always.s |
391c0 | 74 61 79 20 75 70 20 28 69 6e 20 74 68 65 20 73 61 6d 65 20 66 61 73 68 69 6f 6e 20 74 6f 20 6c | tay.up.(in.the.same.fashion.to.l |
391e0 | 6f 6f 70 62 61 63 6b 73 20 69 6e 20 43 69 73 63 6f 20 49 4f 53 29 2c 20 6f 72 20 66 6f 72 20 74 | oopbacks.in.Cisco.IOS),.or.for.t |
39200 | 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 00 44 75 70 6c 69 63 61 74 65 20 70 61 63 6b 65 | esting.purposes..Duplicate.packe |
39220 | 74 73 20 61 72 65 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 70 61 63 6b 65 | ts.are.not.included.in.the.packe |
39240 | 74 20 6c 6f 73 73 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2c 20 61 6c 74 68 6f 75 67 68 20 74 68 65 | t.loss.calculation,.although.the |
39260 | 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6f 66 20 74 68 65 73 65 20 70 61 63 6b 65 74 | .round-trip.time.of.these.packet |
39280 | 73 20 69 73 20 75 73 65 64 20 69 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 6d 69 6e | s.is.used.in.calculating.the.min |
392a0 | 69 6d 75 6d 2f 20 61 76 65 72 61 67 65 2f 6d 61 78 69 6d 75 6d 20 72 6f 75 6e 64 2d 74 72 69 70 | imum/.average/maximum.round-trip |
392c0 | 20 74 69 6d 65 20 6e 75 6d 62 65 72 73 2e 00 44 75 72 69 6e 67 20 69 6e 69 74 69 61 6c 20 64 65 | .time.numbers..During.initial.de |
392e0 | 70 6c 6f 79 6d 65 6e 74 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 75 73 69 6e 67 20 74 68 65 20 | ployment.we.recommend.using.the. |
39300 | 73 74 61 67 69 6e 67 20 41 50 49 20 6f 66 20 4c 65 74 73 45 6e 63 72 79 70 74 20 74 6f 20 70 72 | staging.API.of.LetsEncrypt.to.pr |
39320 | 65 76 65 6e 74 20 61 6e 64 20 62 6c 61 63 6b 6c 69 73 74 69 6e 67 20 6f 66 20 79 6f 75 72 20 73 | event.and.blacklisting.of.your.s |
39340 | 79 73 74 65 6d 2e 20 54 68 65 20 41 50 49 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 68 74 74 70 73 | ystem..The.API.endpoint.is.https |
39360 | 3a 2f 2f 61 63 6d 65 2d 73 74 61 67 69 6e 67 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 | ://acme-staging-v02.api.letsencr |
39380 | 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 00 44 75 72 69 6e 67 20 70 72 6f 66 69 6c 65 | ypt.org/directory.During.profile |
393a0 | 20 69 6d 70 6f 72 74 2c 20 74 68 65 20 75 73 65 72 20 69 73 20 61 73 6b 65 64 20 74 6f 20 65 6e | .import,.the.user.is.asked.to.en |
393c0 | 74 65 72 20 69 74 73 20 49 50 53 65 63 20 63 72 65 64 65 6e 74 69 61 6c 73 20 28 75 73 65 72 6e | ter.its.IPSec.credentials.(usern |
393e0 | 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 29 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 | ame.and.password).which.is.store |
39400 | 64 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 2e 00 44 79 6e 61 6d 69 63 20 44 4e 53 00 44 79 6e | d.on.the.mobile..Dynamic.DNS.Dyn |
39420 | 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 00 45 41 50 6f 4c 20 63 6f 6d 65 73 20 77 69 74 68 | amic-protection.EAPoL.comes.with |
39440 | 20 61 6e 20 69 64 65 6e 74 69 66 79 20 6f 70 74 69 6f 6e 2e 20 57 65 20 61 75 74 6f 6d 61 74 69 | .an.identify.option..We.automati |
39460 | 63 61 6c 6c 79 20 75 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 4d 41 43 20 61 64 64 72 | cally.use.the.interface.MAC.addr |
39480 | 65 73 73 20 61 73 20 69 64 65 6e 74 69 74 79 20 70 61 72 61 6d 65 74 65 72 2e 00 45 53 50 20 28 | ess.as.identity.parameter..ESP.( |
394a0 | 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 29 20 | Encapsulating.Security.Payload). |
394c0 | 41 74 74 72 69 62 75 74 65 73 00 45 53 50 20 50 68 61 73 65 3a 00 45 53 50 20 69 73 20 75 73 65 | Attributes.ESP.Phase:.ESP.is.use |
394e0 | 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 64 61 | d.to.provide.confidentiality,.da |
39500 | 74 61 20 6f 72 69 67 69 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 | ta.origin.authentication,.connec |
39520 | 74 69 6f 6e 6c 65 73 73 20 69 6e 74 65 67 72 69 74 79 2c 20 61 6e 20 61 6e 74 69 2d 72 65 70 6c | tionless.integrity,.an.anti-repl |
39540 | 61 79 20 73 65 72 76 69 63 65 20 28 61 20 66 6f 72 6d 20 6f 66 20 70 61 72 74 69 61 6c 20 73 65 | ay.service.(a.form.of.partial.se |
39560 | 71 75 65 6e 63 65 20 69 6e 74 65 67 72 69 74 79 29 2c 20 61 6e 64 20 6c 69 6d 69 74 65 64 20 74 | quence.integrity),.and.limited.t |
39580 | 72 61 66 66 69 63 20 66 6c 6f 77 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2e 20 68 74 74 | raffic.flow.confidentiality..htt |
395a0 | 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 | ps://datatracker.ietf.org/doc/ht |
395c0 | 6d 6c 2f 72 66 63 34 33 30 33 00 45 61 63 68 20 3a 61 62 62 72 3a 60 41 53 20 28 41 75 74 6f 6e | ml/rfc4303.Each.:abbr:`AS.(Auton |
395e0 | 6f 6d 6f 75 73 20 53 79 73 74 65 6d 29 60 20 68 61 73 20 61 6e 20 69 64 65 6e 74 69 66 79 69 6e | omous.System)`.has.an.identifyin |
39600 | 67 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 69 74 20 63 61 6c 6c | g.number.associated.with.it.call |
39620 | 65 64 20 61 6e 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 | ed.an.:abbr:`ASN.(Autonomous.Sys |
39640 | 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 69 73 20 69 73 20 61 20 74 77 6f 20 6f 63 74 65 | tem.Number)`..This.is.a.two.octe |
39660 | 74 20 76 61 6c 75 65 20 72 61 6e 67 69 6e 67 20 69 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 31 20 | t.value.ranging.in.value.from.1. |
39680 | 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 65 72 73 20 36 34 35 31 32 20 74 | to.65535..The.AS.numbers.64512.t |
396a0 | 68 72 6f 75 67 68 20 36 35 35 33 35 20 61 72 65 20 64 65 66 69 6e 65 64 20 61 73 20 70 72 69 76 | hrough.65535.are.defined.as.priv |
396c0 | 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 2e 20 50 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 | ate.AS.numbers..Private.AS.numbe |
396e0 | 72 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 6f 6e 20 74 68 65 | rs.must.not.be.advertised.on.the |
39700 | 20 67 6c 6f 62 61 6c 20 49 6e 74 65 72 6e 65 74 2e 20 54 68 65 20 32 2d 62 79 74 65 20 41 53 20 | .global.Internet..The.2-byte.AS. |
39720 | 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 68 61 73 20 62 65 65 6e 20 65 78 68 61 75 73 74 65 64 2e | number.range.has.been.exhausted. |
39740 | 20 34 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 | .4-byte.AS.numbers.are.specified |
39760 | 20 69 6e 20 3a 72 66 63 3a 60 36 37 39 33 60 2c 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 20 70 | .in.:rfc:`6793`,.and.provide.a.p |
39780 | 6f 6f 6c 20 6f 66 20 34 32 39 34 39 36 37 32 39 36 20 41 53 20 6e 75 6d 62 65 72 73 2e 00 45 61 | ool.of.4294967296.AS.numbers..Ea |
397a0 | 63 68 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 75 6e 69 71 75 | ch.Netfilter.connection.is.uniqu |
397c0 | 65 6c 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 28 6c 61 79 65 72 2d 33 20 70 72 6f | ely.identified.by.a.(layer-3.pro |
397e0 | 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 | tocol,.source.address,.destinati |
39800 | 6f 6e 20 61 64 64 72 65 73 73 2c 20 6c 61 79 65 72 2d 34 20 70 72 6f 74 6f 63 6f 6c 2c 20 6c 61 | on.address,.layer-4.protocol,.la |
39820 | 79 65 72 2d 34 20 6b 65 79 29 20 74 75 70 6c 65 2e 20 54 68 65 20 6c 61 79 65 72 2d 34 20 6b 65 | yer-4.key).tuple..The.layer-4.ke |
39840 | 79 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 74 72 61 6e 73 70 6f 72 74 20 70 72 6f 74 6f | y.depends.on.the.transport.proto |
39860 | 63 6f 6c 3b 20 66 6f 72 20 54 43 50 2f 55 44 50 20 69 74 20 69 73 20 74 68 65 20 70 6f 72 74 20 | col;.for.TCP/UDP.it.is.the.port. |
39880 | 6e 75 6d 62 65 72 73 2c 20 66 6f 72 20 74 75 6e 6e 65 6c 73 20 69 74 20 63 61 6e 20 62 65 20 74 | numbers,.for.tunnels.it.can.be.t |
398a0 | 68 65 69 72 20 74 75 6e 6e 65 6c 20 49 44 2c 20 62 75 74 20 6f 74 68 65 72 77 69 73 65 20 69 73 | heir.tunnel.ID,.but.otherwise.is |
398c0 | 20 6a 75 73 74 20 7a 65 72 6f 2c 20 61 73 20 69 66 20 69 74 20 77 65 72 65 20 6e 6f 74 20 70 61 | .just.zero,.as.if.it.were.not.pa |
398e0 | 72 74 20 6f 66 20 74 68 65 20 74 75 70 6c 65 2e 20 54 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 69 | rt.of.the.tuple..To.be.able.to.i |
39900 | 6e 73 70 65 63 74 20 74 68 65 20 54 43 50 20 70 6f 72 74 20 69 6e 20 61 6c 6c 20 63 61 73 65 73 | nspect.the.TCP.port.in.all.cases |
39920 | 2c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 6d 61 6e 64 61 74 6f 72 69 6c 79 20 64 65 | ,.packets.will.be.mandatorily.de |
39940 | 66 72 61 67 6d 65 6e 74 65 64 2e 00 45 61 63 68 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 20 69 | fragmented..Each.VXLAN.segment.i |
39960 | 73 20 69 64 65 6e 74 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 61 20 32 34 2d 62 69 74 20 73 65 | s.identified.through.a.24-bit.se |
39980 | 67 6d 65 6e 74 20 49 44 2c 20 74 65 72 6d 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 56 4e 49 20 | gment.ID,.termed.the.:abbr:`VNI. |
399a0 | 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 | (VXLAN.Network.Identifier.(or.VX |
399c0 | 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 2c 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 75 | LAN.Segment.ID))`,.This.allows.u |
399e0 | 70 20 74 6f 20 31 36 4d 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 73 20 74 6f 20 63 6f 65 78 69 | p.to.16M.VXLAN.segments.to.coexi |
39a00 | 73 74 20 77 69 74 68 69 6e 20 74 68 65 20 73 61 6d 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 | st.within.the.same.administrativ |
39a20 | 65 20 64 6f 6d 61 69 6e 2e 00 45 61 63 68 20 62 72 69 64 67 65 20 68 61 73 20 61 20 72 65 6c 61 | e.domain..Each.bridge.has.a.rela |
39a40 | 74 69 76 65 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 63 6f 73 74 2e 20 45 61 63 68 20 69 6e 74 | tive.priority.and.cost..Each.int |
39a60 | 65 72 66 61 63 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 70 6f 72 74 | erface.is.associated.with.a.port |
39a80 | 20 28 6e 75 6d 62 65 72 29 20 69 6e 20 74 68 65 20 53 54 50 20 63 6f 64 65 2e 20 45 61 63 68 20 | .(number).in.the.STP.code..Each. |
39aa0 | 68 61 73 20 61 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 61 20 63 6f 73 74 2c 20 74 68 61 74 20 | has.a.priority.and.a.cost,.that. |
39ac0 | 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 69 64 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 73 | is.used.to.decide.which.is.the.s |
39ae0 | 68 6f 72 74 65 73 74 20 70 61 74 68 20 74 6f 20 66 6f 72 77 61 72 64 20 61 20 70 61 63 6b 65 74 | hortest.path.to.forward.a.packet |
39b00 | 2e 20 54 68 65 20 6c 6f 77 65 73 74 20 63 6f 73 74 20 70 61 74 68 20 69 73 20 61 6c 77 61 79 73 | ..The.lowest.cost.path.is.always |
39b20 | 20 75 73 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 6f 74 68 65 72 20 70 61 74 68 20 69 73 20 64 | .used.unless.the.other.path.is.d |
39b40 | 6f 77 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 62 72 69 64 67 65 | own..If.you.have.multiple.bridge |
39b60 | 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 6e 20 79 6f 75 20 6d 61 79 20 6e 65 | s.and.interfaces.then.you.may.ne |
39b80 | 65 64 20 74 6f 20 61 64 6a 75 73 74 20 74 68 65 20 70 72 69 6f 72 69 74 69 65 73 20 74 6f 20 61 | ed.to.adjust.the.priorities.to.a |
39ba0 | 63 68 69 65 76 65 20 6f 70 74 69 6d 75 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 45 61 63 68 | chieve.optimum.performance..Each |
39bc0 | 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 69 6e 73 74 61 6e 63 65 20 63 61 6e 20 62 65 | .broadcast.relay.instance.can.be |
39be0 | 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 | .individually.disabled.without.d |
39c00 | 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 6f 64 65 20 62 79 20 75 | eleting.the.configured.node.by.u |
39c20 | 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 45 61 63 68 | sing.the.following.command:.Each |
39c40 | 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 61 20 67 75 61 72 61 6e 74 65 65 64 20 70 61 72 | .class.can.have.a.guaranteed.par |
39c60 | 74 20 6f 66 20 74 68 65 20 74 6f 74 61 6c 20 62 61 6e 64 77 69 64 74 68 20 64 65 66 69 6e 65 64 | t.of.the.total.bandwidth.defined |
39c80 | 20 66 6f 72 20 74 68 65 20 77 68 6f 6c 65 20 70 6f 6c 69 63 79 2c 20 73 6f 20 61 6c 6c 20 74 68 | .for.the.whole.policy,.so.all.th |
39ca0 | 6f 73 65 20 73 68 61 72 65 73 20 74 6f 67 65 74 68 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 | ose.shares.together.should.not.b |
39cc0 | 65 20 68 69 67 68 65 72 20 74 68 61 6e 20 74 68 65 20 70 6f 6c 69 63 79 27 73 20 77 68 6f 6c 65 | e.higher.than.the.policy's.whole |
39ce0 | 20 62 61 6e 64 77 69 64 74 68 2e 00 45 61 63 68 20 63 6c 61 73 73 20 69 73 20 61 73 73 69 67 6e | .bandwidth..Each.class.is.assign |
39d00 | 65 64 20 61 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 28 74 68 65 20 6e 75 6d 62 65 72 | ed.a.deficit.counter.(the.number |
39d20 | 20 6f 66 20 62 79 74 65 73 20 74 68 61 74 20 61 20 66 6c 6f 77 20 69 73 20 61 6c 6c 6f 77 65 64 | .of.bytes.that.a.flow.is.allowed |
39d40 | 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 77 68 65 6e 20 69 74 20 69 73 20 69 74 73 20 74 75 72 6e | .to.transmit.when.it.is.its.turn |
39d60 | 29 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 74 6f 20 71 75 61 6e 74 75 6d 2e 20 51 75 61 6e 74 75 | ).initialized.to.quantum..Quantu |
39d80 | 6d 20 69 73 20 61 20 70 61 72 61 6d 65 74 65 72 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 77 | m.is.a.parameter.you.configure.w |
39da0 | 68 69 63 68 20 61 63 74 73 20 6c 69 6b 65 20 61 20 63 72 65 64 69 74 20 6f 66 20 66 69 78 20 62 | hich.acts.like.a.credit.of.fix.b |
39dc0 | 79 74 65 73 20 74 68 65 20 63 6f 75 6e 74 65 72 20 72 65 63 65 69 76 65 73 20 6f 6e 20 65 61 63 | ytes.the.counter.receives.on.eac |
39de0 | 68 20 72 6f 75 6e 64 2e 20 54 68 65 6e 20 74 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f | h.round..Then.the.Round-Robin.po |
39e00 | 6c 69 63 79 20 73 74 61 72 74 73 20 6d 6f 76 69 6e 67 20 69 74 73 20 52 6f 75 6e 64 20 52 6f 62 | licy.starts.moving.its.Round.Rob |
39e20 | 69 6e 20 70 6f 69 6e 74 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 71 75 65 75 65 73 2e 20 49 | in.pointer.through.the.queues..I |
39e40 | 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 69 73 20 67 72 65 61 74 65 72 | f.the.deficit.counter.is.greater |
39e60 | 20 74 68 61 6e 20 74 68 65 20 70 61 63 6b 65 74 27 73 20 73 69 7a 65 20 61 74 20 74 68 65 20 68 | .than.the.packet's.size.at.the.h |
39e80 | 65 61 64 20 6f 66 20 74 68 65 20 71 75 65 75 65 2c 20 74 68 69 73 20 70 61 63 6b 65 74 20 77 69 | ead.of.the.queue,.this.packet.wi |
39ea0 | 6c 6c 20 62 65 20 73 65 6e 74 20 61 6e 64 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 | ll.be.sent.and.the.value.of.the. |
39ec0 | 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 62 65 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 | counter.will.be.decremented.by.t |
39ee0 | 68 65 20 70 61 63 6b 65 74 20 73 69 7a 65 2e 20 54 68 65 6e 2c 20 74 68 65 20 73 69 7a 65 20 6f | he.packet.size..Then,.the.size.o |
39f00 | 66 20 74 68 65 20 6e 65 78 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 | f.the.next.packet.will.be.compar |
39f20 | 65 64 20 74 6f 20 74 68 65 20 63 6f 75 6e 74 65 72 20 76 61 6c 75 65 20 61 67 61 69 6e 2c 20 72 | ed.to.the.counter.value.again,.r |
39f40 | 65 70 65 61 74 69 6e 67 20 74 68 65 20 70 72 6f 63 65 73 73 2e 20 4f 6e 63 65 20 74 68 65 20 71 | epeating.the.process..Once.the.q |
39f60 | 75 65 75 65 20 69 73 20 65 6d 70 74 79 20 6f 72 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 | ueue.is.empty.or.the.value.of.th |
39f80 | 65 20 63 6f 75 6e 74 65 72 20 69 73 20 69 6e 73 75 66 66 69 63 69 65 6e 74 2c 20 74 68 65 20 52 | e.counter.is.insufficient,.the.R |
39fa0 | 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 77 69 6c 6c 20 6d 6f 76 65 20 74 6f 20 | ound-Robin.pointer.will.move.to. |
39fc0 | 74 68 65 20 6e 65 78 74 20 71 75 65 75 65 2e 20 49 66 20 74 68 65 20 71 75 65 75 65 20 69 73 20 | the.next.queue..If.the.queue.is. |
39fe0 | 65 6d 70 74 79 2c 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 64 65 66 69 63 69 74 20 | empty,.the.value.of.the.deficit. |
3a000 | 63 6f 75 6e 74 65 72 20 69 73 20 72 65 73 65 74 20 74 6f 20 30 2e 00 45 61 63 68 20 64 79 6e 61 | counter.is.reset.to.0..Each.dyna |
3a020 | 6d 69 63 20 4e 48 53 20 77 69 6c 6c 20 67 65 74 20 61 20 70 65 65 72 20 65 6e 74 72 79 20 77 69 | mic.NHS.will.get.a.peer.entry.wi |
3a040 | 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 | th.the.configured.network.addres |
3a060 | 73 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 65 64 20 4e 42 4d 41 20 61 64 64 72 65 73 | s.and.the.discovered.NBMA.addres |
3a080 | 73 2e 00 45 61 63 68 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 73 20 63 6f 6e 66 69 67 75 72 | s..Each.health.check.is.configur |
3a0a0 | 65 64 20 69 6e 20 69 74 73 20 6f 77 6e 20 74 65 73 74 2c 20 74 65 73 74 73 20 61 72 65 20 6e 75 | ed.in.its.own.test,.tests.are.nu |
3a0c0 | 6d 62 65 72 65 64 20 61 6e 64 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 6e 75 6d 65 72 69 63 20 | mbered.and.processed.in.numeric. |
3a0e0 | 6f 72 64 65 72 2e 20 46 6f 72 20 6d 75 6c 74 69 20 74 61 72 67 65 74 20 68 65 61 6c 74 68 20 63 | order..For.multi.target.health.c |
3a100 | 68 65 63 6b 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 65 73 74 73 20 63 61 6e 20 62 65 20 64 65 | hecking.multiple.tests.can.be.de |
3a120 | 66 69 6e 65 64 3a 00 45 61 63 68 20 69 6e 64 69 76 69 64 75 61 6c 20 63 6f 6e 66 69 67 75 72 65 | fined:.Each.individual.configure |
3a140 | 64 20 63 6f 6e 73 6f 6c 65 2d 73 65 72 76 65 72 20 64 65 76 69 63 65 20 63 61 6e 20 62 65 20 64 | d.console-server.device.can.be.d |
3a160 | 69 72 65 63 74 6c 79 20 65 78 70 6f 73 65 64 20 74 6f 20 74 68 65 20 6f 75 74 73 69 64 65 20 77 | irectly.exposed.to.the.outside.w |
3a180 | 6f 72 6c 64 2e 20 41 20 75 73 65 72 20 63 61 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 | orld..A.user.can.directly.connec |
3a1a0 | 74 20 76 69 61 20 53 53 48 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 6f 72 74 | t.via.SSH.to.the.configured.port |
3a1c0 | 2e 00 45 61 63 68 20 6e 6f 64 65 20 28 48 75 62 20 61 6e 64 20 53 70 6f 6b 65 29 20 75 73 65 73 | ..Each.node.(Hub.and.Spoke).uses |
3a1e0 | 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | .an.IP.address.from.the.network. |
3a200 | 31 37 32 2e 31 36 2e 32 35 33 2e 31 32 38 2f 32 39 2e 00 45 61 63 68 20 6f 66 20 74 68 65 20 69 | 172.16.253.128/29..Each.of.the.i |
3a220 | 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 | nstall.command.should.be.applied |
3a240 | 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 | .to.the.configuration.and.commit |
3a260 | 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e 63 6f | ed.before.using.under.the.openco |
3a280 | 6e 6e 65 63 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 45 61 63 68 20 73 69 74 65 2d 74 | nnect.configuration:.Each.site-t |
3a2a0 | 6f 2d 73 69 74 65 20 70 65 65 72 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 | o-site.peer.has.the.next.options |
3a2c0 | 3a 00 45 65 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 | :.Eenables.the.Generic.Protocol. |
3a2e0 | 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 | extension.(VXLAN-GPE)..Currently |
3a300 | 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 | ,.this.is.only.supported.togethe |
3a320 | 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6d 61 | r.with.the.external.keyword..Ema |
3a340 | 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 61 73 73 6f 63 69 61 74 65 20 77 69 74 68 20 63 65 72 | il.address.to.associate.with.cer |
3a360 | 74 69 66 69 63 61 74 65 00 45 6d 61 69 6c 20 75 73 65 64 20 66 6f 72 20 72 65 67 69 73 74 72 61 | tificate.Email.used.for.registra |
3a380 | 74 69 6f 6e 20 61 6e 64 20 72 65 63 6f 76 65 72 79 20 63 6f 6e 74 61 63 74 2e 00 45 6d 62 65 64 | tion.and.recovery.contact..Embed |
3a3a0 | 64 69 6e 67 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 | ding.one.policy.into.another.one |
3a3c0 | 00 45 6d 65 72 67 65 6e 63 79 00 45 6e 61 62 6c 65 20 3a 61 62 62 72 3a 60 42 4d 50 20 28 42 47 | .Emergency.Enable.:abbr:`BMP.(BG |
3a3e0 | 50 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 73 75 70 70 6f 72 74 00 | P.Monitoring.Protocol)`.support. |
3a400 | 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 49 53 49 53 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 | Enable.BFD.for.ISIS.on.an.interf |
3a420 | 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 50 46 20 6f 6e 20 61 6e 20 69 6e | ace.Enable.BFD.for.OSPF.on.an.in |
3a440 | 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 50 46 76 33 20 6f 6e | terface.Enable.BFD.for.OSPFv3.on |
3a460 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 42 47 50 00 | .an.interface.Enable.BFD.in.BGP. |
3a480 | 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 49 53 49 53 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e | Enable.BFD.in.ISIS.Enable.BFD.in |
3a4a0 | 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 42 47 50 20 70 65 65 72 20 67 | .OSPF.Enable.BFD.on.a.BGP.peer.g |
3a4c0 | 72 6f 75 70 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 73 69 6e 67 6c 65 20 42 47 50 20 | roup.Enable.BFD.on.a.single.BGP. |
3a4e0 | 6e 65 69 67 68 62 6f 72 00 45 6e 61 62 6c 65 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 63 6f | neighbor.Enable.DHCP.failover.co |
3a500 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 61 64 64 72 65 73 73 20 70 6f 6f | nfiguration.for.this.address.poo |
3a520 | 6c 2e 00 45 6e 61 62 6c 65 20 48 54 2d 64 65 6c 61 79 65 64 20 42 6c 6f 63 6b 20 41 63 6b 20 60 | l..Enable.HT-delayed.Block.Ack.` |
3a540 | 60 5b 44 45 4c 41 59 45 44 2d 42 41 5d 60 60 00 45 6e 61 62 6c 65 20 49 43 4d 50 20 52 6f 75 74 | `[DELAYED-BA]``.Enable.ICMP.Rout |
3a560 | 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 00 45 6e | er.Discovery.Protocol.support.En |
3a580 | 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 71 75 65 72 69 65 72 2e 00 45 6e 61 62 6c | able.IGMP.and.MLD.querier..Enabl |
3a5a0 | 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 2e 00 45 6e 61 62 6c 65 20 | e.IGMP.and.MLD.snooping..Enable. |
3a5c0 | 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 63 6c 69 65 6e 74 00 45 6e 61 62 6c 65 20 49 | IP.forwarding.on.client.Enable.I |
3a5e0 | 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 | S-IS.Enable.IS-IS.and.IGP-LDP.sy |
3a600 | 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 72 | nchronization.Enable.IS-IS.and.r |
3a620 | 65 64 69 73 74 72 69 62 75 74 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 6e 61 74 69 76 65 6c 79 20 | edistribute.routes.not.natively. |
3a640 | 69 6e 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 77 69 74 68 20 53 65 67 6d 65 | in.IS-IS.Enable.IS-IS.with.Segme |
3a660 | 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 00 45 6e 61 62 6c 65 | nt.Routing.(Experimental).Enable |
3a680 | 20 4c 2d 53 49 47 20 54 58 4f 50 20 70 72 6f 74 65 63 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 | .L-SIG.TXOP.protection.capabilit |
3a6a0 | 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 28 4c 6f 77 20 44 65 6e 73 69 74 79 20 50 61 72 69 74 | y.Enable.LDPC.(Low.Density.Parit |
3a6c0 | 79 20 43 68 65 63 6b 29 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c | y.Check).coding.capability.Enabl |
3a6e0 | 65 20 4c 44 50 43 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 | e.LDPC.coding.capability.Enable. |
3a700 | 4c 4c 44 50 20 73 65 72 76 69 63 65 00 45 6e 61 62 6c 65 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 | LLDP.service.Enable.OSPF.Enable. |
3a720 | 4f 53 50 46 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e | OSPF.and.IGP-LDP.synchronization |
3a740 | 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 | :.Enable.OSPF.with.Segment.Routi |
3a760 | 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 | ng.(Experimental):.Enable.OSPF.w |
3a780 | 69 74 68 20 72 6f 75 74 65 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 | ith.route.redistribution.of.the. |
3a7a0 | 6c 6f 6f 70 62 61 63 6b 20 61 6e 64 20 64 65 66 61 75 6c 74 20 6f 72 69 67 69 6e 61 74 65 3a 00 | loopback.and.default.originate:. |
3a7c0 | 45 6e 61 62 6c 65 20 4f 54 50 20 32 46 41 20 66 6f 72 20 75 73 65 72 20 60 75 73 65 72 6e 61 6d | Enable.OTP.2FA.for.user.`usernam |
3a7e0 | 65 60 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 2c 20 75 73 69 6e 67 20 | e`.with.default.settings,.using. |
3a800 | 74 68 65 20 42 41 53 45 33 32 20 65 6e 63 6f 64 65 64 20 32 46 41 2f 4d 46 41 20 6b 65 79 20 73 | the.BASE32.encoded.2FA/MFA.key.s |
3a820 | 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 3e 60 2e 00 45 6e 61 62 6c 65 20 4f 70 65 6e | pecified.by.`<key>`..Enable.Open |
3a840 | 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 66 65 61 74 75 72 65 | VPN.Data.Channel.Offload.feature |
3a860 | 20 62 79 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 6b 65 72 6e | .by.loading.the.appropriate.kern |
3a880 | 65 6c 20 6d 6f 64 75 6c 65 2e 00 45 6e 61 62 6c 65 20 50 52 45 46 36 34 20 6f 70 74 69 6f 6e 20 | el.module..Enable.PREF64.option. |
3a8a0 | 61 73 20 6f 75 74 6c 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 37 38 31 60 2e 00 45 6e 61 62 | as.outlined.in.:rfc:`8781`..Enab |
3a8c0 | 6c 65 20 53 4e 4d 50 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 71 75 65 72 69 65 73 20 6f 66 20 74 | le.SNMP.Enable.SNMP.queries.of.t |
3a8e0 | 68 65 20 4c 4c 44 50 20 64 61 74 61 62 61 73 65 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 73 75 70 | he.LLDP.database.Enable.SNMP.sup |
3a900 | 70 6f 72 74 20 66 6f 72 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 | port.for.an.individual.routing.d |
3a920 | 61 65 6d 6f 6e 2e 00 45 6e 61 62 6c 65 20 53 54 50 00 45 6e 61 62 6c 65 20 54 46 54 50 20 73 65 | aemon..Enable.STP.Enable.TFTP.se |
3a940 | 72 76 69 63 65 20 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 60 3c 64 69 72 65 63 74 | rvice.by.specifying.the.`<direct |
3a960 | 6f 72 79 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 72 76 | ory>`.which.will.be.used.to.serv |
3a980 | 65 20 66 69 6c 65 73 2e 00 45 6e 61 62 6c 65 20 56 48 54 20 54 58 4f 50 20 50 6f 77 65 72 20 53 | e.files..Enable.VHT.TXOP.Power.S |
3a9a0 | 61 76 65 20 4d 6f 64 65 00 45 6e 61 62 6c 65 20 56 4c 41 4e 2d 41 77 61 72 65 20 42 72 69 64 67 | ave.Mode.Enable.VLAN-Aware.Bridg |
3a9c0 | 65 00 45 6e 61 62 6c 65 20 61 75 74 6f 6d 61 74 69 63 20 72 65 64 69 72 65 63 74 20 66 72 6f 6d | e.Enable.automatic.redirect.from |
3a9e0 | 20 68 74 74 70 20 74 6f 20 68 74 74 70 73 2e 00 45 6e 61 62 6c 65 20 63 72 65 61 74 69 6f 6e 20 | .http.to.https..Enable.creation. |
3aa00 | 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 2e 00 45 6e 61 62 6c 65 20 64 69 66 66 65 | of.shortcut.routes..Enable.diffe |
3aa20 | 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 68 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 69 6e | rent.types.of.hardware.offloadin |
3aa40 | 67 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 4e 49 43 2e 00 45 6e 61 62 6c 65 20 67 69 76 65 6e | g.on.the.given.NIC..Enable.given |
3aa60 | 20 6c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 74 68 69 73 20 4c 4c 44 50 20 69 6e | .legacy.protocol.on.this.LLDP.in |
3aa80 | 73 74 61 6e 63 65 2e 20 4c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 65 | stance..Legacy.protocols.include |
3aaa0 | 3a 00 45 6e 61 62 6c 65 20 6c 61 79 65 72 20 37 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 | :.Enable.layer.7.HTTP.health.che |
3aac0 | 63 6b 00 45 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 | ck.Enable.logging.for.the.matche |
3aae0 | 64 20 70 61 63 6b 65 74 2e 20 49 66 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | d.packet..If.this.configuration. |
3ab00 | 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 2c 20 74 68 65 6e 20 6c 6f 67 | command.is.not.present,.then.log |
3ab20 | 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 61 62 | .is.not.enabled..Enable.or.Disab |
3ab40 | 6c 65 20 56 79 4f 53 20 74 6f 20 62 65 20 3a 72 66 63 3a 60 31 33 33 37 60 20 63 6f 6e 66 6f 72 | le.VyOS.to.be.:rfc:`1337`.confor |
3ab60 | 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 | m..The.following.system.paramete |
3ab80 | 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 | r.will.be.altered:.Enable.or.Dis |
3aba0 | 61 62 6c 65 20 69 66 20 56 79 4f 53 20 75 73 65 20 49 50 76 34 20 54 43 50 20 53 59 4e 20 43 6f | able.if.VyOS.use.IPv4.TCP.SYN.Co |
3abc0 | 6f 6b 69 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 | okies..The.following.system.para |
3abe0 | 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 | meter.will.be.altered:.Enable.or |
3ac00 | 20 64 69 73 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 | .disable.logging.for.the.matched |
3ac20 | 20 70 61 63 6b 65 74 2e 00 45 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 61 6e 20 69 6e 74 65 72 | .packet..Enable.ospf.on.an.inter |
3ac40 | 66 61 63 65 20 61 6e 64 20 73 65 74 20 61 73 73 6f 63 69 61 74 65 64 20 61 72 65 61 2e 00 45 6e | face.and.set.associated.area..En |
3ac60 | 61 62 6c 65 20 70 6f 6c 69 63 79 20 66 6f 72 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f | able.policy.for.source.validatio |
3ac80 | 6e 20 62 79 20 72 65 76 65 72 73 65 64 20 70 61 74 68 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 | n.by.reversed.path,.as.specified |
3aca0 | 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 2e 20 43 75 72 72 65 6e 74 20 72 65 63 6f 6d 6d 65 | .in.:rfc:`3704`..Current.recomme |
3acc0 | 6e 64 65 64 20 70 72 61 63 74 69 63 65 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 20 69 73 20 | nded.practice.in.:rfc:`3704`.is. |
3ace0 | 74 6f 20 65 6e 61 62 6c 65 20 73 74 72 69 63 74 20 6d 6f 64 65 20 74 6f 20 70 72 65 76 65 6e 74 | to.enable.strict.mode.to.prevent |
3ad00 | 20 49 50 20 73 70 6f 6f 66 69 6e 67 20 66 72 6f 6d 20 44 44 6f 73 20 61 74 74 61 63 6b 73 2e 20 | .IP.spoofing.from.DDos.attacks.. |
3ad20 | 49 66 20 75 73 69 6e 67 20 61 73 79 6d 6d 65 74 72 69 63 20 72 6f 75 74 69 6e 67 20 6f 72 20 6f | If.using.asymmetric.routing.or.o |
3ad40 | 74 68 65 72 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 72 6f 75 74 69 6e 67 2c 20 74 68 65 6e 20 6c | ther.complicated.routing,.then.l |
3ad60 | 6f 6f 73 65 20 6d 6f 64 65 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 6e 61 62 6c 65 | oose.mode.is.recommended..Enable |
3ad80 | 20 72 65 63 65 69 76 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 | .receiving.PPDU.using.STBC.(Spac |
3ada0 | 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 73 61 6d 70 | e.Time.Block.Coding).Enable.samp |
3adc0 | 6c 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 74 | ling.of.packets,.which.will.be.t |
3ade0 | 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 2e 00 | ransmitted.to.sFlow.collectors.. |
3ae00 | 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 | Enable.sending.PPDU.using.STBC.( |
3ae20 | 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 | Space.Time.Block.Coding).Enable. |
3ae40 | 73 65 6e 64 69 6e 67 20 6f 66 20 43 69 73 63 6f 20 73 74 79 6c 65 20 4e 48 52 50 20 54 72 61 66 | sending.of.Cisco.style.NHRP.Traf |
3ae60 | 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 2e 20 49 66 20 74 68 69 73 20 | fic.Indication.packets..If.this. |
3ae80 | 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6f 70 65 6e 6e 68 72 70 20 64 65 74 65 63 74 73 20 | is.enabled.and.opennhrp.detects. |
3aea0 | 61 20 66 6f 72 77 61 72 64 65 64 20 20 70 61 63 6b 65 74 2c 20 69 74 20 77 69 6c 6c 20 73 65 6e | a.forwarded..packet,.it.will.sen |
3aec0 | 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 | d.a.message.to.the.original.send |
3aee0 | 65 72 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 73 74 72 75 63 74 69 6e 67 20 69 74 20 | er.of.the.packet.instructing.it. |
3af00 | 74 6f 20 63 72 65 61 74 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 | to.create.a.direct.connection.wi |
3af20 | 74 68 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 61 73 69 | th.the.destination..This.is.basi |
3af40 | 63 61 6c 6c 79 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 65 71 75 | cally.a.protocol.independent.equ |
3af60 | 69 76 61 6c 65 6e 74 20 6f 66 20 49 43 4d 50 20 72 65 64 69 72 65 63 74 2e 00 45 6e 61 62 6c 65 | ivalent.of.ICMP.redirect..Enable |
3af80 | 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 53 54 50 20 69 73 20 | .spanning.tree.protocol..STP.is. |
3afa0 | 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 45 6e 61 62 6c 65 20 74 68 65 20 | disabled.by.default..Enable.the. |
3afc0 | 4f 70 61 71 75 65 2d 4c 53 41 20 63 61 70 61 62 69 6c 69 74 79 20 28 72 66 63 32 33 37 30 29 2c | Opaque-LSA.capability.(rfc2370), |
3afe0 | 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 20 6f 6e | .necessary.to.transport.label.on |
3b000 | 20 49 47 50 00 45 6e 61 62 6c 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 63 61 75 73 65 73 20 | .IGP.Enable.this.feature.causes. |
3b020 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 65 73 65 74 2e 00 45 6e 61 62 6c 65 20 74 72 61 6e 73 | an.interface.reset..Enable.trans |
3b040 | 6d 69 73 73 69 6f 6e 20 6f 66 20 4c 4c 44 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 | mission.of.LLDP.information.on.g |
3b060 | 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f | iven.`<interface>`..You.can.also |
3b080 | 20 73 61 79 20 60 60 61 6c 6c 60 60 20 68 65 72 65 20 73 6f 20 4c 4c 44 50 20 69 73 20 74 75 72 | .say.``all``.here.so.LLDP.is.tur |
3b0a0 | 6e 65 64 20 6f 6e 20 6f 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 2e 00 45 6e 61 62 6c | ned.on.on.every.interface..Enabl |
3b0c0 | 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 62 | ed.on-demand.PPPoE.connections.b |
3b0e0 | 72 69 6e 67 20 75 70 20 74 68 65 20 6c 69 6e 6b 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 | ring.up.the.link.only.when.traff |
3b100 | 69 63 20 6e 65 65 64 73 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 6c 69 6e 6b 2e 20 20 49 66 20 | ic.needs.to.pass.this.link...If. |
3b120 | 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 | the.link.fails.for.any.reason,.t |
3b140 | 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 20 61 75 74 6f 6d | he.link.is.brought.back.up.autom |
3b160 | 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 65 | atically.once.traffic.passes.the |
3b180 | 20 69 6e 74 65 72 66 61 63 65 20 61 67 61 69 6e 2e 20 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 | .interface.again..If.you.configu |
3b1a0 | 72 65 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e | re.an.on-demand.PPPoE.connection |
3b1c0 | 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 69 64 | ,.you.must.also.configure.the.id |
3b1e0 | 6c 65 20 74 69 6d 65 6f 75 74 20 70 65 72 69 6f 64 2c 20 61 66 74 65 72 20 77 68 69 63 68 20 61 | le.timeout.period,.after.which.a |
3b200 | 6e 20 69 64 6c 65 20 50 50 50 6f 45 20 6c 69 6e 6b 20 77 69 6c 6c 20 62 65 20 64 69 73 63 6f 6e | n.idle.PPPoE.link.will.be.discon |
3b220 | 6e 65 63 74 65 64 2e 20 41 20 6e 6f 6e 2d 7a 65 72 6f 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 | nected..A.non-zero.idle.timeout. |
3b240 | 77 69 6c 6c 20 6e 65 76 65 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 74 68 65 20 6c 69 6e 6b 20 61 | will.never.disconnect.the.link.a |
3b260 | 66 74 65 72 20 69 74 20 66 69 72 73 74 20 63 61 6d 65 20 75 70 2e 00 45 6e 61 62 6c 65 73 20 43 | fter.it.first.came.up..Enables.C |
3b280 | 69 73 63 6f 20 73 74 79 6c 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 4e 48 52 | isco.style.authentication.on.NHR |
3b2a0 | 50 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 65 6d 62 65 64 73 20 74 68 65 20 73 65 63 72 65 | P.packets..This.embeds.the.secre |
3b2c0 | 74 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 74 6f 20 74 68 65 20 6f 75 74 67 | t.plaintext.password.to.the.outg |
3b2e0 | 6f 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 49 6e 63 6f 6d 69 6e 67 20 4e 48 52 50 | oing.NHRP.packets..Incoming.NHRP |
3b300 | 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 64 | .packets.on.this.interface.are.d |
3b320 | 69 73 63 61 72 64 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 73 65 63 72 65 74 20 70 61 73 73 77 | iscarded.unless.the.secret.passw |
3b340 | 6f 72 64 20 69 73 20 70 72 65 73 65 6e 74 2e 20 4d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f | ord.is.present..Maximum.length.o |
3b360 | 66 20 74 68 65 20 73 65 63 72 65 74 20 69 73 20 38 20 63 68 61 72 61 63 74 65 72 73 2e 00 45 6e | f.the.secret.is.8.characters..En |
3b380 | 61 62 6c 65 73 20 61 6e 20 4d 50 4c 53 20 6c 61 62 65 6c 20 74 6f 20 62 65 20 61 74 74 61 63 68 | ables.an.MPLS.label.to.be.attach |
3b3a0 | 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 | ed.to.a.route.exported.from.the. |
3b3c0 | 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 20 49 66 20 74 | current.unicast.VRF.to.VPN..If.t |
3b3e0 | 68 65 20 76 61 6c 75 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 61 75 74 6f 2c 20 74 68 65 20 | he.value.specified.is.auto,.the. |
3b400 | 6c 61 62 65 6c 20 76 61 6c 75 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 | label.value.is.automatically.ass |
3b420 | 69 67 6e 65 64 20 66 72 6f 6d 20 61 20 70 6f 6f 6c 20 6d 61 69 6e 74 61 69 6e 65 64 2e 00 45 6e | igned.from.a.pool.maintained..En |
3b440 | 61 62 6c 65 73 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 | ables.bandwidth.shaping.via.RADI |
3b460 | 55 53 2e 00 45 6e 61 62 6c 65 73 20 69 6d 70 6f 72 74 20 6f 72 20 65 78 70 6f 72 74 20 6f 66 20 | US..Enables.import.or.export.of. |
3b480 | 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 | routes.between.the.current.unica |
3b4a0 | 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 | st.VRF.and.VPN..Enables.the.Gene |
3b4c0 | 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 | ric.Protocol.extension.(VXLAN-GP |
3b4e0 | 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 | E)..Currently,.this.is.only.supp |
3b500 | 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c | orted.together.with.the.external |
3b520 | 20 6b 65 79 77 6f 72 64 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 20 65 63 68 6f 20 74 72 61 6e 73 | .keyword..Enables.the.echo.trans |
3b540 | 6d 69 73 73 69 6f 6e 20 6d 6f 64 65 00 45 6e 61 62 6c 65 73 20 74 68 65 20 72 6f 6f 74 20 70 61 | mission.mode.Enables.the.root.pa |
3b560 | 72 74 69 74 69 6f 6e 20 61 75 74 6f 2d 65 78 74 65 6e 73 69 6f 6e 20 61 6e 64 20 72 65 73 69 7a | rtition.auto-extension.and.resiz |
3b580 | 65 73 20 74 6f 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 61 69 6c 61 62 6c 65 20 73 70 61 63 | es.to.the.maximum.available.spac |
3b5a0 | 65 20 6f 6e 20 73 79 73 74 65 6d 20 62 6f 6f 74 2e 00 45 6e 61 62 6c 69 6e 67 20 41 64 76 65 72 | e.on.system.boot..Enabling.Adver |
3b5c0 | 74 69 73 6d 65 6e 74 73 00 45 6e 61 62 6c 69 6e 67 20 4f 70 65 6e 56 50 4e 20 44 43 4f 00 45 6e | tisments.Enabling.OpenVPN.DCO.En |
3b5e0 | 61 62 6c 69 6e 67 20 53 53 48 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 | abling.SSH.only.requires.you.to. |
3b600 | 73 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 60 60 3c 70 6f 72 74 3e 60 60 20 79 6f 75 20 | specify.the.port.``<port>``.you. |
3b620 | 77 61 6e 74 20 53 53 48 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c | want.SSH.to.listen.on..By.defaul |
3b640 | 74 2c 20 53 53 48 20 72 75 6e 73 20 6f 6e 20 70 6f 72 74 20 32 32 2e 00 45 6e 61 62 6c 69 6e 67 | t,.SSH.runs.on.port.22..Enabling |
3b660 | 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 72 69 73 | .this.function.increases.the.ris |
3b680 | 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 73 61 74 75 72 61 74 69 6f 6e 2e 00 45 6e 66 6f 72 | k.of.bandwidth.saturation..Enfor |
3b6a0 | 63 65 20 73 74 72 69 63 74 20 70 61 74 68 20 63 68 65 63 6b 69 6e 67 00 45 6e 73 6c 61 76 65 20 | ce.strict.path.checking.Enslave. |
3b6c0 | 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 6f 6e 64 20 60 3c 69 | `<member>`.interface.to.bond.`<i |
3b6e0 | 6e 74 65 72 66 61 63 65 3e 60 2e 00 45 6e 73 75 72 65 20 74 68 61 74 20 77 68 65 6e 20 63 6f 6d | nterface>`..Ensure.that.when.com |
3b700 | 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 77 68 65 72 65 20 62 6f 74 68 20 61 72 65 20 65 71 75 | paring.routes.where.both.are.equ |
3b720 | 61 6c 20 6f 6e 20 6d 6f 73 74 20 6d 65 74 72 69 63 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6c 6f | al.on.most.metrics,.including.lo |
3b740 | 63 61 6c 2d 70 72 65 66 2c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 2c 20 49 47 50 20 63 6f | cal-pref,.AS_PATH.length,.IGP.co |
3b760 | 73 74 2c 20 4d 45 44 2c 20 74 68 61 74 20 74 68 65 20 74 69 65 20 69 73 20 62 72 6f 6b 65 6e 20 | st,.MED,.that.the.tie.is.broken. |
3b780 | 62 61 73 65 64 20 6f 6e 20 72 6f 75 74 65 72 2d 49 44 2e 00 45 6e 74 65 72 70 72 69 73 65 20 69 | based.on.router-ID..Enterprise.i |
3b7a0 | 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 20 75 73 75 61 6c 6c 79 20 73 68 69 70 20 61 20 6b 69 6e 64 | nstallations.usually.ship.a.kind |
3b7c0 | 20 6f 66 20 64 69 72 65 63 74 6f 72 79 20 73 65 72 76 69 63 65 20 77 68 69 63 68 20 69 73 20 75 | .of.directory.service.which.is.u |
3b7e0 | 73 65 64 20 74 6f 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 70 61 73 73 77 6f 72 64 20 73 74 | sed.to.have.a.single.password.st |
3b800 | 6f 72 65 20 66 6f 72 20 61 6c 6c 20 65 6d 70 6c 6f 79 65 65 73 2e 20 56 79 4f 53 20 61 6e 64 20 | ore.for.all.employees..VyOS.and. |
3b820 | 4f 70 65 6e 56 50 4e 20 73 75 70 70 6f 72 74 20 75 73 69 6e 67 20 4c 44 41 50 2f 41 44 20 61 73 | OpenVPN.support.using.LDAP/AD.as |
3b840 | 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 61 63 6b 65 6e 64 2e 00 45 72 69 63 73 73 6f 6e 20 63 | .single.user.backend..Ericsson.c |
3b860 | 61 6c 6c 20 69 74 20 4d 41 43 2d 46 6f 72 63 65 64 20 46 6f 72 77 61 72 64 69 6e 67 20 28 52 46 | all.it.MAC-Forced.Forwarding.(RF |
3b880 | 43 20 44 72 61 66 74 29 00 45 72 72 6f 72 00 45 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 00 | C.Draft).Error.Error.conditions. |
3b8a0 | 45 73 74 61 62 6c 69 73 68 65 64 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 76 69 65 77 | Established.sessions.can.be.view |
3b8c0 | 65 64 20 75 73 69 6e 67 20 74 68 65 20 2a 2a 73 68 6f 77 20 6c 32 74 70 2d 73 65 72 76 65 72 20 | ed.using.the.**show.l2tp-server. |
3b8e0 | 73 65 73 73 69 6f 6e 73 2a 2a 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 00 45 | sessions**.operational.command.E |
3b900 | 74 68 65 72 6e 65 74 00 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 69 73 | thernet.Ethernet.flow.control.is |
3b920 | 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 73 74 6f | .a.mechanism.for.temporarily.sto |
3b940 | 70 70 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 64 61 74 61 20 6f | pping.the.transmission.of.data.o |
3b960 | 6e 20 45 74 68 65 72 6e 65 74 20 66 61 6d 69 6c 79 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f | n.Ethernet.family.computer.netwo |
3b980 | 72 6b 73 2e 20 54 68 65 20 67 6f 61 6c 20 6f 66 20 74 68 69 73 20 6d 65 63 68 61 6e 69 73 6d 20 | rks..The.goal.of.this.mechanism. |
3b9a0 | 69 73 20 74 6f 20 65 6e 73 75 72 65 20 7a 65 72 6f 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 69 6e | is.to.ensure.zero.packet.loss.in |
3b9c0 | 20 74 68 65 20 70 72 65 73 65 6e 63 65 20 6f 66 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 | .the.presence.of.network.congest |
3b9e0 | 69 6f 6e 2e 00 45 74 68 65 72 6e 65 74 20 6f 70 74 69 6f 6e 73 00 45 76 65 6e 74 20 48 61 6e 64 | ion..Ethernet.options.Event.Hand |
3ba00 | 6c 65 72 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ler.Event.Handler.Configuration. |
3ba20 | 53 74 65 70 73 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 54 65 63 68 6e 6f 6c 6f 67 79 20 4f | Steps.Event.Handler.Technology.O |
3ba40 | 76 65 72 76 69 65 77 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 | verview.Event.handler.allows.you |
3ba60 | 20 74 6f 20 65 78 65 63 75 74 65 20 73 63 72 69 70 74 73 20 77 68 65 6e 20 61 20 73 74 72 69 6e | .to.execute.scripts.when.a.strin |
3ba80 | 67 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 20 72 65 67 65 78 20 6f 72 20 61 20 72 65 67 65 | g.that.matches.a.regex.or.a.rege |
3baa0 | 78 20 77 69 74 68 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 61 70 70 65 61 72 73 20 69 6e | x.with.a.service.name.appears.in |
3bac0 | 20 6a 6f 75 72 6e 61 6c 64 20 6c 6f 67 73 2e 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 76 61 72 | .journald.logs..You.can.pass.var |
3bae0 | 69 61 62 6c 65 73 2c 20 61 72 67 75 6d 65 6e 74 73 2c 20 61 6e 64 20 61 20 66 75 6c 6c 20 6d 61 | iables,.arguments,.and.a.full.ma |
3bb00 | 74 63 68 69 6e 67 20 73 74 72 69 6e 67 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 00 45 76 65 | tching.string.to.the.script..Eve |
3bb20 | 6e 74 20 68 61 6e 64 6c 65 72 20 73 63 72 69 70 74 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 | nt.handler.script.Event.handler. |
3bb40 | 74 68 61 74 20 6d 6f 6e 69 74 6f 72 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 69 6e 74 65 72 | that.monitors.the.state.of.inter |
3bb60 | 66 61 63 65 20 65 74 68 30 2e 00 45 76 65 72 79 20 4e 41 54 20 72 75 6c 65 20 68 61 73 20 61 20 | face.eth0..Every.NAT.rule.has.a. |
3bb80 | 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 | translation.command.defined..The |
3bba0 | 20 61 64 64 72 65 73 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 | .address.defined.for.the.transla |
3bbc0 | 74 69 6f 6e 20 69 73 20 74 68 65 20 61 64 64 72 65 73 73 20 75 73 65 64 20 77 68 65 6e 20 74 68 | tion.is.the.address.used.when.th |
3bbe0 | 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 | e.address.information.in.a.packe |
3bc00 | 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e 00 45 76 65 72 79 20 53 4e 41 54 36 36 20 72 75 6c 65 | t.is.replaced..Every.SNAT66.rule |
3bc20 | 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e | .has.a.translation.command.defin |
3bc40 | 65 64 2e 20 54 68 65 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 | ed..The.prefix.defined.for.the.t |
3bc60 | 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 70 72 65 66 69 78 20 75 73 65 64 20 77 68 | ranslation.is.the.prefix.used.wh |
3bc80 | 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 | en.the.address.information.in.a. |
3bca0 | 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e e3 80 81 00 45 76 65 72 79 20 53 53 48 | packet.is.replaced.....Every.SSH |
3bcc0 | 20 6b 65 79 20 63 6f 6d 65 73 20 69 6e 20 74 68 72 65 65 20 70 61 72 74 73 3a 00 45 76 65 72 79 | .key.comes.in.three.parts:.Every |
3bce0 | 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 | .SSH.public.key.portion.referenc |
3bd00 | 65 64 20 62 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 72 65 71 75 69 72 65 73 20 74 68 | ed.by.`<identifier>`.requires.th |
3bd20 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 60 3c 74 79 70 65 3e 60 20 | e.configuration.of.the.`<type>`. |
3bd40 | 6f 66 20 70 75 62 6c 69 63 2d 6b 65 79 20 75 73 65 64 2e 20 54 68 69 73 20 74 79 70 65 20 63 61 | of.public-key.used..This.type.ca |
3bd60 | 6e 20 62 65 20 61 6e 79 20 6f 66 3a 00 45 76 65 72 79 20 55 44 50 20 70 6f 72 74 20 77 68 69 63 | n.be.any.of:.Every.UDP.port.whic |
3bd80 | 68 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 20 72 65 71 75 69 72 65 73 20 6f 6e 65 20 75 | h.will.be.forward.requires.one.u |
3bda0 | 6e 69 71 75 65 20 49 44 2e 20 43 75 72 72 65 6e 74 6c 79 20 77 65 20 73 75 70 70 6f 72 74 20 39 | nique.ID..Currently.we.support.9 |
3bdc0 | 39 20 49 44 73 21 00 45 76 65 72 79 20 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e | 9.IDs!.Every.Virtual.Ethernet.in |
3bde0 | 74 65 72 66 61 63 65 73 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 45 74 68 | terfaces.behaves.like.a.real.Eth |
3be00 | 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 79 20 63 61 6e 20 68 61 76 65 20 49 | ernet.interface..They.can.have.I |
3be20 | 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 6f | Pv4/IPv6.addresses.configured,.o |
3be40 | 72 20 63 61 6e 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 73 20 62 79 20 44 48 43 50 2f | r.can.request.addresses.by.DHCP/ |
3be60 | 20 44 48 43 50 76 36 20 61 6e 64 20 61 72 65 20 61 73 73 6f 63 69 61 74 65 64 2f 6d 61 70 70 65 | .DHCPv6.and.are.associated/mappe |
3be80 | 64 20 77 69 74 68 20 61 20 72 65 61 6c 20 65 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 54 68 69 | d.with.a.real.ethernet.port..Thi |
3bea0 | 73 20 61 6c 73 6f 20 6d 61 6b 65 73 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 | s.also.makes.Pseudo-Ethernet.int |
3bec0 | 65 72 66 61 63 65 73 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 6f 72 20 74 65 73 74 69 6e 67 20 | erfaces.interesting.for.testing. |
3bee0 | 70 75 72 70 6f 73 65 73 2e 20 41 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 64 65 76 69 | purposes..A.Pseudo-Ethernet.devi |
3bf00 | 63 65 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 20 | ce.will.inherit.characteristics. |
3bf20 | 28 73 70 65 65 64 2c 20 64 75 70 6c 65 78 2c 20 2e 2e 2e 29 20 66 72 6f 6d 20 69 74 73 20 70 68 | (speed,.duplex,....).from.its.ph |
3bf40 | 79 73 69 63 61 6c 20 70 61 72 65 6e 74 20 28 74 68 65 20 73 6f 20 63 61 6c 6c 65 64 20 6c 69 6e | ysical.parent.(the.so.called.lin |
3bf60 | 6b 29 20 69 6e 74 65 72 66 61 63 65 2e 00 45 76 65 72 79 20 57 57 41 4e 20 63 6f 6e 6e 65 63 74 | k).interface..Every.WWAN.connect |
3bf80 | 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 6e 20 3a 61 62 62 72 3a 60 41 50 4e 20 28 41 63 63 65 | ion.requires.an.:abbr:`APN.(Acce |
3bfa0 | 73 73 20 50 6f 69 6e 74 20 4e 61 6d 65 29 60 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 62 79 | ss.Point.Name)`.which.is.used.by |
3bfc0 | 20 74 68 65 20 63 6c 69 65 6e 74 20 74 6f 20 64 69 61 6c 20 69 6e 74 6f 20 74 68 65 20 49 53 50 | .the.client.to.dial.into.the.ISP |
3bfe0 | 73 20 6e 65 74 77 6f 72 6b 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 | s.network..This.is.a.mandatory.p |
3c000 | 61 72 61 6d 65 74 65 72 2e 20 43 6f 6e 74 61 63 74 20 79 6f 75 72 20 53 65 72 76 69 63 65 20 50 | arameter..Contact.your.Service.P |
3c020 | 72 6f 76 69 64 65 72 20 66 6f 72 20 63 6f 72 72 65 63 74 20 41 50 4e 2e 00 45 76 65 72 79 20 63 | rovider.for.correct.APN..Every.c |
3c040 | 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 | onnection/remote-access.pool.we. |
3c060 | 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 | configure.also.needs.a.pool.wher |
3c080 | 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 | e.we.can.draw.our.client.IP.addr |
3c0a0 | 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 | esses.from..We.provide.one.IPv4. |
3c0c0 | 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 | and.IPv6.pool..Authorized.client |
3c0e0 | 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 | s.will.receive.an.IPv4.address.f |
3c100 | 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 31 32 38 2f 32 35 20 70 72 65 66 69 78 20 61 6e | rom.the.192.0.2.128/25.prefix.an |
3c120 | 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 32 30 30 31 3a | d.an.IPv6.address.from.the.2001: |
3c140 | 64 62 38 3a 32 30 30 30 3a 3a 2f 36 34 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 | db8:2000::/64.prefix..We.can.als |
3c160 | 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f 77 6e | o.send.some.DNS.nameservers.down |
3c180 | 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 63 6f | .to.our.clients.used.on.their.co |
3c1a0 | 6e 6e 65 63 74 69 6f 6e 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 | nnection..Every.connection/remot |
3c1c0 | 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 | e-access.pool.we.configure.also. |
3c1e0 | 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f | needs.a.pool.where.we.can.draw.o |
3c200 | 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 | ur.client.IP.addresses.from..We. |
3c220 | 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 | provide.one.IPv4.and.IPv6.pool.. |
3c240 | 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 | Authorized.clients.will.receive. |
3c260 | 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 66 69 67 75 | an.IPv4.address.from.the.configu |
3c280 | 72 65 64 20 49 50 76 34 20 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 | red.IPv4.prefix.and.an.IPv6.addr |
3c2a0 | 65 73 73 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e | ess.from.the.IPv6.prefix..We.can |
3c2c0 | 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 | .also.send.some.DNS.nameservers. |
3c2e0 | 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 | down.to.our.clients.used.on.thei |
3c300 | 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 00 45 78 61 6d 70 6c 65 20 43 6f | r.connection..Example.Example.Co |
3c320 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 45 78 61 6d 70 6c 65 20 49 50 76 36 20 6f 6e 6c 79 3a 00 45 | nfiguration.Example.IPv6.only:.E |
3c340 | 78 61 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 00 45 78 61 6d 70 6c 65 20 50 61 72 74 69 61 6c 20 43 | xample.Network.Example.Partial.C |
3c360 | 6f 6e 66 69 67 00 45 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 | onfig.Example.configuration.for. |
3c380 | 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 3a 00 45 78 61 6d 70 6c 65 20 66 6f | WireGuard.interfaces:.Example.fo |
3c3a0 | 72 20 63 68 61 6e 67 69 6e 67 20 72 61 74 65 2d 6c 69 6d 69 74 20 76 69 61 20 52 41 44 49 55 53 | r.changing.rate-limit.via.RADIUS |
3c3c0 | 20 43 6f 41 2e 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 | .CoA..Example.for.configuring.a. |
3c3e0 | 73 69 6d 70 6c 65 20 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 63 20 56 50 4e 20 66 6f 72 20 72 | simple.L2TP.over.IPsec.VPN.for.r |
3c400 | 65 6d 6f 74 65 20 61 63 63 65 73 73 20 28 77 6f 72 6b 73 20 77 69 74 68 20 6e 61 74 69 76 65 20 | emote.access.(works.with.native. |
3c420 | 57 69 6e 64 6f 77 73 20 61 6e 64 20 4d 61 63 20 56 50 4e 20 63 6c 69 65 6e 74 73 29 3a 00 45 78 | Windows.and.Mac.VPN.clients):.Ex |
3c440 | 61 6d 70 6c 65 20 6f 66 20 72 65 64 69 72 65 63 74 69 6f 6e 3a 00 45 78 61 6d 70 6c 65 20 73 79 | ample.of.redirection:.Example.sy |
3c460 | 6e 70 72 6f 78 79 00 45 78 61 6d 70 6c 65 2c 20 66 72 6f 6d 20 72 61 64 69 75 73 2d 73 65 72 76 | nproxy.Example,.from.radius-serv |
3c480 | 65 72 20 73 65 6e 64 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 63 | er.send.command.for.disconnect.c |
3c4a0 | 6c 69 65 6e 74 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 74 65 73 74 00 45 78 61 6d 70 6c 65 | lient.with.username.test.Example |
3c4c0 | 3a 00 45 78 61 6d 70 6c 65 3a 20 44 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 | :.Example:.Delegate.a./64.prefix |
3c4e0 | 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 38 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 | .to.interface.eth8.which.will.us |
3c500 | 65 20 61 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 | e.a.local.address.on.this.router |
3c520 | 20 6f 66 20 60 60 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 60 60 2c 20 61 73 20 74 68 65 20 61 | .of.``<prefix>::ffff``,.as.the.a |
3c540 | 64 64 72 65 73 73 20 36 35 35 33 34 20 77 69 6c 6c 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 | ddress.65534.will.correspond.to. |
3c560 | 60 60 66 66 66 66 60 60 20 69 6e 20 68 65 78 61 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e | ``ffff``.in.hexadecimal.notation |
3c580 | 2e 00 45 78 61 6d 70 6c 65 3a 20 46 6f 72 20 61 6e 20 7e 38 2c 30 30 30 20 68 6f 73 74 20 6e 65 | ..Example:.For.an.~8,000.host.ne |
3c5a0 | 74 77 6f 72 6b 20 61 20 73 6f 75 72 63 65 20 4e 41 54 20 70 6f 6f 6c 20 6f 66 20 33 32 20 49 50 | twork.a.source.NAT.pool.of.32.IP |
3c5c0 | 20 61 64 64 72 65 73 73 65 73 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 78 61 6d 70 | .addresses.is.recommended..Examp |
3c5e0 | 6c 65 3a 20 49 66 20 49 44 20 69 73 20 31 20 61 6e 64 20 74 68 65 20 63 6c 69 65 6e 74 20 69 73 | le:.If.ID.is.1.and.the.client.is |
3c600 | 20 64 65 6c 65 67 61 74 65 64 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 32 30 30 31 3a 64 | .delegated.an.IPv6.prefix.2001:d |
3c620 | 62 38 3a 66 66 66 66 3a 3a 2f 34 38 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 63 6f 6d 62 69 6e | b8:ffff::/48,.dhcp6c.will.combin |
3c640 | 65 20 74 68 65 20 74 77 6f 20 76 61 6c 75 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 49 | e.the.two.values.into.a.single.I |
3c660 | 50 76 36 20 70 72 65 66 69 78 2c 20 32 30 30 31 3a 64 62 38 3a 66 66 66 66 3a 31 3a 3a 2f 36 34 | Pv6.prefix,.2001:db8:ffff:1::/64 |
3c680 | 2c 20 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 70 72 65 66 69 78 20 | ,.and.will.configure.the.prefix. |
3c6a0 | 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 45 78 61 6d | on.the.specified.interface..Exam |
3c6c0 | 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 | ple:.Mirror.the.inbound.traffic. |
3c6e0 | 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c | of.`bond1`.port.to.`eth3`.Exampl |
3c700 | 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 | e:.Mirror.the.inbound.traffic.of |
3c720 | 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d | .`br1`.port.to.`eth3`.Example:.M |
3c740 | 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 | irror.the.inbound.traffic.of.`et |
3c760 | 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 | h1`.port.to.`eth3`.Example:.Mirr |
3c780 | 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 | or.the.outbound.traffic.of.`bond |
3c7a0 | 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f | 1`.port.to.`eth3`.Example:.Mirro |
3c7c0 | 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 | r.the.outbound.traffic.of.`br1`. |
3c7e0 | 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 | port.to.`eth3`.Example:.Mirror.t |
3c800 | 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f | he.outbound.traffic.of.`eth1`.po |
3c820 | 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 | rt.to.`eth3`.Example:.Set.`eth0` |
3c840 | 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 | .member.port.to.be.allowed.VLAN. |
3c860 | 34 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 | 4.Example:.Set.`eth0`.member.por |
3c880 | 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 36 2d 38 00 45 78 61 6d 70 6c 65 | t.to.be.allowed.VLAN.6-8.Example |
3c8a0 | 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 6e | :.Set.`eth0`.member.port.to.be.n |
3c8c0 | 61 74 69 76 65 20 56 4c 41 4e 20 32 00 45 78 61 6d 70 6c 65 3a 20 74 6f 20 62 65 20 61 70 70 65 | ative.VLAN.2.Example:.to.be.appe |
3c8e0 | 6e 64 65 64 20 69 73 20 73 65 74 20 74 6f 20 60 60 76 79 6f 73 2e 6e 65 74 60 60 20 61 6e 64 20 | nded.is.set.to.``vyos.net``.and. |
3c900 | 74 68 65 20 55 52 4c 20 72 65 63 65 69 76 65 64 20 69 73 20 60 60 77 77 77 2f 66 6f 6f 2e 68 74 | the.URL.received.is.``www/foo.ht |
3c920 | 6d 6c 60 60 2c 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 67 65 | ml``,.the.system.will.use.the.ge |
3c940 | 6e 65 72 61 74 65 64 2c 20 66 69 6e 61 6c 20 55 52 4c 20 6f 66 20 60 60 77 77 77 2e 76 79 6f 73 | nerated,.final.URL.of.``www.vyos |
3c960 | 2e 6e 65 74 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2e 00 45 78 61 6d 70 6c 65 73 00 45 78 61 6d 70 6c | .net/foo.html``..Examples.Exampl |
3c980 | 65 73 20 6f 66 20 70 6f 6c 69 63 69 65 73 20 75 73 61 67 65 3a 00 45 78 61 6d 70 6c 65 73 3a 00 | es.of.policies.usage:.Examples:. |
3c9a0 | 45 78 63 6c 75 64 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 56 52 52 50 | Exclude.IP.addresses.from.``VRRP |
3c9c0 | 20 70 61 63 6b 65 74 73 60 60 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 | .packets``..This.option.``exclud |
3c9e0 | 65 64 2d 61 64 64 72 65 73 73 60 60 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 | ed-address``.is.used.when.you.wa |
3ca00 | 6e 74 20 74 6f 20 73 65 74 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 | nt.to.set.IPv4.+.IPv6.addresses. |
3ca20 | 6f 6e 20 74 68 65 20 73 61 6d 65 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 72 | on.the.same.virtual.interface.or |
3ca40 | 20 77 68 65 6e 20 75 73 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 32 30 20 49 50 20 61 64 64 72 65 | .when.used.more.than.20.IP.addre |
3ca60 | 73 73 65 73 2e 00 45 78 63 6c 75 64 65 20 61 64 64 72 65 73 73 00 45 78 63 6c 75 64 65 20 74 72 | sses..Exclude.address.Exclude.tr |
3ca80 | 61 66 66 69 63 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 | affic.Exit.policy.on.match:.go.t |
3caa0 | 6f 20 6e 65 78 74 20 73 65 71 75 65 6e 63 65 20 6e 75 6d 62 65 72 2e 00 45 78 69 74 20 70 6f 6c | o.next.sequence.number..Exit.pol |
3cac0 | 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 72 75 6c 65 20 3c 31 2d 36 35 35 33 | icy.on.match:.go.to.rule.<1-6553 |
3cae0 | 35 3e 00 45 78 70 65 64 69 74 65 64 20 66 6f 72 77 61 72 64 69 6e 67 20 28 45 46 29 00 45 78 70 | 5>.Expedited.forwarding.(EF).Exp |
3cb00 | 6c 61 6e 61 74 69 6f 6e 00 45 78 70 6c 69 63 69 74 6c 79 20 64 65 63 6c 61 72 65 20 49 44 20 66 | lanation.Explicitly.declare.ID.f |
3cb20 | 6f 72 20 74 68 69 73 20 6d 69 6e 69 6f 6e 20 74 6f 20 75 73 65 20 28 64 65 66 61 75 6c 74 3a 20 | or.this.minion.to.use.(default:. |
3cb40 | 68 6f 73 74 6e 61 6d 65 29 00 45 78 74 65 72 6e 61 6c 20 44 48 43 50 76 36 20 73 65 72 76 65 72 | hostname).External.DHCPv6.server |
3cb60 | 20 69 73 20 61 74 20 32 30 30 31 3a 64 62 38 3a 3a 34 00 45 78 74 65 72 6e 61 6c 20 52 6f 75 74 | .is.at.2001:db8::4.External.Rout |
3cb80 | 65 20 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 00 45 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a | e.Summarisation.External.attack: |
3cba0 | 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 74 6f 77 | .an.attack.from.the.internet.tow |
3cbc0 | 61 72 64 73 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 69 73 20 69 64 65 6e 74 69 66 79 2e | ards.an.internal.IP.is.identify. |
3cbe0 | 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 | .In.this.case,.all.connections.t |
3cc00 | 6f 77 61 72 64 73 20 73 75 63 68 20 49 50 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 00 46 | owards.such.IP.will.be.blocked.F |
3cc20 | 51 2d 43 6f 44 65 6c 00 46 51 2d 43 6f 44 65 6c 20 66 69 67 68 74 73 20 62 75 66 66 65 72 62 6c | Q-CoDel.FQ-CoDel.fights.bufferbl |
3cc40 | 6f 61 74 20 61 6e 64 20 72 65 64 75 63 65 73 20 6c 61 74 65 6e 63 79 20 77 69 74 68 6f 75 74 20 | oat.and.reduces.latency.without. |
3cc60 | 74 68 65 20 6e 65 65 64 20 6f 66 20 63 6f 6d 70 6c 65 78 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | the.need.of.complex.configuratio |
3cc80 | 6e 73 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 74 68 65 20 6e 65 77 20 64 65 66 61 75 6c | ns..It.has.become.the.new.defaul |
3cca0 | 74 20 51 75 65 75 65 69 6e 67 20 44 69 73 63 69 70 6c 69 6e 65 20 66 6f 72 20 74 68 65 20 69 6e | t.Queueing.Discipline.for.the.in |
3ccc0 | 74 65 72 66 61 63 65 73 20 6f 66 20 73 6f 6d 65 20 47 4e 55 2f 4c 69 6e 75 78 20 64 69 73 74 72 | terfaces.of.some.GNU/Linux.distr |
3cce0 | 69 62 75 74 69 6f 6e 73 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 | ibutions..FQ-CoDel.is.based.on.a |
3cd00 | 20 6d 6f 64 69 66 69 65 64 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 28 44 | .modified.Deficit.Round.Robin.(D |
3cd20 | 52 52 5f 29 20 71 75 65 75 65 20 73 63 68 65 64 75 6c 65 72 20 77 69 74 68 20 74 68 65 20 43 6f | RR_).queue.scheduler.with.the.Co |
3cd40 | 44 65 6c 20 41 63 74 69 76 65 20 51 75 65 75 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 28 41 51 4d | Del.Active.Queue.Management.(AQM |
3cd60 | 29 20 61 6c 67 6f 72 69 74 68 6d 20 6f 70 65 72 61 74 69 6e 67 20 6f 6e 20 65 61 63 68 20 71 75 | ).algorithm.operating.on.each.qu |
3cd80 | 65 75 65 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 74 75 6e 65 64 20 74 6f 20 72 75 6e 20 6f 6b | eue..FQ-CoDel.is.tuned.to.run.ok |
3cda0 | 20 77 69 74 68 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 | .with.its.default.parameters.at. |
3cdc0 | 31 30 47 62 69 74 20 73 70 65 65 64 73 2e 20 49 74 20 6d 69 67 68 74 20 77 6f 72 6b 20 6f 6b 20 | 10Gbit.speeds..It.might.work.ok. |
3cde0 | 74 6f 6f 20 61 74 20 6f 74 68 65 72 20 73 70 65 65 64 73 20 77 69 74 68 6f 75 74 20 63 6f 6e 66 | too.at.other.speeds.without.conf |
3ce00 | 69 67 75 72 69 6e 67 20 61 6e 79 74 68 69 6e 67 2c 20 62 75 74 20 68 65 72 65 20 77 65 20 77 69 | iguring.anything,.but.here.we.wi |
3ce20 | 6c 6c 20 65 78 70 6c 61 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 77 68 65 6e 20 79 6f 75 20 6d | ll.explain.some.cases.when.you.m |
3ce40 | 69 67 68 74 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 69 74 73 20 70 61 72 61 6d 65 74 65 72 73 | ight.want.to.tune.its.parameters |
3ce60 | 2e 00 46 51 2d 43 6f 64 65 6c 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 | ..FQ-Codel.is.a.non-shaping.(wor |
3ce80 | 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c | k-conserving).policy,.so.it.will |
3cea0 | 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 | .only.be.useful.if.your.outgoing |
3cec0 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 | .interface.is.really.full..If.it |
3cee0 | 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 | .is.not,.VyOS.will.not.own.the.q |
3cf00 | 75 65 75 65 20 61 6e 64 20 46 51 2d 43 6f 64 65 6c 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 | ueue.and.FQ-Codel.will.have.no.e |
3cf20 | 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 | ffect..If.there.is.bandwidth.ava |
3cf40 | 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 | ilable.on.the.physical.link,.you |
3cf60 | 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 51 2d 43 6f 64 65 6c 20 69 6e 74 6f 20 61 20 63 6c 61 73 | .can.embed_.FQ-Codel.into.a.clas |
3cf80 | 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 | sful.shaping.policy.to.make.sure |
3cfa0 | 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 66 20 79 6f 75 20 61 72 65 20 6e | .it.owns.the.queue..If.you.are.n |
3cfc0 | 6f 74 20 73 75 72 65 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 79 6f 75 | ot.sure.if.you.need.to.embed.you |
3cfe0 | 72 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 53 68 61 70 65 72 2c | r.FQ-CoDel.policy.into.a.Shaper, |
3d000 | 20 64 6f 20 69 74 2e 00 46 52 52 00 46 52 52 20 6f 66 66 65 72 73 20 6f 6e 6c 79 20 70 61 72 74 | .do.it..FRR.FRR.offers.only.part |
3d020 | 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 72 6f 75 74 | ial.support.for.some.of.the.rout |
3d040 | 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 | ing.protocol.extensions.that.are |
3d060 | 20 75 73 65 64 20 77 69 74 68 20 4d 50 4c 53 2d 54 45 3b 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 | .used.with.MPLS-TE;.it.does.not. |
3d080 | 73 75 70 70 6f 72 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 52 53 56 50 2d 54 45 20 73 6f 6c 75 74 | support.a.complete.RSVP-TE.solut |
3d0a0 | 69 6f 6e 2e 00 46 52 52 20 73 75 70 70 6f 72 74 73 20 61 20 6e 65 77 20 77 61 79 20 6f 66 20 63 | ion..FRR.supports.a.new.way.of.c |
3d0c0 | 6f 6e 66 69 67 75 72 69 6e 67 20 56 4c 41 4e 2d 74 6f 2d 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 | onfiguring.VLAN-to-VNI.mappings. |
3d0e0 | 66 6f 72 20 45 56 50 4e 2d 56 58 4c 41 4e 2c 20 77 68 65 6e 20 77 6f 72 6b 69 6e 67 20 77 69 74 | for.EVPN-VXLAN,.when.working.wit |
3d100 | 68 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 49 6e 20 74 68 69 73 20 6e 65 77 20 | h.the.Linux.kernel..In.this.new. |
3d120 | 77 61 79 2c 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 61 20 56 4c 41 4e 20 74 6f 20 61 20 | way,.the.mapping.of.a.VLAN.to.a. |
3d140 | 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 | :abbr:`VNI.(VXLAN.Network.Identi |
3d160 | 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 20 69 73 20 | fier.(or.VXLAN.Segment.ID))`.is. |
3d180 | 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 56 | configured.against.a.container.V |
3d1a0 | 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 72 65 66 65 72 72 65 64 | XLAN.interface.which.is.referred |
3d1c0 | 20 74 6f 20 61 73 20 61 20 3a 61 62 62 72 3a 60 53 56 44 20 28 53 69 6e 67 6c 65 20 56 58 4c 41 | .to.as.a.:abbr:`SVD.(Single.VXLA |
3d1e0 | 4e 20 64 65 76 69 63 65 29 60 2e 00 46 54 50 20 64 61 65 6d 6f 6e 00 46 61 63 69 6c 69 74 69 65 | N.device)`..FTP.daemon.Facilitie |
3d200 | 73 00 46 61 63 69 6c 69 74 69 65 73 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 74 6f 20 | s.Facilities.can.be.adjusted.to. |
3d220 | 6d 65 65 74 20 74 68 65 20 6e 65 65 64 73 20 6f 66 20 74 68 65 20 75 73 65 72 3a 00 46 61 63 69 | meet.the.needs.of.the.user:.Faci |
3d240 | 6c 69 74 79 20 43 6f 64 65 00 46 61 69 6c 6f 76 65 72 00 46 61 69 6c 6f 76 65 72 20 52 6f 75 74 | lity.Code.Failover.Failover.Rout |
3d260 | 65 73 00 46 61 69 6c 6f 76 65 72 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 75 73 65 20 66 6f 72 | es.Failover.mechanism.to.use.for |
3d280 | 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 46 61 69 6c 6f 76 65 72 20 72 6f 75 74 65 73 | .conntrack-sync..Failover.routes |
3d2a0 | 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c | .are.manually.configured.routes, |
3d2c0 | 20 62 75 74 20 74 68 65 79 20 69 6e 73 74 61 6c 6c 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 | .but.they.install.to.the.routing |
3d2e0 | 20 74 61 62 6c 65 20 69 66 20 74 68 65 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 74 61 72 67 65 | .table.if.the.health-check.targe |
3d300 | 74 20 69 73 20 61 6c 69 76 65 2e 20 49 66 20 74 68 65 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 | t.is.alive..If.the.target.is.not |
3d320 | 20 61 6c 69 76 65 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d | .alive.the.route.is.removed.from |
3d340 | 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 6e 74 69 6c 20 74 68 65 20 74 61 72 | .the.routing.table.until.the.tar |
3d360 | 67 65 74 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 46 61 69 72 20 51 75 65 75 | get.will.be.available..Fair.Queu |
3d380 | 65 00 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 | e.Fair.Queue.is.a.non-shaping.(w |
3d3a0 | 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 | ork-conserving).policy,.so.it.wi |
3d3c0 | 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 | ll.only.be.useful.if.your.outgoi |
3d3e0 | 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 | ng.interface.is.really.full..If. |
3d400 | 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 | it.is.not,.VyOS.will.not.own.the |
3d420 | 20 71 75 65 75 65 20 61 6e 64 20 46 61 69 72 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 | .queue.and.Fair.Queue.will.have. |
3d440 | 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 | no.effect..If.there.is.bandwidth |
3d460 | 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c | .available.on.the.physical.link, |
3d480 | 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 61 69 72 2d 51 75 65 75 65 20 69 6e 74 6f 20 | .you.can.embed_.Fair-Queue.into. |
3d4a0 | 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b | a.classful.shaping.policy.to.mak |
3d4c0 | 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 00 46 61 69 72 20 51 | e.sure.it.owns.the.queue..Fair.Q |
3d4e0 | 75 65 75 65 20 69 73 20 61 20 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 20 73 63 68 65 64 75 | ueue.is.a.work-conserving.schedu |
3d500 | 6c 65 72 20 77 68 69 63 68 20 73 63 68 65 64 75 6c 65 73 20 74 68 65 20 74 72 61 6e 73 6d 69 73 | ler.which.schedules.the.transmis |
3d520 | 73 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 66 6c 6f 77 73 2c 20 | sion.of.packets.based.on.flows,. |
3d540 | 74 68 61 74 20 69 73 2c 20 69 74 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 64 69 73 | that.is,.it.balances.traffic.dis |
3d560 | 74 72 69 62 75 74 69 6e 67 20 69 74 20 74 68 72 6f 75 67 68 20 64 69 66 66 65 72 65 6e 74 20 73 | tributing.it.through.different.s |
3d580 | 75 62 2d 71 75 65 75 65 73 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 6e 73 75 72 65 20 66 61 69 | ub-queues.in.order.to.ensure.fai |
3d5a0 | 72 6e 65 73 73 20 73 6f 20 74 68 61 74 20 65 61 63 68 20 66 6c 6f 77 20 69 73 20 61 62 6c 65 20 | rness.so.that.each.flow.is.able. |
3d5c0 | 74 6f 20 73 65 6e 64 20 64 61 74 61 20 69 6e 20 74 75 72 6e 2c 20 70 72 65 76 65 6e 74 69 6e 67 | to.send.data.in.turn,.preventing |
3d5e0 | 20 61 6e 79 20 73 69 6e 67 6c 65 20 6f 6e 65 20 66 72 6f 6d 20 64 72 6f 77 6e 69 6e 67 20 6f 75 | .any.single.one.from.drowning.ou |
3d600 | 74 20 74 68 65 20 72 65 73 74 2e 00 46 61 73 74 4e 65 74 4d 6f 6e 00 46 61 73 74 4e 65 74 4d 6f | t.the.rest..FastNetMon.FastNetMo |
3d620 | 6e 20 69 73 20 61 20 68 69 67 68 2d 70 65 72 66 6f 72 6d 61 6e 63 65 20 44 44 6f 53 20 64 65 74 | n.is.a.high-performance.DDoS.det |
3d640 | 65 63 74 6f 72 2f 73 65 6e 73 6f 72 20 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 6d 75 6c | ector/sensor.built.on.top.of.mul |
3d660 | 74 69 70 6c 65 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 65 6e 67 69 6e 65 73 3a 20 4e 65 | tiple.packet.capture.engines:.Ne |
3d680 | 74 46 6c 6f 77 2c 20 49 50 46 49 58 2c 20 73 46 6c 6f 77 2c 20 41 46 5f 50 41 43 4b 45 54 20 28 | tFlow,.IPFIX,.sFlow,.AF_PACKET.( |
3d6a0 | 70 6f 72 74 20 6d 69 72 72 6f 72 29 2e 20 49 74 20 63 61 6e 20 64 65 74 65 63 74 20 68 6f 73 74 | port.mirror)..It.can.detect.host |
3d6c0 | 73 20 69 6e 20 74 68 65 20 64 65 70 6c 6f 79 65 64 20 6e 65 74 77 6f 72 6b 20 73 65 6e 64 69 6e | s.in.the.deployed.network.sendin |
3d6e0 | 67 20 6f 72 20 72 65 63 65 69 76 69 6e 67 20 6c 61 72 67 65 20 76 6f 6c 75 6d 65 73 20 6f 66 20 | g.or.receiving.large.volumes.of. |
3d700 | 74 72 61 66 66 69 63 2c 20 70 61 63 6b 65 74 73 2f 62 79 74 65 73 2f 66 6c 6f 77 73 20 70 65 72 | traffic,.packets/bytes/flows.per |
3d720 | 20 73 65 63 6f 6e 64 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 20 63 6f 6e 66 69 67 75 72 61 62 | .second.and.perform.a.configurab |
3d740 | 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 61 74 20 65 76 65 6e 74 2c 20 | le.action.to.handle.that.event,. |
3d760 | 73 75 63 68 20 61 73 20 63 61 6c 6c 69 6e 67 20 61 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 2e | such.as.calling.a.custom.script. |
3d780 | 00 46 65 61 74 75 72 65 73 20 6f 66 20 74 68 65 20 43 75 72 72 65 6e 74 20 49 6d 70 6c 65 6d 65 | .Features.of.the.Current.Impleme |
3d7a0 | 6e 74 61 74 69 6f 6e 00 46 69 65 6c 64 00 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | ntation.Field.File.identified.by |
3d7c0 | 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 54 53 49 | .`<filename>`.containing.the.TSI |
3d7e0 | 47 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 66 6f 72 20 52 46 43 32 31 33 36 | G.authentication.key.for.RFC2136 |
3d800 | 20 6e 73 75 70 64 61 74 65 20 6f 6e 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 | .nsupdate.on.remote.DNS.server.. |
3d820 | 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 66 69 6c 65 3e 60 20 63 | File.identified.by.`<keyfile>`.c |
3d840 | 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 73 65 63 72 65 74 20 52 4e 44 43 20 6b 65 79 20 73 68 | ontaining.the.secret.RNDC.key.sh |
3d860 | 61 72 65 64 20 77 69 74 68 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c | ared.with.remote.DNS.server..Fil |
3d880 | 74 65 72 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 | ter.Type-3.summary-LSAs.announce |
3d8a0 | 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d | d.to.other.areas.originated.from |
3d8c0 | 20 69 6e 74 72 61 2d 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 | .intra-.area.paths.from.specifie |
3d8e0 | 64 20 61 72 65 61 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 | d.area..This.command.makes.sense |
3d900 | 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 46 69 6c 74 65 72 20 74 72 61 66 66 69 63 20 62 61 73 | .in.ABR.only..Filter.traffic.bas |
3d920 | 65 64 20 6f 6e 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | ed.on.source/destination.address |
3d940 | 2e 00 46 69 6c 74 65 72 2d 49 64 3d 32 30 30 30 2f 33 30 30 30 20 28 6d 65 61 6e 73 20 32 30 30 | ..Filter-Id=2000/3000.(means.200 |
3d960 | 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 61 6e 64 20 33 30 30 30 4b | 0Kbit.down-stream.rate.and.3000K |
3d980 | 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 00 46 69 6c 74 65 72 2d 49 64 3d 35 30 | bit.up-stream.rate).Filter-Id=50 |
3d9a0 | 30 30 2f 34 30 30 30 20 28 6d 65 61 6e 73 20 35 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 | 00/4000.(means.5000Kbit.down-str |
3d9c0 | 65 61 6d 20 72 61 74 65 20 61 6e 64 20 34 30 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 | eam.rate.and.4000Kbit.up-stream. |
3d9e0 | 72 61 74 65 29 20 49 66 20 61 74 74 72 69 62 75 74 65 20 46 69 6c 74 65 72 2d 49 64 20 72 65 64 | rate).If.attribute.Filter-Id.red |
3da00 | 65 66 69 6e 65 64 2c 20 72 65 70 6c 61 63 65 20 69 74 20 69 6e 20 52 41 44 49 55 53 20 43 6f 41 | efined,.replace.it.in.RADIUS.CoA |
3da20 | 20 72 65 71 75 65 73 74 2e 00 46 69 6c 74 65 72 69 6e 67 00 46 69 6c 74 65 72 69 6e 67 20 69 73 | .request..Filtering.Filtering.is |
3da40 | 20 75 73 65 64 20 66 6f 72 20 62 6f 74 68 20 69 6e 70 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 | .used.for.both.input.and.output. |
3da60 | 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4f 6e 63 65 | of.the.routing.information..Once |
3da80 | 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 64 65 66 69 6e 65 64 2c 20 69 74 20 63 61 6e 20 62 65 | .filtering.is.defined,.it.can.be |
3daa0 | 20 61 70 70 6c 69 65 64 20 69 6e 20 61 6e 79 20 64 69 72 65 63 74 69 6f 6e 2e 20 56 79 4f 53 20 | .applied.in.any.direction..VyOS. |
3dac0 | 6d 61 6b 65 73 20 66 69 6c 74 65 72 69 6e 67 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 61 | makes.filtering.possible.using.a |
3dae0 | 63 6c 73 20 61 6e 64 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 00 46 69 6e 61 6c 6c 79 2c 20 74 | cls.and.prefix.lists..Finally,.t |
3db00 | 6f 20 61 70 70 6c 79 20 74 68 65 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 74 6f 20 69 6e 67 72 | o.apply.the.policy.route.to.ingr |
3db20 | 65 73 73 20 74 72 61 66 66 69 63 20 6f 6e 20 6f 75 72 20 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 | ess.traffic.on.our.LAN.interface |
3db40 | 2c 20 77 65 20 75 73 65 3a 00 46 69 72 65 77 61 6c 6c 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 | ,.we.use:.Firewall.Firewall.-.IP |
3db60 | 76 34 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 36 20 52 75 6c 65 73 00 46 | v4.Rules.Firewall.-.IPv6.Rules.F |
3db80 | 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 43 | irewall.Configuration.Firewall.C |
3dba0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 28 44 65 70 72 65 63 61 74 65 64 29 00 46 69 72 65 77 61 | onfiguration.(Deprecated).Firewa |
3dbc0 | 6c 6c 20 44 65 73 63 72 69 70 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 45 78 63 65 70 74 69 6f | ll.Description.Firewall.Exceptio |
3dbe0 | 6e 73 00 46 69 72 65 77 61 6c 6c 20 4c 6f 67 73 00 46 69 72 65 77 61 6c 6c 20 52 75 6c 65 73 00 | ns.Firewall.Logs.Firewall.Rules. |
3dc00 | 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 | Firewall.groups.Firewall.groups. |
3dc20 | 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 | represent.collections.of.IP.addr |
3dc40 | 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 | esses,.networks,.ports,.mac.addr |
3dc60 | 65 73 73 65 73 20 6f 72 20 64 6f 6d 61 69 6e 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 | esses.or.domains..Once.created,. |
3dc80 | 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 | a.group.can.be.referenced.by.fir |
3dca0 | 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 | ewall,.nat.and.policy.route.rule |
3dcc0 | 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 | s.as.either.a.source.or.destinat |
3dce0 | 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 4d 65 6d 62 65 72 73 20 63 61 6e 20 62 65 20 61 64 64 65 | ion.matcher..Members.can.be.adde |
3dd00 | 64 20 6f 72 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 61 20 67 72 6f 75 70 20 77 69 74 68 6f 75 | d.or.removed.from.a.group.withou |
3dd20 | 74 20 63 68 61 6e 67 65 73 20 74 6f 2c 20 6f 72 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6c | t.changes.to,.or.the.need.to.rel |
3dd40 | 6f 61 64 2c 20 69 6e 64 69 76 69 64 75 61 6c 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 00 | oad,.individual.firewall.rules.. |
3dd60 | 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 | Firewall.groups.represent.collec |
3dd80 | 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c | tions.of.IP.addresses,.networks, |
3dda0 | 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f | .ports,.mac.addresses,.domains.o |
3ddc0 | 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 | r.interfaces..Once.created,.a.gr |
3dde0 | 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c | oup.can.be.referenced.by.firewal |
3de00 | 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 | l,.nat.and.policy.route.rules.as |
3de20 | 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | .either.a.source.or.destination. |
3de40 | 6d 61 74 63 68 65 72 2c 20 61 6e 64 20 61 73 20 69 6e 62 70 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 | matcher,.and.as.inbpund/outbound |
3de60 | 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e | .in.the.case.of.interface.group. |
3de80 | 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 | .Firewall.groups.represent.colle |
3dea0 | 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 | ctions.of.IP.addresses,.networks |
3dec0 | 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 | ,.ports,.mac.addresses,.domains. |
3dee0 | 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 | or.interfaces..Once.created,.a.g |
3df00 | 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 | roup.can.be.referenced.by.firewa |
3df20 | 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 | ll,.nat.and.policy.route.rules.a |
3df40 | 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e | s.either.a.source.or.destination |
3df60 | 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 2f 6f 72 20 61 73 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 | .matcher,.and/or.as.inbound/outb |
3df80 | 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 | ound.in.the.case.of.interface.gr |
3dfa0 | 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2e 20 49 74 20 70 6f 73 73 69 62 6c 65 20 | oup..Firewall.mark..It.possible. |
3dfc0 | 74 6f 20 6c 6f 61 64 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f | to.loadbalancing.traffic.based.o |
3dfe0 | 6e 20 60 60 66 77 6d 61 72 6b 60 60 20 76 61 6c 75 65 00 46 69 72 65 77 61 6c 6c 20 70 6f 6c 69 | n.``fwmark``.value.Firewall.poli |
3e000 | 63 79 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 74 75 | cy.can.also.be.applied.to.the.tu |
3e020 | 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 60 6c 6f 63 61 6c 60 2c 20 60 69 6e 60 | nnel.interface.for.`local`,.`in` |
3e040 | 2c 20 61 6e 64 20 60 6f 75 74 60 20 64 69 72 65 63 74 69 6f 6e 73 20 61 6e 64 20 66 75 6e 63 74 | ,.and.`out`.directions.and.funct |
3e060 | 69 6f 6e 73 20 69 64 65 6e 74 69 63 61 6c 6c 79 20 74 6f 20 65 74 68 65 72 6e 65 74 20 69 6e 74 | ions.identically.to.ethernet.int |
3e080 | 65 72 66 61 63 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 72 65 20 77 72 69 74 | erfaces..Firewall.rules.are.writ |
3e0a0 | 74 65 6e 20 61 73 20 6e 6f 72 6d 61 6c 2c 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 6e 61 | ten.as.normal,.using.the.interna |
3e0c0 | 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 6f 75 | l.IP.address.as.the.source.of.ou |
3e0e0 | 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 61 6e 64 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | tbound.rules.and.the.destination |
3e100 | 20 6f 66 20 69 6e 62 6f 75 6e 64 20 72 75 6c 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 | .of.inbound.rules..Firewall.rule |
3e120 | 73 20 66 6f 72 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 46 69 72 65 77 61 6c 6c 2d 4c | s.for.Destination.NAT.Firewall-L |
3e140 | 65 67 61 63 79 00 46 69 72 6d 77 61 72 65 20 55 70 64 61 74 65 00 46 69 72 73 74 20 68 6f 70 20 | egacy.Firmware.Update.First.hop. |
3e160 | 69 6e 74 65 72 66 61 63 65 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2e 00 46 | interface.of.a.route.to.match..F |
3e180 | 69 72 73 74 20 6f 66 20 61 6c 6c 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 42 | irst.of.all.you.must.configure.B |
3e1a0 | 47 50 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 | GP.router.with.the.:abbr:`ASN.(A |
3e1c0 | 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 65 20 41 | utonomous.System.Number)`..The.A |
3e1e0 | 53 20 6e 75 6d 62 65 72 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 74 68 | S.number.is.an.identifier.for.th |
3e200 | 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 42 47 50 20 70 72 6f | e.autonomous.system..The.BGP.pro |
3e220 | 74 6f 63 6f 6c 20 75 73 65 73 20 74 68 65 20 41 53 20 6e 75 6d 62 65 72 20 66 6f 72 20 64 65 74 | tocol.uses.the.AS.number.for.det |
3e240 | 65 63 74 69 6e 67 20 77 68 65 74 68 65 72 20 74 68 65 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f | ecting.whether.the.BGP.connectio |
3e260 | 6e 20 69 73 20 69 6e 74 65 72 6e 61 6c 20 6f 72 20 65 78 74 65 72 6e 61 6c 2e 20 56 79 4f 53 20 | n.is.internal.or.external..VyOS. |
3e280 | 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 | does.not.have.a.special.command. |
3e2a0 | 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 47 | to.start.the.BGP.process..The.BG |
3e2c0 | 50 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 | P.process.starts.when.the.first. |
3e2e0 | 6e 65 69 67 68 62 6f 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 46 69 72 73 74 20 6f 66 | neighbor.is.configured..First.of |
3e300 | 20 61 6c 6c 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 43 41 20 72 6f 6f | .all,.we.need.to.create.a.CA.roo |
3e320 | 74 20 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 | t.certificate.and.server.certifi |
3e340 | 63 61 74 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 2e 00 46 69 72 73 74 20 73 | cate.on.the.server.side..First.s |
3e360 | 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 66 | cenario:.apply.destination.NAT.f |
3e380 | 6f 72 20 61 6c 6c 20 48 54 54 50 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 74 68 72 6f | or.all.HTTP.traffic.comming.thro |
3e3a0 | 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 61 6e 64 20 75 73 65 72 20 34 20 62 | ugh.interface.eth0,.and.user.4.b |
3e3c0 | 61 63 6b 65 6e 64 73 2e 20 46 69 72 73 74 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 72 65 | ackends..First.backend.should.re |
3e3e0 | 63 65 69 76 65 64 20 33 30 25 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 2c 20 73 65 63 6f 6e | ceived.30%.of.the.request,.secon |
3e400 | 64 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 67 65 74 20 32 30 25 2c 20 74 68 69 72 64 20 | d.backend.should.get.20%,.third. |
3e420 | 31 35 25 20 61 6e 64 20 74 68 65 20 66 6f 75 72 74 68 20 33 35 25 20 57 65 20 77 69 6c 6c 20 75 | 15%.and.the.fourth.35%.We.will.u |
3e440 | 73 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 | se.source.and.destination.addres |
3e460 | 73 20 66 6f 72 20 68 61 73 68 20 67 65 6e 65 72 61 74 69 6f 6e 2e 00 46 69 72 73 74 20 73 74 65 | s.for.hash.generation..First.ste |
3e480 | 70 73 00 46 69 72 73 74 20 74 68 65 20 4f 54 50 20 6b 65 79 73 20 6d 75 73 74 20 62 65 20 67 65 | ps.First.the.OTP.keys.must.be.ge |
3e4a0 | 6e 65 72 61 74 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 75 73 65 72 20 61 6e 64 | nerated.and.sent.to.the.user.and |
3e4c0 | 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 46 69 72 73 74 20 77 65 20 | .to.the.configuration:.First.we. |
3e4e0 | 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 62 61 73 69 63 20 73 65 74 74 69 6e | need.to.specify.the.basic.settin |
3e500 | 67 73 2e 20 31 31 39 34 2f 55 44 50 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 2e 20 54 68 65 | gs..1194/UDP.is.the.default..The |
3e520 | 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 6f 70 74 69 6f 6e 20 69 73 | .``persistent-tunnel``.option.is |
3e540 | 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2c 20 69 74 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 54 55 | .recommended,.it.prevents.the.TU |
3e560 | 4e 2f 54 41 50 20 64 65 76 69 63 65 20 66 72 6f 6d 20 63 6c 6f 73 69 6e 67 20 6f 6e 20 63 6f 6e | N/TAP.device.from.closing.on.con |
3e580 | 6e 65 63 74 69 6f 6e 20 72 65 73 65 74 73 20 6f 72 20 64 61 65 6d 6f 6e 20 72 65 6c 6f 61 64 73 | nection.resets.or.daemon.reloads |
3e5a0 | 2e 00 46 69 72 73 74 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 | ..First.you.will.need.to.deploy. |
3e5c0 | 61 6e 20 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 20 66 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 | an.RPKI.validator.for.your.route |
3e5e0 | 72 73 20 74 6f 20 75 73 65 2e 20 54 68 65 20 52 49 50 45 20 4e 43 43 20 68 65 6c 70 66 75 6c 6c | rs.to.use..The.RIPE.NCC.helpfull |
3e600 | 79 20 70 72 6f 76 69 64 65 20 60 73 6f 6d 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 60 5f 20 74 | y.provide.`some.instructions`_.t |
3e620 | 6f 20 67 65 74 20 79 6f 75 20 73 74 61 72 74 65 64 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 64 | o.get.you.started.with.several.d |
3e640 | 69 66 66 65 72 65 6e 74 20 6f 70 74 69 6f 6e 73 2e 20 20 4f 6e 63 65 20 79 6f 75 72 20 73 65 72 | ifferent.options...Once.your.ser |
3e660 | 76 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 76 61 6c | ver.is.running.you.can.start.val |
3e680 | 69 64 61 74 69 6e 67 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 46 69 72 73 74 2c 20 6f 6e | idating.announcements..First,.on |
3e6a0 | 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 | .both.routers.run.the.operationa |
3e6c0 | 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 | l.command."generate.pki.key-pair |
3e6e0 | 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 3e 3e 22 2e 20 59 6f 75 20 6d | .install.<key-pair.nam>>"..You.m |
3e700 | 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 | ay.choose.different.length.than. |
3e720 | 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 | 2048.of.course..First,.on.both.r |
3e740 | 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 | outers.run.the.operational.comma |
3e760 | 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c | nd."generate.pki.key-pair.instal |
3e780 | 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 65 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f | l.<key-pair.name>"..You.may.choo |
3e7a0 | 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 | se.different.length.than.2048.of |
3e7c0 | 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 79 73 74 65 | .course..First,.one.of.the.syste |
3e7e0 | 6d 73 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 6b 65 79 20 75 73 69 6e 67 20 74 68 65 20 3a 72 | ms.generate.the.key.using.the.:r |
3e800 | 65 66 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d | ef:`generate.pki.openvpn.shared- |
3e820 | 73 65 63 72 65 74 3c 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 | secret<configuration/pki/index:p |
3e840 | 6b 69 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 4f 6e 63 65 20 67 65 6e 65 72 61 74 65 64 2c 20 79 6f | ki>`.command..Once.generated,.yo |
3e860 | 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 | u.will.need.to.install.this.key. |
3e880 | 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2c 20 74 68 65 6e 20 63 6f 70 79 20 61 | on.the.local.system,.then.copy.a |
3e8a0 | 6e 64 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 | nd.install.this.key.to.the.remot |
3e8c0 | 65 20 72 6f 75 74 65 72 2e 00 46 69 72 73 74 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e | e.router..First,.you.need.to.gen |
3e8e0 | 65 72 61 74 65 20 61 20 6b 65 79 20 62 79 20 72 75 6e 6e 69 6e 67 20 60 60 72 75 6e 20 67 65 6e | erate.a.key.by.running.``run.gen |
3e900 | 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 | erate.pki.openvpn.shared-secret. |
3e920 | 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 | install.<name>``.from.configurat |
3e940 | 69 6f 6e 20 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6e 61 6d 65 2c 20 | ion.mode..You.can.use.any.name,. |
3e960 | 77 65 20 77 69 6c 6c 20 75 73 65 20 60 60 73 32 73 60 60 2e 00 46 6c 61 73 68 00 46 6c 61 73 68 | we.will.use.``s2s``..Flash.Flash |
3e980 | 20 4f 76 65 72 72 69 64 65 00 46 6c 6f 77 20 41 63 63 6f 75 6e 74 69 6e 67 00 46 6c 6f 77 20 45 | .Override.Flow.Accounting.Flow.E |
3e9a0 | 78 70 6f 72 74 00 46 6c 6f 77 20 61 6e 64 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 | xport.Flow.and.packet-based.bala |
3e9c0 | 6e 63 69 6e 67 00 46 6c 6f 77 73 20 63 61 6e 20 62 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 | ncing.Flows.can.be.exported.via. |
3e9e0 | 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 4e 65 74 46 6c 6f 77 | two.different.protocols:.NetFlow |
3ea00 | 20 28 76 65 72 73 69 6f 6e 73 20 35 2c 20 39 20 61 6e 64 20 31 30 2f 49 50 46 49 58 29 20 61 6e | .(versions.5,.9.and.10/IPFIX).an |
3ea20 | 64 20 73 46 6c 6f 77 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 79 6f 75 20 6d 61 79 20 73 | d.sFlow..Additionally,.you.may.s |
3ea40 | 61 76 65 20 66 6c 6f 77 73 20 74 6f 20 61 6e 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 | ave.flows.to.an.in-memory.table. |
3ea60 | 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 20 61 20 72 6f 75 74 65 72 2e 00 46 6c 6f 77 74 61 62 6c | internally.in.a.router..Flowtabl |
3ea80 | 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 6f 77 74 61 62 6c 65 73 20 20 61 6c 6c 6f | e.Configuration.Flowtables..allo |
3eaa0 | 77 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 61 20 66 61 73 74 70 61 74 68 20 74 68 72 6f | ws.you.to.define.a.fastpath.thro |
3eac0 | 75 67 68 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 64 61 74 61 70 61 74 68 2e 20 54 68 65 20 | ugh.the.flowtable.datapath..The. |
3eae0 | 66 6c 6f 77 74 61 62 6c 65 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 | flowtable.supports.for.the.layer |
3eb00 | 20 33 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 6e 64 20 74 68 65 20 6c 61 79 65 72 20 34 | .3.IPv4.and.IPv6.and.the.layer.4 |
3eb20 | 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 46 6c 6f 77 74 61 62 6c | .TCP.and.UDP.protocols..Flowtabl |
3eb40 | 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 75 73 68 69 | es.Firewall.Configuration.Flushi |
3eb60 | 6e 67 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 77 69 6c 6c 20 63 61 75 73 65 20 | ng.the.session.table.will.cause. |
3eb80 | 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 66 61 6c 6c 20 62 61 63 6b 20 66 | other.connections.to.fall.back.f |
3eba0 | 72 6f 6d 20 66 6c 6f 77 2d 62 61 73 65 64 20 74 6f 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 | rom.flow-based.to.packet-based.b |
3ebc0 | 61 6c 61 6e 63 69 6e 67 20 75 6e 74 69 6c 20 65 61 63 68 20 66 6c 6f 77 20 69 73 20 72 65 65 73 | alancing.until.each.flow.is.rees |
3ebe0 | 74 61 62 6c 69 73 68 65 64 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 20 64 79 6e 61 6d 69 | tablished..Follow.the.SSH.dynami |
3ec00 | 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 | c-protection.log..Follow.the.SSH |
3ec20 | 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 | .server.log..Follow.the.instruct |
3ec40 | 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 43 41 20 63 65 72 74 20 28 69 6e 20 63 6f 6e | ions.to.generate.CA.cert.(in.con |
3ec60 | 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 | figuration.mode):.Follow.the.ins |
3ec80 | 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 73 65 72 76 65 72 20 63 65 72 | tructions.to.generate.server.cer |
3eca0 | 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f | t.(in.configuration.mode):.Follo |
3ecc0 | 77 20 74 68 65 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 | w.the.logs.for.mDNS.repeater.ser |
3ece0 | 76 69 63 65 2e 00 46 6f 72 20 3a 72 65 66 3a 60 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 2d 6e 61 | vice..For.:ref:`bidirectional-na |
3ed00 | 74 60 20 61 20 72 75 6c 65 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d | t`.a.rule.for.both.:ref:`source- |
3ed20 | 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 | nat`.and.:ref:`destination-nat`. |
3ed40 | 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 64 | needs.to.be.created..For.:ref:`d |
3ed60 | 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 | estination-nat`.rules.the.packet |
3ed80 | 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 | s.destination.address.will.be.re |
3eda0 | 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 | placed.by.the.specified.address. |
3edc0 | 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d | in.the.`translation.address`.com |
3ede0 | 6d 61 6e 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 | mand..For.:ref:`source-nat`.rule |
3ee00 | 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 77 69 6c | s.the.packets.source.address.wil |
3ee20 | 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 61 64 64 72 65 73 73 20 73 | l.be.replaced.with.the.address.s |
3ee40 | 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d | pecified.in.the.translation.comm |
3ee60 | 61 6e 64 2e 20 41 20 70 6f 72 74 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 61 6c 73 6f | and..A.port.translation.can.also |
3ee80 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 | .be.specified.and.is.part.of.the |
3eea0 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 6f 72 20 45 6e 63 72 79 70 | .translation.address..For.Encryp |
3eec0 | 74 69 6f 6e 3a 00 46 6f 72 20 48 61 73 68 69 6e 67 3a 00 46 6f 72 20 49 53 2d 49 53 20 74 6f 70 | tion:.For.Hashing:.For.IS-IS.top |
3eee0 | 20 6f 70 65 72 61 74 65 20 63 6f 72 72 65 63 74 6c 79 2c 20 6f 6e 65 20 6d 75 73 74 20 64 6f 20 | .operate.correctly,.one.must.do. |
3ef00 | 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 61 20 52 6f 75 74 65 72 20 49 44 20 69 6e | the.equivalent.of.a.Router.ID.in |
3ef20 | 20 43 4c 4e 53 2e 20 54 68 69 73 20 52 6f 75 74 65 72 20 49 44 20 69 73 20 63 61 6c 6c 65 64 20 | .CLNS..This.Router.ID.is.called. |
3ef40 | 74 68 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 | the.:abbr:`NET.(Network.Entity.T |
3ef60 | 69 74 6c 65 29 60 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 66 6f 72 20 | itle)`..This.must.be.unique.for. |
3ef80 | 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 74 68 61 74 20 69 73 20 6f 70 | each.and.every.router.that.is.op |
3efa0 | 65 72 61 74 69 6e 67 20 69 6e 20 49 53 2d 49 53 2e 20 49 74 20 61 6c 73 6f 20 6d 75 73 74 20 6e | erating.in.IS-IS..It.also.must.n |
3efc0 | 6f 74 20 62 65 20 64 75 70 6c 69 63 61 74 65 64 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 73 | ot.be.duplicated.otherwise.the.s |
3efe0 | 61 6d 65 20 69 73 73 75 65 73 20 74 68 61 74 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 4f 53 50 | ame.issues.that.occur.within.OSP |
3f000 | 46 20 77 69 6c 6c 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 49 53 2d 49 53 20 77 68 65 6e 20 69 | F.will.occur.within.IS-IS.when.i |
3f020 | 74 20 63 6f 6d 65 73 20 74 6f 20 73 61 69 64 20 64 75 70 6c 69 63 61 74 69 6f 6e 2e 00 46 6f 72 | t.comes.to.said.duplication..For |
3f040 | 20 49 6e 63 6f 6d 69 6e 67 20 61 6e 64 20 49 6d 70 6f 72 74 20 52 6f 75 74 65 2d 6d 61 70 73 20 | .Incoming.and.Import.Route-maps. |
3f060 | 69 66 20 77 65 20 72 65 63 65 69 76 65 20 61 20 76 36 20 67 6c 6f 62 61 6c 20 61 6e 64 20 76 36 | if.we.receive.a.v6.global.and.v6 |
3f080 | 20 4c 4c 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2c 20 74 68 65 6e 20 | .LL.address.for.the.route,.then. |
3f0a0 | 70 72 65 66 65 72 20 74 6f 20 75 73 65 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 | prefer.to.use.the.global.address |
3f0c0 | 20 61 73 20 74 68 65 20 6e 65 78 74 68 6f 70 2e 00 46 6f 72 20 4c 6f 63 61 6c 20 55 73 65 72 73 | .as.the.nexthop..For.Local.Users |
3f0e0 | 00 46 6f 72 20 52 41 44 49 55 53 20 75 73 65 72 73 00 46 6f 72 20 55 53 42 20 70 6f 72 74 20 69 | .For.RADIUS.users.For.USB.port.i |
3f100 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 | nformation.please.refor.to:.:ref |
3f120 | 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 | :`hardware_usb`..For.a.headstart |
3f140 | 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f | .you.can.use.the.below.example.o |
3f160 | 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 69 | n.how.to.build.a.bond.with.two.i |
3f180 | 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 4a 75 6e 69 70 65 72 | nterfaces.from.VyOS.to.a.Juniper |
3f1a0 | 20 45 58 20 53 77 69 74 63 68 20 73 79 73 74 65 6d 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 | .EX.Switch.system..For.a.headsta |
3f1c0 | 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 | rt.you.can.use.the.below.example |
3f1e0 | 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 2c 70 6f 72 74 2d 63 68 61 | .on.how.to.build.a.bond,port-cha |
3f200 | 6e 6e 65 6c 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 | nnel.with.two.interfaces.from.Vy |
3f220 | 4f 53 20 74 6f 20 61 20 41 72 75 62 61 2f 48 50 20 32 35 31 30 47 20 73 77 69 74 63 68 2e 00 46 | OS.to.a.Aruba/HP.2510G.switch..F |
3f240 | 6f 72 20 61 20 6c 61 72 67 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 69 76 61 74 65 20 6d 61 63 | or.a.large.amount.of.private.mac |
3f260 | 68 69 6e 65 73 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 79 6f 75 72 20 61 64 64 72 65 73 | hines.behind.the.NAT.your.addres |
3f280 | 73 20 70 6f 6f 6c 20 6d 69 67 68 74 20 74 6f 20 62 65 20 62 69 67 67 65 72 2e 20 55 73 65 20 61 | s.pool.might.to.be.bigger..Use.a |
3f2a0 | 6e 79 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 31 30 30 2e 36 34 2e 30 | ny.address.in.the.range.100.64.0 |
3f2c0 | 2e 31 30 20 2d 20 31 30 30 2e 36 34 2e 30 2e 32 30 20 6f 6e 20 53 4e 41 54 20 72 75 6c 65 20 34 | .10.-.100.64.0.20.on.SNAT.rule.4 |
3f2e0 | 30 20 77 68 65 6e 20 64 6f 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 00 46 6f 72 | 0.when.doing.the.translation.For |
3f300 | 20 61 20 73 69 6d 70 6c 65 20 68 6f 6d 65 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 6a 75 73 | .a.simple.home.network.using.jus |
3f320 | 74 20 74 68 65 20 49 53 50 27 73 20 65 71 75 69 70 6d 65 6e 74 2c 20 74 68 69 73 20 69 73 20 75 | t.the.ISP's.equipment,.this.is.u |
3f340 | 73 75 61 6c 6c 79 20 64 65 73 69 72 61 62 6c 65 2e 20 42 75 74 20 69 66 20 79 6f 75 20 77 61 6e | sually.desirable..But.if.you.wan |
3f360 | 74 20 74 6f 20 72 75 6e 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 61 | t.to.run.VyOS.as.your.firewall.a |
3f380 | 6e 64 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 68 | nd.router,.this.will.result.in.h |
3f3a0 | 61 76 69 6e 67 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 | aving.a.double.NAT.and.firewall. |
3f3c0 | 73 65 74 75 70 2e 20 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 66 65 77 20 65 78 74 | setup..This.results.in.a.few.ext |
3f3e0 | 72 61 20 6c 61 79 65 72 73 20 6f 66 20 63 6f 6d 70 6c 65 78 69 74 79 2c 20 70 61 72 74 69 63 75 | ra.layers.of.complexity,.particu |
3f400 | 6c 61 72 6c 79 20 69 66 20 79 6f 75 20 75 73 65 20 73 6f 6d 65 20 4e 41 54 20 6f 72 20 74 75 6e | larly.if.you.use.some.NAT.or.tun |
3f420 | 6e 65 6c 20 66 65 61 74 75 72 65 73 2e 00 46 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 | nel.features..For.connectionless |
3f440 | 20 70 72 6f 74 6f 63 6f 6c 73 20 61 73 20 6c 69 6b 65 20 49 43 4d 50 20 61 6e 64 20 55 44 50 2c | .protocols.as.like.ICMP.and.UDP, |
3f460 | 20 61 20 66 6c 6f 77 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 63 6f 6d 70 6c 65 74 65 20 6f | .a.flow.is.considered.complete.o |
3f480 | 6e 63 65 20 6e 6f 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 66 6f 72 20 74 68 69 73 20 66 6c 6f | nce.no.more.packets.for.this.flo |
3f4a0 | 77 20 61 70 70 65 61 72 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 74 69 6d 65 | w.appear.after.configurable.time |
3f4c0 | 6f 75 74 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 | out..For.example,.if.problems.wi |
3f4e0 | 74 68 20 70 6f 6f 72 20 74 69 6d 65 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 72 65 | th.poor.time.synchronization.are |
3f500 | 20 65 78 70 65 72 69 65 6e 63 65 64 2c 20 74 68 65 20 77 69 6e 64 6f 77 20 63 61 6e 20 62 65 20 | .experienced,.the.window.can.be. |
3f520 | 69 6e 63 72 65 61 73 65 64 20 66 72 6f 6d 20 69 74 73 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 | increased.from.its.default.size. |
3f540 | 6f 66 20 33 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 6f 6e 65 20 70 72 65 76 69 6f | of.3.permitted.codes.(one.previo |
3f560 | 75 73 20 63 6f 64 65 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 74 68 65 20 6e | us.code,.the.current.code,.the.n |
3f580 | 65 78 74 20 63 6f 64 65 29 20 74 6f 20 31 37 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 | ext.code).to.17.permitted.codes. |
3f5a0 | 28 74 68 65 20 38 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 73 2c 20 74 68 65 20 63 75 72 72 65 | (the.8.previous.codes,.the.curre |
3f5c0 | 6e 74 20 63 6f 64 65 2c 20 61 6e 64 20 74 68 65 20 38 20 6e 65 78 74 20 63 6f 64 65 73 29 2e 20 | nt.code,.and.the.8.next.codes).. |
3f5e0 | 54 68 69 73 20 77 69 6c 6c 20 70 65 72 6d 69 74 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 | This.will.permit.for.a.time.skew |
3f600 | 20 6f 66 20 75 70 20 74 6f 20 34 20 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e 20 63 6c 69 65 | .of.up.to.4.minutes.between.clie |
3f620 | 6e 74 20 61 6e 64 20 73 65 72 76 65 72 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 46 6f 72 20 | nt.and.server..For.example:.For. |
3f640 | 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | firewall.filtering,.configuratio |
3f660 | 6e 20 73 68 6f 75 6c 64 20 62 65 20 64 6f 6e 65 20 69 6e 20 60 60 73 65 74 20 66 69 72 65 77 61 | n.should.be.done.in.``set.firewa |
3f680 | 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 00 46 6f 72 20 66 69 72 65 77 | ll.[ipv4.|.ipv6]....``.For.firew |
3f6a0 | 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 6e 65 | all.filtering,.firewall.rules.ne |
3f6c0 | 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 | eds.to.be.created..Each.rule.is. |
3f6e0 | 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 | numbered,.has.an.action.to.apply |
3f700 | 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 | .if.the.rule.is.matched,.and.the |
3f720 | 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 | .ability.to.specify.multiple.cri |
3f740 | 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 | teria.matchers..Data.packets.go. |
3f760 | 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 | through.the.rules.from.1.-.99999 |
3f780 | 39 2c 20 73 6f 20 6f 72 64 65 72 20 69 73 20 63 72 75 63 69 61 6c 2e 20 41 74 20 74 68 65 20 66 | 9,.so.order.is.crucial..At.the.f |
3f7a0 | 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c | irst.match.the.action.of.the.rul |
3f7c0 | 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 46 6f 72 20 66 72 61 67 6d 65 6e 74 | e.will.be.executed..For.fragment |
3f7e0 | 65 64 20 54 43 50 20 6f 72 20 55 44 50 20 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 6c 20 6f 74 | ed.TCP.or.UDP.packets.and.all.ot |
3f800 | 68 65 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 72 6f 74 6f 63 6f 6c 20 74 72 61 66 66 | her.IPv4.and.IPv6.protocol.traff |
3f820 | 69 63 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 | ic,.the.source.and.destination.p |
3f840 | 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 6f 6d 69 74 74 65 64 2e 20 46 6f 72 20 | ort.information.is.omitted..For. |
3f860 | 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 | non-IP.traffic,.the.formula.is.t |
3f880 | 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d | he.same.as.for.the.layer2.transm |
3f8a0 | 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 46 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 61 | it.hash.policy..For.generating.a |
3f8c0 | 6e 20 4f 54 50 20 6b 65 79 20 69 6e 20 56 79 4f 53 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 | n.OTP.key.in.VyOS,.you.can.use.t |
3f8e0 | 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 28 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 | he.CLI.command.(operational.mode |
3f900 | 29 3a 00 46 6f 72 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 | ):.For.inbound.updates.the.order |
3f920 | 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c | .of.preference.is:.For.instance, |
3f940 | 20 77 69 74 68 20 3a 63 6f 64 65 3a 60 73 65 74 20 71 6f 73 20 70 6f 6c 69 63 79 20 73 68 61 70 | .with.:code:`set.qos.policy.shap |
3f960 | 65 72 20 4d 59 2d 53 48 41 50 45 52 20 63 6c 61 73 73 20 33 30 20 73 65 74 2d 64 73 63 70 20 45 | er.MY-SHAPER.class.30.set-dscp.E |
3f980 | 46 60 20 79 6f 75 20 77 6f 75 6c 64 20 62 65 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 44 53 | F`.you.would.be.modifying.the.DS |
3f9a0 | 43 50 20 66 69 65 6c 64 20 76 61 6c 75 65 20 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 61 | CP.field.value.of.packets.in.tha |
3f9c0 | 74 20 63 6c 61 73 73 20 74 6f 20 45 78 70 65 64 69 74 65 20 46 6f 72 77 61 72 64 69 6e 67 2e 00 | t.class.to.Expedite.Forwarding.. |
3f9e0 | 46 6f 72 20 69 70 76 34 3a 00 46 6f 72 20 6c 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 | For.ipv4:.For.latest.releases,.r |
3fa00 | 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 28 69 6e 74 65 72 66 61 63 65 2d 67 72 | efer.the.`firewall.(interface-gr |
3fa20 | 6f 75 70 73 29 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c | oups).<https://docs.vyos.io/en/l |
3fa40 | 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e | atest/configuration/firewall/gen |
3fa60 | 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 | eral.html#interface-groups>`_.ma |
3fa80 | 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 | in.page.to.configure.zone.based. |
3faa0 | 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 | rules..New.syntax.was.introduced |
3fac0 | 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6c 61 74 65 73 74 | .here.:vytask:`T5160`.For.latest |
3fae0 | 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c | .releases,.refer.the.`firewall.< |
3fb00 | 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 | https://docs.vyos.io/en/latest/c |
3fb20 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 | onfiguration/firewall/general.ht |
3fb40 | 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 | ml#interface-groups>`_.main.page |
3fb60 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 | .to.configure.zone.based.rules.. |
3fb80 | 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a | New.syntax.was.introduced.here.: |
3fba0 | 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 | vytask:`T5160`.For.more.informat |
3fbc0 | 69 6f 6e 20 6f 6e 20 68 6f 77 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 63 68 69 6e 67 20 | ion.on.how.MPLS.label.switching. |
3fbe0 | 77 6f 72 6b 73 2c 20 70 6c 65 61 73 65 20 67 6f 20 76 69 73 69 74 20 60 57 69 6b 69 70 65 64 69 | works,.please.go.visit.`Wikipedi |
3fc00 | 61 20 28 4d 50 4c 53 29 60 5f 2e 00 46 6f 72 20 6d 75 6c 74 69 20 68 6f 70 20 73 65 73 73 69 6f | a.(MPLS)`_..For.multi.hop.sessio |
3fc20 | 6e 73 20 6f 6e 6c 79 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 65 | ns.only..Configure.the.minimum.e |
3fc40 | 78 70 65 63 74 65 64 20 54 54 4c 20 66 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 42 46 44 20 | xpected.TTL.for.an.incoming.BFD. |
3fc60 | 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 2e 00 46 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 69 6e | control.packet..For.network.main |
3fc80 | 74 65 6e 61 6e 63 65 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 64 69 72 | tenance,.it's.a.good.idea.to.dir |
3fca0 | 65 63 74 20 75 73 65 72 73 20 74 6f 20 61 20 62 61 63 6b 75 70 20 73 65 72 76 65 72 20 73 6f 20 | ect.users.to.a.backup.server.so. |
3fcc0 | 74 68 61 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 73 | that.the.primary.server.can.be.s |
3fce0 | 61 66 65 6c 79 20 74 61 6b 65 6e 20 6f 75 74 20 6f 66 20 73 65 72 76 69 63 65 2e 20 49 74 27 73 | afely.taken.out.of.service..It's |
3fd00 | 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 77 69 74 63 68 20 79 6f 75 72 20 50 50 50 6f 45 20 73 | .possible.to.switch.your.PPPoE.s |
3fd20 | 65 72 76 65 72 20 74 6f 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 6d 6f 64 65 20 77 68 65 72 65 20 | erver.to.maintenance.mode.where. |
3fd40 | 69 74 20 6d 61 69 6e 74 61 69 6e 73 20 61 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 | it.maintains.already.established |
3fd60 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 75 74 20 72 65 66 75 73 65 73 20 6e 65 77 20 63 6f | .connections,.but.refuses.new.co |
3fd80 | 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 2e 00 46 6f 72 20 6f 70 74 69 6d 61 6c 20 73 | nnection.attempts..For.optimal.s |
3fda0 | 63 61 6c 61 62 69 6c 69 74 79 2c 20 4d 75 6c 74 69 63 61 73 74 20 73 68 6f 75 6c 64 6e 27 74 20 | calability,.Multicast.shouldn't. |
3fdc0 | 62 65 20 75 73 65 64 20 61 74 20 61 6c 6c 2c 20 62 75 74 20 69 6e 73 74 65 61 64 20 75 73 65 20 | be.used.at.all,.but.instead.use. |
3fde0 | 42 47 50 20 74 6f 20 73 69 67 6e 61 6c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 | BGP.to.signal.all.connected.devi |
3fe00 | 63 65 73 20 62 65 74 77 65 65 6e 20 6c 65 61 76 65 73 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c | ces.between.leaves..Unfortunatel |
3fe20 | 79 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 79 65 74 20 73 75 70 70 6f 72 74 20 74 68 69 | y,.VyOS.does.not.yet.support.thi |
3fe40 | 73 2e 00 46 6f 72 20 6f 75 74 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 | s..For.outbound.updates.the.orde |
3fe60 | 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 72 65 66 65 72 65 6e 63 | r.of.preference.is:.For.referenc |
3fe80 | 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 | e,.a.description.can.be.defined. |
3fea0 | 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 | for.every.defined.custom.chain.. |
3fec0 | 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e | For.reference,.a.description.can |
3fee0 | 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 72 75 6c | .be.defined.for.every.single.rul |
3ff00 | 65 2c 20 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 | e,.and.for.every.defined.custom. |
3ff20 | 63 68 61 69 6e 2e 00 46 6f 72 20 73 65 63 75 72 69 74 79 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 | chain..For.security,.the.listen. |
3ff40 | 61 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 69 | address.should.only.be.used.on.i |
3ff60 | 6e 74 65 72 6e 61 6c 2f 74 72 75 73 74 65 64 20 6e 65 74 77 6f 72 6b 73 21 00 46 6f 72 20 73 65 | nternal/trusted.networks!.For.se |
3ff80 | 72 69 61 6c 20 76 69 61 20 55 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c | rial.via.USB.port.information.pl |
3ffa0 | 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 | ease.refor.to:.:ref:`hardware_us |
3ffc0 | 62 60 2e 00 46 6f 72 20 73 69 6d 70 6c 69 63 69 74 79 20 77 65 27 6c 6c 20 61 73 73 75 6d 65 20 | b`..For.simplicity.we'll.assume. |
3ffe0 | 74 68 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 47 52 45 2c 20 69 74 27 73 20 6e | that.the.protocol.is.GRE,.it's.n |
40000 | 6f 74 20 68 61 72 64 20 74 6f 20 67 75 65 73 73 20 77 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 | ot.hard.to.guess.what.needs.to.b |
40020 | 65 20 63 68 61 6e 67 65 64 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f 72 6b 20 77 69 74 68 20 61 | e.changed.to.make.it.work.with.a |
40040 | 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 2e 20 57 65 20 61 73 73 75 6d 65 20 74 | .different.protocol..We.assume.t |
40060 | 68 61 74 20 49 50 73 65 63 20 77 69 6c 6c 20 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 | hat.IPsec.will.use.pre-shared.se |
40080 | 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 | cret.authentication.and.will.use |
400a0 | 20 41 45 53 31 32 38 2f 53 48 41 31 20 66 6f 72 20 74 68 65 20 63 69 70 68 65 72 20 61 6e 64 20 | .AES128/SHA1.for.the.cipher.and. |
400c0 | 68 61 73 68 2e 20 41 64 6a 75 73 74 20 74 68 69 73 20 61 73 20 6e 65 63 65 73 73 61 72 79 2e 00 | hash..Adjust.this.as.necessary.. |
400e0 | 46 6f 72 20 74 68 65 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 36 36 60 | For.the.:ref:`destination-nat66` |
40100 | 20 72 75 6c 65 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f | .rule,.the.destination.address.o |
40120 | 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 61 | f.the.packet.isreplaced.by.the.a |
40140 | 64 64 72 65 73 73 20 63 61 6c 63 75 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 | ddress.calculated.from.the.speci |
40160 | 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 60 74 | fied.address.or.prefix.in.the.`t |
40180 | 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 00 46 6f 72 20 | ranslation.address`.command.For. |
401a0 | 74 68 65 20 4f 70 65 6e 56 50 4e 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f | the.OpenVPN.traffic.to.pass.thro |
401c0 | 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 20 | ugh.the.WAN.interface,.you.must. |
401e0 | 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f 72 | create.a.firewall.exception..For |
40200 | 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 | .the.WireGuard.traffic.to.pass.t |
40220 | 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 | hrough.the.WAN.interface,.you.mu |
40240 | 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 | st.create.a.firewall.exception.. |
40260 | 46 6f 72 20 74 68 65 20 61 76 65 72 61 67 65 20 75 73 65 72 20 61 20 73 65 72 69 61 6c 20 63 6f | For.the.average.user.a.serial.co |
40280 | 6e 73 6f 6c 65 20 68 61 73 20 6e 6f 20 61 64 76 61 6e 74 61 67 65 20 6f 76 65 72 20 61 20 63 6f | nsole.has.no.advantage.over.a.co |
402a0 | 6e 73 6f 6c 65 20 6f 66 66 65 72 65 64 20 62 79 20 61 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 | nsole.offered.by.a.directly.atta |
402c0 | 63 68 65 64 20 6b 65 79 62 6f 61 72 64 20 61 6e 64 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c | ched.keyboard.and.screen..Serial |
402e0 | 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 6d 75 63 68 20 73 6c 6f 77 65 72 2c 20 74 61 6b 69 6e | .consoles.are.much.slower,.takin |
40300 | 67 20 75 70 20 74 6f 20 61 20 73 65 63 6f 6e 64 20 74 6f 20 66 69 6c 6c 20 61 20 38 30 20 63 6f | g.up.to.a.second.to.fill.a.80.co |
40320 | 6c 75 6d 6e 20 62 79 20 32 34 20 6c 69 6e 65 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 | lumn.by.24.line.screen..Serial.c |
40340 | 6f 6e 73 6f 6c 65 73 20 67 65 6e 65 72 61 6c 6c 79 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 6e | onsoles.generally.only.support.n |
40360 | 6f 6e 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 20 41 53 43 49 49 20 74 65 78 74 2c 20 77 69 74 68 | on-proportional.ASCII.text,.with |
40380 | 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 61 6e 67 75 61 67 65 73 20 6f | .limited.support.for.languages.o |
403a0 | 74 68 65 72 20 74 68 61 6e 20 45 6e 67 6c 69 73 68 2e 00 46 6f 72 20 74 68 65 20 69 6e 67 72 65 | ther.than.English..For.the.ingre |
403c0 | 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 72 | ss.traffic.of.an.interface,.ther |
403e0 | 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 79 6f 75 20 63 61 6e 20 64 69 72 | e.is.only.one.policy.you.can.dir |
40400 | 65 63 74 6c 79 20 61 70 70 6c 79 2c 20 61 20 2a 2a 4c 69 6d 69 74 65 72 2a 2a 20 70 6f 6c 69 63 | ectly.apply,.a.**Limiter**.polic |
40420 | 79 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f | y..You.cannot.apply.a.shaping.po |
40440 | 6c 69 63 79 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 | licy.directly.to.the.ingress.tra |
40460 | 66 66 69 63 20 6f 66 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 61 75 73 65 20 73 68 | ffic.of.any.interface.because.sh |
40480 | 61 70 69 6e 67 20 6f 6e 6c 79 20 77 6f 72 6b 73 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 | aping.only.works.for.outbound.tr |
404a0 | 61 66 66 69 63 2e 00 46 6f 72 20 74 68 65 20 73 61 6b 65 20 6f 66 20 64 65 6d 6f 6e 73 74 72 61 | affic..For.the.sake.of.demonstra |
404c0 | 74 69 6f 6e 2c 20 60 65 78 61 6d 70 6c 65 20 23 31 20 69 6e 20 74 68 65 20 6f 66 66 69 63 69 61 | tion,.`example.#1.in.the.officia |
404e0 | 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 61 62 | l.documentation.<https://www.zab |
40500 | 62 69 78 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 75 72 72 65 6e 74 2f 6d 61 | bix.com/documentation/current/ma |
40520 | 6e 75 61 6c 2f 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2f 63 6f 6e 74 61 69 6e 65 72 73 3e 60 5f 20 | nual/installation/containers>`_. |
40540 | 74 6f 20 74 68 65 20 64 65 63 6c 61 72 61 74 69 76 65 20 56 79 4f 53 20 43 4c 49 20 73 79 6e 74 | to.the.declarative.VyOS.CLI.synt |
40560 | 61 78 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 | ax..For.traffic.originated.by.th |
40580 | 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 | e.router,.base.chain.is.**output |
405a0 | 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 | .filter**:.``set.firewall.[ipv4. |
405c0 | 7c 20 69 70 76 36 5d 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 | |.ipv6].output.filter....``.For. |
405e0 | 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 | traffic.that.needs.to.be.forware |
40600 | 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 | d.internally.by.the.bridge,.base |
40620 | 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 | .chain.is.is.**forward**,.and.it |
40640 | 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 | 's.base.command.for.filtering.is |
40660 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 | .``set.firewall.bridge.forward.f |
40680 | 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 | ilter....``.For.traffic.that.nee |
406a0 | 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 | ds.to.be.forwared.internally.by. |
406c0 | 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 | the.bridge,.base.chain.is.is.**f |
406e0 | 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 | orward**,.and.it's.base.command. |
40700 | 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 | for.filtering.is.``set.firewall. |
40720 | 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 | bridge.forward.filter....``,.whi |
40740 | 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 34 2c 20 68 69 67 68 6c 69 67 68 74 | ch.happens.in.stage.4,.highlight |
40760 | 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 46 6f 72 20 74 72 61 66 66 69 63 | ened.with.red.color..For.traffic |
40780 | 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 | .towards.the.router.itself,.base |
407a0 | 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 | .chain.is.**input.filter**:.``se |
407c0 | 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 69 6e 70 75 74 20 66 | t.firewall.[ipv4.|.ipv6].input.f |
407e0 | 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 | ilter....``.For.traffic.towards. |
40800 | 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 | the.router.itself,.base.chain.is |
40820 | 20 2a 2a 69 6e 70 75 74 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e | .**input**,.while.traffic.origin |
40840 | 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 | ated.by.the.router,.base.chain.i |
40860 | 73 20 2a 2a 6f 75 74 70 75 74 2a 2a 2e 20 41 20 6e 65 77 20 73 69 6d 70 6c 69 66 69 65 64 20 70 | s.**output**..A.new.simplified.p |
40880 | 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 | acket.flow.diagram.is.shown.next |
408a0 | 2c 20 77 68 69 63 68 20 73 68 6f 77 73 20 74 68 65 20 70 61 74 68 20 66 6f 72 20 74 72 61 66 66 | ,.which.shows.the.path.for.traff |
408c0 | 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 | ic.destinated.to.the.router.itse |
408e0 | 6c 66 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 | lf,.and.traffic.generated.by.the |
40900 | 20 72 6f 75 74 65 72 20 28 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 63 69 72 63 6c 65 20 6e 75 | .router.(starting.from.circle.nu |
40920 | 6d 62 65 72 20 36 29 3a 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 | mber.6):.For.transit.traffic,.wh |
40940 | 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e | ich.is.received.by.the.router.an |
40960 | 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 | d.forwarded,.base.chain.is.**for |
40980 | 77 61 72 64 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 | ward.filter**:.``set.firewall.[i |
409a0 | 70 76 34 20 7c 20 69 70 76 36 5d 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 | pv4.|.ipv6].forward.filter....`` |
409c0 | 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 | .For.transit.traffic,.which.is.r |
409e0 | 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 | eceived.by.the.router.and.forwar |
40a00 | 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2e 20 | ded,.base.chain.is.**forward**.. |
40a20 | 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d | A.simplified.packet.flow.diagram |
40a40 | 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 73 68 6f 77 6e 20 6e 65 | .for.transit.traffic.is.shown.ne |
40a60 | 78 74 3a 00 46 6f 72 6d 61 6c 6c 79 2c 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6c 6f 6f | xt:.Formally,.a.virtual.link.loo |
40a80 | 6b 73 20 6c 69 6b 65 20 61 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b | ks.like.a.point-to-point.network |
40aa0 | 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 77 6f 20 41 42 52 20 66 72 6f 6d 20 6f 6e 65 20 61 72 65 | .connecting.two.ABR.from.one.are |
40ac0 | 61 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 70 68 79 73 69 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 | a.one.of.which.physically.connec |
40ae0 | 74 65 64 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 54 68 69 73 20 70 73 65 | ted.to.a.backbone.area..This.pse |
40b00 | 75 64 6f 2d 6e 65 74 77 6f 72 6b 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 6c | udo-network.is.considered.to.bel |
40b20 | 6f 6e 67 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 00 46 6f 72 77 61 72 64 20 | ong.to.a.backbone.area..Forward. |
40b40 | 69 6e 63 6f 6d 69 6e 67 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 68 65 20 44 4e 53 20 | incoming.DNS.queries.to.the.DNS. |
40b60 | 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 60 60 73 | servers.configured.under.the.``s |
40b80 | 79 73 74 65 6d 20 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6e 6f 64 65 73 2e 00 46 6f 72 77 61 | ystem.name-server``.nodes..Forwa |
40ba0 | 72 64 20 6d 65 74 68 6f 64 00 46 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 20 71 75 65 72 69 | rd.method.Forward.received.queri |
40bc0 | 65 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 64 6f 6d 61 69 6e 20 28 73 70 65 63 | es.for.a.particular.domain.(spec |
40be0 | 69 66 69 65 64 20 76 69 61 20 60 64 6f 6d 61 69 6e 2d 6e 61 6d 65 60 29 20 74 6f 20 61 20 67 69 | ified.via.`domain-name`).to.a.gi |
40c00 | 76 65 6e 20 6e 61 6d 65 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 | ven.nameserver..Multiple.nameser |
40c20 | 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 59 6f 75 20 63 61 6e 20 75 | vers.can.be.specified..You.can.u |
40c40 | 73 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 6f 72 20 61 20 44 4e 53 20 73 70 6c 69 74 2d | se.this.feature.for.a.DNS.split- |
40c60 | 68 6f 72 69 7a 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 46 6f 75 72 20 70 6f 6c 69 | horizon.configuration..Four.poli |
40c80 | 63 69 65 73 20 66 6f 72 20 72 65 66 6f 72 77 61 72 64 69 6e 67 20 44 48 43 50 20 70 61 63 6b 65 | cies.for.reforwarding.DHCP.packe |
40ca0 | 74 73 20 65 78 69 73 74 3a 00 46 72 6f 6d 20 3a 72 66 63 3a 60 31 39 33 30 60 3a 00 46 72 6f 6d | ts.exist:.From.:rfc:`1930`:.From |
40cc0 | 20 61 20 73 65 63 75 72 69 74 79 20 70 65 72 73 70 65 63 74 69 76 65 2c 20 69 74 20 69 73 20 6e | .a.security.perspective,.it.is.n |
40ce0 | 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 6c 65 74 20 61 20 74 68 69 72 64 20 70 61 | ot.recommended.to.let.a.third.pa |
40d00 | 72 74 79 20 63 72 65 61 74 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 20 70 72 69 76 61 74 65 | rty.create.and.share.the.private |
40d20 | 20 6b 65 79 20 66 6f 72 20 61 20 73 65 63 75 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 59 | .key.for.a.secured.connection..Y |
40d40 | 6f 75 20 73 68 6f 75 6c 64 20 63 72 65 61 74 65 20 74 68 65 20 70 72 69 76 61 74 65 20 70 6f 72 | ou.should.create.the.private.por |
40d60 | 74 69 6f 6e 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 61 6e 64 20 6f 6e 6c 79 20 68 61 6e 64 20 6f | tion.on.your.own.and.only.hand.o |
40d80 | 75 74 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 50 6c 65 61 73 65 20 6b 65 65 70 20 74 | ut.the.public.key..Please.keep.t |
40da0 | 68 69 73 20 69 6e 20 6d 69 6e 64 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 20 63 6f 6e 76 | his.in.mind.when.using.this.conv |
40dc0 | 65 6e 69 65 6e 63 65 20 66 65 61 74 75 72 65 2e 00 46 72 6f 6d 20 6d 61 69 6e 20 73 74 72 75 63 | enience.feature..From.main.struc |
40de0 | 74 75 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 64 6f 63 3a 60 46 69 72 65 77 61 6c 6c 20 4f | ture.defined.in.:doc:`Firewall.O |
40e00 | 76 65 72 76 69 65 77 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f | verview</configuration/firewall/ |
40e20 | 69 6e 64 65 78 3e 60 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 | index>`.in.this.section.you.can. |
40e40 | 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 6c 79 20 66 | find.detailed.information.only.f |
40e60 | 6f 72 20 74 68 65 20 6e 65 78 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 6c 20 | or.the.next.part.of.the.general. |
40e80 | 73 74 72 75 63 74 75 72 65 3a 00 46 77 6d 61 72 6b 00 47 45 4e 45 56 45 00 47 45 4e 45 56 45 20 | structure:.Fwmark.GENEVE.GENEVE. |
40ea0 | 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6e 65 74 77 6f 72 6b 20 76 | is.designed.to.support.network.v |
40ec0 | 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 65 20 63 61 73 65 73 2c 20 77 68 65 72 65 20 74 | irtualization.use.cases,.where.t |
40ee0 | 75 6e 6e 65 6c 73 20 61 72 65 20 74 79 70 69 63 61 6c 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 | unnels.are.typically.established |
40f00 | 20 74 6f 20 61 63 74 20 61 73 20 61 20 62 61 63 6b 70 6c 61 6e 65 20 62 65 74 77 65 65 6e 20 74 | .to.act.as.a.backplane.between.t |
40f20 | 68 65 20 76 69 72 74 75 61 6c 20 73 77 69 74 63 68 65 73 20 72 65 73 69 64 69 6e 67 20 69 6e 20 | he.virtual.switches.residing.in. |
40f40 | 68 79 70 65 72 76 69 73 6f 72 73 2c 20 70 68 79 73 69 63 61 6c 20 73 77 69 74 63 68 65 73 2c 20 | hypervisors,.physical.switches,. |
40f60 | 6f 72 20 6d 69 64 64 6c 65 62 6f 78 65 73 20 6f 72 20 6f 74 68 65 72 20 61 70 70 6c 69 61 6e 63 | or.middleboxes.or.other.applianc |
40f80 | 65 73 2e 20 41 6e 20 61 72 62 69 74 72 61 72 79 20 49 50 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 | es..An.arbitrary.IP.network.can. |
40fa0 | 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 75 6e 64 65 72 6c 61 79 20 61 6c 74 68 6f 75 67 68 20 | be.used.as.an.underlay.although. |
40fc0 | 43 6c 6f 73 20 6e 65 74 77 6f 72 6b 73 20 2d 20 41 20 74 65 63 68 6e 69 71 75 65 20 66 6f 72 20 | Clos.networks.-.A.technique.for. |
40fe0 | 63 6f 6d 70 6f 73 69 6e 67 20 6e 65 74 77 6f 72 6b 20 66 61 62 72 69 63 73 20 6c 61 72 67 65 72 | composing.network.fabrics.larger |
41000 | 20 74 68 61 6e 20 61 20 73 69 6e 67 6c 65 20 73 77 69 74 63 68 20 77 68 69 6c 65 20 6d 61 69 6e | .than.a.single.switch.while.main |
41020 | 74 61 69 6e 69 6e 67 20 6e 6f 6e 2d 62 6c 6f 63 6b 69 6e 67 20 62 61 6e 64 77 69 64 74 68 20 61 | taining.non-blocking.bandwidth.a |
41040 | 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 6f 69 6e 74 73 2e 20 45 43 4d 50 20 69 73 | cross.connection.points..ECMP.is |
41060 | 20 75 73 65 64 20 74 6f 20 64 69 76 69 64 65 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 | .used.to.divide.traffic.across.t |
41080 | 68 65 20 6d 75 6c 74 69 70 6c 65 20 6c 69 6e 6b 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 74 | he.multiple.links.and.switches.t |
410a0 | 68 61 74 20 63 6f 6e 73 74 69 74 75 74 65 20 74 68 65 20 66 61 62 72 69 63 2e 20 53 6f 6d 65 74 | hat.constitute.the.fabric..Somet |
410c0 | 69 6d 65 73 20 74 65 72 6d 65 64 20 22 6c 65 61 66 20 61 6e 64 20 73 70 69 6e 65 22 20 6f 72 20 | imes.termed."leaf.and.spine".or. |
410e0 | 22 66 61 74 20 74 72 65 65 22 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 00 47 45 4e 45 56 45 20 6f 70 | "fat.tree".topologies..GENEVE.op |
41100 | 74 69 6f 6e 73 00 47 52 45 20 69 73 20 61 20 77 65 6c 6c 20 64 65 66 69 6e 65 64 20 73 74 61 6e | tions.GRE.is.a.well.defined.stan |
41120 | 64 61 72 64 20 74 68 61 74 20 69 73 20 63 6f 6d 6d 6f 6e 20 69 6e 20 6d 6f 73 74 20 6e 65 74 77 | dard.that.is.common.in.most.netw |
41140 | 6f 72 6b 73 2e 20 57 68 69 6c 65 20 6e 6f 74 20 69 6e 68 65 72 65 6e 74 6c 79 20 64 69 66 66 69 | orks..While.not.inherently.diffi |
41160 | 63 75 6c 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 72 65 20 61 72 65 20 61 20 63 6f | cult.to.configure.there.are.a.co |
41180 | 75 70 6c 65 20 6f 66 20 74 68 69 6e 67 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 | uple.of.things.to.keep.in.mind.t |
411a0 | 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 65 | o.make.sure.the.configuration.pe |
411c0 | 72 66 6f 72 6d 73 20 61 73 20 65 78 70 65 63 74 65 64 2e 20 41 20 63 6f 6d 6d 6f 6e 20 63 61 75 | rforms.as.expected..A.common.cau |
411e0 | 73 65 20 66 6f 72 20 47 52 45 20 74 75 6e 6e 65 6c 73 20 74 6f 20 66 61 69 6c 20 74 6f 20 63 6f | se.for.GRE.tunnels.to.fail.to.co |
41200 | 6d 65 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 69 6e 63 6c 75 64 65 20 41 43 4c 20 6f 72 20 46 | me.up.correctly.include.ACL.or.F |
41220 | 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 | irewall.configurations.that.are. |
41240 | 64 69 73 63 61 72 64 69 6e 67 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 20 6f 72 20 62 6c 6f | discarding.IP.protocol.47.or.blo |
41260 | 63 6b 69 6e 67 20 79 6f 75 72 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 74 72 | cking.your.source/destination.tr |
41280 | 61 66 66 69 63 2e 00 47 52 45 20 69 73 20 61 6c 73 6f 20 74 68 65 20 6f 6e 6c 79 20 63 6c 61 73 | affic..GRE.is.also.the.only.clas |
412a0 | 73 69 63 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 63 72 65 61 74 69 6e | sic.protocol.that.allows.creatin |
412c0 | 67 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 | g.multiple.tunnels.with.the.same |
412e0 | 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 64 75 65 20 74 6f 20 69 | .source.and.destination.due.to.i |
41300 | 74 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6b 65 79 73 2e 20 44 65 73 70 | ts.support.for.tunnel.keys..Desp |
41320 | 69 74 65 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 6e | ite.its.name,.this.feature.has.n |
41340 | 6f 74 68 69 6e 67 20 74 6f 20 64 6f 20 77 69 74 68 20 73 65 63 75 72 69 74 79 3a 20 69 74 27 73 | othing.to.do.with.security:.it's |
41360 | 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 61 74 20 61 6c 6c 6f 77 | .simply.an.identifier.that.allow |
41380 | 73 20 72 6f 75 74 65 72 73 20 74 6f 20 74 65 6c 6c 20 6f 6e 65 20 74 75 6e 6e 65 6c 20 66 72 6f | s.routers.to.tell.one.tunnel.fro |
413a0 | 6d 20 61 6e 6f 74 68 65 72 2e 00 47 52 45 20 69 73 20 6f 66 74 65 6e 20 73 65 65 6e 20 61 73 20 | m.another..GRE.is.often.seen.as. |
413c0 | 61 20 6f 6e 65 20 73 69 7a 65 20 66 69 74 73 20 61 6c 6c 20 73 6f 6c 75 74 69 6f 6e 20 77 68 65 | a.one.size.fits.all.solution.whe |
413e0 | 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 63 6c 61 73 73 69 63 20 49 50 20 74 75 6e 6e 65 6c 69 | n.it.comes.to.classic.IP.tunneli |
41400 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 61 6e 64 20 66 6f 72 20 61 20 67 6f 6f 64 20 72 65 61 | ng.protocols,.and.for.a.good.rea |
41420 | 73 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 61 72 65 20 6d 6f 72 65 20 73 70 65 | son..However,.there.are.more.spe |
41440 | 63 69 61 6c 69 7a 65 64 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 6d 61 6e 79 20 6f 66 20 74 68 | cialized.options,.and.many.of.th |
41460 | 65 6d 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 72 65 20 | em.are.supported.by.VyOS..There. |
41480 | 61 72 65 20 61 6c 73 6f 20 72 61 74 68 65 72 20 6f 62 73 63 75 72 65 20 47 52 45 20 6f 70 74 69 | are.also.rather.obscure.GRE.opti |
414a0 | 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 2e 00 47 52 45 2f 49 50 49 50 | ons.that.can.be.useful..GRE/IPIP |
414c0 | 2f 53 49 54 20 61 6e 64 20 49 50 73 65 63 20 61 72 65 20 77 69 64 65 6c 79 20 61 63 63 65 70 74 | /SIT.and.IPsec.are.widely.accept |
414e0 | 65 64 20 73 74 61 6e 64 61 72 64 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 20 74 68 69 73 20 73 63 | ed.standards,.which.make.this.sc |
41500 | 68 65 6d 65 20 65 61 73 79 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 62 65 74 77 65 65 6e 20 56 | heme.easy.to.implement.between.V |
41520 | 79 4f 53 20 61 6e 64 20 76 69 72 74 75 61 6c 6c 79 20 61 6e 79 20 6f 74 68 65 72 20 72 6f 75 74 | yOS.and.virtually.any.other.rout |
41540 | 65 72 2e 00 47 52 45 54 41 50 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 | er..GRETAP.Genearate.a.new.OpenV |
41560 | 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 | PN.shared.secret..The.generated. |
41580 | 73 65 63 72 65 64 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 | secred.is.the.output.to.the.cons |
415a0 | 6f 6c 65 2e 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 | ole..Genearate.a.new.OpenVPN.sha |
415c0 | 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 74 | red.secret..The.generated.secret |
415e0 | 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 | .is.the.output.to.the.console..G |
41600 | 65 6e 65 72 61 6c 00 47 65 6e 65 72 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 65 6e | eneral.General.Configuration.Gen |
41620 | 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 | eral.commands.for.firewall.confi |
41640 | 67 75 72 61 74 69 6f 6e 2c 20 63 6f 75 6e 74 65 72 20 61 6e 64 20 73 74 61 74 69 73 63 69 74 73 | guration,.counter.and.statiscits |
41660 | 3a 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 | :.Generate.:abbr:`MKA.(MACsec.Ke |
41680 | 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 20 31 | y.Agreement.protocol)`.CAK.key.1 |
416a0 | 32 38 20 6f 72 20 32 35 36 20 62 69 74 73 2e 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 | 28.or.256.bits..Generate.:abbr:` |
416c0 | 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 | MKA.(MACsec.Key.Agreement.protoc |
416e0 | 6f 6c 29 60 20 43 41 4b 20 6b 65 79 2e 00 47 65 6e 65 72 61 74 65 20 4b 65 79 70 61 69 72 00 47 | ol)`.CAK.key..Generate.Keypair.G |
41700 | 65 6e 65 72 61 74 65 20 61 20 57 69 72 65 47 75 61 72 64 20 70 72 65 2d 73 68 61 72 65 64 20 73 | enerate.a.WireGuard.pre-shared.s |
41720 | 65 63 72 65 74 20 75 73 65 64 20 66 6f 72 20 70 65 65 72 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 | ecret.used.for.peers.to.communic |
41740 | 61 74 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 57 69 72 65 47 75 61 72 64 20 70 75 | ate..Generate.a.new.WireGuard.pu |
41760 | 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 61 6e 64 20 6f 75 74 | blic/private.key.portion.and.out |
41780 | 70 75 74 20 74 68 65 20 72 65 73 75 6c 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 | put.the.result.to.the.console..G |
417a0 | 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 73 65 74 20 6f 66 20 3a 61 62 62 72 3a 60 44 48 20 28 | enerate.a.new.set.of.:abbr:`DH.( |
417c0 | 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 65 | Diffie-Hellman)`.parameters..The |
417e0 | 20 6b 65 79 20 73 69 7a 65 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 43 4c | .key.size.is.requested.by.the.CL |
41800 | 49 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 20 62 69 74 2e 00 47 65 6e 65 | I.and.defaults.to.2048.bit..Gene |
41820 | 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d | rate.the.configuration.mode.comm |
41840 | 61 6e 64 73 20 74 6f 20 61 64 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 3a 72 65 | ands.to.add.a.public.key.for.:re |
41860 | 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 | f:`ssh_key_based_authentication` |
41880 | 2e 20 60 60 3c 6c 6f 63 61 74 69 6f 6e 3e 60 60 20 63 61 6e 20 62 65 20 61 20 6c 6f 63 61 6c 20 | ..``<location>``.can.be.a.local. |
418a0 | 70 61 74 68 20 6f 72 20 61 20 55 52 4c 20 70 6f 69 6e 74 69 6e 67 20 61 74 20 61 20 72 65 6d 6f | path.or.a.URL.pointing.at.a.remo |
418c0 | 74 65 20 66 69 6c 65 2e 00 47 65 6e 65 72 61 74 65 73 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 | te.file..Generates.a.keypair,.wh |
418e0 | 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 | ich.includes.the.public.and.priv |
41900 | 61 74 65 20 70 61 72 74 73 2c 20 61 6e 64 20 62 75 69 6c 64 20 61 20 63 6f 6e 66 69 67 75 72 61 | ate.parts,.and.build.a.configura |
41920 | 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 | tion.command.to.install.this.key |
41940 | 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 2e 00 47 65 6e 65 72 69 63 20 52 6f 75 74 69 | .to.``interface``..Generic.Routi |
41960 | 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 28 47 52 45 29 00 47 65 6e 65 76 65 20 48 65 | ng.Encapsulation.(GRE).Geneve.He |
41980 | 61 64 65 72 3a 00 47 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 77 69 72 65 67 75 61 72 | ader:.Get.a.list.of.all.wireguar |
419a0 | 64 20 69 6e 74 65 72 66 61 63 65 73 00 47 65 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 76 65 | d.interfaces.Get.an.overview.ove |
419c0 | 72 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 6f 75 6e 74 65 72 73 2e 00 47 65 74 20 64 | r.the.encryption.counters..Get.d |
419e0 | 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4c 4c 44 50 20 6e | etailed.information.about.LLDP.n |
41a00 | 65 69 67 68 62 6f 72 73 2e 00 47 65 74 20 74 68 65 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 | eighbors..Get.the.DHCPv6-PD.pref |
41a20 | 69 78 65 73 20 66 72 6f 6d 20 62 6f 74 68 20 72 6f 75 74 65 72 73 3a 00 47 65 74 74 69 6e 67 20 | ixes.from.both.routers:.Getting. |
41a40 | 73 74 61 72 74 65 64 00 47 69 76 65 6e 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 6f 70 65 6e | started.Given.the.fact.that.open |
41a60 | 20 44 4e 53 20 72 65 63 75 72 73 6f 72 73 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 20 | .DNS.recursors.could.be.used.on. |
41a80 | 44 44 6f 53 20 61 6d 70 6c 69 66 69 63 61 74 69 6f 6e 20 61 74 74 61 63 6b 73 2c 20 79 6f 75 20 | DDoS.amplification.attacks,.you. |
41aa0 | 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 | must.configure.the.networks.whic |
41ac0 | 68 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 63 75 72 73 | h.are.allowed.to.use.this.recurs |
41ae0 | 6f 72 2e 20 41 20 6e 65 74 77 6f 72 6b 20 6f 66 20 60 60 30 2e 30 2e 30 2e 30 2f 30 60 60 20 6f | or..A.network.of.``0.0.0.0/0``.o |
41b00 | 72 20 60 60 3a 3a 2f 30 60 60 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 61 6c 6c 20 49 50 76 34 20 | r.``::/0``.would.allow.all.IPv4. |
41b20 | 61 6e 64 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 | and.IPv6.networks.to.query.this. |
41b40 | 73 65 72 76 65 72 2e 20 54 68 69 73 20 69 73 20 67 65 6e 65 72 61 6c 6c 79 20 61 20 62 61 64 20 | server..This.is.generally.a.bad. |
41b60 | 69 64 65 61 2e 00 47 69 76 65 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c | idea..Given.the.following.exampl |
41b80 | 65 20 77 65 20 68 61 76 65 20 6f 6e 65 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 | e.we.have.one.VyOS.router.acting |
41ba0 | 20 61 73 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 61 6e 64 20 61 6e 6f 74 68 65 72 20 56 | .as.OpenVPN.server.and.another.V |
41bc0 | 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 63 6c 69 | yOS.router.acting.as.OpenVPN.cli |
41be0 | 65 6e 74 2e 20 54 68 65 20 73 65 72 76 65 72 20 61 6c 73 6f 20 70 75 73 68 65 73 20 61 20 73 74 | ent..The.server.also.pushes.a.st |
41c00 | 61 74 69 63 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 4f 70 | atic.client.IP.address.to.the.Op |
41c20 | 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 52 65 6d 65 6d 62 65 72 2c 20 63 6c 69 65 6e 74 73 20 | enVPN.client..Remember,.clients. |
41c40 | 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 69 72 20 43 4e 20 61 74 | are.identified.using.their.CN.at |
41c60 | 74 72 69 62 75 74 65 20 69 6e 20 74 68 65 20 53 53 4c 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 | tribute.in.the.SSL.certificate.. |
41c80 | 47 6c 6f 61 62 61 6c 00 47 6c 6f 62 61 6c 20 41 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 | Gloabal.Global.Advanced.options. |
41ca0 | 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 20 46 69 | Global.Options.Global.Options.Fi |
41cc0 | 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 6c 6f 62 61 6c 20 6f 70 74 69 | rewall.Configuration.Global.opti |
41ce0 | 6f 6e 73 00 47 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 47 6c 6f 62 61 6c 20 73 65 74 | ons.Global.parameters.Global.set |
41d00 | 74 69 6e 67 73 00 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 00 47 72 61 74 75 69 74 6f 75 | tings.Graceful.Restart.Gratuitou |
41d20 | 73 20 41 52 50 00 47 72 6f 75 70 73 00 47 72 6f 75 70 73 20 6e 65 65 64 20 74 6f 20 68 61 76 65 | s.ARP.Groups.Groups.need.to.have |
41d40 | 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2e 20 45 76 65 6e 20 74 68 6f 75 67 68 20 73 6f 6d 65 20 | .unique.names..Even.though.some. |
41d60 | 63 6f 6e 74 61 69 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6f 74 68 65 72 | contain.IPv4.addresses.and.other |
41d80 | 73 20 63 6f 6e 74 61 69 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 79 20 73 | s.contain.IPv6.addresses,.they.s |
41da0 | 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2c 20 | till.need.to.have.unique.names,. |
41dc0 | 73 6f 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 61 70 70 65 6e 64 20 22 2d 76 34 22 20 | so.you.may.want.to.append."-v4". |
41de0 | 6f 72 20 22 2d 76 36 22 20 74 6f 20 79 6f 75 72 20 67 72 6f 75 70 20 6e 61 6d 65 73 2e 00 48 51 | or."-v6".to.your.group.names..HQ |
41e00 | 27 73 20 72 6f 75 74 65 72 20 72 65 71 75 69 72 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | 's.router.requires.the.following |
41e20 | 20 73 74 65 70 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 63 72 79 70 74 6f 20 6d 61 74 65 72 69 | .steps.to.generate.crypto.materi |
41e40 | 61 6c 73 20 66 6f 72 20 74 68 65 20 42 72 61 6e 63 68 20 31 3a 00 48 54 20 28 48 69 67 68 20 54 | als.for.the.Branch.1:.HT.(High.T |
41e60 | 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 6e | hroughput).capabilities.(802.11n |
41e80 | 29 00 48 54 54 50 20 41 50 49 00 48 54 54 50 20 62 61 73 65 64 20 73 65 72 76 69 63 65 73 00 48 | ).HTTP.API.HTTP.based.services.H |
41ea0 | 54 54 50 20 62 61 73 69 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 65 72 6e 61 6d | TTP.basic.authentication.usernam |
41ec0 | 65 00 48 54 54 50 20 63 6c 69 65 6e 74 00 48 54 54 50 2d 41 50 49 00 48 61 69 72 70 69 6e 20 4e | e.HTTP.client.HTTP-API.Hairpin.N |
41ee0 | 41 54 2f 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 00 48 61 6e 64 20 6f 75 74 20 70 72 65 66 69 | AT/NAT.Reflection.Hand.out.prefi |
41f00 | 78 65 73 20 6f 66 20 73 69 7a 65 20 60 3c 6c 65 6e 67 74 68 3e 60 20 74 6f 20 63 6c 69 65 6e 74 | xes.of.size.`<length>`.to.client |
41f20 | 73 20 69 6e 20 73 75 62 6e 65 74 20 60 3c 70 72 65 66 69 78 3e 60 20 77 68 65 6e 20 74 68 65 79 | s.in.subnet.`<prefix>`.when.they |
41f40 | 20 72 65 71 75 65 73 74 20 66 6f 72 20 70 72 65 66 69 78 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 | .request.for.prefix.delegation.. |
41f60 | 48 61 6e 64 6c 69 6e 67 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 00 48 61 76 69 6e 67 20 63 | Handling.and.monitoring.Having.c |
41f80 | 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 6f 66 20 49 4e 56 41 | ontrol.over.the.matching.of.INVA |
41fa0 | 4c 49 44 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 65 2e 67 2e 20 74 68 65 20 61 62 69 6c | LID.state.traffic,.e.g..the.abil |
41fc0 | 69 74 79 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 6c 6f 67 2c 20 69 73 20 61 6e 20 69 6d | ity.to.selectively.log,.is.an.im |
41fe0 | 70 6f 72 74 61 6e 74 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 20 74 6f 6f 6c 20 66 6f 72 | portant.troubleshooting.tool.for |
42000 | 20 6f 62 73 65 72 76 69 6e 67 20 62 72 6f 6b 65 6e 20 70 72 6f 74 6f 63 6f 6c 20 62 65 68 61 76 | .observing.broken.protocol.behav |
42020 | 69 6f 72 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 56 79 4f 53 20 64 6f 65 73 20 | ior..For.this.reason,.VyOS.does. |
42040 | 6e 6f 74 20 67 6c 6f 62 61 6c 6c 79 20 64 72 6f 70 20 69 6e 76 61 6c 69 64 20 73 74 61 74 65 20 | not.globally.drop.invalid.state. |
42060 | 74 72 61 66 66 69 63 2c 20 69 6e 73 74 65 61 64 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 6f 70 | traffic,.instead.allowing.the.op |
42080 | 65 72 61 74 6f 72 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e | erator.to.make.the.determination |
420a0 | 20 6f 6e 20 68 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 68 61 6e 64 6c 65 64 2e 00 | .on.how.the.traffic.is.handled.. |
420c0 | 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 00 48 65 61 6c 74 68 20 63 68 65 63 | Health.check.scripts.Health.chec |
420e0 | 6b 73 00 48 65 61 6c 74 68 2d 63 68 65 63 6b 00 48 65 72 65 20 61 72 65 20 73 6f 6d 65 20 65 78 | ks.Health-check.Here.are.some.ex |
42100 | 61 6d 70 6c 65 73 20 66 6f 72 20 61 70 70 6c 79 69 6e 67 20 61 20 72 75 6c 65 2d 73 65 74 20 74 | amples.for.applying.a.rule-set.t |
42120 | 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 48 65 72 65 20 69 73 20 61 20 73 65 63 6f 6e 64 20 | o.an.interface.Here.is.a.second. |
42140 | 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 74 75 6e 6e 65 6c 20 6f | example.of.a.dual-stack.tunnel.o |
42160 | 76 65 72 20 49 50 76 36 20 62 65 74 77 65 65 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 | ver.IPv6.between.a.VyOS.router.a |
42180 | 6e 64 20 61 20 4c 69 6e 75 78 20 68 6f 73 74 20 75 73 69 6e 67 20 73 79 73 74 65 6d 64 2d 6e 65 | nd.a.Linux.host.using.systemd-ne |
421a0 | 74 77 6f 72 6b 64 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 3a 61 62 62 72 | tworkd..Here.is.an.example.:abbr |
421c0 | 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 76 61 | :`NET.(Network.Entity.Title)`.va |
421e0 | 6c 75 65 3a 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 72 6f 75 74 65 2d 6d 61 | lue:.Here.is.an.example.route-ma |
42200 | 70 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 74 20 | p.to.apply.to.routes.learned.at. |
42220 | 69 6d 70 6f 72 74 2e 20 49 6e 20 74 68 69 73 20 66 69 6c 74 65 72 20 77 65 20 72 65 6a 65 63 74 | import..In.this.filter.we.reject |
42240 | 20 70 72 65 66 69 78 65 73 20 77 69 74 68 20 74 68 65 20 73 74 61 74 65 20 60 69 6e 76 61 6c 69 | .prefixes.with.the.state.`invali |
42260 | 64 60 2c 20 61 6e 64 20 73 65 74 20 61 20 68 69 67 68 65 72 20 60 6c 6f 63 61 6c 2d 70 72 65 66 | d`,.and.set.a.higher.`local-pref |
42280 | 65 72 65 6e 63 65 60 20 69 66 20 74 68 65 20 70 72 65 66 69 78 20 69 73 20 52 50 4b 49 20 60 76 | erence`.if.the.prefix.is.RPKI.`v |
422a0 | 61 6c 69 64 60 20 72 61 74 68 65 72 20 74 68 61 6e 20 6d 65 72 65 6c 79 20 60 6e 6f 74 66 6f 75 | alid`.rather.than.merely.`notfou |
422c0 | 6e 64 60 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 77 65 72 65 20 6d 75 6c | nd`..Here.is.an.example.were.mul |
422e0 | 74 69 70 6c 65 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 3a 00 48 65 72 65 20 69 | tiple.groups.are.created:.Here.i |
42300 | 73 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 73 68 6f 77 69 6e 67 20 74 68 65 | s.the.routing.tables.showing.the |
42320 | 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 6c 61 62 65 6c 20 6f 70 65 72 | .MPLS.segment.routing.label.oper |
42340 | 61 74 69 6f 6e 73 3a 00 48 65 72 65 20 77 65 20 70 72 6f 76 69 64 65 20 74 77 6f 20 65 78 61 6d | ations:.Here.we.provide.two.exam |
42360 | 70 6c 65 73 20 6f 6e 20 68 6f 77 20 74 6f 20 61 70 70 6c 79 20 4e 41 54 20 4c 6f 61 64 20 42 61 | ples.on.how.to.apply.NAT.Load.Ba |
42380 | 6c 61 6e 63 65 2e 00 48 65 72 65 27 73 20 61 6e 20 65 78 74 72 61 63 74 20 6f 66 20 61 20 73 69 | lance..Here's.an.extract.of.a.si |
423a0 | 6d 70 6c 65 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 | mple.1-to-1.NAT.configuration.wi |
423c0 | 74 68 20 6f 6e 65 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 6f 6e 65 20 65 78 74 65 72 6e 61 6c | th.one.internal.and.one.external |
423e0 | 20 69 6e 74 65 72 66 61 63 65 3a 00 48 65 72 65 27 73 20 6f 6e 65 20 65 78 61 6d 70 6c 65 20 6f | .interface:.Here's.one.example.o |
42400 | 66 20 61 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 61 6e 20 41 | f.a.network.environment.for.an.A |
42420 | 53 50 2e 20 54 68 65 20 41 53 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 20 61 6c 6c 20 63 6f | SP..The.ASP.requests.that.all.co |
42440 | 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 63 6f 6d 70 61 6e 79 20 73 68 6f 75 | nnections.from.this.company.shou |
42460 | 6c 64 20 63 6f 6d 65 20 66 72 6f 6d 20 31 37 32 2e 32 39 2e 34 31 2e 38 39 20 2d 20 61 6e 20 61 | ld.come.from.172.29.41.89.-.an.a |
42480 | 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 41 | ddress.that.is.assigned.by.the.A |
424a0 | 53 50 20 61 6e 64 20 6e 6f 74 20 69 6e 20 75 73 65 20 61 74 20 74 68 65 20 63 75 73 74 6f 6d 65 | SP.and.not.in.use.at.the.custome |
424c0 | 72 20 73 69 74 65 2e 00 48 65 72 65 27 73 20 74 68 65 20 49 50 20 72 6f 75 74 65 73 20 74 68 61 | r.site..Here's.the.IP.routes.tha |
424e0 | 74 20 61 72 65 20 70 6f 70 75 6c 61 74 65 64 2e 20 4a 75 73 74 20 74 68 65 20 6c 6f 6f 70 62 61 | t.are.populated..Just.the.loopba |
42500 | 63 6b 3a 00 48 65 72 65 27 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 75 70 3a 00 48 65 72 | ck:.Here's.the.neighbors.up:.Her |
42520 | 65 27 73 20 74 68 65 20 72 6f 75 74 65 73 3a 00 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 | e's.the.routes:.Hewlett-Packard. |
42540 | 63 61 6c 6c 20 69 74 20 53 6f 75 72 63 65 2d 50 6f 72 74 20 66 69 6c 74 65 72 69 6e 67 20 6f 72 | call.it.Source-Port.filtering.or |
42560 | 20 70 6f 72 74 2d 69 73 6f 6c 61 74 69 6f 6e 00 48 69 67 68 00 48 69 67 68 20 61 76 61 69 6c 61 | .port-isolation.High.High.availa |
42580 | 62 69 6c 69 74 79 00 48 6f 6d 65 20 55 73 65 72 73 00 48 6f 70 20 63 6f 75 6e 74 20 66 69 65 6c | bility.Home.Users.Hop.count.fiel |
425a0 | 64 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 52 41 20 70 61 63 6b 65 74 73 00 48 6f 73 | d.of.the.outgoing.RA.packets.Hos |
425c0 | 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 48 6f 73 74 20 6e 61 6d 65 00 48 6f 73 74 20 73 70 65 | t.Information.Host.name.Host.spe |
425e0 | 63 69 66 69 63 20 6d 61 70 70 69 6e 67 20 73 68 61 6c 6c 20 62 65 20 6e 61 6d 65 64 20 60 60 63 | cific.mapping.shall.be.named.``c |
42600 | 6c 69 65 6e 74 31 60 60 00 48 6f 73 74 6e 61 6d 65 00 48 6f 77 20 61 6e 20 49 50 20 61 64 64 72 | lient1``.Hostname.How.an.IP.addr |
42620 | 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 | ess.is.assigned.to.an.interface. |
42640 | 69 6e 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2e 20 54 68 | in.:ref:`ethernet-interface`..Th |
42660 | 69 73 20 73 65 63 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 73 74 61 74 69 63 61 6c | is.section.shows.how.to.statical |
42680 | 6c 79 20 6d 61 70 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 68 6f 73 74 6e 61 | ly.map.an.IP.address.to.a.hostna |
426a0 | 6d 65 20 66 6f 72 20 6c 6f 63 61 6c 20 28 6d 65 61 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 56 79 | me.for.local.(meaning.on.this.Vy |
426c0 | 4f 53 20 69 6e 73 74 61 6e 63 65 29 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 | OS.instance).name.resolution..Th |
426e0 | 69 73 20 69 73 20 74 68 65 20 56 79 4f 53 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 60 2f 65 | is.is.the.VyOS.equivalent.to.`/e |
42700 | 74 63 2f 68 6f 73 74 73 60 20 66 69 6c 65 20 65 6e 74 72 69 65 73 2e 00 48 6f 77 20 74 6f 20 63 | tc/hosts`.file.entries..How.to.c |
42720 | 6f 6e 66 69 67 75 72 65 20 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 00 48 6f 77 20 74 6f 20 6d 61 | onfigure.Event.Handler.How.to.ma |
42740 | 6b 65 20 69 74 20 77 6f 72 6b 00 48 6f 77 65 76 65 72 2c 20 6e 6f 77 20 79 6f 75 20 6e 65 65 64 | ke.it.work.However,.now.you.need |
42760 | 20 74 6f 20 6d 61 6b 65 20 49 50 73 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 | .to.make.IPsec.work.with.dynamic |
42780 | 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 20 73 69 64 65 2e 20 54 68 65 20 74 72 69 63 6b 79 | .address.on.one.side..The.tricky |
427a0 | 20 70 61 72 74 20 69 73 20 74 68 61 74 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 | .part.is.that.pre-shared.secret. |
427c0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 69 74 68 | authentication.doesn't.work.with |
427e0 | 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 2c 20 73 6f 20 77 65 27 6c 6c 20 68 61 76 65 20 | .dynamic.address,.so.we'll.have. |
42800 | 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 69 6e 63 65 20 | to.use.RSA.keys..However,.since. |
42820 | 56 79 4f 53 20 31 2e 34 2c 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 76 65 72 69 | VyOS.1.4,.it.is.possible.to.veri |
42840 | 66 79 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e | fy.self-signed.certificates.usin |
42860 | 67 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 48 6f 77 65 | g.certificate.fingerprints..Howe |
42880 | 76 65 72 2c 20 73 70 6c 69 74 2d 74 75 6e 6e 65 6c 69 6e 67 20 63 61 6e 20 62 65 20 61 63 68 69 | ver,.split-tunneling.can.be.achi |
428a0 | 65 76 65 64 20 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 75 | eved.by.specifying.the.remote.su |
428c0 | 62 6e 65 74 73 2e 20 54 68 69 73 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 74 72 | bnets..This.ensures.that.only.tr |
428e0 | 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 | affic.destined.for.the.remote.si |
42900 | 74 65 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 41 6c 6c 20 | te.is.sent.over.the.tunnel..All. |
42920 | 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 69 73 20 75 6e 61 66 66 65 63 74 65 64 2e 00 48 75 61 | other.traffic.is.unaffected..Hua |
42940 | 77 65 69 20 4d 45 39 30 39 73 2d 31 32 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 | wei.ME909s-120.miniPCIe.card.(LT |
42960 | 45 29 00 48 75 61 77 65 69 20 4d 45 39 30 39 75 2d 35 32 31 20 6d 69 6e 69 50 43 49 65 20 63 61 | E).Huawei.ME909u-521.miniPCIe.ca |
42980 | 72 64 20 28 4c 54 45 29 00 48 75 62 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 | rd.(LTE).Hub.IEEE.802.1X/MACsec. |
429a0 | 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 | pre-shared.key.mode..This.allows |
429c0 | 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 4d 41 43 73 65 63 20 77 69 74 68 20 61 20 70 72 65 2d 73 | .configuring.MACsec.with.a.pre-s |
429e0 | 68 61 72 65 64 20 6b 65 79 20 75 73 69 6e 67 20 61 20 3a 61 62 62 72 3a 60 43 41 4b 20 28 4d 41 | hared.key.using.a.:abbr:`CAK.(MA |
42a00 | 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6b 65 | Csec.connectivity.association.ke |
42a20 | 79 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 | y)`.and.:abbr:`CKN.(MACsec.conne |
42a40 | 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 20 70 61 69 72 2e | ctivity.association.name)`.pair. |
42a60 | 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 | .IEEE.802.1X/MACsec.replay.prote |
42a80 | 63 74 69 6f 6e 20 77 69 6e 64 6f 77 2e 20 54 68 69 73 20 64 65 74 65 72 6d 69 6e 65 73 20 61 20 | ction.window..This.determines.a. |
42aa0 | 77 69 6e 64 6f 77 20 69 6e 20 77 68 69 63 68 20 72 65 70 6c 61 79 20 69 73 20 74 6f 6c 65 72 61 | window.in.which.replay.is.tolera |
42ac0 | 74 65 64 2c 20 74 6f 20 61 6c 6c 6f 77 20 72 65 63 65 69 70 74 20 6f 66 20 66 72 61 6d 65 73 20 | ted,.to.allow.receipt.of.frames. |
42ae0 | 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d 69 73 6f 72 64 65 72 65 64 20 62 79 20 74 68 65 | that.have.been.misordered.by.the |
42b00 | 20 6e 65 74 77 6f 72 6b 2e 00 49 45 45 45 20 38 30 32 2e 31 61 64 5f 20 77 61 73 20 61 6e 20 45 | .network..IEEE.802.1ad_.was.an.E |
42b20 | 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 69 6e 66 6f | thernet.networking.standard.info |
42b40 | 72 6d 61 6c 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 51 69 6e 51 20 61 73 20 61 6e 20 61 6d 65 6e 64 | rmally.known.as.QinQ.as.an.amend |
42b60 | 6d 65 6e 74 20 74 6f 20 49 45 45 45 20 73 74 61 6e 64 61 72 64 20 38 30 32 2e 31 71 20 56 4c 41 | ment.to.IEEE.standard.802.1q.VLA |
42b80 | 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e | N.interfaces.as.described.above. |
42ba0 | 20 38 30 32 2e 31 61 64 20 77 61 73 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 | .802.1ad.was.incorporated.into.t |
42bc0 | 68 65 20 62 61 73 65 20 38 30 32 2e 31 71 5f 20 73 74 61 6e 64 61 72 64 20 69 6e 20 32 30 31 31 | he.base.802.1q_.standard.in.2011 |
42be0 | 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 | ..The.technique.is.also.known.as |
42c00 | 20 70 72 6f 76 69 64 65 72 20 62 72 69 64 67 69 6e 67 2c 20 53 74 61 63 6b 65 64 20 56 4c 41 4e | .provider.bridging,.Stacked.VLAN |
42c20 | 73 2c 20 6f 72 20 73 69 6d 70 6c 79 20 51 69 6e 51 20 6f 72 20 51 2d 69 6e 2d 51 2e 20 22 51 2d | s,.or.simply.QinQ.or.Q-in-Q.."Q- |
42c40 | 69 6e 2d 51 22 20 63 61 6e 20 66 6f 72 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 73 20 | in-Q".can.for.supported.devices. |
42c60 | 61 70 70 6c 79 20 74 6f 20 43 2d 74 61 67 20 73 74 61 63 6b 69 6e 67 20 6f 6e 20 43 2d 74 61 67 | apply.to.C-tag.stacking.on.C-tag |
42c80 | 20 28 45 74 68 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 31 30 30 29 2e 00 49 45 45 45 20 | .(Ethernet.Type.=.0x8100)..IEEE. |
42ca0 | 38 30 32 2e 31 71 5f 2c 20 6f 66 74 65 6e 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 44 6f | 802.1q_,.often.referred.to.as.Do |
42cc0 | 74 31 71 2c 20 69 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 | t1q,.is.the.networking.standard. |
42ce0 | 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e | that.supports.virtual.LANs.(VLAN |
42d00 | 73 29 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 30 32 2e 33 20 45 74 68 65 72 6e 65 74 20 6e 65 74 | s).on.an.IEEE.802.3.Ethernet.net |
42d20 | 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 64 65 66 69 6e 65 73 20 61 20 73 79 73 | work..The.standard.defines.a.sys |
42d40 | 74 65 6d 20 6f 66 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 66 6f 72 20 45 74 68 65 72 6e 65 74 | tem.of.VLAN.tagging.for.Ethernet |
42d60 | 20 66 72 61 6d 65 73 20 61 6e 64 20 74 68 65 20 61 63 63 6f 6d 70 61 6e 79 69 6e 67 20 70 72 6f | .frames.and.the.accompanying.pro |
42d80 | 63 65 64 75 72 65 73 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 62 72 69 64 67 65 73 20 61 6e | cedures.to.be.used.by.bridges.an |
42da0 | 64 20 73 77 69 74 63 68 65 73 20 69 6e 20 68 61 6e 64 6c 69 6e 67 20 73 75 63 68 20 66 72 61 6d | d.switches.in.handling.such.fram |
42dc0 | 65 73 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 61 6c 73 6f 20 63 6f 6e 74 61 69 6e 73 20 70 | es..The.standard.also.contains.p |
42de0 | 72 6f 76 69 73 69 6f 6e 73 20 66 6f 72 20 61 20 71 75 61 6c 69 74 79 2d 6f 66 2d 73 65 72 76 69 | rovisions.for.a.quality-of-servi |
42e00 | 63 65 20 70 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 63 6f 6d 6d 6f 6e 6c | ce.prioritization.scheme.commonl |
42e20 | 79 20 6b 6e 6f 77 6e 20 61 73 20 49 45 45 45 20 38 30 32 2e 31 70 20 61 6e 64 20 64 65 66 69 6e | y.known.as.IEEE.802.1p.and.defin |
42e40 | 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 41 74 74 72 69 62 75 74 65 20 52 65 67 69 73 74 72 | es.the.Generic.Attribute.Registr |
42e60 | 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 2e 00 49 45 54 46 20 70 75 62 6c 69 73 68 65 64 20 3a | ation.Protocol..IETF.published.: |
42e80 | 72 66 63 3a 60 36 35 39 38 60 2c 20 64 65 74 61 69 6c 69 6e 67 20 61 20 73 68 61 72 65 64 20 61 | rfc:`6598`,.detailing.a.shared.a |
42ea0 | 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 75 73 65 20 69 6e 20 49 53 50 20 43 47 4e 20 | ddress.space.for.use.in.ISP.CGN. |
42ec0 | 64 65 70 6c 6f 79 6d 65 6e 74 73 20 74 68 61 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 74 68 65 20 | deployments.that.can.handle.the. |
42ee0 | 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 65 73 20 6f 63 63 75 72 72 69 6e 67 20 | same.network.prefixes.occurring. |
42f00 | 62 6f 74 68 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 | both.on.inbound.and.outbound.int |
42f20 | 65 72 66 61 63 65 73 2e 20 41 52 49 4e 20 72 65 74 75 72 6e 65 64 20 61 64 64 72 65 73 73 20 73 | erfaces..ARIN.returned.address.s |
42f40 | 70 61 63 65 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 | pace.to.the.:abbr:`IANA.(Interne |
42f60 | 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 | t.Assigned.Numbers.Authority)`.f |
42f80 | 6f 72 20 74 68 69 73 20 61 6c 6c 6f 63 61 74 69 6f 6e 2e 00 49 47 4d 50 20 2d 20 49 6e 74 65 72 | or.this.allocation..IGMP.-.Inter |
42fa0 | 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 00 49 | net.Group.Management.Protocol).I |
42fc0 | 47 4d 50 20 50 72 6f 78 79 00 49 4b 45 20 28 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 | GMP.Proxy.IKE.(Internet.Key.Exch |
42fe0 | 61 6e 67 65 29 20 41 74 74 72 69 62 75 74 65 73 00 49 4b 45 20 50 68 61 73 65 3a 00 49 4b 45 20 | ange).Attributes.IKE.Phase:.IKE. |
43000 | 70 65 72 66 6f 72 6d 73 20 6d 75 74 75 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 | performs.mutual.authentication.b |
43020 | 65 74 77 65 65 6e 20 74 77 6f 20 70 61 72 74 69 65 73 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 | etween.two.parties.and.establish |
43040 | 65 73 20 61 6e 20 49 4b 45 20 73 65 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 28 | es.an.IKE.security.association.( |
43060 | 53 41 29 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 | SA).that.includes.shared.secret. |
43080 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 | information.that.can.be.used.to. |
430a0 | 65 66 66 69 63 69 65 6e 74 6c 79 20 65 73 74 61 62 6c 69 73 68 20 53 41 73 20 66 6f 72 20 45 6e | efficiently.establish.SAs.for.En |
430c0 | 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 20 28 45 53 | capsulating.Security.Payload.(ES |
430e0 | 50 29 20 6f 72 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 48 65 61 64 65 72 20 28 41 48 29 | P).or.Authentication.Header.(AH) |
43100 | 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 6c 67 6f | .and.a.set.of.cryptographic.algo |
43120 | 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 53 41 73 20 74 6f 20 | rithms.to.be.used.by.the.SAs.to. |
43140 | 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 65 79 20 63 61 | protect.the.traffic.that.they.ca |
43160 | 72 72 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 | rry..https://datatracker.ietf.or |
43180 | 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 35 39 39 36 00 49 4b 45 76 31 00 49 4b 45 76 32 00 49 | g/doc/html/rfc5996.IKEv1.IKEv2.I |
431a0 | 4b 45 76 32 20 49 50 53 65 63 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 72 65 6d 6f 74 65 2d | KEv2.IPSec.road-warriors.remote- |
431c0 | 61 63 63 65 73 73 20 56 50 4e 00 49 50 00 49 50 20 61 64 64 72 65 73 73 00 49 50 20 61 64 64 72 | access.VPN.IP.IP.address.IP.addr |
431e0 | 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 31 30 30 60 60 20 73 68 61 6c 6c 20 62 65 20 73 | ess.``192.168.1.100``.shall.be.s |
43200 | 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 20 74 6f 20 63 6c 69 65 6e 74 20 6e 61 6d 65 64 | tatically.mapped.to.client.named |
43220 | 20 60 60 63 6c 69 65 6e 74 31 60 60 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 | .``client1``.IP.address.``192.16 |
43240 | 38 2e 32 2e 31 2f 32 34 60 60 00 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 20 73 | 8.2.1/24``.IP.address.for.DHCP.s |
43260 | 65 72 76 65 72 20 69 64 65 6e 74 69 66 69 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 4e | erver.identifier.IP.address.of.N |
43280 | 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 50 4f 50 33 20 73 65 72 | TP.server.IP.address.of.POP3.ser |
432a0 | 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 53 4d 54 50 20 73 65 72 76 65 72 00 49 50 | ver.IP.address.of.SMTP.server.IP |
432c0 | 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 | .address.of.route.to.match,.base |
432e0 | 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | d.on.access-list..IP.address.of. |
43300 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d | route.to.match,.based.on.prefix- |
43320 | 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 | list..IP.address.of.route.to.mat |
43340 | 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 | ch,.based.on.specified.prefix-le |
43360 | 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 | ngth..Note.that.this.can.be.used |
43380 | 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 | .for.kernel.routes.only..Do.not. |
433a0 | 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 | apply.to.the.routes.of.dynamic.r |
433c0 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c | outing.protocols.(e.g..BGP,.RIP, |
433e0 | 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 | .OSFP),.as.this.can.lead.to.unex |
43400 | 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 2e 2e 00 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 65 | pected.results...IP.address.to.e |
43420 | 78 63 6c 75 64 65 20 66 72 6f 6d 20 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 49 50 20 | xclude.from.DHCP.lease.range.IP. |
43440 | 61 64 64 72 65 73 73 65 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 66 6f 72 20 77 68 69 63 68 20 | addresses.or.networks.for.which. |
43460 | 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 6e 6f 74 | local.conntrack.entries.will.not |
43480 | 20 62 65 20 73 79 6e 63 65 64 00 49 50 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 | .be.synced.IP.management.address |
434a0 | 00 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e 67 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 | .IP.masquerading.is.a.technique. |
434c0 | 74 68 61 74 20 68 69 64 65 73 20 61 6e 20 65 6e 74 69 72 65 20 49 50 20 61 64 64 72 65 73 73 20 | that.hides.an.entire.IP.address. |
434e0 | 73 70 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 70 72 69 | space,.usually.consisting.of.pri |
43500 | 76 61 74 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 62 65 68 69 6e 64 20 61 20 73 69 6e 67 | vate.IP.addresses,.behind.a.sing |
43520 | 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 61 6e 6f 74 68 65 72 2c 20 75 73 75 61 6c 6c | le.IP.address.in.another,.usuall |
43540 | 79 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 20 54 68 65 20 68 69 64 64 | y.public.address.space..The.hidd |
43560 | 65 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 63 68 61 6e 67 65 64 20 69 6e 74 6f 20 61 20 | en.addresses.are.changed.into.a. |
43580 | 73 69 6e 67 6c 65 20 28 70 75 62 6c 69 63 29 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 | single.(public).IP.address.as.th |
435a0 | 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 | e.source.address.of.the.outgoing |
435c0 | 20 49 50 20 70 61 63 6b 65 74 73 20 73 6f 20 74 68 65 79 20 61 70 70 65 61 72 20 61 73 20 6f 72 | .IP.packets.so.they.appear.as.or |
435e0 | 69 67 69 6e 61 74 69 6e 67 20 6e 6f 74 20 66 72 6f 6d 20 74 68 65 20 68 69 64 64 65 6e 20 68 6f | iginating.not.from.the.hidden.ho |
43600 | 73 74 20 62 75 74 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 69 | st.but.from.the.routing.device.i |
43620 | 74 73 65 6c 66 2e 20 42 65 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 6f 70 75 6c 61 72 69 74 79 | tself..Because.of.the.popularity |
43640 | 20 6f 66 20 74 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 74 6f 20 63 6f 6e 73 65 72 76 65 20 49 | .of.this.technique.to.conserve.I |
43660 | 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2c 20 74 68 65 20 74 65 72 6d 20 4e 41 54 20 | Pv4.address.space,.the.term.NAT. |
43680 | 68 61 73 20 62 65 63 6f 6d 65 20 76 69 72 74 75 61 6c 6c 79 20 73 79 6e 6f 6e 79 6d 6f 75 73 20 | has.become.virtually.synonymous. |
436a0 | 77 69 74 68 20 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e 67 2e 00 49 50 20 6e 65 78 74 2d 68 6f | with.IP.masquerading..IP.next-ho |
436c0 | 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 | p.of.route.to.match,.based.on.ac |
436e0 | 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 | cess-list..IP.next-hop.of.route. |
43700 | 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 69 70 20 61 64 64 72 65 73 73 2e 00 49 | to.match,.based.on.ip.address..I |
43720 | 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 | P.next-hop.of.route.to.match,.ba |
43740 | 73 65 64 20 6f 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 2e 00 49 50 20 6e 65 78 74 2d 68 6f | sed.on.prefix.length..IP.next-ho |
43760 | 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 | p.of.route.to.match,.based.on.pr |
43780 | 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 | efix-list..IP.next-hop.of.route. |
437a0 | 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 74 79 70 65 2e 00 49 50 20 70 72 65 63 | to.match,.based.on.type..IP.prec |
437c0 | 65 64 65 6e 63 65 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 37 39 31 60 3a | edence.as.defined.in.:rfc:`791`: |
437e0 | 00 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 35 30 20 28 45 53 50 29 00 49 50 20 | .IP.protocol.number.50.(ESP).IP. |
43800 | 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 | route.source.of.route.to.match,. |
43820 | 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 72 6f 75 74 65 20 73 | based.on.access-list..IP.route.s |
43840 | 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f | ource.of.route.to.match,.based.o |
43860 | 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 36 49 50 36 00 49 50 49 50 00 49 50 49 50 36 | n.prefix-list..IP6IP6.IPIP.IPIP6 |
43880 | 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 53 50 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 | .IPSec.IKE.and.ESP.IPSec.IKE.and |
438a0 | 20 45 53 50 20 47 72 6f 75 70 73 3b 00 49 50 53 65 63 20 49 4b 45 76 32 20 52 65 6d 6f 74 65 20 | .ESP.Groups;.IPSec.IKEv2.Remote. |
438c0 | 41 63 63 65 73 73 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 | Access.VPN.IPSec.IKEv2.site2site |
438e0 | 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 20 28 | .VPN.IPSec.IKEv2.site2site.VPN.( |
43900 | 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f 2f 76 70 6e 5f 73 32 73 5f 69 6b 65 76 32 2e 64 | source../draw.io/vpn_s2s_ikev2.d |
43920 | 72 61 77 69 6f 29 00 49 50 53 65 63 20 56 50 4e 20 54 75 6e 6e 65 6c 73 00 49 50 53 65 63 20 56 | rawio).IPSec.VPN.Tunnels.IPSec.V |
43940 | 50 4e 20 74 75 6e 6e 65 6c 73 2e 00 49 50 53 65 63 3a 00 49 50 6f 45 20 53 65 72 76 65 72 00 49 | PN.tunnels..IPSec:.IPoE.Server.I |
43960 | 50 6f 45 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 20 6f 6e 20 64 69 66 66 65 72 65 6e | PoE.can.be.configure.on.differen |
43980 | 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 | t.interfaces,.it.will.depend.on. |
439a0 | 65 61 63 68 20 73 70 65 63 69 66 69 63 20 73 69 74 75 61 74 69 6f 6e 20 77 68 69 63 68 20 69 6e | each.specific.situation.which.in |
439c0 | 74 65 72 66 61 63 65 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 49 50 6f 45 20 74 6f 20 63 6c 69 | terface.will.provide.IPoE.to.cli |
439e0 | 65 6e 74 73 2e 20 54 68 65 20 63 6c 69 65 6e 74 73 20 6d 61 63 20 61 64 64 72 65 73 73 20 61 6e | ents..The.clients.mac.address.an |
43a00 | 64 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 62 65 69 6e | d.the.incoming.interface.is.bein |
43a20 | 67 20 75 73 65 64 20 61 73 20 63 6f 6e 74 72 6f 6c 20 70 61 72 61 6d 65 74 65 72 2c 20 74 6f 20 | g.used.as.control.parameter,.to. |
43a40 | 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 20 63 6c 69 65 6e 74 2e 00 49 50 6f 45 20 69 73 20 61 | authenticate.a.client..IPoE.is.a |
43a60 | 20 6d 65 74 68 6f 64 20 6f 66 20 64 65 6c 69 76 65 72 69 6e 67 20 61 6e 20 49 50 20 70 61 79 6c | .method.of.delivering.an.IP.payl |
43a80 | 6f 61 64 20 6f 76 65 72 20 61 6e 20 45 74 68 65 72 6e 65 74 2d 62 61 73 65 64 20 61 63 63 65 73 | oad.over.an.Ethernet-based.acces |
43aa0 | 73 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 6e 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 75 | s.network.or.an.access.network.u |
43ac0 | 73 69 6e 67 20 62 72 69 64 67 65 64 20 45 74 68 65 72 6e 65 74 20 6f 76 65 72 20 41 73 79 6e 63 | sing.bridged.Ethernet.over.Async |
43ae0 | 68 72 6f 6e 6f 75 73 20 54 72 61 6e 73 66 65 72 20 4d 6f 64 65 20 28 41 54 4d 29 20 77 69 74 68 | hronous.Transfer.Mode.(ATM).with |
43b00 | 6f 75 74 20 75 73 69 6e 67 20 50 50 50 6f 45 2e 20 49 74 20 64 69 72 65 63 74 6c 79 20 65 6e 63 | out.using.PPPoE..It.directly.enc |
43b20 | 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 49 50 20 64 61 74 61 67 72 61 6d 73 20 69 6e 20 45 74 | apsulates.the.IP.datagrams.in.Et |
43b40 | 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 6e 64 61 72 | hernet.frames,.using.the.standar |
43b60 | 64 20 3a 72 66 63 3a 60 38 39 34 60 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2e 00 49 50 6f 45 | d.:rfc:`894`.encapsulation..IPoE |
43b80 | 20 73 65 72 76 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 | .server.will.listen.on.interface |
43ba0 | 73 20 65 74 68 31 2e 35 30 20 61 6e 64 20 65 74 68 31 2e 35 31 00 49 50 73 65 63 00 49 50 73 65 | s.eth1.50.and.eth1.51.IPsec.IPse |
43bc0 | 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 69 6e 67 20 47 52 45 00 49 50 76 34 00 49 50 76 34 20 | c.policy.matching.GRE.IPv4.IPv4. |
43be0 | 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 34 20 61 64 64 72 | Firewall.Configuration.IPv4.addr |
43c00 | 65 73 73 20 6f 66 20 6e 65 78 74 20 62 6f 6f 74 73 74 72 61 70 20 73 65 72 76 65 72 00 49 50 76 | ess.of.next.bootstrap.server.IPv |
43c20 | 34 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e | 4.address.of.router.on.the.clien |
43c40 | 74 27 73 20 73 75 62 6e 65 74 00 49 50 76 34 20 6f 72 20 49 50 76 36 20 73 6f 75 72 63 65 20 61 | t's.subnet.IPv4.or.IPv6.source.a |
43c60 | 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 70 61 63 6b 65 74 73 00 49 50 76 34 20 70 | ddress.of.NetFlow.packets.IPv4.p |
43c80 | 65 65 72 69 6e 67 00 49 50 76 34 20 72 65 6c 61 79 00 49 50 76 34 20 72 6f 75 74 65 20 61 6e 64 | eering.IPv4.relay.IPv4.route.and |
43ca0 | 20 49 50 76 36 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 | .IPv6.route.policies.are.defined |
43cc0 | 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 72 6f 75 74 65 20 70 6f | .in.this.section..These.route.po |
43ce0 | 6c 69 63 69 65 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f | licies.can.then.be.associated.to |
43d00 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 49 50 76 34 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 | .interfaces..IPv4.route.source:. |
43d20 | 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 | bgp,.connected,.eigrp,.isis,.ker |
43d40 | 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 49 50 | nel,.nhrp,.ospf,.rip,.static..IP |
43d60 | 76 34 20 73 65 72 76 65 72 00 49 50 76 34 2f 49 50 76 36 20 72 65 6d 6f 74 65 20 61 64 64 72 65 | v4.server.IPv4/IPv6.remote.addre |
43d80 | 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 2e 20 41 6c 74 65 72 6e 61 74 | ss.of.the.VXLAN.tunnel..Alternat |
43da0 | 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 | ive.to.multicast,.the.remote.IPv |
43dc0 | 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 63 61 6e 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e | 4/IPv6.address.can.set.directly. |
43de0 | 00 49 50 76 36 00 49 50 76 36 20 41 63 63 65 73 73 20 4c 69 73 74 00 49 50 76 36 20 41 64 76 61 | .IPv6.IPv6.Access.List.IPv6.Adva |
43e00 | 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 49 50 76 36 20 44 48 43 50 76 36 2d 50 44 20 45 78 61 6d | nced.Options.IPv6.DHCPv6-PD.Exam |
43e20 | 70 6c 65 00 49 50 76 36 20 44 4e 53 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 70 74 69 6f | ple.IPv6.DNS.addresses.are.optio |
43e40 | 6e 61 6c 2e 00 49 50 76 36 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | nal..IPv6.Firewall.Configuration |
43e60 | 00 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 00 49 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 | .IPv6.Multicast.IPv6.Prefix.Dele |
43e80 | 67 61 74 69 6f 6e 00 49 50 76 36 20 50 72 65 66 69 78 20 4c 69 73 74 73 00 49 50 76 36 20 53 4c | gation.IPv6.Prefix.Lists.IPv6.SL |
43ea0 | 41 41 43 20 61 6e 64 20 49 41 2d 50 44 00 49 50 76 36 20 54 43 50 20 66 69 6c 74 65 72 73 20 77 | AAC.and.IA-PD.IPv6.TCP.filters.w |
43ec0 | 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 77 69 74 68 | ill.only.match.IPv6.packets.with |
43ee0 | 20 6e 6f 20 68 65 61 64 65 72 20 65 78 74 65 6e 73 69 6f 6e 2c 20 73 65 65 20 68 74 74 70 73 3a | .no.header.extension,.see.https: |
43f00 | 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 49 50 76 36 5f 70 61 63 | //en.wikipedia.org/wiki/IPv6_pac |
43f20 | 6b 65 74 23 45 78 74 65 6e 73 69 6f 6e 5f 68 65 61 64 65 72 73 00 49 50 76 36 20 61 64 64 72 65 | ket#Extension_headers.IPv6.addre |
43f40 | 73 73 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 30 31 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 | ss.``2001:db8::101``.shall.be.st |
43f60 | 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 | atically.mapped.IPv6.address.of. |
43f80 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 61 63 | route.to.match,.based.on.IPv6.ac |
43fa0 | 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 | cess-list..IPv6.address.of.route |
43fc0 | 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d | .to.match,.based.on.IPv6.prefix- |
43fe0 | 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d | list..IPv6.address.of.route.to.m |
44000 | 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d | atch,.based.on.specified.prefix- |
44020 | 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 | length..Note.that.this.can.be.us |
44040 | 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f | ed.for.kernel.routes.only..Do.no |
44060 | 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 | t.apply.to.the.routes.of.dynamic |
44080 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 | .routing.protocols.(e.g..BGP,.RI |
440a0 | 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e | P,.OSFP),.as.this.can.lead.to.un |
440c0 | 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 2e 2e 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 | expected.results...IPv6.client's |
440e0 | 20 70 72 65 66 69 78 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 20 61 73 73 | .prefix.IPv6.client's.prefix.ass |
44100 | 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 64 65 66 61 75 6c 74 20 63 6c 69 65 6e 74 27 73 20 70 6f | ignment.IPv6.default.client's.po |
44120 | 6f 6c 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 70 65 65 72 69 6e 67 00 49 50 76 36 20 | ol.assignment.IPv6.peering.IPv6. |
44140 | 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 30 3a 31 30 31 3a 3a 2f 36 34 60 60 20 73 | prefix.``2001:db8:0:101::/64``.s |
44160 | 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 70 | hall.be.statically.mapped.IPv6.p |
44180 | 72 65 66 69 78 2e 00 49 50 76 36 20 72 65 6c 61 79 00 49 50 76 36 20 72 6f 75 74 65 20 73 6f 75 | refix..IPv6.relay.IPv6.route.sou |
441a0 | 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 | rce:.bgp,.connected,.eigrp,.isis |
441c0 | 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 | ,.kernel,.nhrp,.ospfv3,.ripng,.s |
441e0 | 74 61 74 69 63 2e 00 49 50 76 36 20 73 65 72 76 65 72 00 49 50 76 36 20 73 75 70 70 6f 72 74 00 | tatic..IPv6.server.IPv6.support. |
44200 | 49 53 2d 49 53 00 49 53 2d 49 53 20 47 6c 6f 62 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | IS-IS.IS-IS.Global.Configuration |
44220 | 00 49 53 2d 49 53 20 53 52 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 43 2d 44 48 43 50 | .IS-IS.SR.Configuration.ISC-DHCP |
44240 | 20 4f 70 74 69 6f 6e 20 6e 61 6d 65 00 49 64 65 6e 74 69 74 79 20 42 61 73 65 64 20 43 6f 6e 66 | .Option.name.Identity.Based.Conf |
44260 | 69 67 75 72 61 74 69 6f 6e 00 49 66 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 | iguration.If.**max-threshold**.i |
44280 | 73 20 73 65 74 20 62 75 74 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 20 69 73 20 6e 6f 74 | s.set.but.**min-threshold.is.not |
442a0 | 2c 20 74 68 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 63 61 6c | ,.then.**min-threshold**.is.scal |
442c0 | 65 64 20 74 6f 20 35 30 25 20 6f 66 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2e 00 | ed.to.50%.of.**max-threshold**.. |
442e0 | 49 66 20 3a 63 66 67 63 6d 64 3a 60 73 74 72 69 63 74 60 20 69 73 20 73 65 74 20 74 68 65 20 42 | If.:cfgcmd:`strict`.is.set.the.B |
44300 | 47 50 20 73 65 73 73 69 6f 6e 20 77 6f 6e e2 80 99 74 20 62 65 63 6f 6d 65 20 65 73 74 61 62 6c | GP.session.won...t.become.establ |
44320 | 69 73 68 65 64 20 75 6e 74 69 6c 20 74 68 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 73 65 74 | ished.until.the.BGP.neighbor.set |
44340 | 73 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 6f 6e 20 69 74 73 20 73 69 64 65 2e 20 54 68 69 73 20 63 | s.local.Role.on.its.side..This.c |
44360 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 64 65 66 69 6e 65 | onfiguration.parameter.is.define |
44380 | 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 69 73 20 75 73 65 64 | d.in.RFC.:rfc:`9234`.and.is.used |
443a0 | 20 74 6f 20 65 6e 66 6f 72 63 65 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f | .to.enforce.the.corresponding.co |
443c0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 79 6f 75 72 20 63 6f 75 6e 74 65 72 2d 70 61 72 74 | nfiguration.at.your.counter-part |
443e0 | 73 20 73 69 64 65 2e 00 49 66 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 73 20 75 73 65 | s.side..If.ARP.monitoring.is.use |
44400 | 64 20 69 6e 20 61 6e 20 65 74 68 65 72 63 68 61 6e 6e 65 6c 20 63 6f 6d 70 61 74 69 62 6c 65 20 | d.in.an.etherchannel.compatible. |
44420 | 6d 6f 64 65 20 28 6d 6f 64 65 73 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 61 6e 64 20 78 6f 72 2d | mode.(modes.round-robin.and.xor- |
44440 | 68 61 73 68 29 2c 20 74 68 65 20 73 77 69 74 63 68 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 | hash),.the.switch.should.be.conf |
44460 | 69 67 75 72 65 64 20 69 6e 20 61 20 6d 6f 64 65 20 74 68 61 74 20 65 76 65 6e 6c 79 20 64 69 73 | igured.in.a.mode.that.evenly.dis |
44480 | 74 72 69 62 75 74 65 73 20 70 61 63 6b 65 74 73 20 61 63 72 6f 73 73 20 61 6c 6c 20 6c 69 6e 6b | tributes.packets.across.all.link |
444a0 | 73 2e 20 49 66 20 74 68 65 20 73 77 69 74 63 68 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 | s..If.the.switch.is.configured.t |
444c0 | 6f 20 64 69 73 74 72 69 62 75 74 65 20 74 68 65 20 70 61 63 6b 65 74 73 20 69 6e 20 61 6e 20 58 | o.distribute.the.packets.in.an.X |
444e0 | 4f 52 20 66 61 73 68 69 6f 6e 2c 20 61 6c 6c 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 74 68 65 | OR.fashion,.all.replies.from.the |
44500 | 20 41 52 50 20 74 61 72 67 65 74 73 20 77 69 6c 6c 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e | .ARP.targets.will.be.received.on |
44520 | 20 74 68 65 20 73 61 6d 65 20 6c 69 6e 6b 20 77 68 69 63 68 20 63 6f 75 6c 64 20 63 61 75 73 65 | .the.same.link.which.could.cause |
44540 | 20 74 68 65 20 6f 74 68 65 72 20 74 65 61 6d 20 6d 65 6d 62 65 72 73 20 74 6f 20 66 61 69 6c 2e | .the.other.team.members.to.fail. |
44560 | 00 49 66 20 43 41 20 69 73 20 70 72 65 73 65 6e 74 2c 20 74 68 69 73 20 63 65 72 74 69 66 69 63 | .If.CA.is.present,.this.certific |
44580 | 61 74 65 20 77 69 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 67 65 6e 65 72 61 74 65 | ate.will.be.included.in.generate |
445a0 | 64 20 43 52 4c 73 00 49 66 20 43 4c 49 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 70 65 63 | d.CRLs.If.CLI.option.is.not.spec |
445c0 | 69 66 69 65 64 2c 20 74 68 69 73 20 66 65 61 74 75 72 65 20 69 73 20 64 69 73 61 62 6c 65 64 2e | ified,.this.feature.is.disabled. |
445e0 | 00 49 66 20 50 49 4d 20 68 61 73 20 74 68 65 20 61 20 63 68 6f 69 63 65 20 6f 66 20 45 43 4d 50 | .If.PIM.has.the.a.choice.of.ECMP |
44600 | 20 6e 65 78 74 68 6f 70 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 3a 61 62 62 72 | .nexthops.for.a.particular.:abbr |
44620 | 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 | :`RPF.(Reverse.Path.Forwarding)` |
44640 | 2c 20 50 49 4d 20 77 69 6c 6c 20 63 61 75 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 6f 20 62 65 | ,.PIM.will.cause.S,G.flows.to.be |
44660 | 20 73 70 72 65 61 64 20 6f 75 74 20 61 6d 6f 6e 67 73 74 20 74 68 65 20 6e 65 78 74 68 6f 70 73 | .spread.out.amongst.the.nexthops |
44680 | 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 | ..If.this.command.is.not.specifi |
446a0 | 65 64 20 74 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 78 74 68 6f 70 20 66 6f 75 6e 64 20 | ed.then.the.first.nexthop.found. |
446c0 | 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 66 20 50 49 4d 20 69 73 20 75 73 69 6e 67 20 45 43 | will.be.used..If.PIM.is.using.EC |
446e0 | 4d 50 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 65 73 20 64 6f 77 6e 2c 20 63 | MP.and.an.interface.goes.down,.c |
44700 | 61 75 73 65 20 50 49 4d 20 74 6f 20 72 65 62 61 6c 61 6e 63 65 20 61 6c 6c 20 53 2c 47 20 66 6c | ause.PIM.to.rebalance.all.S,G.fl |
44720 | 6f 77 73 20 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 6e 65 78 74 68 6f 70 | ows.across.the.remaining.nexthop |
44740 | 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 63 6f 6e 66 69 67 | s..If.this.command.is.not.config |
44760 | 75 72 65 64 20 50 49 4d 20 6f 6e 6c 79 20 6d 6f 64 69 66 69 65 73 20 74 68 6f 73 65 20 53 2c 47 | ured.PIM.only.modifies.those.S,G |
44780 | 20 66 6c 6f 77 73 20 74 68 61 74 20 77 65 72 65 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 | .flows.that.were.using.the.inter |
447a0 | 66 61 63 65 20 74 68 61 74 20 77 65 6e 74 20 64 6f 77 6e 2e 00 49 66 20 60 60 61 6c 69 61 73 60 | face.that.went.down..If.``alias` |
447c0 | 60 20 69 73 20 73 65 74 2c 20 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 | `.is.set,.it.can.be.used.instead |
447e0 | 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 | .of.the.device.when.connecting.. |
44800 | 49 66 20 60 60 61 6c 6c 60 60 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 72 65 6d 6f 76 65 20 | If.``all``.is.specified,.remove. |
44820 | 61 6c 6c 20 41 53 20 6e 75 6d 62 65 72 73 20 66 72 6f 6d 20 74 68 65 20 41 53 5f 50 41 54 48 20 | all.AS.numbers.from.the.AS_PATH. |
44840 | 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 49 66 20 61 20 6c 6f 63 | of.the.BGP.path's.NLRI..If.a.loc |
44860 | 61 6c 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 20 70 6c 61 63 65 20 6f | al.firewall.policy.is.in.place.o |
44880 | 6e 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 77 69 | n.your.external.interface.you.wi |
448a0 | 6c 6c 20 6e 65 65 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 70 6f 72 74 73 20 62 65 6c 6f 77 | ll.need.to.allow.the.ports.below |
448c0 | 3a 00 49 66 20 61 20 72 65 67 69 73 74 72 79 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 | :.If.a.registry.is.not.specified |
448e0 | 2c 20 44 6f 63 6b 65 72 2e 69 6f 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 | ,.Docker.io.will.be.used.as.the. |
44900 | 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 75 6e 6c 65 73 73 20 61 6e 20 61 6c 74 | container.registry.unless.an.alt |
44920 | 65 72 6e 61 74 69 76 65 20 72 65 67 69 73 74 72 79 20 69 73 20 73 70 65 63 69 66 69 65 64 20 75 | ernative.registry.is.specified.u |
44940 | 73 69 6e 67 20 2a 2a 73 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 3c 6e | sing.**set.container.registry.<n |
44960 | 61 6d 65 3e 2a 2a 20 6f 72 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 73 20 69 6e 63 6c 75 64 | ame>**.or.the.registry.is.includ |
44980 | 65 64 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 00 49 66 20 61 20 72 65 73 70 6f 6e | ed.in.the.image.name.If.a.respon |
449a0 | 73 65 20 69 73 20 68 65 61 72 64 2c 20 74 68 65 20 6c 65 61 73 65 20 69 73 20 61 62 61 6e 64 6f | se.is.heard,.the.lease.is.abando |
449c0 | 6e 65 64 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 73 | ned,.and.the.server.does.not.res |
449e0 | 70 6f 6e 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 6c 65 61 73 65 20 77 69 | pond.to.the.client..The.lease.wi |
44a00 | 6c 6c 20 72 65 6d 61 69 6e 20 61 62 61 6e 64 6f 6e 65 64 20 66 6f 72 20 61 20 6d 69 6e 69 6d 75 | ll.remain.abandoned.for.a.minimu |
44a20 | 6d 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 20 73 65 63 6f 6e 64 73 20 | m.of.abandon-lease-time.seconds. |
44a40 | 28 64 65 66 61 75 6c 74 73 20 74 6f 20 32 34 20 68 6f 75 72 73 29 2e 00 49 66 20 61 20 72 6f 75 | (defaults.to.24.hours)..If.a.rou |
44a60 | 74 65 20 68 61 73 20 61 6e 20 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 20 61 74 74 72 69 62 75 74 | te.has.an.ORIGINATOR_ID.attribut |
44a80 | 65 20 62 65 63 61 75 73 65 20 69 74 20 68 61 73 20 62 65 65 6e 20 72 65 66 6c 65 63 74 65 64 2c | e.because.it.has.been.reflected, |
44aa0 | 20 74 68 61 74 20 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 20 77 69 6c 6c 20 62 65 20 75 73 65 64 | .that.ORIGINATOR_ID.will.be.used |
44ac0 | 2e 20 4f 74 68 65 72 77 69 73 65 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 | ..Otherwise,.the.router-ID.of.th |
44ae0 | 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 | e.peer.the.route.was.received.fr |
44b00 | 6f 6d 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 66 20 61 20 72 75 6c 65 20 69 73 20 64 65 | om.will.be.used..If.a.rule.is.de |
44b20 | 66 69 6e 65 64 2c 20 74 68 65 6e 20 61 6e 20 61 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 64 65 | fined,.then.an.action.must.be.de |
44b40 | 66 69 6e 65 64 20 66 6f 72 20 69 74 2e 20 54 68 69 73 20 74 65 6c 6c 73 20 74 68 65 20 66 69 72 | fined.for.it..This.tells.the.fir |
44b60 | 65 77 61 6c 6c 20 77 68 61 74 20 74 6f 20 64 6f 20 69 66 20 61 6c 6c 20 63 72 69 74 65 72 69 61 | ewall.what.to.do.if.all.criteria |
44b80 | 20 6d 61 74 63 68 65 72 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 73 75 63 68 20 72 75 6c 65 20 | .matchers.defined.for.such.rule. |
44ba0 | 64 6f 20 6d 61 74 63 68 2e 00 49 66 20 61 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 | do.match..If.a.there.are.no.free |
44bc0 | 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e | .addresses.but.there.are.abandon |
44be0 | 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 | ed.IP.addresses,.the.DHCP.server |
44c00 | 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e | .will.attempt.to.reclaim.an.aban |
44c20 | 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 | doned.IP.address.regardless.of.t |
44c40 | 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 | he.value.of.abandon-lease-time.. |
44c60 | 49 66 20 61 6e 20 49 53 50 20 64 65 70 6c 6f 79 73 20 61 20 3a 61 62 62 72 3a 60 43 47 4e 20 28 | If.an.ISP.deploys.a.:abbr:`CGN.( |
44c80 | 43 61 72 72 69 65 72 2d 67 72 61 64 65 20 4e 41 54 29 60 2c 20 61 6e 64 20 75 73 65 73 20 3a 72 | Carrier-grade.NAT)`,.and.uses.:r |
44ca0 | 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 6e 75 6d 62 65 | fc:`1918`.address.space.to.numbe |
44cc0 | 72 20 63 75 73 74 6f 6d 65 72 20 67 61 74 65 77 61 79 73 2c 20 74 68 65 20 72 69 73 6b 20 6f 66 | r.customer.gateways,.the.risk.of |
44ce0 | 20 61 64 64 72 65 73 73 20 63 6f 6c 6c 69 73 69 6f 6e 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 | .address.collision,.and.therefor |
44d00 | 65 20 72 6f 75 74 69 6e 67 20 66 61 69 6c 75 72 65 73 2c 20 61 72 69 73 65 73 20 77 68 65 6e 20 | e.routing.failures,.arises.when. |
44d20 | 74 68 65 20 63 75 73 74 6f 6d 65 72 20 6e 65 74 77 6f 72 6b 20 61 6c 72 65 61 64 79 20 75 73 65 | the.customer.network.already.use |
44d40 | 73 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 00 | s.an.:rfc:`1918`.address.space.. |
44d60 | 49 66 20 61 6e 20 61 6e 6f 74 68 65 72 20 62 72 69 64 67 65 20 69 6e 20 74 68 65 20 73 70 61 6e | If.an.another.bridge.in.the.span |
44d80 | 6e 69 6e 67 20 74 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 6f 75 74 20 61 20 68 65 | ning.tree.does.not.send.out.a.he |
44da0 | 6c 6c 6f 20 70 61 63 6b 65 74 20 66 6f 72 20 61 20 6c 6f 6e 67 20 70 65 72 69 6f 64 20 6f 66 20 | llo.packet.for.a.long.period.of. |
44dc0 | 74 69 6d 65 2c 20 69 74 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 64 65 61 64 2e 00 | time,.it.is.assumed.to.be.dead.. |
44de0 | 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 | If.choosing.a.value.below.31.sec |
44e00 | 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 | onds.be.aware.that.some.hardware |
44e20 | 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 | .platforms.cannot.see.data.flowi |
44e40 | 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e | ng.in.better.than.30.second.chun |
44e60 | 6b 73 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 | ks..If.configured,.incoming.IP.d |
44e80 | 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 | irected.broadcast.packets.on.thi |
44ea0 | 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 | s.interface.will.be.forwarded..I |
44ec0 | 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 72 65 70 6c 79 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 | f.configured,.reply.only.if.the. |
44ee0 | 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 | target.IP.address.is.local.addre |
44f00 | 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e | ss.configured.on.the.incoming.in |
44f20 | 74 65 72 66 61 63 65 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 72 79 20 74 6f 20 61 | terface..If.configured,.try.to.a |
44f40 | 76 6f 69 64 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f | void.local.addresses.that.are.no |
44f60 | 74 20 69 6e 20 74 68 65 20 74 61 72 67 65 74 27 73 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 69 | t.in.the.target's.subnet.for.thi |
44f80 | 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 6d 6f 64 65 20 69 73 20 75 73 65 66 75 6c | s.interface..This.mode.is.useful |
44fa0 | 20 77 68 65 6e 20 74 61 72 67 65 74 20 68 6f 73 74 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 | .when.target.hosts.reachable.via |
44fc0 | 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 72 65 71 75 69 72 65 20 74 68 65 20 73 6f 75 72 | .this.interface.require.the.sour |
44fe0 | 63 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 6f | ce.IP.address.in.ARP.requests.to |
45000 | 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 69 72 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 | .be.part.of.their.logical.networ |
45020 | 6b 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 69 6e | k.configured.on.the.receiving.in |
45040 | 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 77 65 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 72 65 | terface..When.we.generate.the.re |
45060 | 71 75 65 73 74 20 77 65 20 77 69 6c 6c 20 63 68 65 63 6b 20 61 6c 6c 20 6f 75 72 20 73 75 62 6e | quest.we.will.check.all.our.subn |
45080 | 65 74 73 20 74 68 61 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 | ets.that.include.the.target.IP.a |
450a0 | 6e 64 20 77 69 6c 6c 20 70 72 65 73 65 72 76 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 | nd.will.preserve.the.source.addr |
450c0 | 65 73 73 20 69 66 20 69 74 20 69 73 20 66 72 6f 6d 20 73 75 63 68 20 73 75 62 6e 65 74 2e 20 49 | ess.if.it.is.from.such.subnet..I |
450e0 | 66 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 63 68 20 73 75 62 6e 65 74 20 77 65 20 73 65 6c | f.there.is.no.such.subnet.we.sel |
45100 | 65 63 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 | ect.source.address.according.to. |
45120 | 74 68 65 20 72 75 6c 65 73 20 66 6f 72 20 6c 65 76 65 6c 20 32 2e 00 49 66 20 63 6f 6e 66 69 67 | the.rules.for.level.2..If.config |
45140 | 75 72 69 6e 67 20 56 58 4c 41 4e 20 69 6e 20 61 20 56 79 4f 53 20 76 69 72 74 75 61 6c 20 6d 61 | uring.VXLAN.in.a.VyOS.virtual.ma |
45160 | 63 68 69 6e 65 2c 20 65 6e 73 75 72 65 20 74 68 61 74 20 4d 41 43 20 73 70 6f 6f 66 69 6e 67 20 | chine,.ensure.that.MAC.spoofing. |
45180 | 28 48 79 70 65 72 2d 56 29 20 6f 72 20 46 6f 72 67 65 64 20 54 72 61 6e 73 6d 69 74 73 20 28 45 | (Hyper-V).or.Forged.Transmits.(E |
451a0 | 53 58 29 20 61 72 65 20 70 65 72 6d 69 74 74 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 66 6f 72 | SX).are.permitted,.otherwise.for |
451c0 | 77 61 72 64 65 64 20 66 72 61 6d 65 73 20 6d 61 79 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 | warded.frames.may.be.blocked.by. |
451e0 | 74 68 65 20 68 79 70 65 72 76 69 73 6f 72 2e 00 49 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 72 | the.hypervisor..If.forwarding.tr |
45200 | 61 66 66 69 63 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 20 74 68 61 6e 20 69 | affic.to.a.different.port.than.i |
45220 | 74 20 69 73 20 61 72 72 69 76 69 6e 67 20 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 63 | t.is.arriving.on,.you.may.also.c |
45240 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 | onfigure.the.translation.port.us |
45260 | 69 6e 67 20 60 73 65 74 20 6e 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 75 6c 65 20 5b 6e | ing.`set.nat.destination.rule.[n |
45280 | 5d 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 60 2e 00 49 66 20 67 75 61 72 61 6e 74 65 | ].translation.port`..If.guarante |
452a0 | 65 64 20 74 72 61 66 66 69 63 20 66 6f 72 20 61 20 63 6c 61 73 73 20 69 73 20 6d 65 74 20 61 6e | ed.traffic.for.a.class.is.met.an |
452c0 | 64 20 74 68 65 72 65 20 69 73 20 72 6f 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 74 72 61 66 66 69 63 | d.there.is.room.for.more.traffic |
452e0 | 2c 20 74 68 65 20 63 65 69 6c 69 6e 67 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 | ,.the.ceiling.parameter.can.be.u |
45300 | 73 65 64 20 74 6f 20 73 65 74 20 68 6f 77 20 6d 75 63 68 20 6d 6f 72 65 20 62 61 6e 64 77 69 64 | sed.to.set.how.much.more.bandwid |
45320 | 74 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 20 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 | th.could.be.used..If.guaranteed. |
45340 | 74 72 61 66 66 69 63 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 72 65 20 61 72 65 20 73 65 76 | traffic.is.met.and.there.are.sev |
45360 | 65 72 61 6c 20 63 6c 61 73 73 65 73 20 77 69 6c 6c 69 6e 67 20 74 6f 20 75 73 65 20 74 68 65 69 | eral.classes.willing.to.use.thei |
45380 | 72 20 63 65 69 6c 69 6e 67 73 2c 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 70 61 72 61 6d 65 74 | r.ceilings,.the.priority.paramet |
453a0 | 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 6f 72 64 65 72 20 69 6e 20 77 | er.will.establish.the.order.in.w |
453c0 | 68 69 63 68 20 74 68 61 74 20 61 64 64 69 74 69 6f 6e 61 6c 20 74 72 61 66 66 69 63 20 77 69 6c | hich.that.additional.traffic.wil |
453e0 | 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 2e 20 50 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 | l.be.allocated..Priority.can.be. |
45400 | 61 6e 79 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 30 20 74 6f 20 37 2e 20 54 68 65 20 6c 6f 77 65 | any.number.from.0.to.7..The.lowe |
45420 | 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 | r.the.number,.the.higher.the.pri |
45440 | 6f 72 69 74 79 2e 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 | ority..If.interface.were.the.pac |
45460 | 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 | ket.was.received.is.part.of.a.br |
45480 | 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 | idge,.then.packet.is.processed.a |
454a0 | 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f | t.the.**Bridge.Layer**,.which.co |
454c0 | 6e 74 61 69 6e 73 20 61 20 76 65 72 20 62 61 73 69 63 20 73 65 74 75 70 20 77 68 65 72 65 20 66 | ntains.a.ver.basic.setup.where.f |
454e0 | 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 69 6e 74 65 72 66 61 63 | or.bridge.filtering:.If.interfac |
45500 | 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 | e.were.the.packet.was.received.i |
45520 | 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b | sn't.part.of.a.bridge,.then.pack |
45540 | 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 | et.is.processed.at.the.**IP.Laye |
45560 | 72 2a 2a 3a 00 49 66 20 69 74 27 73 20 76 69 74 61 6c 20 74 68 61 74 20 74 68 65 20 64 61 65 6d | r**:.If.it's.vital.that.the.daem |
45580 | 6f 6e 20 73 68 6f 75 6c 64 20 61 63 74 20 65 78 61 63 74 6c 79 20 6c 69 6b 65 20 61 20 72 65 61 | on.should.act.exactly.like.a.rea |
455a0 | 6c 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 75 70 73 74 72 65 | l.multicast.client.on.the.upstre |
455c0 | 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 | am.interface,.this.function.shou |
455e0 | 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 49 66 20 6b 6e 6f 77 6e 2c 20 74 68 65 20 49 50 20 | ld.be.enabled..If.known,.the.IP. |
45600 | 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 | of.the.remote.router.can.be.conf |
45620 | 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 72 65 6d 6f 74 65 2d 68 6f 73 74 60 60 | igured.using.the.``remote-host`` |
45640 | 20 64 69 72 65 63 74 69 76 65 3b 20 69 66 20 75 6e 6b 6e 6f 77 6e 2c 20 69 74 20 63 61 6e 20 62 | .directive;.if.unknown,.it.can.b |
45660 | 65 20 6f 6d 69 74 74 65 64 2e 20 57 65 20 77 69 6c 6c 20 61 73 73 75 6d 65 20 61 20 64 79 6e 61 | e.omitted..We.will.assume.a.dyna |
45680 | 6d 69 63 20 49 50 20 66 6f 72 20 6f 75 72 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 49 66 | mic.IP.for.our.remote.router..If |
456a0 | 20 6c 6f 67 67 69 6e 67 20 74 6f 20 61 20 6c 6f 63 61 6c 20 75 73 65 72 20 61 63 63 6f 75 6e 74 | .logging.to.a.local.user.account |
456c0 | 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 61 6c 6c 20 64 65 66 69 6e 65 64 20 6c 6f 67 20 | .is.configured,.all.defined.log. |
456e0 | 6d 65 73 73 61 67 65 73 20 61 72 65 20 64 69 73 70 6c 61 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 | messages.are.display.on.the.cons |
45700 | 6f 6c 65 20 69 66 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 | ole.if.the.local.user.is.logged. |
45720 | 69 6e 2c 20 69 66 20 74 68 65 20 75 73 65 72 20 69 73 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 6e | in,.if.the.user.is.not.logged.in |
45740 | 2c 20 6e 6f 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 62 65 69 6e 67 20 64 69 73 70 6c 61 79 65 | ,.no.messages.are.being.displaye |
45760 | 64 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 | d..For.an.explanation.on.:ref:`s |
45780 | 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a | yslog_facilities`.keywords.and.: |
457a0 | 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 | ref:`syslog_severity_level`.keyw |
457c0 | 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 49 66 20 6d 61 6b 69 6e 67 | ords.see.tables.below..If.making |
457e0 | 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 2c 20 4f 70 65 6e 56 50 | .use.of.multiple.tunnels,.OpenVP |
45800 | 4e 20 6d 75 73 74 20 68 61 76 65 20 61 20 77 61 79 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 | N.must.have.a.way.to.distinguish |
45820 | 20 62 65 74 77 65 65 6e 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 20 61 73 69 64 65 | .between.different.tunnels.aside |
45840 | 20 66 72 6f 6d 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 6b 65 79 2e 20 54 68 69 73 20 69 | .from.the.pre-shared-key..This.i |
45860 | 73 20 65 69 74 68 65 72 20 62 79 20 72 65 66 65 72 65 6e 63 69 6e 67 20 49 50 20 61 64 64 72 65 | s.either.by.referencing.IP.addre |
45880 | 73 73 20 6f 72 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 4f 6e 65 20 6f 70 74 69 6f 6e 20 69 73 | ss.or.port.number..One.option.is |
458a0 | 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 70 75 62 6c 69 63 20 49 50 20 74 6f 20 65 61 63 68 | .to.dedicate.a.public.IP.to.each |
458c0 | 20 74 75 6e 6e 65 6c 2e 20 41 6e 6f 74 68 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 | .tunnel..Another.option.is.to.de |
458e0 | 64 69 63 61 74 65 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 65 61 63 68 20 74 75 6e | dicate.a.port.number.to.each.tun |
45900 | 6e 65 6c 20 28 65 2e 67 2e 20 31 31 39 35 2c 31 31 39 36 2c 31 31 39 37 2e 2e 2e 29 2e 00 49 66 | nel.(e.g..1195,1196,1197...)..If |
45920 | 20 6d 75 6c 74 69 2d 70 61 74 68 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 | .multi-pathing.is.enabled,.then. |
45940 | 63 68 65 63 6b 20 77 68 65 74 68 65 72 20 74 68 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 79 65 74 | check.whether.the.routes.not.yet |
45960 | 20 64 69 73 74 69 6e 67 75 69 73 68 65 64 20 69 6e 20 70 72 65 66 65 72 65 6e 63 65 20 6d 61 79 | .distinguished.in.preference.may |
45980 | 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 20 49 66 20 3a 63 66 67 63 6d 64 | .be.considered.equal..If.:cfgcmd |
459a0 | 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 61 73 2d 70 61 74 68 20 6d 75 6c 74 69 70 61 74 68 | :`bgp.bestpath.as-path.multipath |
459c0 | 2d 72 65 6c 61 78 60 20 69 73 20 73 65 74 2c 20 61 6c 6c 20 73 75 63 68 20 72 6f 75 74 65 73 20 | -relax`.is.set,.all.such.routes. |
459e0 | 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2c 20 6f 74 68 65 72 77 69 73 65 20 | are.considered.equal,.otherwise. |
45a00 | 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 76 69 61 20 69 42 47 50 20 77 69 74 68 20 69 64 | routes.received.via.iBGP.with.id |
45a20 | 65 6e 74 69 63 61 6c 20 41 53 5f 50 41 54 48 73 20 6f 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 | entical.AS_PATHs.or.routes.recei |
45a40 | 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 | ved.from.eBGP.neighbours.in.the. |
45a60 | 73 61 6d 65 20 41 53 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 00 49 66 | same.AS.are.considered.equal..If |
45a80 | 20 6e 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 | .no.connection.to.an.RPKI.cache. |
45aa0 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 66 74 65 72 20 | server.can.be.established.after. |
45ac0 | 61 20 70 72 65 2d 64 65 66 69 6e 65 64 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 | a.pre-defined.timeout,.the.route |
45ae0 | 72 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 72 6f 75 74 65 73 20 77 69 74 68 6f 75 74 20 70 72 | r.will.process.routes.without.pr |
45b00 | 65 66 69 78 20 6f 72 69 67 69 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 49 74 20 73 74 69 6c 6c | efix.origin.validation..It.still |
45b20 | 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 | .will.try.to.establish.a.connect |
45b40 | 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 | ion.to.an.RPKI.cache.server.in.t |
45b60 | 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 2e 00 49 66 20 6e 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e | he.background..If.no.destination |
45b80 | 20 69 73 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 6d 61 74 63 | .is.specified.the.rule.will.matc |
45ba0 | 68 20 6f 6e 20 61 6e 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 | h.on.any.destination.address.and |
45bc0 | 20 70 6f 72 74 2e 00 49 66 20 6e 6f 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 73 | .port..If.no.ip.prefix.list.is.s |
45be0 | 70 65 63 69 66 69 65 64 2c 20 69 74 20 61 63 74 73 20 61 73 20 70 65 72 6d 69 74 2e 20 49 66 20 | pecified,.it.acts.as.permit..If. |
45c00 | 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 6e | ip.prefix.list.is.defined,.and.n |
45c20 | 6f 20 6d 61 74 63 68 20 69 73 20 66 6f 75 6e 64 2c 20 64 65 66 61 75 6c 74 20 64 65 6e 79 20 69 | o.match.is.found,.default.deny.i |
45c40 | 73 20 61 70 70 6c 69 65 64 2e 00 49 66 20 6e 6f 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 | s.applied..If.no.option.is.speci |
45c60 | 66 69 65 64 2c 20 74 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 60 61 6c 6c 60 2e 00 49 66 | fied,.this.defaults.to.`all`..If |
45c80 | 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 6c 74 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f | .not.set.(default).allows.you.to |
45ca0 | 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 | .have.multiple.network.interface |
45cc0 | 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 75 62 6e 65 74 2c 20 61 6e 64 20 68 61 76 65 20 74 | s.on.the.same.subnet,.and.have.t |
45ce0 | 68 65 20 41 52 50 73 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 62 65 20 61 6e | he.ARPs.for.each.interface.be.an |
45d00 | 73 77 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 74 | swered.based.on.whether.or.not.t |
45d20 | 68 65 20 6b 65 72 6e 65 6c 20 77 6f 75 6c 64 20 72 6f 75 74 65 20 61 20 70 61 63 6b 65 74 20 66 | he.kernel.would.route.a.packet.f |
45d40 | 72 6f 6d 20 74 68 65 20 41 52 50 27 64 20 49 50 20 6f 75 74 20 74 68 61 74 20 69 6e 74 65 72 66 | rom.the.ARP'd.IP.out.that.interf |
45d60 | 61 63 65 20 28 74 68 65 72 65 66 6f 72 65 20 79 6f 75 20 6d 75 73 74 20 75 73 65 20 73 6f 75 72 | ace.(therefore.you.must.use.sour |
45d80 | 63 65 20 62 61 73 65 64 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 | ce.based.routing.for.this.to.wor |
45da0 | 6b 29 2e 00 49 66 20 6f 70 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 70 61 72 61 6d 65 74 65 | k)..If.optional.profile.paramete |
45dc0 | 72 20 69 73 20 75 73 65 64 2c 20 73 65 6c 65 63 74 20 61 20 42 46 44 20 70 72 6f 66 69 6c 65 20 | r.is.used,.select.a.BFD.profile. |
45de0 | 66 6f 72 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 73 20 63 72 65 61 74 65 64 20 76 69 61 | for.the.BFD.sessions.created.via |
45e00 | 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 73 65 74 20 74 68 65 20 6b 65 72 6e | .this.interface..If.set.the.kern |
45e20 | 65 6c 20 63 61 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 72 70 20 72 65 71 75 65 73 74 73 20 77 | el.can.respond.to.arp.requests.w |
45e40 | 69 74 68 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 | ith.addresses.from.other.interfa |
45e60 | 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 73 65 65 6d 20 77 72 6f 6e 67 20 62 75 74 20 69 74 20 | ces..This.may.seem.wrong.but.it. |
45e80 | 75 73 75 61 6c 6c 79 20 6d 61 6b 65 73 20 73 65 6e 73 65 2c 20 62 65 63 61 75 73 65 20 69 74 20 | usually.makes.sense,.because.it. |
45ea0 | 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 63 68 61 6e 63 65 20 6f 66 20 73 75 63 63 65 73 73 66 | increases.the.chance.of.successf |
45ec0 | 75 6c 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 | ul.communication..IP.addresses.a |
45ee0 | 72 65 20 6f 77 6e 65 64 20 62 79 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 68 6f 73 74 20 6f 6e | re.owned.by.the.complete.host.on |
45f00 | 20 4c 69 6e 75 78 2c 20 6e 6f 74 20 62 79 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 | .Linux,.not.by.particular.interf |
45f20 | 61 63 65 73 2e 20 4f 6e 6c 79 20 66 6f 72 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 73 65 74 75 | aces..Only.for.more.complex.setu |
45f40 | 70 73 20 6c 69 6b 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 2c 20 64 6f 65 73 20 74 68 69 | ps.like.load-balancing,.does.thi |
45f60 | 73 20 62 65 68 61 76 69 6f 75 72 20 63 61 75 73 65 20 70 72 6f 62 6c 65 6d 73 2e 00 49 66 20 73 | s.behaviour.cause.problems..If.s |
45f80 | 65 74 2c 20 49 50 76 34 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 | et,.IPv4.directed.broadcast.forw |
45fa0 | 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 69 73 61 62 6c | arding.will.be.completely.disabl |
45fc0 | 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 77 68 65 74 68 65 72 20 70 65 72 2d 69 6e 74 | ed.regardless.of.whether.per-int |
45fe0 | 65 72 66 61 63 65 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 | erface.directed.broadcast.forwar |
46000 | 64 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 20 6f 72 20 6e 6f 74 2e 00 49 66 20 73 75 66 66 69 | ding.is.enabled.or.not..If.suffi |
46020 | 78 20 69 73 20 6f 6d 69 74 74 65 64 2c 20 6d 69 6e 75 74 65 73 20 61 72 65 20 69 6d 70 6c 69 65 | x.is.omitted,.minutes.are.implie |
46040 | 64 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 70 72 65 70 65 6e 64 60 20 61 | d..If.the.:cfgcmd:`no-prepend`.a |
46060 | 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 | ttribute.is.specified,.then.the. |
46080 | 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 6e 6f 74 20 70 72 65 70 65 6e 64 | supplied.local-as.is.not.prepend |
460a0 | 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 2e 00 49 66 20 74 | ed.to.the.received.AS_PATH..If.t |
460c0 | 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 70 6c 61 63 65 2d 61 73 60 20 61 74 74 72 69 62 75 74 | he.:cfgcmd:`replace-as`.attribut |
460e0 | 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 6f 6e 6c 79 20 74 68 65 20 73 75 | e.is.specified,.then.only.the.su |
46100 | 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 | pplied.local-as.is.prepended.to. |
46120 | 74 68 65 20 41 53 5f 50 41 54 48 20 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f | the.AS_PATH.when.transmitting.lo |
46140 | 63 61 6c 2d 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 00 | cal-route.updates.to.this.peer.. |
46160 | 49 66 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e | If.the.ARP.table.already.contain |
46180 | 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 67 72 61 74 75 69 74 6f | s.the.IP.address.of.the.gratuito |
461a0 | 75 73 20 61 72 70 20 66 72 61 6d 65 2c 20 74 68 65 20 61 72 70 20 74 61 62 6c 65 20 77 69 6c 6c | us.arp.frame,.the.arp.table.will |
461c0 | 20 62 65 20 75 70 64 61 74 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 69 66 20 74 68 69 73 20 73 | .be.updated.regardless.if.this.s |
461e0 | 65 74 74 69 6e 67 20 69 73 20 6f 6e 20 6f 72 20 6f 66 66 2e 00 49 66 20 74 68 65 20 41 53 2d 50 | etting.is.on.or.off..If.the.AS-P |
46200 | 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 61 20 70 72 69 76 61 74 65 20 | ath.for.the.route.has.a.private. |
46220 | 41 53 4e 20 62 65 74 77 65 65 6e 20 70 75 62 6c 69 63 20 41 53 4e 73 2c 20 69 74 20 69 73 20 61 | ASN.between.public.ASNs,.it.is.a |
46240 | 73 73 75 6d 65 64 20 74 68 61 74 20 74 68 69 73 20 69 73 20 61 20 64 65 73 69 67 6e 20 63 68 6f | ssumed.that.this.is.a.design.cho |
46260 | 69 63 65 2c 20 61 6e 64 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 69 73 20 6e 6f 74 20 | ice,.and.the.private.ASN.is.not. |
46280 | 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 | removed..If.the.AS-Path.for.the. |
462a0 | 72 6f 75 74 65 20 68 61 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 2c 20 74 68 65 | route.has.only.private.ASNs,.the |
462c0 | 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 | .private.ASNs.are.removed..If.th |
462e0 | 65 20 49 50 20 70 72 65 66 69 78 20 6d 61 73 6b 20 69 73 20 70 72 65 73 65 6e 74 2c 20 69 74 20 | e.IP.prefix.mask.is.present,.it. |
46300 | 64 69 72 65 63 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 75 73 65 20 74 68 69 73 20 70 65 65 | directs.opennhrp.to.use.this.pee |
46320 | 72 20 61 73 20 61 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 20 77 68 65 6e 20 73 65 6e 64 | r.as.a.next.hop.server.when.send |
46340 | 69 6e 67 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 6d 61 74 63 68 69 6e 67 | ing.Resolution.Requests.matching |
46360 | 20 74 68 69 73 20 73 75 62 6e 65 74 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 | .this.subnet..If.the.RADIUS.serv |
46380 | 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 44 65 6c 65 67 61 74 | er.sends.the.attribute.``Delegat |
463a0 | 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 64 65 6c 65 | ed-IPv6-Prefix-Pool``,.IPv6.dele |
463c0 | 67 61 74 69 6f 6e 20 70 65 66 69 78 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 | gation.pefix.will.be.allocated.f |
463e0 | 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 64 65 6c | rom.a.predefined.IPv6.pool.``del |
46400 | 65 67 61 74 65 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 | egate``.whose.name.equals.the.at |
46420 | 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 | tribute.value..If.the.RADIUS.ser |
46440 | 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 | ver.sends.the.attribute.``Framed |
46460 | 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 | -IP-Address``.then.this.IP.addre |
46480 | 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 | ss.will.be.allocated.to.the.clie |
464a0 | 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 60 60 64 65 66 61 75 6c 74 2d 70 6f 6f 6c | nt.and.the.option.``default-pool |
464c0 | 60 60 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e | ``.within.the.CLI.config.is.bein |
464e0 | 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 | g.ignored..If.the.RADIUS.server. |
46500 | 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d | sends.the.attribute.``Framed-IP- |
46520 | 41 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 | Address``.then.this.IP.address.w |
46540 | 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 | ill.be.allocated.to.the.client.a |
46560 | 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 70 2d 70 6f 6f 6c 20 77 69 74 68 69 6e 20 74 68 65 | nd.the.option.ip-pool.within.the |
46580 | 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 | .CLI.config.is.being.ignored..If |
465a0 | 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 | .the.RADIUS.server.sends.the.att |
465c0 | 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 50 6f 6f 6c 60 60 2c 20 49 50 20 61 64 64 72 65 | ribute.``Framed-Pool``,.IP.addre |
465e0 | 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 | ss.will.be.allocated.from.a.pred |
46600 | 65 66 69 6e 65 64 20 49 50 20 70 6f 6f 6c 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 | efined.IP.pool.whose.name.equals |
46620 | 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 | .the.attribute.value..If.the.RAD |
46640 | 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 | IUS.server.sends.the.attribute.` |
46660 | 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 2c 20 49 | `Stateful-IPv6-Address-Pool``,.I |
46680 | 50 76 36 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 | Pv6.address.will.be.allocated.fr |
466a0 | 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 70 72 65 66 | om.a.predefined.IPv6.pool.``pref |
466c0 | 69 78 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 | ix``.whose.name.equals.the.attri |
466e0 | 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | bute.value..If.the.RADIUS.server |
46700 | 20 75 73 65 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 | .uses.the.attribute.``NAS-Port-I |
46720 | 64 60 60 2c 20 70 70 70 20 74 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 62 65 20 72 65 6e 61 6d 65 64 | d``,.ppp.tunnels.will.be.renamed |
46740 | 2e 00 49 66 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c | ..If.the.average.queue.size.is.l |
46760 | 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c | ower.than.the.**min-threshold**, |
46780 | 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 | .an.arriving.packet.will.be.plac |
467a0 | 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 2e 00 49 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 | ed.in.the.queue..If.the.current. |
467c0 | 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 2a 2a 71 75 65 75 | queue.size.is.larger.than.**queu |
467e0 | 65 2d 6c 69 6d 69 74 2a 2a 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 | e-limit**,.then.packets.will.be. |
46800 | 64 72 6f 70 70 65 64 2e 20 54 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 | dropped..The.average.queue.size. |
46820 | 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 66 6f 72 6d 65 72 20 61 76 65 72 61 67 65 20 73 69 | depends.on.its.former.average.si |
46840 | 7a 65 20 61 6e 64 20 69 74 73 20 63 75 72 72 65 6e 74 20 6f 6e 65 2e 00 49 66 20 74 68 65 20 69 | ze.and.its.current.one..If.the.i |
46860 | 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 | nterface.where.the.packet.was.re |
46880 | 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e | ceived.is.part.of.a.bridge,.then |
468a0 | 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 | .packetis.processed.at.the.**Bri |
468c0 | 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 | dge.Layer**,.which.contains.a.ba |
468e0 | 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 | sic.setup.for.bridge.filtering:. |
46900 | 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 | If.the.interface.where.the.packe |
46920 | 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 | t.was.received.is.part.of.a.brid |
46940 | 67 65 2c 20 74 68 65 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 | ge,.then.the.packet.is.processed |
46960 | 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 | .at.the.**Bridge.Layer**,.which. |
46980 | 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 | contains.a.basic.setup.for.bridg |
469a0 | 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 | e.filtering:.If.the.interface.wh |
469c0 | 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 | ere.the.packet.was.received.isn' |
469e0 | 74 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 | t.part.of.a.bridge,.then.packeti |
46a00 | 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a | s.processed.at.the.**IP.Layer**: |
46a20 | 00 49 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 49 50 76 36 20 74 68 65 6e 20 74 68 | .If.the.protocol.is.IPv6.then.th |
46a40 | 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | e.source.and.destination.address |
46a60 | 65 73 20 61 72 65 20 66 69 72 73 74 20 68 61 73 68 65 64 20 75 73 69 6e 67 20 69 70 76 36 5f 61 | es.are.first.hashed.using.ipv6_a |
46a80 | 64 64 72 5f 68 61 73 68 2e 00 49 66 20 74 68 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 | ddr_hash..If.the.statically.mapp |
46aa0 | 65 64 20 70 65 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 43 69 73 63 6f 20 49 4f 53 2c 20 73 70 | ed.peer.is.running.Cisco.IOS,.sp |
46ac0 | 65 63 69 66 79 20 74 68 65 20 63 69 73 63 6f 20 6b 65 79 77 6f 72 64 2e 20 49 74 20 69 73 20 75 | ecify.the.cisco.keyword..It.is.u |
46ae0 | 73 65 64 20 74 6f 20 66 69 78 20 73 74 61 74 69 63 61 6c 6c 79 20 74 68 65 20 52 65 67 69 73 74 | sed.to.fix.statically.the.Regist |
46b00 | 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 49 44 20 73 6f 20 74 68 61 74 20 61 20 6d 61 74 63 | ration.Request.ID.so.that.a.matc |
46b20 | 68 69 6e 67 20 50 75 72 67 65 20 52 65 71 75 65 73 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 69 | hing.Purge.Request.can.be.sent.i |
46b40 | 66 20 4e 42 4d 41 20 61 64 64 72 65 73 73 20 68 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 69 73 | f.NBMA.address.has.changed..This |
46b60 | 20 69 73 20 74 6f 20 77 6f 72 6b 20 61 72 6f 75 6e 64 20 62 72 6f 6b 65 6e 20 49 4f 53 20 77 68 | .is.to.work.around.broken.IOS.wh |
46b80 | 69 63 68 20 72 65 71 75 69 72 65 73 20 50 75 72 67 65 20 52 65 71 75 65 73 74 20 49 44 20 74 6f | ich.requires.Purge.Request.ID.to |
46ba0 | 20 6d 61 74 63 68 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 52 65 67 69 73 74 72 61 74 69 6f 6e | .match.the.original.Registration |
46bc0 | 20 52 65 71 75 65 73 74 20 49 44 2e 00 49 66 20 74 68 65 20 73 79 73 74 65 6d 20 64 65 74 65 63 | .Request.ID..If.the.system.detec |
46be0 | 74 73 20 61 6e 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 20 77 69 72 65 6c 65 73 73 20 64 65 76 69 | ts.an.unconfigured.wireless.devi |
46c00 | 63 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 | ce,.it.will.be.automatically.add |
46c20 | 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 72 65 65 2c 20 73 70 65 63 69 | ed.the.configuration.tree,.speci |
46c40 | 66 79 69 6e 67 20 61 6e 79 20 64 65 74 65 63 74 65 64 20 73 65 74 74 69 6e 67 73 20 28 66 6f 72 | fying.any.detected.settings.(for |
46c60 | 20 65 78 61 6d 70 6c 65 2c 20 69 74 73 20 4d 41 43 20 61 64 64 72 65 73 73 29 20 61 6e 64 20 63 | .example,.its.MAC.address).and.c |
46c80 | 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 75 6e 20 69 6e 20 6d 6f 6e 69 74 6f 72 20 6d 6f 64 65 | onfigured.to.run.in.monitor.mode |
46ca0 | 2e 00 49 66 20 74 68 65 20 74 61 62 6c 65 20 69 73 20 65 6d 70 74 79 20 61 6e 64 20 79 6f 75 20 | ..If.the.table.is.empty.and.you. |
46cc0 | 68 61 76 65 20 61 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 2c 20 69 74 20 6d 65 61 6e 73 | have.a.warning.message,.it.means |
46ce0 | 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 20 54 6f 20 65 6e | .conntrack.is.not.enabled..To.en |
46d00 | 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 2c 20 6a 75 73 74 20 63 72 65 61 74 65 20 61 20 4e 41 | able.conntrack,.just.create.a.NA |
46d20 | 54 20 6f 72 20 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 3a 63 66 67 63 6d 64 3a 60 73 | T.or.a.firewall.rule..:cfgcmd:`s |
46d40 | 65 74 20 66 69 72 65 77 61 6c 6c 20 73 74 61 74 65 2d 70 6f 6c 69 63 79 20 65 73 74 61 62 6c 69 | et.firewall.state-policy.establi |
46d60 | 73 68 65 64 20 61 63 74 69 6f 6e 20 61 63 63 65 70 74 60 00 49 66 20 74 68 65 72 65 20 61 72 65 | shed.action.accept`.If.there.are |
46d80 | 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 | .no.free.addresses.but.there.are |
46da0 | 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 | .abandoned.IP.addresses,.the.DHC |
46dc0 | 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d | P.server.will.attempt.to.reclaim |
46de0 | 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c | .an.abandoned.IP.address.regardl |
46e00 | 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 | ess.of.the.value.of.abandon-leas |
46e20 | 65 2d 74 69 6d 65 2e 00 49 66 20 74 68 65 72 65 20 69 73 20 53 4e 41 54 20 72 75 6c 65 73 20 6f | e-time..If.there.is.SNAT.rules.o |
46e40 | 6e 20 65 74 68 31 2c 20 6e 65 65 64 20 74 6f 20 61 64 64 20 65 78 63 6c 75 64 65 20 72 75 6c 65 | n.eth1,.need.to.add.exclude.rule |
46e60 | 00 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 69 6e 76 6f 6b 65 64 20 66 72 6f 6d | .If.this.command.is.invoked.from |
46e80 | 20 63 6f 6e 66 69 67 75 72 65 20 6d 6f 64 65 20 77 69 74 68 20 74 68 65 20 60 60 72 75 6e 60 60 | .configure.mode.with.the.``run`` |
46ea0 | 20 70 72 65 66 69 78 20 74 68 65 20 6b 65 79 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | .prefix.the.key.is.automatically |
46ec0 | 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 69 6e | .installed.to.the.appropriate.in |
46ee0 | 74 65 72 66 61 63 65 3a 00 49 66 20 74 68 69 73 20 69 73 20 73 65 74 20 74 68 65 20 72 65 6c 61 | terface:.If.this.is.set.the.rela |
46f00 | 79 20 61 67 65 6e 74 20 77 69 6c 6c 20 69 6e 73 65 72 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 | y.agent.will.insert.the.interfac |
46f20 | 65 20 49 44 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 61 75 74 6f 6d 61 74 | e.ID..This.option.is.set.automat |
46f40 | 69 63 61 6c 6c 79 20 69 66 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 6c 69 73 74 65 6e 69 6e | ically.if.more.than.one.listenin |
46f60 | 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 49 66 20 74 68 69 73 | g.interfaces.are.in.use..If.this |
46f80 | 20 6f 70 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 74 68 65 20 61 6c 72 | .option.is.enabled,.then.the.alr |
46fa0 | 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 63 68 65 63 6b 2c 20 77 68 65 72 65 20 61 6c 72 65 61 | eady-selected.check,.where.alrea |
46fc0 | 64 79 20 73 65 6c 65 63 74 65 64 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 70 72 65 66 | dy.selected.eBGP.routes.are.pref |
46fe0 | 65 72 72 65 64 2c 20 69 73 20 73 6b 69 70 70 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f | erred,.is.skipped..If.this.optio |
47000 | 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 | n.is.specified.and.is.greater.th |
47020 | 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 | an.0,.then.the.PPP.module.will.s |
47040 | 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 | end.LCP.pings.of.the.echo.reques |
47060 | 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 00 49 66 | t.every.`<interval>`.seconds..If |
47080 | 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 | .this.option.is.specified.and.is |
470a0 | 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f | .greater.than.0,.then.the.PPP.mo |
470c0 | 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 | dule.will.send.LCP.pings.of.the. |
470e0 | 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 | echo.request.every.`<interval>`. |
47100 | 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 30 2a 2a | seconds..Default.value.is.**30** |
47120 | 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 | ..If.this.option.is.unset.(defau |
47140 | 6c 74 29 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 | lt),.incoming.IP.directed.broadc |
47160 | 61 73 74 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 66 6f 72 77 61 72 64 65 | ast.packets.will.not.be.forwarde |
47180 | 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 | d..If.this.option.is.unset.(defa |
471a0 | 75 6c 74 29 2c 20 72 65 70 6c 79 20 66 6f 72 20 61 6e 79 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 | ult),.reply.for.any.local.target |
471c0 | 20 49 50 20 61 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 | .IP.address,.configured.on.any.i |
471e0 | 6e 74 65 72 66 61 63 65 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e | nterface..If.this.parameter.is.n |
47200 | 6f 74 20 73 65 74 20 6f 72 20 30 2c 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 6c 69 6e 6b 20 77 | ot.set.or.0,.an.on-demand.link.w |
47220 | 69 6c 6c 20 6e 6f 74 20 62 65 20 74 61 6b 65 6e 20 64 6f 77 6e 20 77 68 65 6e 20 69 74 20 69 73 | ill.not.be.taken.down.when.it.is |
47240 | 20 69 64 6c 65 20 61 6e 64 20 61 66 74 65 72 20 74 68 65 20 69 6e 69 74 69 61 6c 20 65 73 74 61 | .idle.and.after.the.initial.esta |
47260 | 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 74 20 | blishment.of.the.connection..It. |
47280 | 77 69 6c 6c 20 73 74 61 79 20 75 70 20 66 6f 72 65 76 65 72 2e 00 49 66 20 74 68 69 73 20 70 61 | will.stay.up.forever..If.this.pa |
472a0 | 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 | rameter.is.not.set,.the.default. |
472c0 | 68 6f 6c 64 6f 66 66 20 74 69 6d 65 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 75 | holdoff.time.is.30.seconds..If.u |
472e0 | 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 | nset,.incoming.connections.to.th |
47300 | 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 | e.RADIUS.server.will.use.the.nea |
47320 | 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 | rest.interface.address.pointing. |
47340 | 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 | towards.the.server.-.making.it.e |
47360 | 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 | rror.prone.on.e.g..OSPF.networks |
47380 | 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 | .when.a.link.fails.and.a.backup. |
473a0 | 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 | route.is.taken..If.unset,.incomi |
473c0 | 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 | ng.connections.to.the.TACACS.ser |
473e0 | 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 | ver.will.use.the.nearest.interfa |
47400 | 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 | ce.address.pointing.towards.the. |
47420 | 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f | server.-.making.it.error.prone.o |
47440 | 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b | n.e.g..OSPF.networks.when.a.link |
47460 | 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b | .fails.and.a.backup.route.is.tak |
47480 | 65 6e 2e 00 49 66 20 79 6f 75 20 61 70 70 6c 79 20 61 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 | en..If.you.apply.a.parameter.to. |
474a0 | 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 | an.individual.neighbor.IP.addres |
474c0 | 73 2c 20 79 6f 75 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 61 63 74 69 6f 6e 20 64 65 66 69 6e | s,.you.override.the.action.defin |
474e0 | 65 64 20 66 6f 72 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 74 68 61 74 20 69 6e 63 6c 75 64 65 | ed.for.a.peer.group.that.include |
47500 | 73 20 74 68 61 74 20 49 50 20 61 64 64 72 65 73 73 2e 00 49 66 20 79 6f 75 20 61 72 65 20 61 20 | s.that.IP.address..If.you.are.a. |
47520 | 68 61 63 6b 65 72 20 6f 72 20 77 61 6e 74 20 74 6f 20 74 72 79 20 6f 6e 20 79 6f 75 72 20 6f 77 | hacker.or.want.to.try.on.your.ow |
47540 | 6e 20 77 65 20 73 75 70 70 6f 72 74 20 70 61 73 73 69 6e 67 20 72 61 77 20 4f 70 65 6e 56 50 4e | n.we.support.passing.raw.OpenVPN |
47560 | 20 6f 70 74 69 6f 6e 73 20 74 6f 20 4f 70 65 6e 56 50 4e 2e 00 49 66 20 79 6f 75 20 61 72 65 20 | .options.to.OpenVPN..If.you.are. |
47580 | 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 56 52 46 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 | configuring.a.VRF.for.management |
475a0 | 20 70 75 72 70 6f 73 65 73 2c 20 74 68 65 72 65 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f | .purposes,.there.is.currently.no |
475c0 | 20 77 61 79 20 74 6f 20 66 6f 72 63 65 20 73 79 73 74 65 6d 20 44 4e 53 20 74 72 61 66 66 69 63 | .way.to.force.system.DNS.traffic |
475e0 | 20 76 69 61 20 61 20 73 70 65 63 69 66 69 63 20 56 52 46 2e 00 49 66 20 79 6f 75 20 61 72 65 20 | .via.a.specific.VRF..If.you.are. |
47600 | 6e 65 77 20 74 6f 20 74 68 65 73 65 20 72 6f 75 74 69 6e 67 20 73 65 63 75 72 69 74 79 20 74 65 | new.to.these.routing.security.te |
47620 | 63 68 6e 6f 6c 6f 67 69 65 73 20 74 68 65 6e 20 74 68 65 72 65 20 69 73 20 61 6e 20 60 65 78 63 | chnologies.then.there.is.an.`exc |
47640 | 65 6c 6c 65 6e 74 20 67 75 69 64 65 20 74 6f 20 52 50 4b 49 60 5f 20 62 79 20 4e 4c 6e 65 74 20 | ellent.guide.to.RPKI`_.by.NLnet. |
47660 | 4c 61 62 73 20 77 68 69 63 68 20 77 69 6c 6c 20 67 65 74 20 79 6f 75 20 75 70 20 74 6f 20 73 70 | Labs.which.will.get.you.up.to.sp |
47680 | 65 65 64 20 76 65 72 79 20 71 75 69 63 6b 6c 79 2e 20 54 68 65 69 72 20 64 6f 63 75 6d 65 6e 74 | eed.very.quickly..Their.document |
476a0 | 61 74 69 6f 6e 20 65 78 70 6c 61 69 6e 73 20 65 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 77 | ation.explains.everything.from.w |
476c0 | 68 61 74 20 52 50 4b 49 20 69 73 20 74 6f 20 64 65 70 6c 6f 79 69 6e 67 20 69 74 20 69 6e 20 70 | hat.RPKI.is.to.deploying.it.in.p |
476e0 | 72 6f 64 75 63 74 69 6f 6e 2e 20 49 74 20 61 6c 73 6f 20 68 61 73 20 73 6f 6d 65 20 60 68 65 6c | roduction..It.also.has.some.`hel |
47700 | 70 20 61 6e 64 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 67 75 69 64 61 6e 63 65 60 5f 20 69 6e 63 | p.and.operational.guidance`_.inc |
47720 | 6c 75 64 69 6e 67 20 22 57 68 61 74 20 63 61 6e 20 49 20 64 6f 20 61 62 6f 75 74 20 6d 79 20 72 | luding."What.can.I.do.about.my.r |
47740 | 6f 75 74 65 20 68 61 76 69 6e 67 20 61 6e 20 49 6e 76 61 6c 69 64 20 73 74 61 74 65 3f 22 00 49 | oute.having.an.Invalid.state?".I |
47760 | 66 20 79 6f 75 20 61 72 65 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c | f.you.are.responsible.for.the.gl |
47780 | 6f 62 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 | obal.addresses.assigned.to.your. |
477a0 | 6e 65 74 77 6f 72 6b 2c 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 | network,.please.make.sure.that.y |
477c0 | 6f 75 72 20 70 72 65 66 69 78 65 73 20 68 61 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 | our.prefixes.have.ROAs.associate |
477e0 | 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 | d.with.them.to.avoid.being.`notf |
47800 | 6f 75 6e 64 60 20 62 79 20 52 50 4b 49 2e 20 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 | ound`.by.RPKI..For.most.ASNs.thi |
47820 | 73 20 77 69 6c 6c 20 69 6e 76 6f 6c 76 65 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 | s.will.involve.publishing.ROAs.v |
47840 | 69 61 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 | ia.your.:abbr:`RIR.(Regional.Int |
47860 | 65 72 6e 65 74 20 52 65 67 69 73 74 72 79 29 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 | ernet.Registry)`.(RIPE.NCC,.APNI |
47880 | 43 2c 20 41 52 49 4e 2c 20 4c 41 43 4e 49 43 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 | C,.ARIN,.LACNIC.or.AFRINIC),.and |
478a0 | 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 20 79 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 | .is.something.you.are.encouraged |
478c0 | 20 74 6f 20 64 6f 20 77 68 65 6e 65 76 65 72 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f | .to.do.whenever.you.plan.to.anno |
478e0 | 75 6e 63 65 20 61 64 64 72 65 73 73 65 73 20 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 | unce.addresses.into.the.DFZ..If. |
47900 | 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 46 51 2d 43 6f 44 65 6c 20 65 6d 62 65 64 64 65 64 20 | you.are.using.FQ-CoDel.embedded. |
47920 | 69 6e 74 6f 20 53 68 61 70 65 72 5f 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 6c 61 72 67 65 20 | into.Shaper_.and.you.have.large. |
47940 | 72 61 74 65 73 20 28 31 30 30 4d 62 69 74 20 61 6e 64 20 61 62 6f 76 65 29 2c 20 79 6f 75 20 6d | rates.(100Mbit.and.above),.you.m |
47960 | 61 79 20 63 6f 6e 73 69 64 65 72 20 69 6e 63 72 65 61 73 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 | ay.consider.increasing.`quantum` |
47980 | 20 74 6f 20 38 30 30 30 20 6f 72 20 68 69 67 68 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 | .to.8000.or.higher.so.that.the.s |
479a0 | 63 68 65 64 75 6c 65 72 20 73 61 76 65 73 20 43 50 55 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 | cheduler.saves.CPU..If.you.are.u |
479c0 | 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f | sing.OSPF.as.IGP,.always.the.clo |
479e0 | 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 | sest.interface.connected.to.the. |
47a00 | 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 57 69 74 68 20 56 79 4f 53 | RADIUS.server.is.used..With.VyOS |
47a20 | 20 31 2e 32 20 79 6f 75 20 63 61 6e 20 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 | .1.2.you.can.bind.all.outgoing.R |
47a40 | 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 | ADIUS.requests.to.a.single.sourc |
47a60 | 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 | e.IP.e.g..the.loopback.interface |
47a80 | 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 | ..If.you.are.using.OSPF.as.IGP,. |
47aa0 | 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e | always.the.closest.interface.con |
47ac0 | 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 | nected.to.the.RADIUS.server.is.u |
47ae0 | 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 | sed..You.can.bind.all.outgoing.R |
47b00 | 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 | ADIUS.requests.to.a.single.sourc |
47b20 | 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 | e.IP.e.g..the.loopback.interface |
47b40 | 2e 00 49 66 20 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 65 6e 63 72 | ..If.you.change.the.default.encr |
47b60 | 79 70 74 69 6f 6e 20 61 6e 64 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2c 20 62 | yption.and.hashing.algorithms,.b |
47b80 | 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 | e.sure.that.the.local.and.remote |
47ba0 | 20 65 6e 64 73 20 68 61 76 65 20 6d 61 74 63 68 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .ends.have.matching.configuratio |
47bc0 | 6e 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 6e 6f | ns,.otherwise.the.tunnel.will.no |
47be0 | 74 20 63 6f 6d 65 20 75 70 2e 00 49 66 20 79 6f 75 20 63 68 6f 6f 73 65 20 61 6e 79 20 61 73 20 | t.come.up..If.you.choose.any.as. |
47c00 | 74 68 65 20 6f 70 74 69 6f 6e 20 74 68 61 74 20 77 69 6c 6c 20 63 61 75 73 65 20 61 6c 6c 20 70 | the.option.that.will.cause.all.p |
47c20 | 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 61 72 65 20 73 65 6e 64 69 6e 67 20 72 6f 75 74 65 73 | rotocols.that.are.sending.routes |
47c40 | 20 74 6f 20 7a 65 62 72 61 2e 00 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 63 6c | .to.zebra..If.you.configure.a.cl |
47c60 | 61 73 73 20 66 6f 72 20 2a 2a 56 6f 49 50 20 74 72 61 66 66 69 63 2a 2a 2c 20 64 6f 6e 27 74 20 | ass.for.**VoIP.traffic**,.don't. |
47c80 | 67 69 76 65 20 69 74 20 61 6e 79 20 2a 63 65 69 6c 69 6e 67 2a 2c 20 6f 74 68 65 72 77 69 73 65 | give.it.any.*ceiling*,.otherwise |
47ca0 | 20 6e 65 77 20 56 6f 49 50 20 63 61 6c 6c 73 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 68 65 6e | .new.VoIP.calls.could.start.when |
47cc0 | 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 61 6e 64 20 67 65 74 20 73 | .the.link.is.available.and.get.s |
47ce0 | 75 64 64 65 6e 6c 79 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 6f 74 68 65 72 20 63 6c 61 73 73 | uddenly.dropped.when.other.class |
47d00 | 65 73 20 73 74 61 72 74 20 75 73 69 6e 67 20 74 68 65 69 72 20 61 73 73 69 67 6e 65 64 20 2a 62 | es.start.using.their.assigned.*b |
47d20 | 61 6e 64 77 69 64 74 68 2a 20 73 68 61 72 65 2e 00 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 74 | andwidth*.share..If.you.enable.t |
47d40 | 68 69 73 2c 20 79 6f 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 | his,.you.will.probably.want.to.s |
47d60 | 65 74 20 64 69 76 65 72 73 69 74 79 2d 66 61 63 74 6f 72 20 61 6e 64 20 63 68 61 6e 6e 65 6c 20 | et.diversity-factor.and.channel. |
47d80 | 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 73 6d 61 6c | below..If.you.enter.a.value.smal |
47da0 | 6c 65 72 20 74 68 61 6e 20 36 30 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 | ler.than.60.seconds.be.aware.tha |
47dc0 | 74 20 74 68 69 73 20 63 61 6e 20 61 6e 64 20 77 69 6c 6c 20 61 66 66 65 63 74 20 63 6f 6e 76 65 | t.this.can.and.will.affect.conve |
47de0 | 72 67 65 6e 63 65 20 61 74 20 73 63 61 6c 65 2e 00 49 66 20 79 6f 75 20 66 65 65 6c 20 62 65 74 | rgence.at.scale..If.you.feel.bet |
47e00 | 74 65 72 20 66 6f 72 77 61 72 64 69 6e 67 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ter.forwarding.all.authenticatio |
47e20 | 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 79 6f 75 72 20 65 6e 74 65 72 70 72 69 73 65 73 20 52 | n.requests.to.your.enterprises.R |
47e40 | 41 44 49 55 53 20 73 65 72 76 65 72 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 62 | ADIUS.server,.use.the.commands.b |
47e60 | 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 72 75 6e 20 74 68 69 73 20 | elow..If.you.happen.to.run.this. |
47e80 | 69 6e 20 61 20 76 69 72 74 75 61 6c 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 6c 69 6b 65 20 62 79 | in.a.virtual.environment.like.by |
47ea0 | 20 45 56 45 2d 4e 47 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 | .EVE-NG.you.need.to.ensure.your. |
47ec0 | 56 79 4f 53 20 4e 49 43 20 69 73 20 73 65 74 20 74 6f 20 75 73 65 20 74 68 65 20 65 31 30 30 30 | VyOS.NIC.is.set.to.use.the.e1000 |
47ee0 | 20 64 72 69 76 65 72 2e 20 55 73 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 76 69 72 | .driver..Using.the.default.``vir |
47f00 | 74 69 6f 2d 6e 65 74 2d 70 63 69 60 60 20 6f 72 20 74 68 65 20 60 60 76 6d 78 6e 65 74 33 60 60 | tio-net-pci``.or.the.``vmxnet3`` |
47f20 | 20 64 72 69 76 65 72 20 77 69 6c 6c 20 6e 6f 74 20 77 6f 72 6b 2e 20 49 43 4d 50 20 6d 65 73 73 | .driver.will.not.work..ICMP.mess |
47f40 | 61 67 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 70 72 6f 70 65 72 6c 79 20 70 72 6f 63 65 73 | ages.will.not.be.properly.proces |
47f60 | 73 65 64 2e 20 54 68 65 79 20 61 72 65 20 76 69 73 69 62 6c 65 20 6f 6e 20 74 68 65 20 76 69 72 | sed..They.are.visible.on.the.vir |
47f80 | 74 75 61 6c 20 77 69 72 65 20 62 75 74 20 77 69 6c 6c 20 6e 6f 74 20 6d 61 6b 65 20 69 74 20 66 | tual.wire.but.will.not.make.it.f |
47fa0 | 75 6c 6c 79 20 75 70 20 74 68 65 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 63 6b 2e 00 49 66 | ully.up.the.networking.stack..If |
47fc0 | 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 75 73 65 20 53 6f 6c 61 72 57 69 6e 64 73 20 4f 72 | .you.happen.to.use.SolarWinds.Or |
47fe0 | 69 6f 6e 20 61 73 20 4e 4d 53 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 | ion.as.NMS.you.can.also.use.the. |
48000 | 44 65 76 69 63 65 20 54 65 6d 70 6c 61 74 65 73 20 4d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 20 74 | Device.Templates.Management..A.t |
48020 | 65 6d 70 6c 61 74 65 20 66 6f 72 20 56 79 4f 53 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 69 | emplate.for.VyOS.can.be.easily.i |
48040 | 6d 70 6f 72 74 65 64 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 65 64 20 74 6f 20 75 73 65 20 | mported..If.you.happened.to.use. |
48060 | 61 20 43 69 73 63 6f 20 4e 4d 2d 31 36 41 20 2d 20 53 69 78 74 65 65 6e 20 50 6f 72 74 20 41 73 | a.Cisco.NM-16A.-.Sixteen.Port.As |
48080 | 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 6f 72 20 4e 4d 2d 33 32 41 20 2d 20 54 | ync.Network.Module.or.NM-32A.-.T |
480a0 | 68 69 72 74 79 2d 74 77 6f 20 50 6f 72 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 | hirty-two.Port.Async.Network.Mod |
480c0 | 75 6c 65 20 2d 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 56 79 4f 53 20 72 65 70 6c 61 63 65 6d | ule.-.this.is.your.VyOS.replacem |
480e0 | 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 61 20 6c 6f 74 20 6f 66 20 69 6e 74 65 72 66 | ent..If.you.have.a.lot.of.interf |
48100 | 61 63 65 73 2c 20 61 6e 64 2f 6f 72 20 61 20 6c 6f 74 20 6f 66 20 73 75 62 6e 65 74 73 2c 20 74 | aces,.and/or.a.lot.of.subnets,.t |
48120 | 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 4f 53 50 46 20 76 69 61 20 74 68 69 73 20 63 6f 6d 6d 61 | hen.enabling.OSPF.via.this.comma |
48140 | 6e 64 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e 20 61 20 73 6c 69 67 68 74 20 70 65 72 66 6f 72 | nd.may.result.in.a.slight.perfor |
48160 | 6d 61 6e 63 65 20 69 6d 70 72 6f 76 65 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 63 | mance.improvement..If.you.have.c |
48180 | 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 60 49 4e 53 49 44 45 2d 4f 55 54 60 20 70 6f 6c 69 63 | onfigured.the.`INSIDE-OUT`.polic |
481a0 | 79 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 64 64 20 61 64 64 69 74 69 6f 6e | y,.you.will.need.to.add.addition |
481c0 | 61 6c 20 72 75 6c 65 73 20 74 6f 20 70 65 72 6d 69 74 20 69 6e 62 6f 75 6e 64 20 4e 41 54 20 74 | al.rules.to.permit.inbound.NAT.t |
481e0 | 72 61 66 66 69 63 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 | raffic..If.you.have.multiple.add |
48200 | 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 61 72 74 69 63 75 6c 61 | resses.configured.on.a.particula |
48220 | 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 77 6f 75 6c 64 20 6c 69 6b 65 20 50 49 4d 20 74 | r.interface.and.would.like.PIM.t |
48240 | 6f 20 75 73 65 20 61 20 73 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | o.use.a.specific.source.address. |
48260 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 | associated.with.that.interface.. |
48280 | 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 61 6d 70 6c 65 20 61 6c 73 6f 20 65 67 72 65 73 | If.you.need.to.sample.also.egres |
482a0 | 73 20 74 72 61 66 66 69 63 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 | s.traffic,.you.may.want.to.confi |
482c0 | 67 75 72 65 20 65 67 72 65 73 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 3a 00 49 66 20 | gure.egress.flow-accounting:.If. |
482e0 | 79 6f 75 20 6f 6e 6c 79 20 77 61 6e 74 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 20 75 73 | you.only.want.to.check.if.the.us |
48300 | 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 63 61 6e 20 61 75 | er.account.is.enabled.and.can.au |
48320 | 74 68 65 6e 74 69 63 61 74 65 20 28 61 67 61 69 6e 73 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 | thenticate.(against.the.primary. |
48340 | 67 72 6f 75 70 29 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 6e 69 70 70 65 64 20 69 73 20 | group).the.following.snipped.is. |
48360 | 73 75 66 66 69 63 69 65 6e 74 3a 00 49 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 | sufficient:.If.you.set.a.custom. |
48380 | 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 | RADIUS.attribute.you.must.define |
483a0 | 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 | .it.on.both.dictionaries.at.RADI |
483c0 | 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 77 68 69 63 68 20 69 73 20 74 | US.server.and.client,.which.is.t |
483e0 | 68 65 20 76 79 6f 73 20 72 6f 75 74 65 72 20 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2e 00 49 | he.vyos.router.in.our.example..I |
48400 | 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 | f.you.set.a.custom.RADIUS.attrib |
48420 | 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 | ute.you.must.define.it.on.both.d |
48440 | 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 | ictionaries.at.RADIUS.server.and |
48460 | 20 63 6c 69 65 6e 74 2e 00 49 66 20 79 6f 75 20 75 73 65 20 55 53 42 20 74 6f 20 73 65 72 69 61 | .client..If.you.use.USB.to.seria |
48480 | 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 79 | l.converters.for.connecting.to.y |
484a0 | 6f 75 72 20 56 79 4f 53 20 61 70 70 6c 69 61 6e 63 65 20 70 6c 65 61 73 65 20 6e 6f 74 65 20 74 | our.VyOS.appliance.please.note.t |
484c0 | 68 61 74 20 6d 6f 73 74 20 6f 66 20 74 68 65 6d 20 75 73 65 20 73 6f 66 74 77 61 72 65 20 65 6d | hat.most.of.them.use.software.em |
484e0 | 75 6c 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2e 20 54 68 | ulation.without.flow.control..Th |
48500 | 69 73 20 6d 65 61 6e 73 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 | is.means.you.should.start.with.a |
48520 | 20 63 6f 6d 6d 6f 6e 20 62 61 75 64 20 72 61 74 65 20 28 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 39 | .common.baud.rate.(most.likely.9 |
48540 | 36 30 30 20 62 61 75 64 29 20 61 73 20 6f 74 68 65 72 77 69 73 65 20 79 6f 75 20 70 72 6f 62 61 | 600.baud).as.otherwise.you.proba |
48560 | 62 6c 79 20 63 61 6e 20 6e 6f 74 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 | bly.can.not.connect.to.the.devic |
48580 | 65 20 75 73 69 6e 67 20 68 69 67 68 20 73 70 65 65 64 20 62 61 75 64 20 72 61 74 65 73 20 61 73 | e.using.high.speed.baud.rates.as |
485a0 | 20 79 6f 75 72 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 73 69 6d 70 6c 79 20 63 61 | .your.serial.converter.simply.ca |
485c0 | 6e 20 6e 6f 74 20 70 72 6f 63 65 73 73 20 74 68 69 73 20 64 61 74 61 20 72 61 74 65 2e 00 49 66 | n.not.process.this.data.rate..If |
485e0 | 20 79 6f 75 20 75 73 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 | .you.use.a.self-signed.certifica |
48600 | 74 65 2c 20 64 6f 20 6e 6f 74 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 43 41 20 | te,.do.not.forget.to.install.CA. |
48620 | 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 | on.the.client.side..If.you.want. |
48640 | 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 | to.change.the.maximum.number.of. |
48660 | 66 6c 6f 77 73 2c 20 77 68 69 63 68 20 61 72 65 20 74 72 61 63 6b 69 6e 67 20 73 69 6d 75 6c 74 | flows,.which.are.tracking.simult |
48680 | 61 6e 65 6f 75 73 6c 79 2c 20 79 6f 75 20 6d 61 79 20 64 6f 20 74 68 69 73 20 77 69 74 68 20 74 | aneously,.you.may.do.this.with.t |
486a0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 28 64 65 66 61 75 6c 74 20 38 31 39 32 29 2e 00 49 66 20 79 | his.command.(default.8192)..If.y |
486c0 | 6f 75 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 61 20 72 75 6c 65 20 62 75 74 20 6c 65 | ou.want.to.disable.a.rule.but.le |
486e0 | 74 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 66 20 79 6f | t.it.in.the.configuration..If.yo |
48700 | 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 20 61 64 6d 69 6e 20 75 73 65 72 73 20 74 6f 20 61 75 | u.want.to.have.admin.users.to.au |
48720 | 74 68 65 6e 74 69 63 61 74 65 20 76 69 61 20 52 41 44 49 55 53 20 69 74 20 69 73 20 65 73 73 65 | thenticate.via.RADIUS.it.is.esse |
48740 | 6e 74 69 61 6c 20 74 6f 20 73 65 6e 74 20 74 68 65 20 60 60 43 69 73 63 6f 2d 41 56 2d 50 61 69 | ntial.to.sent.the.``Cisco-AV-Pai |
48760 | 72 20 73 68 65 6c 6c 3a 70 72 69 76 2d 6c 76 6c 3d 31 35 60 60 20 61 74 74 72 69 62 75 74 65 2e | r.shell:priv-lvl=15``.attribute. |
48780 | 20 57 69 74 68 6f 75 74 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 77 69 6c 6c 20 | .Without.the.attribute.you.will. |
487a0 | 6f 6e 6c 79 20 67 65 74 20 72 65 67 75 6c 61 72 2c 20 6e 6f 6e 20 70 72 69 76 69 6c 65 67 75 65 | only.get.regular,.non.privilegue |
487c0 | 64 2c 20 73 79 73 74 65 6d 20 75 73 65 72 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 | d,.system.users..If.you.want.to. |
487e0 | 75 73 65 20 65 78 69 73 74 69 6e 67 20 62 6c 61 63 6b 6c 69 73 74 73 20 79 6f 75 20 68 61 76 65 | use.existing.blacklists.you.have |
48800 | 20 74 6f 20 63 72 65 61 74 65 2f 64 6f 77 6e 6c 6f 61 64 20 61 20 64 61 74 61 62 61 73 65 20 66 | .to.create/download.a.database.f |
48820 | 69 72 73 74 2e 20 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 | irst..Otherwise.you.will.not.be. |
48840 | 61 62 6c 65 20 74 6f 20 63 6f 6d 6d 69 74 20 74 68 65 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 | able.to.commit.the.config.change |
48860 | 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 79 6f 75 72 20 72 6f 75 74 65 72 20 74 6f 20 66 6f | s..If.you.want.your.router.to.fo |
48880 | 72 77 61 72 64 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 6e 20 65 78 74 65 72 6e | rward.DHCP.requests.to.an.extern |
488a0 | 61 6c 20 44 48 43 50 20 73 65 72 76 65 72 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 | al.DHCP.server.you.can.configure |
488c0 | 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 20 72 65 6c | .the.system.to.act.as.a.DHCP.rel |
488e0 | 61 79 20 61 67 65 6e 74 2e 20 54 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 | ay.agent..The.DHCP.relay.agent.w |
48900 | 6f 72 6b 73 20 77 69 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | orks.with.IPv4.and.IPv6.addresse |
48920 | 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 2c 20 6e 65 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 | s..If.you.want,.need,.and.should |
48940 | 20 75 73 65 20 6d 6f 72 65 20 61 64 76 61 6e 63 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 | .use.more.advanced.encryption.ci |
48960 | 70 68 65 72 73 20 28 64 65 66 61 75 6c 74 20 69 73 20 73 74 69 6c 6c 20 33 44 45 53 29 20 79 6f | phers.(default.is.still.3DES).yo |
48980 | 75 20 6e 65 65 64 20 74 6f 20 70 72 6f 76 69 73 69 6f 6e 20 79 6f 75 72 20 64 65 76 69 63 65 20 | u.need.to.provision.your.device. |
489a0 | 75 73 69 6e 67 20 61 20 73 6f 2d 63 61 6c 6c 65 64 20 22 44 65 76 69 63 65 20 50 72 6f 66 69 6c | using.a.so-called."Device.Profil |
489c0 | 65 22 2e 20 41 20 70 72 6f 66 69 6c 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 74 65 78 74 20 66 | e"..A.profile.is.a.simple.text.f |
489e0 | 69 6c 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 58 4d 4c 20 6e 6f 64 65 73 20 77 69 74 68 20 61 20 | ile.containing.XML.nodes.with.a. |
48a00 | 60 60 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 60 60 20 66 69 6c 65 20 65 78 74 65 6e 73 69 6f 6e | ``.mobileconfig``.file.extension |
48a20 | 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 61 6e 64 20 6f 70 65 6e 65 64 20 6f 6e 20 | .that.can.be.sent.and.opened.on. |
48a40 | 61 6e 79 20 64 65 76 69 63 65 20 66 72 6f 6d 20 61 6e 20 45 2d 4d 61 69 6c 2e 00 49 66 20 79 6f | any.device.from.an.E-Mail..If.yo |
48a60 | 75 27 76 65 20 63 6f 6d 70 6c 65 74 65 64 20 61 6c 6c 20 74 68 65 20 61 62 6f 76 65 20 73 74 65 | u've.completed.all.the.above.ste |
48a80 | 70 73 20 79 6f 75 20 6e 6f 20 64 6f 75 62 74 20 77 61 6e 74 20 74 6f 20 73 65 65 20 69 66 20 69 | ps.you.no.doubt.want.to.see.if.i |
48aa0 | 74 27 73 20 61 6c 6c 20 77 6f 72 6b 69 6e 67 2e 00 49 67 6e 6f 72 65 20 41 53 5f 50 41 54 48 20 | t's.all.working..Ignore.AS_PATH. |
48ac0 | 6c 65 6e 67 74 68 20 77 68 65 6e 20 73 65 6c 65 63 74 69 6e 67 20 61 20 72 6f 75 74 65 00 49 67 | length.when.selecting.a.route.Ig |
48ae0 | 6e 6f 72 65 20 56 52 52 50 20 6d 61 69 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 75 6c 74 73 00 | nore.VRRP.main.interface.faults. |
48b00 | 49 6d 61 67 65 20 74 68 61 6e 6b 66 75 6c 6c 79 20 62 6f 72 72 6f 77 65 64 20 66 72 6f 6d 20 68 | Image.thankfully.borrowed.from.h |
48b20 | 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 46 69 6c | ttps://en.wikipedia.org/wiki/Fil |
48b40 | 65 3a 53 4e 4d 50 5f 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5f 70 72 69 6e 63 69 70 6c 65 73 5f | e:SNMP_communication_principles_ |
48b60 | 64 69 61 67 72 61 6d 2e 50 4e 47 20 77 68 69 63 68 20 69 73 20 75 6e 64 65 72 20 74 68 65 20 47 | diagram.PNG.which.is.under.the.G |
48b80 | 4e 55 20 46 72 65 65 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 4c 69 63 65 6e 73 65 00 49 6d | NU.Free.Documentation.License.Im |
48ba0 | 61 67 69 6e 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 00 49 6d 6d | agine.the.following.topology.Imm |
48bc0 | 65 64 69 61 74 65 00 49 6d 70 6f 72 74 20 66 69 6c 65 73 20 74 6f 20 50 4b 49 20 66 6f 72 6d 61 | ediate.Import.files.to.PKI.forma |
48be0 | 74 00 49 6d 70 6f 72 74 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 | t.Import.the.CAs.private.key.por |
48c00 | 74 69 6f 6e 20 74 6f 20 74 68 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 | tion.to.the.CLI..This.should.nev |
48c20 | 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 | er.leave.the.system.as.it.is.use |
48c40 | 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 20 54 68 65 20 6b 65 79 20 69 | d.to.decrypt.the.data..The.key.i |
48c60 | 73 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f | s.required.if.you.use.VyOS.as.yo |
48c80 | 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 2e 00 49 6d 70 6f 72 74 | ur.certificate.generator..Import |
48ca0 | 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 73 74 6f 72 65 | .the.OpenVPN.shared.secret.store |
48cc0 | 64 20 69 6e 20 66 69 6c 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 | d.in.file.to.the.VyOS.CLI..Impor |
48ce0 | 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 20 | t.the.certificate.from.the.file. |
48d00 | 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 70 72 69 76 61 74 65 20 | to.VyOS.CLI..Import.the.private. |
48d20 | 6b 65 79 20 6f 66 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 56 79 | key.of.the.certificate.to.the.Vy |
48d40 | 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 | OS.CLI..This.should.never.leave. |
48d60 | 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 | the.system.as.it.is.used.to.decr |
48d80 | 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 70 75 62 6c 69 63 20 | ypt.the.data..Import.the.public. |
48da0 | 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 | CA.certificate.from.the.defined. |
48dc0 | 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 65 64 20 70 72 65 66 69 | file.to.VyOS.CLI..Imported.prefi |
48de0 | 78 65 73 20 64 75 72 69 6e 67 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 61 79 20 68 61 | xes.during.the.validation.may.ha |
48e00 | 76 65 20 76 61 6c 75 65 73 3a 00 49 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 20 69 74 20 69 73 20 | ve.values:.In.:rfc:`3069`.it.is. |
48e20 | 63 61 6c 6c 65 64 20 56 4c 41 4e 20 41 67 67 72 65 67 61 74 69 6f 6e 00 49 6e 20 3a 76 79 74 61 | called.VLAN.Aggregation.In.:vyta |
48e40 | 73 6b 3a 60 54 32 31 39 39 60 20 74 68 65 20 73 79 6e 74 61 78 20 6f 66 20 74 68 65 20 7a 6f 6e | sk:`T2199`.the.syntax.of.the.zon |
48e60 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 65 | e.configuration.was.changed..The |
48e80 | 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 76 65 64 20 66 72 6f 6d 20 60 | .zone.configuration.moved.from.` |
48ea0 | 60 7a 6f 6e 65 2d 70 6f 6c 69 63 79 20 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 20 74 6f 20 60 60 | `zone-policy.zone.<name>``.to.`` |
48ec0 | 66 69 72 65 77 61 6c 6c 20 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 2e 00 49 6e 20 49 6e 74 65 72 | firewall.zone.<name>``..In.Inter |
48ee0 | 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 36 20 28 49 50 76 36 29 20 6e 65 | net.Protocol.Version.6.(IPv6).ne |
48f00 | 74 77 6f 72 6b 73 2c 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 41 52 50 | tworks,.the.functionality.of.ARP |
48f20 | 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 | .is.provided.by.the.Neighbor.Dis |
48f40 | 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 28 4e 44 50 29 2e 00 49 6e 20 50 72 69 6f 72 69 | covery.Protocol.(NDP)..In.Priori |
48f60 | 74 79 20 51 75 65 75 65 20 77 65 20 64 6f 20 6e 6f 74 20 64 65 66 69 6e 65 20 63 6c 61 73 65 73 | ty.Queue.we.do.not.define.clases |
48f80 | 20 77 69 74 68 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 63 6c 61 73 73 20 49 44 20 6e 75 6d | .with.a.meaningless.class.ID.num |
48fa0 | 62 65 72 20 62 75 74 20 77 69 74 68 20 61 20 63 6c 61 73 73 20 70 72 69 6f 72 69 74 79 20 6e 75 | ber.but.with.a.class.priority.nu |
48fc0 | 6d 62 65 72 20 28 31 2d 37 29 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 | mber.(1-7)..The.lower.the.number |
48fe0 | 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 6e 20 56 79 | ,.the.higher.the.priority..In.Vy |
49000 | 4f 53 20 74 68 65 20 74 65 72 6d 73 20 60 60 76 69 66 2d 73 60 60 20 61 6e 64 20 60 60 76 69 66 | OS.the.terms.``vif-s``.and.``vif |
49020 | 2d 63 60 60 20 73 74 61 6e 64 20 66 6f 72 20 74 68 65 20 65 74 68 65 72 74 79 70 65 20 74 61 67 | -c``.stand.for.the.ethertype.tag |
49040 | 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 56 79 4f 53 2c 20 45 53 50 20 61 74 | s.that.are.used..In.VyOS,.ESP.at |
49060 | 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 45 | tributes.are.specified.through.E |
49080 | 53 50 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 | SP.groups..Multiple.proposals.ca |
490a0 | 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 | n.be.specified.in.a.single.group |
490c0 | 2e 00 49 6e 20 56 79 4f 53 2c 20 49 4b 45 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 | ..In.VyOS,.IKE.attributes.are.sp |
490e0 | 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 49 4b 45 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 | ecified.through.IKE.groups..Mult |
49100 | 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | iple.proposals.can.be.specified. |
49120 | 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 61 20 63 6c | in.a.single.group..In.VyOS,.a.cl |
49140 | 61 73 73 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 6e 75 6d 62 65 72 20 79 6f | ass.is.identified.by.a.number.yo |
49160 | 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 69 74 | u.can.choose.when.configuring.it |
49180 | 2e 00 49 6e 20 61 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 | ..In.a.minimal.configuration,.th |
491a0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 3a 00 49 6e | e.following.must.be.provided:.In |
491c0 | 20 61 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 68 65 61 64 65 72 20 63 6f 6e 74 65 78 74 2c | .a.multiple.VLAN.header.context, |
491e0 | 20 6f 75 74 20 6f 66 20 63 6f 6e 76 65 6e 69 65 6e 63 65 20 74 68 65 20 74 65 72 6d 20 22 56 4c | .out.of.convenience.the.term."VL |
49200 | 41 4e 20 74 61 67 22 20 6f 72 20 6a 75 73 74 20 22 74 61 67 22 20 66 6f 72 20 73 68 6f 72 74 20 | AN.tag".or.just."tag".for.short. |
49220 | 69 73 20 6f 66 74 65 6e 20 75 73 65 64 20 69 6e 20 70 6c 61 63 65 20 6f 66 20 22 38 30 32 2e 31 | is.often.used.in.place.of."802.1 |
49240 | 71 5f 20 56 4c 41 4e 20 68 65 61 64 65 72 22 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c | q_.VLAN.header"..QinQ.allows.mul |
49260 | 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 69 6e 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 | tiple.VLAN.tags.in.an.Ethernet.f |
49280 | 72 61 6d 65 3b 20 74 6f 67 65 74 68 65 72 20 74 68 65 73 65 20 74 61 67 73 20 63 6f 6e 73 74 69 | rame;.together.these.tags.consti |
492a0 | 74 75 74 65 20 61 20 74 61 67 20 73 74 61 63 6b 2e 20 57 68 65 6e 20 75 73 65 64 20 69 6e 20 74 | tute.a.tag.stack..When.used.in.t |
492c0 | 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2c | he.context.of.an.Ethernet.frame, |
492e0 | 20 61 20 51 69 6e 51 20 66 72 61 6d 65 20 69 73 20 61 20 66 72 61 6d 65 20 74 68 61 74 20 68 61 | .a.QinQ.frame.is.a.frame.that.ha |
49300 | 73 20 32 20 56 4c 41 4e 20 38 30 32 2e 31 71 5f 20 68 65 61 64 65 72 73 20 28 64 6f 75 62 6c 65 | s.2.VLAN.802.1q_.headers.(double |
49320 | 2d 74 61 67 67 65 64 29 2e 00 49 6e 20 61 20 6e 75 74 73 68 65 6c 6c 2c 20 74 68 65 20 63 75 72 | -tagged)..In.a.nutshell,.the.cur |
49340 | 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 70 72 6f 76 69 64 65 73 20 74 68 65 | rent.implementation.provides.the |
49360 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 65 61 74 75 72 65 73 3a 00 49 6e 20 61 64 64 69 74 69 6f 6e | .following.features:.In.addition |
49380 | 20 74 6f 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e | .to.:abbr:`RADIUS.(Remote.Authen |
493a0 | 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 2c | tication.Dial-In.User.Service)`, |
493c0 | 20 3a 61 62 62 72 3a 60 54 41 43 41 43 53 20 28 54 65 72 6d 69 6e 61 6c 20 41 63 63 65 73 73 20 | .:abbr:`TACACS.(Terminal.Access. |
493e0 | 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 53 79 73 74 65 6d | Controller.Access.Control.System |
49400 | 29 60 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 6c 61 72 67 65 20 64 65 | )`.can.also.be.found.in.large.de |
49420 | 70 6c 6f 79 6d 65 6e 74 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c 61 | ployments..In.addition.to.displa |
49440 | 79 69 6e 67 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | ying.flow.accounting.information |
49460 | 20 6c 6f 63 61 6c 6c 79 2c 20 6f 6e 65 20 63 61 6e 20 61 6c 73 6f 20 65 78 70 6f 72 74 65 64 20 | .locally,.one.can.also.exported. |
49480 | 74 68 65 6d 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 73 65 72 76 65 72 2e 00 49 6e 20 | them.to.a.collection.server..In. |
494a0 | 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 74 | addition.to.the.command.above,.t |
494c0 | 68 65 20 6f 75 74 70 75 74 20 69 73 20 69 6e 20 61 20 66 6f 72 6d 61 74 20 77 68 69 63 68 20 63 | he.output.is.in.a.format.which.c |
494e0 | 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 69 6d 70 6f 72 74 20 74 68 | an.be.used.to.directly.import.th |
49500 | 65 20 6b 65 79 20 69 6e 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 62 79 20 73 69 6d 70 6c | e.key.into.the.VyOS.CLI.by.simpl |
49520 | 79 20 63 6f 70 79 2d 70 61 73 74 69 6e 67 20 74 68 65 20 6f 75 74 70 75 74 20 66 72 6f 6d 20 6f | y.copy-pasting.the.output.from.o |
49540 | 70 2d 6d 6f 64 65 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 | p-mode.into.configuration.mode.. |
49560 | 49 6e 20 61 64 64 69 74 69 6f 6e 20 77 65 20 73 65 74 75 70 20 49 50 76 36 20 3a 61 62 62 72 3a | In.addition.we.setup.IPv6.:abbr: |
49580 | 60 52 41 20 28 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 74 6f 20 | `RA.(Router.Advertisements)`.to. |
495a0 | 6d 61 6b 65 20 74 68 65 20 70 72 65 66 69 78 20 6b 6e 6f 77 6e 20 6f 6e 20 74 68 65 20 65 74 68 | make.the.prefix.known.on.the.eth |
495c0 | 30 20 6c 69 6e 6b 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f | 0.link..In.addition.you.can.also |
495e0 | 20 64 69 73 61 62 6c 65 20 74 68 65 20 77 68 6f 6c 65 20 73 65 72 76 69 63 65 20 77 69 74 68 6f | .disable.the.whole.service.witho |
49600 | 75 74 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 | ut.the.need.to.remove.it.from.th |
49620 | 65 20 63 75 72 72 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 61 64 64 69 | e.current.configuration..In.addi |
49640 | 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 65 63 69 66 69 79 20 74 68 65 20 49 50 20 61 64 | tion.you.will.specifiy.the.IP.ad |
49660 | 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 | dress.or.FQDN.for.the.client.whe |
49680 | 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 | re.it.will.connect.to..The.addre |
496a0 | 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 | ss.parameter.can.be.used.up.to.t |
496c0 | 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 | wo.times.and.is.used.to.assign.t |
496e0 | 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f | he.clients.specific.IPv4.(/32).o |
49700 | 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 | r.IPv6.(/128).address..In.additi |
49720 | 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 65 63 69 66 79 20 74 68 65 20 49 50 20 61 64 64 72 65 | on.you.will.specify.the.IP.addre |
49740 | 73 73 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 | ss.or.FQDN.for.the.client.where. |
49760 | 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 | it.will.connect.to..The.address. |
49780 | 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 | parameter.can.be.used.up.to.two. |
497a0 | 74 69 6d 65 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 | times.and.is.used.to.assign.the. |
497c0 | 63 6c 69 65 6e 74 73 20 73 70 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 | clients.specific.IPv4.(/32).or.I |
497e0 | 50 76 36 20 28 2f 31 32 38 29 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 2c | Pv6.(/128).address..In.addition, |
49800 | 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 61 72 61 | .you.can.specify.many.other.para |
49820 | 6d 65 74 65 72 73 20 74 6f 20 67 65 74 20 42 47 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 49 | meters.to.get.BGP.information:.I |
49840 | 6e 20 61 6e 20 2a 2a 61 64 64 72 65 73 73 20 67 72 6f 75 70 2a 2a 20 61 20 73 69 6e 67 6c 65 20 | n.an.**address.group**.a.single. |
49860 | 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 | IP.address.or.IP.address.ranges. |
49880 | 61 72 65 20 64 65 66 69 6e 65 64 2e 00 49 6e 20 62 6f 74 68 20 63 61 73 65 73 2c 20 77 65 20 77 | are.defined..In.both.cases,.we.w |
498a0 | 69 6c 6c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 3a 00 | ill.use.the.following.settings:. |
498c0 | 49 6e 20 63 61 73 65 20 6f 66 20 70 65 65 72 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 | In.case.of.peer-peer.relationshi |
498e0 | 70 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 | p.routes.can.be.received.only.if |
49900 | 20 4f 54 43 20 76 61 6c 75 65 20 69 73 20 65 71 75 61 6c 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 | .OTC.value.is.equal.to.your.neig |
49920 | 68 62 6f 72 20 41 53 20 6e 75 6d 62 65 72 2e 00 49 6e 20 63 61 73 65 2c 20 69 66 20 79 6f 75 20 | hbor.AS.number..In.case,.if.you. |
49940 | 6e 65 65 64 20 74 6f 20 63 61 74 63 68 20 73 6f 6d 65 20 6c 6f 67 73 20 66 72 6f 6d 20 66 6c 6f | need.to.catch.some.logs.from.flo |
49960 | 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e | w-accounting.daemon,.you.may.con |
49980 | 66 69 67 75 72 65 20 6c 6f 67 67 69 6e 67 20 66 61 63 69 6c 69 74 79 3a 00 49 6e 20 63 6f 6e 74 | figure.logging.facility:.In.cont |
499a0 | 72 61 73 74 20 74 6f 20 73 69 6d 70 6c 65 20 52 45 44 2c 20 56 79 4f 53 27 20 52 61 6e 64 6f 6d | rast.to.simple.RED,.VyOS'.Random |
499c0 | 2d 44 65 74 65 63 74 20 75 73 65 73 20 61 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f | -Detect.uses.a.Generalized.Rando |
499e0 | 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 70 72 6f 76 69 | m.Early.Detect.policy.that.provi |
49a00 | 64 65 73 20 64 69 66 66 65 72 65 6e 74 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 62 61 73 | des.different.virtual.queues.bas |
49a20 | 65 64 20 6f 6e 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 76 61 6c 75 65 20 73 6f | ed.on.the.IP.Precedence.value.so |
49a40 | 20 74 68 61 74 20 73 6f 6d 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 63 61 6e 20 64 72 | .that.some.virtual.queues.can.dr |
49a60 | 6f 70 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 74 68 61 6e 20 6f 74 68 65 72 73 2e 00 49 6e 20 | op.more.packets.than.others..In. |
49a80 | 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 | failover.mode,.one.interface.is. |
49aa0 | 73 65 74 20 74 6f 20 62 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 | set.to.be.the.primary.interface. |
49ac0 | 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 73 65 63 6f 6e 64 61 | and.other.interfaces.are.seconda |
49ae0 | 72 79 20 6f 72 20 73 70 61 72 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 62 61 6c 61 6e 63 69 6e | ry.or.spare..Instead.of.balancin |
49b00 | 67 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 61 6c 6c 20 68 65 61 6c 74 68 79 20 69 6e 74 | g.traffic.across.all.healthy.int |
49b20 | 65 72 66 61 63 65 73 2c 20 6f 6e 6c 79 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 | erfaces,.only.the.primary.interf |
49b40 | 61 63 65 20 69 73 20 75 73 65 64 20 61 6e 64 20 69 6e 20 63 61 73 65 20 6f 66 20 66 61 69 6c 75 | ace.is.used.and.in.case.of.failu |
49b60 | 72 65 2c 20 61 20 73 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 73 65 6c 65 63 74 | re,.a.secondary.interface.select |
49b80 | 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 69 6e | ed.from.the.pool.of.available.in |
49ba0 | 74 65 72 66 61 63 65 73 20 74 61 6b 65 73 20 6f 76 65 72 2e 20 54 68 65 20 70 72 69 6d 61 72 79 | terfaces.takes.over..The.primary |
49bc0 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 | .interface.is.selected.based.on. |
49be0 | 69 74 73 20 77 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 68 2c 20 6f 74 68 65 72 73 20 62 65 | its.weight.and.health,.others.be |
49c00 | 63 6f 6d 65 20 73 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 2e 20 53 65 63 6f 6e | come.secondary.interfaces..Secon |
49c20 | 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 61 20 66 | dary.interfaces.to.take.over.a.f |
49c40 | 61 69 6c 65 64 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 63 68 6f 73 | ailed.primary.interface.are.chos |
49c60 | 65 6e 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 69 6e 74 65 | en.from.the.load.balancer's.inte |
49c80 | 72 66 61 63 65 20 70 6f 6f 6c 2c 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 77 | rface.pool,.depending.on.their.w |
49ca0 | 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 68 2e 20 49 6e 74 65 72 66 61 63 65 20 72 6f 6c 65 | eight.and.health..Interface.role |
49cc0 | 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 | s.can.also.be.selected.based.on. |
49ce0 | 72 75 6c 65 20 6f 72 64 65 72 20 62 79 20 69 6e 63 6c 75 64 69 6e 67 20 69 6e 74 65 72 66 61 63 | rule.order.by.including.interfac |
49d00 | 65 73 20 69 6e 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 6f 72 64 65 72 69 | es.in.balancing.rules.and.orderi |
49d20 | 6e 67 20 74 68 6f 73 65 20 72 75 6c 65 73 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 54 6f 20 70 | ng.those.rules.accordingly..To.p |
49d40 | 75 74 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 20 66 61 69 6c 6f 76 65 72 | ut.the.load.balancer.in.failover |
49d60 | 20 6d 6f 64 65 2c 20 63 72 65 61 74 65 20 61 20 66 61 69 6c 6f 76 65 72 20 72 75 6c 65 3a 00 49 | .mode,.create.a.failover.rule:.I |
49d80 | 6e 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 72 75 6c 65 73 2c 20 74 68 65 20 61 63 74 | n.firewall.bridge.rules,.the.act |
49da0 | 69 6f 6e 20 63 61 6e 20 62 65 3a 00 49 6e 20 67 65 6e 65 72 61 6c 2c 20 4f 53 50 46 20 70 72 6f | ion.can.be:.In.general,.OSPF.pro |
49dc0 | 74 6f 63 6f 6c 20 72 65 71 75 69 72 65 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 28 | tocol.requires.a.backbone.area.( |
49de0 | 61 72 65 61 20 30 29 20 74 6f 20 62 65 20 63 6f 68 65 72 65 6e 74 20 61 6e 64 20 66 75 6c 6c 79 | area.0).to.be.coherent.and.fully |
49e00 | 20 63 6f 6e 6e 65 63 74 65 64 2e 20 49 2e 65 2e 20 61 6e 79 20 62 61 63 6b 62 6f 6e 65 20 61 72 | .connected..I.e..any.backbone.ar |
49e20 | 65 61 20 72 6f 75 74 65 72 20 6d 75 73 74 20 68 61 76 65 20 61 20 72 6f 75 74 65 20 74 6f 20 61 | ea.router.must.have.a.route.to.a |
49e40 | 6e 79 20 6f 74 68 65 72 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 2e 20 4d | ny.other.backbone.area.router..M |
49e60 | 6f 72 65 6f 76 65 72 2c 20 65 76 65 72 79 20 41 42 52 20 6d 75 73 74 20 68 61 76 65 20 61 20 6c | oreover,.every.ABR.must.have.a.l |
49e80 | 69 6e 6b 20 74 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 48 6f 77 65 76 65 72 2c 20 69 | ink.to.backbone.area..However,.i |
49ea0 | 74 20 69 73 20 6e 6f 74 20 61 6c 77 61 79 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 68 61 76 65 | t.is.not.always.possible.to.have |
49ec0 | 20 61 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 | .a.physical.link.to.a.backbone.a |
49ee0 | 72 65 61 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 41 42 | rea..In.this.case.between.two.AB |
49f00 | 52 20 28 6f 6e 65 20 6f 66 20 74 68 65 6d 20 68 61 73 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 | R.(one.of.them.has.a.link.to.the |
49f20 | 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 29 20 69 6e 20 74 68 65 20 61 72 65 61 20 28 6e 6f 74 | .backbone.area).in.the.area.(not |
49f40 | 20 73 74 75 62 20 61 72 65 61 29 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 6f 72 | .stub.area).a.virtual.link.is.or |
49f60 | 67 61 6e 69 7a 65 64 2e 00 49 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 69 74 | ganized..In.large.deployments.it |
49f80 | 20 69 73 20 6e 6f 74 20 72 65 61 73 6f 6e 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | .is.not.reasonable.to.configure. |
49fa0 | 65 61 63 68 20 75 73 65 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 6f 6e 20 65 76 65 72 79 20 | each.user.individually.on.every. |
49fc0 | 73 79 73 74 65 6d 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 75 73 69 6e 67 20 3a 61 62 62 | system..VyOS.supports.using.:abb |
49fe0 | 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | r:`RADIUS.(Remote.Authentication |
4a000 | 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 20 73 65 72 76 65 72 73 20 | .Dial-In.User.Service)`.servers. |
4a020 | 61 73 20 62 61 63 6b 65 6e 64 20 66 6f 72 20 75 73 65 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | as.backend.for.user.authenticati |
4a040 | 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 | on..In.order.for.flow.accounting |
4a060 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 61 6e 64 | .information.to.be.collected.and |
4a080 | 20 64 69 73 70 6c 61 79 65 64 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 | .displayed.for.an.interface,.the |
4a0a0 | 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f | .interface.must.be.configured.fo |
4a0c0 | 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 | r.flow.accounting..In.order.for. |
4a0e0 | 74 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 | the.primary.and.the.secondary.DH |
4a100 | 43 50 20 73 65 72 76 65 72 20 74 6f 20 6b 65 65 70 20 74 68 65 69 72 20 6c 65 61 73 65 20 74 61 | CP.server.to.keep.their.lease.ta |
4a120 | 62 6c 65 73 20 69 6e 20 73 79 6e 63 2c 20 74 68 65 79 20 6d 75 73 74 20 62 65 20 61 62 6c 65 20 | bles.in.sync,.they.must.be.able. |
4a140 | 74 6f 20 72 65 61 63 68 20 65 61 63 68 20 6f 74 68 65 72 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 | to.reach.each.other.on.TCP.port. |
4a160 | 36 34 37 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 | 647..If.you.have.firewall.rules. |
4a180 | 69 6e 20 65 66 66 65 63 74 2c 20 61 64 6a 75 73 74 20 74 68 65 6d 20 61 63 63 6f 72 64 69 6e 67 | in.effect,.adjust.them.according |
4a1a0 | 6c 79 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 75 | ly..In.order.for.the.system.to.u |
4a1c0 | 73 65 20 61 6e 64 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 | se.and.complete.unqualified.host |
4a1e0 | 20 6e 61 6d 65 73 2c 20 61 20 6c 69 73 74 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 77 68 | .names,.a.list.can.be.defined.wh |
4a200 | 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 6f 6d 61 69 6e 20 73 65 61 72 | ich.will.be.used.for.domain.sear |
4a220 | 63 68 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 4c 44 50 20 | ches..In.order.to.allow.for.LDP. |
4a240 | 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 65 78 63 68 61 6e 67 65 20 | on.the.local.router.to.exchange. |
4a260 | 6c 61 62 65 6c 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 20 6f 74 68 65 72 20 | label.advertisements.with.other. |
4a280 | 72 6f 75 74 65 72 73 2c 20 61 20 54 43 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 | routers,.a.TCP.session.will.be.e |
4a2a0 | 73 74 61 62 6c 69 73 68 65 64 20 62 65 74 77 65 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | stablished.between.automatically |
4a2c0 | 20 64 69 73 63 6f 76 65 72 65 64 20 61 6e 64 20 73 74 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 | .discovered.and.statically.assig |
4a2e0 | 6e 65 64 20 72 6f 75 74 65 72 73 2e 20 4c 44 50 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 | ned.routers..LDP.will.try.to.est |
4a300 | 61 62 6c 69 73 68 20 61 20 54 43 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 2a 2a 74 72 | ablish.a.TCP.session.to.the.**tr |
4a320 | 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 2a 2a 20 6f 66 20 6f 74 68 65 72 20 72 6f 75 74 65 | ansport.address**.of.other.route |
4a340 | 72 73 2e 20 54 68 65 72 65 66 6f 72 65 20 66 6f 72 20 4c 44 50 20 74 6f 20 66 75 6e 63 74 69 6f | rs..Therefore.for.LDP.to.functio |
4a360 | 6e 20 70 72 6f 70 65 72 6c 79 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 | n.properly.please.make.sure.the. |
4a380 | 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 | transport.address.is.shown.in.th |
4a3a0 | 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 72 65 61 63 68 61 62 6c 65 20 74 6f | e.routing.table.and.reachable.to |
4a3c0 | 20 74 72 61 66 66 69 63 20 61 74 20 61 6c 6c 20 74 69 6d 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 | .traffic.at.all.times..In.order. |
4a3e0 | 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e | to.control.and.modify.routing.in |
4a400 | 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 | formation.that.is.exchanged.betw |
4a420 | 65 65 6e 20 70 65 65 72 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 72 6f 75 74 65 2d 6d 61 70 2c | een.peers.you.can.use.route-map, |
4a440 | 20 66 69 6c 74 65 72 2d 6c 69 73 74 2c 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 | .filter-list,.prefix-list,.distr |
4a460 | 69 62 75 74 65 2d 6c 69 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 66 69 6e 65 20 77 | ibute-list..In.order.to.define.w |
4a480 | 68 69 63 68 20 74 72 61 66 66 69 63 20 67 6f 65 73 20 69 6e 74 6f 20 77 68 69 63 68 20 63 6c 61 | hich.traffic.goes.into.which.cla |
4a4a0 | 73 73 2c 20 79 6f 75 20 64 65 66 69 6e 65 20 66 69 6c 74 65 72 73 20 28 74 68 61 74 20 69 73 2c | ss,.you.define.filters.(that.is, |
4a4c0 | 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 29 2e 20 50 61 63 6b 65 74 73 | .the.matching.criteria)..Packets |
4a4e0 | 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 | .go.through.these.matching.rules |
4a500 | 20 28 61 73 20 69 6e 20 74 68 65 20 72 75 6c 65 73 20 6f 66 20 61 20 66 69 72 65 77 61 6c 6c 29 | .(as.in.the.rules.of.a.firewall) |
4a520 | 20 61 6e 64 2c 20 69 66 20 61 20 70 61 63 6b 65 74 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 | .and,.if.a.packet.matches.the.fi |
4a540 | 6c 74 65 72 2c 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 61 74 20 63 6c 61 | lter,.it.is.assigned.to.that.cla |
4a560 | 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 56 79 4f 53 20 54 72 61 66 66 69 | ss..In.order.to.have.VyOS.Traffi |
4a580 | 63 20 43 6f 6e 74 72 6f 6c 20 77 6f 72 6b 69 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 6f | c.Control.working.you.need.to.fo |
4a5a0 | 6c 6c 6f 77 20 32 20 73 74 65 70 73 3a 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 66 | llow.2.steps:.In.order.to.have.f |
4a5c0 | 75 6c 6c 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 61 6b 65 20 75 73 65 20 6f 66 20 6d 75 6c 74 | ull.control.and.make.use.of.mult |
4a5e0 | 69 70 6c 65 20 73 74 61 74 69 63 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 2c | iple.static.public.IP.addresses, |
4a600 | 20 79 6f 75 72 20 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 69 6e 69 74 69 61 74 65 | .your.VyOS.will.have.to.initiate |
4a620 | 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 6f | .the.PPPoE.connection.and.contro |
4a640 | 6c 20 69 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 69 73 20 6d 65 74 68 6f 64 20 74 | l.it..In.order.for.this.method.t |
4a660 | 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 66 69 67 75 72 65 20 | o.work,.you.will.have.to.figure. |
4a680 | 6f 75 74 20 68 6f 77 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 | out.how.to.make.your.DSL.Modem/R |
4a6a0 | 6f 75 74 65 72 20 73 77 69 74 63 68 20 69 6e 74 6f 20 61 20 42 72 69 64 67 65 64 20 4d 6f 64 65 | outer.switch.into.a.Bridged.Mode |
4a6c0 | 20 73 6f 20 69 74 20 6f 6e 6c 79 20 61 63 74 73 20 61 73 20 61 20 44 53 4c 20 54 72 61 6e 73 63 | .so.it.only.acts.as.a.DSL.Transc |
4a6e0 | 65 69 76 65 72 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 62 65 74 77 65 65 6e 20 | eiver.device.to.connect.between. |
4a700 | 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 69 6e 6b 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 61 | the.Ethernet.link.of.your.VyOS.a |
4a720 | 6e 64 20 74 68 65 20 70 68 6f 6e 65 20 63 61 62 6c 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 44 53 | nd.the.phone.cable..Once.your.DS |
4a740 | 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 69 73 20 69 6e 20 42 72 69 64 67 65 20 4d 6f 64 65 2c | L.Transceiver.is.in.Bridge.Mode, |
4a760 | 20 79 6f 75 20 73 68 6f 75 6c 64 20 67 65 74 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 20 66 72 | .you.should.get.no.IP.address.fr |
4a780 | 6f 6d 20 69 74 2e 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 6e 6e | om.it..Please.make.sure.you.conn |
4a7a0 | 65 63 74 20 74 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 50 6f 72 74 20 31 20 69 66 20 79 6f | ect.to.the.Ethernet.Port.1.if.yo |
4a7c0 | 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 68 61 73 20 61 20 73 77 69 74 63 68 2c | ur.DSL.Transceiver.has.a.switch, |
4a7e0 | 20 61 73 20 73 6f 6d 65 20 6f 66 20 74 68 65 6d 20 6f 6e 6c 79 20 77 6f 72 6b 20 74 68 69 73 20 | .as.some.of.them.only.work.this. |
4a800 | 77 61 79 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 70 20 73 70 65 63 69 66 69 63 20 49 50 | way..In.order.to.map.specific.IP |
4a820 | 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 73 20 73 | v6.addresses.to.specific.hosts.s |
4a840 | 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 20 54 | tatic.mappings.can.be.created..T |
4a860 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 65 78 70 6c 61 69 6e 73 20 74 68 | he.following.example.explains.th |
4a880 | 65 20 70 72 6f 63 65 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 | e.process..In.order.to.minimize. |
4a8a0 | 74 68 65 20 66 6c 6f 6f 64 69 6e 67 20 6f 66 20 41 52 50 20 61 6e 64 20 4e 44 20 6d 65 73 73 61 | the.flooding.of.ARP.and.ND.messa |
4a8c0 | 67 65 73 20 69 6e 20 74 68 65 20 56 58 4c 41 4e 20 6e 65 74 77 6f 72 6b 2c 20 45 56 50 4e 20 69 | ges.in.the.VXLAN.network,.EVPN.i |
4a8e0 | 6e 63 6c 75 64 65 73 20 70 72 6f 76 69 73 69 6f 6e 73 20 3a 72 66 63 3a 60 37 34 33 32 23 73 65 | ncludes.provisions.:rfc:`7432#se |
4a900 | 63 74 69 6f 6e 2d 31 30 60 20 74 68 61 74 20 61 6c 6c 6f 77 20 70 61 72 74 69 63 69 70 61 74 69 | ction-10`.that.allow.participati |
4a920 | 6e 67 20 56 54 45 50 73 20 74 6f 20 73 75 70 70 72 65 73 73 20 73 75 63 68 20 6d 65 73 73 61 67 | ng.VTEPs.to.suppress.such.messag |
4a940 | 65 73 20 69 6e 20 63 61 73 65 20 74 68 65 79 20 6b 6e 6f 77 20 74 68 65 20 4d 41 43 2d 49 50 20 | es.in.case.they.know.the.MAC-IP. |
4a960 | 62 69 6e 64 69 6e 67 20 61 6e 64 20 63 61 6e 20 72 65 70 6c 79 20 6f 6e 20 62 65 68 61 6c 66 20 | binding.and.can.reply.on.behalf. |
4a980 | 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 | of.the.remote.host..In.order.to. |
4a9a0 | 73 65 70 61 72 61 74 65 20 74 72 61 66 66 69 63 2c 20 46 61 69 72 20 51 75 65 75 65 20 75 73 65 | separate.traffic,.Fair.Queue.use |
4a9c0 | 73 20 61 20 63 6c 61 73 73 69 66 69 65 72 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 | s.a.classifier.based.on.source.a |
4a9e0 | 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 | ddress,.destination.address.and. |
4aa00 | 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 54 68 65 20 61 6c 67 6f 72 69 74 68 6d 20 65 6e 71 75 65 | source.port..The.algorithm.enque |
4aa20 | 75 65 73 20 70 61 63 6b 65 74 73 20 74 6f 20 68 61 73 68 20 62 75 63 6b 65 74 73 20 62 61 73 65 | ues.packets.to.hash.buckets.base |
4aa40 | 64 20 6f 6e 20 74 68 6f 73 65 20 74 72 65 65 20 70 61 72 61 6d 65 74 65 72 73 2e 20 45 61 63 68 | d.on.those.tree.parameters..Each |
4aa60 | 20 6f 66 20 74 68 65 73 65 20 62 75 63 6b 65 74 73 20 73 68 6f 75 6c 64 20 72 65 70 72 65 73 65 | .of.these.buckets.should.represe |
4aa80 | 6e 74 20 61 20 75 6e 69 71 75 65 20 66 6c 6f 77 2e 20 42 65 63 61 75 73 65 20 6d 75 6c 74 69 70 | nt.a.unique.flow..Because.multip |
4aaa0 | 6c 65 20 66 6c 6f 77 73 20 6d 61 79 20 67 65 74 20 68 61 73 68 65 64 20 74 6f 20 74 68 65 20 73 | le.flows.may.get.hashed.to.the.s |
4aac0 | 61 6d 65 20 62 75 63 6b 65 74 2c 20 74 68 65 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 | ame.bucket,.the.hashing.algorith |
4aae0 | 6d 20 69 73 20 70 65 72 74 75 72 62 65 64 20 61 74 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 69 | m.is.perturbed.at.configurable.i |
4ab00 | 6e 74 65 72 76 61 6c 73 20 73 6f 20 74 68 61 74 20 74 68 65 20 75 6e 66 61 69 72 6e 65 73 73 20 | ntervals.so.that.the.unfairness. |
4ab20 | 6c 61 73 74 73 20 6f 6e 6c 79 20 66 6f 72 20 61 20 73 68 6f 72 74 20 77 68 69 6c 65 2e 20 50 65 | lasts.only.for.a.short.while..Pe |
4ab40 | 72 74 75 72 62 61 74 69 6f 6e 20 6d 61 79 20 68 6f 77 65 76 65 72 20 63 61 75 73 65 20 73 6f 6d | rturbation.may.however.cause.som |
4ab60 | 65 20 69 6e 61 64 76 65 72 74 65 6e 74 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 20 | e.inadvertent.packet.reordering. |
4ab80 | 74 6f 20 6f 63 63 75 72 2e 20 41 6e 20 61 64 76 69 73 61 62 6c 65 20 76 61 6c 75 65 20 63 6f 75 | to.occur..An.advisable.value.cou |
4aba0 | 6c 64 20 62 65 20 31 30 20 73 65 63 6f 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 | ld.be.10.seconds..In.order.to.us |
4abc0 | 65 20 50 49 4d 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 | e.PIM,.it.is.necessary.to.config |
4abe0 | 75 72 65 20 61 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e | ure.a.:abbr:`RP.(Rendezvous.Poin |
4ac00 | 74 29 60 20 66 6f 72 20 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 74 6f 20 62 65 20 73 65 6e 74 | t)`.for.join.messages.to.be.sent |
4ac20 | 20 74 6f 2e 20 43 75 72 72 65 6e 74 6c 79 20 74 68 65 20 6f 6e 6c 79 20 6d 65 74 68 6f 64 6f 6c | .to..Currently.the.only.methodol |
4ac40 | 6f 67 79 20 74 6f 20 64 6f 20 74 68 69 73 20 69 73 20 76 69 61 20 73 74 61 74 69 63 20 72 65 6e | ogy.to.do.this.is.via.static.ren |
4ac60 | 64 65 7a 76 6f 75 73 20 70 6f 69 6e 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 | dezvous.point.commands..In.order |
4ac80 | 20 74 6f 20 75 73 65 20 54 53 4f 2f 4c 52 4f 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 | .to.use.TSO/LRO.with.VMXNET3.ada |
4aca0 | 74 65 72 73 20 6f 6e 65 20 6d 75 73 74 20 61 6c 73 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 53 47 | ters.one.must.also.enable.the.SG |
4acc0 | 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 | .offloading.option..In.order.to. |
4ace0 | 75 73 65 20 66 6c 6f 77 74 61 62 6c 65 73 2c 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 | use.flowtables,.the.minimal.conf |
4ad00 | 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 69 6e 63 6c 75 64 65 73 3a 00 49 6e 20 6f 74 | iguration.needed.includes:.In.ot |
4ad20 | 68 65 72 20 77 6f 72 64 73 20 69 74 20 61 6c 6c 6f 77 73 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 77 | her.words.it.allows.control.of.w |
4ad40 | 68 69 63 68 20 63 61 72 64 73 20 28 75 73 75 61 6c 6c 79 20 31 29 20 77 69 6c 6c 20 72 65 73 70 | hich.cards.(usually.1).will.resp |
4ad60 | 6f 6e 64 20 74 6f 20 61 6e 20 61 72 70 20 72 65 71 75 65 73 74 2e 00 49 6e 20 6f 74 68 65 72 20 | ond.to.an.arp.request..In.other. |
4ad80 | 77 6f 72 64 73 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 20 61 | words,.connection.tracking.has.a |
4ada0 | 6c 72 65 61 64 79 20 6f 62 73 65 72 76 65 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 | lready.observed.the.connection.b |
4adc0 | 65 20 63 6c 6f 73 65 64 20 61 6e 64 20 68 61 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 | e.closed.and.has.transition.the. |
4ade0 | 66 6c 6f 77 20 74 6f 20 49 4e 56 41 4c 49 44 20 74 6f 20 70 72 65 76 65 6e 74 20 61 74 74 61 63 | flow.to.INVALID.to.prevent.attac |
4ae00 | 6b 73 20 66 72 6f 6d 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 72 65 75 73 65 20 74 68 65 20 | ks.from.attempting.to.reuse.the. |
4ae20 | 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 68 65 20 63 | connection..In.our.example.the.c |
4ae40 | 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 20 69 73 20 63 61 6c 6c 65 64 20 76 79 6f 73 3a 00 | ertificate.name.is.called.vyos:. |
4ae60 | 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 75 73 65 64 20 74 68 65 20 6b 65 79 20 | In.our.example,.we.used.the.key. |
4ae80 | 6e 61 6d 65 20 60 60 6f 70 65 6e 76 70 6e 2d 31 60 60 20 77 68 69 63 68 20 77 65 20 77 69 6c 6c | name.``openvpn-1``.which.we.will |
4aea0 | 20 72 65 66 65 72 65 6e 63 65 20 69 6e 20 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e | .reference.in.our.configuration. |
4aec0 | 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 | .In.our.example,.we.will.be.forw |
4aee0 | 61 72 64 69 6e 67 20 77 65 62 20 73 65 72 76 65 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 | arding.web.server.traffic.to.an. |
4af00 | 69 6e 74 65 72 6e 61 6c 20 77 65 62 20 73 65 72 76 65 72 20 6f 6e 20 31 39 32 2e 31 36 38 2e 30 | internal.web.server.on.192.168.0 |
4af20 | 2e 31 30 30 2e 20 48 54 54 50 20 74 72 61 66 66 69 63 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 | .100..HTTP.traffic.makes.use.of. |
4af40 | 74 68 65 20 54 43 50 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 70 6f 72 74 20 38 30 2e 20 46 6f 72 | the.TCP.protocol.on.port.80..For |
4af60 | 20 6f 74 68 65 72 20 63 6f 6d 6d 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 73 65 65 3a | .other.common.port.numbers,.see: |
4af80 | 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4c | .https://en.wikipedia.org/wiki/L |
4afa0 | 69 73 74 5f 6f 66 5f 54 43 50 5f 61 6e 64 5f 55 44 50 5f 70 6f 72 74 5f 6e 75 6d 62 65 72 73 00 | ist_of_TCP_and_UDP_port_numbers. |
4afc0 | 49 6e 20 70 72 69 6e 63 69 70 6c 65 2c 20 76 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 3a 63 6f | In.principle,.values.must.be.:co |
4afe0 | 64 65 3a 60 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 6d 61 78 2d | de:`min-threshold`.<.:code:`max- |
4b000 | 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 | threshold`.<.:code:`queue-limit` |
4b020 | 2e 00 49 6e 20 73 68 6f 72 74 2c 20 44 4d 56 50 4e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 63 | ..In.short,.DMVPN.provides.the.c |
4b040 | 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 63 72 65 61 74 69 6e 67 20 61 20 64 79 6e 61 6d 69 63 | apability.for.creating.a.dynamic |
4b060 | 2d 6d 65 73 68 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 | -mesh.VPN.network.without.having |
4b080 | 20 74 6f 20 70 72 65 2d 63 6f 6e 66 69 67 75 72 65 20 28 73 74 61 74 69 63 29 20 61 6c 6c 20 70 | .to.pre-configure.(static).all.p |
4b0a0 | 6f 73 73 69 62 6c 65 20 74 75 6e 6e 65 6c 20 65 6e 64 2d 70 6f 69 6e 74 20 70 65 65 72 73 2e 00 | ossible.tunnel.end-point.peers.. |
4b0c0 | 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 69 74 20 6d 61 79 20 62 65 20 6d 6f 72 65 20 63 6f 6e | In.some.cases.it.may.be.more.con |
4b0e0 | 76 65 6e 69 65 6e 74 20 74 6f 20 65 6e 61 62 6c 65 20 4f 53 50 46 20 6f 6e 20 61 20 70 65 72 20 | venient.to.enable.OSPF.on.a.per. |
4b100 | 69 6e 74 65 72 66 61 63 65 2f 73 75 62 6e 65 74 20 62 61 73 69 73 20 3a 63 66 67 63 6d 64 3a 60 | interface/subnet.basis.:cfgcmd:` |
4b120 | 73 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e | set.protocols.ospf.interface.<in |
4b140 | 74 65 72 66 61 63 65 3e 20 61 72 65 61 20 3c 78 2e 78 2e 78 2e 78 20 7c 20 78 3e 60 00 49 6e 20 | terface>.area.<x.x.x.x.|.x>`.In. |
4b160 | 74 68 65 20 3a 72 65 66 3a 60 63 72 65 61 74 69 6e 67 5f 61 5f 74 72 61 66 66 69 63 5f 70 6f 6c | the.:ref:`creating_a_traffic_pol |
4b180 | 69 63 79 60 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 65 65 20 74 68 61 74 20 73 | icy`.section.you.will.see.that.s |
4b1a0 | 6f 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 69 65 73 20 75 73 65 20 2a 63 6c 61 73 73 65 73 | ome.of.the.policies.use.*classes |
4b1c0 | 2a 2e 20 54 68 6f 73 65 20 70 6f 6c 69 63 69 65 73 20 6c 65 74 20 79 6f 75 20 64 69 73 74 72 69 | *..Those.policies.let.you.distri |
4b1e0 | 62 75 74 65 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 | bute.traffic.into.different.clas |
4b200 | 73 65 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d | ses.according.to.different.param |
4b220 | 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 2e 20 53 6f 2c 20 61 20 63 6c 61 73 | eters.you.can.choose..So,.a.clas |
4b240 | 73 20 69 73 20 6a 75 73 74 20 61 20 73 70 65 63 69 66 69 63 20 74 79 70 65 20 6f 66 20 74 72 61 | s.is.just.a.specific.type.of.tra |
4b260 | 66 66 69 63 20 79 6f 75 20 73 65 6c 65 63 74 2e 00 49 6e 20 74 68 65 20 56 79 4f 53 20 43 4c 49 | ffic.you.select..In.the.VyOS.CLI |
4b280 | 2c 20 61 20 6b 65 79 20 70 6f 69 6e 74 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 69 | ,.a.key.point.often.overlooked.i |
4b2a0 | 73 20 74 68 61 74 20 72 61 74 68 65 72 20 74 68 61 6e 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 | s.that.rather.than.being.configu |
4b2c0 | 72 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 65 74 20 76 70 6e 60 20 73 74 61 6e 7a 61 2c 20 | red.using.the.`set.vpn`.stanza,. |
4b2e0 | 4f 70 65 6e 56 50 4e 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 6e 65 74 77 6f | OpenVPN.is.configured.as.a.netwo |
4b300 | 72 6b 20 69 6e 74 65 72 66 61 63 65 20 75 73 69 6e 67 20 60 73 65 74 20 69 6e 74 65 72 66 61 63 | rk.interface.using.`set.interfac |
4b320 | 65 73 20 6f 70 65 6e 76 70 6e 60 2e 00 49 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c | es.openvpn`..In.the.above.exampl |
4b340 | 65 2c 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 6f 66 20 31 39 32 2e 30 2e 32 2e 32 20 69 | e,.an.external.IP.of.192.0.2.2.i |
4b360 | 73 20 61 73 73 75 6d 65 64 2e 00 49 6e 20 74 68 65 20 61 67 65 20 6f 66 20 76 65 72 79 20 66 61 | s.assumed..In.the.age.of.very.fa |
4b380 | 73 74 20 6e 65 74 77 6f 72 6b 73 2c 20 61 20 73 65 63 6f 6e 64 20 6f 66 20 75 6e 72 65 61 63 68 | st.networks,.a.second.of.unreach |
4b3a0 | 61 62 69 6c 69 74 79 20 6d 61 79 20 65 71 75 61 6c 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 6c 6f | ability.may.equal.millions.of.lo |
4b3c0 | 73 74 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 69 64 65 61 20 62 65 68 69 6e 64 20 42 46 44 20 | st.packets..The.idea.behind.BFD. |
4b3e0 | 69 73 20 74 6f 20 64 65 74 65 63 74 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 77 68 65 6e 20 61 | is.to.detect.very.quickly.when.a |
4b400 | 20 70 65 65 72 20 69 73 20 64 6f 77 6e 20 61 6e 64 20 74 61 6b 65 20 61 63 74 69 6f 6e 20 65 78 | .peer.is.down.and.take.action.ex |
4b420 | 74 72 65 6d 65 6c 79 20 66 61 73 74 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 4c 32 54 | tremely.fast..In.the.case.of.L2T |
4b440 | 50 76 33 2c 20 74 68 65 20 66 65 61 74 75 72 65 73 20 6c 6f 73 74 20 61 72 65 20 74 65 6c 65 74 | Pv3,.the.features.lost.are.telet |
4b460 | 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 | raffic.engineering.features.cons |
4b480 | 69 64 65 72 65 64 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 4d 50 4c 53 2e 20 48 6f 77 65 76 65 | idered.important.in.MPLS..Howeve |
4b4a0 | 72 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 72 65 61 73 6f 6e 20 74 68 65 73 65 20 66 65 61 74 | r,.there.is.no.reason.these.feat |
4b4c0 | 75 72 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 2d 65 6e 67 69 6e 65 65 72 65 64 20 | ures.could.not.be.re-engineered. |
4b4e0 | 69 6e 20 6f 72 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 32 54 50 76 33 20 69 6e 20 6c 61 74 65 72 20 | in.or.on.top.of.L2TPv3.in.later. |
4b500 | 70 72 6f 64 75 63 74 73 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 74 68 65 20 61 76 65 72 61 67 | products..In.the.case.the.averag |
4b520 | 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 62 65 74 77 65 65 6e 20 2a 2a 6d 69 6e 2d 74 68 | e.queue.size.is.between.**min-th |
4b540 | 72 65 73 68 6f 6c 64 2a 2a 20 61 6e 64 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c | reshold**.and.**max-threshold**, |
4b560 | 20 74 68 65 6e 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 63 6b 65 74 20 77 6f 75 6c 64 20 62 | .then.an.arriving.packet.would.b |
4b580 | 65 20 65 69 74 68 65 72 20 64 72 6f 70 70 65 64 20 6f 72 20 70 6c 61 63 65 64 20 69 6e 20 74 68 | e.either.dropped.or.placed.in.th |
4b5a0 | 65 20 71 75 65 75 65 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 74 68 65 20 64 | e.queue,.it.will.depend.on.the.d |
4b5c0 | 65 66 69 6e 65 64 20 2a 2a 6d 61 72 6b 2d 70 72 6f 62 61 62 69 6c 69 74 79 2a 2a 2e 00 49 6e 20 | efined.**mark-probability**..In. |
4b5e0 | 74 68 65 20 63 61 73 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 20 73 6f 6d 65 20 | the.case.you.want.to.apply.some. |
4b600 | 6b 69 6e 64 20 6f 66 20 2a 2a 73 68 61 70 69 6e 67 2a 2a 20 74 6f 20 79 6f 75 72 20 2a 2a 69 6e | kind.of.**shaping**.to.your.**in |
4b620 | 62 6f 75 6e 64 2a 2a 20 74 72 61 66 66 69 63 2c 20 63 68 65 63 6b 20 74 68 65 20 69 6e 67 72 65 | bound**.traffic,.check.the.ingre |
4b640 | 73 73 2d 73 68 61 70 69 6e 67 5f 20 73 65 63 74 69 6f 6e 2e 00 49 6e 20 74 68 65 20 63 6f 6d 6d | ss-shaping_.section..In.the.comm |
4b660 | 61 6e 64 20 61 62 6f 76 65 2c 20 77 65 20 73 65 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 70 6f | and.above,.we.set.the.type.of.po |
4b680 | 6c 69 63 79 20 77 65 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 61 | licy.we.are.going.to.work.with.a |
4b6a0 | 6e 64 20 74 68 65 20 6e 61 6d 65 20 77 65 20 63 68 6f 6f 73 65 20 66 6f 72 20 69 74 3b 20 61 20 | nd.the.name.we.choose.for.it;.a. |
4b6c0 | 63 6c 61 73 73 20 28 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 | class.(so.that.we.can.differenti |
4b6e0 | 61 74 65 20 73 6f 6d 65 20 74 72 61 66 66 69 63 29 20 61 6e 64 20 61 6e 20 69 64 65 6e 74 69 66 | ate.some.traffic).and.an.identif |
4b700 | 69 61 62 6c 65 20 6e 75 6d 62 65 72 20 66 6f 72 20 74 68 61 74 20 63 6c 61 73 73 3b 20 74 68 65 | iable.number.for.that.class;.the |
4b720 | 6e 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 28 | n.we.configure.a.matching.rule.( |
4b740 | 6f 72 20 66 69 6c 74 65 72 29 20 61 6e 64 20 61 20 6e 61 6d 65 20 66 6f 72 20 69 74 2e 00 49 6e | or.filter).and.a.name.for.it..In |
4b760 | 20 74 68 65 20 65 6e 64 2c 20 61 6e 20 58 4d 4c 20 73 74 72 75 63 74 75 72 65 20 69 73 20 67 65 | .the.end,.an.XML.structure.is.ge |
4b780 | 6e 65 72 61 74 65 64 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 61 76 65 64 20 61 73 20 60 60 | nerated.which.can.be.saved.as.`` |
4b7a0 | 76 79 6f 73 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 60 60 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 | vyos.mobileconfig``.and.sent.to. |
4b7c0 | 74 68 65 20 64 65 76 69 63 65 20 62 79 20 45 2d 4d 61 69 6c 20 77 68 65 72 65 20 69 74 20 6c 61 | the.device.by.E-Mail.where.it.la |
4b7e0 | 74 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6f 72 74 65 64 2e 00 49 6e 20 74 68 65 20 65 78 61 6d | ter.can.be.imported..In.the.exam |
4b800 | 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 66 69 72 73 74 20 34 39 39 20 73 65 73 73 69 6f 6e | ple.above,.the.first.499.session |
4b820 | 73 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 6f 75 74 20 64 65 6c 61 79 2e 20 50 41 44 4f 20 70 61 | s.connect.without.delay..PADO.pa |
4b840 | 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 65 6c 61 79 65 64 20 35 30 20 6d 73 20 66 6f 72 20 | ckets.will.be.delayed.50.ms.for. |
4b860 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 72 6f 6d 20 35 30 30 20 74 6f 20 39 39 39 2c 20 74 68 69 73 | connection.from.500.to.999,.this |
4b880 | 20 74 72 69 63 6b 20 61 6c 6c 6f 77 73 20 6f 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 | .trick.allows.other.PPPoE.server |
4b8a0 | 73 20 73 65 6e 64 20 50 41 44 4f 20 66 61 73 74 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 73 20 77 | s.send.PADO.faster.and.clients.w |
4b8c0 | 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 65 72 73 2e 20 4c 61 | ill.connect.to.other.servers..La |
4b8e0 | 73 74 20 63 6f 6d 6d 61 6e 64 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 20 50 50 50 6f 45 20 | st.command.says.that.this.PPPoE. |
4b900 | 73 65 72 76 65 72 20 63 61 6e 20 73 65 72 76 65 20 6f 6e 6c 79 20 33 30 30 30 20 63 6c 69 65 6e | server.can.serve.only.3000.clien |
4b920 | 74 73 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 | ts..In.the.example.used.for.the. |
4b940 | 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 2c | Quick.Start.configuration.above, |
4b960 | 20 77 65 20 64 65 6d 6f 6e 73 74 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | .we.demonstrate.the.following.co |
4b980 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 | nfiguration:.In.the.following.ex |
4b9a0 | 61 6d 70 6c 65 20 77 65 20 63 61 6e 20 73 65 65 20 61 20 62 61 73 69 63 20 6d 75 6c 74 69 63 61 | ample.we.can.see.a.basic.multica |
4b9c0 | 73 74 20 73 65 74 75 70 3a 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 | st.setup:.In.the.following.examp |
4b9e0 | 6c 65 2c 20 62 6f 74 68 20 60 55 73 65 72 31 60 20 61 6e 64 20 60 55 73 65 72 32 60 20 77 69 6c | le,.both.`User1`.and.`User2`.wil |
4ba00 | 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 53 53 48 20 69 6e 74 6f 20 56 79 4f 53 20 61 73 20 75 73 | l.be.able.to.SSH.into.VyOS.as.us |
4ba20 | 65 72 20 60 60 76 79 6f 73 60 60 20 75 73 69 6e 67 20 74 68 65 69 72 20 76 65 72 79 20 6f 77 6e | er.``vyos``.using.their.very.own |
4ba40 | 20 6b 65 79 73 2e 20 60 55 73 65 72 31 60 20 69 73 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 | .keys..`User1`.is.restricted.to. |
4ba60 | 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 61 20 73 | only.be.able.to.connect.from.a.s |
4ba80 | 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 69 66 | ingle.IP.address..In.addition.if |
4baa0 | 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 20 6c 6f 67 69 6e 20 69 73 20 77 61 6e 74 65 64 20 66 | .password.base.login.is.wanted.f |
4bac0 | 6f 72 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 75 73 65 72 20 61 20 32 46 41 2f 4d 46 41 20 6b | or.the.``vyos``.user.a.2FA/MFA.k |
4bae0 | 65 79 63 6f 64 65 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 | eycode.is.required.in.addition.t |
4bb00 | 6f 20 74 68 65 20 70 61 73 73 77 6f 72 64 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | o.the.password..In.the.following |
4bb20 | 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 49 50 73 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 | .example,.the.IPs.for.the.remote |
4bb40 | 20 63 6c 69 65 6e 74 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 70 65 65 72 | .clients.are.defined.in.the.peer |
4bb60 | 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 70 65 65 72 73 20 74 6f 20 69 6e 74 65 | s..This.allows.the.peers.to.inte |
4bb80 | 72 61 63 74 20 77 69 74 68 20 6f 6e 65 20 61 6e 6f 74 68 65 72 2e 20 49 6e 20 63 6f 6d 70 61 72 | ract.with.one.another..In.compar |
4bba0 | 69 73 6f 6e 20 74 6f 20 74 68 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 65 78 61 6d 70 6c 65 | ison.to.the.site-to-site.example |
4bbc0 | 20 74 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 65 70 61 6c 69 76 65 60 60 20 66 6c | .the.``persistent-keepalive``.fl |
4bbe0 | 61 67 20 69 73 20 73 65 74 20 74 6f 20 31 35 20 73 65 63 6f 6e 64 73 20 74 6f 20 61 73 73 75 72 | ag.is.set.to.15.seconds.to.assur |
4bc00 | 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6b 65 70 74 20 61 6c 69 76 65 2e 20 | e.the.connection.is.kept.alive.. |
4bc20 | 54 68 69 73 20 69 73 20 6d 61 69 6e 6c 79 20 72 65 6c 65 76 61 6e 74 20 69 66 20 6f 6e 65 20 6f | This.is.mainly.relevant.if.one.o |
4bc40 | 66 20 74 68 65 20 70 65 65 72 73 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 20 61 6e 64 20 63 61 | f.the.peers.is.behind.NAT.and.ca |
4bc60 | 6e 27 74 20 62 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 | n't.be.connected.to.if.the.conne |
4bc80 | 63 74 69 6f 6e 20 69 73 20 6c 6f 73 74 2e 20 54 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 20 74 | ction.is.lost..To.be.effective.t |
4bca0 | 68 69 73 20 76 61 6c 75 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e | his.value.needs.to.be.lower.than |
4bcc0 | 20 74 68 65 20 55 44 50 20 74 69 6d 65 6f 75 74 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | .the.UDP.timeout..In.the.followi |
4bce0 | 6e 67 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 6e 20 56 4c 41 4e 39 20 74 72 61 6e 73 69 74 69 6f | ng.example,.when.VLAN9.transitio |
4bd00 | 6e 73 2c 20 56 4c 41 4e 32 30 20 77 69 6c 6c 20 61 6c 73 6f 20 74 72 61 6e 73 69 74 69 6f 6e 3a | ns,.VLAN20.will.also.transition: |
4bd20 | 00 49 6e 20 74 68 65 20 66 75 74 75 72 65 20 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 | .In.the.future.this.is.expected. |
4bd40 | 74 6f 20 62 65 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 74 68 | to.be.a.very.useful.protocol.(th |
4bd60 | 6f 75 67 68 20 74 68 65 72 65 20 61 72 65 20 60 6f 74 68 65 72 20 70 72 6f 70 6f 73 61 6c 73 60 | ough.there.are.`other.proposals` |
4bd80 | 5f 29 2e 00 49 6e 20 74 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 | _)..In.the.next.example.all.traf |
4bda0 | 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f 20 60 60 32 30 33 2e 30 2e 31 31 33 2e 31 60 60 20 | fic.destined.to.``203.0.113.1``. |
4bdc0 | 61 6e 64 20 70 6f 72 74 20 60 60 38 32 38 30 60 60 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 69 | and.port.``8280``.protocol.TCP.i |
4bde0 | 73 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 | s.balanced.between.2.real.server |
4be00 | 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 31 60 60 20 61 6e 64 20 60 60 31 39 32 2e 30 2e 32 2e 31 | s.``192.0.2.11``.and.``192.0.2.1 |
4be20 | 32 60 60 20 74 6f 20 70 6f 72 74 20 60 60 38 30 60 60 00 49 6e 20 74 68 65 20 70 61 73 74 20 28 | 2``.to.port.``80``.In.the.past.( |
4be40 | 56 79 4f 53 20 31 2e 31 29 20 75 73 65 64 20 61 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 | VyOS.1.1).used.a.gateway-address |
4be60 | 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 72 65 | .configured.under.the.system.tre |
4be80 | 65 20 28 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 67 61 74 65 77 61 79 2d 61 | e.(:cfgcmd:`set.system.gateway-a |
4bea0 | 64 64 72 65 73 73 20 3c 61 64 64 72 65 73 73 3e 60 29 2c 20 74 68 69 73 20 69 73 20 6e 6f 20 6c | ddress.<address>`),.this.is.no.l |
4bec0 | 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 63 6f 6e | onger.supported.and.existing.con |
4bee0 | 66 69 67 75 72 61 74 69 6f 6e 73 20 61 72 65 20 6d 69 67 72 61 74 65 64 20 74 6f 20 74 68 65 20 | figurations.are.migrated.to.the. |
4bf00 | 6e 65 77 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e 00 49 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | new.CLI.command..In.this.command |
4bf20 | 20 74 72 65 65 2c 20 61 6c 6c 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 69 6f 6e | .tree,.all.hardware.acceleration |
4bf40 | 20 6f 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 6c 65 64 2e 20 41 74 20 74 68 65 | .options.will.be.handled..At.the |
4bf60 | 20 6d 6f 6d 65 6e 74 20 6f 6e 6c 79 20 60 49 6e 74 65 6c c2 ae 20 51 41 54 60 5f 20 69 73 20 73 | .moment.only.`Intel...QAT`_.is.s |
4bf80 | 75 70 70 6f 72 74 65 64 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 | upported.In.this.example.all.tra |
4bfa0 | 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f 20 70 6f 72 74 73 20 22 38 30 2c 20 32 32 32 32 | ffic.destined.to.ports."80,.2222 |
4bfc0 | 2c 20 38 38 38 38 22 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 6d 61 72 6b 73 20 74 6f 20 66 77 | ,.8888".protocol.TCP.marks.to.fw |
4bfe0 | 6d 61 72 6b 20 22 31 31 31 22 20 61 6e 64 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 | mark."111".and.balanced.between. |
4c000 | 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e 20 50 6f 72 74 20 22 30 22 20 69 73 20 72 65 71 75 | 2.real.servers..Port."0".is.requ |
4c020 | 69 72 65 64 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 61 72 65 20 75 73 65 64 2e | ired.if.multiple.ports.are.used. |
4c040 | 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 2c 20 61 20 73 69 6d 70 6c 69 | .In.this.example.image,.a.simpli |
4c060 | 66 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 69 73 20 73 68 6f 77 6e 20 74 6f 20 68 65 6c | fed.traffic.flow.is.shown.to.hel |
4c080 | 70 20 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 78 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f | p.provide.context.to.the.terms.o |
4c0a0 | 66 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 | f.`forward`,.`input`,.and.`outpu |
4c0c0 | 74 60 20 66 6f 72 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 66 6f 72 6d | t`.for.the.new.firewall.CLI.form |
4c0e0 | 61 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 77 65 20 77 69 6c 6c 20 75 73 65 20 | at..In.this.example.we.will.use. |
4c100 | 74 68 65 20 6d 6f 73 74 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 63 61 73 65 3a 20 61 20 73 65 74 | the.most.complicated.case:.a.set |
4c120 | 75 70 20 77 68 65 72 65 20 65 61 63 68 20 63 6c 69 65 6e 74 20 69 73 20 61 20 72 6f 75 74 65 72 | up.where.each.client.is.a.router |
4c140 | 20 74 68 61 74 20 68 61 73 20 69 74 73 20 6f 77 6e 20 73 75 62 6e 65 74 20 28 74 68 69 6e 6b 20 | .that.has.its.own.subnet.(think. |
4c160 | 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 29 2c 20 73 69 6e 63 65 20 73 69 | HQ.and.branch.offices),.since.si |
4c180 | 6d 70 6c 65 72 20 73 65 74 75 70 73 20 61 72 65 20 73 75 62 73 65 74 73 20 6f 66 20 69 74 2e 00 | mpler.setups.are.subsets.of.it.. |
4c1a0 | 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 73 6f 6d 65 20 2a 4f 70 65 6e 4e 49 43 2a 20 | In.this.example,.some.*OpenNIC*. |
4c1c0 | 73 65 72 76 65 72 73 20 61 72 65 20 75 73 65 64 2c 20 74 77 6f 20 49 50 76 34 20 61 64 64 72 65 | servers.are.used,.two.IPv4.addre |
4c1e0 | 73 73 65 73 20 61 6e 64 20 74 77 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 3a 00 49 6e 20 | sses.and.two.IPv6.addresses:.In. |
4c200 | 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 75 73 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 | this.example,.we.use.**masquerad |
4c220 | 65 2a 2a 20 61 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 | e**.as.the.translation.address.i |
4c240 | 6e 73 74 65 61 64 20 6f 66 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 2a 2a 6d | nstead.of.an.IP.address..The.**m |
4c260 | 61 73 71 75 65 72 61 64 65 2a 2a 20 74 61 72 67 65 74 20 69 73 20 65 66 66 65 63 74 69 76 65 6c | asquerade**.target.is.effectivel |
4c280 | 79 20 61 6e 20 61 6c 69 61 73 20 74 6f 20 73 61 79 20 22 75 73 65 20 77 68 61 74 65 76 65 72 20 | y.an.alias.to.say."use.whatever. |
4c2a0 | 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6f 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e | IP.address.is.on.the.outgoing.in |
4c2c0 | 74 65 72 66 61 63 65 22 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 20 73 74 61 74 69 63 61 6c | terface",.rather.than.a.statical |
4c2e0 | 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 | ly.configured.IP.address..This.i |
4c300 | 73 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 20 75 73 65 20 44 48 43 50 20 66 6f 72 20 79 6f 75 | s.useful.if.you.use.DHCP.for.you |
4c320 | 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 6f 20 6e 6f 74 20 | r.outgoing.interface.and.do.not. |
4c340 | 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 | know.what.the.external.address.w |
4c360 | 69 6c 6c 20 62 65 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c | ill.be..In.this.example,.we.will |
4c380 | 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 65 78 61 6d 70 6c 65 20 51 75 69 63 6b 20 53 74 61 72 | .be.using.the.example.Quick.Star |
4c3a0 | 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 20 61 73 20 61 20 73 74 61 72 74 | t.configuration.above.as.a.start |
4c3c0 | 69 6e 67 20 70 6f 69 6e 74 2e 00 49 6e 20 74 68 69 73 20 6d 65 74 68 6f 64 2c 20 74 68 65 20 44 | ing.point..In.this.method,.the.D |
4c3e0 | 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 74 68 65 20 | SL.Modem/Router.connects.to.the. |
4c400 | 49 53 50 20 66 6f 72 20 79 6f 75 20 77 69 74 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c | ISP.for.you.with.your.credential |
4c420 | 73 20 70 72 65 70 72 6f 67 72 61 6d 6d 65 64 20 69 6e 74 6f 20 74 68 65 20 64 65 76 69 63 65 2e | s.preprogrammed.into.the.device. |
4c440 | 20 54 68 69 73 20 67 69 76 65 73 20 79 6f 75 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 | .This.gives.you.an.:rfc:`1918`.a |
4c460 | 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 | ddress,.such.as.``192.168.1.0/24 |
4c480 | 60 60 20 62 79 20 64 65 66 61 75 6c 74 2e 00 49 6e 20 74 68 69 73 20 73 63 65 6e 61 72 69 6f 3a | ``.by.default..In.this.scenario: |
4c4a0 | 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 | .In.this.section.there's.useful. |
4c4c0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 | information.of.all.firewall.conf |
4c4e0 | 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 | iguration.that.can.be.done.regar |
4c500 | 64 69 6e 67 20 49 50 76 34 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 | ding.IPv4,.and.appropiate.op-mod |
4c520 | 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e | e.commands..Configuration.comman |
4c540 | 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 | ds.covered.in.this.section:.In.t |
4c560 | 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 | his.section.there's.useful.infor |
4c580 | 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 | mation.of.all.firewall.configura |
4c5a0 | 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 | tion.that.can.be.done.regarding. |
4c5c0 | 49 50 76 36 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d | IPv6,.and.appropiate.op-mode.com |
4c5e0 | 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f | mands..Configuration.commands.co |
4c600 | 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 | vered.in.this.section:.In.this.s |
4c620 | 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f | ection.there's.useful.informatio |
4c640 | 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | n.of.all.firewall.configuration. |
4c660 | 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 62 72 69 64 67 | that.can.be.done.regarding.bridg |
4c680 | 65 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e | e,.and.appropiate.op-mode.comman |
4c6a0 | 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 | ds..Configuration.commands.cover |
4c6c0 | 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 | ed.in.this.section:.In.this.sect |
4c6e0 | 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f | ion.there's.useful.information.o |
4c700 | 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 | f.all.firewall.configuration.tha |
4c720 | 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c | t.can.be.done.regarding.flowtabl |
4c740 | 65 73 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 | es.In.this.section.there's.usefu |
4c760 | 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f | l.information.of.all.firewall.co |
4c780 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 | nfiguration.that.can.be.done.reg |
4c7a0 | 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 2e 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 | arding.flowtables..In.this.secti |
4c7c0 | 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 | on.there's.useful.information.of |
4c7e0 | 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 | .all.firewall.configuration.that |
4c800 | 20 69 73 20 6e 65 65 64 65 64 20 66 6f 72 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 | .is.needed.for.zone-based.firewa |
4c820 | 6c 6c 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 | ll..Configuration.commands.cover |
4c840 | 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 | ed.in.this.section:.In.this.sect |
4c860 | 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 61 6c 6c 20 75 73 65 66 75 6c 20 66 69 72 65 | ion.you.can.find.all.useful.fire |
4c880 | 77 61 6c 6c 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 74 72 61 6e 73 70 | wall.op-mode.commands..In.transp |
4c8a0 | 61 72 65 6e 74 20 70 72 6f 78 79 20 6d 6f 64 65 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 61 72 | arent.proxy.mode,.all.traffic.ar |
4c8c0 | 72 69 76 69 6e 67 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 66 | riving.on.port.80.and.destined.f |
4c8e0 | 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | or.the.Internet.is.automatically |
4c900 | 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 70 72 6f 78 79 2e 20 54 68 | .forwarded.through.the.proxy..Th |
4c920 | 69 73 20 61 6c 6c 6f 77 73 20 69 6d 6d 65 64 69 61 74 65 20 70 72 6f 78 79 20 66 6f 72 77 61 72 | is.allows.immediate.proxy.forwar |
4c940 | 64 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 63 6c 69 65 6e 74 20 | ding.without.configuring.client. |
4c960 | 62 72 6f 77 73 65 72 73 2e 00 49 6e 20 74 79 70 69 63 61 6c 20 75 73 65 73 20 6f 66 20 53 4e 4d | browsers..In.typical.uses.of.SNM |
4c980 | 50 2c 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 63 6f | P,.one.or.more.administrative.co |
4c9a0 | 6d 70 75 74 65 72 73 20 63 61 6c 6c 65 64 20 6d 61 6e 61 67 65 72 73 20 68 61 76 65 20 74 68 65 | mputers.called.managers.have.the |
4c9c0 | 20 74 61 73 6b 20 6f 66 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 72 20 6d 61 6e 61 67 69 6e 67 20 | .task.of.monitoring.or.managing. |
4c9e0 | 61 20 67 72 6f 75 70 20 6f 66 20 68 6f 73 74 73 20 6f 72 20 64 65 76 69 63 65 73 20 6f 6e 20 61 | a.group.of.hosts.or.devices.on.a |
4ca00 | 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 2e 20 45 61 63 68 20 6d 61 6e 61 67 65 64 20 | .computer.network..Each.managed. |
4ca20 | 73 79 73 74 65 6d 20 65 78 65 63 75 74 65 73 20 61 20 73 6f 66 74 77 61 72 65 20 63 6f 6d 70 6f | system.executes.a.software.compo |
4ca40 | 6e 65 6e 74 20 63 61 6c 6c 65 64 20 61 6e 20 61 67 65 6e 74 20 77 68 69 63 68 20 72 65 70 6f 72 | nent.called.an.agent.which.repor |
4ca60 | 74 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 76 69 61 20 53 4e 4d 50 20 74 6f 20 74 68 65 20 6d | ts.information.via.SNMP.to.the.m |
4ca80 | 61 6e 61 67 65 72 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e | anager..In.zone-based.policy,.in |
4caa0 | 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 | terfaces.are.assigned.to.zones,. |
4cac0 | 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 | and.inspection.policy.is.applied |
4cae0 | 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a | .to.traffic.moving.between.the.z |
4cb00 | 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 | ones.and.acted.on.according.to.f |
4cb20 | 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 41 20 5a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 | irewall.rules..A.Zone.is.a.group |
4cb40 | 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 | .of.interfaces.that.have.similar |
4cb60 | 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 | .functions.or.features..It.estab |
4cb80 | 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 | lishes.the.security.borders.of.a |
4cba0 | 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 | .network..A.zone.defines.a.bound |
4cbc0 | 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 | ary.where.traffic.is.subjected.t |
4cbe0 | 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 | o.policy.restrictions.as.it.cros |
4cc00 | 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f | ses.to.another.region.of.a.netwo |
4cc20 | 72 6b 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 | rk..In.zone-based.policy,.interf |
4cc40 | 61 63 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 | aces.are.assigned.to.zones,.and. |
4cc60 | 69 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 | inspection.policy.is.applied.to. |
4cc80 | 74 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 | traffic.moving.between.the.zones |
4cca0 | 20 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 | .and.acted.on.according.to.firew |
4ccc0 | 61 6c 6c 20 72 75 6c 65 73 2e 20 41 20 7a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 | all.rules..A.zone.is.a.group.of. |
4cce0 | 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e | interfaces.that.have.similar.fun |
4cd00 | 63 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 | ctions.or.features..It.establish |
4cd20 | 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 | es.the.security.borders.of.a.net |
4cd40 | 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 | work..A.zone.defines.a.boundary. |
4cd60 | 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f | where.traffic.is.subjected.to.po |
4cd80 | 6c 69 63 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 | licy.restrictions.as.it.crosses. |
4cda0 | 74 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 | to.another.region.of.a.network.. |
4cdc0 | 49 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 61 20 57 41 4e 20 69 6e 74 | Inbound.connections.to.a.WAN.int |
4cde0 | 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 69 6d 70 72 6f 70 65 72 6c 79 20 68 61 6e 64 6c 65 64 | erface.can.be.improperly.handled |
4ce00 | 20 77 68 65 6e 20 74 68 65 20 72 65 70 6c 79 20 69 73 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 | .when.the.reply.is.sent.back.to. |
4ce20 | 74 68 65 20 63 6c 69 65 6e 74 2e 00 49 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 | the.client..Incoming.traffic.is. |
4ce40 | 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 49 | received.by.the.current.slave..I |
4ce60 | 66 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 20 66 61 69 6c 73 2c 20 61 6e 6f | f.the.receiving.slave.fails,.ano |
4ce80 | 74 68 65 72 20 73 6c 61 76 65 20 74 61 6b 65 73 20 6f 76 65 72 20 74 68 65 20 4d 41 43 20 61 64 | ther.slave.takes.over.the.MAC.ad |
4cea0 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 66 61 69 6c 65 64 20 72 65 63 65 69 76 69 6e 67 20 73 6c | dress.of.the.failed.receiving.sl |
4cec0 | 61 76 65 2e 00 49 6e 63 72 65 61 73 65 20 4d 61 78 69 6d 75 6d 20 4d 50 44 55 20 6c 65 6e 67 74 | ave..Increase.Maximum.MPDU.lengt |
4cee0 | 68 20 74 6f 20 37 39 39 31 20 6f 72 20 31 31 34 35 34 20 6f 63 74 65 74 73 20 28 64 65 66 61 75 | h.to.7991.or.11454.octets.(defau |
4cf00 | 6c 74 20 33 38 39 35 20 6f 63 74 65 74 73 29 00 49 6e 64 69 63 61 74 69 6f 6e 00 49 6e 64 69 76 | lt.3895.octets).Indication.Indiv |
4cf20 | 69 64 75 61 6c 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 00 49 6e 66 6f 72 6d 20 63 6c 69 65 6e | idual.Client.Subnet.Inform.clien |
4cf40 | 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 | t.that.the.DNS.server.can.be.fou |
4cf60 | 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 67 | nd.at.`<address>`..Information.g |
4cf80 | 61 74 68 65 72 65 64 20 77 69 74 68 20 4c 4c 44 50 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 | athered.with.LLDP.is.stored.in.t |
4cfa0 | 68 65 20 64 65 76 69 63 65 20 61 73 20 61 20 3a 61 62 62 72 3a 60 4d 49 42 20 28 4d 61 6e 61 67 | he.device.as.a.:abbr:`MIB.(Manag |
4cfc0 | 65 6d 65 6e 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 44 61 74 61 62 61 73 65 29 60 20 61 6e 64 | ement.Information.Database)`.and |
4cfe0 | 20 63 61 6e 20 62 65 20 71 75 65 72 69 65 64 20 77 69 74 68 20 3a 61 62 62 72 3a 60 53 4e 4d 50 | .can.be.queried.with.:abbr:`SNMP |
4d000 | 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 | .(Simple.Network.Management.Prot |
4d020 | 6f 63 6f 6c 29 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 39 32 | ocol)`.as.specified.in.:rfc:`292 |
4d040 | 32 60 2e 20 54 68 65 20 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 61 6e 20 4c 4c 44 50 2d 65 6e 61 62 | 2`..The.topology.of.an.LLDP-enab |
4d060 | 6c 65 64 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 62 65 20 64 69 73 63 6f 76 65 72 65 64 20 62 79 | led.network.can.be.discovered.by |
4d080 | 20 63 72 61 77 6c 69 6e 67 20 74 68 65 20 68 6f 73 74 73 20 61 6e 64 20 71 75 65 72 79 69 6e 67 | .crawling.the.hosts.and.querying |
4d0a0 | 20 74 68 69 73 20 64 61 74 61 62 61 73 65 2e 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 | .this.database..Information.that |
4d0c0 | 20 6d 61 79 20 62 65 20 72 65 74 72 69 65 76 65 64 20 69 6e 63 6c 75 64 65 3a 00 49 6e 66 6f 72 | .may.be.retrieved.include:.Infor |
4d0e0 | 6d 61 74 69 6f 6e 61 6c 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 6d 65 73 73 61 67 65 73 00 | mational.Informational.messages. |
4d100 | 49 6e 70 75 74 20 66 72 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 | Input.from.`eth0`.network.interf |
4d120 | 61 63 65 00 49 6e 73 70 65 63 74 20 6c 6f 67 73 3a 00 49 6e 73 74 61 6c 6c 20 74 68 65 20 63 6c | ace.Inspect.logs:.Install.the.cl |
4d140 | 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 76 69 61 20 61 70 74 20 61 6e 64 20 65 78 65 63 75 74 | ient.software.via.apt.and.execut |
4d160 | 65 20 70 70 74 70 73 65 74 75 70 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 | e.pptpsetup.to.generate.the.conf |
4d180 | 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 61 20 6e 75 6d 65 72 69 63 61 | iguration..Instead.of.a.numerica |
4d1a0 | 6c 20 4d 53 53 20 76 61 6c 75 65 20 60 63 6c 61 6d 70 2d 6d 73 73 2d 74 6f 2d 70 6d 74 75 60 20 | l.MSS.value.`clamp-mss-to-pmtu`. |
4d1c0 | 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 65 74 | can.be.used.to.automatically.set |
4d1e0 | 20 74 68 65 20 70 72 6f 70 65 72 20 76 61 6c 75 65 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 70 61 | .the.proper.value..Instead.of.pa |
4d200 | 73 73 77 6f 72 64 20 6f 6e 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 32 46 41 20 | ssword.only.authentication,.2FA. |
4d220 | 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 2b 20 4f 54 50 20 6b 65 | password.authentication.+.OTP.ke |
4d240 | 79 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 4f 54 | y.can.be.used..Alternatively,.OT |
4d260 | 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 69 74 68 6f 75 74 20 61 | P.authentication.only,.without.a |
4d280 | 20 70 61 73 73 77 6f 72 64 2c 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 54 6f 20 64 6f 20 74 68 | .password,.can.be.used..To.do.th |
4d2a0 | 69 73 2c 20 61 6e 20 4f 54 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 | is,.an.OTP.configuration.must.be |
4d2c0 | 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 | .added.to.the.configuration.abov |
4d2e0 | 65 3a 00 49 6e 73 74 65 61 64 20 6f 66 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 61 6c 20 73 | e:.Instead.of.sending.the.real.s |
4d300 | 79 73 74 65 6d 20 68 6f 73 74 6e 61 6d 65 20 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 | ystem.hostname.to.the.DHCP.serve |
4d320 | 72 2c 20 6f 76 65 72 77 72 69 74 65 20 74 68 65 20 68 6f 73 74 2d 6e 61 6d 65 20 77 69 74 68 20 | r,.overwrite.the.host-name.with. |
4d340 | 74 68 69 73 20 67 69 76 65 6e 2d 76 61 6c 75 65 2e 00 49 6e 74 65 67 72 69 74 79 20 e2 80 93 20 | this.given-value..Integrity..... |
4d360 | 4d 65 73 73 61 67 65 20 69 6e 74 65 67 72 69 74 79 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 | Message.integrity.to.ensure.that |
4d380 | 20 61 20 70 61 63 6b 65 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 74 61 6d 70 65 72 65 64 20 | .a.packet.has.not.been.tampered. |
4d3a0 | 77 68 69 6c 65 20 69 6e 20 74 72 61 6e 73 69 74 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 6f 70 | while.in.transit.including.an.op |
4d3c0 | 74 69 6f 6e 61 6c 20 70 61 63 6b 65 74 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 | tional.packet.replay.protection. |
4d3e0 | 6d 65 63 68 61 6e 69 73 6d 2e 00 49 6e 74 65 6c 20 41 58 32 30 30 00 49 6e 74 65 6c c2 ae 20 51 | mechanism..Intel.AX200.Intel...Q |
4d400 | 41 54 00 49 6e 74 65 72 63 6f 6e 6e 65 63 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 56 52 46 20 77 | AT.Interconnect.the.global.VRF.w |
4d420 | 69 74 68 20 76 72 66 20 22 72 65 64 22 20 75 73 69 6e 67 20 74 68 65 20 76 65 74 68 31 30 20 3c | ith.vrf."red".using.the.veth10.< |
4d440 | 2d 3e 20 76 65 74 68 20 31 31 20 70 61 69 72 00 49 6e 74 65 72 66 61 63 65 20 2a 2a 65 74 68 30 | ->.veth.11.pair.Interface.**eth0 |
4d460 | 2a 2a 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 75 70 73 74 72 65 61 6d 2e 00 | **.used.to.connect.to.upstream.. |
4d480 | 49 6e 74 65 72 66 61 63 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 | Interface.Configuration.Interfac |
4d4a0 | 65 20 47 72 6f 75 70 73 00 49 6e 74 65 72 66 61 63 65 20 52 6f 75 74 65 73 00 49 6e 74 65 72 66 | e.Groups.Interface.Routes.Interf |
4d4c0 | 61 63 65 20 60 65 74 68 31 60 20 4c 41 4e 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2e 20 49 6e | ace.`eth1`.LAN.is.behind.NAT..In |
4d4e0 | 20 6f 72 64 65 72 20 74 6f 20 73 75 62 73 63 72 69 62 65 20 60 31 30 2e 30 2e 30 2e 30 2f 32 33 | .order.to.subscribe.`10.0.0.0/23 |
4d500 | 60 20 73 75 62 6e 65 74 20 6d 75 6c 74 69 63 61 73 74 20 77 68 69 63 68 20 69 73 20 69 6e 20 60 | `.subnet.multicast.which.is.in.` |
4d520 | 65 74 68 30 60 20 57 41 4e 20 77 65 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 | eth0`.WAN.we.need.to.configure.i |
4d540 | 67 6d 70 2d 70 72 6f 78 79 2e 00 49 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | gmp-proxy..Interface.configurati |
4d560 | 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e | on.Interface.for.DHCP.Relay.Agen |
4d580 | 74 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 71 75 65 73 74 73 20 6f 75 74 2e 00 49 6e 74 65 72 | t.to.forward.requests.out..Inter |
4d5a0 | 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 6c 69 73 | face.for.DHCP.Relay.Agent.to.lis |
4d5c0 | 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 73 2e 00 49 6e 74 65 72 66 61 63 65 20 73 70 65 63 | ten.for.requests..Interface.spec |
4d5e0 | 69 66 69 63 20 63 6f 6d 6d 61 6e 64 73 00 49 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 | ific.commands.Interface.to.use.f |
4d600 | 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 49 6e | or.syncing.conntrack.entries..In |
4d620 | 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e | terface.used.for.VXLAN.underlay. |
4d640 | 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 | .This.is.mandatory.when.using.VX |
4d660 | 4c 41 4e 20 76 69 61 20 61 20 6d 75 6c 74 69 63 61 73 74 20 6e 65 74 77 6f 72 6b 2e 20 56 58 4c | LAN.via.a.multicast.network..VXL |
4d680 | 41 4e 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 65 6e 74 65 72 20 61 6e 64 | AN.traffic.will.always.enter.and |
4d6a0 | 20 65 78 69 74 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 49 6e 74 65 72 66 61 63 65 20 | .exit.this.interface..Interface. |
4d6c0 | 77 65 69 67 68 74 00 49 6e 74 65 72 66 61 63 65 73 00 49 6e 74 65 72 66 61 63 65 73 20 43 6f 6e | weight.Interfaces.Interfaces.Con |
4d6e0 | 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 70 61 72 74 69 | figuration.Interfaces.that.parti |
4d700 | 63 69 70 61 74 65 20 69 6e 20 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 70 72 6f 63 65 73 73 | cipate.in.the.DHCP.relay.process |
4d720 | 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 2c 20 61 74 20 6c 65 | ..If.this.command.is.used,.at.le |
4d740 | 61 73 74 20 74 77 6f 20 65 6e 74 72 69 65 73 20 6f 66 20 69 74 20 61 72 65 20 72 65 71 75 69 72 | ast.two.entries.of.it.are.requir |
4d760 | 65 64 3a 20 6f 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 63 | ed:.one.for.the.interface.that.c |
4d780 | 61 70 74 75 72 65 73 20 74 68 65 20 64 68 63 70 2d 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6f | aptures.the.dhcp-requests,.and.o |
4d7a0 | 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 6f 72 77 61 72 64 20 | ne.for.the.interface.to.forward. |
4d7c0 | 73 75 63 68 20 72 65 71 75 65 73 74 73 2e 20 41 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 | such.requests..A.warning.message |
4d7e0 | 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 69 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 | .will.be.shown.if.this.command.i |
4d800 | 73 20 75 73 65 64 2c 20 73 69 6e 63 65 20 6e 65 77 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e | s.used,.since.new.implementation |
4d820 | 73 20 73 68 6f 75 6c 64 20 75 73 65 20 60 60 6c 69 73 74 65 6e 2d 69 6e 74 65 72 66 61 63 65 60 | s.should.use.``listen-interface` |
4d840 | 60 20 61 6e 64 20 60 60 75 70 73 74 72 65 61 6d 2d 69 6e 74 65 72 66 61 63 65 60 60 2e 00 49 6e | `.and.``upstream-interface``..In |
4d860 | 74 65 72 66 61 63 65 73 20 77 68 6f 73 65 20 44 48 43 50 20 63 6c 69 65 6e 74 20 6e 61 6d 65 73 | terfaces.whose.DHCP.client.names |
4d880 | 65 72 76 65 72 73 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 71 75 65 73 74 73 20 74 6f 2e 00 49 | ervers.to.forward.requests.to..I |
4d8a0 | 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 69 72 20 77 65 69 67 68 74 20 61 6e 64 20 74 68 65 20 | nterfaces,.their.weight.and.the. |
4d8c0 | 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 62 61 6c 61 6e 63 65 64 20 61 | type.of.traffic.to.be.balanced.a |
4d8e0 | 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 6e 75 6d 62 65 72 65 64 20 62 61 6c 61 6e 63 69 6e 67 | re.defined.in.numbered.balancing |
4d900 | 20 72 75 6c 65 20 73 65 74 73 2e 20 54 68 65 20 72 75 6c 65 20 73 65 74 73 20 61 72 65 20 65 78 | .rule.sets..The.rule.sets.are.ex |
4d920 | 65 63 75 74 65 64 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c 20 6f 72 64 65 72 20 61 67 61 69 6e 73 | ecuted.in.numerical.order.agains |
4d940 | 74 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 | t.outgoing.packets..In.case.of.a |
4d960 | 20 6d 61 74 63 68 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 74 68 72 6f 75 67 | .match.the.packet.is.sent.throug |
4d980 | 68 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 | h.an.interface.specified.in.the. |
4d9a0 | 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 20 49 66 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 6e | matching.rule..If.a.packet.doesn |
4d9c0 | 27 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 6c 65 20 69 74 20 69 73 20 73 65 6e 74 20 62 79 20 | 't.match.any.rule.it.is.sent.by. |
4d9e0 | 75 73 69 6e 67 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 | using.the.system.routing.table.. |
4da00 | 52 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 2e 00 49 | Rule.numbers.can't.be.changed..I |
4da20 | 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 | nternal.attack:.an.attack.from.t |
4da40 | 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 28 67 65 6e 65 72 61 74 65 64 20 62 | he.internal.network.(generated.b |
4da60 | 79 20 61 20 63 75 73 74 6f 6d 65 72 29 20 74 6f 77 61 72 64 73 20 74 68 65 20 69 6e 74 65 72 6e | y.a.customer).towards.the.intern |
4da80 | 65 74 20 69 73 20 69 64 65 6e 74 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c | et.is.identify..In.this.case,.al |
4daa0 | 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 70 61 72 74 69 63 75 6c | l.connections.from.this.particul |
4dac0 | 61 72 20 49 50 2f 43 75 73 74 6f 6d 65 72 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 | ar.IP/Customer.will.be.blocked.. |
4dae0 | 49 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 6e 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 70 | Internally,.in.flow-accounting.p |
4db00 | 72 6f 63 65 73 73 65 73 20 65 78 69 73 74 20 61 20 62 75 66 66 65 72 20 66 6f 72 20 64 61 74 61 | rocesses.exist.a.buffer.for.data |
4db20 | 20 65 78 63 68 61 6e 67 69 6e 67 20 62 65 74 77 65 65 6e 20 63 6f 72 65 20 70 72 6f 63 65 73 73 | .exchanging.between.core.process |
4db40 | 20 61 6e 64 20 70 6c 75 67 69 6e 73 20 28 65 61 63 68 20 65 78 70 6f 72 74 20 74 61 72 67 65 74 | .and.plugins.(each.export.target |
4db60 | 20 69 73 20 61 20 73 65 70 61 72 61 74 65 64 20 70 6c 75 67 69 6e 29 2e 20 49 66 20 79 6f 75 20 | .is.a.separated.plugin)..If.you. |
4db80 | 68 61 76 65 20 68 69 67 68 20 74 72 61 66 66 69 63 20 6c 65 76 65 6c 73 20 6f 72 20 6e 6f 74 65 | have.high.traffic.levels.or.note |
4dba0 | 64 20 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 6d 69 73 73 65 64 20 72 65 63 6f | d.some.problems.with.missed.reco |
4dbc0 | 72 64 73 20 6f 72 20 73 74 6f 70 70 69 6e 67 20 65 78 70 6f 72 74 69 6e 67 2c 20 79 6f 75 20 6d | rds.or.stopping.exporting,.you.m |
4dbe0 | 61 79 20 74 72 79 20 74 6f 20 69 6e 63 72 65 61 73 65 20 61 20 64 65 66 61 75 6c 74 20 62 75 66 | ay.try.to.increase.a.default.buf |
4dc00 | 66 65 72 20 73 69 7a 65 20 28 31 30 20 4d 69 42 29 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 | fer.size.(10.MiB).with.the.next. |
4dc20 | 63 6f 6d 6d 61 6e 64 3a 00 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 | command:.Internet.Key.Exchange.v |
4dc40 | 65 72 73 69 6f 6e 20 32 20 28 49 4b 45 76 32 29 20 69 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 | ersion.2.(IKEv2).is.a.tunneling. |
4dc60 | 70 72 6f 74 6f 63 6f 6c 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 73 65 63 2c 20 74 68 61 74 20 65 | protocol,.based.on.IPsec,.that.e |
4dc80 | 73 74 61 62 6c 69 73 68 65 73 20 61 20 73 65 63 75 72 65 20 56 50 4e 20 63 6f 6d 6d 75 6e 69 63 | stablishes.a.secure.VPN.communic |
4dca0 | 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 50 4e 20 64 65 76 69 63 65 73 2c 20 20 61 6e 64 20 | ation.between.VPN.devices,..and. |
4dcc0 | 64 65 66 69 6e 65 73 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 | defines.negotiation.and.authenti |
4dce0 | 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 65 73 20 66 6f 72 20 49 50 73 65 63 20 73 65 63 75 72 | cation.processes.for.IPsec.secur |
4dd00 | 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 73 20 28 53 41 73 29 2e 20 49 74 20 69 73 20 6f 66 | ity.associations.(SAs)..It.is.of |
4dd20 | 74 65 6e 20 6b 6e 6f 77 6e 20 61 73 20 49 4b 45 76 32 2f 49 50 53 65 63 20 6f 72 20 49 50 53 65 | ten.known.as.IKEv2/IPSec.or.IPSe |
4dd40 | 63 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 e2 80 94 20 6f 72 20 72 6f 61 | c.IKEv2.remote-access.....or.roa |
4dd60 | 64 2d 77 61 72 72 69 6f 72 73 20 61 73 20 6f 74 68 65 72 73 20 63 61 6c 6c 20 69 74 2e 00 49 6e | d-warriors.as.others.call.it..In |
4dd80 | 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 2c 20 49 | ternet.Key.Exchange.version.2,.I |
4dda0 | 4b 45 76 32 20 66 6f 72 20 73 68 6f 72 74 2c 20 69 73 20 61 20 72 65 71 75 65 73 74 2f 72 65 73 | KEv2.for.short,.is.a.request/res |
4ddc0 | 70 6f 6e 73 65 20 70 72 6f 74 6f 63 6f 6c 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 62 6f 74 68 | ponse.protocol.developed.by.both |
4dde0 | 20 43 69 73 63 6f 20 61 6e 64 20 4d 69 63 72 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 75 73 65 64 | .Cisco.and.Microsoft..It.is.used |
4de00 | 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 6e 64 20 73 65 63 75 72 65 20 49 50 76 34 2f 49 50 | .to.establish.and.secure.IPv4/IP |
4de20 | 76 36 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 65 20 69 74 20 61 20 73 69 74 65 2d 74 6f 2d | v6.connections,.be.it.a.site-to- |
4de40 | 73 69 74 65 20 56 50 4e 20 6f 72 20 66 72 6f 6d 20 61 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 | site.VPN.or.from.a.road-warrior. |
4de60 | 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 68 75 62 20 73 69 74 65 2e 20 49 4b 45 76 32 2c | connecting.to.a.hub.site..IKEv2, |
4de80 | 20 77 68 65 6e 20 72 75 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 | .when.run.in.point-to-multipoint |
4dea0 | 2c 20 6f 72 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 2f 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 | ,.or.remote-access/road-warrior. |
4dec0 | 6d 6f 64 65 2c 20 73 65 63 75 72 65 73 20 74 68 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 69 | mode,.secures.the.server-side.wi |
4dee0 | 74 68 20 61 6e 6f 74 68 65 72 20 6c 61 79 65 72 20 62 79 20 75 73 69 6e 67 20 61 6e 20 78 35 30 | th.another.layer.by.using.an.x50 |
4df00 | 39 20 73 69 67 6e 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 49 6e 74 | 9.signed.server.certificate..Int |
4df20 | 65 72 6e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 49 6e 74 65 72 76 61 6c 00 49 6e 74 65 72 | ernetwork.Control.Interval.Inter |
4df40 | 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 | val.in.milliseconds.Interval.in. |
4df60 | 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e 20 75 70 64 61 74 65 73 20 28 64 65 66 61 75 6c 74 | minutes.between.updates.(default |
4df80 | 3a 20 36 30 29 00 49 6e 74 72 6f 64 75 63 69 6e 67 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f | :.60).Introducing.route.reflecto |
4dfa0 | 72 73 20 72 65 6d 6f 76 65 73 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 74 68 65 20 66 75 6c 6c | rs.removes.the.need.for.the.full |
4dfc0 | 2d 6d 65 73 68 2e 20 57 68 65 6e 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 72 6f 75 74 | -mesh..When.you.configure.a.rout |
4dfe0 | 65 20 72 65 66 6c 65 63 74 6f 72 20 79 6f 75 20 68 61 76 65 20 74 6f 20 74 65 6c 6c 20 74 68 65 | e.reflector.you.have.to.tell.the |
4e000 | 20 72 6f 75 74 65 72 20 77 68 65 74 68 65 72 20 74 68 65 20 6f 74 68 65 72 20 49 42 47 50 20 72 | .router.whether.the.other.IBGP.r |
4e020 | 6f 75 74 65 72 20 69 73 20 61 20 63 6c 69 65 6e 74 20 6f 72 20 6e 6f 6e 2d 63 6c 69 65 6e 74 2e | outer.is.a.client.or.non-client. |
4e040 | 20 41 20 63 6c 69 65 6e 74 20 69 73 20 61 6e 20 49 42 47 50 20 72 6f 75 74 65 72 20 74 68 61 74 | .A.client.is.an.IBGP.router.that |
4e060 | 20 74 68 65 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 77 69 6c 6c 20 e2 80 9c 72 65 66 | .the.route.reflector.will....ref |
4e080 | 6c 65 63 74 e2 80 9d 20 72 6f 75 74 65 73 20 74 6f 2c 20 74 68 65 20 6e 6f 6e 2d 63 6c 69 65 6e | lect....routes.to,.the.non-clien |
4e0a0 | 74 20 69 73 20 6a 75 73 74 20 61 20 72 65 67 75 6c 61 72 20 49 42 47 50 20 6e 65 69 67 68 62 6f | t.is.just.a.regular.IBGP.neighbo |
4e0c0 | 72 2e 20 52 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 | r..Route.reflectors.mechanism.is |
4e0e0 | 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 34 35 36 60 20 61 6e 64 20 75 70 | .described.in.:rfc:`4456`.and.up |
4e100 | 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 37 36 30 36 60 2e 00 49 74 20 64 69 73 61 62 6c 65 | dated.by.:rfc:`7606`..It.disable |
4e120 | 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 61 75 | s.transparent.huge.pages,.and.au |
4e140 | 74 6f 6d 61 74 69 63 20 4e 55 4d 41 20 62 61 6c 61 6e 63 69 6e 67 2e 20 49 74 20 61 6c 73 6f 20 | tomatic.NUMA.balancing..It.also. |
4e160 | 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d | uses.cpupower.to.set.the.perform |
4e180 | 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 65 72 6e 6f 72 2c 20 61 6e 64 20 72 65 71 75 65 | ance.cpufreq.governor,.and.reque |
4e1a0 | 73 74 73 20 61 20 63 70 75 5f 64 6d 61 5f 6c 61 74 65 6e 63 79 20 76 61 6c 75 65 20 6f 66 20 31 | sts.a.cpu_dma_latency.value.of.1 |
4e1c0 | 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 62 75 73 79 5f 72 65 61 64 20 61 6e 64 20 62 75 73 | ..It.also.sets.busy_read.and.bus |
4e1e0 | 79 5f 70 6f 6c 6c 20 74 69 6d 65 73 20 74 6f 20 35 30 20 75 73 2c 20 61 6e 64 20 74 63 70 5f 66 | y_poll.times.to.50.us,.and.tcp_f |
4e200 | 61 73 74 6f 70 65 6e 20 74 6f 20 33 2e 00 49 74 20 65 6e 61 62 6c 65 73 20 74 72 61 6e 73 70 61 | astopen.to.3..It.enables.transpa |
4e220 | 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 75 73 65 73 20 63 70 75 70 6f 77 | rent.huge.pages,.and.uses.cpupow |
4e240 | 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 | er.to.set.the.performance.cpufre |
4e260 | 71 20 67 6f 76 65 72 6e 6f 72 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 60 60 6b 65 72 6e 65 | q.governor..It.also.sets.``kerne |
4e280 | 6c 2e 73 63 68 65 64 5f 6d 69 6e 5f 67 72 61 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 | l.sched_min_granularity_ns``.to. |
4e2a0 | 31 30 20 75 73 2c 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 65 64 5f 77 61 6b 65 75 70 5f 67 72 61 | 10.us,.``kernel.sched_wakeup_gra |
4e2c0 | 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 35 20 75 73 73 2c 20 61 6e 64 20 60 60 76 | nularity_ns``.to.15.uss,.and.``v |
4e2e0 | 6d 2e 64 69 72 74 79 5f 72 61 74 69 6f 60 60 20 74 6f 20 34 30 25 2e 00 49 74 20 67 65 6e 65 72 | m.dirty_ratio``.to.40%..It.gener |
4e300 | 61 74 65 73 20 74 68 65 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 | ates.the.keypair,.which.includes |
4e320 | 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2e 20 54 | .the.public.and.private.parts..T |
4e340 | 68 65 20 6b 65 79 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 | he.key.is.not.stored.on.the.syst |
4e360 | 65 6d 20 2d 20 6f 6e 6c 79 20 61 20 6b 65 79 70 61 69 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 | em.-.only.a.keypair.is.generated |
4e380 | 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 73 75 70 70 6f 72 74 20 61 73 20 48 45 4c 50 45 52 20 | ..It.helps.to.support.as.HELPER. |
4e3a0 | 6f 6e 6c 79 20 66 6f 72 20 70 6c 61 6e 6e 65 64 20 72 65 73 74 61 72 74 73 2e 00 49 74 20 68 65 | only.for.planned.restarts..It.he |
4e3c0 | 6c 70 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 74 68 65 20 73 79 6e 74 61 78 20 61 73 3a 20 28 | lps.to.think.of.the.syntax.as:.( |
4e3e0 | 73 65 65 20 62 65 6c 6f 77 29 2e 20 54 68 65 20 27 72 75 6c 65 2d 73 65 74 27 20 73 68 6f 75 6c | see.below)..The.'rule-set'.shoul |
4e400 | 64 20 62 65 20 77 72 69 74 74 65 6e 20 66 72 6f 6d 20 74 68 65 20 70 65 72 73 70 65 63 74 69 76 | d.be.written.from.the.perspectiv |
4e420 | 65 20 6f 66 3a 20 2a 53 6f 75 72 63 65 20 5a 6f 6e 65 2a 2d 74 6f 2d 3e 2a 44 65 73 74 69 6e 61 | e.of:.*Source.Zone*-to->*Destina |
4e440 | 74 69 6f 6e 20 5a 6f 6e 65 2a 00 49 74 20 69 73 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 | tion.Zone*.It.is.compatible.with |
4e460 | 20 43 69 73 63 6f 20 28 52 29 20 41 6e 79 43 6f 6e 6e 65 63 74 20 28 52 29 20 63 6c 69 65 6e 74 | .Cisco.(R).AnyConnect.(R).client |
4e480 | 73 2e 00 49 74 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 60 60 65 74 68 31 60 60 00 49 | s..It.is.connected.to.``eth1``.I |
4e4a0 | 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 53 | t.is.highly.recommended.to.use.S |
4e4c0 | 53 48 20 6b 65 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c | SH.key.authentication..By.defaul |
4e4e0 | 74 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 75 73 65 72 20 28 60 60 76 79 6f 73 | t.there.is.only.one.user.(``vyos |
4e500 | 60 60 29 2c 20 61 6e 64 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 61 6e 79 20 6e 75 6d 62 | ``),.and.you.can.assign.any.numb |
4e520 | 65 72 20 6f 66 20 6b 65 79 73 20 74 6f 20 74 68 61 74 20 75 73 65 72 2e 20 59 6f 75 20 63 61 6e | er.of.keys.to.that.user..You.can |
4e540 | 20 67 65 6e 65 72 61 74 65 20 61 20 73 73 68 20 6b 65 79 20 77 69 74 68 20 74 68 65 20 60 60 73 | .generate.a.ssh.key.with.the.``s |
4e560 | 73 68 2d 6b 65 79 67 65 6e 60 60 20 63 6f 6d 6d 61 6e 64 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 | sh-keygen``.command.on.your.loca |
4e580 | 6c 20 6d 61 63 68 69 6e 65 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 28 62 79 20 64 65 66 61 75 6c | l.machine,.which.will.(by.defaul |
4e5a0 | 74 29 20 73 61 76 65 20 69 74 20 61 73 20 60 60 7e 2f 2e 73 73 68 2f 69 64 5f 72 73 61 2e 70 75 | t).save.it.as.``~/.ssh/id_rsa.pu |
4e5c0 | 62 60 60 2e 00 49 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f | b``..It.is.highly.recommended.to |
4e5e0 | 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 62 6f 74 68 20 74 | .use.the.same.address.for.both.t |
4e600 | 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 64 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 | he.LDP.router-id.and.the.discove |
4e620 | 72 79 20 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 66 6f 72 20 56 79 | ry.transport.address,.but.for.Vy |
4e640 | 4f 53 20 4d 50 4c 53 20 4c 44 50 20 74 6f 20 77 6f 72 6b 20 62 6f 74 68 20 70 61 72 61 6d 65 74 | OS.MPLS.LDP.to.work.both.paramet |
4e660 | 65 72 73 20 6d 75 73 74 20 62 65 20 65 78 70 6c 69 63 69 74 6c 79 20 73 65 74 20 69 6e 20 74 68 | ers.must.be.explicitly.set.in.th |
4e680 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 | e.configuration..It.is.important |
4e6a0 | 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 | .to.note.that.when.creating.fire |
4e6c0 | 77 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 | wall.rules.that.the.DNAT.transla |
4e6e0 | 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 | tion.occurs.**before**.traffic.t |
4e700 | 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 | raverses.the.firewall..In.other. |
4e720 | 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 | words,.the.destination.address.h |
4e740 | 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 | as.already.been.translated.to.19 |
4e760 | 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 | 2.168.0.100..It.is.important.to. |
4e780 | 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c | note.that.when.creating.firewall |
4e7a0 | 20 72 75 6c 65 73 2c 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 | .rules,.the.DNAT.translation.occ |
4e7c0 | 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 | urs.**before**.traffic.traverses |
4e7e0 | 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 | .the.firewall..In.other.words,.t |
4e800 | 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 | he.destination.address.has.alrea |
4e820 | 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e | dy.been.translated.to.192.168.0. |
4e840 | 31 30 30 2e 00 49 74 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c | 100..It.is.not.sufficient.to.onl |
4e860 | 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c 33 56 50 4e 20 56 52 46 73 20 62 75 74 20 4c 33 56 | y.configure.a.L3VPN.VRFs.but.L3V |
4e880 | 50 4e 20 56 52 46 73 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e | PN.VRFs.must.be.maintained,.too. |
4e8a0 | 46 6f 72 20 4c 33 56 50 4e 20 56 52 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f | For.L3VPN.VRF.maintenance.the.fo |
4e8c0 | 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 | llowing.operational.commands.are |
4e8e0 | 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 | .in.place..It.is.not.sufficient. |
4e900 | 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 56 52 46 20 62 75 74 20 56 52 46 73 | to.only.configure.a.VRF.but.VRFs |
4e920 | 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 20 46 6f 72 20 56 52 | .must.be.maintained,.too..For.VR |
4e940 | 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 | F.maintenance.the.following.oper |
4e960 | 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 | ational.commands.are.in.place..I |
4e980 | 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 74 6f 20 75 73 65 20 74 68 65 20 60 76 69 66 20 31 | t.is.not.valid.to.use.the.`vif.1 |
4e9a0 | 60 20 6f 70 74 69 6f 6e 20 66 6f 72 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 | `.option.for.VLAN.aware.bridges. |
4e9c0 | 62 65 63 61 75 73 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 61 73 73 75 6d | because.VLAN.aware.bridges.assum |
4e9e0 | 65 20 74 68 61 74 20 61 6c 6c 20 75 6e 6c 61 62 65 6c 65 64 20 70 61 63 6b 65 74 73 20 62 65 6c | e.that.all.unlabeled.packets.bel |
4ea00 | 6f 6e 67 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 4e 20 31 20 6d 65 6d 62 65 72 | ong.to.the.default.VLAN.1.member |
4ea20 | 20 61 6e 64 20 74 68 61 74 20 74 68 65 20 56 4c 41 4e 20 49 44 20 6f 66 20 74 68 65 20 62 72 69 | .and.that.the.VLAN.ID.of.the.bri |
4ea40 | 64 67 65 27 73 20 70 61 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 | dge's.parent.interface.is.always |
4ea60 | 20 31 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 65 6e 68 61 6e 63 65 20 61 75 74 | .1.It.is.possible.to.enhance.aut |
4ea80 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 63 75 72 69 74 79 20 62 79 20 75 73 69 6e 67 20 74 68 | hentication.security.by.using.th |
4eaa0 | 65 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 | e.:abbr:`2FA.(Two-factor.authent |
4eac0 | 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 | ication)`/:abbr:`MFA.(Multi-fact |
4eae0 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 66 65 61 74 75 72 65 20 74 6f 67 65 | or.authentication)`.feature.toge |
4eb00 | 74 68 65 72 20 77 69 74 68 20 3a 61 62 62 72 3a 60 4f 54 50 20 28 4f 6e 65 2d 54 69 6d 65 2d 50 | ther.with.:abbr:`OTP.(One-Time-P |
4eb20 | 61 64 29 60 20 6f 6e 20 56 79 4f 53 2e 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 | ad)`.on.VyOS..:abbr:`2FA.(Two-fa |
4eb40 | 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 | ctor.authentication)`/:abbr:`MFA |
4eb60 | 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 | .(Multi-factor.authentication)`. |
4eb80 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 70 65 72 20 | is.configured.independently.per. |
4eba0 | 65 61 63 68 20 75 73 65 72 2e 20 49 66 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 73 20 63 6f 6e 66 | each.user..If.an.OTP.key.is.conf |
4ebc0 | 69 67 75 72 65 64 20 66 6f 72 20 61 20 75 73 65 72 2c 20 32 46 41 2f 4d 46 41 20 69 73 20 61 75 | igured.for.a.user,.2FA/MFA.is.au |
4ebe0 | 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 61 74 20 70 61 72 | tomatically.enabled.for.that.par |
4ec00 | 74 69 63 75 6c 61 72 20 75 73 65 72 2e 20 49 66 20 61 20 75 73 65 72 20 64 6f 65 73 20 6e 6f 74 | ticular.user..If.a.user.does.not |
4ec20 | 20 68 61 76 65 20 61 6e 20 4f 54 50 20 6b 65 79 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 68 65 | .have.an.OTP.key.configured,.the |
4ec40 | 72 65 20 69 73 20 6e 6f 20 32 46 41 2f 4d 46 41 20 63 68 65 63 6b 20 66 6f 72 20 74 68 61 74 20 | re.is.no.2FA/MFA.check.for.that. |
4ec60 | 75 73 65 72 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 70 65 72 6d 69 74 20 42 | user..It.is.possible.to.permit.B |
4ec80 | 47 50 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 77 69 74 68 6f 75 74 20 | GP.install.VPN.prefixes.without. |
4eca0 | 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 | transport.labels..This.configura |
4ecc0 | 74 69 6f 6e 20 77 69 6c 6c 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 6f | tion.will.install.VPN.prefixes.o |
4ece0 | 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 61 6e 20 65 2d 62 67 70 20 73 65 73 73 69 6f 6e 2c | riginated.from.an.e-bgp.session, |
4ed00 | 20 61 6e 64 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 64 69 72 65 63 74 6c 79 20 | .and.with.the.next-hop.directly. |
4ed20 | 63 6f 6e 6e 65 63 74 65 64 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 | connected..It.is.possible.to.spe |
4ed40 | 63 69 66 79 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 69 70 76 36 20 70 72 65 | cify.a.static.route.for.ipv6.pre |
4ed60 | 66 69 78 65 73 20 75 73 69 6e 67 20 61 6e 20 53 52 76 36 20 73 65 67 6d 65 6e 74 73 20 69 6e 73 | fixes.using.an.SRv6.segments.ins |
4ed80 | 74 72 75 63 74 69 6f 6e 2e 20 54 68 65 20 60 2f 60 20 73 65 70 61 72 61 74 6f 72 20 63 61 6e 20 | truction..The.`/`.separator.can. |
4eda0 | 62 65 20 75 73 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 65 67 6d | be.used.to.specify.multiple.segm |
4edc0 | 65 6e 74 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 | ent.instructions..It.is.possible |
4ede0 | 20 74 6f 20 75 73 65 20 65 69 74 68 65 72 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 55 6e 69 63 | .to.use.either.Multicast.or.Unic |
4ee00 | 61 73 74 20 74 6f 20 73 79 6e 63 20 63 6f 6e 6e 74 72 61 63 6b 20 74 72 61 66 66 69 63 2e 20 4d | ast.to.sync.conntrack.traffic..M |
4ee20 | 6f 73 74 20 65 78 61 6d 70 6c 65 73 20 62 65 6c 6f 77 20 73 68 6f 77 20 4d 75 6c 74 69 63 61 73 | ost.examples.below.show.Multicas |
4ee40 | 74 2c 20 62 75 74 20 75 6e 69 63 61 73 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | t,.but.unicast.can.be.specified. |
4ee60 | 62 79 20 75 73 69 6e 67 20 74 68 65 20 22 70 65 65 72 22 20 6b 65 79 77 6f 72 6b 20 61 66 74 65 | by.using.the."peer".keywork.afte |
4ee80 | 72 20 74 68 65 20 73 70 65 63 69 66 69 63 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 61 73 20 69 | r.the.specificed.interface,.as.i |
4eea0 | 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 49 74 20 69 73 20 76 | n.the.following.example:.It.is.v |
4eec0 | 65 72 79 20 65 61 73 79 20 74 6f 20 6d 69 73 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 63 61 | ery.easy.to.misconfigure.multica |
4eee0 | 73 74 20 72 65 70 65 61 74 69 6e 67 20 69 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c | st.repeating.if.you.have.multipl |
4ef00 | 65 20 4e 48 53 65 73 2e 00 49 74 20 75 73 65 73 20 61 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 | e.NHSes..It.uses.a.single.TCP.or |
4ef20 | 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 6c | .UDP.connection.and.does.not.rel |
4ef40 | 79 20 6f 6e 20 70 61 63 6b 65 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f | y.on.packet.source.addresses,.so |
4ef60 | 20 69 74 20 77 69 6c 6c 20 77 6f 72 6b 20 65 76 65 6e 20 74 68 72 6f 75 67 68 20 61 20 64 6f 75 | .it.will.work.even.through.a.dou |
4ef80 | 62 6c 65 20 4e 41 54 3a 20 70 65 72 66 65 63 74 20 66 6f 72 20 70 75 62 6c 69 63 20 68 6f 74 73 | ble.NAT:.perfect.for.public.hots |
4efa0 | 70 6f 74 73 20 61 6e 64 20 73 75 63 68 00 49 74 20 75 73 65 73 20 61 20 73 74 6f 63 68 61 73 74 | pots.and.such.It.uses.a.stochast |
4efc0 | 69 63 20 6d 6f 64 65 6c 20 74 6f 20 63 6c 61 73 73 69 66 79 20 69 6e 63 6f 6d 69 6e 67 20 70 61 | ic.model.to.classify.incoming.pa |
4efe0 | 63 6b 65 74 73 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 66 6c 6f 77 73 20 61 6e 64 20 69 | ckets.into.different.flows.and.i |
4f000 | 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 66 61 69 72 20 73 68 61 72 65 20 6f | s.used.to.provide.a.fair.share.o |
4f020 | 66 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 74 6f 20 61 6c 6c 20 74 68 65 20 66 6c 6f 77 73 | f.the.bandwidth.to.all.the.flows |
4f040 | 20 75 73 69 6e 67 20 74 68 65 20 71 75 65 75 65 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 6d | .using.the.queue..Each.flow.is.m |
4f060 | 61 6e 61 67 65 64 20 62 79 20 74 68 65 20 43 6f 44 65 6c 20 71 75 65 75 69 6e 67 20 20 64 69 73 | anaged.by.the.CoDel.queuing..dis |
4f080 | 63 69 70 6c 69 6e 65 2e 20 52 65 6f 72 64 65 72 69 6e 67 20 77 69 74 68 69 6e 20 61 20 66 6c 6f | cipline..Reordering.within.a.flo |
4f0a0 | 77 20 69 73 20 61 76 6f 69 64 65 64 20 73 69 6e 63 65 20 43 6f 64 65 6c 20 69 6e 74 65 72 6e 61 | w.is.avoided.since.Codel.interna |
4f0c0 | 6c 6c 79 20 75 73 65 73 20 61 20 46 49 46 4f 20 71 75 65 75 65 2e 00 49 74 20 77 69 6c 6c 20 62 | lly.uses.a.FIFO.queue..It.will.b |
4f0e0 | 65 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 74 68 65 20 64 65 6c 65 67 61 74 65 64 20 70 72 | e.combined.with.the.delegated.pr |
4f100 | 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 6c 61 2d 69 64 20 74 6f 20 66 6f 72 6d 20 61 20 63 6f | efix.and.the.sla-id.to.form.a.co |
4f120 | 6d 70 6c 65 74 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 64 65 | mplete.interface.address..The.de |
4f140 | 66 61 75 6c 74 20 69 73 20 74 6f 20 75 73 65 20 74 68 65 20 45 55 49 2d 36 34 20 61 64 64 72 65 | fault.is.to.use.the.EUI-64.addre |
4f160 | 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 49 74 27 73 20 65 61 73 79 20 74 | ss.of.the.interface..It's.easy.t |
4f180 | 6f 20 73 65 74 75 70 20 61 6e 64 20 6f 66 66 65 72 73 20 76 65 72 79 20 66 6c 65 78 69 62 6c 65 | o.setup.and.offers.very.flexible |
4f1a0 | 20 73 70 6c 69 74 20 74 75 6e 6e 65 6c 69 6e 67 00 49 74 27 73 20 6e 6f 74 20 6c 69 6b 65 6c 79 | .split.tunneling.It's.not.likely |
4f1c0 | 20 74 68 61 74 20 61 6e 79 6f 6e 65 20 77 69 6c 6c 20 6e 65 65 64 20 69 74 20 61 6e 79 20 74 69 | .that.anyone.will.need.it.any.ti |
4f1e0 | 6d 65 20 73 6f 6f 6e 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 65 78 69 73 74 2e 00 49 74 27 73 | me.soon,.but.it.does.exist..It's |
4f200 | 20 73 6c 6f 77 65 72 20 74 68 61 6e 20 49 50 73 65 63 20 64 75 65 20 74 6f 20 68 69 67 68 65 72 | .slower.than.IPsec.due.to.higher |
4f220 | 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 61 6e 64 20 74 68 65 20 66 61 63 74 20 | .protocol.overhead.and.the.fact. |
4f240 | 69 74 20 72 75 6e 73 20 69 6e 20 75 73 65 72 20 6d 6f 64 65 20 77 68 69 6c 65 20 49 50 73 65 63 | it.runs.in.user.mode.while.IPsec |
4f260 | 2c 20 6f 6e 20 4c 69 6e 75 78 2c 20 69 73 20 69 6e 20 6b 65 72 6e 65 6c 20 6d 6f 64 65 00 49 74 | ,.on.Linux,.is.in.kernel.mode.It |
4f280 | 27 73 20 74 69 6d 65 20 74 6f 20 63 68 65 63 6b 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 | 's.time.to.check.conntrack.table |
4f2a0 | 2c 20 74 6f 20 73 65 65 20 69 66 20 61 6e 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 61 | ,.to.see.if.any.connection.was.a |
4f2c0 | 63 63 65 70 74 65 64 2c 20 61 6e 64 20 69 66 20 77 61 73 20 70 72 6f 70 65 72 6c 79 20 6f 66 66 | ccepted,.and.if.was.properly.off |
4f2e0 | 6c 6f 61 64 65 64 00 4a 6f 69 6e 20 61 20 67 69 76 65 6e 20 56 52 46 2e 20 54 68 69 73 20 77 69 | loaded.Join.a.given.VRF..This.wi |
4f300 | 6c 6c 20 6f 70 65 6e 20 61 20 6e 65 77 20 73 75 62 73 68 65 6c 6c 20 77 69 74 68 69 6e 20 74 68 | ll.open.a.new.subshell.within.th |
4f320 | 65 20 73 70 65 63 69 66 69 65 64 20 56 52 46 2e 00 4a 75 6d 70 20 74 6f 20 61 20 64 69 66 66 65 | e.specified.VRF..Jump.to.a.diffe |
4f340 | 72 65 6e 74 20 72 75 6c 65 20 69 6e 20 74 68 69 73 20 72 6f 75 74 65 2d 6d 61 70 20 6f 6e 20 61 | rent.rule.in.this.route-map.on.a |
4f360 | 20 6d 61 74 63 68 2e 00 4a 75 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 00 4b 65 72 6e 65 6c | .match..Juniper.EX.Switch.Kernel |
4f380 | 00 4b 65 72 6e 65 6c 20 6d 65 73 73 61 67 65 73 00 4b 65 79 20 42 61 73 65 64 20 41 75 74 68 65 | .Kernel.messages.Key.Based.Authe |
4f3a0 | 6e 74 69 63 61 74 69 6f 6e 00 4b 65 79 20 47 65 6e 65 72 61 74 69 6f 6e 00 4b 65 79 20 4d 61 6e | ntication.Key.Generation.Key.Man |
4f3c0 | 61 67 65 6d 65 6e 74 00 4b 65 79 20 50 61 72 61 6d 65 74 65 72 73 3a 00 4b 65 79 20 50 6f 69 6e | agement.Key.Parameters:.Key.Poin |
4f3e0 | 74 73 3a 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 | ts:.Key.exchange.and.payload.enc |
4f400 | 72 79 70 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 | ryption.is.done.using.IKE.and.ES |
4f420 | 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 | P.proposals.as.known.from.IKEv1. |
4f440 | 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 | but.the.connections.are.faster.t |
4f460 | 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 | o.establish,.more.reliable,.and. |
4f480 | 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 | also.support.roaming.from.IP.to. |
4f4a0 | 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 | IP.(called.MOBIKE.which.makes.su |
4f4c0 | 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 | re.your.connection.does.not.drop |
4f4e0 | 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 | .when.changing.networks.from.e.g |
4f500 | 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 62 61 63 6b 29 2e 20 41 75 74 68 65 6e 74 | ..WIFI.to.LTE.and.back)..Authent |
4f520 | 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 77 69 74 68 20 58 2e 35 | ication.can.be.achieved.with.X.5 |
4f540 | 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e | 09.certificates..Key.exchange.an |
4f560 | 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 64 6f | d.payload.encryption.is.still.do |
4f580 | 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 | ne.using.IKE.and.ESP.proposals.a |
4f5a0 | 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 | s.known.from.IKEv1.but.the.conne |
4f5c0 | 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 | ctions.are.faster.to.establish,. |
4f5e0 | 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 | more.reliable,.and.also.support. |
4f600 | 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f | roaming.from.IP.to.IP.(called.MO |
4f620 | 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 | BIKE.which.makes.sure.your.conne |
4f640 | 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e | ction.does.not.drop.when.changin |
4f660 | 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 | g.networks.from.e.g..WIFI.to.LTE |
4f680 | 20 61 6e 64 20 62 61 63 6b 29 2e 00 4b 65 79 20 75 73 61 67 65 20 28 43 4c 49 29 00 4b 65 79 62 | .and.back)..Key.usage.(CLI).Keyb |
4f6a0 | 6f 61 72 64 20 4c 61 79 6f 75 74 00 4b 65 79 70 61 69 72 73 00 4b 65 79 77 6f 72 64 00 4c 32 54 | oard.Layout.Keypairs.Keyword.L2T |
4f6c0 | 50 00 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 63 00 4c 32 54 50 76 33 00 4c 32 54 50 76 33 20 | P.L2TP.over.IPsec.L2TPv3.L2TPv3. |
4f6e0 | 63 61 6e 20 62 65 20 72 65 67 61 72 64 65 64 20 61 73 20 62 65 69 6e 67 20 74 6f 20 4d 50 4c 53 | can.be.regarded.as.being.to.MPLS |
4f700 | 20 77 68 61 74 20 49 50 20 69 73 20 74 6f 20 41 54 4d 3a 20 61 20 73 69 6d 70 6c 69 66 69 65 64 | .what.IP.is.to.ATM:.a.simplified |
4f720 | 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 63 65 70 74 2c 20 77 69 | .version.of.the.same.concept,.wi |
4f740 | 74 68 20 6d 75 63 68 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 65 6e 65 66 69 74 20 61 63 68 69 | th.much.of.the.same.benefit.achi |
4f760 | 65 76 65 64 20 61 74 20 61 20 66 72 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 65 66 66 6f 72 74 | eved.at.a.fraction.of.the.effort |
4f780 | 2c 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 20 6c 6f 73 69 6e 67 20 73 6f 6d 65 20 74 65 63 | ,.at.the.cost.of.losing.some.tec |
4f7a0 | 68 6e 69 63 61 6c 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 64 20 6c 65 73 73 20 | hnical.features.considered.less. |
4f7c0 | 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 74 68 65 20 6d 61 72 6b 65 74 2e 00 4c 32 54 50 76 33 20 | important.in.the.market..L2TPv3. |
4f7e0 | 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 32 31 60 2e 00 4c 32 54 | is.described.in.:rfc:`3921`..L2T |
4f800 | 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 33 31 60 2e | Pv3.is.described.in.:rfc:`3931`. |
4f820 | 00 4c 32 54 50 76 33 20 6f 70 74 69 6f 6e 73 00 4c 32 54 50 76 33 3a 00 4c 33 56 50 4e 20 56 52 | .L2TPv3.options.L2TPv3:.L3VPN.VR |
4f840 | 46 73 00 4c 44 41 50 00 4c 44 41 50 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 2e 20 44 | Fs.LDAP.LDAP.protocol.version..D |
4f860 | 65 66 61 75 6c 74 73 20 74 6f 20 33 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2e 00 4c | efaults.to.3.if.not.specified..L |
4f880 | 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 | DAP.search.filter.to.locate.the. |
4f8a0 | 75 73 65 72 20 44 4e 2e 20 52 65 71 75 69 72 65 64 20 69 66 20 74 68 65 20 75 73 65 72 73 20 61 | user.DN..Required.if.the.users.a |
4f8c0 | 72 65 20 69 6e 20 61 20 68 69 65 72 61 72 63 68 79 20 62 65 6c 6f 77 20 74 68 65 20 62 61 73 65 | re.in.a.hierarchy.below.the.base |
4f8e0 | 20 44 4e 2c 20 6f 72 20 69 66 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 6e 6f 74 | .DN,.or.if.the.login.name.is.not |
4f900 | 20 77 68 61 74 20 62 75 69 6c 64 73 20 74 68 65 20 75 73 65 72 20 73 70 65 63 69 66 69 63 20 70 | .what.builds.the.user.specific.p |
4f920 | 61 72 74 20 6f 66 20 74 68 65 20 75 73 65 72 73 20 44 4e 2e 00 4c 4c 44 50 00 4c 4c 44 50 20 70 | art.of.the.users.DN..LLDP.LLDP.p |
4f940 | 65 72 66 6f 72 6d 73 20 66 75 6e 63 74 69 6f 6e 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 65 76 | erforms.functions.similar.to.sev |
4f960 | 65 72 61 6c 20 70 72 6f 70 72 69 65 74 61 72 79 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 73 75 63 68 | eral.proprietary.protocols,.such |
4f980 | 20 61 73 20 3a 61 62 62 72 3a 60 43 44 50 20 28 43 69 73 63 6f 20 44 69 73 63 6f 76 65 72 79 20 | .as.:abbr:`CDP.(Cisco.Discovery. |
4f9a0 | 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 46 44 50 20 28 46 6f 75 6e 64 72 79 20 | Protocol)`,.:abbr:`FDP.(Foundry. |
4f9c0 | 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 4e 44 50 | Discovery.Protocol)`,.:abbr:`NDP |
4f9e0 | 20 28 4e 6f 72 74 65 6c 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 6e | .(Nortel.Discovery.Protocol)`.an |
4fa00 | 64 20 3a 61 62 62 72 3a 60 4c 4c 54 44 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 54 6f 70 6f 6c 6f | d.:abbr:`LLTD.(Link.Layer.Topolo |
4fa20 | 67 79 20 44 69 73 63 6f 76 65 72 79 29 60 2e 00 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 | gy.Discovery)`..LNS.(L2TP.Networ |
4fa40 | 6b 20 53 65 72 76 65 72 29 00 4c 4e 53 20 61 72 65 20 6f 66 74 65 6e 20 75 73 65 64 20 74 6f 20 | k.Server).LNS.are.often.used.to. |
4fa60 | 63 6f 6e 6e 65 63 74 20 74 6f 20 61 20 4c 41 43 20 28 4c 32 54 50 20 41 63 63 65 73 73 20 43 6f | connect.to.a.LAC.(L2TP.Access.Co |
4fa80 | 6e 63 65 6e 74 72 61 74 6f 72 29 2e 00 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 | ncentrator)..Label.Distribution. |
4faa0 | 50 72 6f 74 6f 63 6f 6c 00 4c 61 79 65 72 20 32 20 54 75 6e 6e 65 6c 6c 69 6e 67 20 50 72 6f 74 | Protocol.Layer.2.Tunnelling.Prot |
4fac0 | 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 33 20 69 73 20 61 6e 20 49 45 54 46 20 73 74 61 6e 64 61 | ocol.Version.3.is.an.IETF.standa |
4fae0 | 72 64 20 72 65 6c 61 74 65 64 20 74 6f 20 4c 32 54 50 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 | rd.related.to.L2TP.that.can.be.u |
4fb00 | 73 65 64 20 61 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 70 72 6f 74 6f 63 6f 6c 20 74 | sed.as.an.alternative.protocol.t |
4fb20 | 6f 20 3a 72 65 66 3a 60 6d 70 6c 73 60 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 | o.:ref:`mpls`.for.encapsulation. |
4fb40 | 6f 66 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 4c 61 79 65 72 20 32 20 63 6f 6d 6d 75 6e 69 | of.multiprotocol.Layer.2.communi |
4fb60 | 63 61 74 69 6f 6e 73 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 49 50 20 6e 65 74 77 6f 72 6b 73 | cations.traffic.over.IP.networks |
4fb80 | 2e 20 4c 69 6b 65 20 4c 32 54 50 2c 20 4c 32 54 50 76 33 20 70 72 6f 76 69 64 65 73 20 61 20 70 | ..Like.L2TP,.L2TPv3.provides.a.p |
4fba0 | 73 65 75 64 6f 2d 77 69 72 65 20 73 65 72 76 69 63 65 20 62 75 74 20 69 73 20 73 63 61 6c 65 64 | seudo-wire.service.but.is.scaled |
4fbc0 | 20 74 6f 20 66 69 74 20 63 61 72 72 69 65 72 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2e 00 4c 65 | .to.fit.carrier.requirements..Le |
4fbe0 | 61 73 65 20 74 69 6d 65 20 77 69 6c 6c 20 62 65 20 6c 65 66 74 20 61 74 20 74 68 65 20 64 65 66 | ase.time.will.be.left.at.the.def |
4fc00 | 61 75 6c 74 20 76 61 6c 75 65 20 77 68 69 63 68 20 69 73 20 32 34 20 68 6f 75 72 73 00 4c 65 61 | ault.value.which.is.24.hours.Lea |
4fc20 | 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 | se.timeout.in.seconds.(default:. |
4fc40 | 38 36 34 30 30 29 00 4c 65 67 61 63 79 20 46 69 72 65 77 61 6c 6c 00 4c 65 74 20 53 4e 4d 50 20 | 86400).Legacy.Firewall.Let.SNMP. |
4fc60 | 64 61 65 6d 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e 6c 79 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 | daemon.listen.only.on.IP.address |
4fc80 | 20 31 39 32 2e 30 2e 32 2e 31 00 4c 65 74 27 73 20 61 73 73 75 6d 65 20 50 43 34 20 6f 6e 20 4c | .192.0.2.1.Let's.assume.PC4.on.L |
4fca0 | 65 61 66 32 20 77 61 6e 74 73 20 74 6f 20 70 69 6e 67 20 50 43 35 20 6f 6e 20 4c 65 61 66 33 2e | eaf2.wants.to.ping.PC5.on.Leaf3. |
4fcc0 | 20 49 6e 73 74 65 61 64 20 6f 66 20 73 65 74 74 69 6e 67 20 4c 65 61 66 33 20 61 73 20 6f 75 72 | .Instead.of.setting.Leaf3.as.our |
4fce0 | 20 72 65 6d 6f 74 65 20 65 6e 64 20 6d 61 6e 75 61 6c 6c 79 2c 20 4c 65 61 66 32 20 65 6e 63 61 | .remote.end.manually,.Leaf2.enca |
4fd00 | 70 73 75 6c 61 74 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 74 6f 20 61 20 55 44 50 2d 70 | psulates.the.packet.into.a.UDP-p |
4fd20 | 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 69 74 20 74 6f 20 69 74 73 20 64 65 73 69 67 6e | acket.and.sends.it.to.its.design |
4fd40 | 61 74 65 64 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 20 76 69 61 20 53 70 69 6e 65 | ated.multicast-address.via.Spine |
4fd60 | 31 2e 20 57 68 65 6e 20 53 70 69 6e 65 31 20 72 65 63 65 69 76 65 73 20 74 68 69 73 20 70 61 63 | 1..When.Spine1.receives.this.pac |
4fd80 | 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 69 74 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 | ket.it.forwards.it.to.all.other. |
4fda0 | 6c 65 61 76 65 73 20 77 68 6f 20 68 61 73 20 6a 6f 69 6e 65 64 20 74 68 65 20 73 61 6d 65 20 6d | leaves.who.has.joined.the.same.m |
4fdc0 | 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 2c 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 4c 65 61 | ulticast-group,.in.this.case.Lea |
4fde0 | 66 33 2e 20 57 68 65 6e 20 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 74 68 65 20 70 61 63 6b | f3..When.Leaf3.receives.the.pack |
4fe00 | 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 69 74 2c 20 77 68 69 6c 65 20 61 74 20 74 68 65 20 | et.it.forwards.it,.while.at.the. |
4fe20 | 73 61 6d 65 20 74 69 6d 65 20 6c 65 61 72 6e 69 6e 67 20 74 68 61 74 20 50 43 34 20 69 73 20 72 | same.time.learning.that.PC4.is.r |
4fe40 | 65 61 63 68 61 62 6c 65 20 62 65 68 69 6e 64 20 4c 65 61 66 32 2c 20 62 65 63 61 75 73 65 20 74 | eachable.behind.Leaf2,.because.t |
4fe60 | 68 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 20 68 61 64 20 4c 65 61 66 32 | he.encapsulated.packet.had.Leaf2 |
4fe80 | 27 73 20 49 50 20 61 64 64 72 65 73 73 20 73 65 74 20 61 73 20 73 6f 75 72 63 65 20 49 50 2e 00 | 's.IP.address.set.as.source.IP.. |
4fea0 | 4c 65 74 27 73 20 61 73 73 75 6d 65 20 77 65 20 68 61 76 65 20 74 77 6f 20 44 48 43 50 20 57 41 | Let's.assume.we.have.two.DHCP.WA |
4fec0 | 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 6f 6e 65 20 4c 41 4e 20 28 65 74 68 32 29 3a | N.interfaces.and.one.LAN.(eth2): |
4fee0 | 00 4c 65 74 27 73 20 62 75 69 6c 64 20 61 20 73 69 6d 70 6c 65 20 56 50 4e 20 62 65 74 77 65 65 | .Let's.build.a.simple.VPN.betwee |
4ff00 | 6e 20 32 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 72 65 61 64 79 20 64 65 76 69 63 65 73 2e 00 4c | n.2.Intel...QAT.ready.devices..L |
4ff20 | 65 74 27 73 20 65 78 70 61 6e 64 20 74 68 65 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f | et's.expand.the.example.from.abo |
4ff40 | 76 65 20 61 6e 64 20 61 64 64 20 77 65 69 67 68 74 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 | ve.and.add.weight.to.the.interfa |
4ff60 | 63 65 73 2e 20 54 68 65 20 62 61 6e 64 77 69 64 74 68 20 66 72 6f 6d 20 65 74 68 30 20 69 73 20 | ces..The.bandwidth.from.eth0.is. |
4ff80 | 6c 61 72 67 65 72 20 74 68 61 6e 20 65 74 68 31 2e 20 50 65 72 20 64 65 66 61 75 6c 74 2c 20 6f | larger.than.eth1..Per.default,.o |
4ffa0 | 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 72 | utbound.traffic.is.distributed.r |
4ffc0 | 61 6e 64 6f 6d 6c 79 20 61 63 72 6f 73 73 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 | andomly.across.available.interfa |
4ffe0 | 63 65 73 2e 20 57 65 69 67 68 74 73 20 63 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 | ces..Weights.can.be.assigned.to. |
50000 | 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 74 68 65 20 62 61 6c 61 | interfaces.to.influence.the.bala |
50020 | 6e 63 69 6e 67 2e 00 4c 65 74 73 20 61 73 73 75 6d 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ncing..Lets.assume.the.following |
50040 | 20 74 6f 70 6f 6c 6f 67 79 3a 00 4c 65 76 65 6c 20 34 20 62 61 6c 61 6e 63 69 6e 67 00 4c 69 66 | .topology:.Level.4.balancing.Lif |
50060 | 65 74 69 6d 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c | etime.associated.with.the.defaul |
50080 | 74 20 72 6f 75 74 65 72 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 73 65 63 6f 6e 64 73 00 4c 69 66 | t.router.in.units.of.seconds.Lif |
500a0 | 65 74 69 6d 65 20 69 6e 20 64 61 79 73 3b 20 64 65 66 61 75 6c 74 20 69 73 20 33 36 35 00 4c 69 | etime.in.days;.default.is.365.Li |
500c0 | 66 65 74 69 6d 65 20 69 73 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 6e 75 6d | fetime.is.decremented.by.the.num |
500e0 | 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 52 41 | ber.of.seconds.since.the.last.RA |
50100 | 20 2d 20 75 73 65 20 69 6e 20 63 6f 6e 6a 75 6e 63 74 69 6f 6e 20 77 69 74 68 20 61 20 44 48 43 | .-.use.in.conjunction.with.a.DHC |
50120 | 50 76 36 2d 50 44 20 70 72 65 66 69 78 00 4c 69 6b 65 20 6f 6e 20 4d 69 63 72 6f 73 6f 66 74 20 | Pv6-PD.prefix.Like.on.Microsoft. |
50140 | 57 69 6e 64 6f 77 73 2c 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 75 74 20 6f 66 | Windows,.Apple.iOS/iPadOS.out.of |
50160 | 20 74 68 65 20 62 6f 78 20 64 6f 65 73 20 6e 6f 74 20 65 78 70 6f 73 65 20 61 6c 6c 20 61 76 61 | .the.box.does.not.expose.all.ava |
50180 | 69 6c 61 62 6c 65 20 56 50 4e 20 6f 70 74 69 6f 6e 73 20 76 69 61 20 74 68 65 20 64 65 76 69 63 | ilable.VPN.options.via.the.devic |
501a0 | 65 20 47 55 49 2e 00 4c 69 6d 69 74 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 20 61 6c 67 6f | e.GUI..Limit.allowed.cipher.algo |
501c0 | 72 69 74 68 6d 73 20 75 73 65 64 20 64 75 72 69 6e 67 20 53 53 4c 2f 54 4c 53 20 68 61 6e 64 73 | rithms.used.during.SSL/TLS.hands |
501e0 | 68 61 6b 65 00 4c 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 3c 6c 69 6d 69 74 3e 60 20 70 | hake.Limit.logins.to.`<limit>`.p |
50200 | 65 72 20 65 76 65 72 79 20 60 60 72 61 74 65 2d 74 69 6d 65 60 60 20 73 65 63 6f 6e 64 73 2e 20 | er.every.``rate-time``.seconds.. |
50220 | 52 61 74 65 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 | Rate.limit.must.be.between.1.and |
50240 | 20 31 30 20 61 74 74 65 6d 70 74 73 2e 00 4c 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 60 | .10.attempts..Limit.logins.to.`` |
50260 | 72 61 74 65 2d 6c 69 6d 69 74 60 60 20 61 74 74 65 6d 70 73 20 70 65 72 20 65 76 65 72 79 20 60 | rate-limit``.attemps.per.every.` |
50280 | 3c 73 65 63 6f 6e 64 73 3e 60 2e 20 52 61 74 65 20 74 69 6d 65 20 6d 75 73 74 20 62 65 20 62 65 | <seconds>`..Rate.time.must.be.be |
502a0 | 74 77 65 65 6e 20 31 35 20 61 6e 64 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 4c 69 6d 69 74 20 | tween.15.and.600.seconds..Limit. |
502c0 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 4c 69 | maximum.number.of.connections.Li |
502e0 | 6d 69 74 65 72 00 4c 69 6d 69 74 65 72 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 70 6f | miter.Limiter.is.one.of.those.po |
50300 | 6c 69 63 69 65 73 20 74 68 61 74 20 75 73 65 73 20 63 6c 61 73 73 65 73 5f 20 28 49 6e 67 72 65 | licies.that.uses.classes_.(Ingre |
50320 | 73 73 20 71 64 69 73 63 20 69 73 20 61 63 74 75 61 6c 6c 79 20 61 20 63 6c 61 73 73 6c 65 73 73 | ss.qdisc.is.actually.a.classless |
50340 | 20 70 6f 6c 69 63 79 20 62 75 74 20 66 69 6c 74 65 72 73 20 64 6f 20 77 6f 72 6b 20 69 6e 20 69 | .policy.but.filters.do.work.in.i |
50360 | 74 29 2e 00 4c 69 6d 69 74 73 00 4c 69 6e 65 20 70 72 69 6e 74 65 72 20 73 75 62 73 79 73 74 65 | t)..Limits.Line.printer.subsyste |
50380 | 6d 00 4c 69 6e 6b 20 4d 54 55 20 76 61 6c 75 65 20 70 6c 61 63 65 64 20 69 6e 20 52 41 73 2c 20 | m.Link.MTU.value.placed.in.RAs,. |
503a0 | 65 78 6c 75 64 65 64 20 69 6e 20 52 41 73 20 69 66 20 75 6e 73 65 74 00 4c 69 6e 6b 20 61 67 67 | exluded.in.RAs.if.unset.Link.agg |
503c0 | 72 65 67 61 74 69 6f 6e 00 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 20 77 69 6c 6c 20 6e 6f | regation.Linux.netfilter.will.no |
503e0 | 74 20 4e 41 54 20 74 72 61 66 66 69 63 20 6d 61 72 6b 65 64 20 61 73 20 49 4e 56 41 4c 49 44 2e | t.NAT.traffic.marked.as.INVALID. |
50400 | 20 54 68 69 73 20 6f 66 74 65 6e 20 63 6f 6e 66 75 73 65 73 20 70 65 6f 70 6c 65 20 69 6e 74 6f | .This.often.confuses.people.into |
50420 | 20 74 68 69 6e 6b 69 6e 67 20 74 68 61 74 20 4c 69 6e 75 78 20 28 6f 72 20 73 70 65 63 69 66 69 | .thinking.that.Linux.(or.specifi |
50440 | 63 61 6c 6c 79 20 56 79 4f 53 29 20 68 61 73 20 61 20 62 72 6f 6b 65 6e 20 4e 41 54 20 69 6d 70 | cally.VyOS).has.a.broken.NAT.imp |
50460 | 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 6e 6f 6e 2d 4e 41 54 65 64 20 74 72 | lementation.because.non-NATed.tr |
50480 | 61 66 66 69 63 20 69 73 20 73 65 65 6e 20 6c 65 61 76 69 6e 67 20 61 6e 20 65 78 74 65 72 6e 61 | affic.is.seen.leaving.an.externa |
504a0 | 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 73 20 61 63 74 75 61 6c 6c 79 20 77 6f | l.interface..This.is.actually.wo |
504c0 | 72 6b 69 6e 67 20 61 73 20 69 6e 74 65 6e 64 65 64 2c 20 61 6e 64 20 61 20 70 61 63 6b 65 74 20 | rking.as.intended,.and.a.packet. |
504e0 | 63 61 70 74 75 72 65 20 6f 66 20 74 68 65 20 22 6c 65 61 6b 79 22 20 74 72 61 66 66 69 63 20 73 | capture.of.the."leaky".traffic.s |
50500 | 68 6f 75 6c 64 20 72 65 76 65 61 6c 20 74 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 | hould.reveal.that.the.traffic.is |
50520 | 20 65 69 74 68 65 72 20 61 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 22 52 53 54 22 2c | .either.an.additional.TCP."RST", |
50540 | 20 22 46 49 4e 2c 41 43 4b 22 2c 20 6f 72 20 22 52 53 54 2c 41 43 4b 22 20 73 65 6e 74 20 62 79 | ."FIN,ACK",.or."RST,ACK".sent.by |
50560 | 20 63 6c 69 65 6e 74 20 73 79 73 74 65 6d 73 20 61 66 74 65 72 20 4c 69 6e 75 78 20 6e 65 74 66 | .client.systems.after.Linux.netf |
50580 | 69 6c 74 65 72 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 | ilter.considers.the.connection.c |
505a0 | 6c 6f 73 65 64 2e 20 54 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 69 73 20 74 68 65 20 61 64 | losed..The.most.common.is.the.ad |
505c0 | 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 52 53 54 20 73 6f 6d 65 20 68 6f 73 74 20 69 6d 70 6c 65 | ditional.TCP.RST.some.host.imple |
505e0 | 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 66 74 65 72 20 74 65 72 6d 69 6e 61 74 69 6e | mentations.send.after.terminatin |
50600 | 67 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 77 68 69 63 68 20 69 73 20 69 6d 70 6c 65 6d 65 | g.a.connection.(which.is.impleme |
50620 | 6e 74 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 29 2e 00 4c 69 73 74 20 61 6c 6c 20 4d 41 43 73 | ntation-specific)..List.all.MACs |
50640 | 65 63 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c 69 73 74 20 6f 66 20 66 61 63 69 6c 69 74 69 65 | ec.interfaces..List.of.facilitie |
50660 | 73 20 75 73 65 64 20 62 79 20 73 79 73 6c 6f 67 2e 20 4d 6f 73 74 20 66 61 63 69 6c 69 74 69 65 | s.used.by.syslog..Most.facilitie |
50680 | 73 20 6e 61 6d 65 73 20 61 72 65 20 73 65 6c 66 20 65 78 70 6c 61 6e 61 74 6f 72 79 2e 20 46 61 | s.names.are.self.explanatory..Fa |
506a0 | 63 69 6c 69 74 69 65 73 20 6c 6f 63 61 6c 30 20 2d 20 6c 6f 63 61 6c 37 20 63 6f 6d 6d 6f 6e 20 | cilities.local0.-.local7.common. |
506c0 | 75 73 61 67 65 20 69 73 20 66 2e 65 2e 20 61 73 20 6e 65 74 77 6f 72 6b 20 6c 6f 67 73 20 66 61 | usage.is.f.e..as.network.logs.fa |
506e0 | 63 69 6c 69 74 69 65 73 20 66 6f 72 20 6e 6f 64 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 65 | cilities.for.nodes.and.network.e |
50700 | 71 75 69 70 6d 65 6e 74 2e 20 47 65 6e 65 72 61 6c 6c 79 20 69 74 20 64 65 70 65 6e 64 73 20 6f | quipment..Generally.it.depends.o |
50720 | 6e 20 74 68 65 20 73 69 74 75 61 74 69 6f 6e 20 68 6f 77 20 74 6f 20 63 6c 61 73 73 69 66 79 20 | n.the.situation.how.to.classify. |
50740 | 6c 6f 67 73 20 61 6e 64 20 70 75 74 20 74 68 65 6d 20 74 6f 20 66 61 63 69 6c 69 74 69 65 73 2e | logs.and.put.them.to.facilities. |
50760 | 20 53 65 65 20 66 61 63 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 61 73 20 61 20 74 6f 6f 6c 20 72 | .See.facilities.more.as.a.tool.r |
50780 | 61 74 68 65 72 20 74 68 61 6e 20 61 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 66 6f 6c 6c 6f 77 | ather.than.a.directive.to.follow |
507a0 | 2e 00 4c 69 73 74 20 6f 66 20 6e 65 74 77 6f 72 6b 73 20 6f 72 20 63 6c 69 65 6e 74 20 61 64 64 | ..List.of.networks.or.client.add |
507c0 | 72 65 73 73 65 73 20 70 65 72 6d 69 74 74 65 64 20 74 6f 20 63 6f 6e 74 61 63 74 20 74 68 69 73 | resses.permitted.to.contact.this |
507e0 | 20 4e 54 50 20 73 65 72 76 65 72 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 4d | .NTP.server..List.of.supported.M |
50800 | 41 43 73 3a 20 60 60 68 6d 61 63 2d 6d 64 35 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 | ACs:.``hmac-md5``,.``hmac-md5-96 |
50820 | 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 60 60 2c 20 60 60 68 6d 61 63 2d 73 | ``,.``hmac-ripemd160``,.``hmac-s |
50840 | 68 61 31 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d | ha1``,.``hmac-sha1-96``,.``hmac- |
50860 | 73 68 61 32 2d 32 35 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 60 60 2c 20 60 | sha2-256``,.``hmac-sha2-512``,.` |
50880 | 60 75 6d 61 63 2d 36 34 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 | `umac-64@openssh.com``,.``umac-1 |
508a0 | 32 38 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 65 74 6d | 28@openssh.com``,.``hmac-md5-etm |
508c0 | 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 2d 65 74 | @openssh.com``,.``hmac-md5-96-et |
508e0 | 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 | m@openssh.com``,.``hmac-ripemd16 |
50900 | 30 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 | 0-etm@openssh.com``,.``hmac-sha1 |
50920 | 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d | -etm@openssh.com``,.``hmac-sha1- |
50940 | 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 | 96-etm@openssh.com``,.``hmac-sha |
50960 | 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d | 2-256-etm@openssh.com``,.``hmac- |
50980 | 73 68 61 32 2d 35 31 32 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d | sha2-512-etm@openssh.com``,.``um |
509a0 | 61 63 2d 36 34 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d | ac-64-etm@openssh.com``,.``umac- |
509c0 | 31 32 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 00 4c 69 73 74 20 6f 66 20 73 75 | 128-etm@openssh.com``.List.of.su |
509e0 | 70 70 6f 72 74 65 64 20 61 6c 67 6f 72 69 74 68 6d 73 3a 20 60 60 64 69 66 66 69 65 2d 68 65 6c | pported.algorithms:.``diffie-hel |
50a00 | 6c 6d 61 6e 2d 67 72 6f 75 70 31 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c | lman-group1-sha1``,.``diffie-hel |
50a20 | 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 | lman-group14-sha1``,.``diffie-he |
50a40 | 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 32 35 36 60 60 2c 20 60 60 64 69 66 66 69 65 | llman-group14-sha256``,.``diffie |
50a60 | 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 36 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 | -hellman-group16-sha512``,.``dif |
50a80 | 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 38 2d 73 68 61 35 31 32 60 60 2c 20 60 60 | fie-hellman-group18-sha512``,.`` |
50aa0 | 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 | diffie-hellman-group-exchange-sh |
50ac0 | 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 | a1``,.``diffie-hellman-group-exc |
50ae0 | 68 61 6e 67 65 2d 73 68 61 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 | hange-sha256``,.``ecdh-sha2-nist |
50b00 | 70 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 2c 20 | p256``,.``ecdh-sha2-nistp384``,. |
50b20 | 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 2c 20 60 60 63 75 72 76 65 32 | ``ecdh-sha2-nistp521``,.``curve2 |
50b40 | 35 35 31 39 2d 73 68 61 32 35 36 60 60 20 61 6e 64 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 | 5519-sha256``.and.``curve25519-s |
50b60 | 68 61 32 35 36 40 6c 69 62 73 73 68 2e 6f 72 67 60 60 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 | ha256@libssh.org``..List.of.supp |
50b80 | 6f 72 74 65 64 20 63 69 70 68 65 72 73 3a 20 60 60 33 64 65 73 2d 63 62 63 60 60 2c 20 60 60 61 | orted.ciphers:.``3des-cbc``,.``a |
50ba0 | 65 73 31 32 38 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 39 32 2d 63 62 63 60 60 2c 20 60 60 61 | es128-cbc``,.``aes192-cbc``,.``a |
50bc0 | 65 73 32 35 36 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 2d 63 74 72 60 60 2c 20 60 60 61 | es256-cbc``,.``aes128-ctr``,.``a |
50be0 | 65 73 31 39 32 2d 63 74 72 60 60 2c 20 60 60 61 65 73 32 35 36 2d 63 74 72 60 60 2c 20 60 60 61 | es192-ctr``,.``aes256-ctr``,.``a |
50c00 | 72 63 66 6f 75 72 31 32 38 60 60 2c 20 60 60 61 72 63 66 6f 75 72 32 35 36 60 60 2c 20 60 60 61 | rcfour128``,.``arcfour256``,.``a |
50c20 | 72 63 66 6f 75 72 60 60 2c 20 60 60 62 6c 6f 77 66 69 73 68 2d 63 62 63 60 60 2c 20 60 60 63 61 | rcfour``,.``blowfish-cbc``,.``ca |
50c40 | 73 74 31 32 38 2d 63 62 63 60 60 00 4c 69 73 74 20 6f 66 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 | st128-cbc``.List.of.well-known.c |
50c60 | 6f 6d 6d 75 6e 69 74 69 65 73 00 4c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 | ommunities.Listen.for.DHCP.reque |
50c80 | 73 74 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 60 65 74 68 31 60 60 2e 00 4c 69 73 74 73 | sts.on.interface.``eth1``..Lists |
50ca0 | 20 56 52 46 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 63 72 65 61 74 65 64 00 4c 6f 61 | .VRFs.that.have.been.created.Loa |
50cc0 | 64 20 42 61 6c 61 6e 63 65 00 4c 6f 61 64 20 42 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 20 74 68 | d.Balance.Load.Balancing.Load.th |
50ce0 | 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 69 6e 20 6f 70 2d 6d 6f 64 65 2e 00 4c 6f | e.container.image.in.op-mode..Lo |
50d00 | 61 64 2d 62 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f | ad-balancing.Load-balancing.algo |
50d20 | 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 69 | rithms.to.be.used.for.distributi |
50d40 | 6e 64 20 72 65 71 75 65 73 74 73 20 61 6d 6f 6e 67 20 74 68 65 20 76 61 69 6c 61 62 6c 65 20 73 | nd.requests.among.the.vailable.s |
50d60 | 65 72 76 65 72 73 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 73 63 68 65 64 75 6c 65 20 61 | ervers.Load-balancing.schedule.a |
50d80 | 6c 67 6f 72 69 74 68 6d 3a 00 4c 6f 63 61 6c 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 | lgorithm:.Local.Local.Configurat |
50da0 | 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 | ion.-.Annotated:.Local.Configura |
50dc0 | 74 69 6f 6e 3a 00 4c 6f 63 61 6c 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 | tion:.Local.IP.`<address>`.used. |
50de0 | 77 68 65 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 66 61 69 6c 6f 76 | when.communicating.to.the.failov |
50e00 | 65 72 20 70 65 65 72 2e 00 4c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6c | er.peer..Local.IP.addresses.to.l |
50e20 | 69 73 74 65 6e 20 6f 6e 00 4c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 66 6f | isten.on.Local.IPv4.addresses.fo |
50e40 | 72 20 73 65 72 76 69 63 65 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 00 4c 6f 63 61 6c 20 52 6f | r.service.to.listen.on..Local.Ro |
50e60 | 75 74 65 20 49 50 76 34 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 36 00 4c 6f 63 61 6c 20 | ute.IPv4.Local.Route.IPv6.Local. |
50e80 | 52 6f 75 74 65 20 50 6f 6c 69 63 79 00 4c 6f 63 61 6c 20 55 73 65 72 20 41 63 63 6f 75 6e 74 00 | Route.Policy.Local.User.Account. |
50ea0 | 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6b 6e 6f | Local.path.that.includes.the.kno |
50ec0 | 77 6e 20 68 6f 73 74 73 20 66 69 6c 65 2e 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 | wn.hosts.file..Local.path.that.i |
50ee0 | 6e 63 6c 75 64 65 73 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 | ncludes.the.private.key.file.of. |
50f00 | 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c | the.router..Local.path.that.incl |
50f20 | 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 | udes.the.public.key.file.of.the. |
50f40 | 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 72 6f 75 74 65 00 4c 6f 63 61 6c 6c 79 20 63 6f 6e 6e | router..Local.route.Locally.conn |
50f60 | 65 63 74 20 74 6f 20 73 65 72 69 61 6c 20 70 6f 72 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | ect.to.serial.port.identified.by |
50f80 | 20 60 3c 64 65 76 69 63 65 3e 60 2e 00 4c 6f 63 61 6c 6c 79 20 73 69 67 6e 69 66 69 63 61 6e 74 | .`<device>`..Locally.significant |
50fa0 | 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 2e 00 4c 6f 67 20 61 6c | .administrative.distance..Log.al |
50fc0 | 65 72 74 00 4c 6f 67 20 61 75 64 69 74 00 4c 6f 67 20 65 76 65 72 79 74 68 69 6e 67 00 4c 6f 67 | ert.Log.audit.Log.everything.Log |
50fe0 | 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 | .messages.from.a.specified.image |
51000 | 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 | .can.be.displayed.on.the.console |
51020 | 2e 20 44 65 74 61 69 6c 73 20 6f 66 20 61 6c 6c 6f 77 65 64 20 70 61 72 61 6d 65 74 65 72 73 3a | ..Details.of.allowed.parameters: |
51040 | 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 60 60 2f 64 65 76 2f 63 | .Log.syslog.messages.to.``/dev/c |
51060 | 6f 6e 73 6f 6c 65 60 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 | onsole``,.for.an.explanation.on. |
51080 | 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 | :ref:`syslog_facilities`.keyword |
510a0 | 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 | s.and.:ref:`syslog_severity_leve |
510c0 | 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f | l`.keywords.see.tables.below..Lo |
510e0 | 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 66 69 6c 65 20 73 70 65 63 69 66 | g.syslog.messages.to.file.specif |
51100 | 69 65 64 20 76 69 61 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 | ied.via.`<filename>`,.for.an.exp |
51120 | 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 | lanation.on.:ref:`syslog_facilit |
51140 | 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 | ies`.keywords.and.:ref:`syslog_s |
51160 | 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c | everity_level`.keywords.see.tabl |
51180 | 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f | es.below..Log.syslog.messages.to |
511a0 | 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 61 64 64 72 | .remote.host.specified.by.`<addr |
511c0 | 65 73 73 3e 60 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 | ess>`..The.address.can.be.specif |
511e0 | 69 65 64 20 62 79 20 65 69 74 68 65 72 20 46 51 44 4e 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 | ied.by.either.FQDN.or.IP.address |
51200 | 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 | ..For.an.explanation.on.:ref:`sy |
51220 | 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 | slog_facilities`.keywords.and.:r |
51240 | 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f | ef:`syslog_severity_level`.keywo |
51260 | 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 74 68 65 20 63 6f | rds.see.tables.below..Log.the.co |
51280 | 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 73 20 70 65 72 20 70 72 6f | nnection.tracking.events.per.pro |
512a0 | 74 6f 63 6f 6c 2e 00 4c 6f 67 67 69 6e 67 00 4c 6f 67 67 69 6e 67 20 63 61 6e 20 62 65 20 65 6e | tocol..Logging.Logging.can.be.en |
512c0 | 61 62 6c 65 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 66 69 72 65 77 61 6c 6c 20 72 | able.for.every.single.firewall.r |
512e0 | 75 6c 65 2e 20 49 66 20 65 6e 61 62 6c 65 64 2c 20 6f 74 68 65 72 20 6c 6f 67 20 6f 70 74 69 6f | ule..If.enabled,.other.log.optio |
51300 | 6e 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 4c 6f 67 67 69 6e 67 20 74 6f 20 61 20 | ns.can.be.defined..Logging.to.a. |
51320 | 72 65 6d 6f 74 65 20 68 6f 73 74 20 6c 65 61 76 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 6c 6f 67 | remote.host.leaves.the.local.log |
51340 | 67 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 74 61 63 74 2c 20 69 74 20 63 61 | ging.configuration.intact,.it.ca |
51360 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 70 61 72 61 6c 6c 65 6c 20 74 6f 20 61 | n.be.configured.in.parallel.to.a |
51380 | 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 6f 72 20 63 6f 6e 73 6f 6c 65 20 6c 6f 67 67 69 6e 67 2e | .custom.file.or.console.logging. |
513a0 | 20 59 6f 75 20 63 61 6e 20 6c 6f 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 73 20 61 | .You.can.log.to.multiple.hosts.a |
513c0 | 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2c 20 75 73 69 6e 67 20 65 69 74 68 65 72 20 54 43 | t.the.same.time,.using.either.TC |
513e0 | 50 20 6f 72 20 55 44 50 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 73 65 6e 64 69 6e 67 | P.or.UDP..The.default.is.sending |
51400 | 20 74 68 65 20 6d 65 73 73 61 67 65 73 20 76 69 61 20 70 6f 72 74 20 35 31 34 2f 55 44 50 2e 00 | .the.messages.via.port.514/UDP.. |
51420 | 4c 6f 67 69 6e 20 42 61 6e 6e 65 72 00 4c 6f 67 69 6e 20 6c 69 6d 69 74 73 00 4c 6f 67 69 6e 2f | Login.Banner.Login.limits.Login/ |
51440 | 55 73 65 72 20 4d 61 6e 61 67 65 6d 65 6e 74 00 4c 6f 6f 70 20 46 72 65 65 20 41 6c 74 65 72 6e | User.Management.Loop.Free.Altern |
51460 | 61 74 65 20 28 4c 46 41 29 00 4c 6f 6f 70 62 61 63 6b 00 4c 6f 6f 70 62 61 63 6b 73 20 6f 63 63 | ate.(LFA).Loopback.Loopbacks.occ |
51480 | 75 72 73 20 61 74 20 74 68 65 20 49 50 20 6c 65 76 65 6c 20 74 68 65 20 73 61 6d 65 20 77 61 79 | urs.at.the.IP.level.the.same.way |
514a0 | 20 61 73 20 66 6f 72 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2c 20 65 74 68 65 72 6e | .as.for.other.interfaces,.ethern |
514c0 | 65 74 20 66 72 61 6d 65 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 77 61 72 64 65 64 20 62 65 74 77 | et.frames.are.not.forwarded.betw |
514e0 | 65 65 6e 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 | een.Pseudo-Ethernet.interfaces.. |
51500 | 4c 6f 77 00 4d 41 43 20 47 72 6f 75 70 73 00 4d 41 43 20 61 64 64 72 65 73 73 20 61 67 69 6e 67 | Low.MAC.Groups.MAC.address.aging |
51520 | 20 60 3c 74 69 6d 65 60 3e 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 | .`<time`>.in.seconds.(default:.3 |
51540 | 30 30 29 2e 00 4d 41 43 2f 50 48 59 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 4d 41 43 56 4c 41 4e | 00)..MAC/PHY.information.MACVLAN |
51560 | 20 2d 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 00 4d 41 43 73 65 63 00 4d 41 43 73 65 63 | .-.Pseudo.Ethernet.MACsec.MACsec |
51580 | 20 69 73 20 61 6e 20 49 45 45 45 20 73 74 61 6e 64 61 72 64 20 28 49 45 45 45 20 38 30 32 2e 31 | .is.an.IEEE.standard.(IEEE.802.1 |
515a0 | 41 45 29 20 66 6f 72 20 4d 41 43 20 73 65 63 75 72 69 74 79 2c 20 69 6e 74 72 6f 64 75 63 65 64 | AE).for.MAC.security,.introduced |
515c0 | 20 69 6e 20 32 30 30 36 2e 20 49 74 20 64 65 66 69 6e 65 73 20 61 20 77 61 79 20 74 6f 20 65 73 | .in.2006..It.defines.a.way.to.es |
515e0 | 74 61 62 6c 69 73 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 | tablish.a.protocol.independent.c |
51600 | 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 68 6f 73 74 73 20 77 69 74 68 | onnection.between.two.hosts.with |
51620 | 20 64 61 74 61 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 61 75 74 68 65 6e 74 69 63 | .data.confidentiality,.authentic |
51640 | 69 74 79 20 61 6e 64 2f 6f 72 20 69 6e 74 65 67 72 69 74 79 2c 20 75 73 69 6e 67 20 47 43 4d 2d | ity.and/or.integrity,.using.GCM- |
51660 | 41 45 53 2d 31 32 38 2e 20 4d 41 43 73 65 63 20 6f 70 65 72 61 74 65 73 20 6f 6e 20 74 68 65 20 | AES-128..MACsec.operates.on.the. |
51680 | 45 74 68 65 72 6e 65 74 20 6c 61 79 65 72 20 61 6e 64 20 61 73 20 73 75 63 68 20 69 73 20 61 20 | Ethernet.layer.and.as.such.is.a. |
516a0 | 6c 61 79 65 72 20 32 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 69 74 | layer.2.protocol,.which.means.it |
516c0 | 27 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 72 61 66 66 69 63 20 77 69 | 's.designed.to.secure.traffic.wi |
516e0 | 74 68 69 6e 20 61 20 6c 61 79 65 72 20 32 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 63 6c 75 64 69 6e | thin.a.layer.2.network,.includin |
51700 | 67 20 44 48 43 50 20 6f 72 20 41 52 50 20 72 65 71 75 65 73 74 73 2e 20 49 74 20 64 6f 65 73 20 | g.DHCP.or.ARP.requests..It.does. |
51720 | 6e 6f 74 20 63 6f 6d 70 65 74 65 20 77 69 74 68 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 | not.compete.with.other.security. |
51740 | 73 6f 6c 75 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 49 50 73 65 63 20 28 6c 61 79 65 72 20 33 | solutions.such.as.IPsec.(layer.3 |
51760 | 29 20 6f 72 20 54 4c 53 20 28 6c 61 79 65 72 20 34 29 2c 20 61 73 20 61 6c 6c 20 74 68 6f 73 65 | ).or.TLS.(layer.4),.as.all.those |
51780 | 20 73 6f 6c 75 74 69 6f 6e 73 20 61 72 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 69 72 20 6f 77 | .solutions.are.used.for.their.ow |
517a0 | 6e 20 73 70 65 63 69 66 69 63 20 75 73 65 20 63 61 73 65 73 2e 00 4d 41 43 73 65 63 20 6f 6e 6c | n.specific.use.cases..MACsec.onl |
517c0 | 79 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 79 20 64 65 66 | y.provides.authentication.by.def |
517e0 | 61 75 6c 74 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 20 54 68 | ault,.encryption.is.optional..Th |
51800 | 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 65 6e 63 72 79 70 74 69 6f | is.command.will.enable.encryptio |
51820 | 6e 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 4d 41 43 73 | n.for.all.outgoing.packets..MACs |
51840 | 65 63 20 6f 70 74 69 6f 6e 73 00 4d 44 49 20 70 6f 77 65 72 00 4d 46 41 2f 32 46 41 20 61 75 74 | ec.options.MDI.power.MFA/2FA.aut |
51860 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 69 6e 67 20 4f 54 50 20 28 6f 6e 65 20 74 69 6d 65 20 | hentication.using.OTP.(one.time. |
51880 | 70 61 73 73 77 6f 72 64 73 29 00 4d 50 4c 53 00 4d 50 4c 53 20 73 75 70 70 6f 72 74 20 69 6e 20 | passwords).MPLS.MPLS.support.in. |
518a0 | 56 79 4f 53 20 69 73 20 6e 6f 74 20 66 69 6e 69 73 68 65 64 20 79 65 74 2c 20 61 6e 64 20 74 68 | VyOS.is.not.finished.yet,.and.th |
518c0 | 65 72 65 66 6f 72 65 20 69 74 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 6c 69 6d | erefore.its.functionality.is.lim |
518e0 | 69 74 65 64 2e 20 43 75 72 72 65 6e 74 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 70 70 | ited..Currently.there.is.no.supp |
51900 | 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 65 6e 61 62 6c 65 64 20 56 50 4e 20 73 65 72 76 69 63 65 | ort.for.MPLS.enabled.VPN.service |
51920 | 73 20 73 75 63 68 20 61 73 20 4c 32 56 50 4e 73 20 61 6e 64 20 6d 56 50 4e 73 2e 20 52 53 56 50 | s.such.as.L2VPNs.and.mVPNs..RSVP |
51940 | 20 73 75 70 70 6f 72 74 20 69 73 20 61 6c 73 6f 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 61 73 20 | .support.is.also.not.present.as. |
51960 | 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 72 6f 75 74 69 6e 67 20 73 74 61 63 6b 20 28 46 52 | the.underlying.routing.stack.(FR |
51980 | 52 29 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 69 74 2e 20 43 75 72 72 65 6e | R).does.not.implement.it..Curren |
519a0 | 74 6c 79 20 56 79 4f 53 20 69 6d 70 6c 65 6d 65 6e 74 73 20 4c 44 50 20 61 73 20 64 65 73 63 72 | tly.VyOS.implements.LDP.as.descr |
519c0 | 69 62 65 64 20 69 6e 20 52 46 43 20 35 30 33 36 3b 20 6f 74 68 65 72 20 4c 44 50 20 73 74 61 6e | ibed.in.RFC.5036;.other.LDP.stan |
519e0 | 64 61 72 64 20 61 72 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 6e 65 73 3a 20 52 46 43 | dard.are.the.following.ones:.RFC |
51a00 | 20 36 37 32 30 2c 20 52 46 43 20 36 36 36 37 2c 20 52 46 43 20 35 39 31 39 2c 20 52 46 43 20 35 | .6720,.RFC.6667,.RFC.5919,.RFC.5 |
51a20 | 35 36 31 2c 20 52 46 43 20 37 35 35 32 2c 20 52 46 43 20 34 34 34 37 2e 20 42 65 63 61 75 73 65 | 561,.RFC.7552,.RFC.4447..Because |
51a40 | 20 4d 50 4c 53 20 69 73 20 61 6c 72 65 61 64 79 20 61 76 61 69 6c 61 62 6c 65 20 28 46 52 52 20 | .MPLS.is.already.available.(FRR. |
51a60 | 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 52 46 43 20 33 30 33 31 29 2e 00 4d 53 53 20 76 61 6c | also.supports.RFC.3031)..MSS.val |
51a80 | 75 65 20 3d 20 4d 54 55 20 2d 20 32 30 20 28 49 50 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 | ue.=.MTU.-.20.(IP.header).-.20.( |
51aa0 | 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 35 32 20 62 | TCP.header),.resulting.in.1452.b |
51ac0 | 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 53 53 20 76 61 6c | ytes.on.a.1492.byte.MTU..MSS.val |
51ae0 | 75 65 20 3d 20 4d 54 55 20 2d 20 34 30 20 28 49 50 76 36 20 68 65 61 64 65 72 29 20 2d 20 32 30 | ue.=.MTU.-.40.(IPv6.header).-.20 |
51b00 | 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 33 32 | .(TCP.header),.resulting.in.1432 |
51b20 | 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 54 55 00 4d | .bytes.on.a.1492.byte.MTU..MTU.M |
51b40 | 61 69 6c 20 73 79 73 74 65 6d 00 4d 61 69 6e 20 6e 6f 74 65 73 20 72 65 67 61 72 64 69 6e 67 20 | ail.system.Main.notes.regarding. |
51b60 | 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 | this.packet.flow.and.terminology |
51b80 | 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 3a 00 4d 61 69 6e 20 73 74 72 | .used.in.VyOS.firewall:.Main.str |
51ba0 | 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 | ucture.VyOS.firewall.cli.is.show |
51bc0 | 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 69 73 20 73 68 6f 77 6e 20 | n.next:.Main.structure.is.shown. |
51be0 | 6e 65 78 74 3a 00 4d 61 69 6e 74 65 6e 61 6e 63 65 20 6d 6f 64 65 00 4d 61 6b 65 20 73 75 72 65 | next:.Maintenance.mode.Make.sure |
51c00 | 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 72 75 6e 6e 69 6e 67 | .conntrack.is.enabled.by.running |
51c20 | 20 61 6e 64 20 73 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 | .and.show.connection.tracking.ta |
51c40 | 62 6c 65 2e 00 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 4d 61 6e 61 67 65 6d 65 6e 74 20 | ble..Managed.devices.Management. |
51c60 | 46 72 61 6d 65 20 50 72 6f 74 65 63 74 69 6f 6e 20 28 4d 46 50 29 20 61 63 63 6f 72 64 69 6e 67 | Frame.Protection.(MFP).according |
51c80 | 20 74 6f 20 49 45 45 45 20 38 30 32 2e 31 31 77 00 4d 61 6e 64 61 74 6f 72 79 20 53 65 74 74 69 | .to.IEEE.802.11w.Mandatory.Setti |
51ca0 | 6e 67 73 00 4d 61 6e 75 61 6c 20 4e 65 69 67 68 62 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | ngs.Manual.Neighbor.Configuratio |
51cc0 | 6e 00 4d 61 6e 75 61 6c 6c 79 20 74 72 69 67 67 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 72 | n.Manually.trigger.certificate.r |
51ce0 | 65 6e 65 77 61 6c 2e 20 54 68 69 73 20 77 69 6c 6c 20 62 65 20 64 6f 6e 65 20 74 77 69 63 65 20 | enewal..This.will.be.done.twice. |
51d00 | 61 20 64 61 79 2e 00 4d 61 70 73 20 74 68 65 20 56 4e 49 20 74 6f 20 74 68 65 20 73 70 65 63 69 | a.day..Maps.the.VNI.to.the.speci |
51d20 | 66 69 65 64 20 56 4c 41 4e 20 69 64 2e 20 54 68 65 20 56 4c 41 4e 20 63 61 6e 20 74 68 65 6e 20 | fied.VLAN.id..The.VLAN.can.then. |
51d40 | 62 65 20 63 6f 6e 73 75 6d 65 64 20 62 79 20 61 20 62 72 69 64 67 65 2e 00 4d 61 72 6b 20 52 41 | be.consumed.by.a.bridge..Mark.RA |
51d60 | 44 49 55 53 20 73 65 72 76 65 72 20 61 73 20 6f 66 66 6c 69 6e 65 20 66 6f 72 20 74 68 69 73 20 | DIUS.server.as.offline.for.this. |
51d80 | 67 69 76 65 6e 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 61 72 6b 20 | given.`<time>`.in.seconds..Mark. |
51da0 | 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 | the.CAs.private.key.as.password. |
51dc0 | 70 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 | protected..User.is.asked.for.the |
51de0 | 20 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 | .password.when.the.key.is.refere |
51e00 | 6e 63 65 64 2e 00 4d 61 72 6b 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 | nced..Mark.the.private.key.as.pa |
51e20 | 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 | ssword.protected..User.is.asked. |
51e40 | 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 | for.the.password.when.the.key.is |
51e60 | 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 74 63 68 20 42 47 50 20 6c 61 72 67 65 20 63 6f 6d | .referenced..Match.BGP.large.com |
51e80 | 6d 75 6e 69 74 69 65 73 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 | munities..Match.IP.addresses.bas |
51ea0 | 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f | ed.on.its.geolocation..More.info |
51ec0 | 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e | :.`geoip.matching.<https://wiki. |
51ee0 | 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 | nftables.org/wiki-nftables/index |
51f00 | 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 00 4d 61 74 63 68 20 49 50 | .php/GeoIP_matching>`_..Match.IP |
51f20 | 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 | .addresses.based.on.its.geolocat |
51f40 | 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 | ion..More.info:.`geoip.matching. |
51f60 | 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d | <https://wiki.nftables.org/wiki- |
51f80 | 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e | nftables/index.php/GeoIP_matchin |
51fa0 | 67 3e 60 5f 2e 20 55 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 | g>`_..Use.inverse-match.to.match |
51fc0 | 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 | .anything.except.the.given.count |
51fe0 | 72 79 2d 63 6f 64 65 73 2e 00 4d 61 74 63 68 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 | ry-codes..Match.RPKI.validation. |
52000 | 72 65 73 75 6c 74 2e 00 4d 61 74 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 | result..Match.a.protocol.criteri |
52020 | 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 | a..A.protocol.number.or.a.name.w |
52040 | 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f | hich.is.defined.in:.``/etc/proto |
52060 | 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 | cols``..Special.names.are.``all` |
52080 | 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 | `.for.all.protocols.and.``tcp_ud |
520a0 | 70 60 60 20 66 6f 72 20 74 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 | p``.for.tcp.and.udp.based.packet |
520c0 | 73 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 73 20 74 68 65 20 73 65 6c 65 63 74 65 | s..The.``!``.negates.the.selecte |
520e0 | 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 | d.protocol..Match.a.protocol.cri |
52100 | 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 | teria..A.protocol.number.or.a.na |
52120 | 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 | me.which.is.here.defined:.``/etc |
52140 | 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 | /protocols``..Special.names.are. |
52160 | 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 | ``all``.for.all.protocols.and.`` |
52180 | 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 | tcp_udp``.for.tcp.and.udp.based. |
521a0 | 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 | packets..The.``!``.negate.the.se |
521c0 | 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 67 61 69 6e 73 74 20 74 | lected.protocol..Match.against.t |
521e0 | 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 70 61 63 6b 65 74 2e 00 4d 61 74 63 68 20 62 61 73 65 | he.state.of.a.packet..Match.base |
52200 | 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f | d.on.connection.tracking.protoco |
52220 | 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 20 74 6f 20 73 65 63 75 72 65 20 75 73 65 20 6f 66 | l.helper.module.to.secure.use.of |
52240 | 20 74 68 61 74 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 2e 20 53 65 65 20 62 65 6c 6f 77 20 66 | .that.helper.module..See.below.f |
52260 | 6f 72 20 70 6f 73 73 69 62 6c 65 20 63 6f 6d 70 6c 65 74 69 6f 6e 73 20 60 3c 6d 6f 64 75 6c 65 | or.possible.completions.`<module |
52280 | 3e 60 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 20 63 72 | >`..Match.based.on.dscp.value.cr |
522a0 | 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 30 20 74 | iteria..Multiple.values.from.0.t |
522c0 | 6f 20 36 33 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d | o.63.and.ranges.are.supported..M |
522e0 | 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 2e 00 4d 61 74 63 68 20 | atch.based.on.dscp.value..Match. |
52300 | 62 61 73 65 64 20 6f 6e 20 66 72 61 67 6d 65 6e 74 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 | based.on.fragment.criteria..Matc |
52320 | 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d | h.based.on.icmp.code.and.type..M |
52340 | 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 | atch.based.on.icmp.type-name.cri |
52360 | 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 | teria..Use.tab.for.information.a |
52380 | 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 | bout.what.**type-name**.criteria |
523a0 | 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 | .are.supported..Match.based.on.i |
523c0 | 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 | cmpv6.type-name.criteria..Use.ta |
523e0 | 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 | b.for.information.about.what.**t |
52400 | 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 | ype-name**.criteria.are.supporte |
52420 | 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 63 6f | d..Match.based.on.icmp|icmpv6.co |
52440 | 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 | de.and.type..Match.based.on.icmp |
52460 | 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 | |icmpv6.type-name.criteria..Use. |
52480 | 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a | tab.for.information.about.what.* |
524a0 | 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 | *type-name**.criteria.are.suppor |
524c0 | 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 | ted..Match.based.on.icmp|icmpv6. |
524e0 | 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 | type-name.criteria..Use.tab.for. |
52500 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 74 79 70 65 2d 6e 61 6d 65 | information.about.what.type-name |
52520 | 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 | .criteria.are.supported..Match.b |
52540 | 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e | ased.on.inbound.interface.group. |
52560 | 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 | .Prepending.character.``!``.for. |
52580 | 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c | inverted.matching.criteria.is.al |
525a0 | 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 | so.supportd..For.example.``!IFAC |
525c0 | 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 | E_GROUP``.Match.based.on.inbound |
525e0 | 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 | .interface..Wilcard.``*``.can.be |
52600 | 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 | .used..For.example:.``eth2*``.Ma |
52620 | 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 | tch.based.on.inbound.interface.. |
52640 | 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 | Wilcard.``*``.can.be.used..For.e |
52660 | 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 | xample:.``eth2*``..Prepending.ch |
52680 | 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 | aracter.``!``.for.inverted.match |
526a0 | 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 | ing.criteria.is.also.supportd..F |
526c0 | 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 | or.example.``!eth2``.Match.based |
526e0 | 20 6f 6e 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 | .on.inbound/outbound.interface.. |
52700 | 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 | Wilcard.``*``.can.be.used..For.e |
52720 | 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e | xample:.``eth2*``.Match.based.on |
52740 | 20 69 70 73 65 63 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 | .ipsec.criteria..Match.based.on. |
52760 | 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e | outbound.interface.group..Prepen |
52780 | 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 | ding.character.``!``.for.inverte |
527a0 | 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 | d.matching.criteria.is.also.supp |
527c0 | 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 | ortd..For.example.``!IFACE_GROUP |
527e0 | 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 | ``.Match.based.on.outbound.inter |
52800 | 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e | face..Wilcard.``*``.can.be.used. |
52820 | 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 | .For.example:.``eth2*``.Match.ba |
52840 | 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 | sed.on.outbound.interface..Wilca |
52860 | 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c | rd.``*``.can.be.used..For.exampl |
52880 | 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 | e:.``eth2*``..Prepending.charact |
528a0 | 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 | er.``!``.for.inverted.matching.c |
528c0 | 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 | riteria.is.also.supportd..For.ex |
528e0 | 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 | ample.``!eth2``.Match.based.on.p |
52900 | 61 63 6b 65 74 20 6c 65 6e 67 74 68 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 | acket.length.criteria..Multiple. |
52920 | 76 61 6c 75 65 73 20 66 72 6f 6d 20 31 20 74 6f 20 36 35 35 33 35 20 61 6e 64 20 72 61 6e 67 65 | values.from.1.to.65535.and.range |
52940 | 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 | s.are.supported..Match.based.on. |
52960 | 70 61 63 6b 65 74 20 74 79 70 65 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 | packet.type.criteria..Match.base |
52980 | 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 67 65 20 72 61 74 65 2c 20 73 | d.on.the.maximum.average.rate,.s |
529a0 | 70 65 63 69 66 69 65 64 20 61 73 20 2a 2a 69 6e 74 65 67 65 72 2f 75 6e 69 74 2a 2a 2e 20 46 6f | pecified.as.**integer/unit**..Fo |
529c0 | 72 20 65 78 61 6d 70 6c 65 20 2a 2a 35 2f 6d 69 6e 75 74 65 73 2a 2a 00 4d 61 74 63 68 20 62 61 | r.example.**5/minutes**.Match.ba |
529e0 | 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 | sed.on.the.maximum.number.of.pac |
52a00 | 6b 65 74 73 20 74 6f 20 61 6c 6c 6f 77 20 69 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e | kets.to.allow.in.excess.of.rate. |
52a20 | 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 49 44 2e 20 52 61 6e 67 65 20 69 | .Match.based.on.vlan.ID..Range.i |
52a40 | 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e | s.also.supported..Match.based.on |
52a60 | 20 76 6c 61 6e 20 70 72 69 6f 72 69 74 79 28 70 63 70 29 2e 20 52 61 6e 67 65 20 69 73 20 61 6c | .vlan.priority(pcp)..Range.is.al |
52a80 | 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 73 20 6f 6e 20 72 65 63 | so.supported..Match.bases.on.rec |
52aa0 | 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 | ently.seen.sources..Match.criter |
52ac0 | 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 4d 61 74 | ia.based.on.connection.mark..Mat |
52ae0 | 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 6e 61 74 20 63 6f 6e 6e 65 63 74 | ch.criteria.based.on.nat.connect |
52b00 | 69 6f 6e 20 73 74 61 74 75 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 | ion.status..Match.criteria.based |
52b20 | 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 | .on.source.and/or.destination.ad |
52b40 | 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 | dress..This.is.similar.to.the.ne |
52b60 | 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 | twork.groups.part,.but.here.you. |
52b80 | 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 | are.able.to.negate.the.matching. |
52ba0 | 61 64 64 72 65 73 73 65 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 | addresses..Match.criteria.based. |
52bc0 | 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 63 | on.source.and/or.destination.mac |
52be0 | 2d 61 64 64 72 65 73 73 2e 00 4d 61 74 63 68 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 4d 61 74 63 | -address..Match.domain.name.Matc |
52c00 | 68 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 76 61 6c 75 65 00 4d 61 74 63 68 20 68 6f 70 2d | h.firewall.mark.value.Match.hop- |
52c20 | 6c 69 6d 69 74 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e | limit.parameter,.where.'eq'.stan |
52c40 | 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 | ds.for.'equal';.'gt'.stands.for. |
52c60 | 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 | 'greater.than',.and.'lt'.stands. |
52c80 | 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 6c 6f 63 61 6c 20 70 72 65 | for.'less.than'..Match.local.pre |
52ca0 | 66 65 72 65 6e 63 65 2e 00 4d 61 74 63 68 20 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 00 4d 61 74 | ference..Match.route.metric..Mat |
52cc0 | 63 68 20 74 69 6d 65 20 74 6f 20 6c 69 76 65 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 | ch.time.to.live.parameter,.where |
52ce0 | 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 | .'eq'.stands.for.'equal';.'gt'.s |
52d00 | 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c | tands.for.'greater.than',.and.'l |
52d20 | 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 | t'.stands.for.'less.than'..Match |
52d40 | 20 77 68 65 6e 20 27 63 6f 75 6e 74 27 20 61 6d 6f 75 6e 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 | .when.'count'.amount.of.connecti |
52d60 | 6f 6e 73 20 61 72 65 20 73 65 65 6e 20 77 69 74 68 69 6e 20 27 74 69 6d 65 27 2e 20 54 68 65 73 | ons.are.seen.within.'time'..Thes |
52d80 | 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 61 6e 20 62 65 20 75 73 65 64 20 | e.matching.criteria.can.be.used. |
52da0 | 74 6f 20 62 6c 6f 63 6b 20 62 72 75 74 65 2d 66 6f 72 63 65 20 61 74 74 65 6d 70 74 73 2e 00 4d | to.block.brute-force.attempts..M |
52dc0 | 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 00 4d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 | atching.criteria.Matching.traffi |
52de0 | 63 00 4d 61 78 69 6d 75 6d 20 41 2d 4d 53 44 55 20 6c 65 6e 67 74 68 20 33 38 33 39 20 28 64 65 | c.Maximum.A-MSDU.length.3839.(de |
52e00 | 66 61 75 6c 74 29 20 6f 72 20 37 39 33 35 20 6f 63 74 65 74 73 00 4d 61 78 69 6d 75 6d 20 54 72 | fault).or.7935.octets.Maximum.Tr |
52e20 | 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 | ansmission.Unit.(MTU).(default:. |
52e40 | 2a 2a 31 34 33 36 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 | **1436**).Maximum.Transmission.U |
52e60 | 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 39 32 2a 2a 29 00 4d 61 | nit.(MTU).(default:.**1492**).Ma |
52e80 | 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 | ximum.Transmission.Unit.(MTU).(d |
52ea0 | 65 66 61 75 6c 74 3a 20 2a 2a 31 35 30 30 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 | efault:.**1500**).Maximum.number |
52ec0 | 20 6f 66 20 44 4e 53 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 2e 20 31 20 6d 69 6c 6c 69 6f 6e | .of.DNS.cache.entries..1.million |
52ee0 | 20 70 65 72 20 43 50 55 20 63 6f 72 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 6c 6c 79 20 73 75 66 | .per.CPU.core.will.generally.suf |
52f00 | 66 69 63 65 20 66 6f 72 20 6d 6f 73 74 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 4d 61 78 | fice.for.most.installations..Max |
52f20 | 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 49 50 76 34 20 6e 61 6d 65 73 65 72 76 65 72 73 00 | imum.number.of.IPv4.nameservers. |
52f40 | 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 20 | Maximum.number.of.authenticator. |
52f60 | 70 72 6f 63 65 73 73 65 73 20 74 6f 20 73 70 61 77 6e 2e 20 49 66 20 79 6f 75 20 73 74 61 72 74 | processes.to.spawn..If.you.start |
52f80 | 20 74 6f 6f 20 66 65 77 20 53 71 75 69 64 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 77 61 69 74 | .too.few.Squid.will.have.to.wait |
52fa0 | 20 66 6f 72 20 74 68 65 6d 20 74 6f 20 70 72 6f 63 65 73 73 20 61 20 62 61 63 6b 6c 6f 67 20 6f | .for.them.to.process.a.backlog.o |
52fc0 | 66 20 63 72 65 64 65 6e 74 69 61 6c 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 2c 20 73 6c 6f 77 | f.credential.verifications,.slow |
52fe0 | 69 6e 67 20 69 74 20 64 6f 77 6e 2e 20 57 68 65 6e 20 70 61 73 73 77 6f 72 64 20 76 65 72 69 66 | ing.it.down..When.password.verif |
53000 | 69 63 61 74 69 6f 6e 73 20 61 72 65 20 64 6f 6e 65 20 76 69 61 20 61 20 28 73 6c 6f 77 29 20 6e | ications.are.done.via.a.(slow).n |
53020 | 65 74 77 6f 72 6b 20 79 6f 75 20 61 72 65 20 6c 69 6b 65 6c 79 20 74 6f 20 6e 65 65 64 20 6c 6f | etwork.you.are.likely.to.need.lo |
53040 | 74 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 2e 00 4d | ts.of.authenticator.processes..M |
53060 | 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 73 65 73 73 | aximum.number.of.concurrent.sess |
53080 | 69 6f 6e 20 73 74 61 72 74 20 61 74 74 65 6d 70 74 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 | ion.start.attempts.Maximum.numbe |
530a0 | 72 20 6f 66 20 73 74 61 74 69 6f 6e 73 20 61 6c 6c 6f 77 65 64 20 69 6e 20 73 74 61 74 69 6f 6e | r.of.stations.allowed.in.station |
530c0 | 20 74 61 62 6c 65 2e 20 4e 65 77 20 73 74 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 72 65 6a | .table..New.stations.will.be.rej |
530e0 | 65 63 74 65 64 20 61 66 74 65 72 20 74 68 65 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 20 69 73 | ected.after.the.station.table.is |
53100 | 20 66 75 6c 6c 2e 20 49 45 45 45 20 38 30 32 2e 31 31 20 68 61 73 20 61 20 6c 69 6d 69 74 20 6f | .full..IEEE.802.11.has.a.limit.o |
53120 | 66 20 32 30 30 37 20 64 69 66 66 65 72 65 6e 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 49 44 73 | f.2007.different.association.IDs |
53140 | 2c 20 73 6f 20 74 68 69 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c | ,.so.this.number.should.not.be.l |
53160 | 61 72 67 65 72 20 74 68 61 6e 20 74 68 61 74 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 | arger.than.that..Maximum.number. |
53180 | 6f 66 20 74 69 6d 65 73 20 61 6e 20 65 78 70 69 72 65 64 20 72 65 63 6f 72 64 e2 80 99 73 20 54 | of.times.an.expired.record...s.T |
531a0 | 54 4c 20 69 73 20 65 78 74 65 6e 64 65 64 20 62 79 20 33 30 73 20 77 68 65 6e 20 73 65 72 76 69 | TL.is.extended.by.30s.when.servi |
531c0 | 6e 67 20 73 74 61 6c 65 2e 20 45 78 74 65 6e 73 69 6f 6e 20 6f 6e 6c 79 20 6f 63 63 75 72 73 20 | ng.stale..Extension.only.occurs. |
531e0 | 69 66 20 61 20 72 65 63 6f 72 64 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 66 72 65 73 68 65 64 2e | if.a.record.cannot.be.refreshed. |
53200 | 20 41 20 76 61 6c 75 65 20 6f 66 20 30 20 6d 65 61 6e 73 20 74 68 65 20 53 65 72 76 65 20 53 74 | .A.value.of.0.means.the.Serve.St |
53220 | 61 6c 65 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 54 6f 20 61 6c | ale.mechanism.is.not.used..To.al |
53240 | 6c 6f 77 20 72 65 63 6f 72 64 73 20 62 65 63 6f 6d 69 6e 67 20 73 74 61 6c 65 20 74 6f 20 62 65 | low.records.becoming.stale.to.be |
53260 | 20 73 65 72 76 65 64 20 66 6f 72 20 61 6e 20 68 6f 75 72 2c 20 75 73 65 20 61 20 76 61 6c 75 65 | .served.for.an.hour,.use.a.value |
53280 | 20 6f 66 20 31 32 30 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 72 69 65 73 | .of.120..Maximum.number.of.tries |
532a0 | 20 74 6f 20 73 65 6e 64 20 41 63 63 65 73 73 2d 52 65 71 75 65 73 74 2f 41 63 63 6f 75 6e 74 69 | .to.send.Access-Request/Accounti |
532c0 | 6e 67 2d 52 65 71 75 65 73 74 20 71 75 65 72 69 65 73 00 4d 65 64 69 75 6d 00 4d 65 6d 62 65 72 | ng-Request.queries.Medium.Member |
532e0 | 20 49 6e 74 65 72 66 61 63 65 73 00 4d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 | .Interfaces.Member.interfaces.`e |
53300 | 74 68 31 60 20 61 6e 64 20 56 4c 41 4e 20 31 30 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 | th1`.and.VLAN.10.on.interface.`e |
53320 | 74 68 32 60 00 4d 65 73 73 61 67 65 73 20 67 65 6e 65 72 61 74 65 64 20 69 6e 74 65 72 6e 61 6c | th2`.Messages.generated.internal |
53340 | 6c 79 20 62 79 20 73 79 73 6c 6f 67 64 00 4d 65 74 72 69 73 20 76 65 72 73 69 6f 6e 2c 20 74 68 | ly.by.syslogd.Metris.version,.th |
53360 | 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 32 60 60 00 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e | e.default.is.``2``.Microsoft.Win |
53380 | 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 | dows.expects.the.server.name.to. |
533a0 | 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 | be.also.used.in.the.server's.cer |
533c0 | 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 | tificate.common.name,.so.it's.be |
533e0 | 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 | st.to.use.this.DNS.name.for.your |
53400 | 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 4d 69 6e 20 61 6e 64 20 6d 61 78 20 69 6e 74 | .VPN.connection..Min.and.max.int |
53420 | 65 72 76 61 6c 73 20 62 65 74 77 65 65 6e 20 75 6e 73 6f 6c 69 63 69 74 65 64 20 6d 75 6c 74 69 | ervals.between.unsolicited.multi |
53440 | 63 61 73 74 20 52 41 73 00 4d 69 6e 75 6d 75 6d 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 | cast.RAs.Minumum.firewall.rulese |
53460 | 74 20 69 73 20 70 72 6f 76 69 64 65 64 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 73 6f | t.is.provided,.which.includes.so |
53480 | 6d 65 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 | me.filtering.rules,.and.appropia |
534a0 | 74 65 20 72 75 6c 65 73 20 66 6f 72 20 75 73 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 20 6f 66 66 | te.rules.for.using.flowtable.off |
534c0 | 6c 6f 61 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 6a 6f | load.capabilities..Modify.the.jo |
534e0 | 69 6e 2f 70 72 75 6e 65 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 20 50 49 4d 20 75 73 65 73 20 | in/prune.interval.that.PIM.uses. |
53500 | 74 6f 20 74 68 65 20 6e 65 77 20 76 61 6c 75 65 2e 20 54 69 6d 65 20 69 73 20 73 70 65 63 69 66 | to.the.new.value..Time.is.specif |
53520 | 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 | ied.in.seconds..Modify.the.time. |
53540 | 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d | out.value.for.a.S,G.flow.from.1- |
53560 | 36 35 35 33 35 20 73 65 63 6f 6e 64 73 20 61 74 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 | 65535.seconds.at.:abbr:`RP.(Rend |
53580 | 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2e 20 54 68 65 20 6e 6f 72 6d 61 6c 20 6b 65 65 70 61 | ezvous.Point)`..The.normal.keepa |
535a0 | 6c 69 76 65 20 70 65 72 69 6f 64 20 66 6f 72 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 64 65 66 | live.period.for.the.KAT(S,G).def |
535c0 | 61 75 6c 74 73 20 74 6f 20 32 31 30 20 73 65 63 6f 6e 64 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 | aults.to.210.seconds..However,.a |
535e0 | 74 20 74 68 65 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e | t.the.:abbr:`RP.(Rendezvous.Poin |
53600 | 74 29 60 2c 20 74 68 65 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 20 6d 75 73 74 20 62 | t)`,.the.keepalive.period.must.b |
53620 | 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 52 65 67 69 73 74 65 72 5f 53 75 70 70 72 65 73 73 | e.at.least.the.Register_Suppress |
53640 | 69 6f 6e 5f 54 69 6d 65 2c 20 6f 72 20 74 68 65 20 52 50 20 6d 61 79 20 74 69 6d 65 20 6f 75 74 | ion_Time,.or.the.RP.may.time.out |
53660 | 20 74 68 65 20 28 53 2c 47 29 20 73 74 61 74 65 20 62 65 66 6f 72 65 20 74 68 65 20 6e 65 78 74 | .the.(S,G).state.before.the.next |
53680 | 20 4e 75 6c 6c 2d 52 65 67 69 73 74 65 72 20 61 72 72 69 76 65 73 2e 20 54 68 75 73 2c 20 74 68 | .Null-Register.arrives..Thus,.th |
536a0 | 65 20 4b 41 54 28 53 2c 47 29 20 69 73 20 73 65 74 20 74 6f 20 6d 61 78 28 4b 65 65 70 61 6c 69 | e.KAT(S,G).is.set.to.max(Keepali |
536c0 | 76 65 5f 50 65 72 69 6f 64 2c 20 52 50 5f 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 29 20 | ve_Period,.RP_Keepalive_Period). |
536e0 | 77 68 65 6e 20 61 20 52 65 67 69 73 74 65 72 2d 53 74 6f 70 20 69 73 20 73 65 6e 74 2e 00 4d 6f | when.a.Register-Stop.is.sent..Mo |
53700 | 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c | dify.the.time.out.value.for.a.S, |
53720 | 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 49 66 20 | G.flow.from.1-65535.seconds..If. |
53740 | 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 | choosing.a.value.below.31.second |
53760 | 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c | s.be.aware.that.some.hardware.pl |
53780 | 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 | atforms.cannot.see.data.flowing. |
537a0 | 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e | in.better.than.30.second.chunks. |
537c0 | 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 74 68 61 74 20 70 69 6d 20 77 69 6c 6c 20 72 | .Modify.the.time.that.pim.will.r |
537e0 | 65 67 69 73 74 65 72 20 73 75 70 70 72 65 73 73 20 61 20 46 48 52 20 77 69 6c 6c 20 73 65 6e 64 | egister.suppress.a.FHR.will.send |
53800 | 20 72 65 67 69 73 74 65 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 6b | .register.notifications.to.the.k |
53820 | 65 72 6e 65 6c 2e 00 4d 6f 6e 69 74 6f 72 2c 20 74 68 65 20 73 79 73 74 65 6d 20 70 61 73 73 69 | ernel..Monitor,.the.system.passi |
53840 | 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 73 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 77 69 72 65 6c 65 | vely.monitors.any.kind.of.wirele |
53860 | 73 73 20 74 72 61 66 66 69 63 00 4d 6f 6e 69 74 6f 72 69 6e 67 00 4d 6f 6e 69 74 6f 72 69 6e 67 | ss.traffic.Monitoring.Monitoring |
53880 | 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 69 74 68 20 60 60 74 65 6c 65 67 72 61 66 60 60 | .functionality.with.``telegraf`` |
538a0 | 20 61 6e 64 20 60 60 49 6e 66 6c 75 78 44 42 20 32 60 60 20 69 73 20 70 72 6f 76 69 64 65 64 2e | .and.``InfluxDB.2``.is.provided. |
538c0 | 20 54 65 6c 65 67 72 61 66 20 69 73 20 74 68 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 65 72 | .Telegraf.is.the.open.source.ser |
538e0 | 76 65 72 20 61 67 65 6e 74 20 74 6f 20 68 65 6c 70 20 79 6f 75 20 63 6f 6c 6c 65 63 74 20 6d 65 | ver.agent.to.help.you.collect.me |
53900 | 74 72 69 63 73 2c 20 65 76 65 6e 74 73 20 61 6e 64 20 6c 6f 67 73 20 66 72 6f 6d 20 79 6f 75 72 | trics,.events.and.logs.from.your |
53920 | 20 72 6f 75 74 65 72 73 2e 00 4d 6f 72 65 20 64 65 74 61 69 6c 73 20 61 62 6f 75 74 20 74 68 65 | .routers..More.details.about.the |
53940 | 20 49 50 73 65 63 20 61 6e 64 20 56 54 49 20 69 73 73 75 65 20 61 6e 64 20 6f 70 74 69 6f 6e 20 | .IPsec.and.VTI.issue.and.option. |
53960 | 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 20 68 74 74 70 73 3a | disable-route-autoinstall.https: |
53980 | 2f 2f 62 6c 6f 67 2e 76 79 6f 73 2e 69 6f 2f 76 79 6f 73 2d 31 2d 64 6f 74 2d 32 2d 30 2d 64 65 | //blog.vyos.io/vyos-1-dot-2-0-de |
539a0 | 76 65 6c 6f 70 6d 65 6e 74 2d 6e 65 77 73 2d 69 6e 2d 6a 75 6c 79 00 4d 6f 73 74 20 6f 70 65 72 | velopment-news-in-july.Most.oper |
539c0 | 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 63 6c 69 | ating.systems.include.native.cli |
539e0 | 65 6e 74 20 73 75 70 70 6f 72 74 20 66 6f 72 20 49 50 73 65 63 20 49 4b 45 76 32 20 56 50 4e 20 | ent.support.for.IPsec.IKEv2.VPN. |
53a00 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 74 79 70 69 63 61 6c 6c | connections,.and.others.typicall |
53a20 | 79 20 68 61 76 65 20 61 6e 20 61 70 70 20 6f 72 20 61 64 64 2d 6f 6e 20 70 61 63 6b 61 67 65 20 | y.have.an.app.or.add-on.package. |
53a40 | 77 68 69 63 68 20 61 64 64 73 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 69 73 20 | which.adds.the.capability..This. |
53a60 | 73 65 63 74 69 6f 6e 20 63 6f 76 65 72 73 20 49 50 73 65 63 20 49 4b 45 76 32 20 63 6c 69 65 6e | section.covers.IPsec.IKEv2.clien |
53a80 | 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 | t.configuration.for.Windows.10.. |
53aa0 | 4d 6f 75 6e 74 20 61 20 76 6f 6c 75 6d 65 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 | Mount.a.volume.into.the.containe |
53ac0 | 72 00 4d 75 6c 74 69 00 4d 75 6c 74 69 2d 63 6c 69 65 6e 74 20 73 65 72 76 65 72 20 69 73 20 74 | r.Multi.Multi-client.server.is.t |
53ae0 | 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 4f 70 65 6e 56 50 4e 20 6d 6f 64 65 20 6f 6e 20 | he.most.popular.OpenVPN.mode.on. |
53b00 | 72 6f 75 74 65 72 73 2e 20 49 74 20 61 6c 77 61 79 73 20 75 73 65 73 20 78 2e 35 30 39 20 61 75 | routers..It.always.uses.x.509.au |
53b20 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 71 75 69 | thentication.and.therefore.requi |
53b40 | 72 65 73 20 61 20 50 4b 49 20 73 65 74 75 70 2e 20 52 65 66 65 72 20 74 68 69 73 20 74 6f 70 69 | res.a.PKI.setup..Refer.this.topi |
53b60 | 63 20 3a 72 65 66 3a 60 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a | c.:ref:`configuration/pki/index: |
53b80 | 70 6b 69 60 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 43 41 20 63 65 72 74 69 66 69 63 61 74 | pki`.to.generate.a.CA.certificat |
53ba0 | 65 2c 20 61 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 6b 65 79 2c | e,.a.server.certificate.and.key, |
53bc0 | 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 2c 20 | .a.certificate.revocation.list,. |
53be0 | 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 6b 65 79 20 65 78 63 68 61 6e 67 65 20 70 61 | a.Diffie-Hellman.key.exchange.pa |
53c00 | 72 61 6d 65 74 65 72 73 20 66 69 6c 65 2e 20 59 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 63 | rameters.file..You.do.not.need.c |
53c20 | 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 6b 65 79 73 20 66 6f 72 20 | lient.certificates.and.keys.for. |
53c40 | 74 68 65 20 73 65 72 76 65 72 20 73 65 74 75 70 2e 00 4d 75 6c 74 69 2d 68 6f 6d 65 64 2e 20 49 | the.server.setup..Multi-homed..I |
53c60 | 6e 20 61 20 6d 75 6c 74 69 2d 68 6f 6d 65 64 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d | n.a.multi-homed.network.environm |
53c80 | 65 6e 74 2c 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 73 20 74 | ent,.the.NAT66.device.connects.t |
53ca0 | 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 73 69 6d 75 6c 74 | o.an.internal.network.and.simult |
53cc0 | 61 6e 65 6f 75 73 6c 79 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 | aneously.connects.to.different.e |
53ce0 | 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 41 64 64 72 65 73 73 20 74 72 61 6e 73 6c | xternal.networks..Address.transl |
53d00 | 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 65 61 63 68 20 | ation.can.be.configured.on.each. |
53d20 | 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 | external.network.side.interface. |
53d40 | 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 76 65 72 74 20 74 | of.the.NAT66.device.to.convert.t |
53d60 | 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 | he.same.internal.network.address |
53d80 | 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b | .into.different.external.network |
53da0 | 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 72 65 61 6c 69 7a 65 20 74 68 65 20 6d 61 70 70 | .addresses,.and.realize.the.mapp |
53dc0 | 69 6e 67 20 6f 66 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 | ing.of.the.same.internal.address |
53de0 | 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e | .to.multiple.external.addresses. |
53e00 | 00 4d 75 6c 74 69 3a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c | .Multi:.can.be.specified.multipl |
53e20 | 65 20 74 69 6d 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 | e.times..Multicast.Multicast.DNS |
53e40 | 20 75 73 65 73 20 74 68 65 20 32 32 34 2e 30 2e 30 2e 32 35 31 20 61 64 64 72 65 73 73 2c 20 77 | .uses.the.224.0.0.251.address,.w |
53e60 | 68 69 63 68 20 69 73 20 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 | hich.is."administratively.scoped |
53e80 | 22 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e | ".and.does.not.leave.the.subnet. |
53ea0 | 20 49 74 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f | .It.retransmits.mDNS.packets.fro |
53ec0 | 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 | m.one.interface.to.other.interfa |
53ee0 | 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 65 2e | ces..This.enables.support.for.e. |
53f00 | 67 2e 20 41 70 70 6c 65 20 41 69 72 70 6c 61 79 20 64 65 76 69 63 65 73 20 61 63 72 6f 73 73 20 | g..Apple.Airplay.devices.across. |
53f20 | 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 | multiple.VLANs..Multicast.DNS.us |
53f40 | 65 73 20 74 68 65 20 72 65 73 65 72 76 65 64 20 61 64 64 72 65 73 73 20 60 60 32 32 34 2e 30 2e | es.the.reserved.address.``224.0. |
53f60 | 30 2e 32 35 31 60 60 2c 20 77 68 69 63 68 20 69 73 20 60 22 61 64 6d 69 6e 69 73 74 72 61 74 69 | 0.251``,.which.is.`"administrati |
53f80 | 76 65 6c 79 20 73 63 6f 70 65 64 22 60 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 | vely.scoped"`.and.does.not.leave |
53fa0 | 20 74 68 65 20 73 75 62 6e 65 74 2e 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 72 65 74 72 61 | .the.subnet..mDNS.repeater.retra |
53fc0 | 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 | nsmits.mDNS.packets.from.one.int |
53fe0 | 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 | erface.to.other.interfaces..This |
54000 | 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 65 76 69 63 65 73 20 75 73 69 | .enables.support.for.devices.usi |
54020 | 6e 67 20 6d 44 4e 53 20 64 69 73 63 6f 76 65 72 79 20 28 6c 69 6b 65 20 6e 65 74 77 6f 72 6b 20 | ng.mDNS.discovery.(like.network. |
54040 | 70 72 69 6e 74 65 72 73 2c 20 41 70 70 6c 65 20 41 69 72 70 6c 61 79 2c 20 43 68 72 6f 6d 65 63 | printers,.Apple.Airplay,.Chromec |
54060 | 61 73 74 2c 20 76 61 72 69 6f 75 73 20 49 50 20 62 61 73 65 64 20 68 6f 6d 65 2d 61 75 74 6f 6d | ast,.various.IP.based.home-autom |
54080 | 61 74 69 6f 6e 20 64 65 76 69 63 65 73 20 65 74 63 29 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 | ation.devices.etc).across.multip |
540a0 | 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 56 58 4c 41 4e 00 4d 75 6c 74 69 63 | le.VLANs..Multicast.VXLAN.Multic |
540c0 | 61 73 74 20 67 72 6f 75 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 56 58 4c 41 4e 20 69 6e 74 65 | ast.group.address.for.VXLAN.inte |
540e0 | 72 66 61 63 65 2e 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 62 75 69 6c | rface..VXLAN.tunnels.can.be.buil |
54100 | 74 20 65 69 74 68 65 72 20 76 69 61 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 76 69 61 20 55 6e | t.either.via.Multicast.or.via.Un |
54120 | 69 63 61 73 74 2e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f | icast..Multicast.group.to.use.fo |
54140 | 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 4d 75 6c | r.syncing.conntrack.entries..Mul |
54160 | 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b 20 49 47 4d 50 20 | ticast.receivers.will.talk.IGMP. |
54180 | 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 | to.their.local.router,.so,.besid |
541a0 | 65 73 20 68 61 76 69 6e 67 20 50 49 4d 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 | es.having.PIM.configured.in.ever |
541c0 | 79 20 72 6f 75 74 65 72 2c 20 49 47 4d 50 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 | y.router,.IGMP.must.also.be.conf |
541e0 | 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 72 65 | igured.in.any.router.where.there |
54200 | 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 20 6c | .could.be.a.multicast.receiver.l |
54220 | 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 | ocally.connected..Multicast.rece |
54240 | 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b 20 4d 4c 44 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 | ivers.will.talk.MLD.to.their.loc |
54260 | 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 | al.router,.so,.besides.having.PI |
54280 | 4d 76 36 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 | Mv6.configured.in.every.router,. |
542a0 | 4d 4c 44 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 | MLD.must.also.be.configured.in.a |
542c0 | 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 | ny.router.where.there.could.be.a |
542e0 | 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e | .multicast.receiver.locally.conn |
54300 | 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 74 2d 72 6f 75 74 69 6e 67 20 69 73 20 72 65 71 75 | ected..Multicast-routing.is.requ |
54320 | 69 72 65 64 20 66 6f 72 20 74 68 65 20 6c 65 61 76 65 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 | ired.for.the.leaves.to.forward.t |
54340 | 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 65 61 63 68 20 6f 74 68 65 72 20 69 6e 20 61 20 6d | raffic.between.each.other.in.a.m |
54360 | 6f 72 65 20 73 63 61 6c 61 62 6c 65 20 77 61 79 2e 20 54 68 69 73 20 61 6c 73 6f 20 72 65 71 75 | ore.scalable.way..This.also.requ |
54380 | 69 72 65 73 20 50 49 4d 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 74 6f 77 61 72 64 73 20 74 | ires.PIM.to.be.enabled.towards.t |
543a0 | 68 65 20 6c 65 61 76 65 73 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 20 63 61 6e 20 | he.leaves.so.that.the.Spine.can. |
543c0 | 6c 65 61 72 6e 20 77 68 61 74 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 73 20 65 61 63 68 | learn.what.multicast.groups.each |
543e0 | 20 4c 65 61 66 20 65 78 70 65 63 74 73 20 74 72 61 66 66 69 63 20 66 72 6f 6d 2e 00 4d 75 6c 74 | .Leaf.expects.traffic.from..Mult |
54400 | 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e | iple.DNS.servers.can.be.defined. |
54420 | 00 4d 75 6c 74 69 70 6c 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 73 | .Multiple.RPKI.caching.instances |
54440 | 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 61 6e 64 20 74 68 65 79 20 6e 65 65 64 20 61 | .can.be.supplied.and.they.need.a |
54460 | 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 77 68 69 63 68 20 74 68 65 69 72 20 72 65 73 75 6c | .preference.in.which.their.resul |
54480 | 74 20 73 65 74 73 20 61 72 65 20 75 73 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 55 70 6c 69 6e 6b | t.sets.are.used..Multiple.Uplink |
544a0 | 73 00 4d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 | s.Multiple.VLAN.to.VNI.mappings. |
544c0 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 61 | can.be.configured.against.the.sa |
544e0 | 6d 65 20 53 56 44 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 20 73 69 67 6e 69 66 | me.SVD..This.allows.for.a.signif |
54500 | 69 63 61 6e 74 20 73 63 61 6c 69 6e 67 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 56 | icant.scaling.of.the.number.of.V |
54520 | 4e 49 73 20 73 69 6e 63 65 20 61 20 73 65 70 61 72 61 74 65 20 56 58 4c 41 4e 20 69 6e 74 65 72 | NIs.since.a.separate.VXLAN.inter |
54540 | 66 61 63 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 65 | face.is.no.longer.required.for.e |
54560 | 61 63 68 20 56 4e 49 2e 00 4d 75 6c 74 69 70 6c 65 20 61 6c 69 61 73 65 73 20 63 61 6e 20 70 65 | ach.VNI..Multiple.aliases.can.pe |
54580 | 20 73 70 65 63 69 66 69 65 64 20 70 65 72 20 68 6f 73 74 2d 6e 61 6d 65 2e 00 4d 75 6c 74 69 70 | .specified.per.host-name..Multip |
545a0 | 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 | le.destination.ports.can.be.spec |
545c0 | 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e | ified.as.a.comma-separated.list. |
545e0 | 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 | .The.whole.list.can.also.be."neg |
54600 | 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 27 21 | ated".using.'!'..For.example:.'! |
54620 | 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 27 00 4d 75 | 22,telnet,http,123,1001-1005'.Mu |
54640 | 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 | ltiple.destination.ports.can.be. |
54660 | 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c | specified.as.a.comma-separated.l |
54680 | 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 | ist..The.whole.list.can.also.be. |
546a0 | 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 | "negated".using.'!'..For.example |
546c0 | 3a 20 60 21 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 | :.`!22,telnet,http,123,1001-1005 |
546e0 | 60 60 00 4d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 62 65 20 73 70 | ``.Multiple.interfaces.may.be.sp |
54700 | 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 73 2f 63 6c 69 65 6e | ecified..Multiple.networks/clien |
54720 | 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | t.IP.addresses.can.be.configured |
54740 | 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 | ..Multiple.servers.can.be.specif |
54760 | 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 73 20 63 61 6e 20 62 65 20 75 73 | ied..Multiple.services.can.be.us |
54780 | 65 64 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 2e 20 4a 75 73 74 20 73 70 65 63 69 66 79 20 61 | ed.per.interface..Just.specify.a |
547a0 | 73 20 6d 61 6e 79 20 73 65 72 76 69 63 65 73 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 73 | s.many.services.per.interface.as |
547c0 | 20 79 6f 75 20 6c 69 6b 65 21 00 4d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 20 70 6f 72 74 73 | .you.like!.Multiple.source.ports |
547e0 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 | .can.be.specified.as.a.comma-sep |
54800 | 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 | arated.list..The.whole.list.can. |
54820 | 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 60 60 21 60 60 2e 20 46 | also.be."negated".using.``!``..F |
54840 | 6f 72 20 65 78 61 6d 70 6c 65 3a 00 4d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 20 49 50 20 61 | or.example:.Multiple.target.IP.a |
54860 | 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 41 74 20 6c 65 | ddresses.can.be.specified..At.le |
54880 | 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 67 69 76 65 6e | ast.one.IP.address.must.be.given |
548a0 | 20 66 6f 72 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f 20 66 75 6e 63 74 69 6f 6e 2e | .for.ARP.monitoring.to.function. |
548c0 | 00 4d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 | .Multiple.users.can.connect.to.t |
548e0 | 68 65 20 73 61 6d 65 20 73 65 72 69 61 6c 20 64 65 76 69 63 65 20 62 75 74 20 6f 6e 6c 79 20 6f | he.same.serial.device.but.only.o |
54900 | 6e 65 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 72 69 74 65 20 74 6f 20 74 68 65 20 63 6f | ne.is.allowed.to.write.to.the.co |
54920 | 6e 73 6f 6c 65 20 70 6f 72 74 2e 00 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 | nsole.port..Multiprotocol.extens |
54940 | 69 6f 6e 73 20 65 6e 61 62 6c 65 20 42 47 50 20 74 6f 20 63 61 72 72 79 20 72 6f 75 74 69 6e 67 | ions.enable.BGP.to.carry.routing |
54960 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 | .information.for.multiple.networ |
54980 | 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 42 47 50 20 73 75 70 70 6f 72 74 73 20 | k.layer.protocols..BGP.supports. |
549a0 | 61 6e 20 41 64 64 72 65 73 73 20 46 61 6d 69 6c 79 20 49 64 65 6e 74 69 66 69 65 72 20 28 41 46 | an.Address.Family.Identifier.(AF |
549c0 | 49 29 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 4e 00 4e 41 54 00 4e 41 54 20 | I).for.IPv4.and.IPv6..N.NAT.NAT. |
549e0 | 28 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 53 6f 75 72 63 65 20 4e 41 54 29 3b 00 4e 41 54 20 | (specifically,.Source.NAT);.NAT. |
54a00 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4e | Configuration.NAT.Load.Balance.N |
54a20 | 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 20 75 73 65 73 20 61 6e 20 61 6c 67 6f 72 69 74 68 | AT.Load.Balance.uses.an.algorith |
54a40 | 6d 20 74 68 61 74 20 67 65 6e 65 72 61 74 65 73 20 61 20 68 61 73 68 20 61 6e 64 20 62 61 73 65 | m.that.generates.a.hash.and.base |
54a60 | 64 20 6f 6e 20 69 74 2c 20 74 68 65 6e 20 69 74 20 61 70 70 6c 69 65 73 20 63 6f 72 72 65 73 70 | d.on.it,.then.it.applies.corresp |
54a80 | 6f 6e 64 69 6e 67 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2e 20 54 68 69 73 20 68 61 73 68 20 63 61 | onding.translation..This.hash.ca |
54aa0 | 6e 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 72 61 6e 64 6f 6d 6c 79 2c 20 6f 72 20 63 61 6e 20 | n.be.generated.randomly,.or.can. |
54ac0 | 75 73 65 20 64 61 74 61 20 66 72 6f 6d 20 74 68 65 20 69 70 20 68 65 61 64 65 72 3a 20 73 6f 75 | use.data.from.the.ip.header:.sou |
54ae0 | 72 63 65 2d 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 | rce-address,.destination-address |
54b00 | 2c 20 73 6f 75 72 63 65 2d 70 6f 72 74 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e | ,.source-port.and/or.destination |
54b20 | 2d 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 77 69 6c 6c 20 67 65 6e 65 72 | -port..By.default,.it.will.gener |
54b40 | 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 4e 41 54 20 52 75 6c 65 73 | ate.the.hash.randomly..NAT.Rules |
54b60 | 65 74 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e | et.NAT.before.VPN.NAT.before.VPN |
54b80 | 20 54 6f 70 6f 6c 6f 67 79 00 4e 41 54 2c 20 52 6f 75 74 69 6e 67 2c 20 46 69 72 65 77 61 6c 6c | .Topology.NAT,.Routing,.Firewall |
54ba0 | 20 49 6e 74 65 72 61 63 74 69 6f 6e 00 4e 41 54 34 34 00 4e 41 54 36 34 00 4e 41 54 36 34 20 63 | .Interaction.NAT44.NAT64.NAT64.c |
54bc0 | 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 36 34 20 70 72 65 66 69 | lient.configuration:.NAT64.prefi |
54be0 | 78 20 6d 61 73 6b 20 6d 75 73 74 20 62 65 20 6f 6e 65 20 6f 66 3a 20 2f 33 32 2c 20 2f 34 30 2c | x.mask.must.be.one.of:./32,./40, |
54c00 | 20 2f 34 38 2c 20 2f 35 36 2c 20 2f 36 34 20 6f 72 20 39 36 2e 00 4e 41 54 36 34 20 73 65 72 76 | ./48,./56,./64.or.96..NAT64.serv |
54c20 | 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 36 36 28 4e 50 54 76 36 29 00 4e | er.configuration:.NAT66(NPTv6).N |
54c40 | 48 52 50 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 64 79 6e 61 6d 69 63 20 74 75 6e 6e 65 6c 20 | HRP.provides.the.dynamic.tunnel. |
54c60 | 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 20 6d 65 63 68 61 6e 69 73 6d 20 28 65 6e | endpoint.discovery.mechanism.(en |
54c80 | 64 70 6f 69 6e 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 2c 20 61 6e 64 20 65 6e 64 70 6f 69 6e | dpoint.registration,.and.endpoin |
54ca0 | 74 20 64 69 73 63 6f 76 65 72 79 2f 6c 6f 6f 6b 75 70 29 2c 20 6d 47 52 45 20 70 72 6f 76 69 64 | t.discovery/lookup),.mGRE.provid |
54cc0 | 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 69 74 73 65 | es.the.tunnel.encapsulation.itse |
54ce0 | 6c 66 2c 20 61 6e 64 20 74 68 65 20 49 50 53 65 63 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 6e 64 | lf,.and.the.IPSec.protocols.hand |
54d00 | 6c 65 20 74 68 65 20 6b 65 79 20 65 78 63 68 61 6e 67 65 2c 20 61 6e 64 20 63 72 79 70 74 6f 20 | le.the.key.exchange,.and.crypto. |
54d20 | 6d 65 63 68 61 6e 69 73 6d 2e 00 4e 54 50 00 4e 54 50 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 | mechanism..NTP.NTP.is.intended.t |
54d40 | 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 61 6c 6c 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 | o.synchronize.all.participating. |
54d60 | 63 6f 6d 70 75 74 65 72 73 20 74 6f 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6c 6c 69 73 | computers.to.within.a.few.millis |
54d80 | 65 63 6f 6e 64 73 20 6f 66 20 3a 61 62 62 72 3a 60 55 54 43 20 28 43 6f 6f 72 64 69 6e 61 74 65 | econds.of.:abbr:`UTC.(Coordinate |
54da0 | 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 60 2e 20 49 74 20 75 73 65 73 20 74 68 65 20 | d.Universal.Time)`..It.uses.the. |
54dc0 | 69 6e 74 65 72 73 65 63 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2c 20 61 20 6d 6f 64 69 66 69 | intersection.algorithm,.a.modifi |
54de0 | 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4d 61 72 7a 75 6c 6c 6f 27 73 20 61 6c 67 6f 72 69 74 | ed.version.of.Marzullo's.algorit |
54e00 | 68 6d 2c 20 74 6f 20 73 65 6c 65 63 74 20 61 63 63 75 72 61 74 65 20 74 69 6d 65 20 73 65 72 76 | hm,.to.select.accurate.time.serv |
54e20 | 65 72 73 20 61 6e 64 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 6d 69 74 69 67 61 74 65 20 | ers.and.is.designed.to.mitigate. |
54e40 | 74 68 65 20 65 66 66 65 63 74 73 20 6f 66 20 76 61 72 69 61 62 6c 65 20 6e 65 74 77 6f 72 6b 20 | the.effects.of.variable.network. |
54e60 | 6c 61 74 65 6e 63 79 2e 20 4e 54 50 20 63 61 6e 20 75 73 75 61 6c 6c 79 20 6d 61 69 6e 74 61 69 | latency..NTP.can.usually.maintai |
54e80 | 6e 20 74 69 6d 65 20 74 6f 20 77 69 74 68 69 6e 20 74 65 6e 73 20 6f 66 20 6d 69 6c 6c 69 73 65 | n.time.to.within.tens.of.millise |
54ea0 | 63 6f 6e 64 73 20 6f 76 65 72 20 74 68 65 20 70 75 62 6c 69 63 20 49 6e 74 65 72 6e 65 74 2c 20 | conds.over.the.public.Internet,. |
54ec0 | 61 6e 64 20 63 61 6e 20 61 63 68 69 65 76 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 6f 6e 65 20 | and.can.achieve.better.than.one. |
54ee0 | 6d 69 6c 6c 69 73 65 63 6f 6e 64 20 61 63 63 75 72 61 63 79 20 69 6e 20 6c 6f 63 61 6c 20 61 72 | millisecond.accuracy.in.local.ar |
54f00 | 65 61 20 6e 65 74 77 6f 72 6b 73 20 75 6e 64 65 72 20 69 64 65 61 6c 20 63 6f 6e 64 69 74 69 6f | ea.networks.under.ideal.conditio |
54f20 | 6e 73 2e 20 41 73 79 6d 6d 65 74 72 69 63 20 72 6f 75 74 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 | ns..Asymmetric.routes.and.networ |
54f40 | 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 20 6f 66 | k.congestion.can.cause.errors.of |
54f60 | 20 31 30 30 20 6d 73 20 6f 72 20 6d 6f 72 65 2e 00 4e 54 50 20 70 72 6f 63 65 73 73 20 77 69 6c | .100.ms.or.more..NTP.process.wil |
54f80 | 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 49 | l.only.listen.on.the.specified.I |
54fa0 | 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 | P.address..You.must.specify.the. |
54fc0 | 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 74 68 65 20 70 | `<address>`.and.optionally.the.p |
54fe0 | 65 72 6d 69 74 74 65 64 20 63 6c 69 65 6e 74 73 2e 20 4d 75 6c 74 69 70 6c 65 20 6c 69 73 74 65 | ermitted.clients..Multiple.liste |
55000 | 6e 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4e | n.addresses.can.be.configured..N |
55020 | 54 50 20 73 75 62 73 79 73 74 65 6d 00 4e 54 50 20 73 75 70 70 6c 69 65 73 20 61 20 77 61 72 6e | TP.subsystem.NTP.supplies.a.warn |
55040 | 69 6e 67 20 6f 66 20 61 6e 79 20 69 6d 70 65 6e 64 69 6e 67 20 6c 65 61 70 20 73 65 63 6f 6e 64 | ing.of.any.impending.leap.second |
55060 | 20 61 64 6a 75 73 74 6d 65 6e 74 2c 20 62 75 74 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | .adjustment,.but.no.information. |
55080 | 61 62 6f 75 74 20 6c 6f 63 61 6c 20 74 69 6d 65 20 7a 6f 6e 65 73 20 6f 72 20 64 61 79 6c 69 67 | about.local.time.zones.or.daylig |
550a0 | 68 74 20 73 61 76 69 6e 67 20 74 69 6d 65 20 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 4e | ht.saving.time.is.transmitted..N |
550c0 | 61 6d 65 20 53 65 72 76 65 72 00 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 | ame.Server.Name.of.installed.cer |
550e0 | 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 | tificate.authority.certificate.. |
55100 | 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 | Name.of.installed.server.certifi |
55120 | 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 00 4e 61 6d | cate..Name.of.static.mapping.Nam |
55140 | 65 20 6f 66 20 74 68 65 20 73 69 6e 67 6c 65 20 74 61 62 6c 65 20 4f 6e 6c 79 20 69 66 20 73 65 | e.of.the.single.table.Only.if.se |
55160 | 74 20 67 72 6f 75 70 2d 6d 65 74 72 69 63 73 20 73 69 6e 67 6c 65 2d 74 61 62 6c 65 2e 00 4e 61 | t.group-metrics.single-table..Na |
55180 | 6d 65 20 6f 72 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 54 46 54 50 20 73 65 72 76 65 | me.or.IPv4.address.of.TFTP.serve |
551a0 | 72 00 4e 65 74 42 49 4f 53 20 6f 76 65 72 20 54 43 50 2f 49 50 20 6e 61 6d 65 20 73 65 72 76 65 | r.NetBIOS.over.TCP/IP.name.serve |
551c0 | 72 00 4e 65 74 46 6c 6f 77 00 4e 65 74 46 6c 6f 77 20 2f 20 49 50 46 49 58 00 4e 65 74 46 6c 6f | r.NetFlow.NetFlow./.IPFIX.NetFlo |
551e0 | 77 20 65 6e 67 69 6e 65 2d 69 64 20 77 68 69 63 68 20 77 69 6c 6c 20 61 70 70 65 61 72 20 69 6e | w.engine-id.which.will.appear.in |
55200 | 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f | .NetFlow.data..The.range.is.0.to |
55220 | 20 32 35 35 2e 00 4e 65 74 46 6c 6f 77 20 69 73 20 61 20 66 65 61 74 75 72 65 20 74 68 61 74 20 | .255..NetFlow.is.a.feature.that. |
55240 | 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 6f 6e 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 20 | was.introduced.on.Cisco.routers. |
55260 | 61 72 6f 75 6e 64 20 31 39 39 36 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 | around.1996.that.provides.the.ab |
55280 | 69 6c 69 74 79 20 74 6f 20 63 6f 6c 6c 65 63 74 20 49 50 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 | ility.to.collect.IP.network.traf |
552a0 | 66 69 63 20 61 73 20 69 74 20 65 6e 74 65 72 73 20 6f 72 20 65 78 69 74 73 20 61 6e 20 69 6e 74 | fic.as.it.enters.or.exits.an.int |
552c0 | 65 72 66 61 63 65 2e 20 42 79 20 61 6e 61 6c 79 7a 69 6e 67 20 74 68 65 20 64 61 74 61 20 70 72 | erface..By.analyzing.the.data.pr |
552e0 | 6f 76 69 64 65 64 20 62 79 20 4e 65 74 46 6c 6f 77 2c 20 61 20 6e 65 74 77 6f 72 6b 20 61 64 6d | ovided.by.NetFlow,.a.network.adm |
55300 | 69 6e 69 73 74 72 61 74 6f 72 20 63 61 6e 20 64 65 74 65 72 6d 69 6e 65 20 74 68 69 6e 67 73 20 | inistrator.can.determine.things. |
55320 | 73 75 63 68 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 | such.as.the.source.and.destinati |
55340 | 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 2c 20 63 6c 61 73 73 20 6f 66 20 73 65 72 76 69 63 65 2c | on.of.traffic,.class.of.service, |
55360 | 20 61 6e 64 20 74 68 65 20 63 61 75 73 65 73 20 6f 66 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 41 | .and.the.causes.of.congestion..A |
55380 | 20 74 79 70 69 63 61 6c 20 66 6c 6f 77 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 65 74 75 70 20 28 | .typical.flow.monitoring.setup.( |
553a0 | 75 73 69 6e 67 20 4e 65 74 46 6c 6f 77 29 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 | using.NetFlow).consists.of.three |
553c0 | 20 6d 61 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 4e 65 74 46 6c 6f 77 20 69 73 20 75 73 75 | .main.components:.NetFlow.is.usu |
553e0 | 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 | ally.enabled.on.a.per-interface. |
55400 | 62 61 73 69 73 20 74 6f 20 6c 69 6d 69 74 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 | basis.to.limit.load.on.the.route |
55420 | 72 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 4e 65 74 46 6c 6f 77 | r.components.involved.in.NetFlow |
55440 | 2c 20 6f 72 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 4e 65 74 46 | ,.or.to.limit.the.amount.of.NetF |
55460 | 6c 6f 77 20 72 65 63 6f 72 64 73 20 65 78 70 6f 72 74 65 64 2e 00 4e 65 74 46 6c 6f 77 20 76 35 | low.records.exported..NetFlow.v5 |
55480 | 20 65 78 61 6d 70 6c 65 3a 00 4e 65 74 66 69 6c 74 65 72 20 62 61 73 65 64 00 4e 65 74 6d 61 73 | .example:.Netfilter.based.Netmas |
554a0 | 6b 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6c 65 6e 67 74 68 2e 00 4e 65 74 6d 61 73 6b 20 6c | k.greater.than.length..Netmask.l |
554c0 | 65 73 73 20 74 68 61 6e 20 6c 65 6e 67 74 68 00 4e 65 74 77 6f 72 6b 20 41 64 76 65 72 74 69 73 | ess.than.length.Network.Advertis |
554e0 | 65 6d 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 | ement.Configuration.Network.Cont |
55500 | 72 6f 6c 00 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 00 4e 65 74 77 6f 72 6b 20 47 72 6f | rol.Network.Emulator.Network.Gro |
55520 | 75 70 73 00 4e 65 74 77 6f 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 45 6e 74 65 72 70 72 69 | ups.Network.ID.(SSID).``Enterpri |
55540 | 73 65 2d 54 45 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 54 45 | se-TEST``.Network.ID.(SSID).``TE |
55560 | 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 54 6f 70 6f 6c 6f 67 79 20 44 69 61 67 72 61 6d 00 4e 65 | ST``.Network.Topology.Diagram.Ne |
55580 | 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 28 4e 4d 53 29 20 2d | twork.management.station.(NMS).- |
555a0 | 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 | .software.which.runs.on.the.mana |
555c0 | 67 65 72 00 4e 65 74 77 6f 72 6b 20 6e 65 77 73 20 73 75 62 73 79 73 74 65 6d 00 4e 65 74 77 6f | ger.Network.news.subsystem.Netwo |
555e0 | 72 6b 20 74 6f 20 62 65 20 70 72 6f 74 65 63 74 65 64 3a 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 | rk.to.be.protected:.192.0.2.0/24 |
55600 | 20 28 70 75 62 6c 69 63 20 49 50 73 20 75 73 65 20 62 79 20 63 75 73 74 6f 6d 65 72 73 29 00 4e | .(public.IPs.use.by.customers).N |
55620 | 65 74 77 6f 72 6b 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 | etworks.allowed.to.query.this.se |
55640 | 72 76 65 72 00 4e 65 77 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 53 48 41 2f 41 45 53 20 66 | rver.New.user.will.use.SHA/AES.f |
55660 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 70 72 69 76 61 63 79 00 4e 65 | or.authentication.and.privacy.Ne |
55680 | 78 74 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | xt.it.is.necessary.to.configure. |
556a0 | 32 46 41 20 66 6f 72 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 3a 00 4e 65 78 74 2d 68 6f 70 20 69 6e | 2FA.for.OpenConnect:.Next-hop.in |
556c0 | 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 00 4e 65 78 74 68 6f 70 20 49 50 | terface.for.the.route.Nexthop.IP |
556e0 | 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 | .address..Nexthop.IPv6.address.t |
55700 | 6f 20 6d 61 74 63 68 2e 00 4e 65 78 74 68 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 4e | o.match..Nexthop.IPv6.address..N |
55720 | 65 78 74 68 6f 70 20 54 72 61 63 6b 69 6e 67 00 4e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 | exthop.Tracking.Nexthop.tracking |
55740 | 20 72 65 73 6f 6c 76 65 20 6e 65 78 74 68 6f 70 73 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c | .resolve.nexthops.via.the.defaul |
55760 | 74 20 72 6f 75 74 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 54 68 69 73 20 69 73 20 65 6e 61 62 | t.route.by.default..This.is.enab |
55780 | 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c | led.by.default.for.a.traditional |
557a0 | 20 70 72 6f 66 69 6c 65 20 6f 66 20 46 52 52 20 77 68 69 63 68 20 77 65 20 75 73 65 2e 20 49 74 | .profile.of.FRR.which.we.use..It |
557c0 | 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 64 20 69 66 20 79 6f 75 20 64 6f 20 6e | .and.can.be.disabled.if.you.do.n |
557e0 | 6f 74 20 77 61 6e 27 74 20 74 6f 20 65 2e 67 2e 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 70 65 | ot.wan't.to.e.g..allow.BGP.to.pe |
55800 | 65 72 20 61 63 72 6f 73 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4e 6f 20 | er.across.the.default.route..No. |
55820 | 52 4f 41 20 65 78 69 73 74 73 20 77 68 69 63 68 20 63 6f 76 65 72 73 20 74 68 61 74 20 70 72 65 | ROA.exists.which.covers.that.pre |
55840 | 66 69 78 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 74 68 69 73 20 69 73 20 74 68 65 20 63 | fix..Unfortunately.this.is.the.c |
55860 | 61 73 65 20 66 6f 72 20 61 62 6f 75 74 20 38 30 25 20 6f 66 20 74 68 65 20 49 50 76 34 20 70 72 | ase.for.about.80%.of.the.IPv4.pr |
55880 | 65 66 69 78 65 73 20 77 68 69 63 68 20 77 65 72 65 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 74 | efixes.which.were.announced.to.t |
558a0 | 68 65 20 3a 61 62 62 72 3a 60 44 46 5a 20 28 64 65 66 61 75 6c 74 2d 66 72 65 65 20 7a 6f 6e 65 | he.:abbr:`DFZ.(default-free.zone |
558c0 | 29 60 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 32 30 32 30 00 4e 6f 20 56 4c 41 4e 20 | )`.at.the.start.of.2020.No.VLAN. |
558e0 | 74 61 67 67 69 6e 67 20 72 65 71 75 69 72 65 64 20 62 79 20 79 6f 75 72 20 49 53 50 2e 00 4e 6f | tagging.required.by.your.ISP..No |
55900 | 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 20 69 6e 64 65 66 69 6e 69 74 65 6c | .route.is.suppressed.indefinitel |
55920 | 79 2e 20 4d 61 78 69 6d 75 6d 2d 73 75 70 70 72 65 73 73 2d 74 69 6d 65 20 64 65 66 69 6e 65 73 | y..Maximum-suppress-time.defines |
55940 | 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d 65 20 61 20 72 6f 75 74 65 20 63 61 6e 20 62 65 | .the.maximum.time.a.route.can.be |
55960 | 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 72 65 2d 61 64 76 65 | .suppressed.before.it.is.re-adve |
55980 | 72 74 69 73 65 64 2e 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 53 52 4c 42 00 4e 6f 20 73 | rtised..No.support.for.SRLB.No.s |
559a0 | 75 70 70 6f 72 74 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 53 49 44 00 4e 6f 20 73 75 70 70 6f 72 | upport.for.binding.SID.No.suppor |
559c0 | 74 20 66 6f 72 20 6c 65 76 65 6c 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 28 4c 31 20 74 | t.for.level.redistribution.(L1.t |
559e0 | 6f 20 4c 32 20 6f 72 20 4c 32 20 74 6f 20 4c 31 29 00 4e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e | o.L2.or.L2.to.L1).Non-transparen |
55a00 | 74 20 70 72 6f 78 79 69 6e 67 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 | t.proxying.requires.that.the.cli |
55a20 | 65 6e 74 20 62 72 6f 77 73 65 72 73 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 | ent.browsers.be.configured.with. |
55a40 | 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e 67 73 20 62 65 66 6f 72 65 20 72 65 71 75 65 73 | the.proxy.settings.before.reques |
55a60 | 74 73 20 61 72 65 20 72 65 64 69 72 65 63 74 65 64 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 | ts.are.redirected..The.advantage |
55a80 | 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 77 65 62 20 | .of.this.is.that.the.client.web. |
55aa0 | 62 72 6f 77 73 65 72 20 63 61 6e 20 64 65 74 65 63 74 20 74 68 61 74 20 61 20 70 72 6f 78 79 20 | browser.can.detect.that.a.proxy. |
55ac0 | 69 73 20 69 6e 20 75 73 65 20 61 6e 64 20 63 61 6e 20 62 65 68 61 76 65 20 61 63 63 6f 72 64 69 | is.in.use.and.can.behave.accordi |
55ae0 | 6e 67 6c 79 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 77 65 62 2d 74 72 61 6e 73 6d 69 74 74 | ngly..In.addition,.web-transmitt |
55b00 | 65 64 20 6d 61 6c 77 61 72 65 20 63 61 6e 20 73 6f 6d 65 74 69 6d 65 73 20 62 65 20 62 6c 6f 63 | ed.malware.can.sometimes.be.bloc |
55b20 | 6b 65 64 20 62 79 20 61 20 6e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 77 65 62 20 70 72 6f | ked.by.a.non-transparent.web.pro |
55b40 | 78 79 2c 20 73 69 6e 63 65 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 | xy,.since.they.are.not.aware.of. |
55b60 | 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e 67 73 2e 00 4e 6f 6e 65 20 6f 66 20 74 68 65 20 | the.proxy.settings..None.of.the. |
55b80 | 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 68 61 76 65 20 63 6c 69 65 6e 74 20 73 6f | operating.systems.have.client.so |
55ba0 | 66 74 77 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 00 4e 6f 72 6d | ftware.installed.by.default.Norm |
55bc0 | 61 6c 20 62 75 74 20 73 69 67 6e 69 66 69 63 61 6e 74 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 | al.but.significant.conditions.-. |
55be0 | 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 65 72 72 6f 72 20 63 6f | conditions.that.are.not.error.co |
55c00 | 6e 64 69 74 69 6f 6e 73 2c 20 62 75 74 20 74 68 61 74 20 6d 61 79 20 72 65 71 75 69 72 65 20 73 | nditions,.but.that.may.require.s |
55c20 | 70 65 63 69 61 6c 20 68 61 6e 64 6c 69 6e 67 2e 00 4e 6f 74 20 61 6c 6c 20 74 72 61 6e 73 6d 69 | pecial.handling..Not.all.transmi |
55c40 | 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 62 65 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 | t.policies.may.be.802.3ad.compli |
55c60 | 61 6e 74 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 | ant,.particularly.in.regards.to. |
55c80 | 74 68 65 20 70 61 63 6b 65 74 20 6d 69 73 6f 72 64 65 72 69 6e 67 20 72 65 71 75 69 72 65 6d 65 | the.packet.misordering.requireme |
55ca0 | 6e 74 73 20 6f 66 20 73 65 63 74 69 6f 6e 20 34 33 2e 32 2e 34 20 6f 66 20 74 68 65 20 38 30 32 | nts.of.section.43.2.4.of.the.802 |
55cc0 | 2e 33 61 64 20 73 74 61 6e 64 61 72 64 2e 00 4e 6f 74 65 20 74 68 61 74 20 64 65 6c 65 74 69 6e | .3ad.standard..Note.that.deletin |
55ce0 | 67 20 74 68 65 20 6c 6f 67 20 66 69 6c 65 20 64 6f 65 73 20 6e 6f 74 20 73 74 6f 70 20 74 68 65 | g.the.log.file.does.not.stop.the |
55d00 | 20 73 79 73 74 65 6d 20 66 72 6f 6d 20 6c 6f 67 67 69 6e 67 20 65 76 65 6e 74 73 2e 20 49 66 20 | .system.from.logging.events..If. |
55d20 | 79 6f 75 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 68 69 6c 65 20 74 68 65 20 73 | you.use.this.command.while.the.s |
55d40 | 79 73 74 65 6d 20 69 73 20 6c 6f 67 67 69 6e 67 20 65 76 65 6e 74 73 2c 20 6f 6c 64 20 6c 6f 67 | ystem.is.logging.events,.old.log |
55d60 | 20 65 76 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 64 65 6c 65 74 65 64 2c 20 62 75 74 20 65 76 65 | .events.will.be.deleted,.but.eve |
55d80 | 6e 74 73 20 61 66 74 65 72 20 74 68 65 20 64 65 6c 65 74 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 | nts.after.the.delete.operation.w |
55da0 | 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 69 6e 20 74 68 65 20 6e 65 77 20 66 69 6c 65 2e | ill.be.recorded.in.the.new.file. |
55dc0 | 20 54 6f 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c 65 20 61 6c 74 6f 67 65 74 68 65 72 2c 20 | .To.delete.the.file.altogether,. |
55de0 | 66 69 72 73 74 20 64 65 6c 65 74 65 20 6c 6f 67 67 69 6e 67 20 74 6f 20 74 68 65 20 66 69 6c 65 | first.delete.logging.to.the.file |
55e00 | 20 75 73 69 6e 67 20 73 79 73 74 65 6d 20 73 79 73 6c 6f 67 20 3a 72 65 66 3a 60 63 75 73 74 6f | .using.system.syslog.:ref:`custo |
55e20 | 6d 2d 66 69 6c 65 60 20 63 6f 6d 6d 61 6e 64 2c 20 61 6e 64 20 74 68 65 6e 20 64 65 6c 65 74 65 | m-file`.command,.and.then.delete |
55e40 | 20 74 68 65 20 66 69 6c 65 2e 00 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 | .the.file..Note.the.command.with |
55e60 | 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 | .the.public.key.(set.pki.key-pai |
55e80 | 72 20 69 70 73 65 63 2d 52 49 47 48 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 46 41 41 4f 43 41 | r.ipsec-RIGHT.public.key.'FAAOCA |
55ea0 | 51 38 41 4d 49 49 2e 2e 2e 27 29 2e 00 4e 6f 74 65 3a 20 63 65 72 74 69 66 69 63 61 74 65 20 6e | Q8AMII...')..Note:.certificate.n |
55ec0 | 61 6d 65 73 20 64 6f 6e 27 74 20 6d 61 74 74 65 72 2c 20 77 65 20 75 73 65 20 27 6f 70 65 6e 76 | ames.don't.matter,.we.use.'openv |
55ee0 | 70 6e 2d 6c 6f 63 61 6c 27 20 61 6e 64 20 27 6f 70 65 6e 76 70 6e 2d 72 65 6d 6f 74 65 27 20 62 | pn-local'.and.'openvpn-remote'.b |
55f00 | 75 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 72 62 69 74 72 61 72 79 2e 00 4e 6f 74 69 63 65 | ut.they.can.be.arbitrary..Notice |
55f20 | 00 4e 6f 77 20 63 6f 6e 66 69 67 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 73 65 | .Now.configure.conntrack-sync.se |
55f40 | 72 76 69 63 65 20 6f 6e 20 60 60 72 6f 75 74 65 72 31 60 60 20 2a 2a 61 6e 64 2a 2a 20 60 60 72 | rvice.on.``router1``.**and**.``r |
55f60 | 6f 75 74 65 72 32 60 60 00 4e 6f 77 20 74 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 | outer2``.Now.the.noted.public.ke |
55f80 | 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f | ys.should.be.entered.on.the.oppo |
55fa0 | 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 4e 6f 77 20 77 65 20 61 64 64 20 74 68 65 20 6f 70 74 | site.routers..Now.we.add.the.opt |
55fc0 | 69 6f 6e 20 74 6f 20 74 68 65 20 73 63 6f 70 65 2c 20 61 64 61 70 74 20 74 6f 20 79 6f 75 72 20 | ion.to.the.scope,.adapt.to.your. |
55fe0 | 73 65 74 75 70 00 4e 6f 77 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 | setup.Now.we.need.to.specify.the |
56000 | 20 73 65 72 76 65 72 20 6e 65 74 77 6f 72 6b 20 73 65 74 74 69 6e 67 73 2e 20 49 6e 20 61 6c 6c | .server.network.settings..In.all |
56020 | 20 63 61 73 65 73 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 75 | .cases.we.need.to.specify.the.su |
56040 | 62 6e 65 74 20 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 | bnet.for.client.tunnel.endpoints |
56060 | 2e 20 53 69 6e 63 65 20 77 65 20 77 61 6e 74 20 63 6c 69 65 6e 74 73 20 74 6f 20 61 63 63 65 73 | ..Since.we.want.clients.to.acces |
56080 | 73 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 20 62 65 68 69 6e 64 20 6f 75 72 20 | s.a.specific.network.behind.our. |
560a0 | 72 6f 75 74 65 72 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 61 20 70 75 73 68 2d 72 6f 75 74 65 | router,.we.will.use.a.push-route |
560c0 | 20 6f 70 74 69 6f 6e 20 66 6f 72 20 69 6e 73 74 61 6c 6c 69 6e 67 20 74 68 61 74 20 72 6f 75 74 | .option.for.installing.that.rout |
560e0 | 65 20 6f 6e 20 63 6c 69 65 6e 74 73 2e 00 4e 6f 77 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e | e.on.clients..Now.when.connectin |
56100 | 67 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 66 69 72 73 74 20 62 65 20 61 73 6b 65 64 20 66 | g.the.user.will.first.be.asked.f |
56120 | 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 74 68 65 6e 20 74 68 65 20 4f 54 50 | or.the.password.and.then.the.OTP |
56140 | 20 6b 65 79 2e 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 | .key..Now.you.are.ready.to.setup |
56160 | 20 49 50 73 65 63 2e 20 54 68 65 20 6b 65 79 20 70 6f 69 6e 74 73 3a 00 4e 6f 77 20 79 6f 75 20 | .IPsec..The.key.points:.Now.you. |
56180 | 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 59 6f 75 27 6c 6c | are.ready.to.setup.IPsec..You'll |
561a0 | 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 6e 20 49 44 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 | .need.to.use.an.ID.instead.of.ad |
561c0 | 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e 00 4e 75 6d 62 65 72 20 6f 66 20 61 6e | dress.for.the.peer..Number.of.an |
561e0 | 74 65 6e 6e 61 73 20 6f 6e 20 74 68 69 73 20 63 61 72 64 00 4e 75 6d 62 65 72 20 6f 66 20 62 69 | tennas.on.this.card.Number.of.bi |
56200 | 74 73 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 73 | ts.of.client.IPv4.address.to.pas |
56220 | 73 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 | s.when.sending.EDNS.Client.Subne |
56240 | 74 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 4e 75 6d 62 65 72 20 6f 66 | t.address.information..Number.of |
56260 | 20 6c 69 6e 65 73 20 74 6f 20 62 65 20 64 69 73 70 6c 61 79 65 64 2c 20 64 65 66 61 75 6c 74 20 | .lines.to.be.displayed,.default. |
56280 | 31 30 00 4f 53 50 46 00 4f 53 50 46 20 53 52 20 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f | 10.OSPF.OSPF.SR..Configuration.O |
562a0 | 53 50 46 20 69 73 20 61 20 77 69 64 65 6c 79 20 75 73 65 64 20 49 47 50 20 69 6e 20 6c 61 72 67 | SPF.is.a.widely.used.IGP.in.larg |
562c0 | 65 20 65 6e 74 65 72 70 72 69 73 65 20 6e 65 74 77 6f 72 6b 73 2e 00 4f 53 50 46 20 72 6f 75 74 | e.enterprise.networks..OSPF.rout |
562e0 | 69 6e 67 20 64 65 76 69 63 65 73 20 6e 6f 72 6d 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 20 74 68 | ing.devices.normally.discover.th |
56300 | 65 69 72 20 6e 65 69 67 68 62 6f 72 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 62 79 20 6c 69 73 | eir.neighbors.dynamically.by.lis |
56320 | 74 65 6e 69 6e 67 20 74 6f 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 6f 72 20 6d 75 6c 74 69 | tening.to.the.broadcast.or.multi |
56340 | 63 61 73 74 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 | cast.hello.packets.on.the.networ |
56360 | 6b 2e 20 42 65 63 61 75 73 65 20 61 6e 20 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 | k..Because.an.NBMA.network.does. |
56380 | 6e 6f 74 20 73 75 70 70 6f 72 74 20 62 72 6f 61 64 63 61 73 74 20 28 6f 72 20 6d 75 6c 74 69 63 | not.support.broadcast.(or.multic |
563a0 | 61 73 74 29 2c 20 74 68 65 20 64 65 76 69 63 65 20 63 61 6e 6e 6f 74 20 64 69 73 63 6f 76 65 72 | ast),.the.device.cannot.discover |
563c0 | 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 2c 20 73 6f 20 79 | .its.neighbors.dynamically,.so.y |
563e0 | 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 6c 20 74 68 65 20 6e 65 69 67 68 62 | ou.must.configure.all.the.neighb |
56400 | 6f 72 73 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 4f 53 50 46 76 32 20 28 49 50 76 34 29 00 4f 53 | ors.statically..OSPFv2.(IPv4).OS |
56420 | 50 46 76 33 20 28 49 50 76 36 29 00 4f 54 50 2d 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 00 4f | PFv3.(IPv6).OTP-key.generation.O |
56440 | 66 66 6c 6f 61 64 69 6e 67 00 4f 66 66 73 65 74 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 | ffloading.Offset.of.the.client's |
56460 | 20 73 75 62 6e 65 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 66 72 6f 6d 20 43 6f 6f 72 64 69 6e 61 | .subnet.in.seconds.from.Coordina |
56480 | 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 20 28 55 54 43 29 00 4f 66 74 65 6e 20 77 | ted.Universal.Time.(UTC).Often.w |
564a0 | 65 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 | e.need.to.embed.one.policy.into. |
564c0 | 61 6e 6f 74 68 65 72 20 6f 6e 65 2e 20 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 | another.one..It.is.possible.to.d |
564e0 | 6f 20 73 6f 20 6f 6e 20 63 6c 61 73 73 66 75 6c 20 70 6f 6c 69 63 69 65 73 2c 20 62 79 20 61 74 | o.so.on.classful.policies,.by.at |
56500 | 74 61 63 68 69 6e 67 20 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 | taching.a.new.policy.into.a.clas |
56520 | 73 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 | s..For.instance,.you.might.want. |
56540 | 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 69 65 73 20 74 6f 20 74 | to.apply.different.policies.to.t |
56560 | 68 65 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 20 6f 66 20 61 20 52 6f 75 6e 64 2d | he.different.classes.of.a.Round- |
56580 | 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 | Robin.policy.you.have.configured |
565a0 | 2e 00 4f 66 74 65 6e 20 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 63 6f | ..Often.you.will.also.have.to.co |
565c0 | 6e 66 69 67 75 72 65 20 79 6f 75 72 20 2a 64 65 66 61 75 6c 74 2a 20 74 72 61 66 66 69 63 20 69 | nfigure.your.*default*.traffic.i |
565e0 | 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 79 6f 75 20 64 6f 20 77 69 74 68 20 61 20 63 6c 61 | n.the.same.way.you.do.with.a.cla |
56600 | 73 73 2e 20 2a 44 65 66 61 75 6c 74 2a 20 63 61 6e 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 | ss..*Default*.can.be.considered. |
56620 | 61 20 63 6c 61 73 73 20 61 73 20 69 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 74 68 61 74 2e | a.class.as.it.behaves.like.that. |
56640 | 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 79 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 69 | .It.contains.any.traffic.that.di |
56660 | 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 63 | d.not.match.any.of.the.defined.c |
56680 | 6c 61 73 73 65 73 2c 20 73 6f 20 69 74 20 69 73 20 6c 69 6b 65 20 61 6e 20 6f 70 65 6e 20 63 6c | lasses,.so.it.is.like.an.open.cl |
566a0 | 61 73 73 2c 20 61 20 63 6c 61 73 73 20 77 69 74 68 6f 75 74 20 6d 61 74 63 68 69 6e 67 20 66 69 | ass,.a.class.without.matching.fi |
566c0 | 6c 74 65 72 73 2e 00 4f 6e 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 | lters..On.active.router.run:.On. |
566e0 | 62 6f 74 68 20 73 69 64 65 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 | both.sides,.you.need.to.generate |
56700 | 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 70 72 65 66 | .a.self-signed.certificate,.pref |
56720 | 65 72 72 61 62 6c 79 20 75 73 69 6e 67 20 74 68 65 20 22 65 63 22 20 28 65 6c 6c 69 70 74 69 63 | errably.using.the."ec".(elliptic |
56740 | 20 63 75 72 76 65 29 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 74 | .curve).type..You.can.generate.t |
56760 | 68 65 6d 20 62 79 20 65 78 65 63 75 74 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 60 60 72 75 6e 20 67 | hem.by.executing.command.``run.g |
56780 | 65 6e 65 72 61 74 65 20 70 6b 69 20 63 65 72 74 69 66 69 63 61 74 65 20 73 65 6c 66 2d 73 69 67 | enerate.pki.certificate.self-sig |
567a0 | 6e 65 64 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 69 6e 20 74 68 65 20 63 6f 6e 66 | ned.install.<name>``.in.the.conf |
567c0 | 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 | iguration.mode..Once.the.command |
567e0 | 20 69 73 20 63 6f 6d 70 6c 65 74 65 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 | .is.complete,.it.will.add.the.ce |
56800 | 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 | rtificate.to.the.configuration.s |
56820 | 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 60 60 70 6b 69 60 60 20 73 75 62 74 72 65 65 2e 20 | ession,.to.the.``pki``.subtree.. |
56840 | 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 | You.can.then.review.the.proposed |
56860 | 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 20 6c 6f 77 | .changes.and.commit.them..On.low |
56880 | 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 34 30 4d 62 69 74 29 20 79 6f 75 20 6d 61 79 20 77 61 | .rates.(below.40Mbit).you.may.wa |
568a0 | 6e 74 20 74 6f 20 74 75 6e 65 20 60 71 75 61 6e 74 75 6d 60 20 64 6f 77 6e 20 74 6f 20 73 6f 6d | nt.to.tune.`quantum`.down.to.som |
568c0 | 65 74 68 69 6e 67 20 6c 69 6b 65 20 33 30 30 20 62 79 74 65 73 2e 00 4f 6e 20 6d 6f 73 74 20 73 | ething.like.300.bytes..On.most.s |
568e0 | 63 65 6e 61 72 69 6f 73 2c 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 68 61 | cenarios,.there's.no.need.to.cha |
56900 | 6e 67 65 20 73 70 65 63 69 66 69 63 20 70 61 72 61 6d 65 74 65 72 73 2c 20 61 6e 64 20 75 73 69 | nge.specific.parameters,.and.usi |
56920 | 6e 67 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 6f 75 | ng.default.configuration.is.enou |
56940 | 67 68 2e 20 42 75 74 20 74 68 65 72 65 20 61 72 65 20 63 61 73 65 73 20 77 65 72 65 20 65 78 74 | gh..But.there.are.cases.were.ext |
56960 | 72 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 65 65 64 65 64 2e 00 4f 6e 20 73 | ra.configuration.is.needed..On.s |
56980 | 74 61 6e 64 62 79 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 73 79 73 74 65 6d 73 20 77 69 | tandby.router.run:.On.systems.wi |
569a0 | 74 68 20 6d 75 6c 74 69 70 6c 65 20 72 65 64 75 6e 64 61 6e 74 20 75 70 6c 69 6e 6b 73 20 61 6e | th.multiple.redundant.uplinks.an |
569c0 | 64 20 72 6f 75 74 65 73 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 75 73 | d.routes,.it's.a.good.idea.to.us |
569e0 | 65 20 61 20 64 65 64 69 63 61 74 65 64 20 61 64 64 72 65 73 73 20 66 6f 72 20 6d 61 6e 61 67 65 | e.a.dedicated.address.for.manage |
56a00 | 6d 65 6e 74 20 61 6e 64 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f | ment.and.dynamic.routing.protoco |
56a20 | 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 73 73 69 67 6e 69 6e 67 20 74 68 61 74 20 61 64 64 72 | ls..However,.assigning.that.addr |
56a40 | 65 73 73 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 69 73 20 72 69 73 6b 79 3a | ess.to.a.physical.link.is.risky: |
56a60 | 20 69 66 20 74 68 61 74 20 6c 69 6e 6b 20 67 6f 65 73 20 64 6f 77 6e 2c 20 74 68 61 74 20 61 64 | .if.that.link.goes.down,.that.ad |
56a80 | 64 72 65 73 73 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 69 6e 61 63 63 65 73 73 69 62 6c 65 2e 20 | dress.will.become.inaccessible.. |
56aa0 | 41 20 63 6f 6d 6d 6f 6e 20 73 6f 6c 75 74 69 6f 6e 20 69 73 20 74 6f 20 61 73 73 69 67 6e 20 74 | A.common.solution.is.to.assign.t |
56ac0 | 68 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 6c 6f 6f 70 62 | he.management.address.to.a.loopb |
56ae0 | 61 63 6b 20 6f 72 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 64 76 | ack.or.a.dummy.interface.and.adv |
56b00 | 65 72 74 69 73 65 20 74 68 61 74 20 61 64 64 72 65 73 73 20 76 69 61 20 61 6c 6c 20 70 68 79 73 | ertise.that.address.via.all.phys |
56b20 | 69 63 61 6c 20 6c 69 6e 6b 73 2c 20 73 6f 20 74 68 61 74 20 69 74 27 73 20 72 65 61 63 68 61 62 | ical.links,.so.that.it's.reachab |
56b40 | 6c 65 20 74 68 72 6f 75 67 68 20 61 6e 79 20 6f 66 20 74 68 65 6d 2e 20 53 69 6e 63 65 20 69 6e | le.through.any.of.them..Since.in |
56b60 | 20 4c 69 6e 75 78 2d 62 61 73 65 64 20 73 79 73 74 65 6d 73 2c 20 74 68 65 72 65 20 63 61 6e 20 | .Linux-based.systems,.there.can. |
56b80 | 62 65 20 6f 6e 6c 79 20 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2c 20 | be.only.one.loopback.interface,. |
56ba0 | 69 74 27 73 20 62 65 74 74 65 72 20 74 6f 20 75 73 65 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 | it's.better.to.use.a.dummy.inter |
56bc0 | 66 61 63 65 20 66 6f 72 20 74 68 61 74 20 70 75 72 70 6f 73 65 2c 20 73 69 6e 63 65 20 74 68 65 | face.for.that.purpose,.since.the |
56be0 | 79 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 72 65 6d 6f 76 65 64 2c 20 61 6e 64 20 74 61 6b | y.can.be.added,.removed,.and.tak |
56c00 | 65 6e 20 75 70 20 61 6e 64 20 64 6f 77 6e 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 2e 00 4f 6e | en.up.and.down.independently..On |
56c20 | 20 74 68 65 20 4c 45 46 54 20 28 73 74 61 74 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 | .the.LEFT.(static.address):.On.t |
56c40 | 68 65 20 4c 45 46 54 3a 00 4f 6e 20 74 68 65 20 52 49 47 48 54 20 28 64 79 6e 61 6d 69 63 20 61 | he.LEFT:.On.the.RIGHT.(dynamic.a |
56c60 | 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 52 49 47 48 54 2c 20 73 65 74 75 70 20 62 79 20 | ddress):.On.the.RIGHT,.setup.by. |
56c80 | 61 6e 61 6c 6f 67 79 20 61 6e 64 20 73 77 61 70 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 | analogy.and.swap.local.and.remot |
56ca0 | 65 20 61 64 64 72 65 73 73 65 73 2e 00 4f 6e 20 74 68 65 20 52 49 47 48 54 3a 00 4f 6e 20 74 68 | e.addresses..On.the.RIGHT:.On.th |
56cc0 | 65 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 68 61 76 65 | e.active.router,.you.should.have |
56ce0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2d 63 61 63 | .information.in.the.internal-cac |
56d00 | 68 65 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 20 54 68 65 20 73 61 6d 65 20 63 | he.of.conntrack-sync..The.same.c |
56d20 | 75 72 72 65 6e 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6e 75 6d 62 65 72 | urrent.active.connections.number |
56d40 | 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c | .should.be.shown.in.the.external |
56d60 | 2d 63 61 63 68 65 20 6f 66 20 74 68 65 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 00 4f 6e 20 | -cache.of.the.standby.router.On. |
56d80 | 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 | the.initiator,.we.need.to.set.th |
56da0 | 65 20 72 65 6d 6f 74 65 2d 69 64 20 6f 70 74 69 6f 6e 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 | e.remote-id.option.so.that.it.ca |
56dc0 | 6e 20 69 64 65 6e 74 69 66 79 20 49 4b 45 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 | n.identify.IKE.traffic.from.the. |
56de0 | 72 65 73 70 6f 6e 64 65 72 20 63 6f 72 72 65 63 74 6c 79 2e 00 4f 6e 20 74 68 65 20 69 6e 69 74 | responder.correctly..On.the.init |
56e00 | 69 61 74 6f 72 2c 20 77 65 20 73 65 74 20 74 68 65 20 70 65 65 72 20 61 64 64 72 65 73 73 20 74 | iator,.we.set.the.peer.address.t |
56e20 | 6f 20 69 74 73 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 6f 6e 20 74 68 65 | o.its.public.address,.but.on.the |
56e40 | 20 72 65 73 70 6f 6e 64 65 72 20 77 65 20 6f 6e 6c 79 20 73 65 74 20 74 68 65 20 69 64 2e 00 4f | .responder.we.only.set.the.id..O |
56e60 | 6e 20 74 68 65 20 6c 61 73 74 20 68 6f 70 20 72 6f 75 74 65 72 20 69 66 20 69 74 20 69 73 20 64 | n.the.last.hop.router.if.it.is.d |
56e80 | 65 73 69 72 65 64 20 74 6f 20 6e 6f 74 20 73 77 69 74 63 68 20 6f 76 65 72 20 74 6f 20 74 68 65 | esired.to.not.switch.over.to.the |
56ea0 | 20 53 50 54 20 74 72 65 65 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .SPT.tree.configure.this.command |
56ec0 | 2e 00 4f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 | ..On.the.responder,.we.need.to.s |
56ee0 | 65 74 20 74 68 65 20 6c 6f 63 61 6c 20 69 64 20 73 6f 20 74 68 61 74 20 69 6e 69 74 69 61 74 6f | et.the.local.id.so.that.initiato |
56f00 | 72 20 63 61 6e 20 6b 6e 6f 77 20 77 68 6f 27 73 20 74 61 6c 6b 69 6e 67 20 74 6f 20 69 74 20 66 | r.can.know.who's.talking.to.it.f |
56f20 | 6f 72 20 74 68 65 20 70 6f 69 6e 74 20 23 33 20 74 6f 20 77 6f 72 6b 2e 00 4f 6e 63 65 20 61 20 | or.the.point.#3.to.work..Once.a. |
56f40 | 63 6c 61 73 73 20 68 61 73 20 61 20 66 69 6c 74 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 79 | class.has.a.filter.configured,.y |
56f60 | 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 64 65 66 69 6e 65 20 77 68 61 74 | ou.will.also.have.to.define.what |
56f80 | 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 20 77 69 74 68 20 74 68 65 20 74 72 61 66 66 69 63 | .you.want.to.do.with.the.traffic |
56fa0 | 20 6f 66 20 74 68 61 74 20 63 6c 61 73 73 2c 20 77 68 61 74 20 73 70 65 63 69 66 69 63 20 54 72 | .of.that.class,.what.specific.Tr |
56fc0 | 61 66 66 69 63 2d 43 6f 6e 74 72 6f 6c 20 74 72 65 61 74 6d 65 6e 74 20 79 6f 75 20 77 61 6e 74 | affic-Control.treatment.you.want |
56fe0 | 20 74 6f 20 67 69 76 65 20 69 74 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 64 69 66 66 65 | .to.give.it..You.will.have.diffe |
57000 | 72 65 6e 74 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 | rent.possibilities.depending.on. |
57020 | 74 68 65 20 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 | the.Traffic.Policy.you.are.confi |
57040 | 67 75 72 69 6e 67 2e 00 4f 6e 63 65 20 61 20 6e 65 69 67 68 62 6f 72 20 68 61 73 20 62 65 65 6e | guring..Once.a.neighbor.has.been |
57060 | 20 66 6f 75 6e 64 2c 20 74 68 65 20 65 6e 74 72 79 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 | .found,.the.entry.is.considered. |
57080 | 74 6f 20 62 65 20 76 61 6c 69 64 20 66 6f 72 20 61 74 20 6c 65 61 73 74 20 66 6f 72 20 74 68 69 | to.be.valid.for.at.least.for.thi |
570a0 | 73 20 73 70 65 63 69 66 69 63 20 74 69 6d 65 2e 20 41 6e 20 65 6e 74 72 79 27 73 20 76 61 6c 69 | s.specific.time..An.entry's.vali |
570c0 | 64 69 74 79 20 77 69 6c 6c 20 62 65 20 65 78 74 65 6e 64 65 64 20 69 66 20 69 74 20 72 65 63 65 | dity.will.be.extended.if.it.rece |
570e0 | 69 76 65 73 20 70 6f 73 69 74 69 76 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f 6d 20 68 69 67 68 | ives.positive.feedback.from.high |
57100 | 65 72 20 6c 65 76 65 6c 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 4f 6e 63 65 20 61 20 72 6f 75 74 65 | er.level.protocols..Once.a.route |
57120 | 20 69 73 20 61 73 73 65 73 73 65 64 20 61 20 70 65 6e 61 6c 74 79 2c 20 74 68 65 20 70 65 6e 61 | .is.assessed.a.penalty,.the.pena |
57140 | 6c 74 79 20 69 73 20 64 65 63 72 65 61 73 65 64 20 62 79 20 68 61 6c 66 20 65 61 63 68 20 74 69 | lty.is.decreased.by.half.each.ti |
57160 | 6d 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 65 | me.a.predefined.amount.of.time.e |
57180 | 6c 61 70 73 65 73 20 28 68 61 6c 66 2d 6c 69 66 65 2d 74 69 6d 65 29 2e 20 57 68 65 6e 20 74 68 | lapses.(half-life-time)..When.th |
571a0 | 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 66 61 6c 6c 20 62 65 6c | e.accumulated.penalties.fall.bel |
571c0 | 6f 77 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 72 65 75 73 65 | ow.a.predefined.threshold.(reuse |
571e0 | 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 75 6e 73 75 70 70 72 65 73 73 | -value),.the.route.is.unsuppress |
57200 | 65 64 20 61 6e 64 20 61 64 64 65 64 20 62 61 63 6b 20 69 6e 74 6f 20 74 68 65 20 42 47 50 20 72 | ed.and.added.back.into.the.BGP.r |
57220 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 4f 6e 63 65 20 61 20 74 72 61 66 66 69 63 2d 70 6f 6c | outing.table..Once.a.traffic-pol |
57240 | 69 63 79 20 69 73 20 63 72 65 61 74 65 64 2c 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 69 74 | icy.is.created,.you.can.apply.it |
57260 | 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a 00 4f 6e 63 65 20 63 72 65 61 74 65 64 20 69 | .to.an.interface:.Once.created.i |
57280 | 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e | n.the.system,.Pseudo-Ethernet.in |
572a0 | 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 69 6e 20 74 68 | terfaces.can.be.referenced.in.th |
572c0 | 65 20 65 78 61 63 74 20 73 61 6d 65 20 77 61 79 20 61 73 20 6f 74 68 65 72 20 45 74 68 65 72 6e | e.exact.same.way.as.other.Ethern |
572e0 | 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4e 6f 74 65 73 20 61 62 6f 75 74 20 75 73 69 6e 67 | et.interfaces..Notes.about.using |
57300 | 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 3a 00 4f 6e | .Pseudo-.Ethernet.interfaces:.On |
57320 | 63 65 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 | ce.flow.accounting.is.configured |
57340 | 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 73 20 69 74 20 70 72 6f 76 69 64 65 73 20 74 68 | .on.an.interfaces.it.provides.th |
57360 | 65 20 61 62 69 6c 69 74 79 20 74 6f 20 64 69 73 70 6c 61 79 20 63 61 70 74 75 72 65 64 20 6e 65 | e.ability.to.display.captured.ne |
57380 | 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 6c | twork.traffic.information.for.al |
573a0 | 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4f 6e 63 65 20 74 68 | l.configured.interfaces..Once.th |
573c0 | 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 64 2c 20 69 74 20 77 69 6c 6c 20 | e.command.is.completed,.it.will. |
573e0 | 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 | add.the.certificate.to.the.confi |
57400 | 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 70 6b 69 20 73 75 62 | guration.session,.to.the.pki.sub |
57420 | 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 | tree..You.can.then.review.the.pr |
57440 | 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 | oposed.changes.and.commit.them.. |
57460 | 4f 6e 63 65 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 6f 66 20 74 68 65 20 66 6c 6f | Once.the.first.packet.of.the.flo |
57480 | 77 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 | w.successfully.goes.through.the. |
574a0 | 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 20 28 62 6c 61 63 6b 20 63 69 72 63 6c 65 | IP.forwarding.path.(black.circle |
574c0 | 73 20 70 61 74 68 29 2c 20 66 72 6f 6d 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 | s.path),.from.the.second.packet. |
574e0 | 6f 6e 2c 20 79 6f 75 20 6d 69 67 68 74 20 64 65 63 69 64 65 20 74 6f 20 6f 66 66 6c 6f 61 64 20 | on,.you.might.decide.to.offload. |
57500 | 74 68 65 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 74 68 72 6f 75 67 | the.flow.to.the.flowtable.throug |
57520 | 68 20 79 6f 75 72 20 72 75 6c 65 73 65 74 2e 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 69 6e | h.your.ruleset..The.flowtable.in |
57540 | 66 72 61 73 74 72 75 63 74 75 72 65 20 70 72 6f 76 69 64 65 73 20 61 20 72 75 6c 65 20 61 63 74 | frastructure.provides.a.rule.act |
57560 | 69 6f 6e 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 77 | ion.that.allows.you.to.specify.w |
57580 | 68 65 6e 20 74 6f 20 61 64 64 20 61 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 | hen.to.add.a.flow.to.the.flowtab |
575a0 | 6c 65 20 28 4f 6e 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 69 6e 67 2c 20 72 65 64 20 63 69 | le.(On.forward.filtering,.red.ci |
575c0 | 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 00 4f 6e 63 65 20 74 68 65 20 6c 6f 63 61 6c 20 74 75 | rcle.number.6).Once.the.local.tu |
575e0 | 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 60 60 73 65 74 20 73 65 72 76 69 63 65 20 70 70 70 6f | nnel.endpoint.``set.service.pppo |
57600 | 65 2d 73 65 72 76 65 72 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 27 31 30 2e 31 2e 31 | e-server.gateway-address.'10.1.1 |
57620 | 2e 32 27 60 60 20 68 61 73 20 62 65 65 6e 20 64 65 66 69 6e 65 64 2c 20 74 68 65 20 63 6c 69 65 | .2'``.has.been.defined,.the.clie |
57640 | 6e 74 20 49 50 20 70 6f 6f 6c 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 65 66 69 6e 65 64 | nt.IP.pool.can.be.either.defined |
57660 | 20 61 73 20 61 20 72 61 6e 67 65 20 6f 72 20 61 73 20 73 75 62 6e 65 74 20 75 73 69 6e 67 20 43 | .as.a.range.or.as.subnet.using.C |
57680 | 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 43 49 44 52 20 6e 6f 74 61 74 69 | IDR.notation..If.the.CIDR.notati |
576a0 | 6f 6e 20 69 73 20 75 73 65 64 2c 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 6e 65 74 73 20 63 61 6e | on.is.used,.multiple.subnets.can |
576c0 | 20 62 65 20 73 65 74 75 70 20 77 68 69 63 68 20 61 72 65 20 75 73 65 64 20 73 65 71 75 65 6e 74 | .be.setup.which.are.used.sequent |
576e0 | 69 61 6c 6c 79 2e 00 4f 6e 63 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 61 | ially..Once.the.matching.rules.a |
57700 | 72 65 20 73 65 74 20 66 6f 72 20 61 20 63 6c 61 73 73 2c 20 79 6f 75 20 63 61 6e 20 73 74 61 72 | re.set.for.a.class,.you.can.star |
57720 | 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 68 6f 77 20 79 6f 75 20 77 61 6e 74 20 6d 61 74 63 68 | t.configuring.how.you.want.match |
57740 | 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 68 61 76 65 2e 00 4f 6e 63 65 20 74 68 65 20 | ing.traffic.to.behave..Once.the. |
57760 | 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 | user.is.connected,.the.user.sess |
57780 | 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 | ion.is.using.the.set.limits.and. |
577a0 | 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 61 20 27 73 68 6f 77 20 70 70 70 6f 65 | can.be.displayed.via.'show.pppoe |
577c0 | 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 27 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 | -server.sessions'..Once.the.user |
577e0 | 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 | .is.connected,.the.user.session. |
57800 | 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 | is.using.the.set.limits.and.can. |
57820 | 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 61 20 60 60 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 | be.displayed.via.``show.pppoe-se |
57840 | 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 2e 00 4f 6e 63 65 20 79 6f 75 20 63 6f 6d 6d 69 74 | rver.sessions``..Once.you.commit |
57860 | 20 74 68 65 20 61 62 6f 76 65 20 63 68 61 6e 67 65 73 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 | .the.above.changes.you.can.creat |
57880 | 65 20 61 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 69 6e 20 74 68 65 20 2f 63 6f 6e 66 69 67 2f 61 | e.a.config.file.in.the./config/a |
578a0 | 75 74 68 2f 6f 63 73 65 72 76 2f 63 6f 6e 66 69 67 2d 70 65 72 2d 75 73 65 72 20 64 69 72 65 63 | uth/ocserv/config-per-user.direc |
578c0 | 74 6f 72 79 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 66 20 | tory.that.matches.a.username.of. |
578e0 | 61 20 75 73 65 72 20 79 6f 75 20 68 61 76 65 20 63 72 65 61 74 65 64 20 65 2e 67 2e 20 22 74 73 | a.user.you.have.created.e.g.."ts |
57900 | 74 22 2e 20 4e 6f 77 20 77 68 65 6e 20 6c 6f 67 67 69 6e 67 20 69 6e 20 77 69 74 68 20 74 68 65 | t"..Now.when.logging.in.with.the |
57920 | 20 22 74 73 74 22 20 75 73 65 72 20 74 68 65 20 63 6f 6e 66 69 67 20 6f 70 74 69 6f 6e 73 20 79 | ."tst".user.the.config.options.y |
57940 | 6f 75 20 73 65 74 20 69 6e 20 74 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 | ou.set.in.this.file.will.be.load |
57960 | 65 64 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 65 20 61 6e 20 45 74 68 65 72 6e 65 74 20 64 65 | ed..Once.you.have.an.Ethernet.de |
57980 | 76 69 63 65 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 60 65 74 68 30 60 2c 20 74 68 65 | vice.connected,.i.e..`eth0`,.the |
579a0 | 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 74 6f 20 6f 70 65 6e 20 74 | n.you.can.configure.it.to.open.t |
579c0 | 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 79 6f 75 20 61 6e 64 20 79 6f 75 | he.PPPoE.session.for.you.and.you |
579e0 | 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 28 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 29 | r.DSL.Transceiver.(Modem/Router) |
57a00 | 20 6a 75 73 74 20 61 63 74 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 79 6f 75 72 20 6d 65 73 | .just.acts.to.translate.your.mes |
57a20 | 73 61 67 65 73 20 69 6e 20 61 20 77 61 79 20 74 68 61 74 20 76 44 53 4c 2f 61 44 53 4c 20 75 6e | sages.in.a.way.that.vDSL/aDSL.un |
57a40 | 64 65 72 73 74 61 6e 64 73 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 65 20 73 65 74 75 70 20 79 | derstands..Once.you.have.setup.y |
57a60 | 6f 75 72 20 53 53 54 50 20 73 65 72 76 65 72 20 74 68 65 72 65 20 63 6f 6d 65 73 20 74 68 65 20 | our.SSTP.server.there.comes.the. |
57a80 | 74 69 6d 65 20 74 6f 20 64 6f 20 73 6f 6d 65 20 62 61 73 69 63 20 74 65 73 74 69 6e 67 2e 20 54 | time.to.do.some.basic.testing..T |
57aa0 | 68 65 20 4c 69 6e 75 78 20 63 6c 69 65 6e 74 20 75 73 65 64 20 66 6f 72 20 74 65 73 74 69 6e 67 | he.Linux.client.used.for.testing |
57ac0 | 20 69 73 20 63 61 6c 6c 65 64 20 73 73 74 70 63 5f 2e 20 73 73 74 70 63 5f 20 72 65 71 75 69 72 | .is.called.sstpc_..sstpc_.requir |
57ae0 | 65 73 20 61 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 65 65 72 20 66 69 6c 65 | es.a.PPP.configuration/peer.file |
57b00 | 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 | ..Once.your.routers.are.configur |
57b20 | 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 4b 49 2d 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 | ed.to.reject.RPKI-invalid.prefix |
57b40 | 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 74 20 77 68 65 74 68 65 72 20 74 68 65 20 63 6f 6e | es,.you.can.test.whether.the.con |
57b60 | 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 6f 72 6b 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 | figuration.is.working.correctly. |
57b80 | 75 73 69 6e 67 20 74 68 65 20 60 52 49 50 45 20 4c 61 62 73 20 52 50 4b 49 20 54 65 73 74 60 5f | using.the.`RIPE.Labs.RPKI.Test`_ |
57ba0 | 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 74 6f 6f 6c 2e 00 4f 6e 65 20 54 79 70 65 2d 33 20 73 | .experimental.tool..One.Type-3.s |
57bc0 | 75 6d 6d 61 72 79 2d 4c 53 41 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 20 3c 45 2e | ummary-LSA.with.routing.info.<E. |
57be0 | 46 2e 47 2e 48 2f 4d 3e 20 69 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 62 61 63 6b 62 | F.G.H/M>.is.announced.into.backb |
57c00 | 6f 6e 65 20 61 72 65 61 20 69 66 20 64 65 66 69 6e 65 64 20 61 72 65 61 20 63 6f 6e 74 61 69 6e | one.area.if.defined.area.contain |
57c20 | 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 69 6e 74 72 61 2d 61 72 65 61 20 6e 65 74 77 6f 72 | s.at.least.one.intra-area.networ |
57c40 | 6b 20 28 69 2e 65 2e 20 64 65 73 63 72 69 62 65 64 20 77 69 74 68 20 72 6f 75 74 65 72 2d 4c 53 | k.(i.e..described.with.router-LS |
57c60 | 41 20 6f 72 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 29 20 66 72 6f 6d 20 72 61 6e 67 65 20 3c 41 2e | A.or.network-LSA).from.range.<A. |
57c80 | 42 2e 43 2e 44 2f 4d 3e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e | B.C.D/M>..This.command.makes.sen |
57ca0 | 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 4f 6e 65 20 69 6d 70 6c 69 63 69 74 20 65 6e 76 | se.in.ABR.only..One.implicit.env |
57cc0 | 69 72 6f 6e 6d 65 6e 74 20 65 78 69 73 74 73 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 69 6d 70 6f | ironment.exists..One.of.the.impo |
57ce0 | 72 74 61 6e 74 20 66 65 61 74 75 72 65 73 20 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 | rtant.features.built.on.top.of.t |
57d00 | 68 65 20 4e 65 74 66 69 6c 74 65 72 20 66 72 61 6d 65 77 6f 72 6b 20 69 73 20 63 6f 6e 6e 65 63 | he.Netfilter.framework.is.connec |
57d20 | 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 | tion.tracking..Connection.tracki |
57d40 | 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 20 6b 65 72 6e 65 6c 20 74 6f 20 6b 65 65 70 20 74 72 61 | ng.allows.the.kernel.to.keep.tra |
57d60 | 63 6b 20 6f 66 20 61 6c 6c 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 | ck.of.all.logical.network.connec |
57d80 | 74 69 6f 6e 73 20 6f 72 20 73 65 73 73 69 6f 6e 73 2c 20 61 6e 64 20 74 68 65 72 65 62 79 20 72 | tions.or.sessions,.and.thereby.r |
57da0 | 65 6c 61 74 65 20 61 6c 6c 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 6d | elate.all.of.the.packets.which.m |
57dc0 | 61 79 20 6d 61 6b 65 20 75 70 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 41 54 20 | ay.make.up.that.connection..NAT. |
57de0 | 72 65 6c 69 65 73 20 6f 6e 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 72 | relies.on.this.information.to.tr |
57e00 | 61 6e 73 6c 61 74 65 20 61 6c 6c 20 72 65 6c 61 74 65 64 20 70 61 63 6b 65 74 73 20 69 6e 20 74 | anslate.all.related.packets.in.t |
57e20 | 68 65 20 73 61 6d 65 20 77 61 79 2c 20 61 6e 64 20 69 70 74 61 62 6c 65 73 20 63 61 6e 20 75 73 | he.same.way,.and.iptables.can.us |
57e40 | 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 63 74 20 61 73 20 61 20 73 | e.this.information.to.act.as.a.s |
57e60 | 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 75 73 65 | tateful.firewall..One.of.the.use |
57e80 | 73 20 6f 66 20 46 61 69 72 20 51 75 65 75 65 20 6d 69 67 68 74 20 62 65 20 74 68 65 20 6d 69 74 | s.of.Fair.Queue.might.be.the.mit |
57ea0 | 69 67 61 74 69 6f 6e 20 6f 66 20 44 65 6e 69 61 6c 20 6f 66 20 53 65 72 76 69 63 65 20 61 74 74 | igation.of.Denial.of.Service.att |
57ec0 | 61 63 6b 73 2e 00 4f 6e 6c 79 20 38 30 32 2e 31 51 2d 74 61 67 67 65 64 20 70 61 63 6b 65 74 73 | acks..Only.802.1Q-tagged.packets |
57ee0 | 20 61 72 65 20 61 63 63 65 70 74 65 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 76 69 66 73 2e 00 | .are.accepted.on.Ethernet.vifs.. |
57f00 | 4f 6e 6c 79 20 56 52 52 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 20 52 65 71 75 69 72 65 64 | Only.VRRP.is.supported..Required |
57f20 | 20 6f 70 74 69 6f 6e 2e 00 4f 6e 6c 79 20 61 6c 6c 6f 77 20 63 65 72 74 61 69 6e 20 49 50 20 61 | .option..Only.allow.certain.IP.a |
57f40 | 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 63 63 65 73 73 20 74 | ddresses.or.prefixes.to.access.t |
57f60 | 68 65 20 68 74 74 70 73 20 77 65 62 73 65 72 76 65 72 2e 00 4f 6e 6c 79 20 69 6e 20 74 68 65 20 | he.https.webserver..Only.in.the. |
57f80 | 73 6f 75 72 63 65 20 63 72 69 74 65 72 69 61 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 | source.criteria,.you.can.specify |
57fa0 | 20 61 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4f 6e 6c 79 20 6f 6e 65 20 53 52 47 42 20 61 6e | .a.mac-address..Only.one.SRGB.an |
57fc0 | 64 20 64 65 66 61 75 6c 74 20 53 50 46 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 73 75 70 70 6f | d.default.SPF.Algorithm.is.suppo |
57fe0 | 72 74 65 64 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f | rted.Only.request.an.address.fro |
58000 | 6d 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 72 65 71 | m.the.DHCP.server.but.do.not.req |
58020 | 75 65 73 74 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 2e 00 4f 6e 6c 79 20 72 65 71 | uest.a.default.gateway..Only.req |
58040 | 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 50 50 50 6f 45 20 73 | uest.an.address.from.the.PPPoE.s |
58060 | 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 | erver.but.do.not.install.any.def |
58080 | 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 | ault.route..Only.request.an.addr |
580a0 | 65 73 73 20 66 72 6f 6d 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 | ess.from.the.SSTP.server.but.do. |
580c0 | 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f | not.install.any.default.route..O |
580e0 | 6e 6c 79 20 74 68 65 20 74 79 70 65 20 28 60 60 73 73 68 2d 72 73 61 60 60 29 20 61 6e 64 20 74 | nly.the.type.(``ssh-rsa``).and.t |
58100 | 68 65 20 6b 65 79 20 28 60 60 41 41 41 42 33 4e 2e 2e 2e 60 60 29 20 61 72 65 20 75 73 65 64 2e | he.key.(``AAAB3N...``).are.used. |
58120 | 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6b 65 79 20 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 | .Note.that.the.key.will.usually. |
58140 | 62 65 20 73 65 76 65 72 61 6c 20 68 75 6e 64 72 65 64 20 63 68 61 72 61 63 74 65 72 73 20 6c 6f | be.several.hundred.characters.lo |
58160 | 6e 67 2c 20 61 6e 64 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 61 6e | ng,.and.you.will.need.to.copy.an |
58180 | 64 20 70 61 73 74 65 20 69 74 2e 20 53 6f 6d 65 20 74 65 72 6d 69 6e 61 6c 20 65 6d 75 6c 61 74 | d.paste.it..Some.terminal.emulat |
581a0 | 6f 72 73 20 6d 61 79 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 73 70 6c 69 74 20 74 68 69 73 20 | ors.may.accidentally.split.this. |
581c0 | 6f 76 65 72 20 73 65 76 65 72 61 6c 20 6c 69 6e 65 73 2e 20 42 65 20 61 74 74 65 6e 74 69 76 65 | over.several.lines..Be.attentive |
581e0 | 20 77 68 65 6e 20 79 6f 75 20 70 61 73 74 65 20 69 74 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 | .when.you.paste.it.that.it.only. |
58200 | 70 61 73 74 65 73 20 61 73 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 2e 20 54 68 65 20 74 68 69 | pastes.as.a.single.line..The.thi |
58220 | 72 64 20 70 61 72 74 20 69 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 2c | rd.part.is.simply.an.identifier, |
58240 | 20 61 6e 64 20 69 73 20 66 6f 72 20 79 6f 75 72 20 6f 77 6e 20 72 65 66 65 72 65 6e 63 65 2e 00 | .and.is.for.your.own.reference.. |
58260 | 4f 6e 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 61 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 77 | Only.works.with.a.VXLAN.device.w |
58280 | 69 74 68 20 65 78 74 65 72 6e 61 6c 20 66 6c 61 67 20 73 65 74 2e 00 4f 70 2d 6d 6f 64 65 20 63 | ith.external.flag.set..Op-mode.c |
582a0 | 68 65 63 6b 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 20 73 74 61 74 75 73 00 4f 70 65 6e 43 | heck.virtual-server.status.OpenC |
582c0 | 6f 6e 6e 65 63 74 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | onnect.OpenConnect.can.be.config |
582e0 | 75 72 65 64 20 74 6f 20 73 65 6e 64 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 | ured.to.send.accounting.informat |
58300 | 69 6f 6e 20 74 6f 20 61 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 74 6f 20 63 61 70 74 75 72 | ion.to.a.RADIUS.server.to.captur |
58320 | 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 64 61 74 61 20 73 75 63 68 20 61 73 20 74 69 6d 65 | e.user.session.data.such.as.time |
58340 | 20 6f 66 20 63 6f 6e 6e 65 63 74 2f 64 69 73 63 6f 6e 6e 65 63 74 2c 20 64 61 74 61 20 74 72 61 | .of.connect/disconnect,.data.tra |
58360 | 6e 73 66 65 72 72 65 64 2c 20 61 6e 64 20 73 6f 20 6f 6e 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 | nsferred,.and.so.on..OpenConnect |
58380 | 20 73 65 72 76 65 72 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 69 6e 20 | .server.matches.the.filename.in. |
583a0 | 61 20 63 61 73 65 20 73 65 6e 73 69 74 69 76 65 20 6d 61 6e 6e 65 72 2c 20 6d 61 6b 65 20 73 75 | a.case.sensitive.manner,.make.su |
583c0 | 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 20 6e 61 6d 65 20 79 6f 75 20 63 | re.the.username/group.name.you.c |
583e0 | 6f 6e 66 69 67 75 72 65 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 65 78 | onfigure.matches.the.filename.ex |
58400 | 61 63 74 6c 79 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 73 75 70 70 6f 72 74 73 20 61 20 73 75 | actly..OpenConnect.supports.a.su |
58420 | 62 73 65 74 20 6f 66 20 69 74 27 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f | bset.of.it's.configuration.optio |
58440 | 6e 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 6f 6e 20 61 20 70 65 72 20 75 73 65 72 2f 67 | ns.to.be.applied.on.a.per.user/g |
58460 | 72 6f 75 70 20 62 61 73 69 73 2c 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 75 | roup.basis,.for.configuration.pu |
58480 | 72 70 6f 73 65 73 20 77 65 20 72 65 66 65 72 20 74 6f 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e | rposes.we.refer.to.this.function |
584a0 | 61 6c 69 74 79 20 61 73 20 22 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 22 | ality.as."Identity.based.config" |
584c0 | 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 60 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 53 65 72 | ..The.following.`OpenConnect.Ser |
584e0 | 76 65 72 20 4d 61 6e 75 61 6c 20 3c 68 74 74 70 73 3a 2f 2f 6f 63 73 65 72 76 2e 67 69 74 6c 61 | ver.Manual.<https://ocserv.gitla |
58500 | 62 2e 69 6f 2f 77 77 77 2f 6d 61 6e 75 61 6c 2e 68 74 6d 6c 23 3a 7e 3a 74 65 78 74 3d 43 6f 6e | b.io/www/manual.html#:~:text=Con |
58520 | 66 69 67 75 72 61 74 69 6f 6e 25 32 30 66 69 6c 65 73 25 32 30 74 68 61 74 25 20 32 30 77 69 6c | figuration%20files%20that%.20wil |
58540 | 6c 25 32 30 62 65 25 32 30 61 70 70 6c 69 65 64 25 32 30 70 65 72 25 32 30 75 73 65 72 25 32 30 | l%20be%20applied%20per%20user%20 |
58560 | 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 6f 72 25 30 41 25 32 33 25 32 30 70 65 72 25 32 30 67 72 | connection%20or%0A%23%20per%20gr |
58580 | 6f 75 70 3e 60 5f 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 20 73 65 74 20 6f 66 20 63 6f 6e 66 69 | oup>`_.outlines.the.set.of.confi |
585a0 | 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 | guration.options.that.are.allowe |
585c0 | 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 6c 65 76 65 72 61 67 65 64 20 74 6f 20 61 70 70 6c | d..This.can.be.leveraged.to.appl |
585e0 | 79 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 73 20 6f 66 20 63 6f 6e 66 69 67 73 20 74 6f 20 64 | y.different.sets.of.configs.to.d |
58600 | 69 66 66 65 72 65 6e 74 20 75 73 65 72 73 20 6f 72 20 67 72 6f 75 70 73 20 6f 66 20 75 73 65 72 | ifferent.users.or.groups.of.user |
58620 | 73 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 2d 63 6f 6d 70 61 74 69 62 6c 65 20 73 65 72 76 65 72 | s..OpenConnect-compatible.server |
58640 | 20 66 65 61 74 75 72 65 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 | .feature.is.available.from.this. |
58660 | 72 65 6c 65 61 73 65 2e 20 4f 70 65 6e 63 6f 6e 6e 65 63 74 20 56 50 4e 20 73 75 70 70 6f 72 74 | release..Openconnect.VPN.support |
58680 | 73 20 53 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 6f 66 66 65 72 73 20 66 75 6c 6c | s.SSL.connection.and.offers.full |
586a0 | 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 2e 20 53 53 4c 20 56 50 4e 20 6e 65 74 77 6f 72 6b | .network.access..SSL.VPN.network |
586c0 | 20 65 78 74 65 6e 73 69 6f 6e 20 63 6f 6e 6e 65 63 74 73 20 74 68 65 20 65 6e 64 2d 75 73 65 72 | .extension.connects.the.end-user |
586e0 | 20 73 79 73 74 65 6d 20 74 6f 20 74 68 65 20 63 6f 72 70 6f 72 61 74 65 20 6e 65 74 77 6f 72 6b | .system.to.the.corporate.network |
58700 | 20 77 69 74 68 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 73 20 62 61 73 65 64 20 6f 6e 6c 79 | .with.access.controls.based.only |
58720 | 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 | .on.network.layer.information,.s |
58740 | 75 63 68 20 61 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 6e | uch.as.destination.IP.address.an |
58760 | 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 53 6f 2c 20 69 74 20 70 72 6f 76 69 64 65 73 20 73 | d.port.number..So,.it.provides.s |
58780 | 61 66 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 74 79 70 65 73 20 | afe.communication.for.all.types. |
587a0 | 6f 66 20 64 65 76 69 63 65 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 70 75 62 6c 69 63 20 | of.device.traffic.across.public. |
587c0 | 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 61 | networks.and.private.networks,.a |
587e0 | 6c 73 6f 20 65 6e 63 72 79 70 74 73 20 74 68 65 20 74 72 61 66 66 69 63 20 77 69 74 68 20 53 53 | lso.encrypts.the.traffic.with.SS |
58800 | 4c 20 70 72 6f 74 6f 63 6f 6c 2e 00 4f 70 65 6e 56 50 4e 00 4f 70 65 6e 56 50 4e 20 2a 2a 77 69 | L.protocol..OpenVPN.OpenVPN.**wi |
58820 | 6c 6c 20 6e 6f 74 2a 2a 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 72 6f | ll.not**.automatically.create.ro |
58840 | 75 74 65 73 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 20 66 6f 72 20 63 6c 69 65 6e 74 20 73 75 | utes.in.the.kernel.for.client.su |
58860 | 62 6e 65 74 73 20 77 68 65 6e 20 74 68 65 79 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 77 69 6c 6c | bnets.when.they.connect.and.will |
58880 | 20 6f 6e 6c 79 20 75 73 65 20 63 6c 69 65 6e 74 2d 73 75 62 6e 65 74 20 61 73 73 6f 63 69 61 74 | .only.use.client-subnet.associat |
588a0 | 69 6f 6e 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 | ion.internally,.so.we.need.to.cr |
588c0 | 65 61 74 65 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 | eate.a.route.to.the.10.23.0.0/20 |
588e0 | 20 6e 65 74 77 6f 72 6b 20 6f 75 72 73 65 6c 76 65 73 3a 00 4f 70 65 6e 56 50 4e 20 44 43 4f 20 | .network.ourselves:.OpenVPN.DCO. |
58900 | 69 73 20 6e 6f 74 20 66 75 6c 6c 20 4f 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 73 75 70 | is.not.full.OpenVPN.features.sup |
58920 | 70 6f 72 74 65 64 20 2c 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 73 69 64 65 72 65 64 | ported.,.is.currently.considered |
58940 | 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 2e 20 46 75 72 74 68 65 72 6d 6f 72 65 2c 20 74 68 65 72 | .experimental..Furthermore,.ther |
58960 | 65 20 61 72 65 20 63 65 72 74 61 69 6e 20 4f 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 61 | e.are.certain.OpenVPN.features.a |
58980 | 6e 64 20 75 73 65 20 63 61 73 65 73 20 74 68 61 74 20 72 65 6d 61 69 6e 20 69 6e 63 6f 6d 70 61 | nd.use.cases.that.remain.incompa |
589a0 | 74 69 62 6c 65 20 77 69 74 68 20 44 43 4f 2e 20 54 6f 20 67 65 74 20 61 20 63 6f 6d 70 72 65 68 | tible.with.DCO..To.get.a.compreh |
589c0 | 65 6e 73 69 76 65 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 74 68 65 20 6c 69 6d 69 | ensive.understanding.of.the.limi |
589e0 | 74 61 74 69 6f 6e 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 44 43 4f 2c 20 72 65 66 | tations.associated.with.DCO,.ref |
58a00 | 65 72 20 74 6f 20 74 68 65 20 6c 69 73 74 20 6f 66 20 6b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 | er.to.the.list.of.known.limitati |
58a20 | 6f 6e 73 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 00 4f 70 65 6e 56 50 | ons.in.the.documentation..OpenVP |
58a40 | 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 00 4f 70 65 | N.Data.Channel.Offload.(DCO).Ope |
58a60 | 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 20 | nVPN.Data.Channel.Offload.(DCO). |
58a80 | 65 6e 61 62 6c 65 73 20 73 69 67 6e 69 66 69 63 61 6e 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 | enables.significant.performance. |
58aa0 | 65 6e 68 61 6e 63 65 6d 65 6e 74 20 69 6e 20 65 6e 63 72 79 70 74 65 64 20 4f 70 65 6e 56 50 4e | enhancement.in.encrypted.OpenVPN |
58ac0 | 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 42 79 20 6d 69 6e 69 6d 69 7a 69 6e 67 20 | .data.processing..By.minimizing. |
58ae0 | 63 6f 6e 74 65 78 74 20 73 77 69 74 63 68 69 6e 67 20 66 6f 72 20 65 61 63 68 20 70 61 63 6b 65 | context.switching.for.each.packe |
58b00 | 74 2c 20 44 43 4f 20 65 66 66 65 63 74 69 76 65 6c 79 20 72 65 64 75 63 65 73 20 6f 76 65 72 68 | t,.DCO.effectively.reduces.overh |
58b20 | 65 61 64 2e 20 54 68 69 73 20 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 20 69 73 20 61 63 68 69 65 76 | ead..This.optimization.is.achiev |
58b40 | 65 64 20 62 79 20 6b 65 65 70 69 6e 67 20 6d 6f 73 74 20 64 61 74 61 20 68 61 6e 64 6c 69 6e 67 | ed.by.keeping.most.data.handling |
58b60 | 20 74 61 73 6b 73 20 77 69 74 68 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2c 20 61 76 6f 69 64 69 | .tasks.within.the.kernel,.avoidi |
58b80 | 6e 67 20 66 72 65 71 75 65 6e 74 20 73 77 69 74 63 68 65 73 20 62 65 74 77 65 65 6e 20 6b 65 72 | ng.frequent.switches.between.ker |
58ba0 | 6e 65 6c 20 61 6e 64 20 75 73 65 72 20 73 70 61 63 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f | nel.and.user.space.for.encryptio |
58bc0 | 6e 20 61 6e 64 20 70 61 63 6b 65 74 20 68 61 6e 64 6c 69 6e 67 2e 00 4f 70 65 6e 56 50 4e 20 61 | n.and.packet.handling..OpenVPN.a |
58be0 | 6c 6c 6f 77 73 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 55 44 50 | llows.for.either.TCP.or.UDP..UDP |
58c00 | 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 74 68 65 20 6c 6f 77 65 73 74 20 6c 61 74 65 6e 63 79 | .will.provide.the.lowest.latency |
58c20 | 2c 20 77 68 69 6c 65 20 54 43 50 20 77 69 6c 6c 20 77 6f 72 6b 20 62 65 74 74 65 72 20 66 6f 72 | ,.while.TCP.will.work.better.for |
58c40 | 20 6c 6f 73 73 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 3b 20 67 65 6e 65 72 61 6c 6c 79 20 55 44 | .lossy.connections;.generally.UD |
58c60 | 50 20 69 73 20 70 72 65 66 65 72 72 65 64 20 77 68 65 6e 20 70 6f 73 73 69 62 6c 65 2e 00 4f 70 | P.is.preferred.when.possible..Op |
58c80 | 65 6e 56 50 4e 20 69 73 20 70 6f 70 75 6c 61 72 20 66 6f 72 20 63 6c 69 65 6e 74 2d 73 65 72 76 | enVPN.is.popular.for.client-serv |
58ca0 | 65 72 20 73 65 74 75 70 73 2c 20 62 75 74 20 69 74 73 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | er.setups,.but.its.site-to-site. |
58cc0 | 6d 6f 64 65 20 72 65 6d 61 69 6e 73 20 61 20 72 65 6c 61 74 69 76 65 6c 79 20 6f 62 73 63 75 72 | mode.remains.a.relatively.obscur |
58ce0 | 65 20 66 65 61 74 75 72 65 2c 20 61 6e 64 20 6d 61 6e 79 20 72 6f 75 74 65 72 20 61 70 70 6c 69 | e.feature,.and.many.router.appli |
58d00 | 61 6e 63 65 73 20 73 74 69 6c 6c 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 69 74 2e 20 48 6f | ances.still.don't.support.it..Ho |
58d20 | 77 65 76 65 72 2c 20 69 74 27 73 20 76 65 72 79 20 75 73 65 66 75 6c 20 66 6f 72 20 71 75 69 63 | wever,.it's.very.useful.for.quic |
58d40 | 6b 6c 79 20 73 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 72 | kly.setting.up.tunnels.between.r |
58d60 | 6f 75 74 65 72 73 2e 00 4f 70 65 6e 56 50 4e 20 73 74 61 74 75 73 20 63 61 6e 20 62 65 20 76 65 | outers..OpenVPN.status.can.be.ve |
58d80 | 72 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 68 6f 77 20 6f 70 65 6e 76 70 6e 60 20 | rified.using.the.`show.openvpn`. |
58da0 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 53 65 65 20 74 68 65 20 62 75 | operational.commands..See.the.bu |
58dc0 | 69 6c 74 2d 69 6e 20 68 65 6c 70 20 66 6f 72 20 61 20 63 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 | ilt-in.help.for.a.complete.list. |
58de0 | 6f 66 20 6f 70 74 69 6f 6e 73 2e 00 4f 70 65 6e 63 6f 6e 6e 65 63 74 20 43 6f 6e 66 69 67 75 72 | of.options..Openconnect.Configur |
58e00 | 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6e 67 20 4d 6f 64 65 73 00 4f 70 65 72 61 74 69 6f 6e 00 | ation.Operating.Modes.Operation. |
58e20 | 4f 70 65 72 61 74 69 6f 6e 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 20 4d 6f 64 | Operation.Commands.Operation.Mod |
58e40 | 65 00 4f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 6f 66 20 77 69 72 65 6c 65 73 73 20 72 61 64 | e.Operation.mode.of.wireless.rad |
58e60 | 69 6f 2e 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 | io..Operation-mode.Operation-mod |
58e80 | 65 20 46 69 72 65 77 61 6c 6c 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 43 6f 6d 6d 61 6e 64 73 00 | e.Firewall.Operational.Commands. |
58ea0 | 4f 70 65 72 61 74 69 6f 6e 61 6c 20 4d 6f 64 65 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 | Operational.Mode.Commands.Operat |
58ec0 | 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 00 4f 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 34 33 20 | ional.commands.Option.Option.43. |
58ee0 | 66 6f 72 20 55 6e 69 46 49 00 4f 70 74 69 6f 6e 20 64 65 73 63 72 69 70 74 69 6f 6e 00 4f 70 74 | for.UniFI.Option.description.Opt |
58f00 | 69 6f 6e 20 6e 75 6d 62 65 72 00 4f 70 74 69 6f 6e 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 | ion.number.Option.specifying.the |
58f20 | 20 72 61 74 65 20 69 6e 20 77 68 69 63 68 20 77 65 27 6c 6c 20 61 73 6b 20 6f 75 72 20 6c 69 6e | .rate.in.which.we'll.ask.our.lin |
58f40 | 6b 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 20 70 61 63 | k.partner.to.transmit.LACPDU.pac |
58f60 | 6b 65 74 73 20 69 6e 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 | kets.in.802.3ad.mode..Option.to. |
58f80 | 64 69 73 61 62 6c 65 20 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 65 6e 61 62 6c 65 20 6f | disable.rule..Option.to.enable.o |
58fa0 | 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 00 4f 70 74 | r.disable.log.matching.rule..Opt |
58fc0 | 69 6f 6e 20 74 6f 20 6c 6f 67 20 70 61 63 6b 65 74 73 20 68 69 74 74 69 6e 67 20 64 65 66 61 75 | ion.to.log.packets.hitting.defau |
58fe0 | 6c 74 2d 61 63 74 69 6f 6e 2e 00 4f 70 74 69 6f 6e 61 6c 00 4f 70 74 69 6f 6e 61 6c 20 43 6f 6e | lt-action..Optional.Optional.Con |
59000 | 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 70 72 | figuration.Optional.parameter.pr |
59020 | 65 66 69 78 2d 6c 69 73 74 20 63 61 6e 20 62 65 20 75 73 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 | efix-list.can.be.use.to.control. |
59040 | 77 68 69 63 68 20 67 72 6f 75 70 73 20 74 6f 20 73 77 69 74 63 68 20 6f 72 20 6e 6f 74 20 73 77 | which.groups.to.switch.or.not.sw |
59060 | 69 74 63 68 2e 20 49 66 20 61 20 67 72 6f 75 70 20 69 73 20 50 45 52 4d 49 54 20 61 73 20 70 65 | itch..If.a.group.is.PERMIT.as.pe |
59080 | 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 | r.the.prefix-list,.then.the.SPT. |
590a0 | 73 77 69 74 63 68 6f 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 70 70 65 6e 20 66 6f 72 20 69 | switchover.does.not.happen.for.i |
590c0 | 74 20 61 6e 64 20 69 66 20 69 74 20 69 73 20 44 45 4e 59 2c 20 74 68 65 6e 20 74 68 65 20 53 50 | t.and.if.it.is.DENY,.then.the.SP |
590e0 | 54 20 73 77 69 74 63 68 6f 76 65 72 20 68 61 70 70 65 6e 73 2e 00 4f 70 74 69 6f 6e 61 6c 2c 20 | T.switchover.happens..Optional,. |
59100 | 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 65 6e 61 62 6c 65 20 75 70 6c 6f 61 64 73 2c 20 65 | if.you.want.to.enable.uploads,.e |
59120 | 6c 73 65 20 54 46 54 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 72 65 | lse.TFTP.server.will.act.as.a.re |
59140 | 61 64 2d 6f 6e 6c 79 20 73 65 72 76 65 72 2e 00 4f 70 74 69 6f 6e 61 6c 2f 64 65 66 61 75 6c 74 | ad-only.server..Optional/default |
59160 | 20 73 65 74 74 69 6e 67 73 00 4f 70 74 69 6f 6e 61 6c 6c 79 20 73 65 74 20 61 20 73 70 65 63 69 | .settings.Optionally.set.a.speci |
59180 | 66 69 63 20 73 74 61 74 69 63 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | fic.static.IPv4.or.IPv6.address. |
591a0 | 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 20 54 68 69 73 20 61 64 64 72 65 73 73 20 | for.the.container..This.address. |
591c0 | 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 74 68 65 20 6e 61 6d 65 64 20 6e 65 74 77 6f 72 6b | must.be.within.the.named.network |
591e0 | 20 70 72 65 66 69 78 2e 00 4f 70 74 69 6f 6e 73 00 4f 70 74 69 6f 6e 73 20 28 47 6c 6f 62 61 6c | .prefix..Options.Options.(Global |
59200 | 20 49 50 73 65 63 20 73 65 74 74 69 6e 67 73 29 20 41 74 74 72 69 62 75 74 65 73 00 4f 70 74 69 | .IPsec.settings).Attributes.Opti |
59220 | 6f 6e 73 20 75 73 65 64 20 66 6f 72 20 71 75 65 75 65 20 74 61 72 67 65 74 2e 20 41 63 74 69 6f | ons.used.for.queue.target..Actio |
59240 | 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 | n.queue.must.be.defined.to.use.t |
59260 | 68 69 73 20 73 65 74 74 69 6e 67 00 4f 72 20 2a 2a 62 69 6e 61 72 79 2a 2a 20 70 72 65 66 69 78 | his.setting.Or.**binary**.prefix |
59280 | 65 73 2e 00 4f 72 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 66 74 70 2c 20 60 64 65 6c 65 74 65 | es..Or,.for.example.ftp,.`delete |
592a0 | 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 20 66 74 70 60 2e 00 | .system.conntrack.modules.ftp`.. |
592c0 | 4f 72 69 67 69 6e 61 74 65 20 61 6e 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 28 74 79 70 65 2d 35 | Originate.an.AS-External.(type-5 |
592e0 | 29 20 4c 53 41 20 64 65 73 63 72 69 62 69 6e 67 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 | ).LSA.describing.a.default.route |
59300 | 20 69 6e 74 6f 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 2d 72 6f 75 74 69 6e 67 20 63 61 70 61 62 | .into.all.external-routing.capab |
59320 | 6c 65 20 61 72 65 61 73 2c 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6d 65 74 72 69 | le.areas,.of.the.specified.metri |
59340 | 63 20 61 6e 64 20 6d 65 74 72 69 63 20 74 79 70 65 2e 20 49 66 20 74 68 65 20 3a 63 66 67 63 6d | c.and.metric.type..If.the.:cfgcm |
59360 | 64 3a 60 61 6c 77 61 79 73 60 20 6b 65 79 77 6f 72 64 20 69 73 20 67 69 76 65 6e 20 74 68 65 6e | d:`always`.keyword.is.given.then |
59380 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 61 6c 77 61 79 73 20 61 64 76 65 72 74 69 73 65 | .the.default.is.always.advertise |
593a0 | 64 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 72 65 20 69 73 20 6e 6f 20 64 65 66 61 75 6c 74 | d,.even.when.there.is.no.default |
593c0 | 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 | .present.in.the.routing.table..T |
593e0 | 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 | he.argument.:cfgcmd:`route-map`. |
59400 | 73 70 65 63 69 66 69 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 64 65 66 61 75 | specifies.to.advertise.the.defau |
59420 | 6c 74 20 72 6f 75 74 65 20 69 66 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 69 73 20 73 61 74 | lt.route.if.the.route.map.is.sat |
59440 | 69 73 66 69 65 64 2e 00 4f 74 68 65 72 20 61 74 74 72 69 62 75 74 65 73 20 63 61 6e 20 62 65 20 | isfied..Other.attributes.can.be. |
59460 | 75 73 65 64 2c 20 62 75 74 20 74 68 65 79 20 68 61 76 65 20 74 6f 20 62 65 20 69 6e 20 6f 6e 65 | used,.but.they.have.to.be.in.one |
59480 | 20 6f 66 20 74 68 65 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 2a 2f 75 73 72 2f 73 68 | .of.the.dictionaries.in.*/usr/sh |
594a0 | 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2a 2e 00 4f 75 72 20 63 6f 6e 66 69 | are/accel-ppp/radius*..Our.confi |
594c0 | 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 3a 00 4f 75 72 20 | guration.commands.would.be:.Our. |
594e0 | 72 65 6d 6f 74 65 20 65 6e 64 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 20 66 6f 72 20 70 65 65 | remote.end.of.the.tunnel.for.pee |
59500 | 72 20 60 74 6f 2d 77 67 30 32 60 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 74 20 31 39 32 2e | r.`to-wg02`.is.reachable.at.192. |
59520 | 30 2e 32 2e 31 20 70 6f 72 74 20 35 31 38 32 30 00 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 | 0.2.1.port.51820.Outbound.traffi |
59540 | 63 20 63 61 6e 20 62 65 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6f 72 | c.can.be.balanced.between.two.or |
59560 | 20 6d 6f 72 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 49 66 20 61 20 | .more.outbound.interfaces..If.a. |
59580 | 70 61 74 68 20 66 61 69 6c 73 2c 20 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 | path.fails,.traffic.is.balanced. |
595a0 | 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 68 65 61 6c 74 68 79 20 70 61 74 | across.the.remaining.healthy.pat |
595c0 | 68 73 2c 20 61 20 72 65 63 6f 76 65 72 65 64 20 70 61 74 68 20 69 73 20 61 75 74 6f 6d 61 74 69 | hs,.a.recovered.path.is.automati |
595e0 | 63 61 6c 6c 79 20 61 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 | cally.added.back.to.the.routing. |
59600 | 74 61 62 6c 65 20 61 6e 64 20 75 73 65 64 20 62 79 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e | table.and.used.by.the.load.balan |
59620 | 63 65 72 2e 20 54 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 61 75 74 6f 6d 61 74 69 63 | cer..The.load.balancer.automatic |
59640 | 61 6c 6c 79 20 61 64 64 73 20 72 6f 75 74 65 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 74 | ally.adds.routes.for.each.path.t |
59660 | 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 62 61 6c 61 6e 63 65 73 | o.the.routing.table.and.balances |
59680 | 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | .traffic.across.the.configured.i |
596a0 | 6e 74 65 72 66 61 63 65 73 2c 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 69 6e 74 65 72 66 61 | nterfaces,.determined.by.interfa |
596c0 | 63 65 20 68 65 61 6c 74 68 20 61 6e 64 20 77 65 69 67 68 74 2e 00 4f 75 74 67 6f 69 6e 67 20 74 | ce.health.and.weight..Outgoing.t |
596e0 | 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 69 6e 20 61 20 66 6c 6f 77 2d 62 61 73 | raffic.is.balanced.in.a.flow-bas |
59700 | 65 64 20 6d 61 6e 6e 65 72 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 | ed.manner..A.connection.tracking |
59720 | 20 74 61 62 6c 65 20 69 73 20 75 73 65 64 20 74 6f 20 74 72 61 63 6b 20 66 6c 6f 77 73 20 62 79 | .table.is.used.to.track.flows.by |
59740 | 20 74 68 65 69 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 | .their.source.address,.destinati |
59760 | 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 | on.address.and.port..Each.flow.i |
59780 | 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 61 63 63 6f 72 | s.assigned.to.an.interface.accor |
597a0 | 64 69 6e 67 20 74 6f 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 | ding.to.the.defined.balancing.ru |
597c0 | 6c 65 73 20 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 | les.and.subsequent.packets.are.s |
597e0 | 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 | ent.through.the.same.interface.. |
59800 | 54 68 69 73 20 68 61 73 20 74 68 65 20 61 64 76 61 6e 74 61 67 65 20 74 68 61 74 20 70 61 63 6b | This.has.the.advantage.that.pack |
59820 | 65 74 73 20 61 6c 77 61 79 73 20 61 72 72 69 76 65 20 69 6e 20 6f 72 64 65 72 20 69 66 20 6c 69 | ets.always.arrive.in.order.if.li |
59840 | 6e 6b 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 73 70 65 65 64 73 20 61 72 65 20 69 6e | nks.with.different.speeds.are.in |
59860 | 20 75 73 65 2e 00 4f 75 74 70 75 74 20 66 72 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b | .use..Output.from.`eth0`.network |
59880 | 20 69 6e 74 65 72 66 61 63 65 00 4f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 50 72 6f 6d 65 74 68 | .interface.Output.plugin.Prometh |
598a0 | 65 75 73 20 63 6c 69 65 6e 74 00 4f 76 65 72 20 49 50 00 4f 76 65 72 20 49 50 53 65 63 2c 20 4c | eus.client.Over.IP.Over.IPSec,.L |
598c0 | 32 20 56 50 4e 20 28 62 72 69 64 67 65 29 00 4f 76 65 72 20 55 44 50 00 4f 76 65 72 72 69 64 65 | 2.VPN.(bridge).Over.UDP.Override |
598e0 | 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 27 73 20 6e 61 6d 65 2d 73 65 72 76 65 72 20 77 69 | .static-mapping's.name-server.wi |
59900 | 74 68 20 61 20 63 75 73 74 6f 6d 20 6f 6e 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 73 65 6e | th.a.custom.one.that.will.be.sen |
59920 | 74 20 6f 6e 6c 79 20 74 6f 20 74 68 69 73 20 68 6f 73 74 2e 00 4f 76 65 72 76 69 65 77 00 4f 76 | t.only.to.this.host..Overview.Ov |
59940 | 65 72 76 69 65 77 20 61 6e 64 20 62 61 73 69 63 20 63 6f 6e 63 65 70 74 73 00 4f 76 65 72 76 69 | erview.and.basic.concepts.Overvi |
59960 | 65 77 20 6f 66 20 64 65 66 69 6e 65 64 20 67 72 6f 75 70 73 2e 20 59 6f 75 20 73 65 65 20 74 68 | ew.of.defined.groups..You.see.th |
59980 | 65 20 74 79 70 65 2c 20 74 68 65 20 6d 65 6d 62 65 72 73 2c 20 61 6e 64 20 77 68 65 72 65 20 74 | e.type,.the.members,.and.where.t |
599a0 | 68 65 20 67 72 6f 75 70 20 69 73 20 75 73 65 64 2e 00 50 42 52 20 6d 75 6c 74 69 70 6c 65 20 75 | he.group.is.used..PBR.multiple.u |
599c0 | 70 6c 69 6e 6b 73 00 50 43 31 20 69 73 20 69 6e 20 74 68 65 20 60 60 64 65 66 61 75 6c 74 60 60 | plinks.PC1.is.in.the.``default`` |
599e0 | 20 56 52 46 20 61 6e 64 20 61 63 74 69 6e 67 20 61 73 20 65 2e 67 2e 20 61 20 22 66 69 6c 65 73 | .VRF.and.acting.as.e.g..a."files |
59a00 | 65 72 76 65 72 22 00 50 43 32 20 69 73 20 69 6e 20 56 52 46 20 60 60 62 6c 75 65 60 60 20 77 68 | erver".PC2.is.in.VRF.``blue``.wh |
59a20 | 69 63 68 20 69 73 20 74 68 65 20 64 65 76 65 6c 6f 70 6d 65 6e 74 20 64 65 70 61 72 74 6d 65 6e | ich.is.the.development.departmen |
59a40 | 74 00 50 43 33 20 61 6e 64 20 50 43 34 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 | t.PC3.and.PC4.are.connected.to.a |
59a60 | 20 62 72 69 64 67 65 20 64 65 76 69 63 65 20 6f 6e 20 72 6f 75 74 65 72 20 60 60 52 31 60 60 20 | .bridge.device.on.router.``R1``. |
59a80 | 77 68 69 63 68 20 69 73 20 69 6e 20 56 52 46 20 60 60 72 65 64 60 60 2e 20 53 61 79 20 74 68 69 | which.is.in.VRF.``red``..Say.thi |
59aa0 | 73 20 69 73 20 74 68 65 20 48 52 20 64 65 70 61 72 74 6d 65 6e 74 2e 00 50 43 34 20 68 61 73 20 | s.is.the.HR.department..PC4.has. |
59ac0 | 49 50 20 31 30 2e 30 2e 30 2e 34 2f 32 34 20 61 6e 64 20 50 43 35 20 68 61 73 20 49 50 20 31 30 | IP.10.0.0.4/24.and.PC5.has.IP.10 |
59ae0 | 2e 30 2e 30 2e 35 2f 32 34 2c 20 73 6f 20 74 68 65 79 20 62 65 6c 69 65 76 65 20 74 68 65 79 20 | .0.0.5/24,.so.they.believe.they. |
59b00 | 61 72 65 20 69 6e 20 74 68 65 20 73 61 6d 65 20 62 72 6f 61 64 63 61 73 74 20 64 6f 6d 61 69 6e | are.in.the.same.broadcast.domain |
59b20 | 2e 00 50 43 35 20 72 65 63 65 69 76 65 73 20 74 68 65 20 70 69 6e 67 20 65 63 68 6f 2c 20 72 65 | ..PC5.receives.the.ping.echo,.re |
59b40 | 73 70 6f 6e 64 73 20 77 69 74 68 20 61 6e 20 65 63 68 6f 20 72 65 70 6c 79 20 74 68 61 74 20 4c | sponds.with.an.echo.reply.that.L |
59b60 | 65 61 66 33 20 72 65 63 65 69 76 65 73 20 61 6e 64 20 74 68 69 73 20 74 69 6d 65 20 66 6f 72 77 | eaf3.receives.and.this.time.forw |
59b80 | 61 72 64 73 20 74 6f 20 4c 65 61 66 32 27 73 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 | ards.to.Leaf2's.unicast.address. |
59ba0 | 64 69 72 65 63 74 6c 79 20 62 65 63 61 75 73 65 20 69 74 20 6c 65 61 72 6e 65 64 20 74 68 65 20 | directly.because.it.learned.the. |
59bc0 | 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 50 43 34 20 61 62 6f 76 65 2e 20 57 68 65 6e 20 4c 65 61 66 | location.of.PC4.above..When.Leaf |
59be0 | 32 20 72 65 63 65 69 76 65 73 20 74 68 65 20 65 63 68 6f 20 72 65 70 6c 79 20 66 72 6f 6d 20 50 | 2.receives.the.echo.reply.from.P |
59c00 | 43 35 20 69 74 20 73 65 65 73 20 74 68 61 74 20 69 74 20 63 61 6d 65 20 66 72 6f 6d 20 4c 65 61 | C5.it.sees.that.it.came.from.Lea |
59c20 | 66 33 20 61 6e 64 20 73 6f 20 72 65 6d 65 6d 62 65 72 73 20 74 68 61 74 20 50 43 35 20 69 73 20 | f3.and.so.remembers.that.PC5.is. |
59c40 | 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 4c 65 61 66 33 2e 00 50 49 4d 20 28 50 72 6f 74 6f 63 | reachable.via.Leaf3..PIM.(Protoc |
59c60 | 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 29 20 6d 75 73 74 20 62 | ol.Independent.Multicast).must.b |
59c80 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 | e.configured.in.every.interface. |
59ca0 | 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 | of.every.participating.router..E |
59cc0 | 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c | very.router.must.also.have.the.l |
59ce0 | 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d | ocation.of.the.Rendevouz.Point.m |
59d00 | 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 | anually.configured..Then,.unidir |
59d20 | 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 | ectional.shared.trees.rooted.at. |
59d40 | 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 | the.Rendevouz.Point.will.automat |
59d60 | 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 | ically.be.built.for.multicast.di |
59d80 | 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 49 4d 20 61 6e 64 20 49 47 4d 50 00 50 49 4d 20 e2 80 93 | stribution..PIM.and.IGMP.PIM.... |
59da0 | 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 00 | .Protocol.Independent.Multicast. |
59dc0 | 50 49 4d 2d 53 4d 20 2d 20 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 00 50 49 4d 36 20 2d 20 | PIM-SM.-.PIM.Sparse.Mode.PIM6.-. |
59de0 | 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 | Protocol.Independent.Multicast.f |
59e00 | 6f 72 20 49 50 76 36 00 50 49 4d 76 36 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 | or.IPv6.PIMv6.(Protocol.Independ |
59e20 | 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 29 20 6d 75 73 74 20 62 65 20 | ent.Multicast.for.IPv6).must.be. |
59e40 | 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 | configured.in.every.interface.of |
59e60 | 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 | .every.participating.router..Eve |
59e80 | 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 | ry.router.must.also.have.the.loc |
59ea0 | 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e | ation.of.the.Rendevouz.Point.man |
59ec0 | 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 | ually.configured..Then,.unidirec |
59ee0 | 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 | tional.shared.trees.rooted.at.th |
59f00 | 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 | e.Rendevouz.Point.will.automatic |
59f20 | 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 | ally.be.built.for.multicast.dist |
59f40 | 72 69 62 75 74 69 6f 6e 2e 00 50 4b 49 00 50 50 44 55 00 50 50 50 20 41 64 76 61 6e 63 65 64 20 | ribution..PKI.PPDU.PPP.Advanced. |
59f60 | 4f 70 74 69 6f 6e 73 00 50 50 50 20 53 65 74 74 69 6e 67 73 00 50 50 50 6f 45 00 50 50 50 6f 45 | Options.PPP.Settings.PPPoE.PPPoE |
59f80 | 20 53 65 72 76 65 72 00 50 50 50 6f 45 20 6f 70 74 69 6f 6e 73 00 50 50 54 50 2d 53 65 72 76 65 | .Server.PPPoE.options.PPTP-Serve |
59fa0 | 72 00 50 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 6c 65 61 | r.Packet-based.balancing.can.lea |
59fc0 | 64 20 74 6f 20 61 20 62 65 74 74 65 72 20 62 61 6c 61 6e 63 65 20 61 63 72 6f 73 73 20 69 6e 74 | d.to.a.better.balance.across.int |
59fe0 | 65 72 66 61 63 65 73 20 77 68 65 6e 20 6f 75 74 20 6f 66 20 6f 72 64 65 72 20 70 61 63 6b 65 74 | erfaces.when.out.of.order.packet |
5a000 | 73 20 61 72 65 20 6e 6f 20 69 73 73 75 65 2e 20 50 65 72 2d 70 61 63 6b 65 74 2d 62 61 73 65 64 | s.are.no.issue..Per-packet-based |
5a020 | 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 61 20 62 61 6c 61 | .balancing.can.be.set.for.a.bala |
5a040 | 6e 63 69 6e 67 20 72 75 6c 65 20 77 69 74 68 3a 00 50 61 72 74 69 63 75 6c 61 72 6c 79 20 6c 61 | ncing.rule.with:.Particularly.la |
5a060 | 72 67 65 20 6e 65 74 77 6f 72 6b 73 20 6d 61 79 20 77 69 73 68 20 74 6f 20 72 75 6e 20 74 68 65 | rge.networks.may.wish.to.run.the |
5a080 | 69 72 20 6f 77 6e 20 52 50 4b 49 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 | ir.own.RPKI.certificate.authorit |
5a0a0 | 79 20 61 6e 64 20 70 75 62 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 69 6e 73 74 65 61 64 | y.and.publication.server.instead |
5a0c0 | 20 6f 66 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 74 68 65 69 72 20 52 49 | .of.publishing.ROAs.via.their.RI |
5a0e0 | 52 2e 20 54 68 69 73 20 69 73 20 61 20 73 75 62 6a 65 63 74 20 66 61 72 20 62 65 79 6f 6e 64 20 | R..This.is.a.subject.far.beyond. |
5a100 | 74 68 65 20 73 63 6f 70 65 20 6f 66 20 56 79 4f 53 27 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | the.scope.of.VyOS'.documentation |
5a120 | 2e 20 43 6f 6e 73 69 64 65 72 20 72 65 61 64 69 6e 67 20 61 62 6f 75 74 20 4b 72 69 6c 6c 5f 20 | ..Consider.reading.about.Krill_. |
5a140 | 69 66 20 74 68 69 73 20 69 73 20 61 20 72 61 62 62 69 74 20 68 6f 6c 65 20 79 6f 75 20 6e 65 65 | if.this.is.a.rabbit.hole.you.nee |
5a160 | 64 20 6f 72 20 65 73 70 65 63 69 61 6c 6c 79 20 77 61 6e 74 20 74 6f 20 64 69 76 65 20 64 6f 77 | d.or.especially.want.to.dive.dow |
5a180 | 6e 2e 00 50 61 74 68 20 60 3c 63 6f 73 74 3e 60 20 76 61 6c 75 65 20 66 6f 72 20 53 70 61 6e 6e | n..Path.`<cost>`.value.for.Spann |
5a1a0 | 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 | ing.Tree.Protocol..Each.interfac |
5a1c0 | 65 20 69 6e 20 61 20 62 72 69 64 67 65 20 63 6f 75 6c 64 20 68 61 76 65 20 61 20 64 69 66 66 65 | e.in.a.bridge.could.have.a.diffe |
5a1e0 | 72 65 6e 74 20 73 70 65 65 64 20 61 6e 64 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 | rent.speed.and.this.value.is.use |
5a200 | 64 20 77 68 65 6e 20 64 65 63 69 64 69 6e 67 20 77 68 69 63 68 20 6c 69 6e 6b 20 74 6f 20 75 73 | d.when.deciding.which.link.to.us |
5a220 | 65 2e 20 46 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 73 68 6f 75 6c 64 20 68 61 76 65 | e..Faster.interfaces.should.have |
5a240 | 20 6c 6f 77 65 72 20 63 6f 73 74 73 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 | .lower.costs..Path.to.`<file>`.p |
5a260 | 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f | ointing.to.the.certificate.autho |
5a280 | 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 | rity.certificate..Path.to.`<file |
5a2a0 | 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 73 20 63 65 72 74 69 | >`.pointing.to.the.servers.certi |
5a2c0 | 66 69 63 61 74 65 20 28 70 75 62 6c 69 63 20 70 6f 72 74 69 6f 6e 29 2e 00 50 65 65 72 20 2d 20 | ficate.(public.portion)..Peer.-. |
5a2e0 | 50 65 65 72 00 50 65 65 72 20 47 72 6f 75 70 73 00 50 65 65 72 20 49 50 20 61 64 64 72 65 73 73 | Peer.Peer.Groups.Peer.IP.address |
5a300 | 20 74 6f 20 6d 61 74 63 68 2e 00 50 65 65 72 20 50 61 72 61 6d 65 74 65 72 73 00 50 65 65 72 20 | .to.match..Peer.Parameters.Peer. |
5a320 | 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 68 65 6c 70 20 69 6d 70 72 6f 76 65 20 | groups.are.used.to.help.improve. |
5a340 | 73 63 61 6c 69 6e 67 20 62 79 20 67 65 6e 65 72 61 74 69 6e 67 20 74 68 65 20 73 61 6d 65 20 75 | scaling.by.generating.the.same.u |
5a360 | 70 64 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 6c 6c 20 6d 65 6d 62 65 72 73 | pdate.information.to.all.members |
5a380 | 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 | .of.a.peer.group..Note.that.this |
5a3a0 | 20 6d 65 61 6e 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 73 20 67 65 6e 65 72 61 74 65 64 | .means.that.the.routes.generated |
5a3c0 | 20 62 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 6c | .by.a.member.of.a.peer.group.wil |
5a3e0 | 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 69 | l.be.sent.back.to.that.originati |
5a400 | 6e 67 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e | ng.peer.with.the.originator.iden |
5a420 | 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 73 65 74 20 74 6f 20 69 6e 64 69 63 61 74 65 | tifier.attribute.set.to.indicate |
5a440 | 64 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 2e 20 41 6c 6c 20 70 65 65 72 | d.the.originating.peer..All.peer |
5a460 | 73 20 6e 6f 74 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 73 70 65 63 69 66 69 63 | s.not.associated.with.a.specific |
5a480 | 20 70 65 65 72 20 67 72 6f 75 70 20 61 72 65 20 74 72 65 61 74 65 64 20 61 73 20 62 65 6c 6f 6e | .peer.group.are.treated.as.belon |
5a4a0 | 67 69 6e 67 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 65 65 72 20 67 72 6f 75 70 2c 20 61 6e | ging.to.a.default.peer.group,.an |
5a4c0 | 64 20 77 69 6c 6c 20 73 68 61 72 65 20 75 70 64 61 74 65 73 2e 00 50 65 65 72 20 74 6f 20 73 65 | d.will.share.updates..Peer.to.se |
5a4e0 | 6e 64 20 75 6e 69 63 61 73 74 20 55 44 50 20 63 6f 6e 6e 74 72 61 63 6b 20 73 79 6e 63 20 65 6e | nd.unicast.UDP.conntrack.sync.en |
5a500 | 74 69 72 65 73 20 74 6f 2c 20 69 66 20 6e 6f 74 20 75 73 69 6e 67 20 4d 75 6c 74 69 63 61 73 74 | tires.to,.if.not.using.Multicast |
5a520 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 62 6f 76 65 2e | .configuration.from.above.above. |
5a540 | 00 50 65 65 72 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 65 72 20 64 65 66 61 75 6c 74 | .Peers.Configuration.Per.default |
5a560 | 20 56 79 4f 53 73 20 68 61 73 20 6d 69 6e 69 6d 61 6c 20 73 79 73 6c 6f 67 20 6c 6f 67 67 69 6e | .VyOSs.has.minimal.syslog.loggin |
5a580 | 67 20 65 6e 61 62 6c 65 64 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 64 20 61 6e 64 20 72 6f | g.enabled.which.is.stored.and.ro |
5a5a0 | 74 61 74 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 45 72 72 6f 72 73 20 77 69 6c 6c 20 62 65 20 61 6c | tated.locally..Errors.will.be.al |
5a5c0 | 77 61 79 73 20 6c 6f 67 67 65 64 20 74 6f 20 61 20 6c 6f 63 61 6c 20 66 69 6c 65 2c 20 77 68 69 | ways.logged.to.a.local.file,.whi |
5a5e0 | 63 68 20 69 6e 63 6c 75 64 65 73 20 60 6c 6f 63 61 6c 37 60 20 65 72 72 6f 72 20 6d 65 73 73 61 | ch.includes.`local7`.error.messa |
5a600 | 67 65 73 2c 20 65 6d 65 72 67 65 6e 63 79 20 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 62 65 20 | ges,.emergency.messages.will.be. |
5a620 | 73 65 6e 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2c 20 74 6f 6f 2e 00 50 65 72 20 64 65 | sent.to.the.console,.too..Per.de |
5a640 | 66 61 75 6c 74 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 73 61 6d 70 6c 65 64 20 28 74 | fault.every.packet.is.sampled.(t |
5a660 | 68 61 74 20 69 73 2c 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 69 73 20 31 29 2e | hat.is,.the.sampling.rate.is.1). |
5a680 | 00 50 65 72 20 64 65 66 61 75 6c 74 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 | .Per.default.the.user.session.is |
5a6a0 | 20 62 65 69 6e 67 20 72 65 70 6c 61 63 65 64 20 69 66 20 61 20 73 65 63 6f 6e 64 20 61 75 74 68 | .being.replaced.if.a.second.auth |
5a6c0 | 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 73 75 63 63 65 65 64 73 2e 20 53 75 63 | entication.request.succeeds..Suc |
5a6e0 | 68 20 73 65 73 73 69 6f 6e 20 72 65 71 75 65 73 74 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 | h.session.requests.can.be.either |
5a700 | 20 64 65 6e 69 65 64 20 6f 72 20 61 6c 6c 6f 77 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 77 68 69 | .denied.or.allowed.entirely,.whi |
5a720 | 63 68 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 73 65 73 73 69 6f 6e 73 | ch.would.allow.multiple.sessions |
5a740 | 20 66 6f 72 20 61 20 75 73 65 72 20 69 6e 20 74 68 65 20 6c 61 74 74 65 72 20 63 61 73 65 2e 20 | .for.a.user.in.the.latter.case.. |
5a760 | 49 66 20 69 74 20 69 73 20 64 65 6e 69 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 73 65 73 73 | If.it.is.denied,.the.second.sess |
5a780 | 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 6a 65 63 74 65 64 20 65 76 65 6e 20 69 66 20 74 68 | ion.is.being.rejected.even.if.th |
5a7a0 | 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 75 63 63 65 65 64 73 2c 20 74 68 65 20 75 | e.authentication.succeeds,.the.u |
5a7c0 | 73 65 72 20 68 61 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 69 74 73 20 66 69 72 73 74 20 73 | ser.has.to.terminate.its.first.s |
5a7e0 | 65 73 73 69 6f 6e 20 61 6e 64 20 63 61 6e 20 74 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 | ession.and.can.then.authenticati |
5a800 | 6f 6e 20 61 67 61 69 6e 2e 00 50 65 72 20 64 65 66 61 75 6c 74 2c 20 69 6e 74 65 72 66 61 63 65 | on.again..Per.default,.interface |
5a820 | 73 20 75 73 65 64 20 69 6e 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 70 6f 6f 6c 20 | s.used.in.a.load.balancing.pool. |
5a840 | 72 65 70 6c 61 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f 66 20 65 61 63 68 20 6f 75 | replace.the.source.IP.of.each.ou |
5a860 | 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 | tgoing.packet.with.its.own.addre |
5a880 | 73 73 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 65 70 6c 69 65 73 20 61 72 72 69 76 65 | ss.to.ensure.that.replies.arrive |
5a8a0 | 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 77 6f 72 | .on.the.same.interface..This.wor |
5a8c0 | 6b 73 20 74 68 72 6f 75 67 68 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 | ks.through.automatically.generat |
5a8e0 | 65 64 20 73 6f 75 72 63 65 20 4e 41 54 20 28 53 4e 41 54 29 20 72 75 6c 65 73 2c 20 74 68 65 73 | ed.source.NAT.(SNAT).rules,.thes |
5a900 | 65 20 72 75 6c 65 73 20 61 72 65 20 6f 6e 6c 79 20 61 70 70 6c 69 65 64 20 74 6f 20 62 61 6c 61 | e.rules.are.only.applied.to.bala |
5a920 | 6e 63 65 64 20 74 72 61 66 66 69 63 2e 20 49 6e 20 63 61 73 65 73 20 77 68 65 72 65 20 74 68 69 | nced.traffic..In.cases.where.thi |
5a940 | 73 20 62 65 68 61 76 69 6f 75 72 20 69 73 20 6e 6f 74 20 64 65 73 69 72 65 64 2c 20 74 68 65 20 | s.behaviour.is.not.desired,.the. |
5a960 | 61 75 74 6f 6d 61 74 69 63 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 53 4e 41 54 20 72 75 6c | automatic.generation.of.SNAT.rul |
5a980 | 65 73 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 64 3a 00 50 65 72 66 6f 72 6d 61 6e 63 65 00 | es.can.be.disabled:.Performance. |
5a9a0 | 50 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 61 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 69 73 20 | Periodically,.a.hello.packet.is. |
5a9c0 | 73 65 6e 74 20 6f 75 74 20 62 79 20 74 68 65 20 52 6f 6f 74 20 42 72 69 64 67 65 20 61 6e 64 20 | sent.out.by.the.Root.Bridge.and. |
5a9e0 | 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 42 72 69 64 67 65 73 2e 20 48 65 6c 6c 6f 20 70 61 | the.Designated.Bridges..Hello.pa |
5aa00 | 63 6b 65 74 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 69 6e | ckets.are.used.to.communicate.in |
5aa20 | 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 74 68 72 | formation.about.the.topology.thr |
5aa40 | 6f 75 67 68 6f 75 74 20 74 68 65 20 65 6e 74 69 72 65 20 42 72 69 64 67 65 64 20 4c 6f 63 61 6c | oughout.the.entire.Bridged.Local |
5aa60 | 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 2e 00 50 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 | .Area.Network..Ping.command.can. |
5aa80 | 62 65 20 69 6e 74 65 72 72 75 70 74 65 64 20 61 74 20 61 6e 79 20 67 69 76 65 6e 20 74 69 6d 65 | be.interrupted.at.any.given.time |
5aaa0 | 20 75 73 69 6e 67 20 60 60 3c 43 74 72 6c 3e 2b 63 60 60 2e 20 41 20 62 72 69 65 66 20 73 74 61 | .using.``<Ctrl>+c``..A.brief.sta |
5aac0 | 74 69 73 74 69 63 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 77 61 72 64 73 2e 00 50 69 6e 67 | tistic.is.shown.afterwards..Ping |
5aae0 | 20 75 73 65 73 20 49 43 4d 50 20 70 72 6f 74 6f 63 6f 6c 27 73 20 6d 61 6e 64 61 74 6f 72 79 20 | .uses.ICMP.protocol's.mandatory. |
5ab00 | 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 6d 20 74 6f 20 65 6c 69 63 69 74 20 | ECHO_REQUEST.datagram.to.elicit. |
5ab20 | 61 6e 20 49 43 4d 50 20 45 43 48 4f 5f 52 45 53 50 4f 4e 53 45 20 66 72 6f 6d 20 61 20 68 6f 73 | an.ICMP.ECHO_RESPONSE.from.a.hos |
5ab40 | 74 20 6f 72 20 67 61 74 65 77 61 79 2e 20 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 | t.or.gateway..ECHO_REQUEST.datag |
5ab60 | 72 61 6d 73 20 28 70 69 6e 67 73 29 20 77 69 6c 6c 20 68 61 76 65 20 61 6e 20 49 50 20 61 6e 64 | rams.(pings).will.have.an.IP.and |
5ab80 | 20 49 43 4d 50 20 68 65 61 64 65 72 2c 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 22 73 74 72 75 63 | .ICMP.header,.followed.by."struc |
5aba0 | 74 20 74 69 6d 65 76 61 6c 22 20 61 6e 64 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 6e 75 6d 62 | t.timeval".and.an.arbitrary.numb |
5abc0 | 65 72 20 6f 66 20 70 61 64 20 62 79 74 65 73 20 75 73 65 64 20 74 6f 20 66 69 6c 6c 20 6f 75 74 | er.of.pad.bytes.used.to.fill.out |
5abe0 | 20 74 68 65 20 70 61 63 6b 65 74 2e 00 50 69 6e 67 69 6e 67 20 28 49 50 76 36 29 20 74 68 65 20 | .the.packet..Pinging.(IPv6).the. |
5ac00 | 6f 74 68 65 72 20 68 6f 73 74 20 61 6e 64 20 69 6e 74 65 72 63 65 70 74 69 6e 67 20 74 68 65 20 | other.host.and.intercepting.the. |
5ac20 | 74 72 61 66 66 69 63 20 69 6e 20 60 60 65 74 68 31 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f | traffic.in.``eth1``.will.show.yo |
5ac40 | 75 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 69 73 20 65 6e 63 72 79 70 74 65 64 2e 00 50 6c 61 63 | u.the.content.is.encrypted..Plac |
5ac60 | 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 | e.interface.in.given.VRF.instanc |
5ac80 | 65 2e 00 50 6c 61 79 20 61 6e 20 61 75 64 69 62 6c 65 20 62 65 65 70 20 74 6f 20 74 68 65 20 73 | e..Play.an.audible.beep.to.the.s |
5aca0 | 79 73 74 65 6d 20 73 70 65 61 6b 65 72 20 77 68 65 6e 20 73 79 73 74 65 6d 20 69 73 20 72 65 61 | ystem.speaker.when.system.is.rea |
5acc0 | 64 79 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 | dy..Please.be.aware,.due.to.an.u |
5ace0 | 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d | pstream.bug,.config.changes/comm |
5ad00 | 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 | its.will.restart.the.ppp.daemon. |
5ad20 | 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 20 49 50 6f 45 20 73 65 73 | and.will.reset.existing.IPoE.ses |
5ad40 | 73 69 6f 6e 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 | sions,.in.order.to.become.effect |
5ad60 | 69 76 65 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 | ive..Please.be.aware,.due.to.an. |
5ad80 | 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d | upstream.bug,.config.changes/com |
5ada0 | 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e | mits.will.restart.the.ppp.daemon |
5adc0 | 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 20 50 50 50 6f 45 20 63 | .and.will.reset.existing.PPPoE.c |
5ade0 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2c | onnections.from.connected.users, |
5ae00 | 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 | .in.order.to.become.effective..P |
5ae20 | 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 69 70 73 65 63 60 20 | lease.refer.to.the.:ref:`ipsec`. |
5ae40 | 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c | documentation.for.the.individual |
5ae60 | 20 49 50 53 65 63 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 72 | .IPSec.related.options..Please.r |
5ae80 | 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 | efer.to.the.:ref:`tunnel-interfa |
5aea0 | 63 65 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 | ce`.documentation.for.the.indivi |
5aec0 | 64 75 61 6c 20 74 75 6e 6e 65 6c 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 | dual.tunnel.related.options..Ple |
5aee0 | 61 73 65 20 73 65 65 20 74 68 65 20 3a 72 65 66 3a 60 64 68 63 70 2d 64 6e 73 2d 71 75 69 63 6b | ase.see.the.:ref:`dhcp-dns-quick |
5af00 | 2d 73 74 61 72 74 60 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 50 6c 65 61 73 65 20 74 61 | -start`.configuration..Please.ta |
5af20 | 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 3a 72 65 66 3a 60 76 79 6f 73 61 70 69 60 20 | ke.a.look.at.the.:ref:`vyosapi`. |
5af40 | 70 61 67 65 20 66 6f 72 20 61 6e 20 64 65 74 61 69 6c 65 64 20 68 6f 77 2d 74 6f 2e 00 50 6c 65 | page.for.an.detailed.how-to..Ple |
5af60 | 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 43 6f 6e 74 72 69 62 75 74 | ase.take.a.look.at.the.Contribut |
5af80 | 69 6e 67 20 47 75 69 64 65 20 66 6f 72 20 6f 75 72 20 3a 72 65 66 3a 60 64 6f 63 75 6d 65 6e 74 | ing.Guide.for.our.:ref:`document |
5afa0 | 61 74 69 6f 6e 60 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 69 6e 20 74 68 | ation`..Please.take.a.look.in.th |
5afc0 | 65 20 41 75 74 6f 6d 61 74 69 6f 6e 20 73 65 63 74 69 6f 6e 20 74 6f 20 66 69 6e 64 20 73 6f 6d | e.Automation.section.to.find.som |
5afe0 | 65 20 75 73 65 66 75 6c 6c 20 45 78 61 6d 70 6c 65 73 2e 00 50 6c 65 61 73 65 2c 20 72 65 66 65 | e.usefull.Examples..Please,.refe |
5b000 | 72 20 74 6f 20 61 70 70 72 6f 70 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 | r.to.appropiate.section.for.more |
5b020 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 | .information.about.firewall.conf |
5b040 | 69 67 75 72 61 74 69 6f 6e 3a 00 50 6c 65 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 | iguration:.Please,.refer.to.appr |
5b060 | 6f 70 72 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 | opriate.section.for.more.informa |
5b080 | 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | tion.about.firewall.configuratio |
5b0a0 | 6e 3a 00 50 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 66 6f 72 20 66 69 6c 74 65 72 69 | n:.Policies.are.used.for.filteri |
5b0c0 | 6e 67 20 61 6e 64 20 74 72 61 66 66 69 63 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 57 69 74 68 20 | ng.and.traffic.management..With. |
5b0e0 | 70 6f 6c 69 63 69 65 73 2c 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 | policies,.network.administrators |
5b100 | 20 63 6f 75 6c 64 20 66 69 6c 74 65 72 20 61 6e 64 20 74 72 65 61 74 20 74 72 61 66 66 69 63 20 | .could.filter.and.treat.traffic. |
5b120 | 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 00 50 6f 6c 69 63 69 | according.to.their.needs..Polici |
5b140 | 65 73 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 61 72 65 20 64 65 66 69 6e 65 64 | es.for.local.traffic.are.defined |
5b160 | 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 50 6f 6c 69 63 69 65 73 2c 20 69 6e 20 56 | .in.this.section..Policies,.in.V |
5b180 | 79 4f 53 2c 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 46 52 52 20 66 | yOS,.are.implemented.using.FRR.f |
5b1a0 | 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 72 6f 75 74 65 20 6d 61 70 73 2e 20 44 65 74 61 69 6c 65 | iltering.and.route.maps..Detaile |
5b1c0 | 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 46 52 52 20 63 6f 75 6c 64 20 62 65 20 66 6f | d.information.of.FRR.could.be.fo |
5b1e0 | 75 6e 64 20 69 6e 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 | und.in.http://docs.frrouting.org |
5b200 | 2f 00 50 6f 6c 69 63 79 00 50 6f 6c 69 63 79 20 53 65 63 74 69 6f 6e 73 00 50 6f 6c 69 63 79 20 | /.Policy.Policy.Sections.Policy. |
5b220 | 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 73 00 50 6f 6c 69 63 79 20 74 6f 20 74 | for.checking.targets.Policy.to.t |
5b240 | 72 61 63 6b 20 70 72 65 76 69 6f 75 73 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e | rack.previously.established.conn |
5b260 | 65 63 74 69 6f 6e 73 2e 00 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 77 69 | ections..Policy-Based.Routing.wi |
5b280 | 74 68 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 20 75 70 6c 69 6e 6b 73 20 28 73 6f 75 72 63 65 20 | th.multiple.ISP.uplinks.(source. |
5b2a0 | 2e 2f 64 72 61 77 2e 69 6f 2f 70 62 72 5f 65 78 61 6d 70 6c 65 5f 31 2e 64 72 61 77 69 6f 29 00 | ./draw.io/pbr_example_1.drawio). |
5b2c0 | 50 6f 72 74 20 47 72 6f 75 70 73 00 50 6f 72 74 20 4d 69 72 72 6f 72 20 28 53 50 41 4e 29 00 50 | Port.Groups.Port.Mirror.(SPAN).P |
5b2e0 | 6f 72 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 | ort.for.Dynamic.Authorization.Ex |
5b300 | 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 50 6f 72 74 20 6e 61 6d | tension.server.(DM/CoA).Port.nam |
5b320 | 65 20 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 | e.and.description.Port.number.us |
5b340 | 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 39 | ed.by.connection,.default.is.``9 |
5b360 | 32 37 33 60 60 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 | 273``.Port.number.used.by.connec |
5b380 | 74 69 6f 6e 2e 00 50 6f 72 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 | tion..Port.to.listen.for.HTTPS.r |
5b3a0 | 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 20 34 34 33 00 50 6f 72 74 69 6f 6e 73 20 6f 66 | equests;.default.443.Portions.of |
5b3c0 | 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 72 65 20 56 4c 41 4e 2d 61 77 61 72 | .the.network.which.are.VLAN-awar |
5b3e0 | 65 20 28 69 2e 65 2e 2c 20 49 45 45 45 20 38 30 32 2e 31 71 5f 20 63 6f 6e 66 6f 72 6d 61 6e 74 | e.(i.e.,.IEEE.802.1q_.conformant |
5b400 | 29 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 56 4c 41 4e 20 74 61 67 73 2e 20 57 68 65 6e 20 61 20 | ).can.include.VLAN.tags..When.a. |
5b420 | 66 72 61 6d 65 20 65 6e 74 65 72 73 20 74 68 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 | frame.enters.the.VLAN-aware.port |
5b440 | 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 61 20 74 61 67 20 69 73 20 61 64 64 | ion.of.the.network,.a.tag.is.add |
5b460 | 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 74 68 65 20 56 4c 41 4e 20 6d 65 6d 62 65 72 73 | ed.to.represent.the.VLAN.members |
5b480 | 68 69 70 2e 20 45 61 63 68 20 66 72 61 6d 65 20 6d 75 73 74 20 62 65 20 64 69 73 74 69 6e 67 75 | hip..Each.frame.must.be.distingu |
5b4a0 | 69 73 68 61 62 6c 65 20 61 73 20 62 65 69 6e 67 20 77 69 74 68 69 6e 20 65 78 61 63 74 6c 79 20 | ishable.as.being.within.exactly. |
5b4c0 | 6f 6e 65 20 56 4c 41 4e 2e 20 41 20 66 72 61 6d 65 20 69 6e 20 74 68 65 20 56 4c 41 4e 2d 61 77 | one.VLAN..A.frame.in.the.VLAN-aw |
5b4e0 | 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 | are.portion.of.the.network.that. |
5b500 | 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 61 20 56 4c 41 4e 20 74 61 67 20 69 73 20 61 | does.not.contain.a.VLAN.tag.is.a |
5b520 | 73 73 75 6d 65 64 20 74 6f 20 62 65 20 66 6c 6f 77 69 6e 67 20 6f 6e 20 74 68 65 20 6e 61 74 69 | ssumed.to.be.flowing.on.the.nati |
5b540 | 76 65 20 56 4c 41 4e 2e 00 50 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 00 50 72 65 63 65 64 65 | ve.VLAN..Pre-shared.keys.Precede |
5b560 | 6e 63 65 00 50 72 65 65 6d 70 74 69 6f 6e 00 50 72 65 66 65 72 20 61 20 73 70 65 63 69 66 69 63 | nce.Preemption.Prefer.a.specific |
5b580 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 6f 75 74 65 73 20 6f 76 65 72 20 61 6e | .routing.protocol.routes.over.an |
5b5a0 | 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 75 6e 6e 69 6e 67 20 6f | other.routing.protocol.running.o |
5b5c0 | 6e 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 | n.the.same.router..Prefer.higher |
5b5e0 | 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 | .local.preference.routes.to.lowe |
5b600 | 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 77 65 69 67 68 74 20 72 6f | r..Prefer.higher.local.weight.ro |
5b620 | 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 6c 6f 63 | utes.to.lower.routes..Prefer.loc |
5b640 | 61 6c 20 72 6f 75 74 65 73 20 28 73 74 61 74 69 63 73 2c 20 61 67 67 72 65 67 61 74 65 73 2c 20 | al.routes.(statics,.aggregates,. |
5b660 | 72 65 64 69 73 74 72 69 62 75 74 65 64 29 20 74 6f 20 72 65 63 65 69 76 65 64 20 72 6f 75 74 65 | redistributed).to.received.route |
5b680 | 73 2e 00 50 72 65 66 65 72 20 73 68 6f 72 74 65 73 74 20 68 6f 70 2d 63 6f 75 6e 74 20 41 53 5f | s..Prefer.shortest.hop-count.AS_ |
5b6a0 | 50 41 54 48 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 6c 6f 77 65 73 74 20 6f 72 69 67 69 6e 20 | PATHs..Prefer.the.lowest.origin. |
5b6c0 | 74 79 70 65 20 72 6f 75 74 65 2e 20 54 68 61 74 20 69 73 2c 20 70 72 65 66 65 72 20 49 47 50 20 | type.route..That.is,.prefer.IGP. |
5b6e0 | 6f 72 69 67 69 6e 20 72 6f 75 74 65 73 20 74 6f 20 45 47 50 2c 20 74 6f 20 49 6e 63 6f 6d 70 6c | origin.routes.to.EGP,.to.Incompl |
5b700 | 65 74 65 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 | ete.routes..Prefer.the.route.rec |
5b720 | 65 69 76 65 64 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 2c 20 65 42 47 50 20 70 65 65 | eived.from.an.external,.eBGP.pee |
5b740 | 72 20 6f 76 65 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 | r.over.routes.received.from.othe |
5b760 | 72 20 74 79 70 65 73 20 6f 66 20 70 65 65 72 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 | r.types.of.peers..Prefer.the.rou |
5b780 | 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 | te.received.from.the.peer.with.t |
5b7a0 | 68 65 20 68 69 67 68 65 72 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 | he.higher.transport.layer.addres |
5b7c0 | 73 2c 20 61 73 20 61 20 6c 61 73 74 2d 72 65 73 6f 72 74 20 74 69 65 2d 62 72 65 61 6b 65 72 2e | s,.as.a.last-resort.tie-breaker. |
5b7e0 | 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 72 | .Prefer.the.route.with.the.lower |
5b800 | 20 49 47 50 20 63 6f 73 74 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 | .IGP.cost..Prefer.the.route.with |
5b820 | 20 74 68 65 20 6c 6f 77 65 73 74 20 60 72 6f 75 74 65 72 2d 49 44 60 2e 20 49 66 20 74 68 65 20 | .the.lowest.`router-ID`..If.the. |
5b840 | 72 6f 75 74 65 20 68 61 73 20 61 6e 20 60 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 60 20 61 74 74 | route.has.an.`ORIGINATOR_ID`.att |
5b860 | 72 69 62 75 74 65 2c 20 74 68 72 6f 75 67 68 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 2c | ribute,.through.iBGP.reflection, |
5b880 | 20 74 68 65 6e 20 74 68 61 74 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 75 73 65 64 2c 20 6f 74 | .then.that.router.ID.is.used,.ot |
5b8a0 | 68 65 72 77 69 73 65 20 74 68 65 20 60 72 6f 75 74 65 72 2d 49 44 60 20 6f 66 20 74 68 65 20 70 | herwise.the.`router-ID`.of.the.p |
5b8c0 | 65 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 | eer.the.route.was.received.from. |
5b8e0 | 69 73 20 75 73 65 64 2e 00 50 72 65 66 65 72 65 6e 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 | is.used..Preference.associated.w |
5b900 | 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 00 50 72 65 66 69 78 20 43 6f | ith.the.default.router.Prefix.Co |
5b920 | 6e 76 65 72 73 69 6f 6e 00 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 50 72 65 66 69 | nversion.Prefix.Delegation.Prefi |
5b940 | 78 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 50 72 65 66 69 78 20 4c 69 73 74 73 00 50 72 65 66 69 | x.List.Policy.Prefix.Lists.Prefi |
5b960 | 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 6f 6e 2d 6c 69 6e 6b 20 64 65 | x.can.not.be.used.for.on-link.de |
5b980 | 74 65 72 6d 69 6e 61 74 69 6f 6e 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 | termination.Prefix.can.not.be.us |
5b9a0 | 65 64 20 66 6f 72 20 73 74 61 74 65 6c 65 73 73 20 61 64 64 72 65 73 73 20 61 75 74 6f 2d 63 6f | ed.for.stateless.address.auto-co |
5b9c0 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 72 65 66 69 78 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e | nfiguration.Prefix.filtering.can |
5b9e0 | 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 70 | .be.done.using.prefix-list.and.p |
5ba00 | 72 65 66 69 78 2d 6c 69 73 74 36 2e 00 50 72 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 69 6e | refix-list6..Prefix.length.in.in |
5ba20 | 74 65 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 65 71 75 61 6c 20 6f 72 20 62 69 67 67 65 72 20 | terface.must.be.equal.or.bigger. |
5ba40 | 28 69 2e 65 2e 20 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 29 20 74 68 61 6e 20 70 72 65 66 | (i.e..smaller.network).than.pref |
5ba60 | 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 | ix.length.in.network.statement.. |
5ba80 | 46 6f 72 20 65 78 61 6d 70 6c 65 20 73 74 61 74 65 6d 65 6e 74 20 61 62 6f 76 65 20 64 6f 65 73 | For.example.statement.above.does |
5baa0 | 6e 27 74 20 65 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 | n't.enable.ospf.on.interface.wit |
5bac0 | 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 2f 32 33 2c 20 62 75 74 20 69 74 | h.address.192.168.1.1/23,.but.it |
5bae0 | 20 64 6f 65 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 | .does.on.interface.with.address. |
5bb00 | 31 39 32 2e 31 36 38 2e 31 2e 31 32 39 2f 32 35 2e 00 50 72 65 66 69 78 20 6c 69 73 74 73 20 70 | 192.168.1.129/25..Prefix.lists.p |
5bb20 | 72 6f 76 69 64 65 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 75 6c 20 70 72 65 66 69 78 | rovides.the.most.powerful.prefix |
5bb40 | 20 62 61 73 65 64 20 66 69 6c 74 65 72 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 2e 20 49 6e 20 61 | .based.filtering.mechanism..In.a |
5bb60 | 64 64 69 74 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 2d 6c 69 73 74 20 66 75 6e 63 74 69 6f 6e 61 | ddition.to.access-list.functiona |
5bb80 | 6c 69 74 79 2c 20 69 70 20 70 72 65 66 69 78 2d 6c 69 73 74 20 68 61 73 20 70 72 65 66 69 78 20 | lity,.ip.prefix-list.has.prefix. |
5bba0 | 6c 65 6e 67 74 68 20 72 61 6e 67 65 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 50 72 65 66 | length.range.specification..Pref |
5bbc0 | 69 78 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 2e 00 50 72 65 66 69 78 65 73 00 50 72 | ix.to.match.against..Prefixes.Pr |
5bbe0 | 65 70 65 6e 64 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 6c 61 73 74 20 41 53 20 6e 75 6d 62 65 | epend.the.existing.last.AS.numbe |
5bc00 | 72 20 28 74 68 65 20 6c 65 66 74 6d 6f 73 74 20 41 53 4e 29 20 74 6f 20 74 68 65 20 41 53 5f 50 | r.(the.leftmost.ASN).to.the.AS_P |
5bc20 | 41 54 48 2e 00 50 72 65 70 65 6e 64 20 74 68 65 20 67 69 76 65 6e 20 73 74 72 69 6e 67 20 6f 66 | ATH..Prepend.the.given.string.of |
5bc40 | 20 41 53 20 6e 75 6d 62 65 72 73 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 | .AS.numbers.to.the.AS_PATH.of.th |
5bc60 | 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 50 72 69 6e 63 69 70 6c 65 20 6f 66 20 | e.BGP.path's.NLRI..Principle.of. |
5bc80 | 53 4e 4d 50 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 00 50 72 69 6e 74 20 61 20 73 75 6d 6d 61 | SNMP.Communication.Print.a.summa |
5bca0 | 72 79 20 6f 66 20 6e 65 69 67 68 62 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 | ry.of.neighbor.connections.for.t |
5bcc0 | 68 65 20 73 70 65 63 69 66 69 65 64 20 41 46 49 2f 53 41 46 49 20 63 6f 6d 62 69 6e 61 74 69 6f | he.specified.AFI/SAFI.combinatio |
5bce0 | 6e 2e 00 50 72 69 6e 74 20 61 63 74 69 76 65 20 49 50 56 34 20 6f 72 20 49 50 56 36 20 72 6f 75 | n..Print.active.IPV4.or.IPV6.rou |
5bd00 | 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 76 69 61 20 74 68 65 20 56 50 4e 20 53 41 46 49 2e | tes.advertised.via.the.VPN.SAFI. |
5bd20 | 00 50 72 69 6f 72 69 74 79 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 00 50 72 69 6f 72 69 74 | .Priority.Priority.Queue.Priorit |
5bd40 | 79 20 51 75 65 75 65 2c 20 61 73 20 6f 74 68 65 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f | y.Queue,.as.other.non-shaping.po |
5bd60 | 6c 69 63 69 65 73 2c 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f | licies,.is.only.useful.if.your.o |
5bd80 | 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c | utgoing.interface.is.really.full |
5bda0 | 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 | ..If.it.is.not,.VyOS.will.not.ow |
5bdc0 | 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 | n.the.queue.and.Priority.Queue.w |
5bde0 | 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 | ill.have.no.effect..If.there.is. |
5be00 | 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 | bandwidth.available.on.the.physi |
5be20 | 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 50 72 69 6f 72 69 74 | cal.link,.you.can.embed_.Priorit |
5be40 | 79 20 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 | y.Queue.into.a.classful.shaping. |
5be60 | 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 | policy.to.make.sure.it.owns.the. |
5be80 | 71 75 65 75 65 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 20 70 61 63 6b 65 74 73 20 63 61 6e 20 | queue..In.that.case.packets.can. |
5bea0 | 62 65 20 70 72 69 6f 72 69 74 69 7a 65 64 20 62 61 73 65 64 20 6f 6e 20 44 53 43 50 2e 00 50 72 | be.prioritized.based.on.DSCP..Pr |
5bec0 | 69 76 61 74 65 20 56 4c 41 4e 20 70 72 6f 78 79 20 61 72 70 2e 20 42 61 73 69 63 61 6c 6c 79 20 | ivate.VLAN.proxy.arp..Basically. |
5bee0 | 61 6c 6c 6f 77 20 70 72 6f 78 79 20 61 72 70 20 72 65 70 6c 69 65 73 20 62 61 63 6b 20 74 6f 20 | allow.proxy.arp.replies.back.to. |
5bf00 | 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 28 66 72 6f 6d 20 77 68 69 63 68 20 74 | the.same.interface.(from.which.t |
5bf20 | 68 65 20 41 52 50 20 72 65 71 75 65 73 74 2f 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 77 61 73 20 | he.ARP.request/solicitation.was. |
5bf40 | 72 65 63 65 69 76 65 64 29 2e 00 50 72 6f 66 69 6c 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 68 61 | received)..Profile.generation.ha |
5bf60 | 70 70 65 6e 73 20 66 72 6f 6d 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c | ppens.from.the.operational.level |
5bf80 | 20 61 6e 64 20 69 73 20 61 73 20 73 69 6d 70 6c 65 20 61 73 20 69 73 73 75 69 6e 67 20 74 68 65 | .and.is.as.simple.as.issuing.the |
5bfa0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 70 | .following.command.to.create.a.p |
5bfc0 | 72 6f 66 69 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 4b 45 76 32 20 61 | rofile.to.connect.to.the.IKEv2.a |
5bfe0 | 63 63 65 73 73 20 73 65 72 76 65 72 20 61 74 20 60 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 60 | ccess.server.at.``vpn.vyos.net`` |
5c000 | 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 | .with.the.configuration.for.the. |
5c020 | 60 60 72 77 60 60 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | ``rw``.remote-access.connection. |
5c040 | 67 72 6f 75 70 2e 00 50 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 00 50 72 6f 74 65 63 74 | group..Prometheus-client.Protect |
5c060 | 73 20 68 6f 73 74 20 66 72 6f 6d 20 62 72 75 74 65 2d 66 6f 72 63 65 20 61 74 74 61 63 6b 73 20 | s.host.from.brute-force.attacks. |
5c080 | 61 67 61 69 6e 73 74 20 53 53 48 2e 20 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 70 61 | against.SSH..Log.messages.are.pa |
5c0a0 | 72 73 65 64 2c 20 6c 69 6e 65 2d 62 79 2d 6c 69 6e 65 2c 20 66 6f 72 20 72 65 63 6f 67 6e 69 7a | rsed,.line-by-line,.for.recogniz |
5c0c0 | 65 64 20 70 61 74 74 65 72 6e 73 2e 20 49 66 20 61 6e 20 61 74 74 61 63 6b 2c 20 73 75 63 68 20 | ed.patterns..If.an.attack,.such. |
5c0e0 | 61 73 20 73 65 76 65 72 61 6c 20 6c 6f 67 69 6e 20 66 61 69 6c 75 72 65 73 20 77 69 74 68 69 6e | as.several.login.failures.within |
5c100 | 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 2c 20 69 73 20 64 65 74 65 63 74 65 64 2c 20 74 68 65 | .a.few.seconds,.is.detected,.the |
5c120 | 20 6f 66 66 65 6e 64 69 6e 67 20 49 50 20 69 73 20 62 6c 6f 63 6b 65 64 2e 20 4f 66 66 65 6e 64 | .offending.IP.is.blocked..Offend |
5c140 | 65 72 73 20 61 72 65 20 75 6e 62 6c 6f 63 6b 65 64 20 61 66 74 65 72 20 61 20 73 65 74 20 69 6e | ers.are.unblocked.after.a.set.in |
5c160 | 74 65 72 76 61 6c 2e 00 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 77 68 69 63 68 20 65 78 70 65 63 | terval..Protocol.for.which.expec |
5c180 | 74 20 65 6e 74 72 69 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 | t.entries.need.to.be.synchronize |
5c1a0 | 64 2e 00 50 72 6f 74 6f 63 6f 6c 73 00 50 72 6f 74 6f 63 6f 6c 73 20 61 72 65 3a 20 74 63 70 2c | d..Protocols.Protocols.are:.tcp, |
5c1c0 | 20 73 63 74 70 2c 20 64 63 63 70 2c 20 75 64 70 2c 20 69 63 6d 70 20 61 6e 64 20 69 70 76 36 2d | .sctp,.dccp,.udp,.icmp.and.ipv6- |
5c1e0 | 69 63 6d 70 2e 00 50 72 6f 76 69 64 65 20 54 46 54 50 20 73 65 72 76 65 72 20 6c 69 73 74 65 6e | icmp..Provide.TFTP.server.listen |
5c200 | 69 6e 67 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 | ing.on.both.IPv4.and.IPv6.addres |
5c220 | 73 65 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 61 6e 64 20 60 60 32 30 30 31 3a 64 62 38 | ses.``192.0.2.1``.and.``2001:db8 |
5c240 | 3a 3a 31 60 60 20 73 65 72 76 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 60 | ::1``.serving.the.content.from.` |
5c260 | 60 2f 63 6f 6e 66 69 67 2f 74 66 74 70 62 6f 6f 74 60 60 2e 20 55 70 6c 6f 61 64 69 6e 67 20 76 | `/config/tftpboot``..Uploading.v |
5c280 | 69 61 20 54 46 54 50 20 74 6f 20 74 68 69 73 20 73 65 72 76 65 72 20 69 73 20 64 69 73 61 62 6c | ia.TFTP.to.this.server.is.disabl |
5c2a0 | 65 64 2e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 | ed..Provide.a.IPv4.or.IPv6.addre |
5c2c0 | 73 73 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 20 61 20 49 | ss.group.description.Provide.a.I |
5c2e0 | 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 69 | Pv4.or.IPv6.network.group.descri |
5c300 | 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 | ption..Provide.a.description.for |
5c320 | 20 65 61 63 68 20 72 75 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f | .each.rule..Provide.a.descriptio |
5c340 | 6e 20 74 6f 20 74 68 65 20 66 6c 6f 77 20 74 61 62 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 | n.to.the.flow.table..Provide.a.d |
5c360 | 6f 6d 61 69 6e 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 | omain.group.description..Provide |
5c380 | 20 61 20 6d 61 63 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 | .a.mac.group.description..Provid |
5c3a0 | 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 | e.a.port.group.description..Prov |
5c3c0 | 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 61 20 | ide.a.rule-set.description.to.a. |
5c3e0 | 63 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 2e 00 50 72 6f 76 69 64 65 20 61 | custom.firewall.chain..Provide.a |
5c400 | 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 | .rule-set.description..Provide.a |
5c420 | 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 | n.IPv4.or.IPv6.network.group.des |
5c440 | 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 | cription..Provide.an.interface.g |
5c460 | 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 72 20 2d 20 43 75 73 74 | roup.description.Provider.-.Cust |
5c480 | 6f 6d 65 72 00 50 72 6f 76 69 64 65 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 63 6f | omer.Provides.a.backbone.area.co |
5c4a0 | 68 65 72 65 6e 63 65 20 62 79 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 65 73 74 61 62 6c 69 73 | herence.by.virtual.link.establis |
5c4c0 | 68 6d 65 6e 74 2e 00 50 72 6f 76 69 64 65 73 20 61 20 70 65 72 2d 64 65 76 69 63 65 20 63 6f 6e | hment..Provides.a.per-device.con |
5c4e0 | 74 72 6f 6c 20 74 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 74 68 65 20 74 68 72 65 61 | trol.to.enable/disable.the.threa |
5c500 | 64 65 64 20 6d 6f 64 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 4e 41 50 49 20 69 6e 73 74 61 6e | ded.mode.for.all.the.NAPI.instan |
5c520 | 63 65 73 20 6f 66 20 74 68 65 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 2c | ces.of.the.given.network.device, |
5c540 | 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 61 20 64 65 76 69 63 65 20 75 | .without.the.need.for.a.device.u |
5c560 | 70 2f 64 6f 77 6e 2e 00 50 72 6f 78 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 74 | p/down..Proxy.authentication.met |
5c580 | 68 6f 64 2c 20 63 75 72 72 65 6e 74 6c 79 20 6f 6e 6c 79 20 4c 44 41 50 20 69 73 20 73 75 70 70 | hod,.currently.only.LDAP.is.supp |
5c5a0 | 6f 72 74 65 64 2e 00 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 2f 4d 41 43 56 4c 41 4e 20 6f | orted..Pseudo.Ethernet/MACVLAN.o |
5c5c0 | 70 74 69 6f 6e 73 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 | ptions.Pseudo-Ethernet.interface |
5c5e0 | 73 20 63 61 6e 20 6e 6f 74 20 62 65 20 72 65 61 63 68 65 64 20 66 72 6f 6d 20 79 6f 75 72 20 69 | s.can.not.be.reached.from.your.i |
5c600 | 6e 74 65 72 6e 61 6c 20 68 6f 73 74 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 79 6f | nternal.host..This.means.that.yo |
5c620 | 75 20 63 61 6e 20 6e 6f 74 20 74 72 79 20 74 6f 20 70 69 6e 67 20 61 20 50 73 65 75 64 6f 2d 45 | u.can.not.try.to.ping.a.Pseudo-E |
5c640 | 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 | thernet.interface.from.the.host. |
5c660 | 73 79 73 74 65 6d 20 6f 6e 20 77 68 69 63 68 20 69 74 20 69 73 20 64 65 66 69 6e 65 64 2e 20 54 | system.on.which.it.is.defined..T |
5c680 | 68 65 20 70 69 6e 67 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 00 50 73 65 75 64 6f 2d 45 74 68 | he.ping.will.be.lost..Pseudo-Eth |
5c6a0 | 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 69 6e | ernet.interfaces.may.not.work.in |
5c6c0 | 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 69 63 68 20 65 78 70 65 63 74 20 61 20 3a 61 62 | .environments.which.expect.a.:ab |
5c6e0 | 62 72 3a 60 4e 49 43 20 28 4e 65 74 77 6f 72 6b 20 49 6e 74 65 72 66 61 63 65 20 43 61 72 64 29 | br:`NIC.(Network.Interface.Card) |
5c700 | 60 20 74 6f 20 6f 6e 6c 79 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 61 64 64 72 65 73 73 2e | `.to.only.have.a.single.address. |
5c720 | 20 54 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 3a 20 2d 20 56 4d 77 61 72 65 20 6d 61 63 68 69 | .This.applies.to:.-.VMware.machi |
5c740 | 6e 65 73 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 20 2d 20 4e 65 74 | nes.using.default.settings.-.Net |
5c760 | 77 6f 72 6b 20 73 77 69 74 63 68 65 73 20 77 69 74 68 20 73 65 63 75 72 69 74 79 20 73 65 74 74 | work.switches.with.security.sett |
5c780 | 69 6e 67 73 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 | ings.allowing.only.a.single.MAC. |
5c7a0 | 61 64 64 72 65 73 73 20 2d 20 78 44 53 4c 20 6d 6f 64 65 6d 73 20 74 68 61 74 20 74 72 79 20 74 | address.-.xDSL.modems.that.try.t |
5c7c0 | 6f 20 6c 65 61 72 6e 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4e | o.learn.the.MAC.address.of.the.N |
5c7e0 | 49 43 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 6f 72 20 4d 41 43 56 4c 41 4e 20 69 6e | IC.Pseudo-Ethernet.or.MACVLAN.in |
5c800 | 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 73 65 65 6e 20 61 73 20 73 75 62 69 6e 74 65 72 | terfaces.can.be.seen.as.subinter |
5c820 | 66 61 63 65 73 20 74 6f 20 72 65 67 75 6c 61 72 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 | faces.to.regular.ethernet.interf |
5c840 | 61 63 65 73 2e 20 45 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 73 75 62 69 6e 74 65 72 66 61 63 | aces..Each.and.every.subinterfac |
5c860 | 65 20 69 73 20 63 72 65 61 74 65 64 20 61 20 64 69 66 66 65 72 65 6e 74 20 6d 65 64 69 61 20 61 | e.is.created.a.different.media.a |
5c880 | 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 28 4d 41 43 29 20 61 64 64 72 65 73 73 2c 20 66 6f 72 | ccess.control.(MAC).address,.for |
5c8a0 | 20 61 20 73 69 6e 67 6c 65 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 | .a.single.physical.Ethernet.port |
5c8c0 | 2e 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 68 61 | ..Pseudo-.Ethernet.interfaces.ha |
5c8e0 | 76 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 6e 20 | ve.most.of.their.application.in. |
5c900 | 76 69 72 74 75 61 6c 69 7a 65 64 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 2c 00 50 75 62 6c 69 73 | virtualized.environments,.Publis |
5c920 | 68 20 61 20 70 6f 72 74 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 50 75 6c 6c | h.a.port.for.the.container..Pull |
5c940 | 20 61 20 6e 65 77 20 69 6d 61 67 65 20 66 6f 72 20 63 6f 6e 74 61 69 6e 65 72 00 51 69 6e 51 20 | .a.new.image.for.container.QinQ. |
5c960 | 28 38 30 32 2e 31 61 64 29 00 51 6f 53 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 6c 69 73 | (802.1ad).QoS.Queue.size.for.lis |
5c980 | 74 65 6e 69 6e 67 20 74 6f 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b 20 65 76 65 6e 74 73 | tening.to.local.conntrack.events |
5c9a0 | 20 69 6e 20 4d 42 2e 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 | .in.MB..Queue.size.for.syncing.c |
5c9c0 | 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 69 6e 20 4d 42 2e 00 51 75 6f 74 65 73 20 63 | onntrack.entries.in.MB..Quotes.c |
5c9e0 | 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 69 64 65 20 70 61 72 61 6d 65 74 65 72 20 76 61 6c 75 | an.be.used.inside.parameter.valu |
5ca00 | 65 73 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 | es.by.replacing.all.quote.charac |
5ca20 | 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 60 2e | ters.with.the.string.``"``. |
5ca40 | 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 6c 69 74 65 | .They.will.be.replaced.with.lite |
5ca60 | 72 61 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 68 65 6e 20 67 65 6e 65 72 61 | ral.quote.characters.when.genera |
5ca80 | 74 69 6e 67 20 64 68 63 70 64 2e 63 6f 6e 66 2e 00 52 31 20 68 61 73 20 31 39 32 2e 30 2e 32 2e | ting.dhcpd.conf..R1.has.192.0.2. |
5caa0 | 31 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 52 31 20 69 73 20 6d 61 6e 61 | 1/24.&.2001:db8::1/64.R1.is.mana |
5cac0 | 67 65 64 20 74 68 72 6f 75 67 68 20 61 6e 20 6f 75 74 2d 6f 66 2d 62 61 6e 64 20 6e 65 74 77 6f | ged.through.an.out-of-band.netwo |
5cae0 | 72 6b 20 74 68 61 74 20 72 65 73 69 64 65 73 20 69 6e 20 56 52 46 20 60 60 6d 67 6d 74 60 60 00 | rk.that.resides.in.VRF.``mgmt``. |
5cb00 | 52 31 3a 00 52 32 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 32 2f 32 34 20 26 20 32 30 30 31 3a 64 | R1:.R2.has.192.0.2.2/24.&.2001:d |
5cb20 | 62 38 3a 3a 32 2f 36 34 00 52 32 3a 00 52 41 44 49 55 53 00 52 41 44 49 55 53 20 53 65 74 75 70 | b8::2/64.R2:.RADIUS.RADIUS.Setup |
5cb40 | 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 66 65 61 74 75 72 65 73 00 52 41 44 49 55 53 | .RADIUS.advanced.features.RADIUS |
5cb60 | 20 61 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 | .advanced.options.RADIUS.authent |
5cb80 | 69 63 61 74 69 6f 6e 00 52 41 44 49 55 53 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 | ication.RADIUS.bandwidth.shaping |
5cba0 | 20 61 74 74 72 69 62 75 74 65 00 52 41 44 49 55 53 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 49 | .attribute.RADIUS.provides.the.I |
5cbc0 | 50 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 | P.addresses.in.the.example.above |
5cbe0 | 20 76 69 61 20 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2e 00 52 41 44 49 55 53 20 73 | .via.Framed-IP-Address..RADIUS.s |
5cc00 | 65 72 76 65 72 20 61 74 20 60 60 31 39 32 2e 31 36 38 2e 33 2e 31 30 60 60 20 77 69 74 68 20 73 | erver.at.``192.168.3.10``.with.s |
5cc20 | 68 61 72 65 64 2d 73 65 63 72 65 74 20 60 60 56 79 4f 53 50 61 73 73 77 6f 72 64 60 60 00 52 41 | hared-secret.``VyOSPassword``.RA |
5cc40 | 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 | DIUS.servers.could.be.hardened.b |
5cc60 | 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 | y.only.allowing.certain.IP.addre |
5cc80 | 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 | sses.to.connect..As.of.this.the. |
5cca0 | 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 52 41 44 49 55 53 20 71 75 | source.address.of.each.RADIUS.qu |
5ccc0 | 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 52 41 44 49 55 53 20 73 6f | ery.can.be.configured..RADIUS.so |
5cce0 | 75 72 63 65 20 61 64 64 72 65 73 73 00 52 46 43 20 33 37 36 38 20 64 65 66 69 6e 65 73 20 61 20 | urce.address.RFC.3768.defines.a. |
5cd00 | 76 69 72 74 75 61 6c 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 56 52 52 50 | virtual.MAC.address.to.each.VRRP |
5cd20 | 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 69 73 20 76 69 72 74 75 61 6c 20 72 6f | .virtual.router..This.virtual.ro |
5cd40 | 75 74 65 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 | uter.MAC.address.will.be.used.as |
5cd60 | 20 74 68 65 20 73 6f 75 72 63 65 20 69 6e 20 61 6c 6c 20 70 65 72 69 6f 64 69 63 20 56 52 52 50 | .the.source.in.all.periodic.VRRP |
5cd80 | 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 61 63 74 69 76 65 20 6e 6f 64 | .messages.sent.by.the.active.nod |
5cda0 | 65 2e 20 57 68 65 6e 20 74 68 65 20 72 66 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 | e..When.the.rfc3768-compatibilit |
5cdc0 | 79 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 2c 20 61 20 6e 65 77 20 56 52 52 50 20 69 6e 74 65 | y.option.is.set,.a.new.VRRP.inte |
5cde0 | 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 64 2c 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 4d | rface.is.created,.to.which.the.M |
5ce00 | 41 43 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 | AC.address.and.the.virtual.IP.ad |
5ce20 | 64 72 65 73 73 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 2e | dress.is.automatically.assigned. |
5ce40 | 00 52 46 43 20 38 36 38 20 74 69 6d 65 20 73 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 | .RFC.868.time.server.IPv4.addres |
5ce60 | 73 00 52 49 50 00 52 49 50 76 31 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | s.RIP.RIPv1.as.described.in.:rfc |
5ce80 | 3a 60 31 30 35 38 60 00 52 49 50 76 32 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 | :`1058`.RIPv2.as.described.in.:r |
5cea0 | 66 63 3a 60 32 34 35 33 60 00 52 50 4b 49 00 52 53 2d 53 65 72 76 65 72 20 2d 20 52 53 2d 43 6c | fc:`2453`.RPKI.RS-Server.-.RS-Cl |
5cec0 | 69 65 6e 74 00 52 53 41 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 65 72 76 69 63 65 | ient.RSA.can.be.used.for.service |
5cee0 | 73 20 73 75 63 68 20 61 73 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 20 | s.such.as.key.exchanges.and.for. |
5cf00 | 65 6e 63 72 79 70 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 2e 20 54 6f 20 6d 61 6b 65 20 49 50 53 | encryption.purposes..To.make.IPS |
5cf20 | 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 | ec.work.with.dynamic.address.on. |
5cf40 | 6f 6e 65 2f 62 6f 74 68 20 73 69 64 65 73 2c 20 77 65 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 | one/both.sides,.we.will.have.to. |
5cf60 | 75 73 65 20 52 53 41 20 6b 65 79 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e | use.RSA.keys.for.authentication. |
5cf80 | 20 54 68 65 79 20 61 72 65 20 76 65 72 79 20 66 61 73 74 20 61 6e 64 20 65 61 73 79 20 74 6f 20 | .They.are.very.fast.and.easy.to. |
5cfa0 | 73 65 74 75 70 2e 00 52 53 41 2d 4b 65 79 73 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 00 52 61 | setup..RSA-Keys.Random-Detect.Ra |
5cfc0 | 6e 64 6f 6d 2d 44 65 74 65 63 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 | ndom-Detect.could.be.useful.for. |
5cfe0 | 68 65 61 76 79 20 74 72 61 66 66 69 63 2e 20 4f 6e 65 20 75 73 65 20 6f 66 20 74 68 69 73 20 61 | heavy.traffic..One.use.of.this.a |
5d000 | 6c 67 6f 72 69 74 68 6d 20 6d 69 67 68 74 20 62 65 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 62 | lgorithm.might.be.to.prevent.a.b |
5d020 | 61 63 6b 62 6f 6e 65 20 6f 76 65 72 6c 6f 61 64 2e 20 42 75 74 20 6f 6e 6c 79 20 66 6f 72 20 54 | ackbone.overload..But.only.for.T |
5d040 | 43 50 20 28 62 65 63 61 75 73 65 20 64 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 20 63 6f 75 6c | CP.(because.dropped.packets.coul |
5d060 | 64 20 62 65 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 29 2c 20 6e 6f 74 20 66 6f 72 20 55 44 50 | d.be.retransmitted),.not.for.UDP |
5d080 | 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2c 20 64 65 66 61 75 6c 74 20 69 73 20 | ..Range.is.1.to.255,.default.is. |
5d0a0 | 31 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 33 30 30 2c 20 64 65 66 61 75 6c 74 20 69 73 | 1..Range.is.1.to.300,.default.is |
5d0c0 | 20 31 30 2e 00 52 61 74 65 20 43 6f 6e 74 72 6f 6c 00 52 61 74 65 20 6c 69 6d 69 74 00 52 61 74 | .10..Rate.Control.Rate.limit.Rat |
5d0e0 | 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 43 50 55 2d 66 72 69 65 6e 64 6c 79 20 70 6f 6c 69 | e-Control.is.a.CPU-friendly.poli |
5d100 | 63 79 2e 20 59 6f 75 20 6d 69 67 68 74 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 69 74 20 | cy..You.might.consider.using.it. |
5d120 | 77 68 65 6e 20 79 6f 75 20 6a 75 73 74 20 73 69 6d 70 6c 79 20 77 61 6e 74 20 74 6f 20 73 6c 6f | when.you.just.simply.want.to.slo |
5d140 | 77 20 74 72 61 66 66 69 63 20 64 6f 77 6e 2e 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 | w.traffic.down..Rate-Control.is. |
5d160 | 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 74 68 61 74 20 6c 69 6d 69 74 73 20 74 | a.classless.policy.that.limits.t |
5d180 | 68 65 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 74 6f 20 61 20 73 65 74 20 72 61 74 65 2e 20 49 74 | he.packet.flow.to.a.set.rate..It |
5d1a0 | 20 69 73 20 61 20 70 75 72 65 20 73 68 61 70 65 72 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 | .is.a.pure.shaper,.it.does.not.s |
5d1c0 | 63 68 65 64 75 6c 65 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 69 73 20 66 69 6c 74 | chedule.traffic..Traffic.is.filt |
5d1e0 | 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 65 78 70 65 6e 64 69 74 75 72 65 20 6f 66 | ered.based.on.the.expenditure.of |
5d200 | 20 74 6f 6b 65 6e 73 2e 20 54 6f 6b 65 6e 73 20 72 6f 75 67 68 6c 79 20 63 6f 72 72 65 73 70 6f | .tokens..Tokens.roughly.correspo |
5d220 | 6e 64 20 74 6f 20 62 79 74 65 73 2e 00 52 61 77 20 50 61 72 61 6d 65 74 65 72 73 00 52 61 77 20 | nd.to.bytes..Raw.Parameters.Raw. |
5d240 | 70 61 72 61 6d 65 74 65 72 73 20 63 61 6e 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 73 68 61 72 | parameters.can.be.passed.to.shar |
5d260 | 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 2c 20 73 75 62 6e 65 74 20 61 6e 64 20 73 74 61 74 | ed-network-name,.subnet.and.stat |
5d280 | 69 63 2d 6d 61 70 70 69 6e 67 3a 00 52 65 2d 67 65 6e 65 72 61 74 65 64 20 61 20 6b 6e 6f 77 6e | ic-mapping:.Re-generated.a.known |
5d2a0 | 20 70 75 62 2f 70 72 69 76 61 74 65 20 6b 65 79 66 69 6c 65 20 77 68 69 63 68 20 63 61 6e 20 62 | .pub/private.keyfile.which.can.b |
5d2c0 | 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 69 | e.used.to.connect.to.other.servi |
5d2e0 | 63 65 73 20 28 65 2e 67 2e 20 52 50 4b 49 20 63 61 63 68 65 29 2e 00 52 65 2d 67 65 6e 65 72 61 | ces.(e.g..RPKI.cache)..Re-genera |
5d300 | 74 65 64 20 74 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 6f 72 74 69 6f | ted.the.public/private.keyportio |
5d320 | 6e 20 77 68 69 63 68 20 53 53 48 20 75 73 65 73 20 74 6f 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 | n.which.SSH.uses.to.secure.conne |
5d340 | 63 74 69 6f 6e 73 2e 00 52 65 61 63 68 61 62 6c 65 20 54 69 6d 65 00 52 65 61 6c 20 73 65 72 76 | ctions..Reachable.Time.Real.serv |
5d360 | 65 72 00 52 65 61 6c 20 73 65 72 76 65 72 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f | er.Real.server.IP.address.and.po |
5d380 | 72 74 00 52 65 61 6c 20 73 65 72 76 65 72 20 69 73 20 61 75 74 6f 2d 65 78 63 6c 75 64 65 64 20 | rt.Real.server.is.auto-excluded. |
5d3a0 | 69 66 20 70 6f 72 74 20 63 68 65 63 6b 20 77 69 74 68 20 74 68 69 73 20 73 65 72 76 65 72 20 66 | if.port.check.with.this.server.f |
5d3c0 | 61 69 6c 2e 00 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 | ail..Receive.traffic.from.connec |
5d3e0 | 74 69 6f 6e 73 20 63 72 65 61 74 65 64 20 62 79 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 61 | tions.created.by.the.server.is.a |
5d400 | 6c 73 6f 20 62 61 6c 61 6e 63 65 64 2e 20 57 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 | lso.balanced..When.the.local.sys |
5d420 | 74 65 6d 20 73 65 6e 64 73 20 61 6e 20 41 52 50 20 52 65 71 75 65 73 74 20 74 68 65 20 62 6f 6e | tem.sends.an.ARP.Request.the.bon |
5d440 | 64 69 6e 67 20 64 72 69 76 65 72 20 63 6f 70 69 65 73 20 61 6e 64 20 73 61 76 65 73 20 74 68 65 | ding.driver.copies.and.saves.the |
5d460 | 20 70 65 65 72 27 73 20 49 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 | .peer's.IP.information.from.the. |
5d480 | 41 52 50 20 70 61 63 6b 65 74 2e 20 57 68 65 6e 20 74 68 65 20 41 52 50 20 52 65 70 6c 79 20 61 | ARP.packet..When.the.ARP.Reply.a |
5d4a0 | 72 72 69 76 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 69 74 73 20 68 61 72 64 77 61 | rrives.from.the.peer,.its.hardwa |
5d4c0 | 72 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 74 72 69 65 76 65 64 20 61 6e 64 20 74 68 65 20 | re.address.is.retrieved.and.the. |
5d4e0 | 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 69 74 69 61 74 65 73 20 61 6e 20 41 52 50 20 | bonding.driver.initiates.an.ARP. |
5d500 | 72 65 70 6c 79 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 | reply.to.this.peer.assigning.it. |
5d520 | 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 | to.one.of.the.slaves.in.the.bond |
5d540 | 2e 20 41 20 70 72 6f 62 6c 65 6d 61 74 69 63 20 6f 75 74 63 6f 6d 65 20 6f 66 20 75 73 69 6e 67 | ..A.problematic.outcome.of.using |
5d560 | 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 6f 72 20 62 61 6c 61 6e 63 69 6e 67 20 69 | .ARP.negotiation.for.balancing.i |
5d580 | 73 20 74 68 61 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 61 74 20 61 6e 20 41 52 50 20 72 65 71 | s.that.each.time.that.an.ARP.req |
5d5a0 | 75 65 73 74 20 69 73 20 62 72 6f 61 64 63 61 73 74 20 69 74 20 75 73 65 73 20 74 68 65 20 68 61 | uest.is.broadcast.it.uses.the.ha |
5d5c0 | 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 2e 20 48 65 6e 63 | rdware.address.of.the.bond..Henc |
5d5e0 | 65 2c 20 70 65 65 72 73 20 6c 65 61 72 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 | e,.peers.learn.the.hardware.addr |
5d600 | 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 74 68 65 20 62 61 6c 61 6e 63 69 6e | ess.of.the.bond.and.the.balancin |
5d620 | 67 20 6f 66 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 63 6f 6c 6c 61 70 73 65 73 20 74 | g.of.receive.traffic.collapses.t |
5d640 | 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 54 68 69 73 20 69 73 20 68 61 6e | o.the.current.slave..This.is.han |
5d660 | 64 6c 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 75 70 64 61 74 65 73 20 28 41 52 50 20 52 65 70 | dled.by.sending.updates.(ARP.Rep |
5d680 | 6c 69 65 73 29 20 74 6f 20 61 6c 6c 20 74 68 65 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 69 | lies).to.all.the.peers.with.thei |
5d6a0 | 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 68 61 72 64 77 61 72 65 | r.individually.assigned.hardware |
5d6c0 | 20 61 64 64 72 65 73 73 20 73 75 63 68 20 74 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 | .address.such.that.the.traffic.i |
5d6e0 | 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 2e 20 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 | s.redistributed..Receive.traffic |
5d700 | 20 69 73 20 61 6c 73 6f 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 77 68 65 6e 20 61 20 6e 65 | .is.also.redistributed.when.a.ne |
5d720 | 77 20 73 6c 61 76 65 20 69 73 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 | w.slave.is.added.to.the.bond.and |
5d740 | 20 77 68 65 6e 20 61 6e 20 69 6e 61 63 74 69 76 65 20 73 6c 61 76 65 20 69 73 20 72 65 2d 61 63 | .when.an.inactive.slave.is.re-ac |
5d760 | 74 69 76 61 74 65 64 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 69 73 20 64 69 73 | tivated..The.receive.load.is.dis |
5d780 | 74 72 69 62 75 74 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 28 72 6f 75 6e 64 20 72 6f 62 | tributed.sequentially.(round.rob |
5d7a0 | 69 6e 29 20 61 6d 6f 6e 67 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 68 69 67 68 65 73 74 20 73 | in).among.the.group.of.highest.s |
5d7c0 | 70 65 65 64 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 2e 00 52 65 63 65 69 76 65 | peed.slaves.in.the.bond..Receive |
5d7e0 | 64 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 61 20 68 69 67 68 65 | d.RADIUS.attributes.have.a.highe |
5d800 | 72 20 70 72 69 6f 72 69 74 79 20 74 68 61 6e 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 66 69 6e | r.priority.than.parameters.defin |
5d820 | 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c | ed.within.the.CLI.configuration, |
5d840 | 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 62 65 6c 6f 77 2e | .refer.to.the.explanation.below. |
5d860 | 00 52 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 6c 61 72 67 65 72 20 69 6e 73 74 61 6c 6c 61 | .Recommended.for.larger.installa |
5d880 | 74 69 6f 6e 73 2e 00 52 65 64 69 72 65 63 74 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 00 52 65 | tions..Redirect.HTTP.to.HTTPS.Re |
5d8a0 | 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f | direct.Microsoft.RDP.traffic.fro |
5d8c0 | 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 4c 41 4e 2c 20 70 72 69 76 61 74 65 29 20 6e 65 | m.the.internal.(LAN,.private).ne |
5d8e0 | 74 77 6f 72 6b 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 | twork.via.:ref:`destination-nat` |
5d900 | 20 69 6e 20 72 75 6c 65 20 31 31 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 | .in.rule.110.to.the.internal,.pr |
5d920 | 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 20 57 65 20 61 6c 73 6f 20 6e | ivate.host.192.0.2.40..We.also.n |
5d940 | 65 65 64 20 61 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 20 31 31 30 | eed.a.:ref:`source-nat`.rule.110 |
5d960 | 20 66 6f 72 20 74 68 65 20 72 65 76 65 72 73 65 20 70 61 74 68 20 6f 66 20 74 68 65 20 74 72 61 | .for.the.reverse.path.of.the.tra |
5d980 | 66 66 69 63 2e 20 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 | ffic..The.internal.network.192.0 |
5d9a0 | 2e 32 2e 30 2f 32 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 69 6e 74 65 72 66 61 | .2.0/24.is.reachable.via.interfa |
5d9c0 | 63 65 20 60 65 74 68 30 2e 31 30 60 2e 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 | ce.`eth0.10`..Redirect.Microsoft |
5d9e0 | 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 75 74 73 69 64 65 20 28 57 | .RDP.traffic.from.the.outside.(W |
5da00 | 41 4e 2c 20 65 78 74 65 72 6e 61 6c 29 20 77 6f 72 6c 64 20 76 69 61 20 3a 72 65 66 3a 60 64 65 | AN,.external).world.via.:ref:`de |
5da20 | 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 30 30 20 74 6f 20 74 68 | stination-nat`.in.rule.100.to.th |
5da40 | 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 | e.internal,.private.host.192.0.2 |
5da60 | 2e 34 30 2e 00 52 65 64 69 72 65 63 74 20 55 52 4c 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 | .40..Redirect.URL.to.a.new.locat |
5da80 | 69 6f 6e 00 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ion.Redistribution.Configuration |
5daa0 | 00 52 65 64 75 6e 64 61 6e 63 79 20 61 6e 64 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 2e 20 54 68 | .Redundancy.and.load.sharing..Th |
5dac0 | 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 20 61 | ere.are.multiple.NAT66.devices.a |
5dae0 | 74 20 74 68 65 20 65 64 67 65 20 6f 66 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 74 6f | t.the.edge.of.an.IPv6.network.to |
5db00 | 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 70 61 74 68 20 | .another.IPv6.network..The.path. |
5db20 | 74 68 72 6f 75 67 68 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 61 6e 6f 74 | through.the.NAT66.device.to.anot |
5db40 | 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 66 6f 72 6d 73 20 61 6e 20 65 71 75 69 76 61 | her.IPv6.network.forms.an.equiva |
5db60 | 6c 65 6e 74 20 72 6f 75 74 65 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 6c | lent.route,.and.traffic.can.be.l |
5db80 | 6f 61 64 2d 73 68 61 72 65 64 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 | oad-shared.on.these.NAT66.device |
5dba0 | 73 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 | s..In.this.case,.you.can.configu |
5dbc0 | 72 65 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 | re.the.same.source.address.trans |
5dbe0 | 6c 61 74 69 6f 6e 20 72 75 6c 65 73 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 | lation.rules.on.these.NAT66.devi |
5dc00 | 63 65 73 2c 20 73 6f 20 74 68 61 74 20 61 6e 79 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 61 | ces,.so.that.any.NAT66.device.ca |
5dc20 | 6e 20 68 61 6e 64 6c 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 64 69 | n.handle.IPv6.traffic.between.di |
5dc40 | 66 66 65 72 65 6e 74 20 73 69 74 65 73 2e 00 52 65 67 69 73 74 65 72 20 44 4e 53 20 72 65 63 6f | fferent.sites..Register.DNS.reco |
5dc60 | 72 64 20 60 60 65 78 61 6d 70 6c 65 2e 76 79 6f 73 2e 69 6f 60 60 20 6f 6e 20 44 4e 53 20 73 65 | rd.``example.vyos.io``.on.DNS.se |
5dc80 | 72 76 65 72 20 60 60 6e 73 31 2e 76 79 6f 73 2e 69 6f 60 60 00 52 65 67 75 6c 61 72 20 56 4c 41 | rver.``ns1.vyos.io``.Regular.VLA |
5dca0 | 4e 73 20 28 38 30 32 2e 31 71 29 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 | Ns.(802.1q).Regular.expression.t |
5dcc0 | 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 | o.match.against.a.community-list |
5dce0 | 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 | ..Regular.expression.to.match.ag |
5dd00 | 61 69 6e 73 74 20 61 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 52 65 | ainst.a.large.community.list..Re |
5dd20 | 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 | gular.expression.to.match.agains |
5dd40 | 74 20 61 6e 20 41 53 20 70 61 74 68 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 22 36 34 35 30 31 | t.an.AS.path..For.example."64501 |
5dd60 | 20 36 34 35 30 32 22 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d | .64502"..Regular.expression.to.m |
5dd80 | 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 | atch.against.an.extended.communi |
5dda0 | 74 79 20 6c 69 73 74 2c 20 77 68 65 72 65 20 74 65 78 74 20 63 6f 75 6c 64 20 62 65 3a 00 52 65 | ty.list,.where.text.could.be:.Re |
5ddc0 | 6a 65 63 74 20 44 48 43 50 20 6c 65 61 73 65 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 61 64 | ject.DHCP.leases.from.a.given.ad |
5dde0 | 64 72 65 73 73 20 6f 72 20 72 61 6e 67 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 | dress.or.range..This.is.useful.w |
5de00 | 68 65 6e 20 61 20 6d 6f 64 65 6d 20 67 69 76 65 73 20 61 20 6c 6f 63 61 6c 20 49 50 20 77 68 65 | hen.a.modem.gives.a.local.IP.whe |
5de20 | 6e 20 66 69 72 73 74 20 73 74 61 72 74 69 6e 67 2e 00 52 65 6d 65 6d 62 65 72 20 73 6f 75 72 63 | n.first.starting..Remember.sourc |
5de40 | 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 72 65 73 65 74 20 74 68 65 | e.IP.in.seconds.before.reset.the |
5de60 | 69 72 20 73 63 6f 72 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 2e 00 52 | ir.score..The.default.is.1800..R |
5de80 | 65 6d 6f 74 65 20 41 63 63 65 73 73 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f 61 64 | emote.Access.Remote.Access."Road |
5dea0 | 57 61 72 72 69 6f 72 22 20 45 78 61 6d 70 6c 65 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 | Warrior".Example.Remote.Access." |
5dec0 | 52 6f 61 64 57 61 72 72 69 6f 72 22 20 63 6c 69 65 6e 74 73 00 52 65 6d 6f 74 65 20 43 6f 6e 66 | RoadWarrior".clients.Remote.Conf |
5dee0 | 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 52 65 6d 6f 74 65 20 43 6f | iguration.-.Annotated:.Remote.Co |
5df00 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 52 65 6d 6f 74 65 20 48 6f 73 74 00 52 65 6d 6f 74 65 20 | nfiguration:.Remote.Host.Remote. |
5df20 | 55 52 4c 00 52 65 6d 6f 74 65 20 55 52 4c 20 74 6f 20 53 70 6c 75 6e 6b 20 63 6f 6c 6c 65 63 74 | URL.Remote.URL.to.Splunk.collect |
5df40 | 6f 72 00 52 65 6d 6f 74 65 20 55 52 4c 2e 00 52 65 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 | or.Remote.URL..Remote.``InfluxDB |
5df60 | 60 60 20 62 75 63 6b 65 74 20 6e 61 6d 65 00 52 65 6d 6f 74 65 20 64 61 74 61 62 61 73 65 20 6e | ``.bucket.name.Remote.database.n |
5df80 | 61 6d 65 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 | ame..Remote.peer.IP.`<address>`. |
5dfa0 | 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 69 | of.the.second.DHCP.server.in.thi |
5dfc0 | 73 20 66 61 69 6c 6f 76 65 72 20 63 6c 75 73 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 6f 72 74 00 | s.failover.cluster..Remote.port. |
5dfe0 | 52 65 6d 6f 74 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 77 69 6c | Remote.transmission.interval.wil |
5e000 | 6c 20 62 65 20 6d 75 6c 74 69 70 6c 69 65 64 20 62 79 20 74 68 69 73 20 76 61 6c 75 65 00 52 65 | l.be.multiplied.by.this.value.Re |
5e020 | 6e 61 6d 69 6e 67 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 52 41 44 | naming.clients.interfaces.by.RAD |
5e040 | 49 55 53 00 52 65 70 65 61 74 20 74 68 65 20 70 72 6f 63 65 64 75 72 65 20 6f 6e 20 74 68 65 20 | IUS.Repeat.the.procedure.on.the. |
5e060 | 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 52 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 | other.router..Replay.protection. |
5e080 | 52 65 71 75 65 73 74 20 6f 6e 6c 79 20 61 20 74 65 6d 70 6f 72 61 72 79 20 61 64 64 72 65 73 73 | Request.only.a.temporary.address |
5e0a0 | 20 61 6e 64 20 6e 6f 74 20 66 6f 72 6d 20 61 6e 20 49 41 5f 4e 41 20 28 49 64 65 6e 74 69 74 79 | .and.not.form.an.IA_NA.(Identity |
5e0c0 | 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 66 6f 72 20 4e 6f 6e 2d 74 65 6d 70 6f 72 61 72 79 20 41 | .Association.for.Non-temporary.A |
5e0e0 | 64 64 72 65 73 73 65 73 29 20 70 61 72 74 6e 65 72 73 68 69 70 2e 00 52 65 71 75 65 73 74 73 20 | ddresses).partnership..Requests. |
5e100 | 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 67 68 20 60 60 65 74 68 32 60 60 20 61 | are.forwarded.through.``eth2``.a |
5e120 | 73 20 74 68 65 20 60 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 60 00 52 65 71 75 69 | s.the.`upstream.interface`.Requi |
5e140 | 72 65 20 74 68 65 20 70 65 65 72 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 74 73 65 | re.the.peer.to.authenticate.itse |
5e160 | 6c 66 20 75 73 69 6e 67 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 | lf.using.one.of.the.following.pr |
5e180 | 6f 74 6f 63 6f 6c 73 3a 20 70 61 70 2c 20 63 68 61 70 2c 20 6d 73 63 68 61 70 2c 20 6d 73 63 68 | otocols:.pap,.chap,.mschap,.msch |
5e1a0 | 61 70 2d 76 32 2e 00 52 65 71 75 69 72 65 6d 65 6e 74 73 00 52 65 71 75 69 72 65 6d 65 6e 74 73 | ap-v2..Requirements.Requirements |
5e1c0 | 20 74 6f 20 65 6e 61 62 6c 65 20 73 79 6e 70 72 6f 78 79 3a 00 52 65 71 75 69 72 65 6d 65 6e 74 | .to.enable.synproxy:.Requirement |
5e1e0 | 73 3a 00 52 65 73 65 74 00 52 65 73 65 74 20 4f 70 65 6e 56 50 4e 00 52 65 73 65 74 20 63 6f 6d | s:.Reset.Reset.OpenVPN.Reset.com |
5e200 | 6d 61 6e 64 73 00 52 65 73 65 74 73 20 74 68 65 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 | mands.Resets.the.local.DNS.forwa |
5e220 | 72 64 69 6e 67 20 63 61 63 68 65 20 64 61 74 61 62 61 73 65 2e 20 59 6f 75 20 63 61 6e 20 72 65 | rding.cache.database..You.can.re |
5e240 | 73 65 74 20 74 68 65 20 63 61 63 68 65 20 66 6f 72 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 6f 72 | set.the.cache.for.all.entries.or |
5e260 | 20 6f 6e 6c 79 20 66 6f 72 20 65 6e 74 72 69 65 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 | .only.for.entries.to.a.specific. |
5e280 | 64 6f 6d 61 69 6e 2e 00 52 65 73 74 61 72 74 00 52 65 73 74 61 72 74 20 44 48 43 50 20 72 65 6c | domain..Restart.Restart.DHCP.rel |
5e2a0 | 61 79 20 73 65 72 76 69 63 65 00 52 65 73 74 61 72 74 20 44 48 43 50 76 36 20 72 65 6c 61 79 20 | ay.service.Restart.DHCPv6.relay. |
5e2c0 | 61 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 52 65 73 74 61 72 74 20 61 20 67 69 76 | agent.immediately..Restart.a.giv |
5e2e0 | 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 52 65 73 74 61 72 74 20 6d 44 4e 53 20 72 65 70 65 61 74 | en.container.Restart.mDNS.repeat |
5e300 | 65 72 20 73 65 72 76 69 63 65 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 44 48 43 50 20 73 65 72 | er.service..Restart.the.DHCP.ser |
5e320 | 76 65 72 00 52 65 73 74 61 72 74 20 74 68 65 20 49 47 4d 50 20 70 72 6f 78 79 20 70 72 6f 63 65 | ver.Restart.the.IGMP.proxy.proce |
5e340 | 73 73 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 53 53 48 20 64 61 65 6d 6f 6e 20 70 72 6f 63 65 | ss..Restart.the.SSH.daemon.proce |
5e360 | 73 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 69 73 20 6e 6f 74 20 61 | ss,.the.current.session.is.not.a |
5e380 | 66 66 65 63 74 65 64 2c 20 6f 6e 6c 79 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 64 61 65 | ffected,.only.the.background.dae |
5e3a0 | 6d 6f 6e 20 69 73 20 72 65 73 74 61 72 74 65 64 2e 00 52 65 73 74 61 72 74 73 20 74 68 65 20 44 | mon.is.restarted..Restarts.the.D |
5e3c0 | 4e 53 20 72 65 63 75 72 73 6f 72 20 70 72 6f 63 65 73 73 2e 20 54 68 69 73 20 61 6c 73 6f 20 69 | NS.recursor.process..This.also.i |
5e3e0 | 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 | nvalidates.the.local.DNS.forward |
5e400 | 69 6e 67 20 63 61 63 68 65 2e 00 52 65 73 75 6c 74 69 6e 67 20 69 6e 00 52 65 73 75 6c 74 73 20 | ing.cache..Resulting.in.Results. |
5e420 | 69 6e 3a 00 52 65 74 72 61 6e 73 6d 69 74 20 54 69 6d 65 72 00 52 65 74 72 69 65 76 65 20 63 75 | in:.Retransmit.Timer.Retrieve.cu |
5e440 | 72 72 65 6e 74 20 73 74 61 74 69 73 74 69 63 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | rrent.statistics.of.connection.t |
5e460 | 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 76 65 20 63 75 72 72 | racking.subsystem..Retrieve.curr |
5e480 | 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | ent.status.of.connection.trackin |
5e4a0 | 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 76 65 20 70 75 62 6c 69 63 20 6b 65 79 | g.subsystem..Retrieve.public.key |
5e4c0 | 20 70 6f 72 74 69 6f 6e 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 65 64 20 57 49 72 65 47 75 61 | .portion.from.configured.WIreGua |
5e4e0 | 72 64 20 69 6e 74 65 72 66 61 63 65 2e 00 52 65 76 65 72 73 65 2d 70 72 6f 78 79 00 52 6f 75 6e | rd.interface..Reverse-proxy.Roun |
5e500 | 64 20 52 6f 62 69 6e 00 52 6f 75 74 65 20 41 67 67 72 65 67 61 74 69 6f 6e 20 43 6f 6e 66 69 67 | d.Robin.Route.Aggregation.Config |
5e520 | 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 44 61 6d 70 65 6e 69 6e 67 00 52 6f 75 74 65 20 46 69 | uration.Route.Dampening.Route.Fi |
5e540 | 6c 74 65 72 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 20 43 6f 6e 66 69 67 75 72 | ltering.Route.Filtering.Configur |
5e560 | 61 74 69 6f 6e 00 52 6f 75 74 65 20 4d 61 70 00 52 6f 75 74 65 20 4d 61 70 20 50 6f 6c 69 63 79 | ation.Route.Map.Route.Map.Policy |
5e580 | 00 52 6f 75 74 65 20 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 00 52 6f 75 74 65 20 52 65 66 6c | .Route.Redistribution.Route.Refl |
5e5a0 | 65 63 74 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 | ector.Configuration.Route.Select |
5e5c0 | 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | ion.Route.Selection.Configuratio |
5e5e0 | 6e 00 52 6f 75 74 65 20 61 6e 64 20 52 6f 75 74 65 36 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 | n.Route.and.Route6.Policy.Route. |
5e600 | 64 61 6d 70 65 6e 69 6e 67 20 77 69 63 68 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | dampening.wich.described.in.:rfc |
5e620 | 3a 60 32 34 33 39 60 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 69 64 65 6e 74 69 66 79 20 | :`2439`.enables.you.to.identify. |
5e640 | 72 6f 75 74 65 73 20 74 68 61 74 20 72 65 70 65 61 74 65 64 6c 79 20 66 61 69 6c 20 61 6e 64 20 | routes.that.repeatedly.fail.and. |
5e660 | 72 65 74 75 72 6e 2e 20 49 66 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 73 20 65 6e | return..If.route.dampening.is.en |
5e680 | 61 62 6c 65 64 2c 20 61 6e 20 75 6e 73 74 61 62 6c 65 20 72 6f 75 74 65 20 61 63 63 75 6d 75 6c | abled,.an.unstable.route.accumul |
5e6a0 | 61 74 65 73 20 70 65 6e 61 6c 74 69 65 73 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 | ates.penalties.each.time.the.rou |
5e6c0 | 74 65 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 2e 20 49 66 20 74 68 65 20 61 63 63 | te.fails.and.returns..If.the.acc |
5e6e0 | 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 65 78 63 65 65 64 20 61 20 74 68 72 65 | umulated.penalties.exceed.a.thre |
5e700 | 73 68 6f 6c 64 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 64 | shold,.the.route.is.no.longer.ad |
5e720 | 76 65 72 74 69 73 65 64 2e 20 54 68 69 73 20 69 73 20 72 6f 75 74 65 20 73 75 70 70 72 65 73 73 | vertised..This.is.route.suppress |
5e740 | 69 6f 6e 2e 20 52 6f 75 74 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 73 75 70 70 72 | ion..Routes.that.have.been.suppr |
5e760 | 65 73 73 65 64 20 61 72 65 20 72 65 2d 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 72 6f | essed.are.re-entered.into.the.ro |
5e780 | 75 74 69 6e 67 20 74 61 62 6c 65 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 20 61 6d 6f 75 6e 74 | uting.table.only.when.the.amount |
5e7a0 | 20 6f 66 20 74 68 65 69 72 20 70 65 6e 61 6c 74 79 20 66 61 6c 6c 73 20 62 65 6c 6f 77 20 61 20 | .of.their.penalty.falls.below.a. |
5e7c0 | 74 68 72 65 73 68 6f 6c 64 2e 00 52 6f 75 74 65 20 66 69 6c 74 65 72 20 63 61 6e 20 62 65 20 61 | threshold..Route.filter.can.be.a |
5e7e0 | 70 70 6c 69 65 64 20 75 73 69 6e 67 20 61 20 72 6f 75 74 65 2d 6d 61 70 3a 00 52 6f 75 74 65 20 | pplied.using.a.route-map:.Route. |
5e800 | 6d 61 70 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 6c 20 63 6f 6d 6d 61 6e 64 2c 20 74 68 61 74 | map.is.a.powerfull.command,.that |
5e820 | 20 67 69 76 65 73 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 61 20 | .gives.network.administrators.a. |
5e840 | 76 65 72 79 20 75 73 65 66 75 6c 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 74 6f 6f 6c 20 66 6f | very.useful.and.flexible.tool.fo |
5e860 | 72 20 74 72 61 66 66 69 63 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 61 | r.traffic.manipulation..Route.ma |
5e880 | 70 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 6d 61 74 63 68 20 61 20 | ps.can.be.configured.to.match.a. |
5e8a0 | 73 70 65 63 69 66 69 63 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 73 74 61 74 65 2e 20 | specific.RPKI.validation.state.. |
5e8c0 | 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 6c 6f 63 61 | This.allows.the.creation.of.loca |
5e8e0 | 6c 20 70 6f 6c 69 63 69 65 73 2c 20 77 68 69 63 68 20 68 61 6e 64 6c 65 20 42 47 50 20 72 6f 75 | l.policies,.which.handle.BGP.rou |
5e900 | 74 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 74 68 65 20 | tes.based.on.the.outcome.of.the. |
5e920 | 50 72 65 66 69 78 20 4f 72 69 67 69 6e 20 56 61 6c 69 64 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 | Prefix.Origin.Validation..Route. |
5e940 | 6d 65 74 72 69 63 00 52 6f 75 74 65 20 74 61 67 20 74 6f 20 6d 61 74 63 68 2e 00 52 6f 75 74 65 | metric.Route.tag.to.match..Route |
5e960 | 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 52 6f 75 74 65 72 20 4c 69 66 65 74 69 6d 65 | r.Advertisements.Router.Lifetime |
5e980 | 00 52 6f 75 74 65 72 20 72 65 63 65 69 76 65 73 20 44 48 43 50 20 63 6c 69 65 6e 74 20 72 65 71 | .Router.receives.DHCP.client.req |
5e9a0 | 75 65 73 74 73 20 6f 6e 20 60 60 65 74 68 31 60 60 20 61 6e 64 20 72 65 6c 61 79 73 20 74 68 65 | uests.on.``eth1``.and.relays.the |
5e9c0 | 6d 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 61 74 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 | m.to.the.server.at.10.0.1.4.on.` |
5e9e0 | 60 65 74 68 32 60 60 2e 00 52 6f 75 74 65 73 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 61 20 | `eth2``..Routes.exported.from.a. |
5ea00 | 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 74 68 65 20 56 50 4e 20 52 49 42 20 6d 75 73 74 20 | unicast.VRF.to.the.VPN.RIB.must. |
5ea20 | 62 65 20 61 75 67 6d 65 6e 74 65 64 20 62 79 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 3a 00 | be.augmented.by.two.parameters:. |
5ea40 | 52 6f 75 74 65 73 20 6f 6e 20 4e 6f 64 65 20 32 3a 00 52 6f 75 74 65 73 20 74 68 61 74 20 61 72 | Routes.on.Node.2:.Routes.that.ar |
5ea60 | 65 20 73 65 6e 74 20 66 72 6f 6d 20 70 72 6f 76 69 64 65 72 2c 20 72 73 2d 73 65 72 76 65 72 2c | e.sent.from.provider,.rs-server, |
5ea80 | 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 28 6f 72 20 69 66 20 72 | .or.the.peer.local-role.(or.if.r |
5eaa0 | 65 63 65 69 76 65 64 20 62 79 20 63 75 73 74 6f 6d 65 72 2c 20 72 73 2d 63 6c 69 65 6e 74 2c 20 | eceived.by.customer,.rs-client,. |
5eac0 | 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 29 20 77 69 6c 6c 20 62 65 20 | or.the.peer.local-role).will.be. |
5eae0 | 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 6e 65 77 20 4f 6e 6c 79 20 74 6f 20 43 75 73 74 6f 6d | marked.with.a.new.Only.to.Custom |
5eb00 | 65 72 20 28 4f 54 43 29 20 61 74 74 72 69 62 75 74 65 2e 00 52 6f 75 74 65 73 20 77 69 74 68 20 | er.(OTC).attribute..Routes.with. |
5eb20 | 61 20 64 69 73 74 61 6e 63 65 20 6f 66 20 32 35 35 20 61 72 65 20 65 66 66 65 63 74 69 76 65 6c | a.distance.of.255.are.effectivel |
5eb40 | 79 20 64 69 73 61 62 6c 65 64 20 61 6e 64 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 74 | y.disabled.and.not.installed.int |
5eb60 | 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 52 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 | o.the.kernel..Routes.with.this.a |
5eb80 | 74 74 72 69 62 75 74 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 6e 74 20 74 6f 20 79 6f 75 | ttribute.can.only.be.sent.to.you |
5eba0 | 72 20 6e 65 69 67 68 62 6f 72 20 69 66 20 79 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 | r.neighbor.if.your.local-role.is |
5ebc0 | 20 70 72 6f 76 69 64 65 72 20 6f 72 20 72 73 2d 73 65 72 76 65 72 2e 20 52 6f 75 74 65 73 20 77 | .provider.or.rs-server..Routes.w |
5ebe0 | 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 | ith.this.attribute.can.be.receiv |
5ec00 | 65 64 20 6f 6e 6c 79 20 69 66 20 79 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 63 75 | ed.only.if.your.local-role.is.cu |
5ec20 | 73 74 6f 6d 65 72 20 6f 72 20 72 73 2d 63 6c 69 65 6e 74 2e 00 52 6f 75 74 69 6e 65 00 52 6f 75 | stomer.or.rs-client..Routine.Rou |
5ec40 | 74 69 6e 67 00 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 74 68 61 74 20 77 69 6c 6c 20 62 65 | ting.Routing.tables.that.will.be |
5ec60 | 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 72 65 3a 00 52 75 6c 65 20 | .used.in.this.example.are:.Rule. |
5ec80 | 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d | 10.matches.requests.with.the.dom |
5eca0 | 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 31 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 | ain.name.``node1.example.com``.f |
5ecc0 | 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d | orwards.to.the.backend.``bk-api- |
5ece0 | 30 31 60 60 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 | 01``.Rule.10.matches.requests.wi |
5ed00 | 74 68 20 74 68 65 20 65 78 61 63 74 20 55 52 4c 20 70 61 74 68 20 60 60 2f 2e 77 65 6c 6c 2d 6b | th.the.exact.URL.path.``/.well-k |
5ed20 | 6e 6f 77 6e 2f 78 78 78 60 60 20 61 6e 64 20 72 65 64 69 72 65 63 74 73 20 74 6f 20 6c 6f 63 61 | nown/xxx``.and.redirects.to.loca |
5ed40 | 74 69 6f 6e 20 60 60 2f 63 65 72 74 73 2f 60 60 2e 00 52 75 6c 65 20 31 31 30 20 69 73 20 68 69 | tion.``/certs/``..Rule.110.is.hi |
5ed60 | 74 2c 20 73 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 61 63 63 65 70 74 65 64 2e 00 52 75 | t,.so.connection.is.accepted..Ru |
5ed80 | 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 55 52 4c 20 | le.20.matches.requests.with.URL. |
5eda0 | 70 61 74 68 73 20 65 6e 64 69 6e 67 20 69 6e 20 60 60 2f 6d 61 69 6c 60 60 20 6f 72 20 65 78 61 | paths.ending.in.``/mail``.or.exa |
5edc0 | 63 74 20 70 61 74 68 20 60 60 2f 65 6d 61 69 6c 2f 62 61 72 60 60 20 72 65 64 69 72 65 63 74 20 | ct.path.``/email/bar``.redirect. |
5ede0 | 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 70 6f 73 74 66 69 78 2f 60 60 2e 00 52 75 6c 65 20 | to.location.``/postfix/``..Rule. |
5ee00 | 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d | 20.matches.requests.with.the.dom |
5ee20 | 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 32 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 | ain.name.``node2.example.com``.f |
5ee40 | 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d | orwards.to.the.backend.``bk-api- |
5ee60 | 30 32 60 60 00 52 75 6c 65 20 53 74 61 74 75 73 00 52 75 6c 65 2d 53 65 74 73 00 52 75 6c 65 2d | 02``.Rule.Status.Rule-Sets.Rule- |
5ee80 | 73 65 74 20 6f 76 65 72 76 69 65 77 00 52 75 6c 65 73 00 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 | set.overview.Rules.Rules.allow.t |
5eea0 | 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 6f 75 74 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 | o.control.and.route.incoming.tra |
5eec0 | 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e 64 20 62 61 73 65 64 20 6f | ffic.to.specific.backend.based.o |
5eee0 | 6e 20 70 72 65 64 65 66 69 6e 65 64 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 52 75 6c 65 73 20 61 | n.predefined.conditions..Rules.a |
5ef00 | 6c 6c 6f 77 20 74 6f 20 64 65 66 69 6e 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | llow.to.define.matching.criteria |
5ef20 | 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 63 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e | .and.perform.action.accordingly. |
5ef40 | 00 52 75 6c 65 73 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 20 66 6f 72 20 62 6f 74 68 20 | .Rules.will.be.created.for.both. |
5ef60 | 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 | :ref:`source-nat`.and.:ref:`dest |
5ef80 | 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 00 52 75 6e 6e 69 6e 67 20 42 65 68 69 6e 64 20 4e 41 54 | ination-nat`..Running.Behind.NAT |
5efa0 | 00 53 4e 41 54 00 53 4e 41 54 36 34 00 53 4e 41 54 36 36 00 53 4e 4d 50 00 53 4e 4d 50 20 45 78 | .SNAT.SNAT64.SNAT66.SNMP.SNMP.Ex |
5efc0 | 74 65 6e 73 69 6f 6e 73 00 53 4e 4d 50 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 73 00 | tensions.SNMP.Protocol.Versions. |
5efe0 | 53 4e 4d 50 20 63 61 6e 20 77 6f 72 6b 20 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 6f 72 20 61 | SNMP.can.work.synchronously.or.a |
5f000 | 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 2e 20 49 6e 20 73 79 6e 63 68 72 6f 6e 6f 75 73 20 63 6f | synchronously..In.synchronous.co |
5f020 | 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 79 73 74 | mmunication,.the.monitoring.syst |
5f040 | 65 6d 20 71 75 65 72 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 65 72 69 6f 64 69 63 61 6c | em.queries.the.router.periodical |
5f060 | 6c 79 2e 20 49 6e 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 | ly..In.asynchronous,.the.router. |
5f080 | 73 65 6e 64 73 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 22 74 72 61 70 22 | sends.notification.to.the."trap" |
5f0a0 | 20 28 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 68 6f 73 74 29 2e 00 53 4e 4d 50 20 69 73 20 | .(the.monitoring.host)..SNMP.is. |
5f0c0 | 61 20 63 6f 6d 70 6f 6e 65 6e 74 20 6f 66 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 | a.component.of.the.Internet.Prot |
5f0e0 | 6f 63 6f 6c 20 53 75 69 74 65 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 6e 74 | ocol.Suite.as.defined.by.the.Int |
5f100 | 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 20 28 49 45 | ernet.Engineering.Task.Force.(IE |
5f120 | 54 46 29 2e 20 49 74 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 61 20 73 65 74 20 6f 66 20 73 74 61 | TF)..It.consists.of.a.set.of.sta |
5f140 | 6e 64 61 72 64 73 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 69 | ndards.for.network.management,.i |
5f160 | 6e 63 6c 75 64 69 6e 67 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6c 61 79 65 72 20 70 72 | ncluding.an.application.layer.pr |
5f180 | 6f 74 6f 63 6f 6c 2c 20 61 20 64 61 74 61 62 61 73 65 20 73 63 68 65 6d 61 2c 20 61 6e 64 20 61 | otocol,.a.database.schema,.and.a |
5f1a0 | 20 73 65 74 20 6f 66 20 64 61 74 61 20 6f 62 6a 65 63 74 73 2e 00 53 4e 4d 50 20 69 73 20 77 69 | .set.of.data.objects..SNMP.is.wi |
5f1c0 | 64 65 6c 79 20 75 73 65 64 20 69 6e 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 | dely.used.in.network.management. |
5f1e0 | 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 53 4e 4d 50 20 65 78 70 | for.network.monitoring..SNMP.exp |
5f200 | 6f 73 65 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 64 61 74 61 20 69 6e 20 74 68 65 20 66 6f 72 6d | oses.management.data.in.the.form |
5f220 | 20 6f 66 20 76 61 72 69 61 62 6c 65 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 64 20 73 79 73 | .of.variables.on.the.managed.sys |
5f240 | 74 65 6d 73 20 6f 72 67 61 6e 69 7a 65 64 20 69 6e 20 61 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 | tems.organized.in.a.management.i |
5f260 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 65 20 28 4d 49 42 5f 29 20 77 68 69 63 68 20 64 65 73 | nformation.base.(MIB_).which.des |
5f280 | 63 72 69 62 65 20 74 68 65 20 73 79 73 74 65 6d 20 73 74 61 74 75 73 20 61 6e 64 20 63 6f 6e 66 | cribe.the.system.status.and.conf |
5f2a0 | 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 73 65 20 76 61 72 69 61 62 6c 65 73 20 63 61 6e 20 74 | iguration..These.variables.can.t |
5f2c0 | 68 65 6e 20 62 65 20 72 65 6d 6f 74 65 6c 79 20 71 75 65 72 69 65 64 20 28 61 6e 64 2c 20 69 6e | hen.be.remotely.queried.(and,.in |
5f2e0 | 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2c 20 6d 61 6e 69 70 75 6c 61 74 65 64 | .some.circumstances,.manipulated |
5f300 | 29 20 62 79 20 6d 61 6e 61 67 69 6e 67 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 53 4e 4d 50 | ).by.managing.applications..SNMP |
5f320 | 76 32 00 53 4e 4d 50 76 32 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 6e 79 20 61 | v2.SNMPv2.does.not.support.any.a |
5f340 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 2c 20 6f 74 68 65 72 20 | uthentication.mechanisms,.other. |
5f360 | 74 68 61 6e 20 63 6c 69 65 6e 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 73 6f 20 79 | than.client.source.address,.so.y |
5f380 | 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 66 79 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 63 | ou.should.specify.addresses.of.c |
5f3a0 | 6c 69 65 6e 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6d 6f 6e 69 74 6f 72 20 74 68 65 20 72 6f | lients.allowed.to.monitor.the.ro |
5f3c0 | 75 74 65 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 53 4e 4d 50 76 32 20 61 6c 73 6f 20 73 75 70 70 | uter..Note.that.SNMPv2.also.supp |
5f3e0 | 6f 72 74 73 20 6e 6f 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 61 6c 77 61 79 73 20 73 65 | orts.no.encryption.and.always.se |
5f400 | 6e 64 73 20 64 61 74 61 20 69 6e 20 70 6c 61 69 6e 20 74 65 78 74 2e 00 53 4e 4d 50 76 32 20 69 | nds.data.in.plain.text..SNMPv2.i |
5f420 | 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 61 6e 64 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 | s.the.original.and.most.commonly |
5f440 | 20 75 73 65 64 20 76 65 72 73 69 6f 6e 2e 20 46 6f 72 20 61 75 74 68 6f 72 69 7a 69 6e 67 20 63 | .used.version..For.authorizing.c |
5f460 | 6c 69 65 6e 74 73 2c 20 53 4e 4d 50 20 75 73 65 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 | lients,.SNMP.uses.the.concept.of |
5f480 | 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 43 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 79 20 68 61 | .communities..Communities.may.ha |
5f4a0 | 76 65 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 73 65 74 20 74 6f 20 72 65 61 64 20 6f 6e 6c | ve.authorization.set.to.read.onl |
5f4c0 | 79 20 28 74 68 69 73 20 69 73 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 29 20 6f 72 20 74 6f 20 72 65 | y.(this.is.most.common).or.to.re |
5f4e0 | 61 64 20 61 6e 64 20 77 72 69 74 65 20 28 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 | ad.and.write.(this.option.is.not |
5f500 | 20 61 63 74 69 76 65 6c 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 29 2e 00 53 4e 4d 50 76 33 00 | .actively.used.in.VyOS)..SNMPv3. |
5f520 | 53 4e 4d 50 76 33 20 28 76 65 72 73 69 6f 6e 20 33 20 6f 66 20 74 68 65 20 53 4e 4d 50 20 70 72 | SNMPv3.(version.3.of.the.SNMP.pr |
5f540 | 6f 74 6f 63 6f 6c 29 20 69 6e 74 72 6f 64 75 63 65 64 20 61 20 77 68 6f 6c 65 20 73 6c 65 77 20 | otocol).introduced.a.whole.slew. |
5f560 | 6f 66 20 6e 65 77 20 73 65 63 75 72 69 74 79 20 72 65 6c 61 74 65 64 20 66 65 61 74 75 72 65 73 | of.new.security.related.features |
5f580 | 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 74 68 65 | .that.have.been.missing.from.the |
5f5a0 | 20 70 72 65 76 69 6f 75 73 20 76 65 72 73 69 6f 6e 73 2e 20 53 65 63 75 72 69 74 79 20 77 61 73 | .previous.versions..Security.was |
5f5c0 | 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 61 6b 6e 65 73 73 20 6f 66 20 | .one.of.the.biggest.weakness.of. |
5f5e0 | 53 4e 4d 50 20 75 6e 74 69 6c 20 76 33 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 6e | SNMP.until.v3..Authentication.in |
5f600 | 20 53 4e 4d 50 20 56 65 72 73 69 6f 6e 73 20 31 20 61 6e 64 20 32 20 61 6d 6f 75 6e 74 73 20 74 | .SNMP.Versions.1.and.2.amounts.t |
5f620 | 6f 20 6e 6f 74 68 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 70 61 73 73 77 6f 72 64 20 28 | o.nothing.more.than.a.password.( |
5f640 | 63 6f 6d 6d 75 6e 69 74 79 20 73 74 72 69 6e 67 29 20 73 65 6e 74 20 69 6e 20 63 6c 65 61 72 20 | community.string).sent.in.clear. |
5f660 | 74 65 78 74 20 62 65 74 77 65 65 6e 20 61 20 6d 61 6e 61 67 65 72 20 61 6e 64 20 61 67 65 6e 74 | text.between.a.manager.and.agent |
5f680 | 2e 20 45 61 63 68 20 53 4e 4d 50 76 33 20 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 73 20 73 | ..Each.SNMPv3.message.contains.s |
5f6a0 | 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 77 68 69 63 68 20 61 72 65 20 65 6e 63 | ecurity.parameters.which.are.enc |
5f6c0 | 6f 64 65 64 20 61 73 20 61 6e 20 6f 63 74 65 74 20 73 74 72 69 6e 67 2e 20 54 68 65 20 6d 65 61 | oded.as.an.octet.string..The.mea |
5f6e0 | 6e 69 6e 67 20 6f 66 20 74 68 65 73 65 20 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 | ning.of.these.security.parameter |
5f700 | 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 65 63 75 72 69 74 79 20 6d 6f 64 65 6c 20 | s.depends.on.the.security.model. |
5f720 | 62 65 69 6e 67 20 75 73 65 64 2e 00 53 50 41 4e 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 | being.used..SPAN.port.mirroring. |
5f740 | 63 61 6e 20 63 6f 70 79 20 74 68 65 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 74 72 | can.copy.the.inbound/outbound.tr |
5f760 | 61 66 66 69 63 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 74 68 65 20 73 70 | affic.of.the.interface.to.the.sp |
5f780 | 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 69 | ecified.interface,.usually.the.i |
5f7a0 | 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 73 6f 6d | nterface.can.be.connected.to.som |
5f7c0 | 65 20 73 70 65 63 69 61 6c 20 65 71 75 69 70 6d 65 6e 74 2c 20 73 75 63 68 20 61 73 20 62 65 68 | e.special.equipment,.such.as.beh |
5f7e0 | 61 76 69 6f 72 20 63 6f 6e 74 72 6f 6c 20 73 79 73 74 65 6d 2c 20 69 6e 74 72 75 73 69 6f 6e 20 | avior.control.system,.intrusion. |
5f800 | 64 65 74 65 63 74 69 6f 6e 20 73 79 73 74 65 6d 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 6f 6c | detection.system.and.traffic.col |
5f820 | 6c 65 63 74 6f 72 2c 20 61 6e 64 20 63 61 6e 20 63 6f 70 79 20 61 6c 6c 20 72 65 6c 61 74 65 64 | lector,.and.can.copy.all.related |
5f840 | 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 72 74 2e 20 54 68 65 20 62 65 6e | .traffic.from.this.port..The.ben |
5f860 | 65 66 69 74 20 6f 66 20 6d 69 72 72 6f 72 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 | efit.of.mirroring.the.traffic.is |
5f880 | 20 74 68 61 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 69 73 6f 6c 61 74 65 | .that.the.application.is.isolate |
5f8a0 | 64 20 66 72 6f 6d 20 74 68 65 20 73 6f 75 72 63 65 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 6f | d.from.the.source.traffic.and.so |
5f8c0 | 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 69 6e 67 20 64 6f 65 73 20 6e 6f 74 | .application.processing.does.not |
5f8e0 | 20 61 66 66 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 72 20 74 68 65 20 73 79 73 74 65 | .affect.the.traffic.or.the.syste |
5f900 | 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 53 53 48 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 | m.performance..SSH.SSH.:ref:`ssh |
5f920 | 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 00 53 53 48 20 3a | _key_based_authentication`.SSH.: |
5f940 | 72 65 66 3a 60 73 73 68 5f 6f 70 65 72 61 74 69 6f 6e 60 00 53 53 48 20 63 6c 69 65 6e 74 00 53 | ref:`ssh_operation`.SSH.client.S |
5f960 | 53 48 20 70 72 6f 76 69 64 65 73 20 61 20 73 65 63 75 72 65 20 63 68 61 6e 6e 65 6c 20 6f 76 65 | SH.provides.a.secure.channel.ove |
5f980 | 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 69 6e 20 61 20 63 6c 69 65 | r.an.unsecured.network.in.a.clie |
5f9a0 | 6e 74 2d 73 65 72 76 65 72 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 63 6f 6e 6e 65 63 74 69 | nt-server.architecture,.connecti |
5f9c0 | 6e 67 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 77 69 74 | ng.an.SSH.client.application.wit |
5f9e0 | 68 20 61 6e 20 53 53 48 20 73 65 72 76 65 72 2e 20 43 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 | h.an.SSH.server..Common.applicat |
5fa00 | 69 6f 6e 73 20 69 6e 63 6c 75 64 65 20 72 65 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 | ions.include.remote.command-line |
5fa20 | 20 6c 6f 67 69 6e 20 61 6e 64 20 72 65 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 20 65 78 65 63 75 74 | .login.and.remote.command.execut |
5fa40 | 69 6f 6e 2c 20 62 75 74 20 61 6e 79 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 69 63 65 20 63 61 6e | ion,.but.any.network.service.can |
5fa60 | 20 62 65 20 73 65 63 75 72 65 64 20 77 69 74 68 20 53 53 48 2e 20 54 68 65 20 70 72 6f 74 6f 63 | .be.secured.with.SSH..The.protoc |
5fa80 | 6f 6c 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 64 69 73 74 69 6e 67 75 69 73 68 65 73 20 62 | ol.specification.distinguishes.b |
5faa0 | 65 74 77 65 65 6e 20 74 77 6f 20 6d 61 6a 6f 72 20 76 65 72 73 69 6f 6e 73 2c 20 72 65 66 65 72 | etween.two.major.versions,.refer |
5fac0 | 72 65 64 20 74 6f 20 61 73 20 53 53 48 2d 31 20 61 6e 64 20 53 53 48 2d 32 2e 00 53 53 48 20 75 | red.to.as.SSH-1.and.SSH-2..SSH.u |
5fae0 | 73 65 72 6e 61 6d 65 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 6e 20 53 53 48 20 63 6f 6e 6e | sername.to.establish.an.SSH.conn |
5fb00 | 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 53 48 20 | ection.to.the.cache.server..SSH. |
5fb20 | 77 61 73 20 64 65 73 69 67 6e 65 64 20 61 73 20 61 20 72 65 70 6c 61 63 65 6d 65 6e 74 20 66 6f | was.designed.as.a.replacement.fo |
5fb40 | 72 20 54 65 6c 6e 65 74 20 61 6e 64 20 66 6f 72 20 75 6e 73 65 63 75 72 65 64 20 72 65 6d 6f 74 | r.Telnet.and.for.unsecured.remot |
5fb60 | 65 20 73 68 65 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 63 68 20 61 73 20 74 68 65 20 42 65 | e.shell.protocols.such.as.the.Be |
5fb80 | 72 6b 65 6c 65 79 20 72 6c 6f 67 69 6e 2c 20 72 73 68 2c 20 61 6e 64 20 72 65 78 65 63 20 70 72 | rkeley.rlogin,.rsh,.and.rexec.pr |
5fba0 | 6f 74 6f 63 6f 6c 73 2e 20 54 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 73 65 6e 64 20 69 6e | otocols..Those.protocols.send.in |
5fbc0 | 66 6f 72 6d 61 74 69 6f 6e 2c 20 6e 6f 74 61 62 6c 79 20 70 61 73 73 77 6f 72 64 73 2c 20 69 6e | formation,.notably.passwords,.in |
5fbe0 | 20 70 6c 61 69 6e 74 65 78 74 2c 20 72 65 6e 64 65 72 69 6e 67 20 74 68 65 6d 20 73 75 73 63 65 | .plaintext,.rendering.them.susce |
5fc00 | 70 74 69 62 6c 65 20 74 6f 20 69 6e 74 65 72 63 65 70 74 69 6f 6e 20 61 6e 64 20 64 69 73 63 6c | ptible.to.interception.and.discl |
5fc20 | 6f 73 75 72 65 20 75 73 69 6e 67 20 70 61 63 6b 65 74 20 61 6e 61 6c 79 73 69 73 2e 20 54 68 65 | osure.using.packet.analysis..The |
5fc40 | 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 65 64 20 62 79 20 53 53 48 20 69 73 20 69 6e 74 65 6e | .encryption.used.by.SSH.is.inten |
5fc60 | 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 61 | ded.to.provide.confidentiality.a |
5fc80 | 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f 66 20 64 61 74 61 20 6f 76 65 72 20 61 6e 20 75 6e 73 | nd.integrity.of.data.over.an.uns |
5fca0 | 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 49 6e 74 65 | ecured.network,.such.as.the.Inte |
5fcc0 | 72 6e 65 74 2e 00 53 53 49 44 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 | rnet..SSID.to.be.used.in.IEEE.80 |
5fce0 | 32 2e 31 31 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 72 61 6d 65 73 00 53 53 4c 20 43 65 72 74 69 | 2.11.management.frames.SSL.Certi |
5fd00 | 66 69 63 61 74 65 73 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 20 67 65 6e 65 72 61 74 | ficates.SSL.Certificates.generat |
5fd20 | 69 6f 6e 00 53 53 4c 20 6d 61 74 63 68 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 | ion.SSL.match.Server.Name.Indica |
5fd40 | 74 69 6f 6e 20 28 53 4e 49 29 20 6f 70 74 69 6f 6e 3a 00 53 53 54 50 20 43 6c 69 65 6e 74 00 53 | tion.(SNI).option:.SSTP.Client.S |
5fd60 | 53 54 50 20 43 6c 69 65 6e 74 20 4f 70 74 69 6f 6e 73 00 53 53 54 50 20 53 65 72 76 65 72 00 53 | STP.Client.Options.SSTP.Server.S |
5fd80 | 53 54 50 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 4c 69 6e 75 78 2c 20 42 53 44 2c | STP.is.available.for.Linux,.BSD, |
5fda0 | 20 61 6e 64 20 57 69 6e 64 6f 77 73 2e 00 53 53 54 50 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 | .and.Windows..SSTP.remote.server |
5fdc0 | 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 43 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e | .to.connect.to..Can.be.either.an |
5fde0 | 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 53 54 50 20 50 61 72 61 6d 65 74 | .IP.address.or.FQDN..STP.Paramet |
5fe00 | 65 72 00 53 61 6c 74 2d 4d 69 6e 69 6f 6e 00 53 61 6c 74 53 74 61 63 6b 5f 20 69 73 20 50 79 74 | er.Salt-Minion.SaltStack_.is.Pyt |
5fe20 | 68 6f 6e 2d 62 61 73 65 64 2c 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 | hon-based,.open-source.software. |
5fe40 | 66 6f 72 20 65 76 65 6e 74 2d 64 72 69 76 65 6e 20 49 54 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 | for.event-driven.IT.automation,. |
5fe60 | 72 65 6d 6f 74 65 20 74 61 73 6b 20 65 78 65 63 75 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6e 66 69 | remote.task.execution,.and.confi |
5fe80 | 67 75 72 61 74 69 6f 6e 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 53 75 70 70 6f 72 74 69 6e 67 20 | guration.management..Supporting. |
5fea0 | 74 68 65 20 22 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 61 73 20 63 6f 64 65 22 20 61 70 70 | the."infrastructure.as.code".app |
5fec0 | 72 6f 61 63 68 20 74 6f 20 64 61 74 61 20 63 65 6e 74 65 72 20 73 79 73 74 65 6d 20 61 6e 64 20 | roach.to.data.center.system.and. |
5fee0 | 6e 65 74 77 6f 72 6b 20 64 65 70 6c 6f 79 6d 65 6e 74 20 61 6e 64 20 6d 61 6e 61 67 65 6d 65 6e | network.deployment.and.managemen |
5ff00 | 74 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 53 65 63 | t,.configuration.automation,.Sec |
5ff20 | 4f 70 73 20 6f 72 63 68 65 73 74 72 61 74 69 6f 6e 2c 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 | Ops.orchestration,.vulnerability |
5ff40 | 20 72 65 6d 65 64 69 61 74 69 6f 6e 2c 20 61 6e 64 20 68 79 62 72 69 64 20 63 6c 6f 75 64 20 63 | .remediation,.and.hybrid.cloud.c |
5ff60 | 6f 6e 74 72 6f 6c 2e 00 53 61 6d 65 20 61 73 20 65 78 70 6f 72 74 2d 6c 69 73 74 2c 20 62 75 74 | ontrol..Same.as.export-list,.but |
5ff80 | 20 69 74 20 61 70 70 6c 69 65 73 20 74 6f 20 70 61 74 68 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 | .it.applies.to.paths.announced.i |
5ffa0 | 6e 74 6f 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 61 73 20 54 79 70 65 2d 33 20 73 75 6d | nto.specified.area.as.Type-3.sum |
5ffc0 | 6d 61 72 79 2d 4c 53 41 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 | mary-LSAs..This.command.makes.se |
5ffe0 | 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 | nse.in.ABR.only..Sample.configur |
60000 | 61 74 69 6f 6e 20 6f 66 20 53 56 44 20 77 69 74 68 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 | ation.of.SVD.with.VLAN.to.VNI.ma |
60020 | 70 70 69 6e 67 73 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 2e 00 53 61 6d 70 6c 65 20 63 6f | ppings.is.shown.below..Sample.co |
60040 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 73 65 74 75 70 20 4c 44 50 20 6f 6e 20 56 79 4f 53 | nfiguration.to.setup.LDP.on.VyOS |
60060 | 00 53 63 61 6e 6e 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 61 6c | .Scanning.is.not.supported.on.al |
60080 | 6c 20 77 69 72 65 6c 65 73 73 20 64 72 69 76 65 72 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 | l.wireless.drivers.and.wireless. |
600a0 | 68 61 72 64 77 61 72 65 2e 20 52 65 66 65 72 20 74 6f 20 79 6f 75 72 20 64 72 69 76 65 72 20 61 | hardware..Refer.to.your.driver.a |
600c0 | 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 | nd.wireless.hardware.documentati |
600e0 | 6f 6e 20 66 6f 72 20 66 75 72 74 68 65 72 20 64 65 74 61 69 6c 73 2e 00 53 63 72 69 70 74 20 65 | on.for.further.details..Script.e |
60100 | 78 65 63 75 74 69 6f 6e 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 62 65 66 6f 72 65 20 73 65 | xecution.Script.to.run.before.se |
60120 | 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6d 65 73 20 75 70 00 53 63 72 69 70 74 20 | ssion.interface.comes.up.Script. |
60140 | 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 68 | to.run.when.session.interface.ch |
60160 | 61 6e 67 65 64 20 62 79 20 52 41 44 49 55 53 20 43 6f 41 20 68 61 6e 64 6c 69 6e 67 00 53 63 72 | anged.by.RADIUS.CoA.handling.Scr |
60180 | 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 | ipt.to.run.when.session.interfac |
601a0 | 65 20 67 6f 69 6e 67 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 00 53 63 72 69 70 74 20 74 6f 20 72 | e.going.to.terminate.Script.to.r |
601c0 | 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6d | un.when.session.interface.is.com |
601e0 | 70 6c 65 74 65 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 61 6e 64 20 73 74 61 72 74 65 64 00 53 | pletely.configured.and.started.S |
60200 | 63 72 69 70 74 69 6e 67 00 53 65 63 6f 6e 64 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 | cripting.Second.scenario:.apply. |
60220 | 73 6f 75 72 63 65 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 63 6f 6e 6e | source.NAT.for.all.outgoing.conn |
60240 | 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 4c 41 4e 20 31 30 2e 30 2e 30 2e 30 2f 38 2c 20 75 73 69 | ections.from.LAN.10.0.0.0/8,.usi |
60260 | 6e 67 20 33 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 65 71 75 61 6c 20 | ng.3.public.addresses.and.equal. |
60280 | 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 57 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 | distribution..We.will.generate.t |
602a0 | 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 53 65 63 72 65 74 20 66 6f 72 20 44 79 6e | he.hash.randomly..Secret.for.Dyn |
602c0 | 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 | amic.Authorization.Extension.ser |
602e0 | 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 65 63 75 72 69 74 79 00 53 65 63 75 72 69 74 79 2f 61 | ver.(DM/CoA).Security.Security/a |
60300 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 00 53 65 65 20 3a 72 66 63 3a | uthentication.messages.See.:rfc: |
60320 | 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 00 | `7761#section-4.1`.for.details.. |
60340 | 53 65 65 20 62 65 6c 6f 77 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 | See.below.the.different.paramete |
60360 | 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 49 50 76 34 20 2a 2a 73 68 6f 77 | rs.available.for.the.IPv4.**show |
60380 | 2a 2a 20 63 6f 6d 6d 61 6e 64 3a 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 00 53 65 67 6d | **.command:.Segment.Routing.Segm |
603a0 | 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 61 72 | ent.Routing.(SR).is.a.network.ar |
603c0 | 63 68 69 74 65 63 74 75 72 65 20 74 68 61 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 6f | chitecture.that.is.similar.to.so |
603e0 | 75 72 63 65 2d 72 6f 75 74 69 6e 67 20 2e 20 49 6e 20 74 68 69 73 20 61 72 63 68 69 74 65 63 74 | urce-routing...In.this.architect |
60400 | 75 72 65 2c 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 20 61 64 64 73 20 61 20 6c | ure,.the.ingress.router.adds.a.l |
60420 | 69 73 74 20 6f 66 20 73 65 67 6d 65 6e 74 73 2c 20 6b 6e 6f 77 6e 20 61 73 20 53 49 44 73 2c 20 | ist.of.segments,.known.as.SIDs,. |
60440 | 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 61 73 20 69 74 20 65 6e 74 65 72 73 20 74 68 65 20 6e | to.the.packet.as.it.enters.the.n |
60460 | 65 74 77 6f 72 6b 2e 20 54 68 65 73 65 20 73 65 67 6d 65 6e 74 73 20 72 65 70 72 65 73 65 6e 74 | etwork..These.segments.represent |
60480 | 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f | .different.portions.of.the.netwo |
604a0 | 72 6b 20 70 61 74 68 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 74 61 6b | rk.path.that.the.packet.will.tak |
604c0 | 65 2e 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 | e..Segment.Routing.can.be.applie |
604e0 | 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 4c 53 2d 62 61 73 65 64 20 64 61 74 61 | d.to.an.existing.MPLS-based.data |
60500 | 20 70 6c 61 6e 65 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 | .plane.and.defines.a.control.pla |
60520 | 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 2e 20 49 6e 20 4d 50 4c 53 | ne.network.architecture..In.MPLS |
60540 | 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 | .networks,.segments.are.encoded. |
60560 | 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 61 64 64 65 64 20 61 74 20 | as.MPLS.labels.and.are.added.at. |
60580 | 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 54 68 65 73 65 20 4d 50 4c 53 20 6c | the.ingress.router..These.MPLS.l |
605a0 | 61 62 65 6c 73 20 61 72 65 20 74 68 65 6e 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 | abels.are.then.exchanged.and.pop |
605c0 | 75 6c 61 74 65 64 20 62 79 20 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f | ulated.by.Interior.Gateway.Proto |
605e0 | 63 6f 6c 73 20 28 49 47 50 73 29 20 6c 69 6b 65 20 49 53 2d 49 53 20 6f 72 20 4f 53 50 46 20 77 | cols.(IGPs).like.IS-IS.or.OSPF.w |
60600 | 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 6d 6f 73 74 20 49 53 50 73 2e 00 53 | hich.are.running.on.most.ISPs..S |
60620 | 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 | egment.routing.(SR).is.used.by.t |
60640 | 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 | he.IGP.protocols.to.interconnect |
60660 | 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 | .network.devices,.below.configur |
60680 | 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 | ation.shows.how.to.enable.SR.on. |
606a0 | 49 53 2d 49 53 3a 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 | IS-IS:.Segment.routing.(SR).is.u |
606c0 | 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 | sed.by.the.IGP.protocols.to.inte |
606e0 | 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 | rconnect.network.devices,.below. |
60700 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c | configuration.shows.how.to.enabl |
60720 | 65 20 53 52 20 6f 6e 20 4f 53 50 46 3a 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 64 65 | e.SR.on.OSPF:.Segment.routing.de |
60740 | 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 | fines.a.control.plane.network.ar |
60760 | 63 68 69 74 65 63 74 75 72 65 20 61 6e 64 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f | chitecture.and.can.be.applied.to |
60780 | 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 4c 53 20 62 61 73 65 64 20 64 61 74 61 70 6c 61 6e | .an.existing.MPLS.based.dataplan |
607a0 | 65 2e 20 49 6e 20 74 68 65 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 | e..In.the.MPLS.networks,.segment |
607c0 | 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 | s.are.encoded.as.MPLS.labels.and |
607e0 | 20 61 72 65 20 69 6d 70 6f 73 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 | .are.imposed.at.the.ingress.rout |
60800 | 65 72 2e 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 65 78 63 68 61 6e 67 65 64 20 61 6e | er..MPLS.labels.are.exchanged.an |
60820 | 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 47 50 73 20 6c 69 6b 65 20 49 53 2d 49 53 2e 53 | d.populated.by.IGPs.like.IS-IS.S |
60840 | 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 61 73 20 70 65 72 20 52 46 43 38 36 36 37 20 66 6f | egment.Routing.as.per.RFC8667.fo |
60860 | 72 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 74 20 73 75 70 70 6f 72 74 73 20 49 50 | r.MPLS.dataplane..It.supports.IP |
60880 | 76 34 2c 20 49 50 76 36 20 61 6e 64 20 45 43 4d 50 20 61 6e 64 20 68 61 73 20 62 65 65 6e 20 74 | v4,.IPv6.and.ECMP.and.has.been.t |
608a0 | 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 43 69 73 63 6f 20 26 20 4a 75 6e 69 70 65 72 20 72 6f | ested.against.Cisco.&.Juniper.ro |
608c0 | 75 74 65 72 73 2e 68 6f 77 65 76 65 72 2c 74 68 69 73 20 64 65 70 6c 6f 79 6d 65 6e 74 20 69 73 | uters.however,this.deployment.is |
608e0 | 20 73 74 69 6c 6c 20 45 58 50 45 52 49 4d 45 4e 54 41 4c 20 66 6f 72 20 46 52 52 2e 00 53 65 6c | .still.EXPERIMENTAL.for.FRR..Sel |
60900 | 65 63 74 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 75 73 65 64 2e 00 53 65 6c 65 63 74 20 63 69 70 | ect.TLS.version.used..Select.cip |
60920 | 68 65 72 20 73 75 69 74 65 20 75 73 65 64 20 66 6f 72 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 | her.suite.used.for.cryptographic |
60940 | 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6d 61 6e | .operations..This.setting.is.man |
60960 | 64 61 74 6f 72 79 2e 00 53 65 6c 65 63 74 20 68 6f 77 20 6c 61 62 65 6c 73 20 61 72 65 20 61 6c | datory..Select.how.labels.are.al |
60980 | 6c 6f 63 61 74 65 64 20 69 6e 20 74 68 65 20 67 69 76 65 6e 20 56 52 46 2e 20 42 79 20 64 65 66 | located.in.the.given.VRF..By.def |
609a0 | 61 75 6c 74 2c 20 74 68 65 20 70 65 72 2d 76 72 66 20 6d 6f 64 65 20 69 73 20 73 65 6c 65 63 74 | ault,.the.per-vrf.mode.is.select |
609c0 | 65 64 2c 20 61 6e 64 20 6f 6e 65 20 6c 61 62 65 6c 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c | ed,.and.one.label.is.used.for.al |
609e0 | 6c 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 56 52 46 2e 20 54 68 65 20 70 65 72 | l.prefixes.from.the.VRF..The.per |
60a00 | 2d 6e 65 78 74 68 6f 70 20 77 69 6c 6c 20 75 73 65 20 61 20 75 6e 69 71 75 65 20 6c 61 62 65 6c | -nexthop.will.use.a.unique.label |
60a20 | 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 74 68 61 74 20 61 72 65 20 72 65 61 63 68 | .for.all.prefixes.that.are.reach |
60a40 | 61 62 6c 65 20 76 69 61 20 74 68 65 20 73 61 6d 65 20 6e 65 78 74 68 6f 70 2e 00 53 65 6c 66 20 | able.via.the.same.nexthop..Self. |
60a60 | 53 69 67 6e 65 64 20 43 41 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 | Signed.CA.Send.a.Proxy.Protocol. |
60a80 | 76 65 72 73 69 6f 6e 20 31 20 68 65 61 64 65 72 20 28 74 65 78 74 20 66 6f 72 6d 61 74 29 00 53 | version.1.header.(text.format).S |
60aa0 | 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 68 | end.a.Proxy.Protocol.version.2.h |
60ac0 | 65 61 64 65 72 20 28 62 69 6e 61 72 79 20 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 6c 6c 20 44 | eader.(binary.format).Send.all.D |
60ae0 | 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 68 65 20 49 50 76 34 2f 49 50 76 36 20 44 4e 53 20 | NS.queries.to.the.IPv4/IPv6.DNS. |
60b00 | 73 65 72 76 65 72 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 61 64 64 72 65 73 73 | server.specified.under.`<address |
60b20 | 3e 60 20 6f 6e 20 6f 70 74 69 6f 6e 61 6c 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 75 6e | >`.on.optional.port.specified.un |
60b40 | 64 65 72 20 60 3c 70 6f 72 74 3e 60 2e 20 54 68 65 20 70 6f 72 74 20 64 65 66 61 75 6c 74 73 20 | der.`<port>`..The.port.defaults. |
60b60 | 74 6f 20 35 33 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c | to.53..You.can.configure.multipl |
60b80 | 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 68 65 72 65 2e 00 53 65 6e 64 20 65 6d 70 74 79 20 53 | e.nameservers.here..Send.empty.S |
60ba0 | 53 49 44 20 69 6e 20 62 65 61 63 6f 6e 73 20 61 6e 64 20 69 67 6e 6f 72 65 20 70 72 6f 62 65 20 | SID.in.beacons.and.ignore.probe. |
60bc0 | 72 65 71 75 65 73 74 20 66 72 61 6d 65 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 | request.frames.that.do.not.speci |
60be0 | 66 79 20 66 75 6c 6c 20 53 53 49 44 2c 20 69 2e 65 2e 2c 20 72 65 71 75 69 72 65 20 73 74 61 74 | fy.full.SSID,.i.e.,.require.stat |
60c00 | 69 6f 6e 73 20 74 6f 20 6b 6e 6f 77 20 53 53 49 44 2e 00 53 65 6e 74 20 74 6f 20 74 68 65 20 63 | ions.to.know.SSID..Sent.to.the.c |
60c20 | 6c 69 65 6e 74 20 28 4c 41 43 29 20 69 6e 20 74 68 65 20 48 6f 73 74 2d 4e 61 6d 65 20 61 74 74 | lient.(LAC).in.the.Host-Name.att |
60c40 | 72 69 62 75 74 65 00 53 65 72 69 61 6c 20 43 6f 6e 73 6f 6c 65 00 53 65 72 69 61 6c 20 69 6e 74 | ribute.Serial.Console.Serial.int |
60c60 | 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 | erfaces.can.be.any.interface.whi |
60c80 | 63 68 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 | ch.is.directly.connected.to.the. |
60ca0 | 43 50 55 20 6f 72 20 63 68 69 70 73 65 74 20 28 6d 6f 73 74 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 | CPU.or.chipset.(mostly.known.as. |
60cc0 | 61 20 74 74 79 53 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 29 20 6f 72 20 61 6e | a.ttyS.interface.in.Linux).or.an |
60ce0 | 79 20 6f 74 68 65 72 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 | y.other.USB.to.serial.converter. |
60d00 | 28 50 72 6f 6c 69 66 69 63 20 50 4c 32 33 30 33 20 6f 72 20 46 54 44 49 20 46 54 32 33 32 2f 46 | (Prolific.PL2303.or.FTDI.FT232/F |
60d20 | 54 34 32 33 32 20 62 61 73 65 64 20 63 68 69 70 73 29 2e 00 53 65 72 76 65 72 00 53 65 72 76 65 | T4232.based.chips)..Server.Serve |
60d40 | 72 20 43 65 72 74 69 66 69 63 61 74 65 00 53 65 72 76 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 | r.Certificate.Server.Configurati |
60d60 | 6f 6e 00 53 65 72 76 65 72 20 53 69 64 65 00 53 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 | on.Server.Side.Server.configurat |
60d80 | 69 6f 6e 00 53 65 72 76 65 72 20 6e 61 6d 65 73 20 66 6f 72 20 76 69 72 74 75 61 6c 20 68 6f 73 | ion.Server.names.for.virtual.hos |
60da0 | 74 73 20 69 74 20 63 61 6e 20 62 65 20 65 78 61 63 74 2c 20 77 69 6c 64 63 61 72 64 20 6f 72 20 | ts.it.can.be.exact,.wildcard.or. |
60dc0 | 72 65 67 65 78 2e 00 53 65 72 76 65 72 3a 00 53 65 72 76 69 63 65 00 53 65 72 76 69 63 65 20 63 | regex..Server:.Service.Service.c |
60de0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 | onfiguration.is.responsible.for. |
60e00 | 62 69 6e 64 69 6e 67 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 2c 20 77 68 69 6c | binding.to.a.specific.port,.whil |
60e20 | 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 74 65 | e.the.backend.configuration.dete |
60e40 | 72 6d 69 6e 65 73 20 74 68 65 20 74 79 70 65 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e | rmines.the.type.of.load.balancin |
60e60 | 67 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | g.to.be.applied.and.specifies.th |
60e80 | 65 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 53 | e.real.servers.to.be.utilized..S |
60ea0 | 65 74 20 42 46 44 20 70 65 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 76 36 | et.BFD.peer.IPv4.address.or.IPv6 |
60ec0 | 20 61 64 64 72 65 73 73 00 53 65 74 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 | .address.Set.BGP.community-list. |
60ee0 | 74 6f 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 2e 00 53 65 74 20 42 47 50 20 6c 6f 63 61 6c 20 | to.exactly.match..Set.BGP.local. |
60f00 | 70 72 65 66 65 72 65 6e 63 65 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 6f 72 | preference.attribute..Set.BGP.or |
60f20 | 69 67 69 6e 20 63 6f 64 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e 61 74 6f 72 20 49 44 | igin.code..Set.BGP.originator.ID |
60f40 | 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 77 65 69 67 68 74 20 61 74 74 72 69 | .attribute..Set.BGP.weight.attri |
60f60 | 62 75 74 65 00 53 65 74 20 44 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 | bute.Set.DNAT.rule.20.to.only.NA |
60f80 | 54 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 49 50 20 66 72 61 67 6d 65 6e 74 20 6d 61 | T.UDP.packets.Set.IP.fragment.ma |
60fa0 | 74 63 68 2c 20 77 68 65 72 65 3a 00 53 65 74 20 49 50 53 65 63 20 69 6e 62 6f 75 6e 64 20 6d 61 | tch,.where:.Set.IPSec.inbound.ma |
60fc0 | 74 63 68 20 63 72 69 74 65 72 69 61 73 2c 20 77 68 65 72 65 3a 00 53 65 74 20 4f 53 50 46 20 65 | tch.criterias,.where:.Set.OSPF.e |
60fe0 | 78 74 65 72 6e 61 6c 20 6d 65 74 72 69 63 2d 74 79 70 65 2e 00 53 65 74 20 53 4e 41 54 20 72 75 | xternal.metric-type..Set.SNAT.ru |
61000 | 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 | le.20.to.only.NAT.TCP.and.UDP.pa |
61020 | 63 6b 65 74 73 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e | ckets.Set.SNAT.rule.20.to.only.N |
61040 | 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 31 39 32 | AT.packets.arriving.from.the.192 |
61060 | 2e 30 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 | .0.2.0/24.network.Set.SNAT.rule. |
61080 | 33 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 | 30.to.only.NAT.packets.arriving. |
610a0 | 66 72 6f 6d 20 74 68 65 20 32 30 33 2e 30 2e 31 31 33 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 | from.the.203.0.113.0/24.network. |
610c0 | 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 70 6f 72 74 20 6f 66 20 38 30 20 61 6e 64 20 34 34 33 | with.a.source.port.of.80.and.443 |
610e0 | 00 53 65 74 20 53 53 4c 20 63 65 72 74 65 66 69 63 61 74 65 20 3c 6e 61 6d 65 3e 20 66 6f 72 20 | .Set.SSL.certeficate.<name>.for. |
61100 | 73 65 72 76 69 63 65 20 3c 6e 61 6d 65 3e 00 53 65 74 20 54 43 50 2d 4d 53 53 20 28 6d 61 78 69 | service.<name>.Set.TCP-MSS.(maxi |
61120 | 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 29 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 | mum.segment.size).for.the.connec |
61140 | 74 69 6f 6e 00 53 65 74 20 54 54 4c 20 74 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 00 53 65 74 20 | tion.Set.TTL.to.300.seconds.Set. |
61160 | 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 00 53 65 74 20 61 20 63 | Virtual.Tunnel.Interface.Set.a.c |
61180 | 6f 6e 74 61 69 6e 65 72 20 64 65 73 63 72 69 70 74 69 6f 6e 00 53 65 74 20 61 20 64 65 73 74 69 | ontainer.description.Set.a.desti |
611a0 | 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 | nation.and/or.source.address..Ac |
611c0 | 63 65 70 74 65 64 20 69 6e 70 75 74 20 66 6f 72 20 69 70 76 34 3a 00 53 65 74 20 61 20 64 65 73 | cepted.input.for.ipv4:.Set.a.des |
611e0 | 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 41 63 63 | tination.and/or.source.port..Acc |
61200 | 65 70 74 65 64 20 69 6e 70 75 74 3a 00 53 65 74 20 61 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c | epted.input:.Set.a.human.readabl |
61220 | 65 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f | e,.descriptive.alias.for.this.co |
61240 | 6e 6e 65 63 74 69 6f 6e 2e 20 41 6c 69 61 73 20 69 73 20 75 73 65 64 20 62 79 20 65 2e 67 2e 20 | nnection..Alias.is.used.by.e.g.. |
61260 | 74 68 65 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 60 20 63 6f 6d | the.:opcmd:`show.interfaces`.com |
61280 | 6d 61 6e 64 20 6f 72 20 53 4e 4d 50 20 62 61 73 65 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f | mand.or.SNMP.based.monitoring.to |
612a0 | 6f 6c 73 2e 00 53 65 74 20 61 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | ols..Set.a.limit.on.the.maximum. |
612c0 | 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 6c 6f 67 67 65 64 2d 69 6e 20 75 | number.of.concurrent.logged-in.u |
612e0 | 73 65 72 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 74 20 61 20 6d 65 61 6e 69 6e | sers.on.the.system..Set.a.meanin |
61300 | 67 66 75 6c 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 6e 61 6d 65 64 20 61 70 | gful.description..Set.a.named.ap |
61320 | 69 20 6b 65 79 2e 20 45 76 65 72 79 20 6b 65 79 20 68 61 73 20 74 68 65 20 73 61 6d 65 2c 20 66 | i.key..Every.key.has.the.same,.f |
61340 | 75 6c 6c 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 | ull.permissions.on.the.system..S |
61360 | 65 74 20 61 20 72 75 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 73 70 65 | et.a.rule.description..Set.a.spe |
61380 | 63 69 66 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 61 20 73 70 65 | cific.connection.mark..Set.a.spe |
613a0 | 63 69 66 69 63 20 70 61 63 6b 65 74 20 6d 61 72 6b 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 66 6f | cific.packet.mark..Set.action.fo |
613c0 | 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 61 63 74 69 | r.the.route-map.policy..Set.acti |
613e0 | 6f 6e 20 74 6f 20 74 61 6b 65 20 6f 6e 20 65 6e 74 72 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 | on.to.take.on.entries.matching.t |
61400 | 68 69 73 20 72 75 6c 65 2e 00 53 65 74 20 61 6e 20 41 50 49 2d 4b 45 59 20 69 73 20 74 68 65 20 | his.rule..Set.an.API-KEY.is.the. |
61420 | 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 77 | minimal.configuration.to.get.a.w |
61440 | 6f 72 6b 69 6e 67 20 41 50 49 20 45 6e 64 70 6f 69 6e 74 2e 00 53 65 74 20 61 75 74 68 65 6e 74 | orking.API.Endpoint..Set.authent |
61460 | 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | ication.backend..The.configured. |
61480 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 20 69 73 20 75 73 65 64 20 66 | authentication.backend.is.used.f |
614a0 | 6f 72 20 61 6c 6c 20 71 75 65 72 69 65 73 2e 00 53 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 | or.all.queries..Set.container.ca |
614c0 | 70 61 62 69 6c 69 74 69 65 73 20 6f 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 2e 00 53 65 74 20 64 | pabilities.or.permissions..Set.d |
614e0 | 65 6c 61 79 20 62 65 74 77 65 65 6e 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 | elay.between.gratuitous.ARP.mess |
61500 | 61 67 65 73 20 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 64 | ages.sent.on.an.interface..Set.d |
61520 | 65 6c 61 79 20 66 6f 72 20 73 65 63 6f 6e 64 20 73 65 74 20 6f 66 20 67 72 61 74 75 69 74 6f 75 | elay.for.second.set.of.gratuitou |
61540 | 73 20 41 52 50 73 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 45 | s.ARPs.after.transition.to.MASTE |
61560 | 52 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 60 3c 74 65 78 74 3e 60 20 66 6f 72 20 | R..Set.description.`<text>`.for. |
61580 | 64 79 6e 61 6d 69 63 20 44 4e 53 20 73 65 72 76 69 63 65 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 | dynamic.DNS.service.being.config |
615a0 | 75 72 65 64 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 61 73 2d 70 61 74 | ured..Set.description.for.as-pat |
615c0 | 68 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 | h-list.policy..Set.description.f |
615e0 | 6f 72 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 | or.community-list.policy..Set.de |
61600 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 | scription.for.extcommunity-list. |
61620 | 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 6c 61 72 67 | policy..Set.description.for.larg |
61640 | 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 | e-community-list.policy..Set.des |
61660 | 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 69 6e 20 49 50 76 36 20 70 72 65 66 69 78 | cription.for.rule.in.IPv6.prefix |
61680 | 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 | -list..Set.description.for.rule. |
616a0 | 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 | in.the.prefix-list..Set.descript |
616c0 | 69 6f 6e 20 66 6f 72 20 72 75 6c 65 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f | ion.for.rule..Set.description.fo |
616e0 | 72 20 74 68 65 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 | r.the.IPv6.access.list..Set.desc |
61700 | 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 | ription.for.the.IPv6.prefix-list |
61720 | 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 | .policy..Set.description.for.the |
61740 | 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f | .access.list..Set.description.fo |
61760 | 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 | r.the.prefix-list.policy..Set.de |
61780 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 | scription.for.the.route-map.poli |
617a0 | 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 75 6c 65 | cy..Set.description.for.the.rule |
617c0 | 20 69 6e 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 | .in.the.route-map.policy..Set.de |
617e0 | 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 | scription.of.the.peer.or.peer.gr |
61800 | 6f 75 70 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 64 65 73 74 69 6e | oup..Set.description..Set.destin |
61820 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 | ation.address.or.prefix.to.match |
61840 | 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | ..Set.destination.routing.protoc |
61860 | 6f 6c 20 6d 65 74 72 69 63 2e 20 41 64 64 20 6f 72 20 73 75 62 74 72 61 63 74 20 6d 65 74 72 69 | ol.metric..Add.or.subtract.metri |
61880 | 63 2c 20 6f 72 20 73 65 74 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2e 00 53 65 74 20 65 74 68 31 | c,.or.set.metric.value..Set.eth1 |
618a0 | 20 74 6f 20 62 65 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 66 | .to.be.the.listening.interface.f |
618c0 | 6f 72 20 74 68 65 20 44 48 43 50 76 36 20 72 65 6c 61 79 2e 00 53 65 74 20 65 78 65 63 75 74 69 | or.the.DHCPv6.relay..Set.executi |
618e0 | 6f 6e 20 74 69 6d 65 20 69 6e 20 63 6f 6d 6d 6f 6e 20 63 72 6f 6e 5f 20 74 69 6d 65 20 66 6f 72 | on.time.in.common.cron_.time.for |
61900 | 6d 61 74 2e 20 41 20 63 72 6f 6e 20 60 3c 73 70 65 63 3e 60 20 6f 66 20 60 60 33 30 20 2a 2f 36 | mat..A.cron.`<spec>`.of.``30.*/6 |
61920 | 20 2a 20 2a 20 2a 60 60 20 77 6f 75 6c 64 20 65 78 65 63 75 74 65 20 74 68 65 20 60 3c 74 61 73 | .*.*.*``.would.execute.the.`<tas |
61940 | 6b 3e 60 20 61 74 20 6d 69 6e 75 74 65 20 33 30 20 70 61 73 74 20 65 76 65 72 79 20 36 74 68 20 | k>`.at.minute.30.past.every.6th. |
61960 | 68 6f 75 72 2e 00 53 65 74 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 20 62 61 6e 64 77 69 64 74 68 | hour..Set.extcommunity.bandwidth |
61980 | 00 53 65 74 20 69 66 20 61 6e 74 65 6e 6e 61 20 70 61 74 74 65 72 6e 20 64 6f 65 73 20 6e 6f 74 | .Set.if.antenna.pattern.does.not |
619a0 | 20 63 68 61 6e 67 65 20 64 75 72 69 6e 67 20 74 68 65 20 6c 69 66 65 74 69 6d 65 20 6f 66 20 61 | .change.during.the.lifetime.of.a |
619c0 | 6e 20 61 73 73 6f 63 69 61 74 69 6f 6e 00 53 65 74 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 | n.association.Set.inbound.interf |
619e0 | 61 63 65 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 | ace.to.match..Set.interfaces.to. |
61a00 | 61 20 7a 6f 6e 65 2e 20 41 20 7a 6f 6e 65 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 | a.zone..A.zone.can.have.multiple |
61a20 | 20 69 6e 74 65 72 66 61 63 65 73 2e 20 42 75 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 | .interfaces..But.an.interface.ca |
61a40 | 6e 20 6f 6e 6c 79 20 62 65 20 61 20 6d 65 6d 62 65 72 20 69 6e 20 6f 6e 65 20 7a 6f 6e 65 2e 00 | n.only.be.a.member.in.one.zone.. |
61a60 | 53 65 74 20 6c 6f 63 61 6c 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 | Set.local.:abbr:`ASN.(Autonomous |
61a80 | 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 | .System.Number)`.that.this.route |
61aa0 | 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 73 20 69 73 20 61 20 61 20 6d 61 6e 64 61 74 | r.represents..This.is.a.a.mandat |
61ac0 | 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6c 6f 63 61 6c 20 61 75 74 6f 6e 6f 6d 6f 75 73 | ory.option!.Set.local.autonomous |
61ae0 | 20 73 79 73 74 65 6d 20 6e 75 6d 62 65 72 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 | .system.number.that.this.router. |
61b00 | 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 | represents..This.is.a.mandatory. |
61b20 | 6f 70 74 69 6f 6e 21 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 | option!.Set.match.criteria.based |
61b40 | 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 6d 61 74 63 68 20 63 | .on.connection.mark..Set.match.c |
61b60 | 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 | riteria.based.on.destination.por |
61b80 | 74 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 | t,.where.<match_criteria>.could. |
61ba0 | 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 | be:.Set.match.criteria.based.on. |
61bc0 | 73 65 73 73 69 6f 6e 20 73 74 61 74 65 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 | session.state..Set.match.criteri |
61be0 | 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e | a.based.on.source.or.destination |
61c00 | 20 67 72 6f 75 70 73 2c 20 77 68 65 72 65 20 3c 74 65 78 74 3e 20 77 6f 75 6c 64 20 62 65 20 74 | .groups,.where.<text>.would.be.t |
61c20 | 68 65 20 67 72 6f 75 70 20 6e 61 6d 65 2f 69 64 65 6e 74 69 66 69 65 72 2e 20 50 72 65 70 65 6e | he.group.name/identifier..Prepen |
61c40 | 64 20 63 68 61 72 61 63 74 65 72 20 27 21 27 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 | d.character.'!'.for.inverted.mat |
61c60 | 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 | ching.criteria..Set.match.criter |
61c80 | 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f | ia.based.on.source.or.destinatio |
61ca0 | 6e 20 69 70 76 34 7c 69 70 76 36 20 61 64 64 72 65 73 73 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 | n.ipv4|ipv6.address,.where.<matc |
61cc0 | 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 | h_criteria>.could.be:.Set.match. |
61ce0 | 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 74 63 70 20 66 6c 61 67 73 2e 20 41 6c 6c | criteria.based.on.tcp.flags..All |
61d00 | 6f 77 65 64 20 76 61 6c 75 65 73 20 66 6f 72 20 54 43 50 20 66 6c 61 67 73 3a 20 53 59 4e 20 41 | owed.values.for.TCP.flags:.SYN.A |
61d20 | 43 4b 20 46 49 4e 20 52 53 54 20 55 52 47 20 50 53 48 20 41 4c 4c 2e 20 57 68 65 6e 20 73 70 65 | CK.FIN.RST.URG.PSH.ALL..When.spe |
61d40 | 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 | cifying.more.than.one.flag,.flag |
61d60 | 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 2e 20 46 6f 72 | s.should.be.comma-separated..For |
61d80 | 20 65 78 61 6d 70 6c 65 20 3a 20 76 61 6c 75 65 20 6f 66 20 27 53 59 4e 2c 21 41 43 4b 2c 21 46 | .example.:.value.of.'SYN,!ACK,!F |
61da0 | 49 4e 2c 21 52 53 54 27 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 | IN,!RST'.will.only.match.packets |
61dc0 | 20 77 69 74 68 20 74 68 65 20 53 59 4e 20 66 6c 61 67 20 73 65 74 2c 20 61 6e 64 20 74 68 65 20 | .with.the.SYN.flag.set,.and.the. |
61de0 | 41 43 4b 2c 20 46 49 4e 20 61 6e 64 20 52 53 54 20 66 6c 61 67 73 20 75 6e 73 65 74 2e 00 53 65 | ACK,.FIN.and.RST.flags.unset..Se |
61e00 | 74 20 6d 61 78 69 6d 75 6d 20 60 3c 73 69 7a 65 3e 60 20 6f 66 20 44 48 43 50 20 70 61 63 6b 65 | t.maximum.`<size>`.of.DHCP.packe |
61e20 | 74 73 20 69 6e 63 6c 75 64 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 | ts.including.relay.agent.informa |
61e40 | 74 69 6f 6e 2e 20 49 66 20 61 20 44 48 43 50 20 70 61 63 6b 65 74 20 73 69 7a 65 20 73 75 72 70 | tion..If.a.DHCP.packet.size.surp |
61e60 | 61 73 73 65 73 20 74 68 69 73 20 76 61 6c 75 65 20 69 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 | asses.this.value.it.will.be.forw |
61e80 | 61 72 64 65 64 20 77 69 74 68 6f 75 74 20 61 70 70 65 6e 64 69 6e 67 20 72 65 6c 61 79 20 61 67 | arded.without.appending.relay.ag |
61ea0 | 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 52 61 6e 67 65 20 36 34 2e 2e 2e 31 34 30 30 | ent.information..Range.64...1400 |
61ec0 | 2c 20 64 65 66 61 75 6c 74 20 35 37 36 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 | ,.default.576..Set.maximum.avera |
61ee0 | 67 65 20 6d 61 74 63 68 69 6e 67 20 72 61 74 65 2e 20 46 6f 72 6d 61 74 20 66 6f 72 20 72 61 74 | ge.matching.rate..Format.for.rat |
61f00 | 65 3a 20 69 6e 74 65 67 65 72 2f 74 69 6d 65 5f 75 6e 69 74 2c 20 77 68 65 72 65 20 74 69 6d 65 | e:.integer/time_unit,.where.time |
61f20 | 5f 75 6e 69 74 20 63 6f 75 6c 64 20 62 65 20 61 6e 79 20 6f 6e 65 20 6f 66 20 73 65 63 6f 6e 64 | _unit.could.be.any.one.of.second |
61f40 | 2c 20 6d 69 6e 75 74 65 2c 20 68 6f 75 72 20 6f 72 20 64 61 79 2e 46 6f 72 20 65 78 61 6d 70 6c | ,.minute,.hour.or.day.For.exampl |
61f60 | 65 20 31 2f 73 65 63 6f 6e 64 20 69 6d 70 6c 69 65 73 20 72 75 6c 65 20 74 6f 20 62 65 20 6d 61 | e.1/second.implies.rule.to.be.ma |
61f80 | 74 63 68 65 64 20 61 74 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 6f 6e 63 65 20 70 65 72 20 | tched.at.an.average.of.once.per. |
61fa0 | 73 65 63 6f 6e 64 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 63 6f 75 6e 74 20 62 65 | second..Set.maximum.hop.count.be |
61fc0 | 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2c 20 64 65 66 61 | fore.packets.are.discarded,.defa |
61fe0 | 75 6c 74 3a 20 31 30 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 | ult:.10.Set.maximum.number.of.pa |
62000 | 63 6b 65 74 73 20 74 6f 20 61 6c 6f 77 20 69 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e | ckets.to.alow.in.excess.of.rate. |
62020 | 00 53 65 74 20 6d 69 6e 69 6d 75 6d 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 72 | .Set.minimum.time.interval.for.r |
62040 | 65 66 72 65 73 68 69 6e 67 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 77 68 69 6c 65 20 | efreshing.gratuitous.ARPs.while. |
62060 | 4d 41 53 54 45 52 2e 00 53 65 74 20 6d 6f 64 65 20 66 6f 72 20 49 50 73 65 63 20 61 75 74 68 65 | MASTER..Set.mode.for.IPsec.authe |
62080 | 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 4c 32 54 50 20 | ntication.between.VyOS.and.L2TP. |
620a0 | 63 6c 69 65 6e 74 73 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 | clients..Set.number.of.gratuitou |
620c0 | 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 | s.ARP.messages.to.send.at.a.time |
620e0 | 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 | .after.transition.to.MASTER..Set |
62100 | 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 | .number.of.gratuitous.ARP.messag |
62120 | 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 20 77 68 69 6c 65 20 4d 41 53 54 45 | es.to.send.at.a.time.while.MASTE |
62140 | 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 48 65 6c | R..Set.number.of.seconds.for.Hel |
62160 | 6c 6f 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 53 65 74 74 69 6e 67 | lo.Interval.timer.value..Setting |
62180 | 20 74 68 69 73 20 76 61 6c 75 65 2c 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 | .this.value,.Hello.packet.will.b |
621a0 | 65 20 73 65 6e 74 20 65 76 65 72 79 20 74 69 6d 65 72 20 76 61 6c 75 65 20 73 65 63 6f 6e 64 73 | e.sent.every.timer.value.seconds |
621c0 | 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 | .on.the.specified.interface..Thi |
621e0 | 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c | s.value.must.be.the.same.for.all |
62200 | 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 | .routers.attached.to.a.common.ne |
62220 | 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 20 73 | twork..The.default.value.is.10.s |
62240 | 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 | econds..The.interval.range.is.1. |
62260 | 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 | to.65535..Set.number.of.seconds. |
62280 | 66 6f 72 20 72 6f 75 74 65 72 20 44 65 61 64 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 | for.router.Dead.Interval.timer.v |
622a0 | 61 6c 75 65 20 75 73 65 64 20 66 6f 72 20 57 61 69 74 20 54 69 6d 65 72 20 61 6e 64 20 49 6e 61 | alue.used.for.Wait.Timer.and.Ina |
622c0 | 63 74 69 76 69 74 79 20 54 69 6d 65 72 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 | ctivity.Timer..This.value.must.b |
622e0 | 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 | e.the.same.for.all.routers.attac |
62300 | 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 | hed.to.a.common.network..The.def |
62320 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 34 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e | ault.value.is.40.seconds..The.in |
62340 | 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 | terval.range.is.1.to.65535..Set. |
62360 | 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 45 78 70 6c 69 63 69 74 6c 79 | packet.modifications:.Explicitly |
62380 | 20 73 65 74 20 54 43 50 20 4d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 20 76 61 | .set.TCP.Maximum.segment.size.va |
623a0 | 6c 75 65 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 50 | lue..Set.packet.modifications:.P |
623c0 | 61 63 6b 65 74 20 44 69 66 66 65 72 65 6e 74 69 61 74 65 64 20 53 65 72 76 69 63 65 73 20 43 6f | acket.Differentiated.Services.Co |
623e0 | 64 65 70 6f 69 6e 74 20 28 44 53 43 50 29 00 53 65 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f | depoint.(DSCP).Set.parameters.fo |
62400 | 72 20 6d 61 74 63 68 69 6e 67 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 | r.matching.recently.seen.sources |
62420 | 2e 20 54 68 69 73 20 6d 61 74 63 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 62 79 20 73 65 | ..This.match.could.be.used.by.se |
62440 | 65 74 69 6e 67 20 63 6f 75 6e 74 20 28 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 6e | eting.count.(source.address.seen |
62460 | 20 6d 6f 72 65 20 74 68 61 6e 20 3c 31 2d 32 35 35 3e 20 74 69 6d 65 73 29 20 61 6e 64 2f 6f 72 | .more.than.<1-255>.times).and/or |
62480 | 20 74 69 6d 65 20 28 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 6e 20 69 6e 20 74 68 | .time.(source.address.seen.in.th |
624a0 | 65 20 6c 61 73 74 20 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3e 20 73 65 63 6f 6e 64 73 29 2e 00 | e.last.<0-4294967295>.seconds).. |
624c0 | 53 65 74 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 | Set.predefined.shared.secret.phr |
624e0 | 61 73 65 2e 00 53 65 74 20 70 72 65 66 69 78 65 73 20 74 6f 20 74 61 62 6c 65 2e 00 53 65 74 20 | ase..Set.prefixes.to.table..Set. |
62500 | 70 72 6f 78 79 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 69 74 69 61 | proxy.for.all.connections.initia |
62520 | 74 65 64 20 62 79 20 56 79 4f 53 2c 20 69 6e 63 6c 75 64 69 6e 67 20 48 54 54 50 2c 20 48 54 54 | ted.by.VyOS,.including.HTTP,.HTT |
62540 | 50 53 2c 20 61 6e 64 20 46 54 50 20 28 61 6e 6f 6e 79 6d 6f 75 73 20 66 74 70 29 2e 00 53 65 74 | PS,.and.FTP.(anonymous.ftp)..Set |
62560 | 20 72 6f 75 74 65 20 74 61 72 67 65 74 20 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 | .route.target.value.in.format.`` |
62580 | 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 | <0-65535:0-4294967295>``.or.``<I |
625a0 | 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 | P:0-65535>``..Set.routing.table. |
625c0 | 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 74 6f 2e 00 53 65 74 20 72 75 6c 65 20 61 | to.forward.packet.to..Set.rule.a |
625e0 | 63 74 69 6f 6e 20 74 6f 20 64 72 6f 70 2e 00 53 65 74 20 73 65 72 76 69 63 65 20 74 6f 20 62 69 | ction.to.drop..Set.service.to.bi |
62600 | 6e 64 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 62 79 20 64 65 66 61 75 6c 74 20 6c 69 73 | nd.on.IP.address,.by.default.lis |
62620 | 74 65 6e 20 6f 6e 20 61 6e 79 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 00 53 65 74 20 73 69 74 | ten.on.any.IPv4.and.IPv6.Set.sit |
62640 | 65 20 6f 66 20 6f 72 69 67 69 6e 20 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 | e.of.origin.value.in.format.``<0 |
62660 | 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a | -65535:0-4294967295>``.or.``<IP: |
62680 | 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 20 73 6f 6d 65 20 61 74 74 72 69 62 75 74 65 73 20 | 0-65535>``..Set.some.attributes. |
626a0 | 28 6c 69 6b 65 20 41 53 20 50 41 54 48 20 6f 72 20 43 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 | (like.AS.PATH.or.Community.value |
626c0 | 29 20 74 6f 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 74 65 73 20 74 6f 20 6e 65 69 67 68 62 | ).to.advertised.routes.to.neighb |
626e0 | 6f 72 73 2e 00 53 65 74 20 73 6f 6d 65 20 6d 65 74 72 69 63 20 74 6f 20 72 6f 75 74 65 73 20 6c | ors..Set.some.metric.to.routes.l |
62700 | 65 61 72 6e 65 64 20 66 72 6f 6d 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f | earned.from.a.particular.neighbo |
62720 | 72 2e 00 53 65 74 20 73 6f 75 72 63 65 20 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f | r..Set.source.IP/IPv6.address.fo |
62740 | 72 20 72 6f 75 74 65 2e 00 53 65 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 72 20 70 | r.route..Set.source.address.or.p |
62760 | 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 | refix.to.match..Set.source-addre |
62780 | 73 73 20 74 6f 20 79 6f 75 72 20 6c 6f 63 61 6c 20 49 50 20 28 4c 41 4e 29 2e 00 53 65 74 20 74 | ss.to.your.local.IP.(LAN)..Set.t |
627a0 | 61 67 20 76 61 6c 75 65 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 | ag.value.for.routing.protocol..S |
627c0 | 65 74 20 74 68 65 20 22 72 65 63 75 72 73 69 6f 6e 20 64 65 73 69 72 65 64 22 20 62 69 74 20 69 | et.the."recursion.desired".bit.i |
627e0 | 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 6e 61 6d 65 73 | n.requests.to.the.upstream.names |
62800 | 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 3a 60 44 52 20 28 44 65 73 69 67 6e | erver..Set.the.:abbr:`DR.(Design |
62820 | 61 74 65 64 20 52 6f 75 74 65 72 29 60 20 50 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 | ated.Router)`.Priority.for.the.i |
62840 | 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c | nterface..This.command.is.useful |
62860 | 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 75 73 65 72 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 | .to.allow.the.user.to.influence. |
62880 | 77 68 61 74 20 6e 6f 64 65 20 62 65 63 6f 6d 65 73 20 74 68 65 20 44 52 20 66 6f 72 20 61 20 4c | what.node.becomes.the.DR.for.a.L |
628a0 | 41 4e 20 73 65 67 6d 65 6e 74 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 3a 60 4d 52 55 20 28 | AN.segment..Set.the.:abbr:`MRU.( |
628c0 | 4d 61 78 69 6d 75 6d 20 52 65 63 65 69 76 65 20 55 6e 69 74 29 60 20 74 6f 20 60 6d 72 75 60 2e | Maximum.Receive.Unit)`.to.`mru`. |
628e0 | 20 50 50 50 64 20 77 69 6c 6c 20 61 73 6b 20 74 68 65 20 70 65 65 72 20 74 6f 20 73 65 6e 64 20 | .PPPd.will.ask.the.peer.to.send. |
62900 | 70 61 63 6b 65 74 73 20 6f 66 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 60 6d 72 75 60 20 62 79 | packets.of.no.more.than.`mru`.by |
62920 | 74 65 73 2e 20 54 68 65 20 76 61 6c 75 65 20 6f 66 20 60 6d 72 75 60 20 6d 75 73 74 20 62 65 20 | tes..The.value.of.`mru`.must.be. |
62940 | 62 65 74 77 65 65 6e 20 31 32 38 20 61 6e 64 20 31 36 33 38 34 2e 00 53 65 74 20 74 68 65 20 42 | between.128.and.16384..Set.the.B |
62960 | 47 50 20 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 | GP.nexthop.address.to.the.addres |
62980 | 73 20 6f 66 20 74 68 65 20 70 65 65 72 2e 20 46 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 72 | s.of.the.peer..For.an.incoming.r |
629a0 | 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 | oute-map.this.means.the.ip.addre |
629c0 | 73 73 20 6f 66 20 6f 75 72 20 70 65 65 72 20 69 73 20 75 73 65 64 2e 20 46 6f 72 20 61 6e 20 6f | ss.of.our.peer.is.used..For.an.o |
629e0 | 75 74 67 6f 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 | utgoing.route-map.this.means.the |
62a00 | 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 73 65 6c 66 20 69 73 20 75 73 65 64 20 | .ip.address.of.our.self.is.used. |
62a20 | 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6f 75 | to.establish.the.peering.with.ou |
62a40 | 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f | r.neighbor..Set.the.IP.address.o |
62a60 | 66 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 75 73 65 64 | f.the.local.interface.to.be.used |
62a80 | 20 66 6f 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 | .for.the.tunnel..Set.the.IP.addr |
62aa0 | 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 74 20 6d 61 79 20 62 | ess.of.the.remote.peer..It.may.b |
62ac0 | 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f | e.specified.as.an.IPv4.address.o |
62ae0 | 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 53 65 74 20 74 68 65 20 49 50 76 34 20 | r.an.IPv6.address..Set.the.IPv4. |
62b00 | 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 54 68 65 20 66 6f 6c 6c | source.validation.mode..The.foll |
62b20 | 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 | owing.system.parameter.will.be.a |
62b40 | 6c 74 65 72 65 64 3a 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 | ltered:.Set.the.MLD.last.member. |
62b60 | 71 75 65 72 79 20 63 6f 75 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | query.count..The.default.value.i |
62b80 | 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 | s.2..Set.the.MLD.last.member.que |
62ba0 | 72 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 | ry.interval.in.milliseconds.(100 |
62bc0 | 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | -6553500)..The.default.value.is. |
62be0 | 31 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 71 | 1000.milliseconds..Set.the.MLD.q |
62c00 | 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 6d 69 6c 6c 69 73 65 | uery.response.timeout.in.millise |
62c20 | 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | conds.(100-6553500)..The.default |
62c40 | 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 | .value.is.10000.milliseconds..Se |
62c60 | 74 20 74 68 65 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 | t.the.MLD.version.used.on.this.i |
62c80 | 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 | nterface..The.default.value.is.2 |
62ca0 | 2e 00 53 65 74 20 74 68 65 20 4d 61 78 69 6d 75 6d 20 53 74 61 63 6b 20 44 65 70 74 68 20 73 75 | ..Set.the.Maximum.Stack.Depth.su |
62cc0 | 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 54 68 65 20 76 61 6c 75 65 | pported.by.the.router..The.value |
62ce0 | 20 64 65 70 65 6e 64 20 6f 66 20 74 68 65 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 00 53 | .depend.of.the.MPLS.dataplane..S |
62d00 | 65 74 20 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 69 6e 74 65 72 76 | et.the.PIM.hello.and.hold.interv |
62d20 | 61 6c 20 66 6f 72 20 61 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d | al.for.a.interface..Set.the.Segm |
62d40 | 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 | ent.Routing.Global.Block.i.e..th |
62d60 | 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 | e.label.range.used.by.MPLS.to.st |
62d80 | 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 | ore.label.in.the.MPLS.FIB.for.Pr |
62da0 | 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 | efix.SID..Note.that.the.block.si |
62dc0 | 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 | ze.may.not.exceed.65535..Set.the |
62de0 | 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e | .Segment.Routing.Global.Block.i. |
62e00 | 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d | e..the.low.label.range.used.by.M |
62e20 | 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 | PLS.to.store.label.in.the.MPLS.F |
62e40 | 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 | IB.for.Prefix.SID..Note.that.the |
62e60 | 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 | .block.size.may.not.exceed.65535 |
62e80 | 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 | ..Set.the.Segment.Routing.Local. |
62ea0 | 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 | Block.i.e..the.label.range.used. |
62ec0 | 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 | by.MPLS.to.store.label.in.the.MP |
62ee0 | 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 | LS.FIB.for.Prefix.SID..Note.that |
62f00 | 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 | .the.block.size.may.not.exceed.6 |
62f20 | 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b | 5535.Segment.Routing.Local.Block |
62f40 | 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e | ,.The.negative.command.always.un |
62f60 | 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 | sets.both..Set.the.Segment.Routi |
62f80 | 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 | ng.Local.Block.i.e..the.low.labe |
62fa0 | 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 | l.range.used.by.MPLS.to.store.la |
62fc0 | 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 | bel.in.the.MPLS.FIB.for.Prefix.S |
62fe0 | 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 | ID..Note.that.the.block.size.may |
63000 | 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e | .not.exceed.65535.Segment.Routin |
63020 | 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d | g.Local.Block,.The.negative.comm |
63040 | 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 | and.always.unsets.both..Set.the. |
63060 | 55 73 65 72 20 49 44 20 6f 72 20 47 72 6f 75 70 20 49 44 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 | User.ID.or.Group.ID.of.the.conta |
63080 | 69 6e 65 72 00 53 65 74 20 74 68 65 20 60 60 73 73 68 64 60 60 20 6c 6f 67 20 6c 65 76 65 6c 2e | iner.Set.the.``sshd``.log.level. |
630a0 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 69 6e 66 6f 60 60 2e 00 53 65 74 20 74 68 | .The.default.is.``info``..Set.th |
630c0 | 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 70 6f 72 74 00 53 65 | e.address.of.the.backend.port.Se |
630e0 | 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 | t.the.address.of.the.backend.ser |
63100 | 76 65 72 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 | ver.to.which.the.incoming.traffi |
63120 | 63 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 00 53 65 74 20 74 68 65 20 64 65 66 61 | c.will.be.forwarded.Set.the.defa |
63140 | 75 6c 74 20 56 52 52 50 20 76 65 72 73 69 6f 6e 20 74 6f 20 75 73 65 2e 20 54 68 69 73 20 64 65 | ult.VRRP.version.to.use..This.de |
63160 | 66 61 75 6c 74 73 20 74 6f 20 32 2c 20 62 75 74 20 49 50 76 36 20 69 6e 73 74 61 6e 63 65 73 20 | faults.to.2,.but.IPv6.instances. |
63180 | 77 69 6c 6c 20 61 6c 77 61 79 73 20 75 73 65 20 76 65 72 73 69 6f 6e 20 33 2e 00 53 65 74 20 74 | will.always.use.version.3..Set.t |
631a0 | 68 65 20 64 65 76 69 63 65 27 73 20 74 72 61 6e 73 6d 69 74 20 28 54 58 29 20 6b 65 79 2e 20 54 | he.device's.transmit.(TX).key..T |
631c0 | 68 69 73 20 6b 65 79 20 6d 75 73 74 20 62 65 20 61 20 68 65 78 20 73 74 72 69 6e 67 20 74 68 61 | his.key.must.be.a.hex.string.tha |
631e0 | 74 20 69 73 20 31 36 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 53 2d 31 32 38 29 20 6f 72 20 33 | t.is.16-bytes.(GCM-AES-128).or.3 |
63200 | 32 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 53 2d 32 35 36 29 2e 00 53 65 74 20 74 68 65 20 64 | 2-bytes.(GCM-AES-256)..Set.the.d |
63220 | 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 | istance.for.the.default.gateway. |
63240 | 73 65 6e 74 20 62 79 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 | sent.by.the.DHCP.server..Set.the |
63260 | 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 | .distance.for.the.default.gatewa |
63280 | 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 2e 00 53 65 74 20 | y.sent.by.the.PPPoE.server..Set. |
632a0 | 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 | the.distance.for.the.default.gat |
632c0 | 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 53 65 | eway.sent.by.the.SSTP.server..Se |
632e0 | 74 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 6f 66 20 74 68 65 20 | t.the.encapsulation.type.of.the. |
63300 | 74 75 6e 6e 65 6c 2e 20 56 61 6c 69 64 20 76 61 6c 75 65 73 20 66 6f 72 20 65 6e 63 61 70 73 75 | tunnel..Valid.values.for.encapsu |
63320 | 6c 61 74 69 6f 6e 20 61 72 65 3a 20 75 64 70 2c 20 69 70 2e 00 53 65 74 20 74 68 65 20 67 6c 6f | lation.are:.udp,.ip..Set.the.glo |
63340 | 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 | bal.setting.for.an.established.c |
63360 | 6f 6e 6e 65 63 74 69 6f 6e 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e | onnection..Set.the.global.settin |
63380 | 67 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 70 61 63 6b 65 74 73 2e 00 53 65 74 20 74 68 65 20 67 | g.for.invalid.packets..Set.the.g |
633a0 | 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 72 65 6c 61 74 65 64 20 63 6f 6e 6e 65 63 | lobal.setting.for.related.connec |
633c0 | 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 6f 66 20 74 68 | tions..Set.the.listen.port.of.th |
633e0 | 65 20 6c 6f 63 61 6c 20 41 50 49 2c 20 74 68 69 73 20 68 61 73 20 6e 6f 20 65 66 66 65 63 74 20 | e.local.API,.this.has.no.effect. |
63400 | 6f 6e 20 74 68 65 20 77 65 62 73 65 72 76 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | on.the.webserver..The.default.is |
63420 | 20 70 6f 72 74 20 38 30 38 30 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 60 | .port.8080.Set.the.maximum.hop.` |
63440 | 3c 63 6f 75 6e 74 3e 60 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 | <count>`.before.packets.are.disc |
63460 | 61 72 64 65 64 2e 20 52 61 6e 67 65 20 30 2e 2e 2e 32 35 35 2c 20 64 65 66 61 75 6c 74 20 31 30 | arded..Range.0...255,.default.10 |
63480 | 2e 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 41 2d 4d 50 | ..Set.the.maximum.length.of.A-MP |
634a0 | 44 55 20 70 72 65 2d 45 4f 46 20 70 61 64 64 69 6e 67 20 74 68 61 74 20 74 68 65 20 73 74 61 74 | DU.pre-EOF.padding.that.the.stat |
634c0 | 69 6f 6e 20 63 61 6e 20 72 65 63 65 69 76 65 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | ion.can.receive.Set.the.maximum. |
634e0 | 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 68 61 6c 66 2d 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 | number.of.TCP.half-open.connecti |
63500 | 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 53 53 4c 20 3a 61 62 | ons..Set.the.name.of.the.SSL.:ab |
63520 | 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 | br:`CA.(Certificate.Authority)`. |
63540 | 50 4b 49 20 65 6e 74 72 79 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | PKI.entry.used.for.authenticatio |
63560 | 6e 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 20 49 66 20 61 6e 20 69 6e 74 65 | n.of.the.remote.side..If.an.inte |
63580 | 72 6d 65 64 69 61 74 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 73 70 65 63 69 | rmediate.CA.certificate.is.speci |
635a0 | 66 69 65 64 2c 20 74 68 65 6e 20 61 6c 6c 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 | fied,.then.all.parent.CA.certifi |
635c0 | 63 61 74 65 73 20 74 68 61 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 50 4b 49 2c 20 73 75 63 | cates.that.exist.in.the.PKI,.suc |
635e0 | 68 20 61 73 20 74 68 65 20 72 6f 6f 74 20 43 41 20 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 | h.as.the.root.CA.or.additional.i |
63600 | 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 73 2c 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 | ntermediate.CAs,.will.automatica |
63620 | 6c 6c 79 20 62 65 20 75 73 65 64 20 64 75 72 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 76 | lly.be.used.during.certificate.v |
63640 | 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 75 6c | alidation.to.ensure.that.the.ful |
63660 | 6c 20 63 68 61 69 6e 20 6f 66 20 74 72 75 73 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 00 53 | l.chain.of.trust.is.available..S |
63680 | 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 78 35 30 39 20 63 6c 69 65 6e 74 20 6b | et.the.name.of.the.x509.client.k |
636a0 | 65 79 70 61 69 72 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 67 61 69 | eypair.used.to.authenticate.agai |
636c0 | 6e 73 74 20 74 68 65 20 38 30 32 2e 31 78 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 70 61 72 65 6e | nst.the.802.1x.system..All.paren |
636e0 | 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 20 | t.CA.certificates.of.the.client. |
63700 | 63 65 72 74 69 66 69 63 61 74 65 2c 20 73 75 63 68 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 74 | certificate,.such.as.intermediat |
63720 | 65 20 61 6e 64 20 72 6f 6f 74 20 43 41 73 2c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 73 20 | e.and.root.CAs,.will.be.sent.as. |
63740 | 70 61 72 74 20 6f 66 20 74 68 65 20 45 41 50 2d 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 | part.of.the.EAP-TLS.handshake..S |
63760 | 65 74 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 49 44 20 66 6c 61 67 20 6f 66 20 74 68 | et.the.native.VLAN.ID.flag.of.th |
63780 | 65 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 61 20 64 61 74 61 20 70 61 63 6b 65 74 20 | e.interface..When.a.data.packet. |
637a0 | 77 69 74 68 6f 75 74 20 61 20 56 4c 41 4e 20 74 61 67 20 65 6e 74 65 72 73 20 74 68 65 20 70 6f | without.a.VLAN.tag.enters.the.po |
637c0 | 72 74 2c 20 74 68 65 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 63 | rt,.the.data.packet.will.be.forc |
637e0 | 65 64 20 74 6f 20 61 64 64 20 61 20 74 61 67 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 76 6c | ed.to.add.a.tag.of.a.specific.vl |
63800 | 61 6e 20 69 64 2e 20 57 68 65 6e 20 74 68 65 20 76 6c 61 6e 20 69 64 20 66 6c 61 67 20 66 6c 6f | an.id..When.the.vlan.id.flag.flo |
63820 | 77 73 20 6f 75 74 2c 20 74 68 65 20 74 61 67 20 6f 66 20 74 68 65 20 76 6c 61 6e 20 69 64 20 77 | ws.out,.the.tag.of.the.vlan.id.w |
63840 | 69 6c 6c 20 62 65 20 73 74 72 69 70 70 65 64 00 53 65 74 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 | ill.be.stripped.Set.the.next-hop |
63860 | 20 61 73 20 75 6e 63 68 61 6e 67 65 64 2e 20 50 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 | .as.unchanged..Pass.through.the. |
63880 | 72 6f 75 74 65 2d 6d 61 70 20 77 69 74 68 6f 75 74 20 63 68 61 6e 67 69 6e 67 20 69 74 73 20 76 | route-map.without.changing.its.v |
638a0 | 61 6c 75 65 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 6d 61 78 69 6d | alue.Set.the.number.of.TCP.maxim |
638c0 | 75 6d 20 72 65 74 72 61 6e 73 6d 69 74 20 61 74 74 65 6d 70 74 73 2e 00 53 65 74 20 74 68 65 20 | um.retransmit.attempts..Set.the. |
638e0 | 6e 75 6d 62 65 72 20 6f 66 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 66 61 69 6c 75 72 65 73 20 | number.of.health.check.failures. |
63900 | 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6d 61 72 6b 65 64 20 61 73 | before.an.interface.is.marked.as |
63920 | 20 75 6e 61 76 61 69 6c 61 62 6c 65 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 | .unavailable,.range.for.number.i |
63940 | 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e 20 4f 72 20 73 65 74 20 74 68 65 | s.1.to.10,.default.1..Or.set.the |
63960 | 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 68 65 61 6c 74 68 20 63 68 65 | .number.of.successful.health.che |
63980 | 63 6b 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 64 64 65 64 | cks.before.an.interface.is.added |
639a0 | 20 62 61 63 6b 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 72 61 6e | .back.to.the.interface.pool,.ran |
639c0 | 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c | ge.for.number.is.1.to.10,.defaul |
639e0 | 74 20 31 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 | t.1..Set.the.number.of.seconds.t |
63a00 | 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c 20 72 65 74 72 79 69 6e 67 20 74 | he.router.waits.until.retrying.t |
63a20 | 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 | o.connect.to.the.cache.server..S |
63a40 | 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 | et.the.number.of.seconds.the.rou |
63a60 | 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c 20 74 68 65 20 72 6f 75 74 65 72 20 65 78 70 69 72 | ter.waits.until.the.router.expir |
63a80 | 65 73 20 74 68 65 20 63 61 63 68 65 2e 00 53 65 74 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 6f | es.the.cache..Set.the.options.fo |
63aa0 | 72 20 74 68 69 73 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 53 65 65 20 74 68 65 20 73 73 68 20 60 | r.this.public.key..See.the.ssh.` |
63ac0 | 60 61 75 74 68 6f 72 69 7a 65 64 5f 6b 65 79 73 60 60 20 6d 61 6e 20 70 61 67 65 20 66 6f 72 20 | `authorized_keys``.man.page.for. |
63ae0 | 64 65 74 61 69 6c 73 20 6f 66 20 77 68 61 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 | details.of.what.you.can.specify. |
63b00 | 68 65 72 65 2e 20 54 6f 20 70 6c 61 63 65 20 61 20 60 60 22 60 60 20 63 68 61 72 61 63 74 65 72 | here..To.place.a.``"``.character |
63b20 | 20 69 6e 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 69 65 6c 64 2c 20 75 73 65 20 60 60 26 71 75 | .in.the.options.field,.use.``&qu |
63b40 | 6f 74 3b 60 60 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 66 72 6f 6d 3d 26 71 75 6f 74 3b | ot;``,.for.example.``from=" |
63b60 | 31 30 2e 30 2e 30 2e 30 2f 32 34 26 71 75 6f 74 3b 60 60 20 74 6f 20 72 65 73 74 72 69 63 74 20 | 10.0.0.0/24"``.to.restrict. |
63b80 | 77 68 65 72 65 20 74 68 65 20 75 73 65 72 20 6d 61 79 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 | where.the.user.may.connect.from. |
63ba0 | 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 20 6b 65 79 2e 00 53 65 74 20 74 68 65 20 70 61 72 | when.using.this.key..Set.the.par |
63bc0 | 69 74 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 49 66 20 75 | ity.option.for.the.console..If.u |
63be0 | 6e 73 65 74 20 74 68 69 73 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f 20 6e 6f 6e 65 2e 00 | nset.this.will.default.to.none.. |
63c00 | 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 4d 41 43 20 61 64 64 72 65 73 73 00 53 65 74 20 74 | Set.the.peer's.MAC.address.Set.t |
63c20 | 68 65 20 70 65 65 72 27 73 20 6b 65 79 20 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 28 52 | he.peer's.key.used.to.receive.(R |
63c40 | 58 29 20 74 72 61 66 66 69 63 00 53 65 74 20 74 68 65 20 70 65 65 72 2d 73 65 73 73 69 6f 6e 2d | X).traffic.Set.the.peer-session- |
63c60 | 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 | id,.which.is.a.32-bit.integer.va |
63c80 | 6c 75 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 79 20 74 | lue.assigned.to.the.session.by.t |
63ca0 | 68 65 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 | he.peer..The.value.used.must.mat |
63cc0 | 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 | ch.the.session_id.value.being.us |
63ce0 | 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 72 65 73 74 61 72 74 20 | ed.at.the.peer..Set.the.restart. |
63d00 | 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 53 65 74 20 74 | behavior.of.the.container..Set.t |
63d20 | 68 65 20 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 20 57 68 65 6e 20 75 73 65 64 20 77 69 74 68 20 | he.route.metric..When.used.with. |
63d40 | 42 47 50 2c 20 73 65 74 20 74 68 65 20 42 47 50 20 61 74 74 72 69 62 75 74 65 20 4d 45 44 20 74 | BGP,.set.the.BGP.attribute.MED.t |
63d60 | 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 61 6c 75 65 2e 20 55 73 65 20 60 60 2b 2f 2d 60 60 20 | o.a.specific.value..Use.``+/-``. |
63d80 | 74 6f 20 61 64 64 20 6f 72 20 73 75 62 74 72 61 63 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | to.add.or.subtract.the.specified |
63da0 | 20 76 61 6c 75 65 20 74 6f 2f 66 72 6f 6d 20 74 68 65 20 65 78 69 73 74 69 6e 67 2f 4d 45 44 2e | .value.to/from.the.existing/MED. |
63dc0 | 20 55 73 65 20 60 60 72 74 74 60 60 20 74 6f 20 73 65 74 20 74 68 65 20 4d 45 44 20 74 6f 20 74 | .Use.``rtt``.to.set.the.MED.to.t |
63de0 | 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 6f 72 20 60 60 2b 72 74 74 2f 2d 72 74 | he.round.trip.time.or.``+rtt/-rt |
63e00 | 74 60 60 20 74 6f 20 61 64 64 2f 73 75 62 74 72 61 63 74 20 74 68 65 20 72 6f 75 6e 64 20 74 72 | t``.to.add/subtract.the.round.tr |
63e20 | 69 70 20 74 69 6d 65 20 74 6f 2f 66 72 6f 6d 20 74 68 65 20 4d 45 44 2e 00 53 65 74 20 74 68 65 | ip.time.to/from.the.MED..Set.the |
63e40 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 | .routing.table.to.forward.packet |
63e60 | 20 77 69 74 68 2e 00 53 65 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 69 64 2c 20 77 68 69 63 68 | .with..Set.the.session.id,.which |
63e80 | 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 | .is.a.32-bit.integer.value..Uniq |
63ea0 | 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 65 69 6e | uely.identifies.the.session.bein |
63ec0 | 67 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 76 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d | g.created..The.value.used.must.m |
63ee0 | 61 74 63 68 20 74 68 65 20 70 65 65 72 5f 73 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 | atch.the.peer_session_id.value.b |
63f00 | 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 73 | eing.used.at.the.peer..Set.the.s |
63f20 | 69 7a 65 20 6f 66 20 74 68 65 20 68 61 73 68 20 74 61 62 6c 65 2e 20 54 68 65 20 63 6f 6e 6e 65 | ize.of.the.hash.table..The.conne |
63f40 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 68 20 74 61 62 6c 65 20 6d 61 6b 65 73 20 | ction.tracking.hash.table.makes. |
63f60 | 73 65 61 72 63 68 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | searching.the.connection.trackin |
63f80 | 67 20 74 61 62 6c 65 20 66 61 73 74 65 72 2e 20 54 68 65 20 68 61 73 68 20 74 61 62 6c 65 20 75 | g.table.faster..The.hash.table.u |
63fa0 | 73 65 73 20 e2 80 9c 62 75 63 6b 65 74 73 e2 80 9d 20 74 6f 20 72 65 63 6f 72 64 20 65 6e 74 72 | ses....buckets....to.record.entr |
63fc0 | 69 65 73 20 69 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 | ies.in.the.connection.tracking.t |
63fe0 | 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f 66 20 66 6f 72 77 61 | able..Set.the.source.IP.of.forwa |
64000 | 72 64 65 64 20 70 61 63 6b 65 74 73 2c 20 6f 74 68 65 72 77 69 73 65 20 6f 72 69 67 69 6e 61 6c | rded.packets,.otherwise.original |
64020 | 20 73 65 6e 64 65 72 73 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 2e 00 53 65 74 20 74 68 | .senders.address.is.used..Set.th |
64040 | 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 | e.timeout.in.secounds.for.a.prot |
64060 | 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 20 69 6e 20 61 20 63 75 73 74 6f 6d 20 72 75 6c 65 2e 00 | ocol.or.state.in.a.custom.rule.. |
64080 | 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 | Set.the.timeout.in.secounds.for. |
640a0 | 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 2e 00 53 65 74 20 74 68 65 20 74 75 6e | a.protocol.or.state..Set.the.tun |
640c0 | 6e 65 6c 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 | nel.id,.which.is.a.32-bit.intege |
640e0 | 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 | r.value..Uniquely.identifies.the |
64100 | 20 74 75 6e 6e 65 6c 20 69 6e 74 6f 20 77 68 69 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 | .tunnel.into.which.the.session.w |
64120 | 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e 00 53 65 74 20 74 68 65 20 77 69 6e 64 6f 77 20 73 | ill.be.created..Set.the.window.s |
64140 | 63 61 6c 65 20 66 61 63 74 6f 72 20 66 6f 72 20 54 43 50 20 77 69 6e 64 6f 77 20 73 63 61 6c 69 | cale.factor.for.TCP.window.scali |
64160 | 6e 67 00 53 65 74 20 77 69 6e 64 6f 77 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 6c 79 20 76 61 | ng.Set.window.of.concurrently.va |
64180 | 6c 69 64 20 63 6f 64 65 73 2e 00 53 65 74 73 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 20 69 | lid.codes..Sets.the.image.name.i |
641a0 | 6e 20 74 68 65 20 68 75 62 20 72 65 67 69 73 74 72 79 00 53 65 74 73 20 74 68 65 20 69 6e 74 65 | n.the.hub.registry.Sets.the.inte |
641c0 | 72 66 61 63 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 70 61 | rface.to.listen.for.multicast.pa |
641e0 | 63 6b 65 74 73 20 6f 6e 2e 20 43 6f 75 6c 64 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 2c 20 6e | ckets.on..Could.be.a.loopback,.n |
64200 | 6f 74 20 79 65 74 20 74 65 73 74 65 64 2e 00 53 65 74 73 20 74 68 65 20 6c 69 73 74 65 6e 69 6e | ot.yet.tested..Sets.the.listenin |
64220 | 67 20 70 6f 72 74 20 66 6f 72 20 61 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 | g.port.for.a.listening.address.. |
64240 | 54 68 69 73 20 6f 76 65 72 72 69 64 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 | This.overrides.the.default.port. |
64260 | 6f 66 20 33 31 32 38 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 69 73 74 65 6e 20 61 | of.3128.on.the.specific.listen.a |
64280 | 64 64 72 65 73 73 2e 00 53 65 74 73 20 74 68 65 20 75 6e 69 71 75 65 20 69 64 20 66 6f 72 20 74 | ddress..Sets.the.unique.id.for.t |
642a0 | 68 69 73 20 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 2e 20 4e 6f 74 20 73 75 72 65 20 68 6f | his.vxlan-interface..Not.sure.ho |
642c0 | 77 20 69 74 20 63 6f 72 72 65 6c 61 74 65 73 20 77 69 74 68 20 6d 75 6c 74 69 63 61 73 74 2d 61 | w.it.correlates.with.multicast-a |
642e0 | 64 64 72 65 73 73 2e 00 53 65 74 74 69 6e 67 20 56 52 52 50 20 67 72 6f 75 70 20 70 72 69 6f 72 | ddress..Setting.VRRP.group.prior |
64300 | 69 74 79 00 53 65 74 74 69 6e 67 20 6e 61 6d 65 00 53 65 74 74 69 6e 67 20 74 68 69 73 20 75 70 | ity.Setting.name.Setting.this.up |
64320 | 20 6f 6e 20 41 57 53 20 77 69 6c 6c 20 72 65 71 75 69 72 65 20 61 20 22 43 75 73 74 6f 6d 20 50 | .on.AWS.will.require.a."Custom.P |
64340 | 72 6f 74 6f 63 6f 6c 20 52 75 6c 65 22 20 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 | rotocol.Rule".for.protocol.numbe |
64360 | 72 20 22 34 37 22 20 28 47 52 45 29 20 41 6c 6c 6f 77 20 52 75 6c 65 20 69 6e 20 54 57 4f 20 70 | r."47".(GRE).Allow.Rule.in.TWO.p |
64380 | 6c 61 63 65 73 2e 20 46 69 72 73 74 6c 79 20 6f 6e 20 74 68 65 20 56 50 43 20 4e 65 74 77 6f 72 | laces..Firstly.on.the.VPC.Networ |
643a0 | 6b 20 41 43 4c 2c 20 61 6e 64 20 73 65 63 6f 6e 64 6c 79 20 6f 6e 20 74 68 65 20 73 65 63 75 72 | k.ACL,.and.secondly.on.the.secur |
643c0 | 69 74 79 20 67 72 6f 75 70 20 6e 65 74 77 6f 72 6b 20 41 43 4c 20 61 74 74 61 63 68 65 64 20 74 | ity.group.network.ACL.attached.t |
643e0 | 6f 20 74 68 65 20 45 43 32 20 69 6e 73 74 61 6e 63 65 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 | o.the.EC2.instance..This.has.bee |
64400 | 6e 20 74 65 73 74 65 64 20 61 73 20 77 6f 72 6b 69 6e 67 20 66 6f 72 20 74 68 65 20 6f 66 66 69 | n.tested.as.working.for.the.offi |
64420 | 63 69 61 6c 20 41 4d 49 20 69 6d 61 67 65 20 6f 6e 20 74 68 65 20 41 57 53 20 4d 61 72 6b 65 74 | cial.AMI.image.on.the.AWS.Market |
64440 | 70 6c 61 63 65 2e 20 28 4c 6f 63 61 74 65 20 74 68 65 20 63 6f 72 72 65 63 74 20 56 50 43 20 61 | place..(Locate.the.correct.VPC.a |
64460 | 6e 64 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 62 79 20 6e 61 76 69 67 61 74 69 6e 67 20 | nd.security.group.by.navigating. |
64480 | 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 74 61 69 6c 73 20 70 61 6e 65 20 62 65 6c 6f 77 20 79 | through.the.details.pane.below.y |
644a0 | 6f 75 72 20 45 43 32 20 69 6e 73 74 61 6e 63 65 20 69 6e 20 74 68 65 20 41 57 53 20 63 6f 6e 73 | our.EC2.instance.in.the.AWS.cons |
644c0 | 6f 6c 65 29 2e 00 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 65 63 3a 00 53 65 74 74 69 6e 67 20 | ole)..Setting.up.IPSec:.Setting. |
644e0 | 75 70 20 4f 70 65 6e 56 50 4e 00 53 65 74 74 69 6e 67 20 75 70 20 61 20 66 75 6c 6c 2d 62 6c 6f | up.OpenVPN.Setting.up.a.full-blo |
64500 | 77 6e 20 50 4b 49 20 77 69 74 68 20 61 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 77 6f 75 | wn.PKI.with.a.CA.certificate.wou |
64520 | 6c 64 20 61 72 67 75 61 62 6c 79 20 64 65 66 65 61 74 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f | ld.arguably.defeat.the.purpose.o |
64540 | 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 2c 20 73 69 6e 63 65 20 69 74 | f.site-to-site.OpenVPN,.since.it |
64560 | 73 20 6d 61 69 6e 20 67 6f 61 6c 20 69 73 20 73 75 70 70 6f 73 65 64 20 74 6f 20 62 65 20 63 6f | s.main.goal.is.supposed.to.be.co |
64580 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 69 6d 70 6c 69 63 69 74 79 2c 20 63 6f 6d 70 61 72 65 64 | nfiguration.simplicity,.compared |
645a0 | 20 74 6f 20 73 65 72 76 65 72 20 73 65 74 75 70 73 20 74 68 61 74 20 6e 65 65 64 20 74 6f 20 73 | .to.server.setups.that.need.to.s |
645c0 | 75 70 70 6f 72 74 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 74 69 6e 67 | upport.multiple.clients..Setting |
645e0 | 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 | .up.certificates.Setting.up.cert |
64600 | 69 66 69 63 61 74 65 73 3a 00 53 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e 65 6c 3a 00 53 65 74 | ificates:.Setting.up.tunnel:.Set |
64620 | 74 69 6e 67 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 63 6f 6d 65 20 61 63 74 69 76 65 20 77 69 74 | ting.will.only.become.active.wit |
64640 | 68 20 74 68 65 20 6e 65 78 74 20 72 65 62 6f 6f 74 21 00 53 65 74 75 70 20 44 48 43 50 20 66 61 | h.the.next.reboot!.Setup.DHCP.fa |
64660 | 69 6c 6f 76 65 72 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 | ilover.for.network.192.0.2.0/24. |
64680 | 53 65 74 75 70 20 65 6e 63 72 79 70 74 65 64 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 67 69 76 | Setup.encrypted.password.for.giv |
646a0 | 65 6e 20 75 73 65 72 6e 61 6d 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 | en.username..This.is.useful.for. |
646c0 | 74 72 61 6e 73 66 65 72 72 69 6e 67 20 61 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 66 | transferring.a.hashed.password.f |
646e0 | 72 6f 6d 20 73 79 73 74 65 6d 20 74 6f 20 73 79 73 74 65 6d 2e 00 53 65 74 75 70 20 74 68 65 20 | rom.system.to.system..Setup.the. |
64700 | 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 | `<timeout>`.in.seconds.when.quer |
64720 | 79 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 | ying.the.RADIUS.server..Setup.th |
64740 | 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 | e.`<timeout>`.in.seconds.when.qu |
64760 | 65 72 79 69 6e 67 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 | erying.the.TACACS.server..Setup. |
64780 | 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e | the.dynamic.DNS.hostname.`<hostn |
647a0 | 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 | ame>`.associated.with.the.DynDNS |
647c0 | 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 | .provider.identified.by.`<servic |
647e0 | 65 2d 6e 61 6d 65 3e 60 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 | e-name>`..Setup.the.dynamic.DNS. |
64800 | 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 | hostname.`<hostname>`.associated |
64820 | 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 | .with.the.DynDNS.provider.identi |
64840 | 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 | fied.by.`<service>`.when.the.IP. |
64860 | 61 64 64 72 65 73 73 20 6f 6e 20 61 64 64 72 65 73 73 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | address.on.address.`<interface>` |
64880 | 20 63 68 61 6e 67 65 73 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 | .changes..Setup.the.dynamic.DNS. |
648a0 | 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 | hostname.`<hostname>`.associated |
648c0 | 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 | .with.the.DynDNS.provider.identi |
648e0 | 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 | fied.by.`<service>`.when.the.IP. |
64900 | 61 64 64 72 65 73 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 | address.on.interface.`<interface |
64920 | 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 76 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 | >`.changes..Several.commands.uti |
64940 | 6c 69 7a 65 20 63 55 52 4c 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e | lize.cURL.to.initiate.transfers. |
64960 | 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 76 34 | .Configure.the.local.source.IPv4 |
64980 | 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 63 55 52 4c 20 | /IPv6.address.used.for.all.cURL. |
649a0 | 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 | operations..Several.commands.uti |
649c0 | 6c 69 7a 65 20 63 75 72 6c 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e | lize.curl.to.initiate.transfers. |
649e0 | 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 69 6e 74 65 | .Configure.the.local.source.inte |
64a00 | 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 43 55 52 4c 20 6f 70 65 72 61 74 69 6f | rface.used.for.all.CURL.operatio |
64a20 | 6e 73 2e 00 53 65 76 65 72 69 74 79 00 53 65 76 65 72 69 74 79 20 4c 65 76 65 6c 00 53 68 61 70 | ns..Severity.Severity.Level.Shap |
64a40 | 65 72 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 53 68 6f 72 74 20 47 | er.Short.GI.capabilities.Short.G |
64a60 | 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 66 6f 72 20 32 30 20 61 6e 64 20 34 30 20 4d 48 7a | I.capabilities.for.20.and.40.MHz |
64a80 | 00 53 68 6f 72 74 20 62 75 72 73 74 73 20 63 61 6e 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 | .Short.bursts.can.be.allowed.to. |
64aa0 | 65 78 63 65 65 64 20 74 68 65 20 6c 69 6d 69 74 2e 20 4f 6e 20 63 72 65 61 74 69 6f 6e 2c 20 74 | exceed.the.limit..On.creation,.t |
64ac0 | 68 65 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 73 20 73 74 6f 63 6b | he.Rate-Control.traffic.is.stock |
64ae0 | 65 64 20 77 69 74 68 20 74 6f 6b 65 6e 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 20 | ed.with.tokens.which.correspond. |
64b00 | 74 6f 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 74 20 63 61 | to.the.amount.of.traffic.that.ca |
64b20 | 6e 20 62 65 20 62 75 72 73 74 20 69 6e 20 6f 6e 65 20 67 6f 2e 20 54 6f 6b 65 6e 73 20 61 72 72 | n.be.burst.in.one.go..Tokens.arr |
64b40 | 69 76 65 20 61 74 20 61 20 73 74 65 61 64 79 20 72 61 74 65 2c 20 75 6e 74 69 6c 20 74 68 65 20 | ive.at.a.steady.rate,.until.the. |
64b60 | 62 75 63 6b 65 74 20 69 73 20 66 75 6c 6c 2e 00 53 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 | bucket.is.full..Shortcut.syntax. |
64b80 | 66 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 61 75 74 6f 6d 61 74 69 63 20 6c 65 61 6b 69 6e 67 | for.specifying.automatic.leaking |
64ba0 | 20 66 72 6f 6d 20 76 72 66 20 56 52 46 4e 41 4d 45 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 | .from.vrf.VRFNAME.to.the.current |
64bc0 | 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 56 50 4e 20 52 49 42 20 61 73 20 69 6e 74 65 72 6d | .VRF.using.the.VPN.RIB.as.interm |
64be0 | 65 64 69 61 72 79 2e 20 54 68 65 20 52 44 20 61 6e 64 20 52 54 20 61 72 65 20 61 75 74 6f 20 64 | ediary..The.RD.and.RT.are.auto.d |
64c00 | 65 72 69 76 65 64 20 61 6e 64 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 70 65 63 69 66 69 | erived.and.should.not.be.specifi |
64c20 | 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 66 6f 72 20 65 69 74 68 65 72 20 74 68 65 20 73 6f 75 | ed.explicitly.for.either.the.sou |
64c40 | 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 56 52 46 e2 80 99 73 2e 00 53 68 6f 77 | rce.or.destination.VRF...s..Show |
64c60 | 00 53 68 6f 77 20 44 48 43 50 20 73 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c | .Show.DHCP.server.daemon.log.fil |
64c80 | 65 00 53 68 6f 77 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 | e.Show.DHCPv6.server.daemon.log. |
64ca0 | 66 69 6c 65 00 53 68 6f 77 20 46 69 72 65 77 61 6c 6c 20 6c 6f 67 00 53 68 6f 77 20 4c 4c 44 50 | file.Show.Firewall.log.Show.LLDP |
64cc0 | 20 6e 65 69 67 68 62 6f 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 76 69 61 20 69 6e 74 65 72 66 61 | .neighbors.connected.via.interfa |
64ce0 | 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 53 53 48 20 64 79 6e 61 6d | ce.`<interface>`..Show.SSH.dynam |
64d00 | 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 | ic-protection.log..Show.SSH.serv |
64d20 | 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b | er.log..Show.SSH.server.public.k |
64d40 | 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 20 76 69 73 | ey.fingerprints,.including.a.vis |
64d60 | 75 61 6c 20 41 53 43 49 49 20 61 72 74 20 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 00 53 68 | ual.ASCII.art.representation..Sh |
64d80 | 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 | ow.SSH.server.public.key.fingerp |
64da0 | 72 69 6e 74 73 2e 00 53 68 6f 77 20 57 41 4e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e | rints..Show.WAN.load.balancer.in |
64dc0 | 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 63 6c 75 64 69 6e 67 20 74 65 73 74 20 74 79 70 65 73 20 61 | formation.including.test.types.a |
64de0 | 6e 64 20 74 61 72 67 65 74 73 2e 20 41 20 63 68 61 72 61 63 74 65 72 20 61 74 20 74 68 65 20 73 | nd.targets..A.character.at.the.s |
64e00 | 74 61 72 74 20 6f 66 20 65 61 63 68 20 6c 69 6e 65 20 64 65 70 69 63 74 73 20 74 68 65 20 73 74 | tart.of.each.line.depicts.the.st |
64e20 | 61 74 65 20 6f 66 20 74 68 65 20 74 65 73 74 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 | ate.of.the.test.Show.WWAN.module |
64e40 | 20 49 4d 45 49 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 53 49 2e 00 53 68 | .IMEI..Show.WWAN.module.IMSI..Sh |
64e60 | 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 4d 53 49 53 44 4e 2e 00 53 68 6f 77 20 57 57 41 4e | ow.WWAN.module.MSISDN..Show.WWAN |
64e80 | 20 6d 6f 64 75 6c 65 20 53 49 4d 20 63 61 72 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 | .module.SIM.card.information..Sh |
64ea0 | 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 66 69 72 6d 77 61 72 65 2e 00 53 68 6f 77 20 57 57 | ow.WWAN.module.firmware..Show.WW |
64ec0 | 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 61 72 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e | AN.module.hardware.capabilities. |
64ee0 | 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 61 72 65 20 72 65 76 69 73 | .Show.WWAN.module.hardware.revis |
64f00 | 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 6d 6f 64 65 6c 2e 00 53 68 6f | ion..Show.WWAN.module.model..Sho |
64f20 | 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 73 69 67 6e 61 6c 20 73 74 72 65 6e 67 74 68 2e 00 53 | w.WWAN.module.signal.strength..S |
64f40 | 68 6f 77 20 61 20 6c 69 73 74 20 61 76 61 69 6c 61 62 6c 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e | how.a.list.available.container.n |
64f60 | 65 74 77 6f 72 6b 73 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 | etworks.Show.a.list.of.installed |
64f80 | 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 | .:abbr:`CA.(Certificate.Authorit |
64fa0 | 79 29 60 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 | y)`.certificates..Show.a.list.of |
64fc0 | 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 43 52 4c 73 20 28 43 65 72 74 69 66 69 63 | .installed.:abbr:`CRLs.(Certific |
64fe0 | 61 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 4c 69 73 74 29 60 2e 00 53 68 6f 77 20 61 20 6c 69 | ate.Revocation.List)`..Show.a.li |
65000 | 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 68 6f | st.of.installed.certificates.Sho |
65020 | 77 20 61 6c 6c 20 42 46 44 20 70 65 65 72 73 00 53 68 6f 77 20 61 76 61 69 6c 61 62 6c 65 20 6f | w.all.BFD.peers.Show.available.o |
65040 | 66 66 6c 6f 61 64 69 6e 67 20 66 75 6e 63 74 69 6f 6e 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 | ffloading.functions.on.given.`<i |
65060 | 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 62 69 6e 64 65 64 20 71 61 74 20 64 65 76 69 63 | nterface>`.Show.binded.qat.devic |
65080 | 65 20 69 6e 74 65 72 72 75 70 74 73 20 74 6f 20 63 65 72 74 61 69 6e 20 63 6f 72 65 2e 00 53 68 | e.interrupts.to.certain.core..Sh |
650a0 | 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d 65 3e 60 20 66 64 62 20 64 69 73 70 6c 61 79 73 20 | ow.bridge.`<name>`.fdb.displays. |
650c0 | 74 68 65 20 63 75 72 72 65 6e 74 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 62 6c 65 3a 00 53 68 | the.current.forwarding.table:.Sh |
650e0 | 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 64 62 20 64 69 73 70 6c 61 79 73 20 | ow.bridge.`<name>`.mdb.displays. |
65100 | 74 68 65 20 63 75 72 72 65 6e 74 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 | the.current.multicast.group.memb |
65120 | 65 72 73 68 69 70 20 74 61 62 6c 65 2e 54 68 65 20 74 61 62 6c 65 20 69 73 20 70 6f 70 75 6c 61 | ership.table.The.table.is.popula |
65140 | 74 65 64 20 62 79 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 20 69 6e 20 | ted.by.IGMP.and.MLD.snooping.in. |
65160 | 74 68 65 20 62 72 69 64 67 65 20 64 72 69 76 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e | the.bridge.driver.automatically. |
65180 | 00 53 68 6f 77 20 62 72 69 65 66 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f | .Show.brief.interface.informatio |
651a0 | 6e 2e 00 53 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 00 53 68 6f 77 20 63 6f 6e 66 69 67 75 72 65 64 | n..Show.commands.Show.configured |
651c0 | 20 73 65 72 69 61 6c 20 70 6f 72 74 73 20 61 6e 64 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 | .serial.ports.and.their.respecti |
651e0 | 76 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 68 6f 77 | ve.interface.configuration..Show |
65200 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 61 74 61 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 | .connection.data.of.load.balance |
65220 | 64 20 74 72 61 66 66 69 63 3a 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 | d.traffic:.Show.connection.synci |
65240 | 6e 67 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 | ng.external.cache.entries.Show.c |
65260 | 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 69 6e 74 65 72 6e 61 6c 20 63 61 63 68 65 | onnection.syncing.internal.cache |
65280 | 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 6e 65 63 74 65 | .entries.Show.currently.connecte |
652a0 | 64 20 75 73 65 72 73 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 | d.users..Show.detailed.informati |
652c0 | 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6c 65 61 72 6e 65 64 20 53 65 67 6d 65 6e 74 20 52 6f 75 | on.about.all.learned.Segment.Rou |
652e0 | 74 69 6e 67 20 4e 6f 64 65 73 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 | ting.Nodes.Show.detailed.informa |
65300 | 74 69 6f 6e 20 61 62 6f 75 74 20 70 72 65 66 69 78 2d 73 69 64 20 61 6e 64 20 6c 61 62 65 6c 20 | tion.about.prefix-sid.and.label. |
65320 | 6c 65 61 72 6e 65 64 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f | learned.Show.detailed.informatio |
65340 | 6e 20 61 62 6f 75 74 20 74 68 65 20 75 6e 64 65 72 6c 61 79 69 6e 67 20 70 68 79 73 69 63 61 6c | n.about.the.underlaying.physical |
65360 | 20 6c 69 6e 6b 73 20 6f 6e 20 67 69 76 65 6e 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 | .links.on.given.bond.`<interface |
65380 | 3e 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e | >`..Show.detailed.information.on |
653a0 | 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 64 65 74 61 69 6c | .given.`<interface>`.Show.detail |
653c0 | 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 6c 6f 6f 70 | ed.information.on.the.given.loop |
653e0 | 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 60 6c 6f 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c | back.interface.`lo`..Show.detail |
65400 | 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 75 6d 6d 61 72 79 20 6f 6e 20 67 69 76 65 6e 20 | ed.information.summary.on.given. |
65420 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 | `<interface>`.Show.flow.accounti |
65440 | 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 | ng.information.for.given.`<inter |
65460 | 66 61 63 65 3e 60 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 20 6f 6e 6c 79 2e | face>`.for.a.specific.host.only. |
65480 | 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f | .Show.flow.accounting.informatio |
654a0 | 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 | n.for.given.`<interface>`..Show. |
654c0 | 67 65 6e 65 72 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 73 70 65 63 69 66 | general.information.about.specif |
654e0 | 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 00 53 68 6f 77 20 69 6e 66 6f | ic.WireGuard.interface.Show.info |
65500 | 20 61 62 6f 75 74 20 74 68 65 20 57 69 72 65 67 75 61 72 64 20 73 65 72 76 69 63 65 2e 20 49 74 | .about.the.Wireguard.service..It |
65520 | 20 61 6c 73 6f 20 73 68 6f 77 73 20 74 68 65 20 6c 61 74 65 73 74 20 68 61 6e 64 73 68 61 6b 65 | .also.shows.the.latest.handshake |
65540 | 2e 00 53 68 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 70 68 79 73 69 63 61 | ..Show.information.about.physica |
65560 | 6c 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 6c 69 73 74 20 6f 66 20 49 50 73 | l.`<interface>`.Show.list.of.IPs |
65580 | 20 63 75 72 72 65 6e 74 6c 79 20 62 6c 6f 63 6b 65 64 20 62 79 20 53 53 48 20 64 79 6e 61 6d 69 | .currently.blocked.by.SSH.dynami |
655a0 | 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 | c-protection..Show.logs.for.mDNS |
655c0 | 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f | .repeater.service..Show.logs.fro |
655e0 | 6d 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 | m.a.given.container.Show.logs.fr |
65600 | 6f 6d 20 61 6c 6c 20 44 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 | om.all.DHCP.client.processes..Sh |
65620 | 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 | ow.logs.from.all.DHCPv6.client.p |
65640 | 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 | rocesses..Show.logs.from.specifi |
65660 | 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 | c.`interface`.DHCP.client.proces |
65680 | 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 | s..Show.logs.from.specific.`inte |
656a0 | 72 66 61 63 65 60 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 | rface`.DHCPv6.client.process..Sh |
656c0 | 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 | ow.only.information.for.specifie |
656e0 | 64 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 2e 00 53 68 6f 77 20 6f 6e | d.Certificate.Authority..Show.on |
65700 | 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 63 65 72 | ly.information.for.specified.cer |
65720 | 74 69 66 69 63 61 74 65 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 69 6e 20 74 68 | tificate..Show.only.leases.in.th |
65740 | 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 | e.specified.pool..Show.only.leas |
65760 | 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 | es.with.the.specified.state..Pos |
65780 | 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 62 61 6e 64 6f 6e 65 64 2c 20 61 63 74 69 76 65 2c | sible.states:.abandoned,.active, |
657a0 | 20 61 6c 6c 2c 20 62 61 63 6b 75 70 2c 20 65 78 70 69 72 65 64 2c 20 66 72 65 65 2c 20 72 65 6c | .all,.backup,.expired,.free,.rel |
657c0 | 65 61 73 65 64 2c 20 72 65 73 65 74 20 28 64 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 | eased,.reset.(default.=.active). |
657e0 | 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 | Show.only.leases.with.the.specif |
65800 | 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 6c 6c 2c | ied.state..Possible.states:.all, |
65820 | 20 61 63 74 69 76 65 2c 20 66 72 65 65 2c 20 65 78 70 69 72 65 64 2c 20 72 65 6c 65 61 73 65 64 | .active,.free,.expired,.released |
65840 | 2c 20 61 62 61 6e 64 6f 6e 65 64 2c 20 72 65 73 65 74 2c 20 62 61 63 6b 75 70 20 28 64 65 66 61 | ,.abandoned,.reset,.backup.(defa |
65860 | 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | ult.=.active).Show.routing.table |
65880 | 20 65 6e 74 72 79 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 53 68 | .entry.for.the.default.route..Sh |
658a0 | 6f 77 20 73 70 65 63 69 66 69 63 20 4d 41 43 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 | ow.specific.MACsec.interface.inf |
658c0 | 6f 72 6d 61 74 69 6f 6e 00 53 68 6f 77 20 73 74 61 74 75 73 20 6f 66 20 6e 65 77 20 73 65 74 75 | ormation.Show.status.of.new.setu |
658e0 | 70 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c | p:.Show.statuses.of.all.active.l |
65900 | 65 61 73 65 73 20 67 72 61 6e 74 65 64 20 62 79 20 6c 6f 63 61 6c 20 28 74 68 69 73 20 73 65 72 | eases.granted.by.local.(this.ser |
65920 | 76 65 72 29 20 6f 72 20 72 65 6d 6f 74 65 20 28 66 61 69 6c 6f 76 65 72 20 73 65 72 76 65 72 29 | ver).or.remote.(failover.server) |
65940 | 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 | :.Show.statuses.of.all.active.le |
65960 | 61 73 65 73 3a 00 53 68 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 | ases:.Show.the.DHCP.server.stati |
65980 | 73 74 69 63 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 | stics.for.the.specified.pool..Sh |
659a0 | 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 3a 00 53 | ow.the.DHCP.server.statistics:.S |
659c0 | 68 6f 77 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 | how.the.console.server.log..Show |
659e0 | 20 74 68 65 20 66 75 6c 6c 20 63 6f 6e 66 69 67 20 75 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 | .the.full.config.uploaded.to.the |
65a00 | 20 51 41 54 20 64 65 76 69 63 65 2e 00 53 68 6f 77 20 74 68 65 20 6c 69 73 74 20 6f 66 20 61 6c | .QAT.device..Show.the.list.of.al |
65a20 | 6c 20 61 63 74 69 76 65 20 63 6f 6e 74 61 69 6e 65 72 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f | l.active.containers..Show.the.lo |
65a40 | 63 61 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 73 2e 00 53 68 6f 77 20 74 68 65 20 6c | cal.container.images..Show.the.l |
65a60 | 6f 67 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 | ogs.of.a.specific.Rule-Set..Show |
65a80 | 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 | .the.logs.of.all.firewall;.show. |
65aa0 | 61 6c 6c 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 | all.bridge.firewall.logs;.show.a |
65ac0 | 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 77 61 72 64 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 | ll.logs.for.forward.hook;.show.a |
65ae0 | 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 77 61 72 64 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 | ll.logs.for.forward.hook.and.pri |
65b00 | 6f 72 69 74 79 20 66 69 6c 74 65 72 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 | ority.filter;.show.all.logs.for. |
65b20 | 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f | particular.custom.chain;.show.lo |
65b40 | 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 | gs.for.specific.Rule-Set..Show.t |
65b60 | 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c | he.logs.of.all.firewall;.show.al |
65b80 | 6c 20 69 70 76 34 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c | l.ipv4.firewall.logs;.show.all.l |
65ba0 | 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c | ogs.for.particular.hook;.show.al |
65bc0 | 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 | l.logs.for.particular.hook.and.p |
65be0 | 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 | riority;.show.all.logs.for.parti |
65c00 | 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f | cular.custom.chain;.show.logs.fo |
65c20 | 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f | r.specific.Rule-Set..Show.the.lo |
65c40 | 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 | gs.of.all.firewall;.show.all.ipv |
65c60 | 36 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 | 6.firewall.logs;.show.all.logs.f |
65c80 | 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 | or.particular.hook;.show.all.log |
65ca0 | 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 | s.for.particular.hook.and.priori |
65cc0 | 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 | ty;.show.all.logs.for.particular |
65ce0 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 | .custom.chain;.show.logs.for.spe |
65d00 | 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 72 6f 75 74 65 00 53 | cific.Rule-Set..Show.the.route.S |
65d20 | 68 6f 77 20 74 72 61 6e 73 63 65 69 76 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d | how.transceiver.information.from |
65d40 | 20 70 6c 75 67 69 6e 20 6d 6f 64 75 6c 65 73 2c 20 65 2e 67 20 53 46 50 2b 2c 20 51 53 46 50 00 | .plugin.modules,.e.g.SFP+,.QSFP. |
65d60 | 53 68 6f 77 69 6e 67 20 42 46 44 20 6d 6f 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 | Showing.BFD.monitored.static.rou |
65d80 | 74 65 73 00 53 68 6f 77 73 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 61 73 73 69 67 6e 65 64 | tes.Shows.status.of.all.assigned |
65da0 | 20 6c 65 61 73 65 73 3a 00 53 69 64 65 20 41 3a 00 53 69 64 65 20 42 3a 00 53 69 65 72 72 61 20 | .leases:.Side.A:.Side.B:.Sierra. |
65dc0 | 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 33 30 34 20 6d 69 6e 69 50 43 49 | Wireless.AirPrime.MC7304.miniPCI |
65de0 | 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 | e.card.(LTE).Sierra.Wireless.Air |
65e00 | 50 72 69 6d 65 20 4d 43 37 34 33 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 | Prime.MC7430.miniPCIe.card.(LTE) |
65e20 | 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 35 35 | .Sierra.Wireless.AirPrime.MC7455 |
65e40 | 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 | .miniPCIe.card.(LTE).Sierra.Wire |
65e60 | 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 | less.AirPrime.MC7710.miniPCIe.ca |
65e80 | 72 64 20 28 4c 54 45 29 00 53 69 6d 69 6c 61 72 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 20 61 72 | rd.(LTE).Similar.combinations.ar |
65ea0 | 65 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 74 68 65 20 64 65 61 64 2d 70 65 65 72 2d 64 | e.applicable.for.the.dead-peer-d |
65ec0 | 65 74 65 63 74 69 6f 6e 2e 00 53 69 6d 70 6c 65 20 42 61 62 65 6c 20 63 6f 6e 66 69 67 75 72 61 | etection..Simple.Babel.configura |
65ee0 | 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 | tion.using.2.nodes.and.redistrib |
65f00 | 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 | uting.connected.interfaces..Simp |
65f20 | 6c 65 20 52 49 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 | le.RIP.configuration.using.2.nod |
65f40 | 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 | es.and.redistributing.connected. |
65f60 | 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 20 73 65 74 75 70 20 77 69 74 68 20 6f 6e | interfaces..Simple.setup.with.on |
65f80 | 65 20 75 73 65 72 20 61 64 64 65 64 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e | e.user.added.and.password.authen |
65fa0 | 74 69 63 61 74 69 6f 6e 3a 00 53 69 6d 70 6c 65 20 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 61 | tication:.Simple.text.password.a |
65fc0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 69 6e 73 65 63 75 72 65 20 61 6e 64 20 64 65 | uthentication.is.insecure.and.de |
65fe0 | 70 72 65 63 61 74 65 64 20 69 6e 20 66 61 76 6f 75 72 20 6f 66 20 4d 44 35 20 48 4d 41 43 20 61 | precated.in.favour.of.MD5.HMAC.a |
66000 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 53 69 6e 63 65 20 62 6f 74 68 20 72 6f 75 74 65 72 | uthentication..Since.both.router |
66020 | 73 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 69 72 20 65 66 66 65 63 74 69 76 65 20 70 75 | s.do.not.know.their.effective.pu |
66040 | 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 2c 20 77 65 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c | blic.addresses,.we.set.the.local |
66060 | 2d 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 6f 20 22 61 6e 79 22 2e 00 53 | -address.of.the.peer.to."any"..S |
66080 | 69 6e 63 65 20 69 74 27 73 20 61 20 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 | ince.it's.a.HQ.and.branch.office |
660a0 | 73 20 73 65 74 75 70 2c 20 77 65 20 77 69 6c 6c 20 77 61 6e 74 20 61 6c 6c 20 63 6c 69 65 6e 74 | s.setup,.we.will.want.all.client |
660c0 | 73 20 74 6f 20 68 61 76 65 20 66 69 78 65 64 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 77 65 | s.to.have.fixed.addresses.and.we |
660e0 | 20 77 69 6c 6c 20 72 6f 75 74 65 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 | .will.route.traffic.to.specific. |
66100 | 73 75 62 6e 65 74 73 20 74 68 72 6f 75 67 68 20 74 68 65 6d 2e 20 57 65 20 6e 65 65 64 20 63 6f | subnets.through.them..We.need.co |
66120 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 63 6c 69 65 6e 74 20 74 6f 20 61 | nfiguration.for.each.client.to.a |
66140 | 63 68 69 65 76 65 20 74 68 69 73 2e 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 | chieve.this..Since.the.RADIUS.se |
66160 | 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 | rver.would.be.a.single.point.of. |
66180 | 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 | failure,.multiple.RADIUS.servers |
661a0 | 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 | .can.be.setup.and.will.be.used.s |
661c0 | 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 | ubsequentially..Since.the.RADIUS |
661e0 | 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 | .server.would.be.a.single.point. |
66200 | 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 | of.failure,.multiple.RADIUS.serv |
66220 | 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 | ers.can.be.setup.and.will.be.use |
66240 | 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 | d.subsequentially..For.example:. |
66260 | 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 | Since.the.mDNS.protocol.sends.th |
66280 | 65 20 3a 61 62 62 72 3a 60 41 41 28 41 75 74 68 6f 72 69 74 61 74 69 76 65 20 41 6e 73 77 65 72 | e.:abbr:`AA(Authoritative.Answer |
662a0 | 29 60 20 72 65 63 6f 72 64 73 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c | )`.records.in.the.packet.itself, |
662c0 | 20 74 68 65 20 72 65 70 65 61 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 | .the.repeater.does.not.need.to.f |
662e0 | 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 | orge.the.source.address..Instead |
66300 | 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 | ,.the.source.address.is.of.the.i |
66320 | 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 | nterface.that.repeats.the.packet |
66340 | 2e 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 | ..Since.the.mDNS.protocol.sends. |
66360 | 74 68 65 20 41 41 20 72 65 63 6f 72 64 73 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 | the.AA.records.in.the.packet.its |
66380 | 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 | elf,.the.repeater.does.not.need. |
663a0 | 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 | to.forge.the.source.address..Ins |
663c0 | 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 | tead,.the.source.address.is.of.t |
663e0 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 | he.interface.that.repeats.the.pa |
66400 | 63 6b 65 74 2e 00 53 69 6e 63 65 20 77 65 20 61 72 65 20 61 6e 61 6c 79 7a 69 6e 67 20 61 74 74 | cket..Since.we.are.analyzing.att |
66420 | 61 63 6b 73 20 74 6f 20 61 6e 64 20 66 72 6f 6d 20 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 6e 65 | acks.to.and.from.our.internal.ne |
66440 | 74 77 6f 72 6b 2c 20 74 77 6f 20 74 79 70 65 73 20 6f 66 20 61 74 74 61 63 6b 73 20 63 61 6e 20 | twork,.two.types.of.attacks.can. |
66460 | 62 65 20 69 64 65 6e 74 69 66 69 65 64 2c 20 61 6e 64 20 64 69 66 66 65 72 65 6e 74 73 20 61 63 | be.identified,.and.differents.ac |
66480 | 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 64 3a 00 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 | tions.are.needed:.Single.VXLAN.d |
664a0 | 65 76 69 63 65 20 28 53 56 44 29 00 53 69 74 65 20 74 6f 20 53 69 74 65 20 56 50 4e 00 53 69 74 | evice.(SVD).Site.to.Site.VPN.Sit |
664c0 | 65 2d 74 6f 2d 53 69 74 65 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 70 72 6f 76 | e-to-Site.Site-to-site.mode.prov |
664e0 | 69 64 65 73 20 61 20 77 61 79 20 74 6f 20 61 64 64 20 72 65 6d 6f 74 65 20 70 65 65 72 73 2c 20 | ides.a.way.to.add.remote.peers,. |
66500 | 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 65 78 63 | which.could.be.configured.to.exc |
66520 | 68 61 6e 67 65 20 65 6e 63 72 79 70 74 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 74 77 | hange.encrypted.information.betw |
66540 | 65 65 6e 20 74 68 65 6d 20 61 6e 64 20 56 79 4f 53 20 69 74 73 65 6c 66 20 6f 72 20 63 6f 6e 6e | een.them.and.VyOS.itself.or.conn |
66560 | 65 63 74 65 64 2f 72 6f 75 74 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 53 69 74 65 2d 74 6f 2d 73 | ected/routed.networks..Site-to-s |
66580 | 69 74 65 20 6d 6f 64 65 20 73 75 70 70 6f 72 74 73 20 78 2e 35 30 39 20 62 75 74 20 64 6f 65 73 | ite.mode.supports.x.509.but.does |
665a0 | 6e 27 74 20 72 65 71 75 69 72 65 20 69 74 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 77 6f 72 6b | n't.require.it.and.can.also.work |
665c0 | 20 77 69 74 68 20 73 74 61 74 69 63 20 6b 65 79 73 2c 20 77 68 69 63 68 20 69 73 20 73 69 6d 70 | .with.static.keys,.which.is.simp |
665e0 | 6c 65 72 20 69 6e 20 6d 61 6e 79 20 63 61 73 65 73 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 | ler.in.many.cases..In.this.examp |
66600 | 6c 65 2c 20 77 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 69 6d 70 6c 65 20 73 69 74 | le,.we'll.configure.a.simple.sit |
66620 | 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 20 74 75 6e 6e 65 6c 20 75 73 69 6e 67 20 61 | e-to-site.OpenVPN.tunnel.using.a |
66640 | 20 32 30 34 38 2d 62 69 74 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 2e 00 53 69 7a 65 20 6f | .2048-bit.pre-shared.key..Size.o |
66660 | 66 20 74 68 65 20 52 53 41 20 6b 65 79 2e 00 53 6c 61 76 65 20 73 65 6c 65 63 74 69 6f 6e 20 66 | f.the.RSA.key..Slave.selection.f |
66680 | 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 64 6f 6e 65 20 61 63 63 6f | or.outgoing.traffic.is.done.acco |
666a0 | 72 64 69 6e 67 20 74 6f 20 74 68 65 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 | rding.to.the.transmit.hash.polic |
666c0 | 79 2c 20 77 68 69 63 68 20 6d 61 79 20 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 68 65 | y,.which.may.be.changed.from.the |
666e0 | 20 64 65 66 61 75 6c 74 20 73 69 6d 70 6c 65 20 58 4f 52 20 70 6f 6c 69 63 79 20 76 69 61 20 74 | .default.simple.XOR.policy.via.t |
66700 | 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c | he.:cfgcmd:`hash-policy`.option, |
66720 | 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f 77 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 | .documented.below..So.in.our.fir |
66740 | 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 | ewall.policy,.we.want.to.allow.t |
66760 | 72 61 66 66 69 63 20 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e 20 74 68 65 20 6f 75 74 73 69 64 65 20 | raffic.coming.in.on.the.outside. |
66780 | 69 6e 74 65 72 66 61 63 65 2c 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 54 43 50 20 70 6f 72 74 | interface,.destined.for.TCP.port |
667a0 | 20 38 30 20 61 6e 64 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 31 36 | .80.and.the.IP.address.of.192.16 |
667c0 | 38 2e 30 2e 31 30 30 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 | 8.0.100..So.in.our.firewall.rule |
667e0 | 73 65 74 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 77 68 | set,.we.want.to.allow.traffic.wh |
66800 | 69 63 68 20 70 72 65 76 69 6f 75 73 6c 79 20 6d 61 74 63 68 65 64 20 61 20 64 65 73 74 69 6e 61 | ich.previously.matched.a.destina |
66820 | 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 76 6f 69 64 | tion.nat.rule..In.order.to.avoid |
66840 | 20 63 72 65 61 74 69 6e 67 20 6d 61 6e 79 20 72 75 6c 65 73 2c 20 6f 6e 65 20 66 6f 72 20 65 61 | .creating.many.rules,.one.for.ea |
66860 | 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2c 20 77 65 20 63 61 6e 20 | ch.destination.nat.rule,.we.can. |
66880 | 61 63 63 65 70 74 20 61 6c 6c 20 2a 2a 27 64 6e 61 74 27 2a 2a 20 63 6f 6e 6e 65 63 74 69 6f 6e | accept.all.**'dnat'**.connection |
668a0 | 73 20 77 69 74 68 20 6f 6e 65 20 73 69 6d 70 6c 65 20 72 75 6c 65 2c 20 75 73 69 6e 67 20 60 60 | s.with.one.simple.rule,.using.`` |
668c0 | 63 6f 6e 6e 65 63 74 69 6f 6e 2d 73 74 61 74 75 73 60 60 20 6d 61 74 63 68 65 72 3a 00 53 6f 2c | connection-status``.matcher:.So, |
668e0 | 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 66 | .firewall.configuration.needed.f |
66900 | 6f 72 20 74 68 69 73 20 73 65 74 75 70 3a 00 53 6f 6c 61 72 57 69 6e 64 73 00 53 6f 6d 65 20 49 | or.this.setup:.SolarWinds.Some.I |
66920 | 53 50 73 20 62 79 20 64 65 66 61 75 6c 74 20 6f 6e 6c 79 20 64 65 6c 65 67 61 74 65 20 61 20 2f | SPs.by.default.only.delegate.a./ |
66940 | 36 34 20 70 72 65 66 69 78 2e 20 54 6f 20 72 65 71 75 65 73 74 20 66 6f 72 20 61 20 73 70 65 63 | 64.prefix..To.request.for.a.spec |
66960 | 69 66 69 63 20 70 72 65 66 69 78 20 73 69 7a 65 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e | ific.prefix.size.use.this.option |
66980 | 20 74 6f 20 72 65 71 75 65 73 74 20 66 6f 72 20 61 20 62 69 67 67 65 72 20 64 65 6c 65 67 61 74 | .to.request.for.a.bigger.delegat |
669a0 | 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 64 20 60 3c 69 64 3e 60 2e 20 54 68 69 73 20 76 61 6c | ion.for.this.pd.`<id>`..This.val |
669c0 | 75 65 20 69 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 33 32 20 2d 20 36 34 20 | ue.is.in.the.range.from.32.-.64. |
669e0 | 73 6f 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 71 75 65 73 74 20 75 70 20 74 6f 20 61 20 2f 33 32 | so.you.could.request.up.to.a./32 |
66a00 | 20 70 72 65 66 69 78 20 28 69 66 20 79 6f 75 72 20 49 53 50 20 61 6c 6c 6f 77 73 20 74 68 69 73 | .prefix.(if.your.ISP.allows.this |
66a20 | 29 20 64 6f 77 6e 20 74 6f 20 61 20 2f 36 34 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 53 6f 6d 65 | ).down.to.a./64.delegation..Some |
66a40 | 20 49 54 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 72 65 71 75 69 72 65 20 74 68 65 20 75 73 65 | .IT.environments.require.the.use |
66a60 | 20 6f 66 20 61 20 70 72 6f 78 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 6e | .of.a.proxy.to.connect.to.the.In |
66a80 | 74 65 72 6e 65 74 2e 20 57 69 74 68 6f 75 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 | ternet..Without.this.configurati |
66aa0 | 6f 6e 20 56 79 4f 53 20 75 70 64 61 74 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 73 | on.VyOS.updates.could.not.be.ins |
66ac0 | 74 61 6c 6c 65 64 20 64 69 72 65 63 74 6c 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 6f 70 | talled.directly.by.using.the.:op |
66ae0 | 63 6d 64 3a 60 61 64 64 20 73 79 73 74 65 6d 20 69 6d 61 67 65 60 20 63 6f 6d 6d 61 6e 64 20 28 | cmd:`add.system.image`.command.( |
66b00 | 3a 72 65 66 3a 60 75 70 64 61 74 65 5f 76 79 6f 73 60 29 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 | :ref:`update_vyos`)..Some.RADIUS |
66b20 | 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 | .severs.use.an.access.control.li |
66b40 | 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 | st.which.allows.or.denies.querie |
66b60 | 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f | s,.make.sure.to.add.your.VyOS.ro |
66b80 | 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e | uter.to.the.allowed.client.list. |
66ba0 | 00 53 6f 6d 65 20 52 41 44 49 55 53 5f 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 | .Some.RADIUS_.severs.use.an.acce |
66bc0 | 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 | ss.control.list.which.allows.or. |
66be0 | 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 | denies.queries,.make.sure.to.add |
66c00 | 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 | .your.VyOS.router.to.the.allowed |
66c20 | 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 | .client.list..Some.application.s |
66c40 | 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 28 41 53 50 73 29 20 6f 70 65 72 61 74 65 20 | ervice.providers.(ASPs).operate. |
66c60 | 61 20 56 50 4e 20 67 61 74 65 77 61 79 20 74 6f 20 70 72 6f 76 69 64 65 20 61 63 63 65 73 73 20 | a.VPN.gateway.to.provide.access. |
66c80 | 74 6f 20 74 68 65 69 72 20 69 6e 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 | to.their.internal.resources,.and |
66ca0 | 20 72 65 71 75 69 72 65 20 74 68 61 74 20 61 20 63 6f 6e 6e 65 63 74 69 6e 67 20 6f 72 67 61 6e | .require.that.a.connecting.organ |
66cc0 | 69 73 61 74 69 6f 6e 20 74 72 61 6e 73 6c 61 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f | isation.translate.all.traffic.to |
66ce0 | 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f | .the.service.provider.network.to |
66d00 | 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 | .a.source.address.provided.by.th |
66d20 | 65 20 41 53 50 2e 00 53 6f 6d 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 69 65 73 | e.ASP..Some.container.registries |
66d40 | 20 72 65 71 75 69 72 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 6f 20 62 65 20 75 73 65 64 2e | .require.credentials.to.be.used. |
66d60 | 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 | .Some.firewall.settings.are.glob |
66d80 | 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f | al.and.have.an.affect.on.the.who |
66da0 | 6c 65 20 73 79 73 74 65 6d 2e 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 | le.system..Some.firewall.setting |
66dc0 | 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 | s.are.global.and.have.an.affect. |
66de0 | 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 69 73 20 73 65 63 | on.the.whole.system..In.this.sec |
66e00 | 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | tion.there's.useful.information. |
66e20 | 61 62 6f 75 74 20 74 68 65 73 65 20 67 6c 6f 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 | about.these.global-options.that. |
66e40 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 76 79 6f 73 20 63 6c 69 | can.be.configured.using.vyos.cli |
66e60 | 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 65 20 | ..Some.policies.already.include. |
66e80 | 6f 74 68 65 72 20 65 6d 62 65 64 64 65 64 20 70 6f 6c 69 63 69 65 73 20 69 6e 73 69 64 65 2e 20 | other.embedded.policies.inside.. |
66ea0 | 54 68 61 74 20 69 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 53 68 61 70 65 72 5f 3a 20 65 61 63 | That.is.the.case.of.Shaper_:.eac |
66ec0 | 68 20 6f 66 20 69 74 73 20 63 6c 61 73 73 65 73 20 75 73 65 20 66 61 69 72 2d 71 75 65 75 65 20 | h.of.its.classes.use.fair-queue. |
66ee0 | 75 6e 6c 65 73 73 20 79 6f 75 20 63 68 61 6e 67 65 20 69 74 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 | unless.you.change.it..Some.polic |
66f00 | 69 65 73 20 63 61 6e 20 62 65 20 63 6f 6d 62 69 6e 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 | ies.can.be.combined,.you.will.be |
66f20 | 20 61 62 6c 65 20 74 6f 20 65 6d 62 65 64 5f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 | .able.to.embed_.a.different.poli |
66f40 | 63 79 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 20 63 6c 61 | cy.that.will.be.applied.to.a.cla |
66f60 | 73 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 70 6f 6c 69 63 79 2e 00 53 6f 6d 65 20 70 72 6f 78 | ss.of.the.main.policy..Some.prox |
66f80 | 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 | ys.require/support.the."basic".H |
66fa0 | 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 | TTP.authentication.scheme.as.per |
66fc0 | 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 70 61 73 73 77 6f 72 64 20 63 61 | .:rfc:`7617`,.thus.a.password.ca |
66fe0 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 | n.be.configured..Some.proxys.req |
67000 | 75 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 | uire/support.the."basic".HTTP.au |
67020 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a | thentication.scheme.as.per.:rfc: |
67040 | 60 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 75 73 65 72 6e 61 6d 65 20 63 61 6e 20 62 65 20 63 | `7617`,.thus.a.username.can.be.c |
67060 | 6f 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 20 72 65 63 65 6e 74 20 49 53 50 73 20 72 65 71 75 | onfigured..Some.recent.ISPs.requ |
67080 | 69 72 65 20 79 6f 75 20 74 6f 20 62 75 69 6c 64 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 | ire.you.to.build.the.PPPoE.conne |
670a0 | 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 | ction.through.a.VLAN.interface.. |
670c0 | 4f 6e 65 20 6f 66 20 74 68 6f 73 65 20 49 53 50 73 20 69 73 20 65 2e 67 2e 20 44 65 75 74 73 63 | One.of.those.ISPs.is.e.g..Deutsc |
670e0 | 68 65 20 54 65 6c 65 6b 6f 6d 20 69 6e 20 47 65 72 6d 61 6e 79 2e 20 56 79 4f 53 20 63 61 6e 20 | he.Telekom.in.Germany..VyOS.can. |
67100 | 65 61 73 69 6c 79 20 63 72 65 61 74 65 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 74 68 | easily.create.a.PPPoE.session.th |
67120 | 72 6f 75 67 68 20 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 | rough.an.encapsulated.VLAN.inter |
67140 | 66 61 63 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | face..The.following.configuratio |
67160 | 6e 20 77 69 6c 6c 20 72 75 6e 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e | n.will.run.your.PPPoE.connection |
67180 | 20 74 68 72 6f 75 67 68 20 56 4c 41 4e 37 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 | .through.VLAN7.which.is.the.defa |
671a0 | 75 6c 74 20 56 4c 41 4e 20 66 6f 72 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 3a 00 53 | ult.VLAN.for.Deutsche.Telekom:.S |
671c0 | 6f 6d 65 20 73 65 72 76 69 63 65 73 20 64 6f 6e 27 74 20 77 6f 72 6b 20 63 6f 72 72 65 63 74 6c | ome.services.don't.work.correctl |
671e0 | 79 20 77 68 65 6e 20 62 65 69 6e 67 20 68 61 6e 64 6c 65 64 20 76 69 61 20 61 20 77 65 62 20 70 | y.when.being.handled.via.a.web.p |
67200 | 72 6f 78 79 2e 20 53 6f 20 73 6f 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 | roxy..So.sometimes.it.is.useful. |
67220 | 74 6f 20 62 79 70 61 73 73 20 61 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 53 | to.bypass.a.transparent.proxy:.S |
67240 | 6f 6d 65 20 75 73 65 72 73 20 74 65 6e 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 69 72 20 | ome.users.tend.to.connect.their. |
67260 | 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 20 74 | mobile.devices.using.WireGuard.t |
67280 | 6f 20 74 68 65 69 72 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 54 6f 20 65 61 73 65 20 64 65 70 | o.their.VyOS.router..To.ease.dep |
672a0 | 6c 6f 79 6d 65 6e 74 20 6f 6e 65 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 61 20 22 70 65 72 20 | loyment.one.can.generate.a."per. |
672c0 | 6d 6f 62 69 6c 65 22 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 56 | mobile".configuration.from.the.V |
672e0 | 79 4f 53 20 43 4c 49 2e 00 53 6f 6d 65 74 69 6d 65 73 20 6f 70 74 69 6f 6e 20 6c 69 6e 65 73 20 | yOS.CLI..Sometimes.option.lines. |
67300 | 69 6e 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 | in.the.generated.OpenVPN.configu |
67320 | 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 20 71 75 6f 74 65 73 2e 20 54 68 69 73 20 69 73 20 64 | ration.require.quotes..This.is.d |
67340 | 6f 6e 65 20 74 68 72 6f 75 67 68 20 61 20 68 61 63 6b 20 6f 6e 20 6f 75 72 20 63 6f 6e 66 69 67 | one.through.a.hack.on.our.config |
67360 | 20 67 65 6e 65 72 61 74 6f 72 2e 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 71 75 6f 74 65 73 20 | .generator..You.can.pass.quotes. |
67380 | 75 73 69 6e 67 20 74 68 65 20 60 60 26 71 75 6f 74 3b 60 60 20 73 74 61 74 65 6d 65 6e 74 2e 00 | using.the.``"``.statement.. |
673a0 | 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | Sort.the.output.by.the.specified |
673c0 | 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 6b 65 79 73 3a 20 65 78 70 69 72 65 73 2c 20 69 61 | .key..Possible.keys:.expires,.ia |
673e0 | 69 64 5f 64 75 69 64 2c 20 69 70 2c 20 6c 61 73 74 5f 63 6f 6d 6d 2c 20 70 6f 6f 6c 2c 20 72 65 | id_duid,.ip,.last_comm,.pool,.re |
67400 | 6d 61 69 6e 69 6e 67 2c 20 73 74 61 74 65 2c 20 74 79 70 65 20 28 64 65 66 61 75 6c 74 20 3d 20 | maining,.state,.type.(default.=. |
67420 | 69 70 29 00 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 | ip).Sort.the.output.by.the.speci |
67440 | 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 6b 65 79 73 3a 20 69 70 2c 20 68 61 72 | fied.key..Possible.keys:.ip,.har |
67460 | 64 77 61 72 65 5f 61 64 64 72 65 73 73 2c 20 73 74 61 74 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 | dware_address,.state,.start,.end |
67480 | 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 70 6f 6f 6c 2c 20 68 6f 73 74 6e 61 6d 65 20 28 64 65 66 | ,.remaining,.pool,.hostname.(def |
674a0 | 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 75 72 63 65 20 41 64 64 72 65 73 73 00 53 6f 75 72 63 65 | ault.=.ip).Source.Address.Source |
674c0 | 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 | .IP.address.used.for.VXLAN.under |
674e0 | 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e | lay..This.is.mandatory.when.usin |
67500 | 67 20 56 58 4c 41 4e 20 76 69 61 20 4c 32 56 50 4e 2f 45 56 50 4e 2e 00 53 6f 75 72 63 65 20 49 | g.VXLAN.via.L2VPN/EVPN..Source.I |
67520 | 50 76 34 20 61 64 64 72 65 73 73 20 75 73 65 64 20 69 6e 20 61 6c 6c 20 52 41 44 49 55 53 20 73 | Pv4.address.used.in.all.RADIUS.s |
67540 | 65 72 76 65 72 20 71 75 65 69 72 65 73 2e 00 53 6f 75 72 63 65 20 4e 41 54 20 72 75 6c 65 73 00 | erver.queires..Source.NAT.rules. |
67560 | 53 6f 75 72 63 65 20 50 72 65 66 69 78 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 | Source.Prefix.Source.all.connect |
67580 | 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 | ions.to.the.RADIUS.servers.from. |
675a0 | 67 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 | given.VRF.`<name>`..Source.all.c |
675c0 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 73 | onnections.to.the.TACACS.servers |
675e0 | 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 | .from.given.VRF.`<name>`..Source |
67600 | 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 6d 61 74 63 68 2e 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 | .protocol.to.match..Source.tunne |
67620 | 6c 20 66 72 6f 6d 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 53 6f 75 72 63 65 20 74 75 | l.from.dummy.interface.Source.tu |
67640 | 6e 6e 65 6c 20 66 72 6f 6d 20 6c 6f 6f 70 62 61 63 6b 73 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 | nnel.from.loopbacks.Spanning.Tre |
67660 | 65 20 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 77 61 72 64 69 6e 67 20 60 3c 64 65 6c 61 79 3e 60 20 | e.Protocol.forwarding.`<delay>`. |
67680 | 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 53 70 61 6e 6e 69 | in.seconds.(default:.15)..Spanni |
676a0 | 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 68 65 6c 6c 6f 20 61 64 76 65 72 74 69 73 65 | ng.Tree.Protocol.hello.advertise |
676c0 | 6d 65 6e 74 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 | ment.`<interval>`.in.seconds.(de |
676e0 | 66 61 75 6c 74 3a 20 32 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f | fault:.2)..Spanning.Tree.Protoco |
67700 | 6c 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 56 | l.is.not.enabled.by.default.in.V |
67720 | 79 4f 53 2e 20 3a 72 65 66 3a 60 73 74 70 60 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 65 6e | yOS..:ref:`stp`.can.be.easily.en |
67740 | 61 62 6c 65 64 20 69 66 20 6e 65 65 64 65 64 2e 00 53 70 61 74 69 61 6c 20 4d 75 6c 74 69 70 6c | abled.if.needed..Spatial.Multipl |
67760 | 65 78 69 6e 67 20 50 6f 77 65 72 20 53 61 76 65 20 28 53 4d 50 53 29 20 73 65 74 74 69 6e 67 73 | exing.Power.Save.(SMPS).settings |
67780 | 00 53 70 65 63 66 79 69 6e 67 20 6e 68 73 20 6d 61 6b 65 73 20 61 6c 6c 20 6d 75 6c 74 69 63 61 | .Specfying.nhs.makes.all.multica |
677a0 | 73 74 20 70 61 63 6b 65 74 73 20 74 6f 20 62 65 20 72 65 70 65 61 74 65 64 20 74 6f 20 65 61 63 | st.packets.to.be.repeated.to.eac |
677c0 | 68 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 78 74 20 68 6f 70 | h.statically.configured.next.hop |
677e0 | 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f | ..Specifies.:abbr:`MPPE.(Microso |
67800 | 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e | ft.Point-to-Point.Encryption)`.n |
67820 | 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 | egotiation.preference..Specifies |
67840 | 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f | .:abbr:`MPPE.(Microsoft.Point-to |
67860 | 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 6f 61 74 69 6f 6e | -Point.Encryption)`.negotioation |
67880 | 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 49 50 20 61 64 64 72 65 73 | .preference..Specifies.IP.addres |
678a0 | 73 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 | s.for.Dynamic.Authorization.Exte |
678c0 | 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 70 65 63 69 66 69 65 73 20 | nsion.server.(DM/CoA).Specifies. |
678e0 | 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 | IPv4.negotiation.preference..Spe |
67900 | 63 69 66 69 65 73 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e | cifies.IPv6.negotiation.preferen |
67920 | 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 74 6f 20 72 65 | ce..Specifies.Service-Name.to.re |
67940 | 73 70 6f 6e 64 2e 20 49 66 20 61 62 73 65 6e 74 20 61 6e 79 20 53 65 72 76 69 63 65 2d 4e 61 6d | spond..If.absent.any.Service-Nam |
67960 | 65 20 69 73 20 61 63 63 65 70 74 61 62 6c 65 20 61 6e 64 20 63 6c 69 65 6e 74 e2 80 99 73 20 53 | e.is.acceptable.and.client...s.S |
67980 | 65 72 76 69 63 65 2d 4e 61 6d 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 2e 20 41 | ervice-Name.will.be.sent.back..A |
679a0 | 6c 73 6f 20 70 6f 73 73 69 62 6c 65 20 73 65 74 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 | lso.possible.set.multiple.servic |
679c0 | 65 2d 6e 61 6d 65 73 3a 20 60 73 6e 31 2c 73 6e 32 2c 73 6e 33 60 00 53 70 65 63 69 66 69 65 73 | e-names:.`sn1,sn2,sn3`.Specifies |
679e0 | 20 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 65 72 76 65 72 20 69 70 | .address.to.be.used.as.server.ip |
67a00 | 20 61 64 64 72 65 73 73 20 69 66 20 72 61 64 69 75 73 20 63 61 6e 20 61 73 73 69 67 6e 20 6f 6e | .address.if.radius.can.assign.on |
67a20 | 6c 79 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 2e 20 49 6e 20 73 75 63 68 20 63 61 73 65 20 | ly.client.address..In.such.case. |
67a40 | 69 66 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 20 69 73 20 6d 61 74 63 68 65 64 20 6e 65 74 | if.client.address.is.matched.net |
67a60 | 77 6f 72 6b 20 61 6e 64 20 6d 61 73 6b 20 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 61 64 64 | work.and.mask.then.specified.add |
67a80 | 72 65 73 73 20 61 6e 64 20 6d 61 73 6b 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 59 6f 75 20 | ress.and.mask.will.be.used..You. |
67aa0 | 63 61 6e 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 75 63 68 20 6f 70 74 69 6f 6e | can.specify.multiple.such.option |
67ac0 | 73 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 72 6f 75 74 65 2d 6d | s..Specifies.an.optional.route-m |
67ae0 | 61 70 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 72 6f 75 74 65 73 20 69 6d 70 6f 72 | ap.to.be.applied.to.routes.impor |
67b00 | 74 65 64 20 6f 72 20 65 78 70 6f 72 74 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 | ted.or.exported.between.the.curr |
67b20 | 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 53 70 65 63 69 66 69 | ent.unicast.VRF.and.VPN..Specifi |
67b40 | 65 73 20 61 6e 20 75 70 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 60 3c 69 6e 74 65 72 66 61 | es.an.upstream.network.`<interfa |
67b60 | 63 65 3e 60 20 66 72 6f 6d 20 77 68 69 63 68 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 60 3c 73 | ce>`.from.which.replies.from.`<s |
67b80 | 65 72 76 65 72 3e 60 20 61 6e 64 20 6f 74 68 65 72 20 72 65 6c 61 79 20 61 67 65 6e 74 73 20 77 | erver>`.and.other.relay.agents.w |
67ba0 | 69 6c 6c 20 62 65 20 61 63 63 65 70 74 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 66 69 78 65 64 | ill.be.accepted..Specifies.fixed |
67bc0 | 20 6f 72 20 72 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 | .or.random.interface.identifier. |
67be0 | 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 | for.IPv6..By.default.is.fixed..S |
67c00 | 70 65 63 69 66 69 65 73 20 68 6f 77 20 6c 6f 6e 67 20 73 71 75 69 64 20 61 73 73 75 6d 65 73 20 | pecifies.how.long.squid.assumes. |
67c20 | 61 6e 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 61 6c 69 64 61 74 65 64 20 75 73 65 72 6e 61 6d 65 | an.externally.validated.username |
67c40 | 3a 70 61 73 73 77 6f 72 64 20 70 61 69 72 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 2d 20 69 6e | :password.pair.is.valid.for.-.in |
67c60 | 20 6f 74 68 65 72 20 77 6f 72 64 73 20 68 6f 77 20 6f 66 74 65 6e 20 74 68 65 20 68 65 6c 70 65 | .other.words.how.often.the.helpe |
67c80 | 72 20 70 72 6f 67 72 61 6d 20 69 73 20 63 61 6c 6c 65 64 20 66 6f 72 20 74 68 61 74 20 75 73 65 | r.program.is.called.for.that.use |
67ca0 | 72 2e 20 53 65 74 20 74 68 69 73 20 6c 6f 77 20 74 6f 20 66 6f 72 63 65 20 72 65 76 61 6c 69 64 | r..Set.this.low.to.force.revalid |
67cc0 | 61 74 69 6f 6e 20 77 69 74 68 20 73 68 6f 72 74 20 6c 69 76 65 64 20 70 61 73 73 77 6f 72 64 73 | ation.with.short.lived.passwords |
67ce0 | 2e 00 53 70 65 63 69 66 69 65 73 20 69 66 20 75 6e 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 20 6c 69 | ..Specifies.if.unknown.source.li |
67d00 | 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 | nk.layer.addresses.and.IP.addres |
67d20 | 73 65 73 20 61 72 65 20 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 56 58 4c 41 4e 20 64 | ses.are.entered.into.the.VXLAN.d |
67d40 | 65 76 69 63 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 61 74 61 62 61 73 65 2e 00 53 70 65 63 69 | evice.forwarding.database..Speci |
67d60 | 66 69 65 73 20 6e 75 6d 62 65 72 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 6b 65 65 | fies.number.of.interfaces.to.kee |
67d80 | 70 20 69 6e 20 63 61 63 68 65 2e 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 64 6f 6e e2 80 99 | p.in.cache..It.means.that.don... |
67da0 | 74 20 64 65 73 74 72 6f 79 20 69 6e 74 65 72 66 61 63 65 20 61 66 74 65 72 20 63 6f 72 72 65 73 | t.destroy.interface.after.corres |
67dc0 | 70 6f 6e 64 69 6e 67 20 73 65 73 73 69 6f 6e 20 69 73 20 64 65 73 74 72 6f 79 65 64 2c 20 69 6e | ponding.session.is.destroyed,.in |
67de0 | 73 74 65 61 64 20 70 6c 61 63 65 20 69 74 20 74 6f 20 63 61 63 68 65 20 61 6e 64 20 75 73 65 20 | stead.place.it.to.cache.and.use. |
67e00 | 69 74 20 6c 61 74 65 72 20 66 6f 72 20 6e 65 77 20 73 65 73 73 69 6f 6e 73 20 72 65 70 65 61 74 | it.later.for.new.sessions.repeat |
67e20 | 65 64 6c 79 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 72 65 64 75 63 65 20 6b 65 72 6e 65 6c 2d | edly..This.should.reduce.kernel- |
67e40 | 6c 65 76 65 6c 20 69 6e 74 65 72 66 61 63 65 20 63 72 65 61 74 69 6f 6e 2f 64 65 6c 65 74 69 6f | level.interface.creation/deletio |
67e60 | 6e 20 72 61 74 65 20 6c 61 63 6b 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a | n.rate.lack..Default.value.is.** |
67e80 | 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 6f 6e 64 69 6e | 0**..Specifies.one.of.the.bondin |
67ea0 | 67 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 38 30 32 2e 33 | g.policies..The.default.is.802.3 |
67ec0 | 61 64 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 20 61 72 65 3a 00 53 70 65 63 69 66 69 | ad..Possible.values.are:.Specifi |
67ee0 | 65 73 20 70 65 65 72 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 | es.peer.interface.identifier.for |
67f00 | 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 | .IPv6..By.default.is.fixed..Spec |
67f20 | 69 66 69 65 73 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 | ifies.proxy.service.listening.ad |
67f40 | 64 72 65 73 73 2e 20 54 68 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 | dress..The.listen.address.is.the |
67f60 | 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 77 65 62 20 70 72 6f | .IP.address.on.which.the.web.pro |
67f80 | 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 72 65 | xy.service.listens.for.client.re |
67fa0 | 71 75 65 73 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 72 65 6c 61 79 20 61 67 65 6e 74 20 49 50 | quests..Specifies.relay.agent.IP |
67fc0 | 20 61 64 64 72 65 00 53 70 65 63 69 66 69 65 73 20 73 69 6e 67 6c 65 20 60 3c 67 61 74 65 77 61 | .addre.Specifies.single.`<gatewa |
67fe0 | 79 3e 60 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 6c 6f 63 | y>`.IP.address.to.be.used.as.loc |
68000 | 61 6c 20 61 64 64 72 65 73 73 20 6f 66 20 50 50 50 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 70 | al.address.of.PPP.interfaces..Sp |
68020 | 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f | ecifies.that.the.:abbr:`NBMA.(No |
68040 | 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 | n-broadcast.multiple-access.netw |
68060 | 6f 72 6b 29 60 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 | ork)`.addresses.of.the.next.hop. |
68080 | 73 65 72 76 65 72 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 64 6f 6d 61 69 | servers.are.defined.in.the.domai |
680a0 | 6e 20 6e 61 6d 65 20 6e 62 6d 61 2d 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2e 20 46 6f 72 20 65 61 63 | n.name.nbma-domain-name..For.eac |
680c0 | 68 20 41 20 72 65 63 6f 72 64 20 6f 70 65 6e 6e 68 72 70 20 63 72 65 61 74 65 73 20 61 20 64 79 | h.A.record.opennhrp.creates.a.dy |
680e0 | 6e 61 6d 69 63 20 4e 48 53 20 65 6e 74 72 79 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 41 | namic.NHS.entry..Specifies.the.A |
68100 | 52 50 20 6c 69 6e 6b 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 | RP.link.monitoring.`<time>`.in.s |
68120 | 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | econds..Specifies.the.IP.address |
68140 | 65 73 20 74 6f 20 75 73 65 20 61 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 70 65 65 72 | es.to.use.as.ARP.monitoring.peer |
68160 | 73 20 77 68 65 6e 20 3a 63 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 69 6e 74 65 | s.when.:cfgcmd:`arp-monitor.inte |
68180 | 72 76 61 6c 60 20 6f 70 74 69 6f 6e 20 69 73 20 3e 20 30 2e 20 54 68 65 73 65 20 61 72 65 20 74 | rval`.option.is.>.0..These.are.t |
681a0 | 68 65 20 74 61 72 67 65 74 73 20 6f 66 20 74 68 65 20 41 52 50 20 72 65 71 75 65 73 74 20 73 65 | he.targets.of.the.ARP.request.se |
681c0 | 6e 74 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 68 65 61 6c 74 68 20 6f 66 20 74 68 | nt.to.determine.the.health.of.th |
681e0 | 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 73 2e 00 53 70 65 63 69 66 69 65 73 | e.link.to.the.targets..Specifies |
68200 | 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 73 73 61 | .the.available.:abbr:`MAC.(Messa |
68220 | 67 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 43 6f 64 65 29 60 20 61 6c 67 6f 72 69 74 | ge.Authentication.Code)`.algorit |
68240 | 68 6d 73 2e 20 54 68 65 20 4d 41 43 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 75 73 65 64 20 69 | hms..The.MAC.algorithm.is.used.i |
68260 | 6e 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 66 6f 72 20 64 61 74 61 20 69 6e | n.protocol.version.2.for.data.in |
68280 | 74 65 67 72 69 74 79 20 70 72 6f 74 65 63 74 69 6f 6e 2e 20 4d 75 6c 74 69 70 6c 65 20 61 6c 67 | tegrity.protection..Multiple.alg |
682a0 | 6f 72 69 74 68 6d 73 20 63 61 6e 20 62 65 20 70 72 6f 76 69 64 65 64 2e 00 53 70 65 63 69 66 69 | orithms.can.be.provided..Specifi |
682c0 | 65 73 20 74 68 65 20 62 61 73 65 20 44 4e 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 75 | es.the.base.DN.under.which.the.u |
682e0 | 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | sers.are.located..Specifies.the. |
68300 | 63 6c 69 65 6e 74 73 20 73 75 62 6e 65 74 20 6d 61 73 6b 20 61 73 20 70 65 72 20 52 46 43 20 39 | clients.subnet.mask.as.per.RFC.9 |
68320 | 35 30 2e 20 49 66 20 75 6e 73 65 74 2c 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e | 50..If.unset,.subnet.declaration |
68340 | 20 69 73 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 68 6f 6c 64 69 6e 67 20 | .is.used..Specifies.the.holding. |
68360 | 74 69 6d 65 20 66 6f 72 20 4e 48 52 50 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 | time.for.NHRP.Registration.Reque |
68380 | 73 74 73 20 61 6e 64 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 | sts.and.Resolution.Replies.sent. |
683a0 | 66 72 6f 6d 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 73 68 6f 72 74 63 75 74 2d | from.this.interface.or.shortcut- |
683c0 | 74 61 72 67 65 74 2e 20 54 68 65 20 68 6f 6c 64 74 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 | target..The.holdtime.is.specifie |
683e0 | 64 20 69 6e 20 73 65 63 6f 6e 64 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 74 77 6f | d.in.seconds.and.defaults.to.two |
68400 | 20 68 6f 75 72 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 61 | .hours..Specifies.the.interval.a |
68420 | 74 20 77 68 69 63 68 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e | t.which.Netflow.data.will.be.sen |
68440 | 74 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 | t.to.a.collector..As.per.default |
68460 | 2c 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 | ,.Netflow.data.will.be.sent.ever |
68480 | 79 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 | y.60.seconds..Specifies.the.maxi |
684a0 | 6d 75 6d 20 73 69 7a 65 20 6f 66 20 61 20 72 65 70 6c 79 20 62 6f 64 79 20 69 6e 20 4b 42 2c 20 | mum.size.of.a.reply.body.in.KB,. |
684c0 | 75 73 65 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 72 65 70 6c 79 20 73 69 7a 65 2e 00 53 70 | used.to.limit.the.reply.size..Sp |
684e0 | 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 69 | ecifies.the.minimum.number.of.li |
68500 | 6e 6b 73 20 74 68 61 74 20 6d 75 73 74 20 62 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 61 | nks.that.must.be.active.before.a |
68520 | 73 73 65 72 74 69 6e 67 20 63 61 72 72 69 65 72 2e 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 | sserting.carrier..It.is.similar. |
68540 | 74 6f 20 74 68 65 20 43 69 73 63 6f 20 45 74 68 65 72 43 68 61 6e 6e 65 6c 20 6d 69 6e 2d 6c 69 | to.the.Cisco.EtherChannel.min-li |
68560 | 6e 6b 73 20 66 65 61 74 75 72 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 73 65 74 74 69 6e 67 | nks.feature..This.allows.setting |
68580 | 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6d 65 6d 62 65 72 20 70 6f | .the.minimum.number.of.member.po |
685a0 | 72 74 73 20 74 68 61 74 20 6d 75 73 74 20 62 65 20 75 70 20 28 6c 69 6e 6b 2d 75 70 20 73 74 61 | rts.that.must.be.up.(link-up.sta |
685c0 | 74 65 29 20 62 65 66 6f 72 65 20 6d 61 72 6b 69 6e 67 20 74 68 65 20 62 6f 6e 64 20 64 65 76 69 | te).before.marking.the.bond.devi |
685e0 | 63 65 20 61 73 20 75 70 20 28 63 61 72 72 69 65 72 20 6f 6e 29 2e 20 54 68 69 73 20 69 73 20 75 | ce.as.up.(carrier.on)..This.is.u |
68600 | 73 65 66 75 6c 20 66 6f 72 20 73 69 74 75 61 74 69 6f 6e 73 20 77 68 65 72 65 20 68 69 67 68 65 | seful.for.situations.where.highe |
68620 | 72 20 6c 65 76 65 6c 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 63 6c 75 73 74 65 72 | r.level.services.such.as.cluster |
68640 | 69 6e 67 20 77 61 6e 74 20 74 6f 20 65 6e 73 75 72 65 20 61 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d | ing.want.to.ensure.a.minimum.num |
68660 | 62 65 72 20 6f 66 20 6c 6f 77 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 20 61 72 65 20 61 | ber.of.low.bandwidth.links.are.a |
68680 | 63 74 69 76 65 20 62 65 66 6f 72 65 20 73 77 69 74 63 68 6f 76 65 72 2e 00 53 70 65 63 69 66 69 | ctive.before.switchover..Specifi |
686a0 | 65 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 44 4e 20 61 74 74 72 69 62 75 74 65 20 | es.the.name.of.the.DN.attribute. |
686c0 | 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 6c 6f 67 69 6e | that.contains.the.username/login |
686e0 | 2e 20 43 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 74 68 65 20 62 61 73 65 20 44 4e 20 74 6f 20 63 | ..Combined.with.the.base.DN.to.c |
68700 | 6f 6e 73 74 72 75 63 74 20 74 68 65 20 75 73 65 72 73 20 44 4e 20 77 68 65 6e 20 6e 6f 20 73 65 | onstruct.the.users.DN.when.no.se |
68720 | 61 72 63 68 20 66 69 6c 74 65 72 20 69 73 20 73 70 65 63 69 66 69 65 64 20 28 60 66 69 6c 74 65 | arch.filter.is.specified.(`filte |
68740 | 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 68 | r-expression`)..Specifies.the.ph |
68760 | 79 73 69 63 61 6c 20 60 3c 65 74 68 58 3e 60 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 | ysical.`<ethX>`.Ethernet.interfa |
68780 | 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 50 73 65 75 64 6f 20 45 74 68 65 | ce.associated.with.a.Pseudo.Ethe |
687a0 | 72 6e 65 74 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 | rnet.`<interface>`..Specifies.th |
687c0 | 65 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 20 74 68 61 74 20 74 68 65 20 53 53 54 50 20 70 6f | e.port.`<port>`.that.the.SSTP.po |
687e0 | 72 74 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 28 64 65 66 61 75 6c 74 20 34 34 33 29 2e | rt.will.listen.on.(default.443). |
68800 | 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 72 6f 74 65 63 74 69 6f 6e 20 73 63 6f 70 65 20 | .Specifies.the.protection.scope. |
68820 | 28 61 6b 61 20 72 65 61 6c 6d 20 6e 61 6d 65 29 20 77 68 69 63 68 20 69 73 20 74 6f 20 62 65 20 | (aka.realm.name).which.is.to.be. |
68840 | 72 65 70 6f 72 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 66 6f 72 20 74 68 65 20 61 | reported.to.the.client.for.the.a |
68860 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 2e 20 49 74 20 69 73 20 63 6f 6d 6d | uthentication.scheme..It.is.comm |
68880 | 6f 6e 6c 79 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 65 78 74 20 74 68 65 20 75 73 65 72 20 77 | only.part.of.the.text.the.user.w |
688a0 | 69 6c 6c 20 73 65 65 20 77 68 65 6e 20 70 72 6f 6d 70 74 65 64 20 66 6f 72 20 74 68 65 69 72 20 | ill.see.when.prompted.for.their. |
688c0 | 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2e 00 53 70 65 63 69 66 69 65 73 | username.and.password..Specifies |
688e0 | 20 74 68 65 20 72 6f 75 74 65 20 64 69 73 74 69 6e 67 75 69 73 68 65 72 20 74 6f 20 62 65 20 61 | .the.route.distinguisher.to.be.a |
68900 | 64 64 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 | dded.to.a.route.exported.from.th |
68920 | 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 53 70 | e.current.unicast.VRF.to.VPN..Sp |
68940 | 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f | ecifies.the.route-target.list.to |
68960 | 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 28 65 78 70 6f 72 74 29 | .be.attached.to.a.route.(export) |
68980 | 20 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 6d 61 74 | .or.the.route-target.list.to.mat |
689a0 | 63 68 20 61 67 61 69 6e 73 74 20 28 69 6d 70 6f 72 74 29 20 77 68 65 6e 20 65 78 70 6f 72 74 69 | ch.against.(import).when.exporti |
689c0 | 6e 67 2f 69 6d 70 6f 72 74 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 | ng/importing.between.the.current |
689e0 | 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 54 68 65 20 52 54 4c 49 53 54 20 | .unicast.VRF.and.VPN.The.RTLIST. |
68a00 | 69 73 20 61 20 73 70 61 63 65 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 72 6f 75 | is.a.space-separated.list.of.rou |
68a20 | 74 65 2d 74 61 72 67 65 74 73 2c 20 77 68 69 63 68 20 61 72 65 20 42 47 50 20 65 78 74 65 6e 64 | te-targets,.which.are.BGP.extend |
68a40 | 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 | ed.community.values.as.described |
68a60 | 20 69 6e 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 69 65 73 20 41 74 74 72 69 62 75 | .in.Extended.Communities.Attribu |
68a80 | 74 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 76 65 6e 64 6f 72 20 64 69 63 74 69 6f 6e | te..Specifies.the.vendor.diction |
68aa0 | 61 72 79 2c 20 64 69 63 74 69 6f 6e 61 72 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 6e 20 2f | ary,.dictionary.needs.to.be.in./ |
68ac0 | 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2e 00 53 70 65 63 | usr/share/accel-ppp/radius..Spec |
68ae0 | 69 66 69 65 73 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 | ifies.timeout.in.seconds.to.wait |
68b00 | 20 66 6f 72 20 61 6e 79 20 70 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 | .for.any.peer.activity..If.this. |
68b20 | 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 | option.specified.it.turns.on.ada |
68b40 | 70 74 69 76 65 20 6c 63 70 20 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 | ptive.lcp.echo.functionality.and |
68b60 | 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e | ."lcp-echo-failure".is.not.used. |
68b80 | 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f | .Specifies.timeout.in.seconds.to |
68ba0 | 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 | .wait.for.any.peer.activity..If. |
68bc0 | 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f | this.option.specified.it.turns.o |
68be0 | 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 | n.adaptive.lcp.echo.functionalit |
68c00 | 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 | y.and."lcp-echo-failure".is.not. |
68c20 | 75 73 65 64 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 | used..Default.value.is.**0**..Sp |
68c40 | 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 63 6f 6e 74 | ecifies.whether.an.external.cont |
68c60 | 72 6f 6c 20 70 6c 61 6e 65 20 28 65 2e 67 2e 20 42 47 50 20 4c 32 56 50 4e 2f 45 56 50 4e 29 20 | rol.plane.(e.g..BGP.L2VPN/EVPN). |
68c80 | 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 46 44 42 20 73 68 6f 75 6c 64 20 62 65 20 75 73 | or.the.internal.FDB.should.be.us |
68ca0 | 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 56 58 4c 41 4e 20 | ed..Specifies.whether.the.VXLAN. |
68cc0 | 64 65 76 69 63 65 20 69 73 20 63 61 70 61 62 6c 65 20 6f 66 20 76 6e 69 20 66 69 6c 74 65 72 69 | device.is.capable.of.vni.filteri |
68ce0 | 6e 67 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 68 69 73 20 4e 53 53 41 20 | ng..Specifies.whether.this.NSSA. |
68d00 | 62 6f 72 64 65 72 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c | border.router.will.unconditional |
68d20 | 6c 79 20 74 72 61 6e 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 | ly.translate.Type-7.LSAs.into.Ty |
68d40 | 70 65 2d 35 20 4c 53 41 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 41 6c 77 61 79 73 2c 20 | pe-5.LSAs..When.role.is.Always,. |
68d60 | 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 74 72 61 6e 73 6c 61 74 65 64 20 69 6e 74 6f 20 | Type-7.LSAs.are.translated.into. |
68d80 | 54 79 70 65 2d 35 20 4c 53 41 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 72 | Type-5.LSAs.regardless.of.the.tr |
68da0 | 61 6e 73 6c 61 74 6f 72 20 73 74 61 74 65 20 6f 66 20 6f 74 68 65 72 20 4e 53 53 41 20 62 6f 72 | anslator.state.of.other.NSSA.bor |
68dc0 | 64 65 72 20 72 6f 75 74 65 72 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 43 61 6e 64 69 64 | der.routers..When.role.is.Candid |
68de0 | 61 74 65 2c 20 74 68 69 73 20 72 6f 75 74 65 72 20 70 61 72 74 69 63 69 70 61 74 65 73 20 69 6e | ate,.this.router.participates.in |
68e00 | 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 20 65 6c 65 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 | .the.translator.election.to.dete |
68e20 | 72 6d 69 6e 65 20 69 66 20 69 74 20 77 69 6c 6c 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 | rmine.if.it.will.perform.the.tra |
68e40 | 6e 73 6c 61 74 69 6f 6e 73 20 64 75 74 69 65 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 4e | nslations.duties..When.role.is.N |
68e60 | 65 76 65 72 2c 20 74 68 69 73 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 65 76 65 72 20 74 72 61 | ever,.this.router.will.never.tra |
68e80 | 6e 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c | nslate.Type-7.LSAs.into.Type-5.L |
68ea0 | 53 41 73 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 | SAs..Specifies.which.RADIUS.serv |
68ec0 | 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c | er.attribute.contains.the.rate.l |
68ee0 | 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 | imit.information..The.default.at |
68f00 | 74 72 69 62 75 74 65 20 69 73 20 60 46 69 6c 74 65 72 2d 49 64 60 2e 00 53 70 65 63 69 66 69 65 | tribute.is.`Filter-Id`..Specifie |
68f20 | 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 | s.which.RADIUS.server.attribute. |
68f40 | 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 | contains.the.rate.limit.informat |
68f60 | 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 60 | ion..The.default.attribute.is.`` |
68f80 | 46 69 6c 74 65 72 2d 49 64 60 60 2e 00 53 70 65 63 69 66 79 20 44 48 43 50 76 34 20 72 65 6c 61 | Filter-Id``..Specify.DHCPv4.rela |
68fa0 | 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 72 65 71 75 65 73 74 73 20 74 6f | y.IP.address.to.pass.requests.to |
68fc0 | 2e 20 49 66 20 73 70 65 63 69 66 69 65 64 20 67 69 61 64 64 72 20 69 73 20 61 6c 73 6f 20 6e 65 | ..If.specified.giaddr.is.also.ne |
68fe0 | 65 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e | eded..Specify.IPv4.and/or.IPv6.n |
69000 | 65 74 77 6f 72 6b 73 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 70 72 6f 74 65 63 74 65 64 | etworks.that.should.be.protected |
69020 | 2f 6d 6f 6e 69 74 6f 72 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 | /monitored..Specify.IPv4.and/or. |
69040 | 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 68 20 61 72 65 20 67 6f 69 6e 67 20 74 6f | IPv6.networks.which.are.going.to |
69060 | 20 62 65 20 65 78 63 6c 75 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 2f 49 50 76 36 20 | .be.excluded..Specify.IPv4/IPv6. |
69080 | 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 53 53 48 20 73 65 72 76 65 72 2e 20 4d 75 | listen.address.of.SSH.server..Mu |
690a0 | 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e | ltiple.addresses.can.be.defined. |
690c0 | 00 53 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 53 49 50 20 28 53 65 73 73 69 6f 6e 20 49 | .Specify.a.:abbr:`SIP.(Session.I |
690e0 | 6e 69 74 69 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 73 65 72 76 65 72 20 62 79 20 49 | nitiation.Protocol)`.server.by.I |
69100 | 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 | Pv6.address.of.Fully.Qualified.D |
69120 | 6f 6d 61 69 6e 20 4e 61 6d 65 20 66 6f 72 20 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 | omain.Name.for.all.DHCPv6.client |
69140 | 73 2e 00 53 70 65 63 69 66 79 20 61 20 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d | s..Specify.a.Fully.Qualified.Dom |
69160 | 61 69 6e 20 4e 61 6d 65 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d | ain.Name.as.source/destination.m |
69180 | 61 74 63 68 65 72 2e 20 45 6e 73 75 72 65 20 72 6f 75 74 65 72 20 69 73 20 61 62 6c 65 20 74 6f | atcher..Ensure.router.is.able.to |
691a0 | 20 72 65 73 6f 6c 76 65 20 73 75 63 68 20 64 6e 73 20 71 75 65 72 79 2e 00 53 70 65 63 69 66 79 | .resolve.such.dns.query..Specify |
691c0 | 20 61 20 4e 49 53 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 | .a.NIS.server.address.for.DHCPv6 |
691e0 | 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 2b 20 73 65 72 76 65 72 20 | .clients..Specify.a.NIS+.server. |
69200 | 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 | address.for.DHCPv6.clients..Spec |
69220 | 69 66 79 20 61 20 72 61 6e 67 65 20 6f 66 20 67 72 6f 75 70 20 61 64 64 72 65 73 73 65 73 20 76 | ify.a.range.of.group.addresses.v |
69240 | 69 61 20 61 20 70 72 65 66 69 78 2d 6c 69 73 74 20 74 68 61 74 20 66 6f 72 63 65 73 20 50 49 4d | ia.a.prefix-list.that.forces.PIM |
69260 | 20 74 6f 20 6e 65 76 65 72 20 64 6f 20 3a 61 62 62 72 3a 60 53 53 4d 20 28 53 6f 75 72 63 65 2d | .to.never.do.:abbr:`SSM.(Source- |
69280 | 53 70 65 63 69 66 69 63 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6f 76 65 72 2e 00 53 70 65 63 69 | Specific.Multicast)`.over..Speci |
692a0 | 66 79 20 61 62 73 6f 6c 75 74 65 20 60 3c 70 61 74 68 3e 60 20 74 6f 20 73 63 72 69 70 74 20 77 | fy.absolute.`<path>`.to.script.w |
692c0 | 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 69 | hich.will.be.run.when.`<task>`.i |
692e0 | 73 20 65 78 65 63 75 74 65 64 2e 00 53 70 65 63 69 66 79 20 61 6c 6c 6f 77 65 64 20 3a 61 62 62 | s.executed..Specify.allowed.:abb |
69300 | 72 3a 60 4b 45 58 20 28 4b 65 79 20 45 78 63 68 61 6e 67 65 29 60 20 61 6c 67 6f 72 69 74 68 6d | r:`KEX.(Key.Exchange)`.algorithm |
69320 | 73 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 65 20 41 53 20 66 6f 72 20 74 | s..Specify.an.alternate.AS.for.t |
69340 | 68 69 73 20 42 47 50 20 70 72 6f 63 65 73 73 20 77 68 65 6e 20 69 6e 74 65 72 61 63 74 69 6e 67 | his.BGP.process.when.interacting |
69360 | 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 65 65 72 20 6f 72 20 70 65 65 72 | .with.the.specified.peer.or.peer |
69380 | 20 67 72 6f 75 70 2e 20 57 69 74 68 20 6e 6f 20 6d 6f 64 69 66 69 65 72 73 2c 20 74 68 65 20 73 | .group..With.no.modifiers,.the.s |
693a0 | 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 | pecified.local-as.is.prepended.t |
693c0 | 6f 20 74 68 65 20 72 65 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 20 77 68 65 6e 20 72 65 63 65 | o.the.received.AS_PATH.when.rece |
693e0 | 69 76 69 6e 67 20 72 6f 75 74 69 6e 67 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 70 | iving.routing.updates.from.the.p |
69400 | 65 65 72 2c 20 61 6e 64 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 | eer,.and.prepended.to.the.outgoi |
69420 | 6e 67 20 41 53 5f 50 41 54 48 20 28 61 66 74 65 72 20 74 68 65 20 70 72 6f 63 65 73 73 20 6c 6f | ng.AS_PATH.(after.the.process.lo |
69440 | 63 61 6c 20 41 53 29 20 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 20 | cal.AS).when.transmitting.local. |
69460 | 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 65 72 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 | routes.to.the.peer..Specify.an.a |
69480 | 6c 74 65 72 6e 61 74 65 20 54 43 50 20 70 6f 72 74 20 77 68 65 72 65 20 74 68 65 20 6c 64 61 70 | lternate.TCP.port.where.the.ldap |
694a0 | 20 73 65 72 76 65 72 20 69 73 20 6c 69 73 74 65 6e 69 6e 67 20 69 66 20 6f 74 68 65 72 20 74 68 | .server.is.listening.if.other.th |
694c0 | 61 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 4c 44 41 50 20 70 6f 72 74 20 33 38 39 2e 00 53 70 | an.the.default.LDAP.port.389..Sp |
694e0 | 65 63 69 66 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 | ecify.interval.in.seconds.to.wai |
69500 | 74 20 62 65 74 77 65 65 6e 20 44 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 73 2e 20 54 | t.between.Dynamic.DNS.updates..T |
69520 | 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 | he.default.is..300.seconds..Spec |
69540 | 69 66 79 20 6c 6f 63 61 6c 20 72 61 6e 67 65 20 6f 66 20 69 70 20 61 64 64 72 65 73 73 20 74 6f | ify.local.range.of.ip.address.to |
69560 | 20 67 69 76 65 20 74 6f 20 64 68 63 70 20 63 6c 69 65 6e 74 73 2e 20 46 69 72 73 74 20 49 50 20 | .give.to.dhcp.clients..First.IP. |
69580 | 69 6e 20 72 61 6e 67 65 20 69 73 20 72 6f 75 74 65 72 20 49 50 2e 20 49 66 20 79 6f 75 20 6e 65 | in.range.is.router.IP..If.you.ne |
695a0 | 65 64 20 6d 6f 72 65 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 75 73 65 20 60 63 6c 69 65 6e | ed.more.customization.use.`clien |
695c0 | 74 2d 69 70 2d 70 6f 6f 6c 60 00 53 70 65 63 69 66 79 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 3a | t-ip-pool`.Specify.name.of.the.: |
695e0 | 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 | abbr:`VRF.(Virtual.Routing.and.F |
69600 | 6f 72 77 61 72 64 69 6e 67 29 60 20 69 6e 73 74 61 6e 63 65 2e 00 53 70 65 63 69 66 79 20 6e 65 | orwarding)`.instance..Specify.ne |
69620 | 78 74 68 6f 70 20 6f 6e 20 74 68 65 20 70 61 74 68 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 | xthop.on.the.path.to.the.destina |
69640 | 74 69 6f 6e 2c 20 60 60 69 70 76 34 2d 61 64 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 73 65 | tion,.``ipv4-address``.can.be.se |
69660 | 74 20 74 6f 20 60 60 64 68 63 70 60 60 00 53 70 65 63 69 66 79 20 73 74 61 74 69 63 20 72 6f 75 | t.to.``dhcp``.Specify.static.rou |
69680 | 74 65 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 73 65 6e 64 69 6e | te.into.the.routing.table.sendin |
696a0 | 67 20 61 6c 6c 20 6e 6f 6e 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 6e | g.all.non.local.traffic.to.the.n |
696c0 | 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 53 70 65 63 | exthop.address.`<address>`..Spec |
696e0 | 69 66 79 20 74 68 65 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 52 41 | ify.the.IP.`<address>`.of.the.RA |
69700 | 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 | DIUS.server.user.with.the.pre-sh |
69720 | 61 72 65 64 2d 73 65 63 72 65 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e | ared-secret.given.in.`<secret>`. |
69740 | 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 | .Specify.the.IP.`<address>`.of.t |
69760 | 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 | he.TACACS.server.user.with.the.p |
69780 | 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 | re-shared-secret.given.in.`<secr |
697a0 | 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 61 64 | et>`..Specify.the.IPv4.source.ad |
697c0 | 64 72 65 73 73 20 74 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e | dress.to.use.for.the.BGP.session |
697e0 | 20 74 6f 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 2c 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 | .to.this.neighbor,.may.be.specif |
69800 | 69 65 64 20 61 73 20 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 64 69 | ied.as.either.an.IPv4.address.di |
69820 | 72 65 63 74 6c 79 20 6f 72 20 61 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 00 | rectly.or.as.an.interface.name.. |
69840 | 53 70 65 63 69 66 79 20 74 68 65 20 4c 44 41 50 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 | Specify.the.LDAP.server.to.conne |
69860 | 63 74 20 74 6f 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 76 61 | ct.to..Specify.the.identifier.va |
69880 | 6c 75 65 20 6f 66 20 74 68 65 20 73 69 74 65 2d 6c 65 76 65 6c 20 61 67 67 72 65 67 61 74 6f 72 | lue.of.the.site-level.aggregator |
698a0 | 20 28 53 4c 41 29 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 44 20 6d 75 73 74 | .(SLA).on.the.interface..ID.must |
698c0 | 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 6e 75 6d 62 65 72 20 67 72 65 61 74 65 72 20 74 68 65 | .be.a.decimal.number.greater.the |
698e0 | 6e 20 30 20 77 68 69 63 68 20 66 69 74 73 20 69 6e 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 | n.0.which.fits.in.the.length.of. |
69900 | 53 4c 41 20 49 44 73 20 28 73 65 65 20 62 65 6c 6f 77 29 2e 00 53 70 65 63 69 66 79 20 74 68 65 | SLA.IDs.(see.below)..Specify.the |
69920 | 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 75 73 65 64 20 6c 6f 63 61 6c 6c 79 20 | .interface.address.used.locally. |
69940 | 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 72 65 66 69 | on.the.interface.where.the.prefi |
69960 | 78 20 68 61 73 20 62 65 65 6e 20 64 65 6c 65 67 61 74 65 64 20 74 6f 2e 20 49 44 20 6d 75 73 74 | x.has.been.delegated.to..ID.must |
69980 | 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 69 6e 74 65 67 65 72 2e 00 53 70 65 63 69 66 79 20 74 | .be.a.decimal.integer..Specify.t |
699a0 | 68 65 20 6d 69 6e 69 6d 75 6d 20 72 65 71 75 69 72 65 64 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 | he.minimum.required.TLS.version. |
699c0 | 31 2e 32 20 6f 72 20 31 2e 33 00 53 70 65 63 69 66 79 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 | 1.2.or.1.3.Specify.the.plaintext |
699e0 | 20 70 61 73 73 77 6f 72 64 20 75 73 65 72 20 62 79 20 75 73 65 72 20 60 3c 6e 61 6d 65 3e 60 20 | .password.user.by.user.`<name>`. |
69a00 | 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 | on.this.system..The.plaintext.pa |
69a20 | 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 72 61 | ssword.will.be.automatically.tra |
69a40 | 6e 73 66 65 72 72 65 64 20 69 6e 74 6f 20 61 20 73 65 63 75 72 65 20 68 61 73 68 65 64 20 70 61 | nsferred.into.a.secure.hashed.pa |
69a60 | 73 73 77 6f 72 64 20 61 6e 64 20 6e 6f 74 20 73 61 76 65 64 20 61 6e 79 77 68 65 72 65 20 69 6e | ssword.and.not.saved.anywhere.in |
69a80 | 20 70 6c 61 69 6e 74 65 78 74 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 75 73 65 | .plaintext..Specify.the.port.use |
69aa0 | 64 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 73 20 | d.on.which.the.proxy.service.is. |
69ac0 | 6c 69 73 74 65 6e 69 6e 67 20 66 6f 72 20 72 65 71 75 65 73 74 73 2e 20 54 68 69 73 20 70 6f 72 | listening.for.requests..This.por |
69ae0 | 74 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 74 | t.is.the.default.port.used.for.t |
69b00 | 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 2e 00 53 70 65 | he.specified.listen-address..Spe |
69b20 | 63 69 66 79 20 74 68 65 20 73 79 73 74 65 6d 73 20 60 3c 74 69 6d 65 7a 6f 6e 65 3e 60 20 61 73 | cify.the.systems.`<timezone>`.as |
69b40 | 20 74 68 65 20 52 65 67 69 6f 6e 2f 4c 6f 63 61 74 69 6f 6e 20 74 68 61 74 20 62 65 73 74 20 64 | .the.Region/Location.that.best.d |
69b60 | 65 66 69 6e 65 73 20 79 6f 75 72 20 6c 6f 63 61 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c | efines.your.location..For.exampl |
69b80 | 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 55 53 2f 50 61 63 69 66 69 63 20 73 65 74 73 20 74 68 | e,.specifying.US/Pacific.sets.th |
69ba0 | 65 20 74 69 6d 65 20 7a 6f 6e 65 20 74 6f 20 55 53 20 50 61 63 69 66 69 63 20 74 69 6d 65 2e 00 | e.time.zone.to.US.Pacific.time.. |
69bc0 | 53 70 65 63 69 66 79 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 77 68 65 6e 20 60 | Specify.the.time.interval.when.` |
69be0 | 3c 74 61 73 6b 3e 60 20 73 68 6f 75 6c 64 20 62 65 20 65 78 65 63 75 74 65 64 2e 20 54 68 65 20 | <task>`.should.be.executed..The. |
69c00 | 69 6e 74 65 72 76 61 6c 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 6e 75 6d 62 65 72 20 | interval.is.specified.as.number. |
69c20 | 77 69 74 68 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 75 66 66 69 78 | with.one.of.the.following.suffix |
69c40 | 65 73 3a 00 53 70 65 63 69 66 79 20 74 69 6d 65 6f 75 74 20 2f 20 75 70 64 61 74 65 20 69 6e 74 | es:.Specify.timeout./.update.int |
69c60 | 65 72 76 61 6c 20 74 6f 20 63 68 65 63 6b 20 69 66 20 49 50 20 61 64 64 72 65 73 73 20 63 68 61 | erval.to.check.if.IP.address.cha |
69c80 | 6e 67 65 64 2e 00 53 70 65 63 69 66 79 20 74 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 66 | nged..Specify.timeout.interval.f |
69ca0 | 6f 72 20 6b 65 65 70 61 6c 69 76 65 20 6d 65 73 73 61 67 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e | or.keepalive.message.in.seconds. |
69cc0 | 00 53 70 65 63 69 66 79 20 77 68 65 72 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 68 61 72 | .Specify.where.interface.is.shar |
69ce0 | 65 64 20 62 79 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 20 6f 72 20 69 74 20 69 73 20 76 6c | ed.by.multiple.users.or.it.is.vl |
69d00 | 61 6e 2d 70 65 72 2d 75 73 65 72 2e 00 53 70 69 6e 65 31 20 69 73 20 61 20 43 69 73 63 6f 20 49 | an-per-user..Spine1.is.a.Cisco.I |
69d20 | 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 76 65 72 73 69 6f 6e 20 31 35 2e 34 2c 20 | OS.router.running.version.15.4,. |
69d40 | 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 20 69 73 20 65 61 63 68 20 61 20 56 79 4f 53 20 72 | Leaf2.and.Leaf3.is.each.a.VyOS.r |
69d60 | 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 31 2e 32 2e 00 53 70 6c 75 6e 6b 00 53 70 6f 6b 65 00 | outer.running.1.2..Splunk.Spoke. |
69d80 | 53 71 75 69 64 5f 20 69 73 20 61 20 63 61 63 68 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 | Squid_.is.a.caching.and.forwardi |
69da0 | 6e 67 20 48 54 54 50 20 77 65 62 20 70 72 6f 78 79 2e 20 49 74 20 68 61 73 20 61 20 77 69 64 65 | ng.HTTP.web.proxy..It.has.a.wide |
69dc0 | 20 76 61 72 69 65 74 79 20 6f 66 20 75 73 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 70 65 65 | .variety.of.uses,.including.spee |
69de0 | 64 69 6e 67 20 75 70 20 61 20 77 65 62 20 73 65 72 76 65 72 20 62 79 20 63 61 63 68 69 6e 67 20 | ding.up.a.web.server.by.caching. |
69e00 | 72 65 70 65 61 74 65 64 20 72 65 71 75 65 73 74 73 2c 20 63 61 63 68 69 6e 67 20 77 65 62 2c 20 | repeated.requests,.caching.web,. |
69e20 | 44 4e 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 6c | DNS.and.other.computer.network.l |
69e40 | 6f 6f 6b 75 70 73 20 66 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 70 65 6f 70 6c 65 20 73 68 61 | ookups.for.a.group.of.people.sha |
69e60 | 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 61 69 64 69 | ring.network.resources,.and.aidi |
69e80 | 6e 67 20 73 65 63 75 72 69 74 79 20 62 79 20 66 69 6c 74 65 72 69 6e 67 20 74 72 61 66 66 69 63 | ng.security.by.filtering.traffic |
69ea0 | 2e 20 41 6c 74 68 6f 75 67 68 20 70 72 69 6d 61 72 69 6c 79 20 75 73 65 64 20 66 6f 72 20 48 54 | ..Although.primarily.used.for.HT |
69ec0 | 54 50 20 61 6e 64 20 46 54 50 2c 20 53 71 75 69 64 20 69 6e 63 6c 75 64 65 73 20 6c 69 6d 69 74 | TP.and.FTP,.Squid.includes.limit |
69ee0 | 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 76 65 72 61 6c 20 6f 74 68 65 72 20 70 72 6f | ed.support.for.several.other.pro |
69f00 | 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 69 6e 67 20 49 6e 74 65 72 6e 65 74 20 47 6f 70 68 65 72 | tocols.including.Internet.Gopher |
69f20 | 2c 20 53 53 4c 2c 5b 36 5d 20 54 4c 53 20 61 6e 64 20 48 54 54 50 53 2e 20 53 71 75 69 64 20 64 | ,.SSL,[6].TLS.and.HTTPS..Squid.d |
69f40 | 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 53 4f 43 4b 53 20 70 72 6f 74 6f 63 | oes.not.support.the.SOCKS.protoc |
69f60 | 6f 6c 2e 00 53 74 61 72 74 20 57 65 62 73 65 72 76 65 72 20 69 6e 20 67 69 76 65 6e 20 20 56 52 | ol..Start.Webserver.in.given..VR |
69f80 | 46 2e 00 53 74 61 72 74 20 62 79 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 49 50 53 65 63 20 53 | F..Start.by.checking.for.IPSec.S |
69fa0 | 41 73 20 28 53 65 63 75 72 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 73 29 20 77 69 74 68 3a | As.(Security.Associations).with: |
69fc0 | 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d | .Starting.from.VyOS.1.4-rolling- |
69fe0 | 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 | 202308040557,.a.new.firewall.str |
6a000 | 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 | ucture.can.be.found.on.all.vyos. |
6a020 | 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2c 20 61 6e 64 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 | instalations,.and.zone.based.fir |
6a040 | 65 77 61 6c 6c 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 44 6f | ewall.is.no.longer.supported..Do |
6a060 | 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 | cumentation.for.most.of.the.new. |
6a080 | 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 | firewall.CLI.can.be.found.in.the |
6a0a0 | 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f | .`firewall.<https://docs.vyos.io |
6a0c0 | 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c | /en/latest/configuration/firewal |
6a0e0 | 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c | l/general.html>`_.chapter..The.l |
6a100 | 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c | egacy.firewall.is.still.availabl |
6a120 | 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e | e.for.versions.before.1.4-rollin |
6a140 | 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 | g-202308040557.and.can.be.found. |
6a160 | 69 6e 20 74 68 65 20 3a 72 65 66 3a 60 66 69 72 65 77 61 6c 6c 2d 6c 65 67 61 63 79 60 20 63 68 | in.the.:ref:`firewall-legacy`.ch |
6a180 | 61 70 74 65 72 2e 20 54 68 65 20 65 78 61 6d 70 6c 65 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 | apter..The.examples.in.this.sect |
6a1a0 | 69 6f 6e 20 75 73 65 20 74 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 | ion.use.the.legacy.firewall.conf |
6a1c0 | 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 2c 20 73 69 6e 63 65 20 74 68 69 73 20 66 | iguration.commands,.since.this.f |
6a1e0 | 65 61 74 75 72 65 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 69 6e 20 65 61 72 6c 69 | eature.has.been.removed.in.earli |
6a200 | 65 72 20 72 65 6c 65 61 73 65 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 | er.releases..Starting.from.VyOS. |
6a220 | 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 | 1.4-rolling-202308040557,.a.new. |
6a240 | 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 | firewall.structure.can.be.found. |
6a260 | 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2e 20 5a 6f 6e 65 20 62 | on.all.vyos.instalations..Zone.b |
6a280 | 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 77 61 73 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 61 | ased.firewall.was.removed.in.tha |
6a2a0 | 74 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 | t.version,.but.re.introduced.in. |
6a2c0 | 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 31 2e 35 2e 20 41 6c 6c 20 76 65 72 73 69 6f 6e 73 20 62 | VyOS.1.4.and.1.5..All.versions.b |
6a2e0 | 75 69 6c 74 20 61 66 74 65 72 20 32 30 32 33 2d 31 30 2d 32 32 20 68 61 73 20 74 68 69 73 20 66 | uilt.after.2023-10-22.has.this.f |
6a300 | 65 61 74 75 72 65 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f | eature..Documentation.for.most.o |
6a320 | 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f | f.the.new.firewall.CLI.can.be.fo |
6a340 | 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f | und.in.the.`firewall.<https://do |
6a360 | 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 | cs.vyos.io/en/latest/configurati |
6a380 | 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 | on/firewall/general.html>`_.chap |
6a3a0 | 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c | ter..The.legacy.firewall.is.stil |
6a3c0 | 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 | l.available.for.versions.before. |
6a3e0 | 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e | 1.4-rolling-202308040557.and.can |
6a400 | 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 | .be.found.in.the.:doc:`legacy.fi |
6a420 | 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 | rewall.configuration.</configura |
6a440 | 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 20 63 | tion/firewall/general-legacy>`.c |
6a460 | 68 61 70 74 65 72 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 | hapter..Starting.from.VyOS.1.4-r |
6a480 | 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 | olling-202308040557,.a.new.firew |
6a4a0 | 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c | all.structure.can.be.found.on.al |
6a4c0 | 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 53 74 61 72 74 69 6e 67 20 66 | l.vyos.installations..Starting.f |
6a4e0 | 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 | rom.VyOS.1.4-rolling-20230804055 |
6a500 | 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 | 7,.a.new.firewall.structure.can. |
6a520 | 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f | be.found.on.all.vyos.installatio |
6a540 | 6e 73 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6e 65 77 20 66 | ns..Documentation.for.most.new.f |
6a560 | 69 72 65 77 61 6c 6c 20 63 6c 69 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 68 65 72 65 3a 00 53 | irewall.cli.can.be.found.here:.S |
6a580 | 74 61 72 74 69 6e 67 20 6f 66 20 77 69 74 68 20 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 | tarting.of.with.VyOS.1.3.(equule |
6a5a0 | 75 73 29 20 77 65 20 61 64 64 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 72 75 6e 6e 69 6e 67 | us).we.added.support.for.running |
6a5c0 | 20 56 79 4f 53 20 61 73 20 61 6e 20 4f 75 74 2d 6f 66 2d 42 61 6e 64 20 4d 61 6e 61 67 65 6d 65 | .VyOS.as.an.Out-of-Band.Manageme |
6a5e0 | 6e 74 20 64 65 76 69 63 65 20 77 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 72 65 6d 6f 74 65 20 | nt.device.which.provides.remote. |
6a600 | 61 63 63 65 73 73 20 62 79 20 6d 65 61 6e 73 20 6f 66 20 53 53 48 20 74 6f 20 64 69 72 65 63 74 | access.by.means.of.SSH.to.direct |
6a620 | 6c 79 20 61 74 74 61 63 68 65 64 20 73 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 | ly.attached.serial.interfaces..S |
6a640 | 74 61 72 74 69 6e 67 20 77 69 74 68 20 56 79 4f 53 20 31 2e 32 20 61 20 3a 61 62 62 72 3a 60 6d | tarting.with.VyOS.1.2.a.:abbr:`m |
6a660 | 44 4e 53 20 28 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 29 60 20 72 65 70 65 61 74 65 72 20 66 75 | DNS.(Multicast.DNS)`.repeater.fu |
6a680 | 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 41 64 64 69 74 69 6f | nctionality.is.provided..Additio |
6a6a0 | 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 6f 62 74 61 69 6e 65 64 20 | nal.information.can.be.obtained. |
6a6c0 | 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 | from.https://en.wikipedia.org/wi |
6a6e0 | 6b 69 2f 4d 75 6c 74 69 63 61 73 74 5f 44 4e 53 2e 00 53 74 61 74 69 63 00 53 74 61 74 69 63 20 | ki/Multicast_DNS..Static.Static. |
6a700 | 3a 61 62 62 72 3a 60 53 41 4b 20 28 53 65 63 75 72 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f | :abbr:`SAK.(Secure.Authenticatio |
6a720 | 6e 20 4b 65 79 29 60 20 6d 6f 64 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6d | n.Key)`.mode.can.be.configured.m |
6a740 | 61 6e 75 61 6c 6c 79 20 6f 6e 20 65 61 63 68 20 64 65 76 69 63 65 20 77 69 73 68 69 6e 67 20 74 | anually.on.each.device.wishing.t |
6a760 | 6f 20 75 73 65 20 4d 41 43 73 65 63 2e 20 4b 65 79 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 73 | o.use.MACsec..Keys.must.be.set.s |
6a780 | 74 61 74 69 63 61 6c 6c 79 20 6f 6e 20 61 6c 6c 20 64 65 76 69 63 65 73 20 66 6f 72 20 74 72 61 | tatically.on.all.devices.for.tra |
6a7a0 | 66 66 69 63 20 74 6f 20 66 6c 6f 77 20 70 72 6f 70 65 72 6c 79 2e 20 4b 65 79 20 72 6f 74 61 74 | ffic.to.flow.properly..Key.rotat |
6a7c0 | 69 6f 6e 20 69 73 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 | ion.is.dependent.on.the.administ |
6a7e0 | 72 61 74 6f 72 20 75 70 64 61 74 69 6e 67 20 61 6c 6c 20 6b 65 79 73 20 6d 61 6e 75 61 6c 6c 79 | rator.updating.all.keys.manually |
6a800 | 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 63 65 73 2e 20 53 74 61 74 69 | .across.connected.devices..Stati |
6a820 | 63 20 53 41 4b 20 6d 6f 64 65 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 | c.SAK.mode.can.not.be.used.with. |
6a840 | 4d 4b 41 2e 00 53 74 61 74 69 63 20 44 48 43 50 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 | MKA..Static.DHCP.IP.address.assi |
6a860 | 67 6e 20 74 6f 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 73 63 72 | gn.to.host.identified.by.`<descr |
6a880 | 69 70 74 69 6f 6e 3e 60 2e 20 49 50 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 | iption>`..IP.address.must.be.ins |
6a8a0 | 69 64 65 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 20 77 68 69 63 68 20 69 73 20 64 65 66 69 | ide.the.`<subnet>`.which.is.defi |
6a8c0 | 6e 65 64 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 74 68 65 20 64 79 6e 61 6d | ned.but.can.be.outside.the.dynam |
6a8e0 | 69 63 20 72 61 6e 67 65 20 63 72 65 61 74 65 64 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 | ic.range.created.with.:cfgcmd:`s |
6a900 | 65 74 20 73 65 72 76 69 63 65 20 64 68 63 70 2d 73 65 72 76 65 72 20 73 68 61 72 65 64 2d 6e 65 | et.service.dhcp-server.shared-ne |
6a920 | 74 77 6f 72 6b 2d 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 73 75 62 6e 65 74 20 3c 73 75 62 6e 65 74 | twork-name.<name>.subnet.<subnet |
6a940 | 3e 20 72 61 6e 67 65 20 3c 6e 3e 60 2e 20 49 66 20 6e 6f 20 69 70 2d 61 64 64 72 65 73 73 20 69 | >.range.<n>`..If.no.ip-address.i |
6a960 | 73 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e 20 49 50 20 66 72 6f 6d 20 74 68 65 20 64 79 6e 61 | s.specified,.an.IP.from.the.dyna |
6a980 | 6d 69 63 20 70 6f 6f 6c 20 69 73 20 75 73 65 64 2e 00 53 74 61 74 69 63 20 48 6f 73 74 6e 61 6d | mic.pool.is.used..Static.Hostnam |
6a9a0 | 65 20 4d 61 70 70 69 6e 67 00 53 74 61 74 69 63 20 4b 65 79 73 00 53 74 61 74 69 63 20 52 6f 75 | e.Mapping.Static.Keys.Static.Rou |
6a9c0 | 74 65 73 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 64 79 6e 61 | tes.Static.Routing.or.other.dyna |
6a9e0 | 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 | mic.routing.protocols.can.be.use |
6aa00 | 64 20 6f 76 65 72 20 74 68 65 20 76 74 75 6e 20 69 6e 74 65 72 66 61 63 65 00 53 74 61 74 69 63 | d.over.the.vtun.interface.Static |
6aa20 | 20 52 6f 75 74 69 6e 67 3a 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 00 53 74 61 74 69 63 | .Routing:.Static.mappings.Static |
6aa40 | 20 6d 61 70 70 69 6e 67 73 20 61 72 65 6e 27 74 20 73 68 6f 77 6e 2e 20 54 6f 20 73 68 6f 77 20 | .mappings.aren't.shown..To.show. |
6aa60 | 61 6c 6c 20 73 74 61 74 65 73 2c 20 75 73 65 20 60 60 73 68 6f 77 20 64 68 63 70 20 73 65 72 76 | all.states,.use.``show.dhcp.serv |
6aa80 | 65 72 20 6c 65 61 73 65 73 20 73 74 61 74 65 20 61 6c 6c 60 60 2e 00 53 74 61 74 69 63 20 72 6f | er.leases.state.all``..Static.ro |
6aaa0 | 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 | utes.are.manually.configured.rou |
6aac0 | 74 65 73 2c 20 77 68 69 63 68 2c 20 69 6e 20 67 65 6e 65 72 61 6c 2c 20 63 61 6e 6e 6f 74 20 62 | tes,.which,.in.general,.cannot.b |
6aae0 | 65 20 75 70 64 61 74 65 64 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 66 72 6f 6d 20 69 6e 66 6f 72 | e.updated.dynamically.from.infor |
6ab00 | 6d 61 74 69 6f 6e 20 56 79 4f 53 20 6c 65 61 72 6e 73 20 61 62 6f 75 74 20 74 68 65 20 6e 65 74 | mation.VyOS.learns.about.the.net |
6ab20 | 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 66 72 6f 6d 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 | work.topology.from.other.routing |
6ab40 | 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 61 20 6c 69 6e 6b 20 66 | .protocols..However,.if.a.link.f |
6ab60 | 61 69 6c 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 72 6f 75 | ails,.the.router.will.remove.rou |
6ab80 | 74 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 2c 20 66 72 | tes,.including.static.routes,.fr |
6aba0 | 6f 6d 20 74 68 65 20 3a 61 62 62 72 3a 60 52 49 50 42 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f | om.the.:abbr:`RIPB.(Routing.Info |
6abc0 | 72 6d 61 74 69 6f 6e 20 42 61 73 65 29 60 20 74 68 61 74 20 75 73 65 64 20 74 68 69 73 20 69 6e | rmation.Base)`.that.used.this.in |
6abe0 | 74 65 72 66 61 63 65 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 6e 65 78 74 20 68 6f 70 2e 20 49 | terface.to.reach.the.next.hop..I |
6ac00 | 6e 20 67 65 6e 65 72 61 6c 2c 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 73 68 6f 75 6c 64 20 | n.general,.static.routes.should. |
6ac20 | 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 66 6f 72 20 76 65 72 79 20 73 69 6d 70 6c 65 20 6e 65 74 | only.be.used.for.very.simple.net |
6ac40 | 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2c 20 6f 72 20 74 6f 20 6f 76 65 72 72 69 64 65 20 | work.topologies,.or.to.override. |
6ac60 | 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 61 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e | the.behavior.of.a.dynamic.routin |
6ac80 | 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 61 20 73 6d 61 6c 6c 20 6e 75 6d 62 65 72 20 6f 66 | g.protocol.for.a.small.number.of |
6aca0 | 20 72 6f 75 74 65 73 2e 20 54 68 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 72 | .routes..The.collection.of.all.r |
6acc0 | 6f 75 74 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 68 61 73 20 6c 65 61 72 6e 65 64 20 66 72 6f | outes.the.router.has.learned.fro |
6ace0 | 6d 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 66 72 6f 6d 20 69 74 73 20 | m.its.configuration.or.from.its. |
6ad00 | 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 73 74 6f | dynamic.routing.protocols.is.sto |
6ad20 | 72 65 64 20 69 6e 20 74 68 65 20 52 49 42 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 61 | red.in.the.RIB..Unicast.routes.a |
6ad40 | 72 65 20 64 69 72 65 63 74 6c 79 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 | re.directly.used.to.determine.th |
6ad60 | 65 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 75 6e 69 63 | e.forwarding.table.used.for.unic |
6ad80 | 61 73 74 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 2e 00 53 74 61 74 69 63 20 72 6f | ast.packet.forwarding..Static.ro |
6ada0 | 75 74 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 72 65 66 65 72 65 6e 63 69 | utes.can.be.configured.referenci |
6adc0 | 6e 67 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 3b 20 66 6f 72 20 65 78 61 | ng.the.tunnel.interface;.for.exa |
6ade0 | 6d 70 6c 65 2c 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 73 65 20 | mple,.the.local.router.will.use. |
6ae00 | 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2c 20 77 68 69 6c 65 20 | a.network.of.10.0.0.0/16,.while. |
6ae20 | 74 68 65 20 72 65 6d 6f 74 65 20 68 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 31 | the.remote.has.a.network.of.10.1 |
6ae40 | 2e 30 2e 30 2f 31 36 3a 00 53 74 61 74 69 6f 6e 20 73 75 70 70 6f 72 74 73 20 72 65 63 65 69 76 | .0.0/16:.Station.supports.receiv |
6ae60 | 69 6e 67 20 56 48 54 20 76 61 72 69 61 6e 74 20 48 54 20 43 6f 6e 74 72 6f 6c 20 66 69 65 6c 64 | ing.VHT.variant.HT.Control.field |
6ae80 | 00 53 74 61 74 75 73 00 53 74 69 63 6b 79 20 43 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 74 6f 72 61 | .Status.Sticky.Connections.Stora |
6aea0 | 67 65 20 6f 66 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 75 73 65 73 20 6d 65 6d 6f 72 79 2e | ge.of.route.updates.uses.memory. |
6aec0 | 20 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 | .If.you.enable.soft.reconfigurat |
6aee0 | 69 6f 6e 20 69 6e 62 6f 75 6e 64 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 69 67 68 62 6f | ion.inbound.for.multiple.neighbo |
6af00 | 72 73 2c 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 6d 65 6d 6f 72 79 20 75 73 65 64 20 63 61 | rs,.the.amount.of.memory.used.ca |
6af20 | 6e 20 62 65 63 6f 6d 65 20 73 69 67 6e 69 66 69 63 61 6e 74 2e 00 53 75 66 66 69 78 65 73 00 53 | n.become.significant..Suffixes.S |
6af40 | 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 73 74 61 72 74 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 74 | ummarisation.starts.only.after.t |
6af60 | 68 69 73 20 64 65 6c 61 79 20 74 69 6d 65 72 20 65 78 70 69 72 79 2e 00 53 75 70 70 6f 72 74 65 | his.delay.timer.expiry..Supporte |
6af80 | 64 20 4d 6f 64 75 6c 65 73 00 53 75 70 70 6f 72 74 65 64 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 | d.Modules.Supported.channel.widt |
6afa0 | 68 20 73 65 74 2e 00 53 75 70 70 6f 72 74 65 64 20 64 61 65 6d 6f 6e 73 3a 00 53 75 70 70 6f 72 | h.set..Supported.daemons:.Suppor |
6afc0 | 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 73 3a 00 53 75 70 70 6f 72 74 65 64 20 72 | ted.interface.types:.Supported.r |
6afe0 | 65 6d 6f 74 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 46 54 50 2c 20 46 54 50 53 2c 20 48 | emote.protocols.are.FTP,.FTPS,.H |
6b000 | 54 54 50 2c 20 48 54 54 50 53 2c 20 53 43 50 2f 53 46 54 50 20 61 6e 64 20 54 46 54 50 2e 00 53 | TTP,.HTTPS,.SCP/SFTP.and.TFTP..S |
6b020 | 75 70 70 6f 72 74 65 64 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 52 49 50 20 61 72 65 3a 00 53 75 | upported.versions.of.RIP.are:.Su |
6b040 | 70 70 6f 72 74 73 20 61 73 20 48 45 4c 50 45 52 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 65 64 20 | pports.as.HELPER.for.configured. |
6b060 | 67 72 61 63 65 20 70 65 72 69 6f 64 2e 00 53 75 70 70 6f 73 65 20 74 68 65 20 4c 45 46 54 20 72 | grace.period..Suppose.the.LEFT.r |
6b080 | 6f 75 74 65 72 20 68 61 73 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 | outer.has.external.address.192.0 |
6b0a0 | 2e 32 2e 31 30 20 6f 6e 20 69 74 73 20 65 74 68 30 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 | .2.10.on.its.eth0.interface,.and |
6b0c0 | 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 69 73 20 32 30 33 2e 30 2e 31 31 33 2e 34 | .the.RIGHT.router.is.203.0.113.4 |
6b0e0 | 35 00 53 75 70 70 6f 73 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 31 30 2e 32 33 2e | 5.Suppose.you.want.to.use.10.23. |
6b100 | 31 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c | 1.0/24.network.for.client.tunnel |
6b120 | 20 65 6e 64 70 6f 69 6e 74 73 20 61 6e 64 20 61 6c 6c 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 | .endpoints.and.all.client.subnet |
6b140 | 73 20 62 65 6c 6f 6e 67 20 74 6f 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 2e 20 41 6c 6c 20 63 6c | s.belong.to.10.23.0.0/20..All.cl |
6b160 | 69 65 6e 74 73 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 31 39 32 2e 31 36 38 | ients.need.access.to.the.192.168 |
6b180 | 2e 30 2e 30 2f 31 36 20 6e 65 74 77 6f 72 6b 2e 00 53 75 70 70 72 65 73 73 20 73 65 6e 64 69 6e | .0.0/16.network..Suppress.sendin |
6b1a0 | 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 61 73 20 4f 50 45 4e | g.Capability.Negotiation.as.OPEN |
6b1c0 | 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 | .message.optional.parameter.to.t |
6b1e0 | 68 65 20 70 65 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6f 6e 6c 79 20 61 66 66 65 63 | he.peer..This.command.only.affec |
6b200 | 74 73 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 74 68 65 72 20 | ts.the.peer.is.configured.other. |
6b220 | 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e | than.IPv4.unicast.configuration. |
6b240 | 00 53 79 6e 61 6d 69 63 20 69 6e 73 74 72 75 63 74 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 6f | .Synamic.instructs.to.forward.to |
6b260 | 20 61 6c 6c 20 70 65 65 72 73 20 77 68 69 63 68 20 77 65 20 68 61 76 65 20 61 20 64 69 72 65 63 | .all.peers.which.we.have.a.direc |
6b280 | 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 | t.connection.with..Alternatively |
6b2a0 | 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 76 65 20 | ,.you.can.specify.the.directive. |
6b2c0 | 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 66 6f 72 20 65 61 63 68 20 70 72 6f 74 6f 63 6f 6c | multiple.times.for.each.protocol |
6b2e0 | 2d 61 64 64 72 65 73 73 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 73 | -address.the.multicast.traffic.s |
6b300 | 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 6f 2e 00 53 79 6e 63 20 67 72 6f 75 70 73 00 53 79 | hould.be.sent.to..Sync.groups.Sy |
6b320 | 6e 70 72 6f 78 79 00 53 79 6e 70 72 6f 78 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 79 6e 70 | nproxy.Synproxy.connections.Synp |
6b340 | 72 6f 78 79 20 72 65 6c 69 65 73 20 6f 6e 20 73 79 6e 63 6f 6f 6b 69 65 73 20 61 6e 64 20 54 43 | roxy.relies.on.syncookies.and.TC |
6b360 | 50 20 74 69 6d 65 73 74 61 6d 70 73 2c 20 65 6e 73 75 72 65 20 74 68 65 73 65 20 61 72 65 20 65 | P.timestamps,.ensure.these.are.e |
6b380 | 6e 61 62 6c 65 64 00 53 79 6e 74 61 78 20 68 61 73 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 56 | nabled.Syntax.has.changed.from.V |
6b3a0 | 79 4f 53 20 31 2e 32 20 28 63 72 75 78 29 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 | yOS.1.2.(crux).and.it.will.be.au |
6b3c0 | 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 6e 20 75 | tomatically.migrated.during.an.u |
6b3e0 | 70 67 72 61 64 65 2e 00 53 79 73 63 74 6c 00 53 79 73 6c 6f 67 00 53 79 73 6c 6f 67 20 73 75 70 | pgrade..Sysctl.Syslog.Syslog.sup |
6b400 | 70 6f 72 74 73 20 6c 6f 67 67 69 6e 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 | ports.logging.to.multiple.target |
6b420 | 73 2c 20 74 68 6f 73 65 20 74 61 72 67 65 74 73 20 63 6f 75 6c 64 20 62 65 20 61 20 70 6c 61 69 | s,.those.targets.could.be.a.plai |
6b440 | 6e 20 66 69 6c 65 20 6f 6e 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e | n.file.on.your.VyOS.installation |
6b460 | 20 69 74 73 65 6c 66 2c 20 61 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 20 6f 72 20 61 20 72 | .itself,.a.serial.console.or.a.r |
6b480 | 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 73 65 72 76 65 72 20 77 68 69 63 68 20 69 73 20 72 65 61 | emote.syslog.server.which.is.rea |
6b4a0 | 63 68 65 64 20 76 69 61 20 3a 61 62 62 72 3a 60 49 50 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f | ched.via.:abbr:`IP.(Internet.Pro |
6b4c0 | 74 6f 63 6f 6c 29 60 20 55 44 50 2f 54 43 50 2e 00 53 79 73 6c 6f 67 20 75 73 65 73 20 6c 6f 67 | tocol)`.UDP/TCP..Syslog.uses.log |
6b4e0 | 72 6f 74 61 74 65 20 74 6f 20 72 6f 74 61 74 65 20 6c 6f 67 69 6c 65 73 20 61 66 74 65 72 20 61 | rotate.to.rotate.logiles.after.a |
6b500 | 20 6e 75 6d 62 65 72 20 6f 66 20 67 69 76 65 73 20 62 79 74 65 73 2e 20 57 65 20 6b 65 65 70 20 | .number.of.gives.bytes..We.keep. |
6b520 | 61 73 20 6d 61 6e 79 20 61 73 20 60 3c 6e 75 6d 62 65 72 3e 60 20 72 6f 74 61 74 65 64 20 66 69 | as.many.as.`<number>`.rotated.fi |
6b540 | 6c 65 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 20 6f 6e 20 74 68 | le.before.they.are.deleted.on.th |
6b560 | 65 20 73 79 73 74 65 6d 2e 00 53 79 73 6c 6f 67 20 77 69 6c 6c 20 77 72 69 74 65 20 60 3c 73 69 | e.system..Syslog.will.write.`<si |
6b580 | 7a 65 3e 60 20 6b 69 6c 6f 62 79 74 65 73 20 69 6e 74 6f 20 74 68 65 20 66 69 6c 65 20 73 70 65 | ze>`.kilobytes.into.the.file.spe |
6b5a0 | 63 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 2e 20 41 66 74 65 72 20 74 68 | cified.by.`<filename>`..After.th |
6b5c0 | 69 73 20 6c 69 6d 69 74 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2c 20 74 68 65 20 63 | is.limit.has.been.reached,.the.c |
6b5e0 | 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 22 72 6f 74 61 74 65 64 22 20 62 79 20 6c 6f 67 72 6f | ustom.file.is."rotated".by.logro |
6b600 | 74 61 74 65 20 61 6e 64 20 61 20 6e 65 77 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 63 72 | tate.and.a.new.custom.file.is.cr |
6b620 | 65 61 74 65 64 2e 00 53 79 73 74 65 6d 00 53 79 73 74 65 6d 20 44 4e 53 00 53 79 73 74 65 6d 20 | eated..System.System.DNS.System. |
6b640 | 44 69 73 70 6c 61 79 20 28 4c 43 44 29 00 53 79 73 74 65 6d 20 4e 61 6d 65 20 61 6e 64 20 44 65 | Display.(LCD).System.Name.and.De |
6b660 | 73 63 72 69 70 74 69 6f 6e 00 53 79 73 74 65 6d 20 50 72 6f 78 79 00 53 79 73 74 65 6d 20 63 61 | scription.System.Proxy.System.ca |
6b680 | 70 61 62 69 6c 69 74 69 65 73 20 28 73 77 69 74 63 68 69 6e 67 2c 20 72 6f 75 74 69 6e 67 2c 20 | pabilities.(switching,.routing,. |
6b6a0 | 65 74 63 2e 29 00 53 79 73 74 65 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 | etc.).System.configuration.comma |
6b6c0 | 6e 64 73 00 53 79 73 74 65 6d 20 64 61 65 6d 6f 6e 73 00 53 79 73 74 65 6d 20 69 64 65 6e 74 69 | nds.System.daemons.System.identi |
6b6e0 | 66 69 65 72 3a 20 60 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 60 60 20 2d 20 66 6f 72 20 73 | fier:.``1921.6800.1002``.-.for.s |
6b700 | 79 73 74 65 6d 20 69 64 65 74 69 66 69 65 72 73 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 6f | ystem.idetifiers.we.recommend.to |
6b720 | 20 75 73 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f | .use.IP.address.or.MAC.address.o |
6b740 | 66 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 65 20 77 61 79 20 74 6f 20 | f.the.router.itself..The.way.to. |
6b760 | 63 6f 6e 73 74 72 75 63 74 20 74 68 69 73 20 69 73 20 74 6f 20 6b 65 65 70 20 61 6c 6c 20 6f 66 | construct.this.is.to.keep.all.of |
6b780 | 20 74 68 65 20 7a 65 72 6f 65 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 49 50 20 61 64 64 | .the.zeroes.of.the.router.IP.add |
6b7a0 | 72 65 73 73 2c 20 61 6e 64 20 74 68 65 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 65 72 69 6f 64 | ress,.and.then.change.the.period |
6b7c0 | 73 20 66 72 6f 6d 20 62 65 69 6e 67 20 65 76 65 72 79 20 74 68 72 65 65 20 6e 75 6d 62 65 72 73 | s.from.being.every.three.numbers |
6b7e0 | 20 74 6f 20 65 76 65 72 79 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 2e 20 54 68 65 20 61 64 64 72 | .to.every.four.numbers..The.addr |
6b800 | 65 73 73 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 64 20 68 65 72 65 20 69 73 20 60 60 31 39 32 | ess.that.is.listed.here.is.``192 |
6b820 | 2e 31 36 38 2e 31 2e 32 60 60 2c 20 77 68 69 63 68 20 69 66 20 65 78 70 61 6e 64 65 64 20 77 69 | .168.1.2``,.which.if.expanded.wi |
6b840 | 6c 6c 20 74 75 72 6e 20 69 6e 74 6f 20 60 60 31 39 32 2e 31 36 38 2e 30 30 31 2e 30 30 32 60 60 | ll.turn.into.``192.168.001.002`` |
6b860 | 2e 20 54 68 65 6e 20 61 6c 6c 20 6f 6e 65 20 68 61 73 20 74 6f 20 64 6f 20 69 73 20 6d 6f 76 65 | ..Then.all.one.has.to.do.is.move |
6b880 | 20 74 68 65 20 64 6f 74 73 20 74 6f 20 68 61 76 65 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 20 69 | .the.dots.to.have.four.numbers.i |
6b8a0 | 6e 73 74 65 61 64 20 6f 66 20 74 68 72 65 65 2e 20 54 68 69 73 20 67 69 76 65 73 20 75 73 20 60 | nstead.of.three..This.gives.us.` |
6b8c0 | 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 60 60 2e 00 53 79 73 74 65 6d 20 69 73 20 75 6e 75 | `1921.6800.1002``..System.is.unu |
6b8e0 | 73 61 62 6c 65 20 2d 20 61 20 70 61 6e 69 63 20 63 6f 6e 64 69 74 69 6f 6e 00 54 41 43 41 43 53 | sable.-.a.panic.condition.TACACS |
6b900 | 20 45 78 61 6d 70 6c 65 00 54 41 43 41 43 53 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 | .Example.TACACS.is.defined.in.:r |
6b920 | 66 63 3a 60 38 39 30 37 60 2e 00 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 | fc:`8907`..TACACS.servers.could. |
6b940 | 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 | be.hardened.by.only.allowing.cer |
6b960 | 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 | tain.IP.addresses.to.connect..As |
6b980 | 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 | .of.this.the.source.address.of.e |
6b9a0 | 61 63 68 20 54 41 43 41 43 53 20 71 75 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 | ach.TACACS.query.can.be.configur |
6b9c0 | 65 64 2e 00 54 41 43 41 43 53 2b 00 54 42 44 00 54 43 50 20 26 20 55 44 50 20 73 65 72 76 69 63 | ed..TACACS+.TBD.TCP.&.UDP.servic |
6b9e0 | 65 73 20 72 75 6e 6e 69 6e 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 63 6f | es.running.in.the.default.VRF.co |
6ba00 | 6e 74 65 78 74 20 28 69 65 2e 2c 20 6e 6f 74 20 62 6f 75 6e 64 20 74 6f 20 61 6e 79 20 56 52 46 | ntext.(ie.,.not.bound.to.any.VRF |
6ba20 | 20 64 65 76 69 63 65 29 20 63 61 6e 20 77 6f 72 6b 20 61 63 72 6f 73 73 20 61 6c 6c 20 56 52 46 | .device).can.work.across.all.VRF |
6ba40 | 20 64 6f 6d 61 69 6e 73 20 62 79 20 65 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e | .domains.by.enabling.this.option |
6ba60 | 2e 00 54 46 54 50 20 53 65 72 76 65 72 00 54 61 67 20 69 73 20 74 68 65 20 6f 70 74 69 6f 6e 61 | ..TFTP.Server.Tag.is.the.optiona |
6ba80 | 6c 20 70 61 72 61 6d 65 74 65 72 2e 20 49 66 20 74 61 67 20 63 6f 6e 66 69 67 75 72 65 64 20 53 | l.parameter..If.tag.configured.S |
6baa0 | 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 | ummary.route.will.be.originated. |
6bac0 | 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 61 67 2e 00 54 61 73 6b 20 53 63 | with.the.configured.tag..Task.Sc |
6bae0 | 68 65 64 75 6c 65 72 00 54 65 6c 65 67 72 61 66 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 | heduler.Telegraf.Telegraf.output |
6bb00 | 20 70 6c 75 67 69 6e 20 61 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 5f 00 54 65 6c | .plugin.azure-data-explorer_.Tel |
6bb20 | 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 70 72 6f 6d 65 74 68 65 75 73 2d 63 | egraf.output.plugin.prometheus-c |
6bb40 | 6c 69 65 6e 74 5f 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 73 70 | lient_.Telegraf.output.plugin.sp |
6bb60 | 6c 75 6e 6b 5f 2e 20 48 54 54 50 20 45 76 65 6e 74 20 43 6f 6c 6c 65 63 74 6f 72 2e 00 54 65 6c | lunk_..HTTP.Event.Collector..Tel |
6bb80 | 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 | l.PIM.that.we.would.not.like.to. |
6bba0 | 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 20 62 6f | use.this.interface.to.process.bo |
6bbc0 | 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 | otstrap.messages..Tell.PIM.that. |
6bbe0 | 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e | we.would.not.like.to.use.this.in |
6bc00 | 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 20 75 6e 69 63 61 73 74 20 62 6f 6f 74 73 | terface.to.process.unicast.boots |
6bc20 | 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 | trap.messages..Tell.hosts.to.use |
6bc40 | 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 28 73 74 61 74 65 66 75 6c 29 20 70 72 6f | .the.administered.(stateful).pro |
6bc60 | 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 | tocol.(i.e..DHCP).for.autoconfig |
6bc80 | 75 72 61 74 69 6f 6e 20 6f 66 20 6f 74 68 65 72 20 28 6e 6f 6e 2d 61 64 64 72 65 73 73 29 20 69 | uration.of.other.(non-address).i |
6bca0 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 | nformation.Tell.hosts.to.use.the |
6bcc0 | 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 73 74 61 74 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 | .administered.stateful.protocol. |
6bce0 | 28 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f | (i.e..DHCP).for.autoconfiguratio |
6bd00 | 6e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 | n.Temporary.disable.this.RADIUS. |
6bd20 | 73 65 72 76 65 72 2e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 | server..Temporary.disable.this.R |
6bd40 | 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 | ADIUS.server..It.won't.be.querie |
6bd60 | 64 2e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 54 41 43 41 43 53 | d..Temporary.disable.this.TACACS |
6bd80 | 20 73 65 72 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 | .server..It.won't.be.queried..Te |
6bda0 | 72 6d 69 6e 61 74 65 20 53 53 4c 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 | rminate.SSL.Test.connecting.give |
6bdc0 | 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e | n.connection-oriented.interface. |
6bde0 | 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 | .`<interface>`.can.be.``pppoe0`` |
6be00 | 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 | .as.the.example..Test.connecting |
6be20 | 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 | .given.connection-oriented.inter |
6be40 | 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 | face..`<interface>`.can.be.``sst |
6be60 | 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f | pc0``.as.the.example..Test.disco |
6be80 | 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 | nnecting.given.connection-orient |
6bea0 | 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 | ed.interface..`<interface>`.can. |
6bec0 | 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 | be.``pppoe0``.as.the.example..Te |
6bee0 | 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f | st.disconnecting.given.connectio |
6bf00 | 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 | n-oriented.interface..`<interfac |
6bf20 | 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 | e>`.can.be.``sstpc0``.as.the.exa |
6bf40 | 6d 70 6c 65 2e 00 54 65 73 74 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 6f 6e 6c 79 20 63 6c | mple..Test.from.the.IPv6.only.cl |
6bf60 | 69 65 6e 74 3a 00 54 65 73 74 69 6e 67 20 53 53 54 50 00 54 65 73 74 69 6e 67 20 61 6e 64 20 56 | ient:.Testing.SSTP.Testing.and.V |
6bf80 | 61 6c 69 64 61 74 69 6f 6e 00 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 64 69 73 63 6f 76 65 | alidation.Thanks.to.this.discove |
6bfa0 | 72 79 2c 20 61 6e 79 20 73 75 62 73 65 71 75 65 6e 74 20 74 72 61 66 66 69 63 20 62 65 74 77 65 | ry,.any.subsequent.traffic.betwe |
6bfc0 | 65 6e 20 50 43 34 20 61 6e 64 20 50 43 35 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 75 73 69 6e 67 | en.PC4.and.PC5.will.not.be.using |
6bfe0 | 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 20 62 65 74 77 65 65 6e 20 74 | .the.multicast-address.between.t |
6c000 | 68 65 20 6c 65 61 76 65 73 20 61 73 20 74 68 65 79 20 62 6f 74 68 20 6b 6e 6f 77 20 62 65 68 69 | he.leaves.as.they.both.know.behi |
6c020 | 6e 64 20 77 68 69 63 68 20 4c 65 61 66 20 74 68 65 20 50 43 73 20 61 72 65 20 63 6f 6e 6e 65 63 | nd.which.Leaf.the.PCs.are.connec |
6c040 | 74 65 64 2e 20 54 68 69 73 20 73 61 76 65 73 20 74 72 61 66 66 69 63 20 61 73 20 6c 65 73 73 20 | ted..This.saves.traffic.as.less. |
6c060 | 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 72 65 64 75 63 65 73 20 74 | multicast.packets.sent.reduces.t |
6c080 | 68 65 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 77 68 69 63 68 20 69 6d | he.load.on.the.network,.which.im |
6c0a0 | 70 72 6f 76 65 73 20 73 63 61 6c 61 62 69 6c 69 74 79 20 77 68 65 6e 20 6d 6f 72 65 20 6c 65 61 | proves.scalability.when.more.lea |
6c0c0 | 76 65 73 20 61 72 65 20 61 64 64 65 64 2e 00 54 68 61 74 20 69 73 20 68 6f 77 20 69 74 20 69 73 | ves.are.added..That.is.how.it.is |
6c0e0 | 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 74 68 65 20 73 6f 2d 63 61 6c 6c 65 64 20 22 69 | .possible.to.do.the.so-called."i |
6c100 | 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 22 2e 00 54 68 61 74 20 6c 6f 6f 6b 73 20 67 6f 6f 64 | ngress.shaping"..That.looks.good |
6c120 | 20 2d 20 77 65 20 64 65 66 69 6e 65 64 20 32 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 74 68 65 79 | .-.we.defined.2.tunnels.and.they |
6c140 | 27 72 65 20 62 6f 74 68 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 00 54 68 65 20 3a 61 62 | 're.both.up.and.running..The.:ab |
6c160 | 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 | br:`ASN.(Autonomous.System.Numbe |
6c180 | 72 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 65 73 73 65 6e 74 69 61 6c 20 65 6c 65 6d | r)`.is.one.of.the.essential.elem |
6c1a0 | 65 6e 74 73 20 6f 66 20 42 47 50 2e 20 42 47 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 20 76 | ents.of.BGP..BGP.is.a.distance.v |
6c1c0 | 65 63 74 6f 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 6e 64 20 74 68 65 20 | ector.routing.protocol,.and.the. |
6c1e0 | 41 53 2d 50 61 74 68 20 66 72 61 6d 65 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 64 69 73 74 61 | AS-Path.framework.provides.dista |
6c200 | 6e 63 65 20 76 65 63 74 6f 72 20 6d 65 74 72 69 63 20 61 6e 64 20 6c 6f 6f 70 20 64 65 74 65 63 | nce.vector.metric.and.loop.detec |
6c220 | 74 69 6f 6e 20 74 6f 20 42 47 50 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 44 4e 50 54 76 36 20 28 | tion.to.BGP..The.:abbr:`DNPTv6.( |
6c240 | 44 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b | Destination.IPv6-to-IPv6.Network |
6c260 | 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 64 65 73 74 69 6e 61 74 69 6f | .Prefix.Translation)`.destinatio |
6c280 | 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 | n.address.translation.function.i |
6c2a0 | 73 20 75 73 65 64 20 69 6e 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 74 68 65 20 73 65 | s.used.in.scenarios.where.the.se |
6c2c0 | 72 76 65 72 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 70 72 6f | rver.in.the.internal.network.pro |
6c2e0 | 76 69 64 65 73 20 73 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e | vides.services.to.the.external.n |
6c300 | 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 20 70 72 6f 76 69 64 69 6e 67 20 57 65 62 20 73 65 | etwork,.such.as.providing.Web.se |
6c320 | 72 76 69 63 65 73 20 6f 72 20 46 54 50 20 73 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 | rvices.or.FTP.services.to.the.ex |
6c340 | 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 42 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 | ternal.network..By.configuring.t |
6c360 | 68 65 20 6d 61 70 70 69 6e 67 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 62 65 74 77 65 65 6e 20 | he.mapping.relationship.between. |
6c380 | 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 61 6e 64 20 | the.internal.server.address.and. |
6c3a0 | 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6f 6e 20 | the.external.network.address.on. |
6c3c0 | 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 | the.external.network.side.interf |
6c3e0 | 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 2c 20 65 78 74 65 72 6e 61 | ace.of.the.NAT66.device,.externa |
6c400 | 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 72 73 20 63 61 6e 20 61 63 63 65 73 73 20 74 68 65 20 69 | l.network.users.can.access.the.i |
6c420 | 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 65 72 20 74 68 72 6f 75 67 68 20 74 | nternal.network.server.through.t |
6c440 | 68 65 20 64 65 73 69 67 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 | he.designated.external.network.a |
6c460 | 64 64 72 65 73 73 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 | ddress..The.:abbr:`MPLS.(Multi-P |
6c480 | 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 63 68 69 6e 67 29 60 20 61 72 63 68 69 74 | rotocol.Label.Switching)`.archit |
6c4a0 | 65 63 74 75 72 65 20 64 6f 65 73 20 6e 6f 74 20 61 73 73 75 6d 65 20 61 20 73 69 6e 67 6c 65 20 | ecture.does.not.assume.a.single. |
6c4c0 | 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 63 72 65 61 74 65 20 4d 50 4c 53 20 70 61 74 68 73 2e 20 56 | protocol.to.create.MPLS.paths..V |
6c4e0 | 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 | yOS.supports.the.Label.Distribut |
6c500 | 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 4c 44 50 29 20 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 | ion.Protocol.(LDP).as.implemente |
6c520 | 64 20 62 79 20 46 52 52 2c 20 62 61 73 65 64 20 6f 6e 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 | d.by.FRR,.based.on.:rfc:`5036`.. |
6c540 | 54 68 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 36 36 60 20 72 75 6c 65 20 72 65 70 | The.:ref:`source-nat66`.rule.rep |
6c560 | 6c 61 63 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | laces.the.source.address.of.the. |
6c580 | 70 61 63 6b 65 74 20 61 6e 64 20 63 61 6c 63 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 76 65 72 | packet.and.calculates.the.conver |
6c5a0 | 74 65 64 20 61 64 64 72 65 73 73 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 20 73 70 65 | ted.address.using.the.prefix.spe |
6c5c0 | 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 72 75 6c 65 2e 00 54 68 65 20 41 52 50 20 6d 6f 6e 69 | cified.in.the.rule..The.ARP.moni |
6c5e0 | 74 6f 72 20 77 6f 72 6b 73 20 62 79 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 69 | tor.works.by.periodically.checki |
6c600 | 6e 67 20 74 68 65 20 73 6c 61 76 65 20 64 65 76 69 63 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e | ng.the.slave.devices.to.determin |
6c620 | 65 20 77 68 65 74 68 65 72 20 74 68 65 79 20 68 61 76 65 20 73 65 6e 74 20 6f 72 20 72 65 63 65 | e.whether.they.have.sent.or.rece |
6c640 | 69 76 65 64 20 74 72 61 66 66 69 63 20 72 65 63 65 6e 74 6c 79 20 28 74 68 65 20 70 72 65 63 69 | ived.traffic.recently.(the.preci |
6c660 | 73 65 20 63 72 69 74 65 72 69 61 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 62 6f 6e | se.criteria.depends.upon.the.bon |
6c680 | 64 69 6e 67 20 6d 6f 64 65 2c 20 61 6e 64 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 | ding.mode,.and.the.state.of.the. |
6c6a0 | 73 6c 61 76 65 29 2e 20 52 65 67 75 6c 61 72 20 74 72 61 66 66 69 63 20 69 73 20 67 65 6e 65 72 | slave)..Regular.traffic.is.gener |
6c6c0 | 61 74 65 64 20 76 69 61 20 41 52 50 20 70 72 6f 62 65 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 | ated.via.ARP.probes.issued.for.t |
6c6e0 | 68 65 20 61 64 64 72 65 73 73 65 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 3a 63 | he.addresses.specified.by.the.:c |
6c700 | 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 74 61 72 67 65 74 60 20 6f 70 74 69 6f | fgcmd:`arp-monitor.target`.optio |
6c720 | 6e 2e 00 54 68 65 20 41 53 50 20 68 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 74 68 65 69 72 20 | n..The.ASP.has.documented.their. |
6c740 | 49 50 53 65 63 20 72 65 71 75 69 72 65 6d 65 6e 74 73 3a 00 54 68 65 20 42 47 50 20 72 6f 75 74 | IPSec.requirements:.The.BGP.rout |
6c760 | 65 72 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 52 50 | er.can.connect.to.one.or.more.RP |
6c780 | 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 74 6f 20 72 65 63 65 69 76 65 20 76 61 6c 69 | KI.cache.servers.to.receive.vali |
6c7a0 | 64 61 74 65 64 20 70 72 65 66 69 78 20 74 6f 20 6f 72 69 67 69 6e 20 41 53 20 6d 61 70 70 69 6e | dated.prefix.to.origin.AS.mappin |
6c7c0 | 67 73 2e 20 41 64 76 61 6e 63 65 64 20 66 61 69 6c 6f 76 65 72 20 63 61 6e 20 62 65 20 69 6d 70 | gs..Advanced.failover.can.be.imp |
6c7e0 | 6c 65 6d 65 6e 74 65 64 20 62 79 20 73 65 72 76 65 72 20 73 6f 63 6b 65 74 73 20 77 69 74 68 20 | lemented.by.server.sockets.with. |
6c800 | 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 73 2e 00 54 68 65 | different.preference.values..The |
6c820 | 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 73 61 6d 65 20 61 73 20 6d 65 | .CLI.configuration.is.same.as.me |
6c840 | 6e 74 69 6f 6e 65 64 20 69 6e 20 61 62 6f 76 65 20 61 72 74 69 63 6c 65 73 2e 20 54 68 65 20 6f | ntioned.in.above.articles..The.o |
6c860 | 6e 6c 79 20 64 69 66 66 65 72 65 6e 63 65 20 69 73 2c 20 74 68 61 74 20 65 61 63 68 20 72 6f 75 | nly.difference.is,.that.each.rou |
6c880 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 2c 20 6d 75 73 74 20 62 65 20 70 72 65 66 | ting.protocol.used,.must.be.pref |
6c8a0 | 69 78 65 64 20 77 69 74 68 20 74 68 65 20 60 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 60 20 | ixed.with.the.`vrf.name.<name>`. |
6c8c0 | 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 43 4c 4e 53 20 61 64 64 72 65 73 73 20 63 6f 6e 73 69 73 | command..The.CLNS.address.consis |
6c8e0 | 74 73 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 61 72 74 73 3a 00 54 68 65 20 44 | ts.of.the.following.parts:.The.D |
6c900 | 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 49 44 29 20 69 73 20 | HCP.unique.identifier.(DUID).is. |
6c920 | 75 73 65 64 20 62 79 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 6e 20 49 50 20 61 64 | used.by.a.client.to.get.an.IP.ad |
6c940 | 64 72 65 73 73 20 66 72 6f 6d 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 49 74 20 68 | dress.from.a.DHCPv6.server..It.h |
6c960 | 61 73 20 61 20 32 2d 62 79 74 65 20 44 55 49 44 20 74 79 70 65 20 66 69 65 6c 64 2c 20 61 6e 64 | as.a.2-byte.DUID.type.field,.and |
6c980 | 20 61 20 76 61 72 69 61 62 6c 65 2d 6c 65 6e 67 74 68 20 69 64 65 6e 74 69 66 69 65 72 20 66 69 | .a.variable-length.identifier.fi |
6c9a0 | 65 6c 64 20 75 70 20 74 6f 20 31 32 38 20 62 79 74 65 73 2e 20 49 74 73 20 61 63 74 75 61 6c 20 | eld.up.to.128.bytes..Its.actual. |
6c9c0 | 6c 65 6e 67 74 68 20 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 74 79 70 65 2e 20 54 68 65 20 | length.depends.on.its.type..The. |
6c9e0 | 73 65 72 76 65 72 20 63 6f 6d 70 61 72 65 73 20 74 68 65 20 44 55 49 44 20 77 69 74 68 20 69 74 | server.compares.the.DUID.with.it |
6ca00 | 73 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 64 65 6c 69 76 65 72 73 20 63 6f 6e 66 69 67 75 72 | s.database.and.delivers.configur |
6ca20 | 61 74 69 6f 6e 20 64 61 74 61 20 28 61 64 64 72 65 73 73 2c 20 6c 65 61 73 65 20 74 69 6d 65 73 | ation.data.(address,.lease.times |
6ca40 | 2c 20 44 4e 53 20 73 65 72 76 65 72 73 2c 20 65 74 63 2e 29 20 74 6f 20 74 68 65 20 63 6c 69 65 | ,.DNS.servers,.etc.).to.the.clie |
6ca60 | 6e 74 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 | nt..The.DN.and.password.to.bind. |
6ca80 | 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 00 54 68 | as.while.performing.searches..Th |
6caa0 | 65 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 | e.DN.and.password.to.bind.as.whi |
6cac0 | 6c 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 20 41 73 20 74 68 65 20 70 | le.performing.searches..As.the.p |
6cae0 | 61 73 73 77 6f 72 64 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 69 6e 74 65 64 20 69 6e 20 70 | assword.needs.to.be.printed.in.p |
6cb00 | 6c 61 69 6e 20 74 65 78 74 20 69 6e 20 79 6f 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 | lain.text.in.your.Squid.configur |
6cb20 | 61 74 69 6f 6e 20 69 74 20 69 73 20 73 74 72 6f 6e 67 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 | ation.it.is.strongly.recommended |
6cb40 | 20 74 6f 20 75 73 65 20 61 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 61 | .to.use.a.account.with.minimal.a |
6cb60 | 73 73 6f 63 69 61 74 65 64 20 70 72 69 76 69 6c 65 67 65 73 2e 20 54 68 69 73 20 74 6f 20 6c 69 | ssociated.privileges..This.to.li |
6cb80 | 6d 69 74 20 74 68 65 20 64 61 6d 61 67 65 20 69 6e 20 63 61 73 65 20 73 6f 6d 65 6f 6e 65 20 63 | mit.the.damage.in.case.someone.c |
6cba0 | 6f 75 6c 64 20 67 65 74 20 68 6f 6c 64 20 6f 66 20 61 20 63 6f 70 79 20 6f 66 20 79 6f 75 72 20 | ould.get.hold.of.a.copy.of.your. |
6cbc0 | 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2e 00 54 68 65 20 46 51 | Squid.configuration.file..The.FQ |
6cbe0 | 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 64 69 73 74 72 69 62 75 74 65 73 20 74 68 65 20 74 72 | -CoDel.policy.distributes.the.tr |
6cc00 | 61 66 66 69 63 20 69 6e 74 6f 20 31 30 32 34 20 46 49 46 4f 20 71 75 65 75 65 73 20 61 6e 64 20 | affic.into.1024.FIFO.queues.and. |
6cc20 | 74 72 69 65 73 20 74 6f 20 70 72 6f 76 69 64 65 20 67 6f 6f 64 20 73 65 72 76 69 63 65 20 62 65 | tries.to.provide.good.service.be |
6cc40 | 74 77 65 65 6e 20 61 6c 6c 20 6f 66 20 74 68 65 6d 2e 20 49 74 20 61 6c 73 6f 20 74 72 69 65 73 | tween.all.of.them..It.also.tries |
6cc60 | 20 74 6f 20 6b 65 65 70 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 61 6c 6c 20 74 68 65 20 71 | .to.keep.the.length.of.all.the.q |
6cc80 | 75 65 75 65 73 20 73 68 6f 72 74 2e 00 54 68 65 20 48 54 54 50 20 73 65 72 76 69 63 65 20 6c 69 | ueues.short..The.HTTP.service.li |
6cca0 | 73 74 65 6e 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 38 30 2e 00 54 68 65 20 49 50 20 61 64 64 72 | sten.on.TCP.port.80..The.IP.addr |
6ccc0 | 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 20 77 65 20 77 69 | ess.of.the.internal.system.we.wi |
6cce0 | 73 68 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 74 6f 2e 00 54 68 65 20 49 6e | sh.to.forward.traffic.to..The.In |
6cd00 | 74 65 6c 20 41 58 32 30 30 20 63 61 72 64 20 64 6f 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 75 74 | tel.AX200.card.does.not.work.out |
6cd20 | 20 6f 66 20 74 68 65 20 62 6f 78 20 69 6e 20 41 50 20 6d 6f 64 65 2c 20 73 65 65 20 68 74 74 70 | .of.the.box.in.AP.mode,.see.http |
6cd40 | 73 3a 2f 2f 75 6e 69 78 2e 73 74 61 63 6b 65 78 63 68 61 6e 67 65 2e 63 6f 6d 2f 71 75 65 73 74 | s://unix.stackexchange.com/quest |
6cd60 | 69 6f 6e 73 2f 35 39 38 32 37 35 2f 69 6e 74 65 6c 2d 61 78 32 30 30 2d 61 70 2d 6d 6f 64 65 2e | ions/598275/intel-ax200-ap-mode. |
6cd80 | 20 59 6f 75 20 63 61 6e 20 73 74 69 6c 6c 20 70 75 74 20 74 68 69 73 20 63 61 72 64 20 69 6e 74 | .You.can.still.put.this.card.int |
6cda0 | 6f 20 41 50 20 6d 6f 64 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | o.AP.mode.using.the.following.co |
6cdc0 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 20 4f 49 44 20 60 60 2e 31 2e 33 2e 36 2e 31 2e | nfiguration:.The.OID.``.1.3.6.1. |
6cde0 | 34 2e 31 2e 38 30 37 32 2e 31 2e 33 2e 32 2e 33 2e 31 2e 31 2e 34 2e 31 31 36 2e 31 30 31 2e 31 | 4.1.8072.1.3.2.3.1.1.4.116.101.1 |
6ce00 | 31 35 2e 31 31 36 60 60 2c 20 6f 6e 63 65 20 63 61 6c 6c 65 64 2c 20 77 69 6c 6c 20 63 6f 6e 74 | 15.116``,.once.called,.will.cont |
6ce20 | 61 69 6e 20 74 68 65 20 6f 75 74 70 75 74 20 6f 66 20 74 68 65 20 65 78 74 65 6e 73 69 6f 6e 2e | ain.the.output.of.the.extension. |
6ce40 | 00 54 68 65 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 | .The.Point-to-Point.Tunneling.Pr |
6ce60 | 6f 74 6f 63 6f 6c 20 28 50 50 54 50 5f 29 20 68 61 73 20 62 65 65 6e 20 69 6d 70 6c 65 6d 65 6e | otocol.(PPTP_).has.been.implemen |
6ce80 | 74 65 64 20 69 6e 20 56 79 4f 53 20 6f 6e 6c 79 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 | ted.in.VyOS.only.for.backwards.c |
6cea0 | 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 50 50 54 50 20 68 61 73 20 6d 61 6e 79 20 77 65 6c 6c | ompatibility..PPTP.has.many.well |
6cec0 | 20 6b 6e 6f 77 6e 20 73 65 63 75 72 69 74 79 20 69 73 73 75 65 73 20 61 6e 64 20 79 6f 75 20 73 | .known.security.issues.and.you.s |
6cee0 | 68 6f 75 6c 64 20 75 73 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 | hould.use.one.of.the.many.other. |
6cf00 | 6e 65 77 20 56 50 4e 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 00 54 68 65 20 50 6f 77 | new.VPN.implementations..The.Pow |
6cf20 | 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 20 68 61 73 20 35 20 64 69 66 66 65 72 65 6e 74 20 6c | erDNS.recursor.has.5.different.l |
6cf40 | 65 76 65 6c 73 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 77 68 69 63 | evels.of.DNSSEC.processing,.whic |
6cf60 | 68 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 74 68 65 20 64 6e 73 73 65 63 20 73 65 74 | h.can.be.set.with.the.dnssec.set |
6cf80 | 74 69 6e 67 2e 20 49 6e 20 6f 72 64 65 72 20 66 72 6f 6d 20 6c 65 61 73 74 20 74 6f 20 6d 6f 73 | ting..In.order.from.least.to.mos |
6cfa0 | 74 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 74 68 65 73 65 20 61 72 65 3a 00 54 68 65 20 50 72 69 | t.processing,.these.are:.The.Pri |
6cfc0 | 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 | ority.Queue.is.a.classful.schedu |
6cfe0 | 6c 69 6e 67 20 70 6f 6c 69 63 79 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 64 65 6c 61 79 20 70 | ling.policy..It.does.not.delay.p |
6d000 | 61 63 6b 65 74 73 20 28 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 6e 6f 74 20 61 20 | ackets.(Priority.Queue.is.not.a. |
6d020 | 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 29 2c 20 69 74 20 73 69 6d 70 6c 79 20 64 65 71 75 65 | shaping.policy),.it.simply.deque |
6d040 | 75 65 73 20 70 61 63 6b 65 74 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 70 | ues.packets.according.to.their.p |
6d060 | 72 69 6f 72 69 74 79 2e 00 54 68 65 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 | riority..The.RADIUS.accounting.f |
6d080 | 65 61 74 75 72 65 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 4f 70 65 | eature.must.be.used.with.the.Ope |
6d0a0 | 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 | nConnect.authentication.mode.RAD |
6d0c0 | 49 55 53 2e 20 49 74 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 | IUS..It.cannot.be.used.with.loca |
6d0e0 | 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 59 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 | l.authentication..You.must.confi |
6d100 | 67 75 72 65 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 | gure.the.OpenConnect.authenticat |
6d120 | 69 6f 6e 20 6d 6f 64 65 20 74 6f 20 22 72 61 64 69 75 73 22 2e 00 54 68 65 20 52 41 44 49 55 53 | ion.mode.to."radius"..The.RADIUS |
6d140 | 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 56 79 4f 53 20 61 72 65 20 6c 6f 63 61 74 65 | .dictionaries.in.VyOS.are.locate |
6d160 | 64 20 61 74 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 | d.at.``/usr/share/accel-ppp/radi |
6d180 | 75 73 2f 60 60 00 54 68 65 20 53 52 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 70 6f 72 74 69 6f | us/``.The.SR.segments.are.portio |
6d1a0 | 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 61 6b 65 6e 20 62 79 20 | ns.of.the.network.path.taken.by. |
6d1c0 | 74 68 65 20 70 61 63 6b 65 74 2c 20 61 6e 64 20 61 72 65 20 63 61 6c 6c 65 64 20 53 49 44 73 2e | the.packet,.and.are.called.SIDs. |
6d1e0 | 20 41 74 20 65 61 63 68 20 6e 6f 64 65 2c 20 74 68 65 20 66 69 72 73 74 20 53 49 44 20 6f 66 20 | .At.each.node,.the.first.SID.of. |
6d200 | 74 68 65 20 6c 69 73 74 20 69 73 20 72 65 61 64 2c 20 65 78 65 63 75 74 65 64 20 61 73 20 61 20 | the.list.is.read,.executed.as.a. |
6d220 | 66 6f 72 77 61 72 64 69 6e 67 20 66 75 6e 63 74 69 6f 6e 2c 20 61 6e 64 20 6d 61 79 20 62 65 20 | forwarding.function,.and.may.be. |
6d240 | 70 6f 70 70 65 64 20 74 6f 20 6c 65 74 20 74 68 65 20 6e 65 78 74 20 6e 6f 64 65 20 72 65 61 64 | popped.to.let.the.next.node.read |
6d260 | 20 74 68 65 20 6e 65 78 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 74 2e 20 54 68 65 20 53 | .the.next.SID.of.the.list..The.S |
6d280 | 49 44 20 6c 69 73 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 | ID.list.completely.determines.th |
6d2a0 | 65 20 70 61 74 68 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 66 6f 72 77 61 | e.path.where.the.packet.is.forwa |
6d2c0 | 72 64 65 64 2e 00 54 68 65 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 | rded..The.Shaper.policy.does.not |
6d2e0 | 20 67 75 61 72 61 6e 74 65 65 20 61 20 6c 6f 77 20 64 65 6c 61 79 2c 20 62 75 74 20 69 74 20 64 | .guarantee.a.low.delay,.but.it.d |
6d300 | 6f 65 73 20 67 75 61 72 61 6e 74 65 65 20 62 61 6e 64 77 69 64 74 68 20 74 6f 20 64 69 66 66 65 | oes.guarantee.bandwidth.to.diffe |
6d320 | 72 65 6e 74 20 74 72 61 66 66 69 63 20 63 6c 61 73 73 65 73 20 61 6e 64 20 61 6c 73 6f 20 6c 65 | rent.traffic.classes.and.also.le |
6d340 | 74 73 20 79 6f 75 20 64 65 63 69 64 65 20 68 6f 77 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6d 6f | ts.you.decide.how.to.allocate.mo |
6d360 | 72 65 20 74 72 61 66 66 69 63 20 6f 6e 63 65 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 73 20 61 | re.traffic.once.the.guarantees.a |
6d380 | 72 65 20 6d 65 74 2e 00 54 68 65 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 | re.met..The.UDP.port.number.used |
6d3a0 | 20 62 79 20 79 6f 75 72 20 61 70 6c 6c 69 63 61 74 69 6f 6e 2e 20 49 74 20 69 73 20 6d 61 6e 64 | .by.your.apllication..It.is.mand |
6d3c0 | 61 74 6f 72 79 20 66 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e | atory.for.this.kind.of.operation |
6d3e0 | 2e 00 54 68 65 20 56 58 4c 41 4e 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 77 61 73 20 6f 72 | ..The.VXLAN.specification.was.or |
6d400 | 69 67 69 6e 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 56 4d 77 61 72 65 2c 20 41 72 69 73 | iginally.created.by.VMware,.Aris |
6d420 | 74 61 20 4e 65 74 77 6f 72 6b 73 20 61 6e 64 20 43 69 73 63 6f 2e 20 4f 74 68 65 72 20 62 61 63 | ta.Networks.and.Cisco..Other.bac |
6d440 | 6b 65 72 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 63 | kers.of.the.VXLAN.technology.inc |
6d460 | 6c 75 64 65 20 48 75 61 77 65 69 2c 20 42 72 6f 61 64 63 6f 6d 2c 20 43 69 74 72 69 78 2c 20 50 | lude.Huawei,.Broadcom,.Citrix,.P |
6d480 | 69 63 61 38 2c 20 42 69 67 20 53 77 69 74 63 68 20 4e 65 74 77 6f 72 6b 73 2c 20 43 75 6d 75 6c | ica8,.Big.Switch.Networks,.Cumul |
6d4a0 | 75 73 20 4e 65 74 77 6f 72 6b 73 2c 20 44 65 6c 6c 20 45 4d 43 2c 20 45 72 69 63 73 73 6f 6e 2c | us.Networks,.Dell.EMC,.Ericsson, |
6d4c0 | 20 4d 65 6c 6c 61 6e 6f 78 2c 20 46 72 65 65 42 53 44 2c 20 4f 70 65 6e 42 53 44 2c 20 52 65 64 | .Mellanox,.FreeBSD,.OpenBSD,.Red |
6d4e0 | 20 48 61 74 2c 20 4a 6f 79 65 6e 74 2c 20 61 6e 64 20 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 | .Hat,.Joyent,.and.Juniper.Networ |
6d500 | 6b 73 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 64 6f 65 73 20 | ks..The.VyOS.DNS.forwarder.does. |
6d520 | 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 | not.require.an.upstream.DNS.serv |
6d540 | 65 72 2e 20 49 74 20 63 61 6e 20 73 65 72 76 65 20 61 73 20 61 20 66 75 6c 6c 20 72 65 63 75 72 | er..It.can.serve.as.a.full.recur |
6d560 | 73 69 76 65 20 44 4e 53 20 73 65 72 76 65 72 20 2d 20 62 75 74 20 69 74 20 63 61 6e 20 61 6c 73 | sive.DNS.server.-.but.it.can.als |
6d580 | 6f 20 66 6f 72 77 61 72 64 20 71 75 65 72 69 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 61 62 6c | o.forward.queries.to.configurabl |
6d5a0 | 65 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 2e 20 42 79 20 6e 6f 74 20 63 | e.upstream.DNS.servers..By.not.c |
6d5c0 | 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 | onfiguring.any.upstream.DNS.serv |
6d5e0 | 65 72 73 20 79 6f 75 20 61 6c 73 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 | ers.you.also.avoid.being.tracked |
6d600 | 20 62 79 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6f 66 20 79 6f 75 72 20 75 70 73 74 72 65 61 | .by.the.provider.of.your.upstrea |
6d620 | 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 | m.DNS.server..The.VyOS.DNS.forwa |
6d640 | 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 6c 6f 6f 6b 75 70 20 72 65 71 | rder.will.only.accept.lookup.req |
6d660 | 75 65 73 74 73 20 66 72 6f 6d 20 74 68 65 20 4c 41 4e 20 73 75 62 6e 65 74 73 20 2d 20 31 39 32 | uests.from.the.LAN.subnets.-.192 |
6d680 | 2e 31 36 38 2e 31 2e 30 2f 32 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 00 54 68 | .168.1.0/24.and.2001:db8::/64.Th |
6d6a0 | 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c | e.VyOS.DNS.forwarder.will.only.l |
6d6c0 | 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 73 20 6f 6e 20 74 68 65 20 65 74 68 31 20 28 | isten.for.requests.on.the.eth1.( |
6d6e0 | 4c 41 4e 29 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 65 73 20 2d 20 31 39 32 2e 31 | LAN).interface.addresses.-.192.1 |
6d700 | 36 38 2e 31 2e 32 35 34 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a | 68.1.254.for.IPv4.and.2001:db8:: |
6d720 | 66 66 66 66 20 66 6f 72 20 49 50 76 36 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 | ffff.for.IPv6.The.VyOS.DNS.forwa |
6d740 | 72 64 65 72 20 77 69 6c 6c 20 70 61 73 73 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 66 | rder.will.pass.reverse.lookups.f |
6d760 | 6f 72 20 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d | or..10.in-addr.arpa,.168.192.in- |
6d780 | 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 | addr.arpa,.16-31.172.in-addr.arp |
6d7a0 | 61 20 7a 6f 6e 65 73 20 74 6f 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 00 54 68 65 20 | a.zones.to.upstream.server..The. |
6d7c0 | 56 79 4f 53 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 | VyOS.PKI.subsystem.can.also.be.u |
6d7e0 | 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 74 72 69 65 76 65 20 43 65 | sed.to.automatically.retrieve.Ce |
6d800 | 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 62 72 3a 60 41 43 4d 45 | rtificates.using.the.:abbr:`ACME |
6d820 | 20 28 41 75 74 6f 6d 61 74 69 63 20 43 65 72 74 69 66 69 63 61 74 65 20 4d 61 6e 61 67 65 6d 65 | .(Automatic.Certificate.Manageme |
6d840 | 6e 74 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 00 54 68 65 20 56 | nt.Environment)`.protocol..The.V |
6d860 | 79 4f 53 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 | yOS.container.implementation.is. |
6d880 | 62 61 73 65 64 20 6f 6e 20 60 50 6f 64 6d 61 6e 3c 68 74 74 70 73 3a 2f 2f 70 6f 64 6d 61 6e 2e | based.on.`Podman<https://podman. |
6d8a0 | 69 6f 2f 3e 60 20 61 73 20 61 20 64 65 61 6d 6f 6e 6c 65 73 73 20 63 6f 6e 74 61 69 6e 65 72 20 | io/>`.as.a.deamonless.container. |
6d8c0 | 65 6e 67 69 6e 65 2e 00 54 68 65 20 57 41 50 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 | engine..The.WAP.in.this.example. |
6d8e0 | 68 61 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 | has.the.following.characteristic |
6d900 | 73 3a 00 54 68 65 20 57 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 | s:.The.Wireless.Wide-Area-Networ |
6d920 | 6b 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 61 63 63 65 73 73 20 28 74 68 72 | k.interface.provides.access.(thr |
6d940 | 6f 75 67 68 20 61 20 77 69 72 65 6c 65 73 73 20 6d 6f 64 65 6d 2f 77 77 61 6e 29 20 74 6f 20 77 | ough.a.wireless.modem/wwan).to.w |
6d960 | 69 72 65 6c 65 73 73 20 6e 65 74 77 6f 72 6b 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 76 61 72 | ireless.networks.provided.by.var |
6d980 | 69 6f 75 73 20 63 65 6c 6c 75 6c 61 72 20 70 72 6f 76 69 64 65 72 73 2e 00 54 68 65 20 60 60 43 | ious.cellular.providers..The.``C |
6d9a0 | 44 60 60 2d 62 69 74 20 69 73 20 68 6f 6e 6f 72 65 64 20 63 6f 72 72 65 63 74 6c 79 20 66 6f 72 | D``-bit.is.honored.correctly.for |
6d9c0 | 20 70 72 6f 63 65 73 73 20 61 6e 64 20 76 61 6c 69 64 61 74 65 2e 20 46 6f 72 20 6c 6f 67 2d 66 | .process.and.validate..For.log-f |
6d9e0 | 61 69 6c 2c 20 66 61 69 6c 75 72 65 73 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 74 6f 6f | ail,.failures.will.be.logged.too |
6da00 | 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 | ..The.``address``.can.be.configu |
6da20 | 72 65 64 20 65 69 74 68 65 72 20 6f 6e 20 74 68 65 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 | red.either.on.the.VRRP.interface |
6da40 | 20 6f 72 20 6f 6e 20 6e 6f 74 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 | .or.on.not.VRRP.interface..The.` |
6da60 | 60 61 64 64 72 65 73 73 60 60 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 65 69 74 68 | `address``.parameter.can.be.eith |
6da80 | 65 72 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 | er.an.IPv4.or.IPv6.address,.but. |
6daa0 | 79 6f 75 20 63 61 6e 20 6e 6f 74 20 6d 69 78 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 69 6e | you.can.not.mix.IPv4.and.IPv6.in |
6dac0 | 20 74 68 65 20 73 61 6d 65 20 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 6c 6c 20 6e 65 65 64 20 74 | .the.same.group,.and.will.need.t |
6dae0 | 6f 20 63 72 65 61 74 65 20 67 72 6f 75 70 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 56 | o.create.groups.with.different.V |
6db00 | 52 49 44 73 20 73 70 65 63 69 61 6c 6c 79 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 | RIDs.specially.for.IPv4.and.IPv6 |
6db20 | 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 49 50 76 34 20 2b 20 49 50 76 36 | ..If.you.want.to.use.IPv4.+.IPv6 |
6db40 | 20 61 64 64 72 65 73 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 6f 70 74 69 6f 6e 20 60 60 65 78 | .address.you.can.use.option.``ex |
6db60 | 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 00 54 68 65 20 60 60 68 74 74 70 60 60 20 73 65 | cluded-address``.The.``http``.se |
6db80 | 72 76 69 63 65 20 69 73 20 6c 65 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 | rvice.is.lestens.on.port.80.and. |
6dba0 | 66 6f 72 63 65 20 72 65 64 69 72 65 63 74 73 20 66 72 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 | force.redirects.from.HTTP.to.HTT |
6dbc0 | 50 53 2e 00 54 68 65 20 60 60 68 74 74 70 73 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e | PS..The.``https``.service.listen |
6dbe0 | 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 69 74 68 20 62 61 63 6b 65 6e 64 20 60 62 6b 2d 64 | s.on.port.443.with.backend.`bk-d |
6dc00 | 65 66 61 75 6c 74 60 20 74 6f 20 68 61 6e 64 6c 65 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e | efault`.to.handle.HTTPS.traffic. |
6dc20 | 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 | .It.uses.certificate.named.``cer |
6dc40 | 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 70 | t``.for.SSL.termination..The.``p |
6dc60 | 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 64 69 72 65 63 74 69 76 65 20 77 69 6c | ersistent-tunnel``.directive.wil |
6dc80 | 6c 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 75 6e 6e 65 6c 2d 72 | l.allow.us.to.configure.tunnel-r |
6dca0 | 65 6c 61 74 65 64 20 61 74 74 72 69 62 75 74 65 73 2c 20 73 75 63 68 20 61 73 20 66 69 72 65 77 | elated.attributes,.such.as.firew |
6dcc0 | 61 6c 6c 20 70 6f 6c 69 63 79 20 61 73 20 77 65 20 77 6f 75 6c 64 20 6f 6e 20 61 6e 79 20 6e 6f | all.policy.as.we.would.on.any.no |
6dce0 | 72 6d 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 73 6f | rmal.network.interface..The.``so |
6dd00 | 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | urce-address``.must.be.configure |
6dd20 | 64 20 6f 6e 20 6f 6e 65 20 6f 66 20 56 79 4f 53 20 69 6e 74 65 72 66 61 63 65 2e 20 42 65 73 74 | d.on.one.of.VyOS.interface..Best |
6dd40 | 20 70 72 61 63 74 69 63 65 20 77 6f 75 6c 64 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 | .practice.would.be.a.loopback.or |
6dd60 | 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 73 68 6f 77 20 62 72 69 64 | .dummy.interface..The.`show.brid |
6dd80 | 67 65 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 | ge`.operational.command.can.be.u |
6dda0 | 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 | sed.to.display.configured.bridge |
6ddc0 | 73 3a 00 54 68 65 20 61 62 6f 76 65 20 64 69 72 65 63 74 6f 72 79 20 61 6e 64 20 64 65 66 61 75 | s:.The.above.directory.and.defau |
6dde0 | 6c 74 2d 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 61 20 63 68 69 6c 64 20 64 69 72 65 63 74 | lt-config.must.be.a.child.direct |
6de00 | 6f 72 79 20 6f 66 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2c 20 73 69 6e 63 65 20 66 69 6c 65 73 | ory.of./config/auth,.since.files |
6de20 | 20 6f 75 74 73 69 64 65 20 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 20 61 72 65 20 6e 6f 74 20 | .outside.this.directory.are.not. |
6de40 | 70 65 72 73 69 73 74 65 64 20 61 66 74 65 72 20 61 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 | persisted.after.an.image.upgrade |
6de60 | 2e 00 54 68 65 20 61 63 74 69 6f 6e 20 63 61 6e 20 62 65 20 3a 00 54 68 65 20 61 64 64 72 65 73 | ..The.action.can.be.:.The.addres |
6de80 | 73 20 74 68 65 20 73 65 72 76 65 72 20 6c 69 73 74 65 6e 73 20 74 6f 20 64 75 72 69 6e 67 20 68 | s.the.server.listens.to.during.h |
6dea0 | 74 74 70 2d 30 31 20 63 68 61 6c 6c 65 6e 67 65 00 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f | ttp-01.challenge.The.advantage.o |
6dec0 | 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 2d 73 65 6c 65 63 74 69 | f.this.is.that.the.route-selecti |
6dee0 | 6f 6e 20 28 61 74 20 74 68 69 73 20 70 6f 69 6e 74 29 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 | on.(at.this.point).will.be.more. |
6df00 | 64 65 74 65 72 6d 69 6e 69 73 74 69 63 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 | deterministic..The.disadvantage. |
6df20 | 69 73 20 74 68 61 74 20 61 20 66 65 77 20 6f 72 20 65 76 65 6e 20 6f 6e 65 20 6c 6f 77 65 73 74 | is.that.a.few.or.even.one.lowest |
6df40 | 2d 49 44 20 72 6f 75 74 65 72 20 6d 61 79 20 61 74 74 72 61 63 74 20 61 6c 6c 20 74 72 61 66 66 | -ID.router.may.attract.all.traff |
6df60 | 69 63 20 74 6f 20 6f 74 68 65 72 77 69 73 65 2d 65 71 75 61 6c 20 70 61 74 68 73 20 62 65 63 61 | ic.to.otherwise-equal.paths.beca |
6df80 | 75 73 65 20 6f 66 20 74 68 69 73 20 63 68 65 63 6b 2e 20 49 74 20 6d 61 79 20 69 6e 63 72 65 61 | use.of.this.check..It.may.increa |
6dfa0 | 73 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 79 20 6f 66 20 4d 45 44 20 6f 72 20 49 47 50 | se.the.possibility.of.MED.or.IGP |
6dfc0 | 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2c 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 20 6d 65 61 73 75 | .oscillation,.unless.other.measu |
6dfe0 | 72 65 73 20 77 65 72 65 20 74 61 6b 65 6e 20 74 6f 20 61 76 6f 69 64 20 74 68 65 73 65 2e 20 54 | res.were.taken.to.avoid.these..T |
6e000 | 68 65 20 65 78 61 63 74 20 62 65 68 61 76 69 6f 75 72 20 77 69 6c 6c 20 62 65 20 73 65 6e 73 69 | he.exact.behaviour.will.be.sensi |
6e020 | 74 69 76 65 20 74 6f 20 74 68 65 20 69 42 47 50 20 61 6e 64 20 72 65 66 6c 65 63 74 69 6f 6e 20 | tive.to.the.iBGP.and.reflection. |
6e040 | 74 6f 70 6f 6c 6f 67 79 2e 00 54 68 65 20 61 6c 6c 6f 63 61 74 65 64 20 61 64 64 72 65 73 73 20 | topology..The.allocated.address. |
6e060 | 62 6c 6f 63 6b 20 69 73 20 31 30 30 2e 36 34 2e 30 2e 30 2f 31 30 2e 00 54 68 65 20 61 6d 6f 75 | block.is.100.64.0.0/10..The.amou |
6e080 | 6e 74 20 6f 66 20 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f | nt.of.Duplicate.Address.Detectio |
6e0a0 | 6e 20 70 72 6f 62 65 73 20 74 6f 20 73 65 6e 64 2e 00 54 68 65 20 61 74 74 72 69 62 75 74 65 73 | n.probes.to.send..The.attributes |
6e0c0 | 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 2d 6c 69 73 74 60 20 61 6e 64 20 3a 63 66 67 63 | .:cfgcmd:`prefix-list`.and.:cfgc |
6e0e0 | 6d 64 3a 60 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 60 20 61 72 65 20 6d 75 74 75 61 6c 6c | md:`distribute-list`.are.mutuall |
6e100 | 79 20 65 78 63 6c 75 73 69 76 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 63 6f 6d 6d 61 6e | y.exclusive,.and.only.one.comman |
6e120 | 64 20 28 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 20 6f 72 20 70 72 65 66 69 78 2d 6c 69 73 | d.(distribute-list.or.prefix-lis |
6e140 | 74 29 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 61 63 68 20 69 6e 62 6f 75 6e | t).can.be.applied.to.each.inboun |
6e160 | 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 | d.or.outbound.direction.for.a.pa |
6e180 | 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 65 20 61 76 61 69 6c 61 62 6c 65 | rticular.neighbor..The.available |
6e1a0 | 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 3c 6d 61 74 63 68 3e 20 61 72 65 3a 00 54 68 65 20 62 65 | .options.for.<match>.are:.The.be |
6e1c0 | 6c 6f 77 20 72 65 66 65 72 65 6e 63 65 64 20 49 50 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 30 | low.referenced.IP.address.`192.0 |
6e1e0 | 2e 32 2e 31 60 20 69 73 20 75 73 65 64 20 61 73 20 65 78 61 6d 70 6c 65 20 61 64 64 72 65 73 73 | .2.1`.is.used.as.example.address |
6e200 | 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 61 | .representing.a.global.unicast.a |
6e220 | 64 64 72 65 73 73 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 48 55 42 20 63 61 6e 20 62 | ddress.under.which.the.HUB.can.b |
6e240 | 65 20 63 6f 6e 74 61 63 74 65 64 20 62 79 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 69 6e | e.contacted.by.each.and.every.in |
6e260 | 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 2e 00 54 68 65 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 | dividual.spoke..The.bonding.inte |
6e280 | 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 74 68 6f 64 20 66 6f 72 20 61 67 67 72 | rface.provides.a.method.for.aggr |
6e2a0 | 65 67 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 | egating.multiple.network.interfa |
6e2c0 | 63 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 6c 6f 67 69 63 61 6c 20 22 62 6f 6e 64 65 | ces.into.a.single.logical."bonde |
6e2e0 | 64 22 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 4c 41 47 2c 20 6f 72 20 65 74 68 65 72 2d 63 | d".interface,.or.LAG,.or.ether-c |
6e300 | 68 61 6e 6e 65 6c 2c 20 6f 72 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 2e 20 54 68 65 20 62 65 68 | hannel,.or.port-channel..The.beh |
6e320 | 61 76 69 6f 72 20 6f 66 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 64 | avior.of.the.bonded.interfaces.d |
6e340 | 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 6d 6f 64 65 3b 20 67 65 6e 65 72 61 6c 6c 79 20 | epends.upon.the.mode;.generally. |
6e360 | 73 70 65 61 6b 69 6e 67 2c 20 6d 6f 64 65 73 20 70 72 6f 76 69 64 65 20 65 69 74 68 65 72 20 68 | speaking,.modes.provide.either.h |
6e380 | 6f 74 20 73 74 61 6e 64 62 79 20 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 73 65 72 | ot.standby.or.load.balancing.ser |
6e3a0 | 76 69 63 65 73 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 6c 69 6e 6b 20 69 6e 74 65 67 72 | vices..Additionally,.link.integr |
6e3c0 | 69 74 79 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6d 61 79 20 62 65 20 70 65 72 66 6f 72 6d 65 64 2e | ity.monitoring.may.be.performed. |
6e3e0 | 00 54 68 65 20 63 61 73 65 20 6f 66 20 69 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 00 54 68 65 | .The.case.of.ingress.shaping.The |
6e400 | 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 | .client,.once.successfully.authe |
6e420 | 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 | nticated,.will.receive.an.IPv4.a |
6e440 | 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e | nd.an.IPv6./64.address.to.termin |
6e460 | 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c | ate.the.PPPoE.endpoint.on.the.cl |
6e480 | 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 | ient.side.and.a./56.subnet.for.t |
6e4a0 | 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 | he.clients.internal.use..The.cli |
6e4c0 | 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 | ent,.once.successfully.authentic |
6e4e0 | 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 | ated,.will.receive.an.IPv4.and.a |
6e500 | 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 | n.IPv6./64.address.to.terminate. |
6e520 | 74 68 65 20 70 70 70 6f 65 20 65 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 | the.pppoe.endpoint.on.the.client |
6e540 | 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 | .side.and.a./56.subnet.for.the.c |
6e560 | 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 73 | lients.internal.use..The.clients |
6e580 | 20 3a 61 62 62 72 3a 60 43 50 45 20 28 43 75 73 74 6f 6d 65 72 20 50 72 65 6d 69 73 65 73 20 45 | .:abbr:`CPE.(Customer.Premises.E |
6e5a0 | 71 75 69 70 6d 65 6e 74 29 60 20 63 61 6e 20 6e 6f 77 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 76 | quipment)`.can.now.communicate.v |
6e5c0 | 69 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 2e 20 41 6c 6c 20 64 65 76 69 63 65 73 20 62 65 68 | ia.IPv4.or.IPv6..All.devices.beh |
6e5e0 | 69 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 61 30 30 3a 32 37 66 66 3a 66 65 32 66 3a 64 38 | ind.``2001:db8::a00:27ff:fe2f:d8 |
6e600 | 30 36 2f 36 34 60 60 20 63 61 6e 20 75 73 65 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 | 06/64``.can.use.addresses.from.` |
6e620 | 60 32 30 30 31 3a 64 62 38 3a 31 3a 3a 2f 35 36 60 60 20 61 6e 64 20 63 61 6e 20 67 6c 6f 62 61 | `2001:db8:1::/56``.and.can.globa |
6e640 | 6c 6c 79 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 | lly.communicate.without.the.need |
6e660 | 20 6f 66 20 61 6e 79 20 4e 41 54 20 72 75 6c 65 73 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 3a | .of.any.NAT.rules..The.command.: |
6e680 | 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 72 65 67 75 61 72 64 | opcmd:`show.interfaces.wireguard |
6e6a0 | 20 77 67 30 31 20 70 75 62 6c 69 63 2d 6b 65 79 60 20 77 69 6c 6c 20 74 68 65 6e 20 73 68 6f 77 | .wg01.public-key`.will.then.show |
6e6c0 | 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2c 20 77 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 | .the.public.key,.which.needs.to. |
6e6e0 | 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 74 68 65 20 70 65 65 72 2e 00 54 68 65 20 63 6f 6d | be.shared.with.the.peer..The.com |
6e700 | 6d 61 6e 64 20 61 6c 73 6f 20 67 65 6e 65 72 61 74 65 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 | mand.also.generates.a.configurat |
6e720 | 69 6f 6e 20 73 6e 69 70 70 65 64 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 63 6f 70 79 2f 70 61 | ion.snipped.which.can.be.copy/pa |
6e740 | 73 74 65 64 20 69 6e 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 69 66 20 6e 65 65 64 65 64 | sted.into.the.VyOS.CLI.if.needed |
6e760 | 2e 20 54 68 65 20 73 75 70 70 6c 69 65 64 20 60 60 3c 6e 61 6d 65 3e 60 60 20 6f 6e 20 74 68 65 | ..The.supplied.``<name>``.on.the |
6e780 | 20 43 4c 49 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 20 69 | .CLI.will.become.the.peer.name.i |
6e7a0 | 6e 20 74 68 65 20 73 6e 69 70 70 65 74 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 | n.the.snippet..The.command.below |
6e7c0 | 20 65 6e 61 62 6c 65 73 20 69 74 2c 20 61 73 73 75 6d 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 | .enables.it,.assuming.the.RADIUS |
6e7e0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 73 65 74 75 70 20 61 6e 64 20 69 | .connection.has.been.setup.and.i |
6e800 | 73 20 77 6f 72 6b 69 6e 67 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 | s.working..The.command.displays. |
6e820 | 63 75 72 72 65 6e 74 20 52 49 50 20 73 74 61 74 75 73 2e 20 49 74 20 69 6e 63 6c 75 64 65 73 20 | current.RIP.status..It.includes. |
6e840 | 52 49 50 20 74 69 6d 65 72 2c 20 66 69 6c 74 65 72 69 6e 67 2c 20 76 65 72 73 69 6f 6e 2c 20 52 | RIP.timer,.filtering,.version,.R |
6e860 | 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 52 49 50 20 70 65 65 | IP.enabled.interface.and.RIP.pee |
6e880 | 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 70 6f 6e 20 54 | r.information..The.command.pon.T |
6e8a0 | 45 53 54 55 4e 4e 45 4c 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 50 50 54 50 20 74 75 | ESTUNNEL.establishes.the.PPTP.tu |
6e8c0 | 6e 6e 65 6c 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 | nnel.to.the.remote.system..The.c |
6e8e0 | 6f 6d 70 75 74 65 72 73 20 6f 6e 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 | omputers.on.an.internal.network. |
6e900 | 63 61 6e 20 75 73 65 20 61 6e 79 20 6f 66 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 65 74 | can.use.any.of.the.addresses.set |
6e920 | 20 61 73 69 64 65 20 62 79 20 74 68 65 20 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 | .aside.by.the.:abbr:`IANA.(Inter |
6e940 | 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 | net.Assigned.Numbers.Authority)` |
6e960 | 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 69 6e 67 20 28 73 65 65 20 3a 72 66 | .for.private.addressing.(see.:rf |
6e980 | 63 3a 60 31 39 31 38 60 29 2e 20 54 68 65 73 65 20 72 65 73 65 72 76 65 64 20 49 50 20 61 64 64 | c:`1918`)..These.reserved.IP.add |
6e9a0 | 72 65 73 73 65 73 20 61 72 65 20 6e 6f 74 20 69 6e 20 75 73 65 20 6f 6e 20 74 68 65 20 49 6e 74 | resses.are.not.in.use.on.the.Int |
6e9c0 | 65 72 6e 65 74 2c 20 73 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6d 61 63 68 69 6e 65 20 77 69 | ernet,.so.an.external.machine.wi |
6e9e0 | 6c 6c 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 72 6f 75 74 65 20 74 6f 20 74 68 65 6d 2e 20 54 | ll.not.directly.route.to.them..T |
6ea00 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 72 65 73 65 72 | he.following.addresses.are.reser |
6ea20 | 76 65 64 20 66 6f 72 20 70 72 69 76 61 74 65 20 75 73 65 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 | ved.for.private.use:.The.configu |
6ea40 | 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 54 68 65 | ration.will.look.as.follows:.The |
6ea60 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 64 65 66 61 75 | .configurations.above.will.defau |
6ea80 | 6c 74 20 74 6f 20 75 73 69 6e 67 20 32 35 36 2d 62 69 74 20 41 45 53 20 69 6e 20 47 43 4d 20 6d | lt.to.using.256-bit.AES.in.GCM.m |
6eaa0 | 6f 64 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 28 69 66 20 62 6f 74 68 20 73 69 64 65 | ode.for.encryption.(if.both.side |
6eac0 | 73 20 73 75 70 70 6f 72 74 20 4e 43 50 29 20 61 6e 64 20 53 48 41 2d 31 20 66 6f 72 20 48 4d 41 | s.support.NCP).and.SHA-1.for.HMA |
6eae0 | 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 53 48 41 2d 31 20 69 73 20 63 6f 6e 73 69 | C.authentication..SHA-1.is.consi |
6eb00 | 64 65 72 65 64 20 77 65 61 6b 2c 20 62 75 74 20 6f 74 68 65 72 20 68 61 73 68 69 6e 67 20 61 6c | dered.weak,.but.other.hashing.al |
6eb20 | 67 6f 72 69 74 68 6d 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2c 20 61 73 20 61 72 65 20 65 | gorithms.are.available,.as.are.e |
6eb40 | 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 54 68 65 20 63 6f 6e 6e 65 63 | ncryption.algorithms:.The.connec |
6eb60 | 74 69 6f 6e 20 73 74 61 74 65 20 68 6f 77 65 76 65 72 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 | tion.state.however.is.completely |
6eb80 | 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6f 66 20 61 6e 79 20 75 70 70 65 72 2d 6c 65 76 65 6c 20 | .independent.of.any.upper-level. |
6eba0 | 73 74 61 74 65 2c 20 73 75 63 68 20 61 73 20 54 43 50 27 73 20 6f 72 20 53 43 54 50 27 73 20 73 | state,.such.as.TCP's.or.SCTP's.s |
6ebc0 | 74 61 74 65 2e 20 50 61 72 74 20 6f 66 20 74 68 65 20 72 65 61 73 6f 6e 20 66 6f 72 20 74 68 69 | tate..Part.of.the.reason.for.thi |
6ebe0 | 73 20 69 73 20 74 68 61 74 20 77 68 65 6e 20 6d 65 72 65 6c 79 20 66 6f 72 77 61 72 64 69 6e 67 | s.is.that.when.merely.forwarding |
6ec00 | 20 70 61 63 6b 65 74 73 2c 20 69 2e 65 2e 20 6e 6f 20 6c 6f 63 61 6c 20 64 65 6c 69 76 65 72 79 | .packets,.i.e..no.local.delivery |
6ec20 | 2c 20 74 68 65 20 54 43 50 20 65 6e 67 69 6e 65 20 6d 61 79 20 6e 6f 74 20 6e 65 63 65 73 73 61 | ,.the.TCP.engine.may.not.necessa |
6ec40 | 72 69 6c 79 20 62 65 20 69 6e 76 6f 6b 65 64 20 61 74 20 61 6c 6c 2e 20 45 76 65 6e 20 63 6f 6e | rily.be.invoked.at.all..Even.con |
6ec60 | 6e 65 63 74 69 6f 6e 6c 65 73 73 2d 6d 6f 64 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 73 | nectionless-mode.transmissions.s |
6ec80 | 75 63 68 20 61 73 20 55 44 50 2c 20 49 50 73 65 63 20 28 41 48 2f 45 53 50 29 2c 20 47 52 45 20 | uch.as.UDP,.IPsec.(AH/ESP),.GRE. |
6eca0 | 61 6e 64 20 6f 74 68 65 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 | and.other.tunneling.protocols.ha |
6ecc0 | 76 65 2c 20 61 74 20 6c 65 61 73 74 2c 20 61 20 70 73 65 75 64 6f 20 63 6f 6e 6e 65 63 74 69 6f | ve,.at.least,.a.pseudo.connectio |
6ece0 | 6e 20 73 74 61 74 65 2e 20 54 68 65 20 68 65 75 72 69 73 74 69 63 20 66 6f 72 20 73 75 63 68 20 | n.state..The.heuristic.for.such. |
6ed00 | 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 6f 66 74 65 6e 20 62 61 73 65 64 20 75 70 6f 6e 20 61 20 | protocols.is.often.based.upon.a. |
6ed20 | 70 72 65 73 65 74 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 69 6e 61 63 74 69 76 | preset.timeout.value.for.inactiv |
6ed40 | 69 74 79 2c 20 61 66 74 65 72 20 77 68 6f 73 65 20 65 78 70 69 72 61 74 69 6f 6e 20 61 20 4e 65 | ity,.after.whose.expiration.a.Ne |
6ed60 | 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 64 72 6f 70 70 65 64 2e 00 54 | tfilter.connection.is.dropped..T |
6ed80 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 65 78 70 65 63 74 20 74 61 | he.connection.tracking.expect.ta |
6eda0 | 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 | ble.contains.one.entry.for.each. |
6edc0 | 65 78 70 65 63 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 74 6f 20 61 | expected.connection.related.to.a |
6ede0 | 6e 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 61 72 65 | n.existing.connection..These.are |
6ee00 | 20 67 65 6e 65 72 61 6c 6c 79 20 75 73 65 64 20 62 79 20 e2 80 9c 63 6f 6e 6e 65 63 74 69 6f 6e | .generally.used.by....connection |
6ee20 | 20 74 72 61 63 6b 69 6e 67 20 68 65 6c 70 65 72 e2 80 9d 20 6d 6f 64 75 6c 65 73 20 73 75 63 68 | .tracking.helper....modules.such |
6ee40 | 20 61 73 20 46 54 50 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 20 74 68 65 | .as.FTP..The.default.size.of.the |
6ee60 | 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 69 73 20 32 30 34 38 20 65 6e 74 72 69 65 73 2e 00 54 | .expect.table.is.2048.entries..T |
6ee80 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 63 6f 6e | he.connection.tracking.table.con |
6eea0 | 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 | tains.one.entry.for.each.connect |
6eec0 | 69 6f 6e 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e | ion.being.tracked.by.the.system. |
6eee0 | 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 74 65 20 27 46 69 6c 74 65 72 2d 49 | .The.current.attribute.'Filter-I |
6ef00 | 64 27 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 | d'.is.being.used.as.default.and. |
6ef20 | 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 | can.be.setup.within.RADIUS:.The. |
6ef40 | 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 74 65 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 20 | current.attribute.``Filter-Id``. |
6ef60 | 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e | is.being.used.as.default.and.can |
6ef80 | 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 | .be.setup.within.RADIUS:.The.cur |
6efa0 | 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 76 65 72 73 69 6f 6e 20 34 20 28 4e 54 50 76 | rent.protocol.is.version.4.(NTPv |
6efc0 | 34 29 2c 20 77 68 69 63 68 20 69 73 20 61 20 70 72 6f 70 6f 73 65 64 20 73 74 61 6e 64 61 72 64 | 4),.which.is.a.proposed.standard |
6efe0 | 20 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 39 30 35 60 2e 20 49 | .as.documented.in.:rfc:`5905`..I |
6f000 | 74 20 69 73 20 62 61 63 6b 77 61 72 64 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 76 65 | t.is.backward.compatible.with.ve |
6f020 | 72 73 69 6f 6e 20 33 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 33 30 35 | rsion.3,.specified.in.:rfc:`1305 |
6f040 | 60 2e 00 54 68 65 20 64 61 65 6d 6f 6e 20 64 6f 75 62 6c 65 73 20 74 68 65 20 73 69 7a 65 20 6f | `..The.daemon.doubles.the.size.o |
6f060 | 66 20 74 68 65 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 73 6f 63 6b 65 74 20 62 75 66 66 65 | f.the.netlink.event.socket.buffe |
6f080 | 72 20 73 69 7a 65 20 69 66 20 69 74 20 64 65 74 65 63 74 73 20 6e 65 74 6c 69 6e 6b 20 65 76 65 | r.size.if.it.detects.netlink.eve |
6f0a0 | 6e 74 20 6d 65 73 73 61 67 65 20 64 72 6f 70 70 69 6e 67 2e 20 54 68 69 73 20 63 6c 61 75 73 65 | nt.message.dropping..This.clause |
6f0c0 | 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 62 75 66 66 65 72 20 73 69 7a 65 20 67 72 | .sets.the.maximum.buffer.size.gr |
6f0e0 | 6f 77 74 68 20 74 68 61 74 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 54 68 65 20 64 65 | owth.that.can.be.reached..The.de |
6f100 | 66 61 75 6c 74 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 66 6f 72 20 72 61 74 65 20 | fault.RADIUS.attribute.for.rate. |
6f120 | 6c 69 6d 69 74 69 6e 67 20 69 73 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 2c 20 62 75 74 20 79 | limiting.is.``Filter-Id``,.but.y |
6f140 | 6f 75 20 6d 61 79 20 61 6c 73 6f 20 72 65 64 65 66 69 6e 65 20 69 74 2e 00 54 68 65 20 64 65 66 | ou.may.also.redefine.it..The.def |
6f160 | 61 75 6c 74 20 56 79 4f 53 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 28 60 76 79 6f 73 60 29 2c | ault.VyOS.user.account.(`vyos`), |
6f180 | 20 61 73 20 77 65 6c 6c 20 61 73 20 6e 65 77 6c 79 20 63 72 65 61 74 65 64 20 75 73 65 72 20 61 | .as.well.as.newly.created.user.a |
6f1a0 | 63 63 6f 75 6e 74 73 2c 20 68 61 76 65 20 61 6c 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 | ccounts,.have.all.capabilities.t |
6f1c0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 61 63 63 6f | o.configure.the.system..All.acco |
6f1e0 | 75 6e 74 73 20 68 61 76 65 20 73 75 64 6f 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 | unts.have.sudo.capabilities.and. |
6f200 | 74 68 65 72 65 66 6f 72 65 20 63 61 6e 20 6f 70 65 72 61 74 65 20 61 73 20 72 6f 6f 74 20 6f 6e | therefore.can.operate.as.root.on |
6f220 | 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 68 6f 73 74 6e 61 6d | .the.system..The.default.hostnam |
6f240 | 65 20 75 73 65 64 20 69 73 20 60 76 79 6f 73 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | e.used.is.`vyos`..The.default.is |
6f260 | 20 31 34 39 32 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 6c 65 61 73 65 20 74 69 6d 65 20 66 6f | .1492..The.default.lease.time.fo |
6f280 | 72 20 44 48 43 50 76 36 20 6c 65 61 73 65 73 20 69 73 20 32 34 20 68 6f 75 72 73 2e 20 54 68 69 | r.DHCPv6.leases.is.24.hours..Thi |
6f2a0 | 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 73 75 70 70 6c 79 69 6e 67 20 61 20 | s.can.be.changed.by.supplying.a. |
6f2c0 | 60 60 64 65 66 61 75 6c 74 2d 74 69 6d 65 60 60 2c 20 60 60 6d 61 78 69 6d 75 6d 2d 74 69 6d 65 | ``default-time``,.``maximum-time |
6f2e0 | 60 60 20 61 6e 64 20 60 60 6d 69 6e 69 6d 75 6d 2d 74 69 6d 65 60 60 2e 20 41 6c 6c 20 76 61 6c | ``.and.``minimum-time``..All.val |
6f300 | 75 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 75 70 70 6c 69 65 64 20 69 6e 20 73 65 63 6f 6e | ues.need.to.be.supplied.in.secon |
6f320 | 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 64 70 20 69 73 20 73 65 74 20 | ds..The.default.port.udp.is.set. |
6f340 | 74 6f 20 38 34 37 32 2e 20 49 74 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 68 20 | to.8472..It.can.be.changed.with. |
6f360 | 60 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 20 76 78 6c 61 6e 20 3c 76 78 6c 61 6e 4e 3e 20 70 | ``set.interface.vxlan.<vxlanN>.p |
6f380 | 6f 72 74 20 3c 70 6f 72 74 3e 60 60 00 54 68 65 20 64 65 66 61 75 6c 74 20 74 69 6d 65 20 69 73 | ort.<port>``.The.default.time.is |
6f3a0 | 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 63 | .60.seconds..The.default.value.c |
6f3c0 | 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 36 34 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | orresponds.to.64..The.default.va |
6f3e0 | 6c 75 65 20 69 73 20 30 2e 20 54 68 69 73 20 77 69 6c 6c 20 63 61 75 73 65 20 74 68 65 20 63 61 | lue.is.0..This.will.cause.the.ca |
6f400 | 72 72 69 65 72 20 74 6f 20 62 65 20 61 73 73 65 72 74 65 64 20 28 66 6f 72 20 38 30 32 2e 33 61 | rrier.to.be.asserted.(for.802.3a |
6f420 | 64 20 6d 6f 64 65 29 20 77 68 65 6e 65 76 65 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 61 63 74 | d.mode).whenever.there.is.an.act |
6f440 | 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 | ive.aggregator,.regardless.of.th |
6f460 | 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 73 20 69 6e 20 74 | e.number.of.available.links.in.t |
6f480 | 68 61 74 20 61 67 67 72 65 67 61 74 6f 72 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | hat.aggregator..The.default.valu |
6f4a0 | 65 20 69 73 20 33 20 70 61 63 6b 65 74 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | e.is.3.packets..The.default.valu |
6f4c0 | 65 20 69 73 20 33 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 30 | e.is.3..The.default.value.is.300 |
6f4e0 | 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 | .seconds..The.default.value.is.6 |
6f500 | 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 | 00.seconds..The.default.value.is |
6f520 | 20 37 32 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | .7200.seconds..The.default.value |
6f540 | 20 69 73 20 38 36 34 30 30 20 73 65 63 6f 6e 64 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f | .is.86400.seconds.which.correspo |
6f560 | 6e 64 73 20 74 6f 20 6f 6e 65 20 64 61 79 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | nds.to.one.day..The.default.valu |
6f580 | 65 20 69 73 20 73 6c 6f 77 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 73 20 66 6f | e.is.slow..The.default.values.fo |
6f5a0 | 72 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2d 74 68 72 65 73 68 6f 6c 64 20 64 65 70 65 6e 64 20 6f | r.the.minimum-threshold.depend.o |
6f5c0 | 6e 20 49 50 20 70 72 65 63 65 64 65 6e 63 65 3a 00 54 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | n.IP.precedence:.The.destination |
6f5e0 | 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 63 72 65 61 74 69 6e 67 20 61 20 56 58 4c 41 4e 20 | .port.used.for.creating.a.VXLAN. |
6f600 | 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 20 64 65 66 61 75 6c 74 73 20 74 6f 20 69 | interface.in.Linux.defaults.to.i |
6f620 | 74 73 20 70 72 65 2d 73 74 61 6e 64 61 72 64 20 76 61 6c 75 65 20 6f 66 20 38 34 37 32 20 74 6f | ts.pre-standard.value.of.8472.to |
6f640 | 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 | .preserve.backward.compatibility |
6f660 | 2e 20 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 73 | ..A.configuration.directive.to.s |
6f680 | 75 70 70 6f 72 74 20 61 20 75 73 65 72 2d 73 70 65 63 69 66 69 65 64 20 64 65 73 74 69 6e 61 74 | upport.a.user-specified.destinat |
6f6a0 | 69 6f 6e 20 70 6f 72 74 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 61 74 20 62 65 68 61 76 69 | ion.port.to.override.that.behavi |
6f6c0 | 6f 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 | or.is.available.using.the.above. |
6f6e0 | 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 64 65 76 69 63 65 20 63 61 6e 20 6f 6e 6c 79 20 72 65 63 | command..The.device.can.only.rec |
6f700 | 65 69 76 65 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 56 4e 49 73 20 63 6f 6e 66 69 67 75 72 65 | eive.packets.with.VNIs.configure |
6f720 | 64 20 69 6e 20 74 68 65 20 56 4e 49 20 66 69 6c 74 65 72 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 | d.in.the.VNI.filtering.table..Th |
6f740 | 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 | e.dialogue.between.failover.part |
6f760 | 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e 63 72 79 70 74 65 64 20 6e 6f 72 20 61 75 | ners.is.neither.encrypted.nor.au |
6f780 | 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 20 6d 6f 73 74 20 44 48 43 50 20 73 65 72 | thenticated..Since.most.DHCP.ser |
6f7a0 | 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f | vers.exist.within.an.organisatio |
6f7c0 | 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 72 61 6e 65 74 2c 20 74 68 69 73 20 77 6f | n's.own.secure.Intranet,.this.wo |
6f7e0 | 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 61 72 79 20 6f 76 65 72 68 65 61 64 2e 20 | uld.be.an.unnecessary.overhead.. |
6f800 | 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 76 65 20 44 48 43 50 20 66 61 69 6c 6f 76 | However,.if.you.have.DHCP.failov |
6f820 | 65 72 20 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 | er.peers.whose.communications.tr |
6f840 | 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 | averse.insecure.networks,.then.w |
6f860 | 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 | e.recommend.that.you.consider.th |
6f880 | 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 | e.use.of.VPN.tunneling.between.t |
6f8a0 | 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 | hem.to.ensure.that.the.failover. |
6f8c0 | 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 70 74 | partnership.is.immune.to.disrupt |
6f8e0 | 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 76 69 | ion.(accidental.or.otherwise).vi |
6f900 | 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 | a.third.parties..The.domain-name |
6f920 | 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 | .parameter.should.be.the.domain. |
6f940 | 6e 61 6d 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 74 68 | name.that.will.be.appended.to.th |
6f960 | 65 20 63 6c 69 65 6e 74 27 73 20 68 6f 73 74 6e 61 6d 65 20 74 6f 20 66 6f 72 6d 20 61 20 66 75 | e.client's.hostname.to.form.a.fu |
6f980 | 6c 6c 79 2d 71 75 61 6c 69 66 69 65 64 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 28 46 51 44 4e 29 | lly-qualified.domain-name.(FQDN) |
6f9a0 | 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 30 31 35 29 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e | .(DHCP.Option.015)..The.domain-n |
6f9c0 | 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 | ame.parameter.should.be.the.doma |
6f9e0 | 69 6e 20 6e 61 6d 65 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 70 6c 65 74 69 6e 67 20 44 4e 53 | in.name.used.when.completing.DNS |
6fa00 | 20 72 65 71 75 65 73 74 20 77 68 65 72 65 20 6e 6f 20 66 75 6c 6c 20 46 51 44 4e 20 69 73 20 70 | .request.where.no.full.FQDN.is.p |
6fa20 | 61 73 73 65 64 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 67 69 76 65 6e 20 | assed..This.option.can.be.given. |
6fa40 | 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 69 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 | multiple.times.if.you.need.multi |
6fa60 | 70 6c 65 20 73 65 61 72 63 68 20 64 6f 6d 61 69 6e 73 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 | ple.search.domains.(DHCP.Option. |
6fa80 | 31 31 39 29 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 61 6c 6c 6f 77 73 | 119)..The.dummy.interface.allows |
6faa0 | 20 75 73 20 74 6f 20 68 61 76 65 20 61 6e 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 | .us.to.have.an.equivalent.of.the |
6fac0 | 20 43 69 73 63 6f 20 49 4f 53 20 4c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 2d 20 | .Cisco.IOS.Loopback.interface.-. |
6fae0 | 61 20 72 6f 75 74 65 72 2d 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 65 20 63 | a.router-internal.interface.we.c |
6fb00 | 61 6e 20 75 73 65 20 66 6f 72 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 72 6f 75 74 | an.use.for.IP.addresses.the.rout |
6fb20 | 65 72 20 6d 75 73 74 20 6b 6e 6f 77 20 61 62 6f 75 74 2c 20 62 75 74 20 77 68 69 63 68 20 61 72 | er.must.know.about,.but.which.ar |
6fb40 | 65 20 6e 6f 74 20 61 63 74 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 72 65 61 | e.not.actually.assigned.to.a.rea |
6fb60 | 6c 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 69 | l.network..The.dummy.interface.i |
6fb80 | 73 20 72 65 61 6c 6c 79 20 61 20 6c 69 74 74 6c 65 20 65 78 6f 74 69 63 2c 20 62 75 74 20 72 61 | s.really.a.little.exotic,.but.ra |
6fba0 | 74 68 65 72 20 75 73 65 66 75 6c 20 6e 65 76 65 72 74 68 65 6c 65 73 73 2e 20 44 75 6d 6d 79 20 | ther.useful.nevertheless..Dummy. |
6fbc0 | 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 6d 75 63 68 20 6c 69 6b 65 20 74 68 65 20 3a 72 65 | interfaces.are.much.like.the.:re |
6fbe0 | 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 | f:`loopback-interface`.interface |
6fc00 | 2c 20 65 78 63 65 70 74 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 73 20 6d 61 6e 79 20 61 73 | ,.except.you.can.have.as.many.as |
6fc20 | 20 79 6f 75 20 77 61 6e 74 2e 00 54 68 65 20 65 6d 62 65 64 64 65 64 20 53 71 75 69 64 20 70 72 | .you.want..The.embedded.Squid.pr |
6fc40 | 6f 78 79 20 63 61 6e 20 75 73 65 20 4c 44 41 50 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 | oxy.can.use.LDAP.to.authenticate |
6fc60 | 20 75 73 65 72 73 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 70 61 6e 79 20 77 69 64 65 20 64 69 | .users.against.a.company.wide.di |
6fc80 | 72 65 63 74 6f 72 79 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 | rectory..The.following.configura |
6fca0 | 74 69 6f 6e 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 68 6f 77 20 74 6f 20 75 73 65 | tion.is.an.example.of.how.to.use |
6fcc0 | 20 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 | .Active.Directory.as.authenticat |
6fce0 | 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 51 75 65 72 69 65 73 20 61 72 65 20 64 6f 6e 65 20 76 69 | ion.backend..Queries.are.done.vi |
6fd00 | 61 20 4c 44 41 50 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 20 75 73 65 73 20 31 | a.LDAP..The.example.above.uses.1 |
6fd20 | 39 32 2e 30 2e 32 2e 32 20 61 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e | 92.0.2.2.as.external.IP.address. |
6fd40 | 20 41 20 4c 41 43 20 6e 6f 72 6d 61 6c 6c 79 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 75 74 68 | .A.LAC.normally.requires.an.auth |
6fd60 | 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 2c 20 77 68 69 63 68 20 69 73 20 73 65 | entication.password,.which.is.se |
6fd80 | 74 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 | t.in.the.example.configuration.t |
6fda0 | 6f 20 60 60 6c 6e 73 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 27 73 65 63 72 65 74 27 60 60 | o.``lns.shared-secret.'secret'`` |
6fdc0 | 2e 20 54 68 69 73 20 73 65 74 75 70 20 72 65 71 75 69 72 65 73 20 74 68 65 20 43 6f 6d 70 72 65 | ..This.setup.requires.the.Compre |
6fde0 | 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 20 62 65 69 | ssion.Control.Protocol.(CCP).bei |
6fe00 | 6e 67 20 64 69 73 61 62 6c 65 64 2c 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 76 | ng.disabled,.the.command.``set.v |
6fe20 | 70 6e 20 6c 32 74 70 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 63 70 2d 64 69 73 61 62 6c | pn.l2tp.remote-access.ccp-disabl |
6fe40 | 65 60 60 20 61 63 63 6f 6d 70 6c 69 73 68 65 73 20 74 68 61 74 2e 00 54 68 65 20 65 78 61 6d 70 | e``.accomplishes.that..The.examp |
6fe60 | 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e | le.below.covers.a.dual-stack.con |
6fe80 | 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 70 70 70 6f 65 2d 73 65 72 76 65 72 2e 00 54 68 65 | figuration.via.pppoe-server..The |
6fea0 | 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 | .example.below.covers.a.dual-sta |
6fec0 | 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 | ck.configuration..The.example.be |
6fee0 | 6c 6f 77 20 75 73 65 73 20 41 43 4e 20 61 73 20 61 63 63 65 73 73 2d 63 6f 6e 63 65 6e 74 72 61 | low.uses.ACN.as.access-concentra |
6ff00 | 74 6f 72 20 6e 61 6d 65 2c 20 61 73 73 69 67 6e 73 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f | tor.name,.assigns.an.address.fro |
6ff20 | 6d 20 74 68 65 20 70 6f 6f 6c 20 31 30 2e 31 2e 31 2e 31 30 30 2d 31 31 31 2c 20 74 65 72 6d 69 | m.the.pool.10.1.1.100-111,.termi |
6ff40 | 6e 61 74 65 73 20 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 31 30 2e 31 | nates.at.the.local.endpoint.10.1 |
6ff60 | 2e 31 2e 31 20 61 6e 64 20 73 65 72 76 65 73 20 72 65 71 75 65 73 74 73 20 6f 6e 6c 79 20 6f 6e | .1.1.and.serves.requests.only.on |
6ff80 | 20 65 74 68 31 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .eth1..The.example.configuration |
6ffa0 | 20 62 65 6c 6f 77 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 6e 20 49 50 20 74 6f 20 74 68 65 20 | .below.will.assign.an.IP.to.the. |
6ffc0 | 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 | client.on.the.incoming.interface |
6ffe0 | 20 65 74 68 32 20 77 69 74 68 20 74 68 65 20 63 6c 69 65 6e 74 20 6d 61 63 20 61 64 64 72 65 73 | .eth2.with.the.client.mac.addres |
70000 | 73 20 30 38 3a 30 30 3a 32 37 3a 32 66 3a 64 38 3a 30 36 2e 20 4f 74 68 65 72 20 44 48 43 50 20 | s.08:00:27:2f:d8:06..Other.DHCP. |
70020 | 64 69 73 63 6f 76 65 72 79 20 72 65 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 | discovery.requests.will.be.ignor |
70040 | 65 64 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 63 6c 69 65 6e 74 20 6d 61 63 20 68 61 73 20 62 65 | ed,.unless.the.client.mac.has.be |
70060 | 65 6e 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e | en.enabled.in.the.configuration. |
70080 | 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 20 77 69 72 65 6c 65 73 73 20 | .The.example.creates.a.wireless. |
700a0 | 73 74 61 74 69 6f 6e 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 | station.(commonly.referred.to.as |
700c0 | 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 29 20 74 68 61 74 20 61 63 63 65 73 73 65 73 20 74 68 65 | .Wi-Fi.client).that.accesses.the |
700e0 | 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 50 20 64 65 66 69 6e 65 64 | .network.through.the.WAP.defined |
70100 | 20 69 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2e 20 54 68 65 20 64 65 66 61 75 | .in.the.above.example..The.defau |
70120 | 6c 74 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 20 28 60 60 70 68 79 30 60 60 29 20 69 73 | lt.physical.device.(``phy0``).is |
70140 | 20 75 73 65 64 2e 00 54 68 65 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 | .used..The.external.IP.address.t |
70160 | 6f 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 00 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 70 70 | o.translate.to.The.firewall.supp |
70180 | 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f 72 20 | orts.the.creation.of.groups.for. |
701a0 | 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 2c 20 69 6e 74 65 72 66 61 63 65 73 2c 20 | addresses,.domains,.interfaces,. |
701c0 | 6d 61 63 2d 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 6f 72 74 | mac-addresses,.networks.and.port |
701e0 | 20 67 72 6f 75 70 73 2e 20 54 68 69 73 20 67 72 6f 75 70 73 20 63 61 6e 20 62 65 20 75 73 65 64 | .groups..This.groups.can.be.used |
70200 | 20 6c 61 74 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 61 73 20 64 65 | .later.in.firewall.ruleset.as.de |
70220 | 73 69 72 65 64 2e 00 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 | sired..The.firewall.supports.the |
70240 | 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f 72 20 70 6f 72 74 73 2c 20 61 | .creation.of.groups.for.ports,.a |
70260 | 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 20 28 69 6d 70 6c 65 6d 65 6e | ddresses,.and.networks.(implemen |
70280 | 74 65 64 20 75 73 69 6e 67 20 6e 65 74 66 69 6c 74 65 72 20 69 70 73 65 74 29 20 61 6e 64 20 74 | ted.using.netfilter.ipset).and.t |
702a0 | 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 7a 6f 6e 65 20 62 | he.option.of.interface.or.zone.b |
702c0 | 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 00 54 68 65 20 66 69 72 73 74 20 | ased.firewall.policy..The.first. |
702e0 | 49 50 20 69 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 69 73 20 72 | IP.in.the.container.network.is.r |
70300 | 65 73 65 72 76 65 64 20 62 79 20 74 68 65 20 65 6e 67 69 6e 65 20 61 6e 64 20 63 61 6e 6e 6f 74 | eserved.by.the.engine.and.cannot |
70320 | 20 62 65 20 75 73 65 64 00 54 68 65 20 66 69 72 73 74 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | .be.used.The.first.address.of.th |
70340 | 65 20 70 61 72 61 6d 65 74 65 72 20 60 60 63 6c 69 65 6e 74 2d 73 75 62 6e 65 74 60 60 2c 20 77 | e.parameter.``client-subnet``,.w |
70360 | 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 | ill.be.used.as.the.default.gatew |
70380 | 61 79 2e 20 43 6f 6e 6e 65 63 74 65 64 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 | ay..Connected.sessions.can.be.ch |
703a0 | 65 63 6b 65 64 20 76 69 61 20 74 68 65 20 60 60 73 68 6f 77 20 69 70 6f 65 2d 73 65 72 76 65 72 | ecked.via.the.``show.ipoe-server |
703c0 | 20 73 65 73 73 69 6f 6e 73 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 66 69 72 73 74 20 61 | .sessions``.command..The.first.a |
703e0 | 6e 64 20 61 72 67 75 61 62 6c 79 20 63 6c 65 61 6e 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f | nd.arguably.cleaner.option.is.to |
70400 | 20 6d 61 6b 65 20 79 6f 75 72 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 20 47 52 | .make.your.IPsec.policy.match.GR |
70420 | 45 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 | E.packets.between.external.addre |
70440 | 73 73 65 73 20 6f 66 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 20 54 68 69 73 20 69 73 20 74 68 | sses.of.your.routers..This.is.th |
70460 | 65 20 62 65 73 74 20 6f 70 74 69 6f 6e 20 69 66 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 68 61 | e.best.option.if.both.routers.ha |
70480 | 76 65 20 73 74 61 74 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 | ve.static.external.addresses..Th |
704a0 | 65 20 66 69 72 73 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 6d 65 63 68 61 6e 69 73 6d 2c 20 | e.first.flow.control.mechanism,. |
704c0 | 74 68 65 20 70 61 75 73 65 20 66 72 61 6d 65 2c 20 77 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 | the.pause.frame,.was.defined.by. |
704e0 | 74 68 65 20 49 45 45 45 20 38 30 32 2e 33 78 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 66 69 | the.IEEE.802.3x.standard..The.fi |
70500 | 72 73 74 20 69 70 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 52 50 27 73 20 61 64 64 72 65 | rst.ip.address.is.the.RP's.addre |
70520 | 73 73 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 6d | ss.and.the.second.value.is.the.m |
70540 | 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 | atching.prefix.of.group.ranges.c |
70560 | 6f 76 65 72 65 64 2e 00 54 68 65 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 | overed..The.first.registration.r |
70580 | 65 71 75 65 73 74 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 62 | equest.is.sent.to.the.protocol.b |
705a0 | 72 6f 61 64 63 61 73 74 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 | roadcast.address,.and.the.server |
705c0 | 27 73 20 72 65 61 6c 20 70 72 6f 74 6f 63 6f 6c 20 61 64 64 72 65 73 73 20 69 73 20 64 79 6e 61 | 's.real.protocol.address.is.dyna |
705e0 | 6d 69 63 61 6c 6c 79 20 64 65 74 65 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 | mically.detected.from.the.first. |
70600 | 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 70 6c 79 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | registration.reply..The.followin |
70620 | 67 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 65 73 74 73 20 4d 53 43 48 41 50 | g.PPP.configuration.tests.MSCHAP |
70640 | 2d 76 32 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 | -v2:.The.following.command.can.b |
70660 | 65 20 75 73 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 4f 54 50 20 6b 65 79 20 61 | e.used.to.generate.the.OTP.key.a |
70680 | 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f | s.well.as.the.CLI.commands.to.co |
706a0 | 6e 66 69 67 75 72 65 20 74 68 65 6d 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d | nfigure.them:.The.following.comm |
706c0 | 61 6e 64 20 75 73 65 73 20 74 68 65 20 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c | and.uses.the.explicit-null.label |
706e0 | 20 76 61 6c 75 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 42 47 50 20 69 6e 73 74 61 6e 63 65 73 | .value.for.all.the.BGP.instances |
70700 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 | ..The.following.commands.let.you |
70720 | 20 63 68 65 63 6b 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 | .check.tunnel.status..The.follow |
70740 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 20 72 65 73 65 74 20 4f 70 65 6e 56 | ing.commands.let.you.reset.OpenV |
70760 | 50 4e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 | PN..The.following.commands.trans |
70780 | 6c 61 74 65 20 74 6f 20 22 2d 2d 6e 65 74 20 68 6f 73 74 22 20 77 68 65 6e 20 74 68 65 20 63 6f | late.to."--net.host".when.the.co |
707a0 | 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ntainer.is.created.The.following |
707c0 | 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 | .commands.would.be.required.to.s |
707e0 | 65 74 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 61 20 67 69 76 65 6e 20 64 79 6e 61 6d 69 63 20 72 | et.options.for.a.given.dynamic.r |
70800 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 73 69 64 65 20 61 20 67 69 76 65 6e 20 76 | outing.protocol.inside.a.given.v |
70820 | 72 66 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | rf:.The.following.configuration. |
70840 | 64 65 6d 6f 6e 73 74 72 61 74 65 73 20 68 6f 77 20 74 6f 20 75 73 65 20 56 79 4f 53 20 74 6f 20 | demonstrates.how.to.use.VyOS.to. |
70860 | 61 63 68 69 65 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 | achieve.load.balancing.based.on. |
70880 | 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | the.domain.name..The.following.c |
708a0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 70 6c 69 63 69 74 6c 79 20 6a 6f 69 6e 73 20 6d 75 | onfiguration.explicitly.joins.mu |
708c0 | 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 31 35 3a 3a 31 32 33 34 60 20 6f 6e 20 69 6e | lticast.group.`ff15::1234`.on.in |
708e0 | 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 61 6e 64 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 | terface.`eth1`.and.source-specif |
70900 | 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 31 35 3a 3a 35 36 37 38 60 20 | ic.multicast.group.`ff15::5678`. |
70920 | 77 69 74 68 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 60 32 30 30 31 3a 64 62 38 3a 3a 31 | with.source.address.`2001:db8::1 |
70940 | 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 3a 00 54 68 65 20 66 6f 6c 6c 6f | `.on.interface.`eth1`:.The.follo |
70960 | 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 6e 20 56 79 4f 53 20 61 70 70 6c 69 | wing.configuration.on.VyOS.appli |
70980 | 65 73 20 74 6f 20 61 6c 6c 20 66 6f 6c 6c 6f 77 69 6e 67 20 33 72 64 20 70 61 72 74 79 20 76 65 | es.to.all.following.3rd.party.ve |
709a0 | 6e 64 6f 72 73 2e 20 49 74 20 63 72 65 61 74 65 73 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 | ndors..It.creates.a.bond.with.tw |
709c0 | 6f 20 6c 69 6e 6b 73 20 61 6e 64 20 56 4c 41 4e 20 31 30 2c 20 31 30 30 20 6f 6e 20 74 68 65 20 | o.links.and.VLAN.10,.100.on.the. |
709e0 | 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 70 65 72 20 56 49 46 | bonded.interfaces.with.a.per.VIF |
70a00 | 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e | .IPv4.address..The.following.con |
70a20 | 66 69 67 75 72 61 74 69 6f 6e 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 74 65 72 6d 69 6e 61 | figuration.reverse-proxy.termina |
70a40 | 74 65 20 53 53 4c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 | te.SSL..The.following.configurat |
70a60 | 69 6f 6e 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 | ion.will.assign.a./64.prefix.out |
70a80 | 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 74 6f 20 65 74 68 30 2e 20 54 68 | .of.a./56.delegation.to.eth0..Th |
70aa0 | 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 | e.IPv6.address.assigned.to.eth0. |
70ac0 | 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 2f 36 34 2e 20 49 66 20 79 6f | will.be.<prefix>::ffff/64..If.yo |
70ae0 | 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 | u.do.not.know.the.prefix.size.de |
70b00 | 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c | legated.to.you,.start.with.sla-l |
70b20 | 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | en.0..The.following.configuratio |
70b40 | 6e 20 77 69 6c 6c 20 73 65 74 75 70 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 73 6f 75 | n.will.setup.a.PPPoE.session.sou |
70b60 | 72 63 65 20 66 72 6f 6d 20 65 74 68 31 20 61 6e 64 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 | rce.from.eth1.and.assign.a./64.p |
70b80 | 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 28 72 | refix.out.of.a./56.delegation.(r |
70ba0 | 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 74 68 65 20 49 53 50 29 20 74 6f 20 65 74 68 30 2e 20 | equested.from.the.ISP).to.eth0.. |
70bc0 | 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 | The.IPv6.address.assigned.to.eth |
70be0 | 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 31 2f 36 34 2e 20 49 66 20 79 6f 75 | 0.will.be.<prefix>::1/64..If.you |
70c00 | 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c | .do.not.know.the.prefix.size.del |
70c20 | 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 | egated.to.you,.start.with.sla-le |
70c40 | 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 61 6c 6c 6f 77 | n.0..The.following.example.allow |
70c60 | 73 20 56 79 4f 53 20 74 6f 20 75 73 65 20 3a 61 62 62 72 3a 60 50 42 52 20 28 50 6f 6c 69 63 79 | s.VyOS.to.use.:abbr:`PBR.(Policy |
70c80 | 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 29 60 20 66 6f 72 20 74 72 61 66 66 69 63 2c 20 77 68 | -Based.Routing)`.for.traffic,.wh |
70ca0 | 69 63 68 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 | ich.originated.from.the.router.i |
70cc0 | 74 73 65 6c 66 2e 20 54 68 61 74 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c | tself..That.solution.for.multipl |
70ce0 | 65 20 49 53 50 27 73 20 61 6e 64 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 | e.ISP's.and.VyOS.router.will.res |
70d00 | 70 6f 6e 64 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 | pond.from.the.same.interface.tha |
70d20 | 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 2e 20 41 6c 73 6f 2c | t.the.packet.was.received..Also, |
70d40 | 20 69 74 20 75 73 65 64 2c 20 69 66 20 77 65 20 77 61 6e 74 20 74 68 61 74 20 6f 6e 65 20 56 50 | .it.used,.if.we.want.that.one.VP |
70d60 | 4e 20 74 75 6e 6e 65 6c 20 74 6f 20 62 65 20 74 68 72 6f 75 67 68 20 6f 6e 65 20 70 72 6f 76 69 | N.tunnel.to.be.through.one.provi |
70d80 | 64 65 72 2c 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 74 68 72 6f 75 67 68 20 61 6e 6f 74 | der,.and.the.second.through.anot |
70da0 | 68 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 | her..The.following.example.creat |
70dc0 | 65 73 20 61 20 57 41 50 2e 20 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6d 75 6c 74 69 | es.a.WAP..When.configuring.multi |
70de0 | 70 6c 65 20 57 41 50 20 69 6e 74 65 72 66 61 63 65 73 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 | ple.WAP.interfaces,.you.must.spe |
70e00 | 63 69 66 79 20 75 6e 69 71 75 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 63 68 61 6e 6e 65 | cify.unique.IP.addresses,.channe |
70e20 | 6c 73 2c 20 4e 65 74 77 6f 72 6b 20 49 44 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 | ls,.Network.IDs.commonly.referre |
70e40 | 64 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 53 53 49 44 20 28 53 65 72 76 69 63 65 20 53 65 74 | d.to.as.:abbr:`SSID.(Service.Set |
70e60 | 20 49 64 65 6e 74 69 66 69 65 72 29 60 2c 20 61 6e 64 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 | .Identifier)`,.and.MAC.addresses |
70e80 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 69 73 20 62 61 73 65 64 | ..The.following.example.is.based |
70ea0 | 20 6f 6e 20 61 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 69 6e | .on.a.Sierra.Wireless.MC7710.min |
70ec0 | 69 50 43 49 65 20 63 61 72 64 20 28 6f 6e 6c 79 20 74 68 65 20 66 6f 72 6d 20 66 61 63 74 6f 72 | iPCIe.card.(only.the.form.factor |
70ee0 | 20 69 6e 20 72 65 61 6c 69 74 79 20 69 74 20 72 75 6e 73 20 55 42 53 29 20 61 6e 64 20 44 65 75 | .in.reality.it.runs.UBS).and.Deu |
70f00 | 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 61 73 20 49 53 50 2e 20 54 68 65 20 63 61 72 64 20 69 | tsche.Telekom.as.ISP..The.card.i |
70f20 | 73 20 61 73 73 65 6d 62 6c 65 64 20 69 6e 74 6f 20 61 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 | s.assembled.into.a.:ref:`pc-engi |
70f40 | 6e 65 73 2d 61 70 75 34 60 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 | nes-apu4`..The.following.example |
70f60 | 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 | .topology.was.built.using.EVE-NG |
70f80 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 69 6c 6c 20 73 68 6f | ..The.following.example.will.sho |
70fa0 | 77 20 68 6f 77 20 56 79 4f 53 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 69 72 65 | w.how.VyOS.can.be.used.to.redire |
70fc0 | 63 74 20 77 65 62 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 74 72 | ct.web.traffic.to.an.external.tr |
70fe0 | 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 | ansparent.proxy:.The.following.e |
71000 | 78 61 6d 70 6c 65 73 20 73 68 6f 77 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 4e 41 | xamples.show.how.to.configure.NA |
71020 | 54 36 34 20 6f 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 65 20 31 39 32 2e 30 2e | T64.on.a.VyOS.router..The.192.0. |
71040 | 32 2e 31 30 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 61 73 20 74 68 65 20 49 50 76 34 | 2.10.address.is.used.as.the.IPv4 |
71060 | 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 6f | .address.for.the.translation.poo |
71080 | 6c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 68 61 72 64 77 61 72 65 20 6d 6f 64 75 6c 65 | l..The.following.hardware.module |
710a0 | 73 20 68 61 76 65 20 62 65 65 6e 20 74 65 73 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 | s.have.been.tested.successfully. |
710c0 | 69 6e 20 61 6e 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 20 62 6f 61 | in.an.:ref:`pc-engines-apu4`.boa |
710e0 | 72 64 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 20 | rd:.The.following.is.the.config. |
71100 | 66 6f 72 20 74 68 65 20 69 50 68 6f 6e 65 20 70 65 65 72 20 61 62 6f 76 65 2e 20 49 74 27 73 20 | for.the.iPhone.peer.above..It's. |
71120 | 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 74 68 65 20 60 60 41 6c 6c | important.to.note.that.the.``All |
71140 | 6f 77 65 64 49 50 73 60 60 20 77 69 6c 64 63 61 72 64 20 73 65 74 74 69 6e 67 20 64 69 72 65 63 | owedIPs``.wildcard.setting.direc |
71160 | 74 73 20 61 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 20 74 68 72 | ts.all.IPv4.and.IPv6.traffic.thr |
71180 | 6f 75 67 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | ough.the.connection..The.followi |
711a0 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 | ng.protocols.can.be.used:.any,.b |
711c0 | 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 | abel,.bgp,.connected,.eigrp,.isi |
711e0 | 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 | s,.kernel,.ospf,.rip,.static,.ta |
71200 | 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 | ble.The.following.protocols.can. |
71220 | 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 | be.used:.any,.babel,.bgp,.connec |
71240 | 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 | ted,.isis,.kernel,.ospfv3,.ripng |
71260 | 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 | ,.static,.table.The.following.st |
71280 | 72 75 63 74 75 72 65 20 72 65 73 70 72 65 73 65 6e 74 20 74 68 65 20 63 6c 69 20 73 74 72 75 63 | ructure.respresent.the.cli.struc |
712a0 | 74 75 72 65 2e 00 54 68 65 20 66 6f 72 6d 75 6c 61 20 66 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 | ture..The.formula.for.unfragment |
712c0 | 65 64 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 20 69 73 00 54 68 65 20 66 6f | ed.TCP.and.UDP.packets.is.The.fo |
712e0 | 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 74 69 6d 65 20 69 73 20 74 68 65 20 74 69 6d 65 20 | rwarding.delay.time.is.the.time. |
71300 | 73 70 65 6e 74 20 69 6e 20 65 61 63 68 20 6f 66 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 | spent.in.each.of.the.listening.a |
71320 | 6e 64 20 6c 65 61 72 6e 69 6e 67 20 73 74 61 74 65 73 20 62 65 66 6f 72 65 20 74 68 65 20 46 6f | nd.learning.states.before.the.Fo |
71340 | 72 77 61 72 64 69 6e 67 20 73 74 61 74 65 20 69 73 20 65 6e 74 65 72 65 64 2e 20 54 68 69 73 20 | rwarding.state.is.entered..This. |
71360 | 64 65 6c 61 79 20 69 73 20 73 6f 20 74 68 61 74 20 77 68 65 6e 20 61 20 6e 65 77 20 62 72 69 64 | delay.is.so.that.when.a.new.brid |
71380 | 67 65 20 63 6f 6d 65 73 20 6f 6e 74 6f 20 61 20 62 75 73 79 20 6e 65 74 77 6f 72 6b 20 69 74 20 | ge.comes.onto.a.busy.network.it. |
713a0 | 6c 6f 6f 6b 73 20 61 74 20 73 6f 6d 65 20 74 72 61 66 66 69 63 20 62 65 66 6f 72 65 20 70 61 72 | looks.at.some.traffic.before.par |
713c0 | 74 69 63 69 70 61 74 69 6e 67 2e 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 63 6f 6e 66 69 67 | ticipating..The.generated.config |
713e0 | 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 67 65 6e 65 | uration.will.look.like:.The.gene |
71400 | 72 61 74 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 74 68 65 6e 20 6f 75 74 70 75 74 | rated.parameters.are.then.output |
71420 | 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 54 68 65 20 67 65 6e 65 72 69 63 20 6e 61 6d | .to.the.console..The.generic.nam |
71440 | 65 20 6f 66 20 51 75 61 6c 69 74 79 20 6f 66 20 53 65 72 76 69 63 65 20 6f 72 20 54 72 61 66 66 | e.of.Quality.of.Service.or.Traff |
71460 | 69 63 20 43 6f 6e 74 72 6f 6c 20 69 6e 76 6f 6c 76 65 73 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 | ic.Control.involves.things.like. |
71480 | 73 68 61 70 69 6e 67 20 74 72 61 66 66 69 63 2c 20 73 63 68 65 64 75 6c 69 6e 67 20 6f 72 20 64 | shaping.traffic,.scheduling.or.d |
714a0 | 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 61 72 65 20 74 68 65 20 6b | ropping.packets,.which.are.the.k |
714c0 | 69 6e 64 20 6f 66 20 74 68 69 6e 67 73 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 70 6c | ind.of.things.you.may.want.to.pl |
714e0 | 61 79 20 77 69 74 68 20 77 68 65 6e 20 79 6f 75 20 68 61 76 65 2c 20 66 6f 72 20 69 6e 73 74 61 | ay.with.when.you.have,.for.insta |
71500 | 6e 63 65 2c 20 61 20 62 61 6e 64 77 69 64 74 68 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 6e 20 61 | nce,.a.bandwidth.bottleneck.in.a |
71520 | 20 6c 69 6e 6b 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 6f 6d 65 68 6f 77 20 70 72 | .link.and.you.want.to.somehow.pr |
71540 | 69 6f 72 69 74 69 7a 65 20 73 6f 6d 65 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 6f 76 | ioritize.some.type.of.traffic.ov |
71560 | 65 72 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 68 61 73 68 20 74 79 70 65 20 75 73 65 64 20 77 | er.another..The.hash.type.used.w |
71580 | 68 65 6e 20 64 69 73 63 6f 76 65 72 69 6e 67 20 66 69 6c 65 20 6f 6e 20 6d 61 73 74 65 72 20 73 | hen.discovering.file.on.master.s |
715a0 | 65 72 76 65 72 20 28 64 65 66 61 75 6c 74 3a 20 73 68 61 32 35 36 29 00 54 68 65 20 68 65 61 6c | erver.(default:.sha256).The.heal |
715c0 | 74 68 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 70 61 74 68 73 20 61 73 73 69 67 | th.of.interfaces.and.paths.assig |
715e0 | 6e 65 64 20 74 6f 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 73 20 70 65 72 69 | ned.to.the.load.balancer.is.peri |
71600 | 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 49 43 4d 50 | odically.checked.by.sending.ICMP |
71620 | 20 70 61 63 6b 65 74 73 20 28 70 69 6e 67 29 20 74 6f 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e | .packets.(ping).to.remote.destin |
71640 | 61 74 69 6f 6e 73 2c 20 61 20 54 54 4c 20 74 65 73 74 20 6f 72 20 74 68 65 20 65 78 65 63 75 74 | ations,.a.TTL.test.or.the.execut |
71660 | 69 6f 6e 20 6f 66 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 2e 20 49 66 | ion.of.a.user.defined.script..If |
71680 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 69 6c 73 20 74 68 65 20 68 65 61 6c 74 68 20 63 | .an.interface.fails.the.health.c |
716a0 | 68 65 63 6b 20 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 | heck.it.is.removed.from.the.load |
716c0 | 20 62 61 6c 61 6e 63 65 72 27 73 20 70 6f 6f 6c 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | .balancer's.pool.of.interfaces.. |
716e0 | 54 6f 20 65 6e 61 62 6c 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 61 6e | To.enable.health.checking.for.an |
71700 | 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 | .interface:.The.hello-multiplier |
71720 | 20 73 70 65 63 69 66 69 65 73 20 68 6f 77 20 6d 61 6e 79 20 48 65 6c 6c 6f 73 20 74 6f 20 73 65 | .specifies.how.many.Hellos.to.se |
71740 | 6e 64 20 70 65 72 20 73 65 63 6f 6e 64 2c 20 66 72 6f 6d 20 31 20 28 65 76 65 72 79 20 73 65 63 | nd.per.second,.from.1.(every.sec |
71760 | 6f 6e 64 29 20 74 6f 20 31 30 20 28 65 76 65 72 79 20 31 30 30 6d 73 29 2e 20 54 68 75 73 20 6f | ond).to.10.(every.100ms)..Thus.o |
71780 | 6e 65 20 63 61 6e 20 68 61 76 65 20 31 73 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 20 | ne.can.have.1s.convergence.time. |
717a0 | 66 6f 72 20 4f 53 50 46 2e 20 49 66 20 74 68 69 73 20 66 6f 72 6d 20 69 73 20 73 70 65 63 69 66 | for.OSPF..If.this.form.is.specif |
717c0 | 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 61 64 76 | ied,.then.the.hello-interval.adv |
717e0 | 65 72 74 69 73 65 64 20 69 6e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 69 73 20 73 65 74 20 | ertised.in.Hello.packets.is.set. |
71800 | 74 6f 20 30 20 61 6e 64 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 6f 6e 20 72 | to.0.and.the.hello-interval.on.r |
71820 | 65 63 65 69 76 65 64 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 69 73 20 6e 6f 74 20 63 68 65 | eceived.Hello.packets.is.not.che |
71840 | 63 6b 65 64 2c 20 74 68 75 73 20 74 68 65 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 | cked,.thus.the.hello-multiplier. |
71860 | 6e 65 65 64 20 4e 4f 54 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 63 72 6f 73 73 20 6d 75 6c 74 | need.NOT.be.the.same.across.mult |
71880 | 69 70 6c 65 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 63 6f 6d 6d 6f 6e 20 6c 69 6e 6b 2e 00 54 | iple.routers.on.a.common.link..T |
718a0 | 68 65 20 68 6f 73 74 6e 61 6d 65 20 63 61 6e 20 62 65 20 75 70 20 74 6f 20 36 33 20 63 68 61 72 | he.hostname.can.be.up.to.63.char |
718c0 | 61 63 74 65 72 73 2e 20 41 20 68 6f 73 74 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e | acters..A.hostname.must.start.an |
718e0 | 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e | d.end.with.a.letter.or.digit,.an |
71900 | 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e | d.have.as.interior.characters.on |
71920 | 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e | ly.letters,.digits,.or.a.hyphen. |
71940 | 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 | .The.hostname.or.IP.address.of.t |
71960 | 68 65 20 6d 61 73 74 65 72 00 54 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 69 73 20 74 68 65 20 | he.master.The.identifier.is.the. |
71980 | 64 65 76 69 63 65 27 73 20 44 55 49 44 3a 20 63 6f 6c 6f 6e 2d 73 65 70 61 72 61 74 65 64 20 68 | device's.DUID:.colon-separated.h |
719a0 | 65 78 20 6c 69 73 74 20 28 61 73 20 75 73 65 64 20 62 79 20 69 73 63 2d 64 68 63 70 20 6f 70 74 | ex.list.(as.used.by.isc-dhcp.opt |
719c0 | 69 6f 6e 20 64 68 63 70 76 36 2e 63 6c 69 65 6e 74 2d 69 64 29 2e 20 49 66 20 74 68 65 20 64 65 | ion.dhcpv6.client-id)..If.the.de |
719e0 | 76 69 63 65 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 6c 65 61 73 65 | vice.already.has.a.dynamic.lease |
71a00 | 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2c 20 69 74 73 20 44 55 49 | .from.the.DHCPv6.server,.its.DUI |
71a20 | 44 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 77 69 74 68 20 60 60 73 68 6f 77 20 73 65 72 76 69 | D.can.be.found.with.``show.servi |
71a40 | 63 65 20 64 68 63 70 76 36 20 73 65 72 76 65 72 20 6c 65 61 73 65 73 60 60 2e 20 54 68 65 20 44 | ce.dhcpv6.server.leases``..The.D |
71a60 | 55 49 44 20 62 65 67 69 6e 73 20 61 74 20 74 68 65 20 35 74 68 20 6f 63 74 65 74 20 28 61 66 74 | UID.begins.at.the.5th.octet.(aft |
71a80 | 65 72 20 74 68 65 20 34 74 68 20 63 6f 6c 6f 6e 29 20 6f 66 20 49 41 49 44 5f 44 55 49 44 2e 00 | er.the.4th.colon).of.IAID_DUID.. |
71aa0 | 54 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | The.individual.spoke.configurati |
71ac0 | 6f 6e 73 20 6f 6e 6c 79 20 64 69 66 66 65 72 20 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 | ons.only.differ.in.the.local.IP. |
71ae0 | 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 60 60 74 75 6e 31 30 60 60 20 69 6e 74 65 72 66 61 | address.on.the.``tun10``.interfa |
71b00 | 63 65 2e 20 53 65 65 20 74 68 65 20 61 62 6f 76 65 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 | ce..See.the.above.diagram.for.th |
71b20 | 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 69 | e.individual.IP.addresses..The.i |
71b40 | 6e 6e 65 72 20 74 61 67 20 69 73 20 74 68 65 20 74 61 67 20 77 68 69 63 68 20 69 73 20 63 6c 6f | nner.tag.is.the.tag.which.is.clo |
71b60 | 73 65 73 74 20 74 6f 20 74 68 65 20 70 61 79 6c 6f 61 64 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 | sest.to.the.payload.portion.of.t |
71b80 | 68 65 20 66 72 61 6d 65 2e 20 49 74 20 69 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 63 61 6c 6c 65 | he.frame..It.is.officially.calle |
71ba0 | 64 20 43 2d 54 41 47 20 28 63 75 73 74 6f 6d 65 72 20 74 61 67 2c 20 77 69 74 68 20 65 74 68 65 | d.C-TAG.(customer.tag,.with.ethe |
71bc0 | 72 74 79 70 65 20 30 78 38 31 30 30 29 2e 20 54 68 65 20 6f 75 74 65 72 20 74 61 67 20 69 73 20 | rtype.0x8100)..The.outer.tag.is. |
71be0 | 74 68 65 20 6f 6e 65 20 63 6c 6f 73 65 72 2f 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 45 74 | the.one.closer/closest.to.the.Et |
71c00 | 68 65 72 6e 65 74 20 68 65 61 64 65 72 2c 20 69 74 73 20 6e 61 6d 65 20 69 73 20 53 2d 54 41 47 | hernet.header,.its.name.is.S-TAG |
71c20 | 20 28 73 65 72 76 69 63 65 20 74 61 67 20 77 69 74 68 20 45 74 68 65 72 6e 65 74 20 54 79 70 65 | .(service.tag.with.Ethernet.Type |
71c40 | 20 3d 20 30 78 38 38 61 38 29 2e 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 72 61 66 66 69 | .=.0x88a8)..The.interface.traffi |
71c60 | 63 20 77 69 6c 6c 20 62 65 20 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e 3b 00 54 68 65 20 69 6e 74 65 | c.will.be.coming.in.on;.The.inte |
71c80 | 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 61 6e 64 20 72 65 6c 61 79 20 | rface.used.to.receive.and.relay. |
71ca0 | 69 6e 64 69 76 69 64 75 61 6c 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 | individual.broadcast.packets..If |
71cc0 | 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 63 65 69 76 65 2f 72 65 6c 61 79 20 70 61 63 6b 65 | .you.want.to.receive/relay.packe |
71ce0 | 74 73 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 31 60 20 61 6e 64 20 60 65 74 68 32 60 20 62 6f 74 | ts.on.both.`eth1`.and.`eth2`.bot |
71d00 | 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 61 64 64 65 64 2e 00 54 | h.interfaces.need.to.be.added..T |
71d20 | 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 65 20 77 61 6e 74 | he.internal.IP.addresses.we.want |
71d40 | 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 00 54 68 65 20 69 6e 76 65 72 73 65 20 63 6f 6e 66 69 67 | .to.translate.The.inverse.config |
71d60 | 75 72 61 74 69 6f 6e 20 68 61 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 | uration.has.to.be.applied.to.the |
71d80 | 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 54 68 65 20 6c 61 72 67 65 73 74 20 4d 54 55 20 73 69 | .remote.side..The.largest.MTU.si |
71da0 | 7a 65 20 79 6f 75 20 63 61 6e 20 75 73 65 20 77 69 74 68 20 44 53 4c 20 69 73 20 31 34 39 32 20 | ze.you.can.use.with.DSL.is.1492. |
71dc0 | 64 75 65 20 74 6f 20 50 50 50 6f 45 20 6f 76 65 72 68 65 61 64 2e 20 49 66 20 79 6f 75 20 61 72 | due.to.PPPoE.overhead..If.you.ar |
71de0 | 65 20 73 77 69 74 63 68 69 6e 67 20 66 72 6f 6d 20 61 20 44 48 43 50 20 62 61 73 65 64 20 49 53 | e.switching.from.a.DHCP.based.IS |
71e00 | 50 20 6c 69 6b 65 20 63 61 62 6c 65 20 74 68 65 6e 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 | P.like.cable.then.be.aware.that. |
71e20 | 74 68 69 6e 67 73 20 6c 69 6b 65 20 56 50 4e 20 6c 69 6e 6b 73 20 6d 61 79 20 6e 65 65 64 20 74 | things.like.VPN.links.may.need.t |
71e40 | 6f 20 68 61 76 65 20 74 68 65 69 72 20 4d 54 55 20 73 69 7a 65 73 20 61 64 6a 75 73 74 65 64 20 | o.have.their.MTU.sizes.adjusted. |
71e60 | 74 6f 20 77 6f 72 6b 20 77 69 74 68 69 6e 20 74 68 69 73 20 6c 69 6d 69 74 2e 00 54 68 65 20 6c | to.work.within.this.limit..The.l |
71e80 | 61 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 | ast.step.is.to.define.an.interfa |
71ea0 | 63 65 20 72 6f 75 74 65 20 66 6f 72 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 74 6f 20 67 | ce.route.for.192.168.2.0/24.to.g |
71ec0 | 65 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 | et.through.the.WireGuard.interfa |
71ee0 | 63 65 20 60 77 67 30 31 60 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 73 20 6f 72 20 6e 65 74 77 6f | ce.`wg01`..Multiple.IPs.or.netwo |
71f00 | 72 6b 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 72 6f 75 74 65 64 2e 20 54 | rks.can.be.defined.and.routed..T |
71f20 | 68 65 20 6c 61 73 74 20 63 68 65 63 6b 20 69 73 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 77 68 69 | he.last.check.is.allowed-ips.whi |
71f40 | 63 68 20 65 69 74 68 65 72 20 70 72 65 76 65 6e 74 73 20 6f 72 20 61 6c 6c 6f 77 73 20 74 68 65 | ch.either.prevents.or.allows.the |
71f60 | 20 74 72 61 66 66 69 63 2e 00 54 68 65 20 6c 65 67 61 63 79 20 61 6e 64 20 7a 6f 6e 65 2d 62 61 | .traffic..The.legacy.and.zone-ba |
71f80 | 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f | sed.firewall.configuration.optio |
71fa0 | 6e 73 20 69 73 20 6e 6f 74 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 79 | ns.is.not.longer.supported..They |
71fc0 | 20 61 72 65 20 68 65 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 20 70 75 72 70 6f 73 65 73 | .are.here.for.reference.purposes |
71fe0 | 20 6f 6e 6c 79 2e 00 54 68 65 20 6c 69 6d 69 74 65 72 20 70 65 72 66 6f 72 6d 73 20 62 61 73 69 | .only..The.limiter.performs.basi |
72000 | 63 20 69 6e 67 72 65 73 73 20 70 6f 6c 69 63 69 6e 67 20 6f 66 20 74 72 61 66 66 69 63 20 66 6c | c.ingress.policing.of.traffic.fl |
72020 | 6f 77 73 2e 20 4d 75 6c 74 69 70 6c 65 20 63 6c 61 73 73 65 73 20 6f 66 20 74 72 61 66 66 69 63 | ows..Multiple.classes.of.traffic |
72040 | 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 74 72 61 66 66 69 63 20 6c 69 6d 69 | .can.be.defined.and.traffic.limi |
72060 | 74 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 61 63 68 20 63 6c 61 73 73 2e | ts.can.be.applied.to.each.class. |
72080 | 20 41 6c 74 68 6f 75 67 68 20 74 68 65 20 70 6f 6c 69 63 65 72 20 75 73 65 73 20 61 20 74 6f 6b | .Although.the.policer.uses.a.tok |
720a0 | 65 6e 20 62 75 63 6b 65 74 20 6d 65 63 68 61 6e 69 73 6d 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 | en.bucket.mechanism.internally,. |
720c0 | 69 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 | it.does.not.have.the.capability. |
720e0 | 74 6f 20 64 65 6c 61 79 20 61 20 70 61 63 6b 65 74 20 61 73 20 61 20 73 68 61 70 69 6e 67 20 6d | to.delay.a.packet.as.a.shaping.m |
72100 | 65 63 68 61 6e 69 73 6d 20 64 6f 65 73 2e 20 54 72 61 66 66 69 63 20 65 78 63 65 65 64 69 6e 67 | echanism.does..Traffic.exceeding |
72120 | 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 73 20 69 73 | .the.defined.bandwidth.limits.is |
72140 | 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 65 64 2e 20 41 20 6d 61 78 69 6d 75 6d 20 61 6c 6c | .directly.dropped..A.maximum.all |
72160 | 6f 77 65 64 20 62 75 72 73 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 6f | owed.burst.can.be.configured.too |
72180 | 2e 00 54 68 65 20 6c 69 6e 6b 20 62 61 6e 64 77 69 64 74 68 20 65 78 74 65 6e 64 65 64 20 63 6f | ..The.link.bandwidth.extended.co |
721a0 | 6d 6d 75 6e 69 74 79 20 69 73 20 65 6e 63 6f 64 65 64 20 61 73 20 6e 6f 6e 2d 74 72 61 6e 73 69 | mmunity.is.encoded.as.non-transi |
721c0 | 74 69 76 65 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 | tive.The.local.IPv4.or.IPv6.addr |
721e0 | 65 73 73 65 73 20 74 6f 20 62 69 6e 64 20 74 68 65 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 | esses.to.bind.the.DNS.forwarder. |
72200 | 74 6f 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e | to..The.forwarder.will.listen.on |
72220 | 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 6f 72 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 | .this.address.for.incoming.conne |
72240 | 63 74 69 6f 6e 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 | ctions..The.local.IPv4.or.IPv6.a |
72260 | 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 | ddresses.to.use.as.a.source.addr |
72280 | 65 73 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 71 75 65 72 69 65 73 2e 20 54 68 65 20 66 6f 72 | ess.for.sending.queries..The.for |
722a0 | 77 61 72 64 65 72 20 77 69 6c 6c 20 73 65 6e 64 20 66 6f 72 77 61 72 64 65 64 20 6f 75 74 62 6f | warder.will.send.forwarded.outbo |
722c0 | 75 6e 64 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 74 68 69 73 20 61 64 64 72 65 | und.DNS.requests.from.this.addre |
722e0 | 73 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 | ss..The.local.site.will.have.a.s |
72300 | 75 62 6e 65 74 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 6c 6f 6f 70 62 61 | ubnet.of.10.0.0.0/16..The.loopba |
72320 | 63 6b 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 20 76 69 72 | ck.networking.interface.is.a.vir |
72340 | 74 75 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 | tual.network.device.implemented. |
72360 | 65 6e 74 69 72 65 6c 79 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 41 6c 6c 20 74 72 61 66 66 69 | entirely.in.software..All.traffi |
72380 | 63 20 73 65 6e 74 20 74 6f 20 69 74 20 22 6c 6f 6f 70 73 20 62 61 63 6b 22 20 61 6e 64 20 6a 75 | c.sent.to.it."loops.back".and.ju |
723a0 | 73 74 20 74 61 72 67 65 74 73 20 73 65 72 76 69 63 65 73 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 | st.targets.services.on.your.loca |
723c0 | 6c 20 6d 61 63 68 69 6e 65 2e 00 54 68 65 20 6d 61 69 6e 20 70 6f 69 6e 74 73 20 72 65 67 61 72 | l.machine..The.main.points.regar |
723e0 | 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e | ding.this.packet.flow.and.termin |
72400 | 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 61 72 65 20 | ology.used.in.VyOS.firewall.are. |
72420 | 63 6f 76 65 72 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 | covered.below:.The.main.structur |
72440 | 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 | e.VyOS.firewall.cli.is.shown.nex |
72460 | 74 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 6f 66 20 74 68 65 20 56 79 4f | t:.The.main.structure.of.the.VyO |
72480 | 53 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 | S.firewall.CLI.is.shown.next:.Th |
724a0 | 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 61 72 67 65 74 73 20 74 68 61 74 | e.maximum.number.of.targets.that |
724c0 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 31 36 2e 20 54 68 65 20 64 65 66 | .can.be.specified.is.16..The.def |
724e0 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 65 | ault.value.is.no.IP.address..The |
72500 | 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 20 43 6c 61 73 73 20 49 44 20 69 73 20 6e 6f 74 20 | .meaning.of.the.Class.ID.is.not. |
72520 | 74 68 65 20 73 61 6d 65 20 66 6f 72 20 65 76 65 72 79 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 | the.same.for.every.type.of.polic |
72540 | 79 2e 20 4e 6f 72 6d 61 6c 6c 79 20 70 6f 6c 69 63 69 65 73 20 6a 75 73 74 20 6e 65 65 64 20 61 | y..Normally.policies.just.need.a |
72560 | 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 6e 75 6d 62 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 | .meaningless.number.to.identify. |
72580 | 61 20 63 6c 61 73 73 20 28 43 6c 61 73 73 20 49 44 29 2c 20 62 75 74 20 74 68 61 74 20 64 6f 65 | a.class.(Class.ID),.but.that.doe |
725a0 | 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 65 76 65 72 79 20 70 6f 6c 69 63 79 2e 20 54 68 65 | s.not.apply.to.every.policy..The |
725c0 | 20 6e 75 6d 62 65 72 20 6f 66 20 61 20 63 6c 61 73 73 20 69 6e 20 61 20 50 72 69 6f 72 69 74 79 | .number.of.a.class.in.a.Priority |
725e0 | 20 51 75 65 75 65 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 6e 6c 79 20 69 64 65 6e 74 69 66 79 | .Queue.it.does.not.only.identify |
72600 | 20 69 74 2c 20 69 74 20 61 6c 73 6f 20 64 65 66 69 6e 65 73 20 69 74 73 20 70 72 69 6f 72 69 74 | .it,.it.also.defines.its.priorit |
72620 | 79 2e 00 54 68 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 69 | y..The.member.interface.`eth1`.i |
72640 | 73 20 61 20 74 72 75 6e 6b 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 56 4c 41 4e 20 31 30 20 74 6f | s.a.trunk.that.allows.VLAN.10.to |
72660 | 20 70 61 73 73 00 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 | .pass.The.metric.range.is.1.to.1 |
72680 | 36 37 37 37 32 31 35 20 28 4d 61 78 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 69 66 20 6d 65 74 | 6777215.(Max.value.depend.if.met |
726a0 | 72 69 63 20 73 75 70 70 6f 72 74 20 6e 61 72 72 6f 77 20 6f 72 20 77 69 64 65 20 76 61 6c 75 65 | ric.support.narrow.or.wide.value |
726c0 | 29 2e 00 54 68 65 20 6d 69 6e 69 6d 61 6c 20 65 63 68 6f 20 72 65 63 65 69 76 65 20 74 72 61 6e | )..The.minimal.echo.receive.tran |
726e0 | 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 20 74 68 69 73 20 73 79 73 74 | smission.interval.that.this.syst |
72700 | 65 6d 20 69 73 20 63 61 70 61 62 6c 65 20 6f 66 20 68 61 6e 64 6c 69 6e 67 00 54 68 65 20 6d 6f | em.is.capable.of.handling.The.mo |
72720 | 73 74 20 76 69 73 69 62 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 | st.visible.application.of.the.pr |
72740 | 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 20 61 63 63 65 73 73 20 74 6f 20 73 68 65 6c 6c 20 61 63 | otocol.is.for.access.to.shell.ac |
72760 | 63 6f 75 6e 74 73 20 6f 6e 20 55 6e 69 78 2d 6c 69 6b 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 | counts.on.Unix-like.operating.sy |
72780 | 73 74 65 6d 73 2c 20 62 75 74 20 69 74 20 73 65 65 73 20 73 6f 6d 65 20 6c 69 6d 69 74 65 64 20 | stems,.but.it.sees.some.limited. |
727a0 | 75 73 65 20 6f 6e 20 57 69 6e 64 6f 77 73 20 61 73 20 77 65 6c 6c 2e 20 49 6e 20 32 30 31 35 2c | use.on.Windows.as.well..In.2015, |
727c0 | 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 6e 6f 75 6e 63 65 64 20 74 68 61 74 20 74 68 65 79 20 77 | .Microsoft.announced.that.they.w |
727e0 | 6f 75 6c 64 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 | ould.include.native.support.for. |
72800 | 53 53 48 20 69 6e 20 61 20 66 75 74 75 72 65 20 72 65 6c 65 61 73 65 2e 00 54 68 65 20 6d 75 6c | SSH.in.a.future.release..The.mul |
72820 | 74 69 63 61 73 74 2d 67 72 6f 75 70 20 75 73 65 64 20 62 79 20 61 6c 6c 20 6c 65 61 76 65 73 20 | ticast-group.used.by.all.leaves. |
72840 | 66 6f 72 20 74 68 69 73 20 76 6c 61 6e 20 65 78 74 65 6e 73 69 6f 6e 2e 20 48 61 73 20 74 6f 20 | for.this.vlan.extension..Has.to. |
72860 | 62 65 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 61 6c 6c 20 6c 65 61 76 65 73 20 74 68 61 74 20 68 | be.the.same.on.all.leaves.that.h |
72880 | 61 73 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 | as.this.interface..The.name.of.t |
728a0 | 68 65 20 73 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 64 69 66 66 65 72 65 6e 74 2c 20 69 6e 20 | he.service.can.be.different,.in. |
728c0 | 74 68 69 73 20 65 78 61 6d 70 6c 65 20 69 74 20 69 73 20 6f 6e 6c 79 20 66 6f 72 20 63 6f 6e 76 | this.example.it.is.only.for.conv |
728e0 | 65 6e 69 65 6e 63 65 2e 00 54 68 65 20 6e 65 74 6d 61 73 6b 20 6f 72 20 64 6f 6d 61 69 6e 20 74 | enience..The.netmask.or.domain.t |
72900 | 68 61 74 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 73 68 6f 75 6c 64 20 62 65 | hat.EDNS.Client.Subnet.should.be |
72920 | 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 69 6e 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 | .enabled.for.in.outgoing.queries |
72940 | 2e 00 54 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 69 73 20 64 65 63 6c 61 72 | ..The.network.topology.is.declar |
72960 | 65 64 20 62 79 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 20 61 6e 64 20 74 68 | ed.by.shared-network-name.and.th |
72980 | 65 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 73 2e 20 54 68 65 20 44 48 43 50 20 | e.subnet.declarations..The.DHCP. |
729a0 | 73 65 72 76 69 63 65 20 63 61 6e 20 73 65 72 76 65 20 6d 75 6c 74 69 70 6c 65 20 73 68 61 72 65 | service.can.serve.multiple.share |
729c0 | 64 20 6e 65 74 77 6f 72 6b 73 2c 20 77 69 74 68 20 65 61 63 68 20 73 68 61 72 65 64 20 6e 65 74 | d.networks,.with.each.shared.net |
729e0 | 77 6f 72 6b 20 68 61 76 69 6e 67 20 31 20 6f 72 20 6d 6f 72 65 20 73 75 62 6e 65 74 73 2e 20 45 | work.having.1.or.more.subnets..E |
72a00 | 61 63 68 20 73 75 62 6e 65 74 20 6d 75 73 74 20 62 65 20 70 72 65 73 65 6e 74 20 6f 6e 20 61 6e | ach.subnet.must.be.present.on.an |
72a20 | 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 72 61 6e 67 65 20 63 61 6e 20 62 65 20 64 65 63 6c 61 | .interface..A.range.can.be.decla |
72a40 | 72 65 64 20 69 6e 73 69 64 65 20 61 20 73 75 62 6e 65 74 20 74 6f 20 64 65 66 69 6e 65 20 61 20 | red.inside.a.subnet.to.define.a. |
72a60 | 70 6f 6f 6c 20 6f 66 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 65 73 2e 20 4d 75 6c 74 69 | pool.of.dynamic.addresses..Multi |
72a80 | 70 6c 65 20 72 61 6e 67 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 63 61 | ple.ranges.can.be.defined.and.ca |
72aa0 | 6e 20 63 6f 6e 74 61 69 6e 20 68 6f 6c 65 73 2e 20 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 | n.contain.holes..Static.mappings |
72ac0 | 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 73 73 69 67 6e 20 22 73 74 61 74 69 63 22 20 61 | .can.be.set.to.assign."static".a |
72ae0 | 64 64 72 65 73 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | ddresses.to.clients.based.on.the |
72b00 | 69 72 20 4d 41 43 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 | ir.MAC.address..The.next.example |
72b20 | 20 69 73 20 61 20 73 69 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 63 6f | .is.a.simple.configuration.of.co |
72b40 | 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 54 68 65 20 6e 65 78 74 20 73 74 65 70 20 69 73 20 74 | nntrack-sync..The.next.step.is.t |
72b60 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6c 6f 63 61 6c 20 73 69 64 65 20 61 73 20 77 | o.configure.your.local.side.as.w |
72b80 | 65 6c 6c 20 61 73 20 74 68 65 20 70 6f 6c 69 63 79 20 62 61 73 65 64 20 74 72 75 73 74 65 64 20 | ell.as.the.policy.based.trusted. |
72ba0 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 2e 20 49 66 20 79 6f 75 20 6f 6e | destination.addresses..If.you.on |
72bc0 | 6c 79 20 69 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 20 6c 69 | ly.initiate.a.connection,.the.li |
72be0 | 73 74 65 6e 20 70 6f 72 74 20 61 6e 64 20 61 64 64 72 65 73 73 2f 70 6f 72 74 20 69 73 20 6f 70 | sten.port.and.address/port.is.op |
72c00 | 74 69 6f 6e 61 6c 3b 20 68 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 61 63 74 20 6c 69 6b 65 | tional;.however,.if.you.act.like |
72c20 | 20 61 20 73 65 72 76 65 72 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 73 20 69 6e 69 74 69 61 74 65 | .a.server.and.endpoints.initiate |
72c40 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2c | .the.connections.to.your.system, |
72c60 | 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 70 6f 72 74 20 79 6f 75 72 20 | .you.need.to.define.a.port.your. |
72c80 | 63 6c 69 65 6e 74 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 2c 20 6f 74 68 65 72 77 69 73 | clients.can.connect.to,.otherwis |
72ca0 | 65 20 74 68 65 20 70 6f 72 74 20 69 73 20 72 61 6e 64 6f 6d 6c 79 20 63 68 6f 73 65 6e 20 61 6e | e.the.port.is.randomly.chosen.an |
72cc0 | 64 20 6d 61 79 20 6d 61 6b 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 69 66 66 69 63 75 6c 74 20 | d.may.make.connection.difficult. |
72ce0 | 77 69 74 68 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 73 69 6e 63 65 20 74 68 65 20 70 | with.firewall.rules,.since.the.p |
72d00 | 6f 72 74 20 6d 61 79 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 65 61 63 68 20 74 69 6d 65 20 74 | ort.may.be.different.each.time.t |
72d20 | 68 65 20 73 79 73 74 65 6d 20 69 73 20 72 65 62 6f 6f 74 65 64 2e 00 54 68 65 20 6e 6f 74 65 64 | he.system.is.rebooted..The.noted |
72d40 | 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f | .public.keys.should.be.entered.o |
72d60 | 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 54 68 65 20 6e 75 6d 62 | n.the.opposite.routers..The.numb |
72d80 | 65 72 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 | er.of.milliseconds.to.wait.for.a |
72da0 | 20 72 65 6d 6f 74 65 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 74 6f 20 | .remote.authoritative.server.to. |
72dc0 | 72 65 73 70 6f 6e 64 20 62 65 66 6f 72 65 20 74 69 6d 69 6e 67 20 6f 75 74 20 61 6e 64 20 72 65 | respond.before.timing.out.and.re |
72de0 | 73 70 6f 6e 64 69 6e 67 20 77 69 74 68 20 53 45 52 56 46 41 49 4c 2e 00 54 68 65 20 6e 75 6d 62 | sponding.with.SERVFAIL..The.numb |
72e00 | 65 72 20 70 61 72 61 6d 65 74 65 72 20 28 31 2d 31 30 29 20 63 6f 6e 66 69 67 75 72 65 73 20 74 | er.parameter.(1-10).configures.t |
72e20 | 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 61 63 63 65 70 74 65 64 20 6f 63 63 75 72 65 6e 63 65 73 | he.amount.of.accepted.occurences |
72e40 | 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 41 53 20 70 | .of.the.system.AS.number.in.AS.p |
72e60 | 61 74 68 2e 00 54 68 65 20 6f 66 66 69 63 69 61 6c 20 70 6f 72 74 20 66 6f 72 20 4f 70 65 6e 56 | ath..The.official.port.for.OpenV |
72e80 | 50 4e 20 69 73 20 31 31 39 34 2c 20 77 68 69 63 68 20 77 65 20 72 65 73 65 72 76 65 20 66 6f 72 | PN.is.1194,.which.we.reserve.for |
72ea0 | 20 63 6c 69 65 6e 74 20 56 50 4e 3b 20 77 65 20 77 69 6c 6c 20 75 73 65 20 31 31 39 35 20 66 6f | .client.VPN;.we.will.use.1195.fo |
72ec0 | 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 00 54 68 65 20 6f 6e 6c 79 20 73 74 61 | r.site-to-site.VPN..The.only.sta |
72ee0 | 67 65 73 20 56 79 4f 53 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 61 73 20 70 61 72 74 20 6f 66 | ges.VyOS.will.process.as.part.of |
72f00 | 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 74 | .the.firewall.configuration.is.t |
72f20 | 68 65 20 60 66 6f 72 77 61 72 64 60 20 28 46 34 20 73 74 61 67 65 29 2c 20 60 69 6e 70 75 74 60 | he.`forward`.(F4.stage),.`input` |
72f40 | 20 28 4c 34 20 73 74 61 67 65 29 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 28 4c 35 20 73 74 | .(L4.stage),.and.`output`.(L5.st |
72f60 | 61 67 65 29 2e 20 41 6c 6c 20 74 68 65 20 6f 74 68 65 72 20 73 74 61 67 65 73 20 61 6e 64 20 73 | age)..All.the.other.stages.and.s |
72f80 | 74 65 70 73 20 61 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 20 61 6e 64 20 63 61 6e 74 20 | teps.are.for.reference.and.cant. |
72fa0 | 62 65 20 6d 61 6e 69 70 75 6c 61 74 65 64 20 74 68 72 6f 75 67 68 20 56 79 4f 53 2e 00 54 68 65 | be.manipulated.through.VyOS..The |
72fc0 | 20 6f 70 74 69 6f 6e 61 6c 20 60 64 69 73 61 62 6c 65 60 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 | .optional.`disable`.option.allow |
72fe0 | 73 20 74 6f 20 65 78 63 6c 75 64 65 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 70 61 73 73 | s.to.exclude.interface.from.pass |
73000 | 69 76 65 20 73 74 61 74 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 | ive.state..This.command.is.used. |
73020 | 69 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d | if.the.command.:cfgcmd:`passive- |
73040 | 69 6e 74 65 72 66 61 63 65 20 64 65 66 61 75 6c 74 60 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 | interface.default`.was.configure |
73060 | 64 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 72 65 67 69 73 74 | d..The.optional.parameter.regist |
73080 | 65 72 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 | er.specifies.that.Registration.R |
730a0 | 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 6f 20 74 68 69 73 20 70 65 | equest.should.be.sent.to.this.pe |
730c0 | 65 72 20 6f 6e 20 73 74 61 72 74 75 70 2e 00 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 38 30 32 2e | er.on.startup..The.original.802. |
730e0 | 31 71 5f 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 61 20 73 69 6e 67 6c | 1q_.specification.allows.a.singl |
73100 | 65 20 56 69 72 74 75 61 6c 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 20 28 56 4c | e.Virtual.Local.Area.Network.(VL |
73120 | 41 4e 29 20 68 65 61 64 65 72 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 | AN).header.to.be.inserted.into.a |
73140 | 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 | n.Ethernet.frame..QinQ.allows.mu |
73160 | 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 | ltiple.VLAN.tags.to.be.inserted. |
73180 | 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 66 72 61 6d 65 2c 20 61 6e 20 65 73 73 65 6e 74 69 61 | into.a.single.frame,.an.essentia |
731a0 | 6c 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 4d 65 | l.capability.for.implementing.Me |
731c0 | 74 72 6f 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2e | tro.Ethernet.network.topologies. |
731e0 | 20 4a 75 73 74 20 61 73 20 51 69 6e 51 20 65 78 74 65 6e 64 73 20 38 30 32 2e 31 51 2c 20 51 69 | .Just.as.QinQ.extends.802.1Q,.Qi |
73200 | 6e 51 20 69 74 73 65 6c 66 20 69 73 20 65 78 74 65 6e 64 65 64 20 62 79 20 6f 74 68 65 72 20 4d | nQ.itself.is.extended.by.other.M |
73220 | 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 65 20 6f 75 74 | etro.Ethernet.protocols..The.out |
73240 | 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 | going.interface.to.perform.the.t |
73260 | 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 6e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 20 6d 75 73 74 | ranslation.on.The.peer.name.must |
73280 | 20 62 65 20 61 6e 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 61 6e 64 20 63 61 6e 20 68 61 76 65 | .be.an.alphanumeric.and.can.have |
732a0 | 20 68 79 70 65 6e 20 6f 72 20 75 6e 64 65 72 73 63 6f 72 65 20 61 73 20 73 70 65 63 69 61 6c 20 | .hypen.or.underscore.as.special. |
732c0 | 63 68 61 72 61 63 74 65 72 73 2e 20 49 74 20 69 73 20 70 75 72 65 6c 79 20 69 6e 66 6f 72 6d 61 | characters..It.is.purely.informa |
732e0 | 74 69 6f 6e 61 6c 2e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 73 20 52 49 47 48 54 20 61 6e 64 | tional..The.peer.names.RIGHT.and |
73300 | 20 4c 45 46 54 20 61 72 65 20 75 73 65 64 20 61 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 | .LEFT.are.used.as.informational. |
73320 | 74 65 78 74 2e 00 54 68 65 20 70 65 65 72 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 | text..The.peer.with.lower.priori |
73340 | 74 79 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 6b 65 79 20 73 65 72 76 65 72 20 61 6e | ty.will.become.the.key.server.an |
73360 | 64 20 73 74 61 72 74 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 53 41 4b 73 2e 00 54 68 65 20 70 | d.start.distributing.SAKs..The.p |
73380 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 74 65 73 74 20 77 68 65 74 | ing.command.is.used.to.test.whet |
733a0 | 68 65 72 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 | her.a.network.host.is.reachable. |
733c0 | 6f 72 20 6e 6f 74 2e 00 54 68 65 20 70 6f 70 75 6c 61 72 20 55 6e 69 78 2f 4c 69 6e 75 78 20 60 | or.not..The.popular.Unix/Linux.` |
733e0 | 60 64 69 67 60 60 20 74 6f 6f 6c 20 73 65 74 73 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 | `dig``.tool.sets.the.AD-bit.in.t |
73400 | 68 65 20 71 75 65 72 79 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 75 6e 65 | he.query..This.might.lead.to.une |
73420 | 78 70 65 63 74 65 64 20 71 75 65 72 79 20 72 65 73 75 6c 74 73 20 77 68 65 6e 20 74 65 73 74 69 | xpected.query.results.when.testi |
73440 | 6e 67 2e 20 53 65 74 20 60 60 2b 6e 6f 61 64 60 60 20 6f 6e 20 74 68 65 20 60 60 64 69 67 60 60 | ng..Set.``+noad``.on.the.``dig`` |
73460 | 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 77 68 65 6e 20 74 68 69 73 20 69 73 20 74 68 65 20 63 | .command.line.when.this.is.the.c |
73480 | 61 73 65 2e 00 54 68 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 20 69 73 20 | ase..The.pre-shared.key.mode.is. |
734a0 | 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 | deprecated.and.will.be.removed.f |
734c0 | 72 6f 6d 20 66 75 74 75 72 65 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 73 2c 20 73 6f 20 | rom.future.OpenVPN.versions,.so. |
734e0 | 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 72 65 6d 6f 76 65 20 73 75 70 70 6f 72 74 | VyOS.will.have.to.remove.support |
73500 | 20 66 6f 72 20 74 68 61 74 20 6f 70 74 69 6f 6e 20 61 73 20 77 65 6c 6c 2e 20 54 68 65 20 72 65 | .for.that.option.as.well..The.re |
73520 | 61 73 6f 6e 20 69 73 20 74 68 61 74 20 75 73 69 6e 67 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 | ason.is.that.using.pre-shared.ke |
73540 | 79 73 20 69 73 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 6c 65 73 73 20 73 65 63 75 72 65 20 | ys.is.significantly.less.secure. |
73560 | 74 68 61 6e 20 75 73 69 6e 67 20 54 4c 53 2e 00 54 68 65 20 70 72 65 66 69 78 20 61 6e 64 20 41 | than.using.TLS..The.prefix.and.A |
73580 | 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 6d 61 74 63 68 20 61 20 73 69 | SN.that.originated.it.match.a.si |
735a0 | 67 6e 65 64 20 52 4f 41 2e 20 54 68 65 73 65 20 61 72 65 20 70 72 6f 62 61 62 6c 79 20 74 72 75 | gned.ROA..These.are.probably.tru |
735c0 | 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 | stworthy.route.announcements..Th |
735e0 | 65 20 70 72 65 66 69 78 20 6f 72 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 61 6e 64 20 41 53 | e.prefix.or.prefix.length.and.AS |
73600 | 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 | N.that.originated.it.doesn't.mat |
73620 | 63 68 20 61 6e 79 20 65 78 69 73 74 69 6e 67 20 52 4f 41 2e 20 54 68 69 73 20 63 6f 75 6c 64 20 | ch.any.existing.ROA..This.could. |
73640 | 62 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 61 20 70 72 65 66 69 78 20 68 69 6a 61 63 6b | be.the.result.of.a.prefix.hijack |
73660 | 2c 20 6f 72 20 6d 65 72 65 6c 79 20 61 20 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 | ,.or.merely.a.misconfiguration,. |
73680 | 62 75 74 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 62 65 20 74 72 65 61 74 65 64 20 61 | but.should.probably.be.treated.a |
736a0 | 73 20 75 6e 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 | s.untrustworthy.route.announceme |
736c0 | 6e 74 73 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 | nts..The.primary.DHCP.server.use |
736e0 | 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 32 60 00 54 68 65 20 | s.address.`192.168.189.252`.The. |
73700 | 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 73 74 61 74 65 6d 65 6e 74 73 | primary.and.secondary.statements |
73720 | 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 | .determines.whether.the.server.i |
73740 | 73 20 70 72 69 6d 61 72 79 20 6f 72 20 73 65 63 6f 6e 64 61 72 79 2e 00 54 68 65 20 70 72 69 6d | s.primary.or.secondary..The.prim |
73760 | 61 72 79 20 6f 70 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 76 61 6c 69 64 20 66 6f 72 20 61 63 74 | ary.option.is.only.valid.for.act |
73780 | 69 76 65 2d 62 61 63 6b 75 70 2c 20 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 | ive-backup,.transmit-load-balanc |
737a0 | 65 2c 20 61 6e 64 20 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 6d 6f 64 | e,.and.adaptive-load-balance.mod |
737c0 | 65 2e 00 54 68 65 20 70 72 69 6f 72 69 74 79 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 | e..The.priority.must.be.an.integ |
737e0 | 65 72 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 35 35 2e 20 48 69 67 68 65 72 20 | er.number.from.1.to.255..Higher. |
73800 | 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 6e 63 72 65 61 73 65 73 20 72 6f 75 74 65 72 27 | priority.value.increases.router' |
73820 | 73 20 70 72 65 63 65 64 65 6e 63 65 20 69 6e 20 74 68 65 20 6d 61 73 74 65 72 20 65 6c 65 63 74 | s.precedence.in.the.master.elect |
73840 | 69 6f 6e 73 2e 00 54 68 65 20 70 72 6f 63 65 64 75 72 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 | ions..The.procedure.to.specify.a |
73860 | 20 3a 61 62 62 72 3a 60 4e 49 53 2b 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f | .:abbr:`NIS+.(Network.Informatio |
73880 | 6e 20 53 65 72 76 69 63 65 20 50 6c 75 73 29 60 20 64 6f 6d 61 69 6e 20 69 73 20 73 69 6d 69 6c | n.Service.Plus)`.domain.is.simil |
738a0 | 61 72 20 74 6f 20 74 68 65 20 4e 49 53 20 64 6f 6d 61 69 6e 20 6f 6e 65 3a 00 54 68 65 20 70 72 | ar.to.the.NIS.domain.one:.The.pr |
738c0 | 6f 6d 70 74 20 69 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 72 65 66 6c 65 63 74 20 74 68 69 73 | ompt.is.adjusted.to.reflect.this |
738e0 | 20 63 68 61 6e 67 65 20 69 6e 20 62 6f 74 68 20 63 6f 6e 66 69 67 20 61 6e 64 20 6f 70 2d 6d 6f | .change.in.both.config.and.op-mo |
73900 | 64 65 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 70 6f 72 74 20 77 65 20 77 69 73 | de..The.protocol.and.port.we.wis |
73920 | 68 20 74 6f 20 66 6f 72 77 61 72 64 3b 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 | h.to.forward;.The.protocol.is.us |
73940 | 75 61 6c 6c 79 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 65 72 6d 73 20 6f 66 20 61 20 63 6c | ually.described.in.terms.of.a.cl |
73960 | 69 65 6e 74 2d 73 65 72 76 65 72 20 6d 6f 64 65 6c 2c 20 62 75 74 20 63 61 6e 20 61 73 20 65 61 | ient-server.model,.but.can.as.ea |
73980 | 73 69 6c 79 20 62 65 20 75 73 65 64 20 69 6e 20 70 65 65 72 2d 74 6f 2d 70 65 65 72 20 72 65 6c | sily.be.used.in.peer-to-peer.rel |
739a0 | 61 74 69 6f 6e 73 68 69 70 73 20 77 68 65 72 65 20 62 6f 74 68 20 70 65 65 72 73 20 63 6f 6e 73 | ationships.where.both.peers.cons |
739c0 | 69 64 65 72 20 74 68 65 20 6f 74 68 65 72 20 74 6f 20 62 65 20 61 20 70 6f 74 65 6e 74 69 61 6c | ider.the.other.to.be.a.potential |
739e0 | 20 74 69 6d 65 20 73 6f 75 72 63 65 2e 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 | .time.source..Implementations.se |
73a00 | 6e 64 20 61 6e 64 20 72 65 63 65 69 76 65 20 74 69 6d 65 73 74 61 6d 70 73 20 75 73 69 6e 67 20 | nd.and.receive.timestamps.using. |
73a20 | 3a 61 62 62 72 3a 60 55 44 50 20 28 55 73 65 72 20 44 61 74 61 67 72 61 6d 20 50 72 6f 74 6f 63 | :abbr:`UDP.(User.Datagram.Protoc |
73a40 | 6f 6c 29 60 20 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 31 32 33 2e 00 54 68 65 20 70 72 6f | ol)`.on.port.number.123..The.pro |
73a60 | 74 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 6f 66 20 4c 32 54 50 76 33 20 69 73 20 61 6c 73 6f | tocol.overhead.of.L2TPv3.is.also |
73a80 | 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 62 69 67 67 65 72 20 74 68 61 6e 20 4d 50 4c 53 2e | .significantly.bigger.than.MPLS. |
73aa0 | 00 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 6e 20 56 79 4f 53 20 69 73 20 62 61 | .The.proxy.service.in.VyOS.is.ba |
73ac0 | 73 65 64 20 6f 6e 20 53 71 75 69 64 5f 20 61 6e 64 20 73 6f 6d 65 20 72 65 6c 61 74 65 64 20 6d | sed.on.Squid_.and.some.related.m |
73ae0 | 6f 64 75 6c 65 73 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 | odules..The.public.IP.address.of |
73b00 | 20 74 68 65 20 6c 6f 63 61 6c 20 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 | .the.local.side.of.the.VPN.will. |
73b20 | 62 65 20 31 39 38 2e 35 31 2e 31 30 30 2e 31 30 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 | be.198.51.100.10..The.public.IP. |
73b40 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 6f 66 20 74 68 | address.of.the.remote.side.of.th |
73b60 | 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 32 30 33 2e 30 2e 31 31 33 2e 31 31 2e 00 54 68 65 20 | e.VPN.will.be.203.0.113.11..The. |
73b80 | 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 54 | rate-limit.is.set.in.kbit/sec..T |
73ba0 | 68 65 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 61 74 63 68 65 73 20 69 66 | he.regular.expression.matches.if |
73bc0 | 20 61 6e 64 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 65 6e 74 69 72 65 20 73 74 72 69 6e 67 20 6d | .and.only.if.the.entire.string.m |
73be0 | 61 74 63 68 65 73 20 74 68 65 20 70 61 74 74 65 72 6e 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 70 | atches.the.pattern..The.remote.p |
73c00 | 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 75 73 65 73 20 58 4d 72 6c 50 79 6b 61 78 68 64 41 41 | eer.`to-wg02`.uses.XMrlPykaxhdAA |
73c20 | 69 53 6a 68 74 50 6c 76 69 33 30 4e 56 6b 76 4c 51 6c 69 51 75 4b 50 37 41 49 37 43 79 49 3d 20 | iSjhtPlvi30NVkvLQliQuKP7AI7CyI=. |
73c40 | 61 73 20 69 74 73 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 00 54 68 65 20 72 65 | as.its.public.key.portion.The.re |
73c60 | 6d 6f 74 65 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 | mote.site.will.have.a.subnet.of. |
73c80 | 31 30 2e 31 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 75 73 65 72 20 77 69 6c | 10.1.0.0/16..The.remote.user.wil |
73ca0 | 6c 20 75 73 65 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 74 6f 20 | l.use.the.openconnect.client.to. |
73cc0 | 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 77 69 6c 6c 20 72 | connect.to.the.router.and.will.r |
73ce0 | 65 63 65 69 76 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 20 56 50 4e 20 | eceive.an.IP.address.from.a.VPN. |
73d00 | 70 6f 6f 6c 2c 20 61 6c 6c 6f 77 69 6e 67 20 66 75 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 74 68 | pool,.allowing.full.access.to.th |
73d20 | 65 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 72 65 71 75 65 73 74 6f 72 20 6e 65 74 6d 61 73 6b | e.network..The.requestor.netmask |
73d40 | 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 72 65 71 75 65 73 74 6f 72 20 49 50 20 41 64 64 72 | .for.which.the.requestor.IP.Addr |
73d60 | 65 73 73 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 45 44 4e 53 20 43 | ess.should.be.used.as.the.EDNS.C |
73d80 | 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 | lient.Subnet.for.outgoing.querie |
73da0 | 73 2e 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 6d 61 79 20 | s..The.required.config.file.may. |
73dc0 | 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 69 73 3a 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e | look.like.this:.The.required.con |
73de0 | 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 62 72 6f 6b 65 6e 20 64 6f 77 6e 20 69 6e | figuration.can.be.broken.down.in |
73e00 | 74 6f 20 34 20 6d 61 6a 6f 72 20 70 69 65 63 65 73 3a 00 54 68 65 20 72 65 73 75 6c 74 69 6e 67 | to.4.major.pieces:.The.resulting |
73e20 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 | .configuration.will.look.like:.T |
73e40 | 68 65 20 72 6f 6f 74 20 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 72 6f 62 6c 65 6d 20 69 73 20 | he.root.cause.of.the.problem.is. |
73e60 | 74 68 61 74 20 66 6f 72 20 56 54 49 20 74 75 6e 6e 65 6c 73 20 74 6f 20 77 6f 72 6b 2c 20 74 68 | that.for.VTI.tunnels.to.work,.th |
73e80 | 65 69 72 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 73 20 68 61 76 65 20 74 6f 20 62 65 | eir.traffic.selectors.have.to.be |
73ea0 | 20 73 65 74 20 74 6f 20 30 2e 30 2e 30 2e 30 2f 30 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f | .set.to.0.0.0.0/0.for.traffic.to |
73ec0 | 20 6d 61 74 63 68 20 74 68 65 20 74 75 6e 6e 65 6c 2c 20 65 76 65 6e 20 74 68 6f 75 67 68 20 61 | .match.the.tunnel,.even.though.a |
73ee0 | 63 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 20 61 | ctual.routing.decision.is.made.a |
73f00 | 63 63 6f 72 64 69 6e 67 20 74 6f 20 6e 65 74 66 69 6c 74 65 72 20 6d 61 72 6b 73 2e 20 55 6e 6c | ccording.to.netfilter.marks..Unl |
73f20 | 65 73 73 20 72 6f 75 74 65 20 69 6e 73 65 72 74 69 6f 6e 20 69 73 20 64 69 73 61 62 6c 65 64 20 | ess.route.insertion.is.disabled. |
73f40 | 65 6e 74 69 72 65 6c 79 2c 20 53 74 72 6f 6e 67 53 57 41 4e 20 74 68 75 73 20 6d 69 73 74 61 6b | entirely,.StrongSWAN.thus.mistak |
73f60 | 65 6e 6c 79 20 69 6e 73 65 72 74 73 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 68 72 | enly.inserts.a.default.route.thr |
73f80 | 6f 75 67 68 20 74 68 65 20 56 54 49 20 70 65 65 72 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 | ough.the.VTI.peer.address,.which |
73fa0 | 20 6d 61 6b 65 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 72 6f 75 74 65 64 20 74 6f 20 6e 6f 77 | .makes.all.traffic.routed.to.now |
73fc0 | 68 65 72 65 2e 00 54 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 20 69 73 20 | here..The.round-robin.policy.is. |
73fe0 | 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 65 72 20 74 68 61 74 20 64 69 76 69 64 65 | a.classful.scheduler.that.divide |
74000 | 73 20 74 72 61 66 66 69 63 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 5f 20 | s.traffic.in.different.classes_. |
74020 | 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 28 75 70 20 74 6f 20 34 30 39 36 29 2e 20 | you.can.configure.(up.to.4096).. |
74040 | 59 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f | You.can.embed_.a.new.policy.into |
74060 | 20 65 61 63 68 20 6f 66 20 74 68 6f 73 65 20 63 6c 61 73 73 65 73 20 28 64 65 66 61 75 6c 74 20 | .each.of.those.classes.(default. |
74080 | 69 6e 63 6c 75 64 65 64 29 2e 00 54 68 65 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 20 70 | included)..The.route.selection.p |
740a0 | 72 6f 63 65 73 73 20 75 73 65 64 20 62 79 20 46 52 52 27 73 20 42 47 50 20 69 6d 70 6c 65 6d 65 | rocess.used.by.FRR's.BGP.impleme |
740c0 | 6e 74 61 74 69 6f 6e 20 75 73 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 65 63 69 73 | ntation.uses.the.following.decis |
740e0 | 69 6f 6e 20 63 72 69 74 65 72 69 6f 6e 2c 20 73 74 61 72 74 69 6e 67 20 61 74 20 74 68 65 20 74 | ion.criterion,.starting.at.the.t |
74100 | 6f 70 20 6f 66 20 74 68 65 20 6c 69 73 74 20 61 6e 64 20 67 6f 69 6e 67 20 74 6f 77 61 72 64 73 | op.of.the.list.and.going.towards |
74120 | 20 74 68 65 20 62 6f 74 74 6f 6d 20 75 6e 74 69 6c 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 61 63 | .the.bottom.until.one.of.the.fac |
74140 | 74 6f 72 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 68 65 20 72 6f 75 74 65 20 77 69 74 68 | tors.can.be.used..The.route.with |
74160 | 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 6c 65 6e 67 74 | .the.shortest.cluster-list.lengt |
74180 | 68 20 69 73 20 75 73 65 64 2e 20 54 68 65 20 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 72 65 66 6c | h.is.used..The.cluster-list.refl |
741a0 | 65 63 74 73 20 74 68 65 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 20 70 61 74 68 20 74 68 | ects.the.iBGP.reflection.path.th |
741c0 | 65 20 72 6f 75 74 65 20 68 61 73 20 74 61 6b 65 6e 2e 00 54 68 65 20 72 6f 75 74 65 72 20 61 75 | e.route.has.taken..The.router.au |
741e0 | 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 73 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 | tomatically.updates.link-state.i |
74200 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 2e 20 4f | nformation.with.its.neighbors..O |
74220 | 6e 6c 79 20 61 6e 20 6f 62 73 6f 6c 65 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 | nly.an.obsolete.information.is.u |
74240 | 70 64 61 74 65 64 20 77 68 69 63 68 20 61 67 65 20 68 61 73 20 65 78 63 65 65 64 65 64 20 61 20 | pdated.which.age.has.exceeded.a. |
74260 | 73 70 65 63 69 66 69 63 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 | specific.threshold..This.paramet |
74280 | 65 72 20 63 68 61 6e 67 65 73 20 61 20 74 68 72 65 73 68 6f 6c 64 20 76 61 6c 75 65 2c 20 77 68 | er.changes.a.threshold.value,.wh |
742a0 | 69 63 68 20 62 79 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 20 73 65 63 6f 6e 64 73 20 28 | ich.by.default.is.1800.seconds.( |
742c0 | 68 61 6c 66 20 61 6e 20 68 6f 75 72 29 2e 20 54 68 65 20 76 61 6c 75 65 20 69 73 20 61 70 70 6c | half.an.hour)..The.value.is.appl |
742e0 | 69 65 64 20 74 6f 20 74 68 65 20 77 68 6f 6c 65 20 4f 53 50 46 20 72 6f 75 74 65 72 2e 20 54 68 | ied.to.the.whole.OSPF.router..Th |
74300 | 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 31 38 30 30 2e 00 54 68 65 | e.timer.range.is.10.to.1800..The |
74320 | 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 64 69 73 63 61 72 64 20 44 48 43 50 20 70 61 63 6b | .router.should.discard.DHCP.pack |
74340 | 61 67 65 73 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 69 6e 67 20 72 65 6c 61 79 20 61 67 | ages.already.containing.relay.ag |
74360 | 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 6f | ent.information.to.ensure.that.o |
74380 | 6e 6c 79 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 | nly.requests.from.DHCP.clients.a |
743a0 | 72 65 20 66 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 | re.forwarded..The.sFlow.accounti |
743c0 | 6e 67 20 62 61 73 65 64 20 6f 6e 20 68 73 66 6c 6f 77 64 20 68 74 74 70 73 3a 2f 2f 73 66 6c 6f | ng.based.on.hsflowd.https://sflo |
743e0 | 77 2e 6e 65 74 2f 00 54 68 65 20 73 61 6d 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 | w.net/.The.same.configuration.op |
74400 | 74 69 6f 6e 73 20 61 70 70 6c 79 20 77 68 65 6e 20 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 | tions.apply.when.Identity.based. |
74420 | 63 6f 6e 66 69 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 67 72 6f 75 70 20 6d 6f | config.is.configured.in.group.mo |
74440 | 64 65 20 65 78 63 65 70 74 20 74 68 61 74 20 67 72 6f 75 70 20 6d 6f 64 65 20 63 61 6e 20 6f 6e | de.except.that.group.mode.can.on |
74460 | 6c 79 20 62 65 20 75 73 65 64 20 77 69 74 68 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 | ly.be.used.with.RADIUS.authentic |
74480 | 61 74 69 6f 6e 2e 00 54 68 65 20 73 63 68 65 6d 65 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 | ation..The.scheme.above.doesn't. |
744a0 | 77 6f 72 6b 20 77 68 65 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 73 20 68 61 73 | work.when.one.of.the.routers.has |
744c0 | 20 61 20 64 79 6e 61 6d 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 68 6f 75 | .a.dynamic.external.address.thou |
744e0 | 67 68 2e 20 54 68 65 20 63 6c 61 73 73 69 63 20 77 6f 72 6b 61 72 6f 75 6e 64 20 66 6f 72 20 74 | gh..The.classic.workaround.for.t |
74500 | 68 69 73 20 69 73 20 74 6f 20 73 65 74 75 70 20 61 6e 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 | his.is.to.setup.an.address.on.a. |
74520 | 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 75 73 65 20 69 74 20 61 73 | loopback.interface.and.use.it.as |
74540 | 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 47 52 45 20 74 75 | .a.source.address.for.the.GRE.tu |
74560 | 6e 6e 65 6c 2c 20 74 68 65 6e 20 73 65 74 75 70 20 61 6e 20 49 50 73 65 63 20 70 6f 6c 69 63 79 | nnel,.then.setup.an.IPsec.policy |
74580 | 20 74 6f 20 6d 61 74 63 68 20 74 68 6f 73 65 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 | .to.match.those.loopback.address |
745a0 | 65 73 2e 00 54 68 65 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 | es..The.search.filter.can.contai |
745c0 | 6e 20 75 70 20 74 6f 20 31 35 20 6f 63 63 75 72 72 65 6e 63 65 73 20 6f 66 20 25 73 20 77 68 69 | n.up.to.15.occurrences.of.%s.whi |
745e0 | 63 68 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 75 73 65 72 6e | ch.will.be.replaced.by.the.usern |
74600 | 61 6d 65 2c 20 61 73 20 69 6e 20 22 75 69 64 3d 25 73 22 20 66 6f 72 20 3a 72 66 63 3a 60 32 30 | ame,.as.in."uid=%s".for.:rfc:`20 |
74620 | 33 37 60 20 64 69 72 65 63 74 6f 72 69 65 73 2e 20 46 6f 72 20 61 20 64 65 74 61 69 6c 65 64 20 | 37`.directories..For.a.detailed. |
74640 | 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 | description.of.LDAP.search.filte |
74660 | 72 20 73 79 6e 74 61 78 20 73 65 65 20 3a 72 66 63 3a 60 32 32 35 34 60 2e 00 54 68 65 20 73 65 | r.syntax.see.:rfc:`2254`..The.se |
74680 | 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 | condary.DHCP.server.uses.address |
746a0 | 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 33 60 00 54 68 65 20 73 65 63 75 72 69 74 79 20 | .`192.168.189.253`.The.security. |
746c0 | 61 70 70 72 6f 61 63 68 20 69 6e 20 53 4e 4d 50 76 33 20 74 61 72 67 65 74 73 3a 00 54 68 65 20 | approach.in.SNMPv3.targets:.The. |
746e0 | 73 65 71 75 65 6e 63 65 20 60 60 5e 45 63 3f 60 60 20 74 72 61 6e 73 6c 61 74 65 73 20 74 6f 3a | sequence.``^Ec?``.translates.to: |
74700 | 20 60 60 43 74 72 6c 2b 45 20 63 20 3f 60 60 2e 20 54 6f 20 71 75 69 74 20 74 68 65 20 73 65 73 | .``Ctrl+E.c.?``..To.quit.the.ses |
74720 | 73 69 6f 6e 20 75 73 65 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 2e 60 60 00 54 68 65 20 73 65 74 | sion.use:.``Ctrl+E.c..``.The.set |
74740 | 75 70 20 69 73 20 74 68 69 73 3a 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 | up.is.this:.Leaf2.-.Spine1.-.Lea |
74760 | 66 33 00 54 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6f 6e 2d 64 69 73 6b 20 50 72 6f 78 79 | f3.The.size.of.the.on-disk.Proxy |
74780 | 20 63 61 63 68 65 20 69 73 20 75 73 65 72 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 2e 20 54 68 65 | .cache.is.user.configurable..The |
747a0 | 20 50 72 6f 78 69 65 73 20 64 65 66 61 75 6c 74 20 63 61 63 68 65 2d 73 69 7a 65 20 69 73 20 63 | .Proxies.default.cache-size.is.c |
747c0 | 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 31 30 30 20 4d 42 2e 00 54 68 65 20 73 70 65 65 64 20 28 | onfigured.to.100.MB..The.speed.( |
747e0 | 62 61 75 64 72 61 74 65 29 20 6f 66 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 2e | baudrate).of.the.console.device. |
74800 | 20 53 75 70 70 6f 72 74 65 64 20 76 61 6c 75 65 73 20 61 72 65 3a 00 54 68 65 20 73 74 61 6e 64 | .Supported.values.are:.The.stand |
74820 | 61 72 64 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 49 45 45 45 20 38 30 32 2e 31 2c | ard.was.developed.by.IEEE.802.1, |
74840 | 20 61 20 77 6f 72 6b 69 6e 67 20 67 72 6f 75 70 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 30 32 | .a.working.group.of.the.IEEE.802 |
74860 | 20 73 74 61 6e 64 61 72 64 73 20 63 6f 6d 6d 69 74 74 65 65 2c 20 61 6e 64 20 63 6f 6e 74 69 6e | .standards.committee,.and.contin |
74880 | 75 65 73 20 74 6f 20 62 65 20 61 63 74 69 76 65 6c 79 20 72 65 76 69 73 65 64 2e 20 4f 6e 65 20 | ues.to.be.actively.revised..One. |
748a0 | 6f 66 20 74 68 65 20 6e 6f 74 61 62 6c 65 20 72 65 76 69 73 69 6f 6e 73 20 69 73 20 38 30 32 2e | of.the.notable.revisions.is.802. |
748c0 | 31 51 2d 32 30 31 34 20 77 68 69 63 68 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 49 45 45 45 20 | 1Q-2014.which.incorporated.IEEE. |
748e0 | 38 30 32 2e 31 61 71 20 28 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 42 72 69 64 67 69 6e 67 29 | 802.1aq.(Shortest.Path.Bridging) |
74900 | 20 61 6e 64 20 6d 75 63 68 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 | .and.much.of.the.IEEE.802.1d.sta |
74920 | 6e 64 61 72 64 2e 00 54 68 65 20 73 79 73 74 65 6d 20 4c 43 44 20 3a 61 62 62 72 3a 60 4c 43 44 | ndard..The.system.LCD.:abbr:`LCD |
74940 | 20 28 4c 69 71 75 69 64 2d 63 72 79 73 74 61 6c 20 64 69 73 70 6c 61 79 29 60 20 6f 70 74 69 6f | .(Liquid-crystal.display)`.optio |
74960 | 6e 20 69 73 20 66 6f 72 20 75 73 65 72 73 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 6f 6e 20 68 | n.is.for.users.running.VyOS.on.h |
74980 | 61 72 64 77 61 72 65 20 74 68 61 74 20 66 65 61 74 75 72 65 73 20 61 6e 20 4c 43 44 20 64 69 73 | ardware.that.features.an.LCD.dis |
749a0 | 70 6c 61 79 2e 20 54 68 69 73 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 61 20 73 6d 61 6c 6c 20 | play..This.is.typically.a.small. |
749c0 | 64 69 73 70 6c 61 79 20 62 75 69 6c 74 20 69 6e 20 61 6e 20 31 39 20 69 6e 63 68 20 72 61 63 6b | display.built.in.an.19.inch.rack |
749e0 | 2d 6d 6f 75 6e 74 61 62 6c 65 20 61 70 70 6c 69 61 6e 63 65 2e 20 54 68 6f 73 65 20 64 69 73 70 | -mountable.appliance..Those.disp |
74a00 | 6c 61 79 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 68 6f 77 20 72 75 6e 74 69 6d 65 20 64 61 | lays.are.used.to.show.runtime.da |
74a20 | 74 61 2e 00 54 68 65 20 73 79 73 74 65 6d 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 | ta..The.system.is.configured.to. |
74a40 | 61 74 74 65 6d 70 74 20 64 6f 6d 61 69 6e 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 6e 20 74 68 65 | attempt.domain.completion.in.the |
74a60 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 72 3a 20 76 79 6f 73 2e 69 6f 20 28 66 69 72 73 74 | .following.order:.vyos.io.(first |
74a80 | 29 2c 20 76 79 6f 73 2e 6e 65 74 20 28 73 65 63 6f 6e 64 29 20 61 6e 64 20 76 79 6f 73 2e 6e 65 | ),.vyos.net.(second).and.vyos.ne |
74aa0 | 74 77 6f 72 6b 20 28 6c 61 73 74 29 3a 00 54 68 65 20 74 61 62 6c 65 20 63 6f 6e 73 69 73 74 73 | twork.(last):.The.table.consists |
74ac0 | 20 6f 66 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 61 74 61 3a 00 54 68 65 20 74 61 73 6b 20 73 63 68 | .of.following.data:.The.task.sch |
74ae0 | 65 64 75 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 74 61 73 | eduler.allows.you.to.execute.tas |
74b00 | 6b 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 73 63 68 65 64 75 6c 65 2e 20 49 74 20 6d 61 6b 65 73 | ks.on.a.given.schedule..It.makes |
74b20 | 20 75 73 65 20 6f 66 20 55 4e 49 58 20 63 72 6f 6e 5f 2e 00 54 68 65 20 74 72 61 6e 73 6c 61 74 | .use.of.UNIX.cron_..The.translat |
74b40 | 69 6f 6e 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 6f 6e 65 20 6f | ion.address.must.be.set.to.one.o |
74b60 | 66 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 | f.the.available.addresses.on.the |
74b80 | 20 63 6f 6e 66 69 67 75 72 65 64 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 | .configured.`outbound-interface` |
74ba0 | 20 6f 72 20 69 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 60 6d 61 73 71 75 65 72 61 64 | .or.it.must.be.set.to.`masquerad |
74bc0 | 65 60 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 | e`.which.will.use.the.primary.IP |
74be0 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 | .address.of.the.`outbound-interf |
74c00 | 61 63 65 60 20 61 73 20 69 74 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e | ace`.as.its.translation.address. |
74c20 | 00 54 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 75 73 65 20 31 30 2e 32 35 35 2e 31 2e 31 20 | .The.tunnel.will.use.10.255.1.1. |
74c40 | 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 6e 64 20 31 30 2e 32 35 35 2e 31 2e 32 20 | for.the.local.IP.and.10.255.1.2. |
74c60 | 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 2e 00 54 68 65 20 74 79 70 65 20 63 61 6e 20 62 65 20 | for.the.remote..The.type.can.be. |
74c80 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 61 73 62 72 2d 73 75 6d 6d 61 72 79 2c 20 65 78 74 | the.following:.asbr-summary,.ext |
74ca0 | 65 72 6e 61 6c 2c 20 6e 65 74 77 6f 72 6b 2c 20 6e 73 73 61 2d 65 78 74 65 72 6e 61 6c 2c 20 6f | ernal,.network,.nssa-external,.o |
74cc0 | 70 61 71 75 65 2d 61 72 65 61 2c 20 6f 70 61 71 75 65 2d 61 73 2c 20 6f 70 61 71 75 65 2d 6c 69 | paque-area,.opaque-as,.opaque-li |
74ce0 | 6e 6b 2c 20 72 6f 75 74 65 72 2c 20 73 75 6d 6d 61 72 79 2e 00 54 68 65 20 75 6c 74 69 6d 61 74 | nk,.router,.summary..The.ultimat |
74d00 | 65 20 67 6f 61 6c 20 6f 66 20 63 6c 61 73 73 69 66 79 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 | e.goal.of.classifying.traffic.is |
74d20 | 20 74 6f 20 67 69 76 65 20 65 61 63 68 20 63 6c 61 73 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 | .to.give.each.class.a.different. |
74d40 | 74 72 65 61 74 6d 65 6e 74 2e 00 54 68 65 20 75 73 65 20 6f 66 20 49 50 6f 45 20 61 64 64 72 65 | treatment..The.use.of.IPoE.addre |
74d60 | 73 73 65 73 20 74 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 74 68 61 74 20 50 50 50 20 69 | sses.the.disadvantage.that.PPP.i |
74d80 | 73 20 75 6e 73 75 69 74 65 64 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 65 6c 69 76 65 72 | s.unsuited.for.multicast.deliver |
74da0 | 79 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 2e 20 54 79 70 69 63 61 6c 6c 79 2c 20 | y.to.multiple.users..Typically,. |
74dc0 | 49 50 6f 45 20 75 73 65 73 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 20 43 6f 6e 66 69 67 75 72 61 | IPoE.uses.Dynamic.Host.Configura |
74de0 | 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 | tion.Protocol.and.Extensible.Aut |
74e00 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 74 6f 20 70 72 6f 76 69 64 65 20 | hentication.Protocol.to.provide. |
74e20 | 74 68 65 20 73 61 6d 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 20 50 50 50 6f 45 2c | the.same.functionality.as.PPPoE, |
74e40 | 20 62 75 74 20 69 6e 20 61 20 6c 65 73 73 20 72 6f 62 75 73 74 20 6d 61 6e 6e 65 72 2e 00 54 68 | .but.in.a.less.robust.manner..Th |
74e60 | 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 | e.value.of.the.attribute.``NAS-P |
74e80 | 6f 72 74 2d 49 64 60 60 20 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 31 36 20 63 68 | ort-Id``.must.be.less.than.16.ch |
74ea0 | 61 72 61 63 74 65 72 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 | aracters,.otherwise.the.interfac |
74ec0 | 65 20 77 6f 6e 27 74 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 54 68 65 20 76 65 6e 64 6f 72 2d 63 | e.won't.be.renamed..The.vendor-c |
74ee0 | 6c 61 73 73 2d 69 64 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 | lass-id.option.can.be.used.to.re |
74f00 | 71 75 65 73 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6c 61 73 73 20 6f 66 20 76 65 6e 64 6f 72 | quest.a.specific.class.of.vendor |
74f20 | 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 65 72 2e 00 54 68 65 20 76 65 | .options.from.the.server..The.ve |
74f40 | 74 68 20 64 65 76 69 63 65 73 20 61 72 65 20 76 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 | th.devices.are.virtual.Ethernet. |
74f60 | 64 65 76 69 63 65 73 2e 20 54 68 65 79 20 63 61 6e 20 61 63 74 20 61 73 20 74 75 6e 6e 65 6c 73 | devices..They.can.act.as.tunnels |
74f80 | 20 62 65 74 77 65 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 73 70 61 63 65 73 20 74 6f 20 63 | .between.network.namespaces.to.c |
74fa0 | 72 65 61 74 65 20 61 20 62 72 69 64 67 65 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6e 65 74 | reate.a.bridge.to.a.physical.net |
74fc0 | 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6e 20 61 6e 6f 74 68 65 72 20 6e 61 6d 65 73 70 61 63 65 | work.device.in.another.namespace |
74fe0 | 20 6f 72 20 56 52 46 2c 20 62 75 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 61 73 | .or.VRF,.but.can.also.be.used.as |
75000 | 20 73 74 61 6e 64 61 6c 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2e 00 54 68 65 | .standalone.network.devices..The |
75020 | 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 4e 41 54 36 34 20 70 72 65 66 69 78 20 69 73 20 60 60 36 34 | .well.known.NAT64.prefix.is.``64 |
75040 | 3a 66 66 39 62 3a 3a 2f 39 36 60 60 00 54 68 65 20 77 69 6e 64 6f 77 20 73 69 7a 65 20 6d 75 73 | :ff9b::/96``.The.window.size.mus |
75060 | 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 32 31 2e 00 54 68 65 20 77 69 72 65 6c | t.be.between.1.and.21..The.wirel |
75080 | 65 73 73 20 63 6c 69 65 6e 74 20 28 73 75 70 70 6c 69 63 61 6e 74 29 20 61 75 74 68 65 6e 74 69 | ess.client.(supplicant).authenti |
750a0 | 63 61 74 65 73 20 61 67 61 69 6e 73 74 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 | cates.against.the.RADIUS.server. |
750c0 | 28 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 29 20 75 73 69 6e 67 20 61 6e | (authentication.server).using.an |
750e0 | 20 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 | .:abbr:`EAP.(Extensible.Authenti |
75100 | 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 20 6d 65 74 68 6f 64 20 63 6f 6e 66 69 67 | cation.Protocol)`..method.config |
75120 | 75 72 65 64 20 6f 6e 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 54 68 65 20 57 | ured.on.the.RADIUS.server..The.W |
75140 | 41 50 20 28 61 6c 73 6f 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 75 74 68 65 6e 74 69 | AP.(also.referred.to.as.authenti |
75160 | 63 61 74 6f 72 29 20 72 6f 6c 65 20 69 73 20 74 6f 20 73 65 6e 64 20 61 6c 6c 20 61 75 74 68 65 | cator).role.is.to.send.all.authe |
75180 | 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 | ntication.messages.between.the.s |
751a0 | 75 70 70 6c 69 63 61 6e 74 20 61 6e 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 | upplicant.and.the.configured.aut |
751c0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 2c 20 74 68 75 73 20 74 68 65 20 52 41 44 | hentication.server,.thus.the.RAD |
751e0 | 49 55 53 20 73 65 72 76 65 72 20 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 61 75 | IUS.server.is.responsible.for.au |
75200 | 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 73 2e 00 54 68 65 6e 20 61 20 63 | thenticating.the.users..Then.a.c |
75220 | 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 53 4e 41 54 20 72 75 6c 65 20 69 73 20 63 72 65 61 74 65 | orresponding.SNAT.rule.is.create |
75240 | 64 20 74 6f 20 4e 41 54 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 | d.to.NAT.outgoing.traffic.for.th |
75260 | 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 74 6f 20 61 20 72 65 73 65 72 76 65 64 20 65 78 74 65 | e.internal.IP.to.a.reserved.exte |
75280 | 72 6e 61 6c 20 49 50 2e 20 54 68 69 73 20 64 65 64 69 63 61 74 65 73 20 61 6e 20 65 78 74 65 72 | rnal.IP..This.dedicates.an.exter |
752a0 | 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 | nal.IP.address.to.an.internal.IP |
752c0 | 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 70 72 6f 74 6f | .address.and.is.useful.for.proto |
752e0 | 63 6f 6c 73 20 77 68 69 63 68 20 64 6f 6e 27 74 20 68 61 76 65 20 74 68 65 20 6e 6f 74 69 6f 6e | cols.which.don't.have.the.notion |
75300 | 20 6f 66 20 70 6f 72 74 73 2c 20 73 75 63 68 20 61 73 20 47 52 45 2e 00 54 68 65 6e 20 77 65 20 | .of.ports,.such.as.GRE..Then.we. |
75320 | 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 2c 20 61 64 64 20 61 6e 64 20 73 70 65 63 69 66 | need.to.generate,.add.and.specif |
75340 | 79 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 | y.the.names.of.the.cryptographic |
75360 | 20 6d 61 74 65 72 69 61 6c 73 2e 20 45 61 63 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 | .materials..Each.of.the.install. |
75380 | 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 | command.should.be.applied.to.the |
753a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f | .configuration.and.commited.befo |
753c0 | 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e 76 70 6e 20 69 6e 74 65 72 | re.using.under.the.openvpn.inter |
753e0 | 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 | face.configuration..Then.you.nee |
75400 | 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 72 65 6d 6f | d.to.install.the.key.on.the.remo |
75420 | 74 65 20 72 6f 75 74 65 72 3a 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 | te.router:.Then.you.need.to.set. |
75440 | 74 68 65 20 6b 65 79 20 69 6e 20 79 6f 75 72 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 | the.key.in.your.OpenVPN.interfac |
75460 | 65 20 73 65 74 74 69 6e 67 73 3a 00 54 68 65 6e 2c 20 46 61 73 74 4e 65 74 4d 6f 6e 20 63 6f 6e | e.settings:.Then,.FastNetMon.con |
75480 | 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 33 20 64 65 66 61 75 6c 74 20 | figuration:.There.are.3.default. |
754a0 | 4e 54 50 20 73 65 72 76 65 72 20 73 65 74 2e 20 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 | NTP.server.set..You.are.able.to. |
754c0 | 63 68 61 6e 67 65 20 74 68 65 6d 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 | change.them..There.are.a.lot.of. |
754e0 | 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 | matching.criteria.against.which. |
75500 | 74 68 65 20 70 61 63 6b 61 67 65 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 | the.package.can.be.tested..There |
75520 | 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 | .are.a.lot.of.matching.criteria. |
75540 | 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 | against.which.the.packet.can.be. |
75560 | 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 | tested..There.are.a.lot.of.match |
75580 | 69 6e 67 20 63 72 69 74 65 72 69 61 20 6f 70 74 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 2c 20 | ing.criteria.options.available,. |
755a0 | 62 6f 74 68 20 66 6f 72 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 65 60 60 20 61 6e 64 20 60 60 | both.for.``policy.route``.and.`` |
755c0 | 70 6f 6c 69 63 79 20 72 6f 75 74 65 36 60 60 2e 20 54 68 65 73 65 20 6f 70 74 69 6f 6e 73 20 61 | policy.route6``..These.options.a |
755e0 | 72 65 20 6c 69 73 74 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 72 65 | re.listed.in.this.section..There |
75600 | 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 67 65 | .are.different.parameters.for.ge |
75620 | 74 74 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 54 | tting.prefix-list.information:.T |
75640 | 68 65 72 65 20 61 72 65 20 6c 69 6d 69 74 73 20 6f 6e 20 77 68 69 63 68 20 63 68 61 6e 6e 65 6c | here.are.limits.on.which.channel |
75660 | 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 | s.can.be.used.with.HT40-.and.HT4 |
75680 | 30 2b 2e 20 46 6f 6c 6c 6f 77 69 6e 67 20 74 61 62 6c 65 20 73 68 6f 77 73 20 74 68 65 20 63 68 | 0+..Following.table.shows.the.ch |
756a0 | 61 6e 6e 65 6c 73 20 74 68 61 74 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | annels.that.may.be.available.for |
756c0 | 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 2b 20 75 73 65 20 70 65 72 20 49 45 45 45 20 38 30 | .HT40-.and.HT40+.use.per.IEEE.80 |
756e0 | 32 2e 31 31 6e 20 41 6e 6e 65 78 20 4a 3a 00 54 68 65 72 65 20 61 72 65 20 6d 61 6e 79 20 70 61 | 2.11n.Annex.J:.There.are.many.pa |
75700 | 72 61 6d 65 74 65 72 73 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 | rameters.you.will.be.able.to.use |
75720 | 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 74 72 61 66 66 69 63 20 79 | .in.order.to.match.the.traffic.y |
75740 | 6f 75 20 77 61 6e 74 20 66 6f 72 20 61 20 63 6c 61 73 73 3a 00 54 68 65 72 65 20 61 72 65 20 6d | ou.want.for.a.class:.There.are.m |
75760 | 75 6c 74 69 70 6c 65 20 76 65 72 73 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 | ultiple.versions.available.for.t |
75780 | 68 65 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 60 3c 76 65 72 73 69 6f 6e 3e 60 | he.NetFlow.data..The.`<version>` |
757a0 | 20 75 73 65 64 20 69 6e 20 74 68 65 20 65 78 70 6f 72 74 65 64 20 66 6c 6f 77 20 64 61 74 61 20 | .used.in.the.exported.flow.data. |
757c0 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 2e 20 54 68 65 20 66 6f 6c 6c | can.be.configured.here..The.foll |
757e0 | 6f 77 69 6e 67 20 76 65 72 73 69 6f 6e 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 54 68 | owing.versions.are.supported:.Th |
75800 | 65 72 65 20 61 72 65 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 61 6e 64 20 6e 6f 6e 20 72 61 74 | ere.are.rate-limited.and.non.rat |
75820 | 65 2d 6c 69 6d 69 74 65 64 20 75 73 65 72 73 20 28 4d 41 43 73 29 00 54 68 65 72 65 20 61 72 65 | e-limited.users.(MACs).There.are |
75840 | 20 73 6f 6d 65 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 73 65 72 69 61 6c 20 63 6f 6e | .some.scenarios.where.serial.con |
75860 | 73 6f 6c 65 73 20 61 72 65 20 75 73 65 66 75 6c 2e 20 53 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 | soles.are.useful..System.adminis |
75880 | 74 72 61 74 69 6f 6e 20 6f 66 20 72 65 6d 6f 74 65 20 63 6f 6d 70 75 74 65 72 73 20 69 73 20 75 | tration.of.remote.computers.is.u |
758a0 | 73 75 61 6c 6c 79 20 64 6f 6e 65 20 75 73 69 6e 67 20 3a 72 65 66 3a 60 73 73 68 60 2c 20 62 75 | sually.done.using.:ref:`ssh`,.bu |
758c0 | 74 20 74 68 65 72 65 20 61 72 65 20 74 69 6d 65 73 20 77 68 65 6e 20 61 63 63 65 73 73 20 74 6f | t.there.are.times.when.access.to |
758e0 | 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 77 61 79 20 74 6f 20 | .the.console.is.the.only.way.to. |
75900 | 64 69 61 67 6e 6f 73 65 20 61 6e 64 20 63 6f 72 72 65 63 74 20 73 6f 66 74 77 61 72 65 20 66 61 | diagnose.and.correct.software.fa |
75920 | 69 6c 75 72 65 73 2e 20 4d 61 6a 6f 72 20 75 70 67 72 61 64 65 73 20 74 6f 20 74 68 65 20 69 6e | ilures..Major.upgrades.to.the.in |
75940 | 73 74 61 6c 6c 65 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6d 61 79 20 61 6c 73 6f 20 72 65 | stalled.distribution.may.also.re |
75960 | 71 75 69 72 65 20 63 6f 6e 73 6f 6c 65 20 61 63 63 65 73 73 2e 00 54 68 65 72 65 20 61 72 65 20 | quire.console.access..There.are. |
75980 | 74 68 72 65 65 20 6d 6f 64 65 73 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 20 77 | three.modes.of.operation.for.a.w |
759a0 | 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 72 65 20 61 72 65 20 74 77 6f | ireless.interface:.There.are.two |
759c0 | 20 74 79 70 65 73 20 6f 66 20 4e 65 74 77 6f 72 6b 20 41 64 6d 69 6e 73 20 77 68 6f 20 64 65 61 | .types.of.Network.Admins.who.dea |
759e0 | 6c 20 77 69 74 68 20 42 47 50 2c 20 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 20 63 72 65 61 74 | l.with.BGP,.those.who.have.creat |
75a00 | 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 69 6e 63 69 64 65 6e 74 20 61 6e 64 | ed.an.international.incident.and |
75a20 | 2f 6f 72 20 6f 75 74 61 67 65 2c 20 61 6e 64 20 74 68 6f 73 65 20 77 68 6f 20 61 72 65 20 6c 79 | /or.outage,.and.those.who.are.ly |
75a40 | 69 6e 67 00 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 77 61 79 73 20 74 68 61 74 20 68 65 6c 70 | ing.There.are.two.ways.that.help |
75a60 | 20 75 73 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 42 47 50 73 20 66 75 6c 6c 2d 6d 65 | .us.to.mitigate.the.BGPs.full-me |
75a80 | 73 68 20 72 65 71 75 69 72 65 6d 65 6e 74 20 69 6e 20 61 20 6e 65 74 77 6f 72 6b 3a 00 54 68 65 | sh.requirement.in.a.network:.The |
75aa0 | 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 60 60 6c 6f | re.can.only.be.one.loopback.``lo |
75ac0 | 60 60 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 66 20 79 | ``.interface.on.the.system..If.y |
75ae0 | 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2c 20 70 6c 65 | ou.need.multiple.interfaces,.ple |
75b00 | 61 73 65 20 75 73 65 20 74 68 65 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 | ase.use.the.:ref:`dummy-interfac |
75b20 | 65 60 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 00 54 68 65 72 65 20 63 6f 75 6c 64 20 62 | e`.interface.type..There.could.b |
75b40 | 65 20 61 20 77 69 64 65 20 72 61 6e 67 65 20 6f 66 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 69 | e.a.wide.range.of.routing.polici |
75b60 | 65 73 2e 20 53 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 61 72 65 20 6c 69 73 74 65 64 20 62 65 6c | es..Some.examples.are.listed.bel |
75b80 | 6f 77 3a 00 54 68 65 72 65 20 69 73 20 61 20 76 65 72 79 20 6e 69 63 65 20 70 69 63 74 75 72 65 | ow:.There.is.a.very.nice.picture |
75ba0 | 2f 65 78 70 6c 61 6e 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 56 79 61 74 74 61 20 64 6f 63 75 6d | /explanation.in.the.Vyatta.docum |
75bc0 | 65 6e 74 61 74 69 6f 6e 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 72 65 77 72 69 74 74 | entation.which.should.be.rewritt |
75be0 | 65 6e 20 68 65 72 65 2e 00 54 68 65 72 65 20 69 73 20 61 6c 73 6f 20 61 20 47 52 45 20 6f 76 65 | en.here..There.is.also.a.GRE.ove |
75c00 | 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 | r.IPv6.encapsulation.available,. |
75c20 | 69 74 20 69 73 20 63 61 6c 6c 65 64 3a 20 60 60 69 70 36 67 72 65 60 60 2e 00 54 68 65 72 65 20 | it.is.called:.``ip6gre``..There. |
75c40 | 69 73 20 61 6e 20 65 6e 74 69 72 65 20 63 68 61 70 74 65 72 20 61 62 6f 75 74 20 68 6f 77 20 74 | is.an.entire.chapter.about.how.t |
75c60 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a 72 65 66 3a 60 76 72 66 60 2c 20 70 6c 65 61 73 65 | o.configure.a.:ref:`vrf`,.please |
75c80 | 20 63 68 65 63 6b 20 74 68 69 73 20 66 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 | .check.this.for.additional.infor |
75ca0 | 6d 61 74 69 6f 6e 2e 00 54 68 65 72 65 27 73 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 63 6c 69 | mation..There's.a.variety.of.cli |
75cc0 | 65 6e 74 20 47 55 49 20 66 72 6f 6e 74 65 6e 64 73 20 66 6f 72 20 61 6e 79 20 70 6c 61 74 66 6f | ent.GUI.frontends.for.any.platfo |
75ce0 | 72 6d 00 54 68 65 73 65 20 61 72 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 61 20 | rm.These.are.the.commands.for.a. |
75d00 | 62 61 73 69 63 20 73 65 74 75 70 2e 00 54 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 61 6c 6c 6f | basic.setup..These.commands.allo |
75d20 | 77 20 74 68 65 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 20 68 6f 73 74 73 20 74 6f | w.the.VLAN10.and.VLAN11.hosts.to |
75d40 | 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 65 72 20 75 73 69 | .communicate.with.each.other.usi |
75d60 | 6e 67 20 74 68 65 20 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 73 65 | ng.the.main.routing.table..These |
75d80 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 6d 61 6e 64 61 74 6f 72 79 20 | .configuration.is.not.mandatory. |
75da0 | 61 6e 64 20 69 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 | and.in.most.cases.there's.no.nee |
75dc0 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 20 42 75 74 20 69 66 20 6e 65 63 65 73 73 | d.to.configure.it..But.if.necess |
75de0 | 61 72 79 2c 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 | ary,.Gratuitous.ARP.can.be.confi |
75e00 | 67 75 72 65 64 20 69 6e 20 60 60 67 6c 6f 62 61 6c 2d 70 61 72 61 6d 65 74 65 72 73 60 60 20 61 | gured.in.``global-parameters``.a |
75e20 | 6e 64 2f 6f 72 20 69 6e 20 60 60 67 72 6f 75 70 60 60 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 73 | nd/or.in.``group``.section..Thes |
75e40 | 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 70 61 73 73 65 64 20 61 73 2d 69 73 20 74 6f | e.parameters.are.passed.as-is.to |
75e60 | 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 75 6e 64 65 72 20 74 68 65 | .isc-dhcp's.dhcpd.conf.under.the |
75e80 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 6f 64 65 20 74 68 65 79 20 61 72 65 20 64 65 66 | .configuration.node.they.are.def |
75ea0 | 69 6e 65 64 20 69 6e 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 76 61 6c 69 64 61 74 65 64 20 | ined.in..They.are.not.validated. |
75ec0 | 73 6f 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 72 61 77 20 70 61 72 61 6d 65 74 65 72 | so.an.error.in.the.raw.parameter |
75ee0 | 73 20 77 6f 6e 27 74 20 62 65 20 63 61 75 67 68 74 20 62 79 20 76 79 6f 73 27 73 20 73 63 72 69 | s.won't.be.caught.by.vyos's.scri |
75f00 | 70 74 73 20 61 6e 64 20 77 69 6c 6c 20 63 61 75 73 65 20 64 68 63 70 64 20 74 6f 20 66 61 69 6c | pts.and.will.cause.dhcpd.to.fail |
75f20 | 20 74 6f 20 73 74 61 72 74 2e 20 41 6c 77 61 79 73 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 | .to.start..Always.verify.that.th |
75f40 | 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 63 6f 72 72 65 63 74 20 62 65 66 6f 72 65 20 | e.parameters.are.correct.before. |
75f60 | 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 52 65 | committing.the.configuration..Re |
75f80 | 66 65 72 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 6d 61 6e | fer.to.isc-dhcp's.dhcpd.conf.man |
75fa0 | 75 61 6c 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a | ual.for.more.information:.https: |
75fc0 | 2f 2f 6b 62 2e 69 73 63 2e 6f 72 67 2f 64 6f 63 73 2f 69 73 63 2d 64 68 63 70 2d 34 34 2d 6d 61 | //kb.isc.org/docs/isc-dhcp-44-ma |
75fe0 | 6e 75 61 6c 2d 70 61 67 65 73 2d 64 68 63 70 64 63 6f 6e 66 00 54 68 65 73 65 20 70 61 72 61 6d | nual-pages-dhcpdconf.These.param |
76000 | 65 74 65 72 73 20 6e 65 65 64 20 74 6f 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 20 44 48 43 | eters.need.to.be.part.of.the.DHC |
76020 | 50 20 67 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 2e 20 54 68 65 79 20 73 74 61 79 20 75 6e 63 68 | P.global.options..They.stay.unch |
76040 | 61 6e 67 65 64 2e 00 54 68 65 79 20 63 61 6e 20 62 65 20 2a 2a 64 65 63 69 6d 61 6c 2a 2a 20 70 | anged..They.can.be.**decimal**.p |
76060 | 72 65 66 69 78 65 73 2e 00 54 68 69 6e 67 73 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 72 65 64 20 | refixes..Things.to.be.considred. |
76080 | 69 6e 20 74 68 69 73 20 73 65 74 75 70 3a 00 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 | in.this.setup:.This.address.must |
760a0 | 20 62 65 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 6c 6f 63 61 6c 20 69 6e 74 65 72 | .be.the.address.of.a.local.inter |
760c0 | 66 61 63 65 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 | face..It.may.be.specified.as.an. |
760e0 | 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e | IPv4.address.or.an.IPv6.address. |
76100 | 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c | .This.algorithm.is.802.3ad.compl |
76120 | 69 61 6e 74 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 6e 6f 74 20 66 75 6c 6c | iant..This.algorithm.is.not.full |
76140 | 79 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 20 41 20 73 69 6e 67 6c 65 20 54 43 | y.802.3ad.compliant..A.single.TC |
76160 | 50 20 6f 72 20 55 44 50 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 69 6e 67 | P.or.UDP.conversation.containing |
76180 | 20 62 6f 74 68 20 66 72 61 67 6d 65 6e 74 65 64 20 61 6e 64 20 75 6e 66 72 61 67 6d 65 6e 74 65 | .both.fragmented.and.unfragmente |
761a0 | 64 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 65 65 20 70 61 63 6b 65 74 73 20 73 74 72 69 70 | d.packets.will.see.packets.strip |
761c0 | 65 64 20 61 63 72 6f 73 73 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d | ed.across.two.interfaces..This.m |
761e0 | 61 79 20 72 65 73 75 6c 74 20 69 6e 20 6f 75 74 20 6f 66 20 6f 72 64 65 72 20 64 65 6c 69 76 65 | ay.result.in.out.of.order.delive |
76200 | 72 79 2e 20 4d 6f 73 74 20 74 72 61 66 66 69 63 20 74 79 70 65 73 20 77 69 6c 6c 20 6e 6f 74 20 | ry..Most.traffic.types.will.not. |
76220 | 6d 65 65 74 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 2c 20 61 73 20 54 43 50 20 72 61 72 65 | meet.these.criteria,.as.TCP.rare |
76240 | 6c 79 20 66 72 61 67 6d 65 6e 74 73 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 6d 6f 73 74 20 55 | ly.fragments.traffic,.and.most.U |
76260 | 44 50 20 74 72 61 66 66 69 63 20 69 73 20 6e 6f 74 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 65 78 | DP.traffic.is.not.involved.in.ex |
76280 | 74 65 6e 64 65 64 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2e 20 4f 74 68 65 72 20 69 6d 70 6c | tended.conversations..Other.impl |
762a0 | 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6f 66 20 38 30 32 2e 33 61 64 20 6d 61 79 20 6f 72 20 6d 61 | ementations.of.802.3ad.may.or.ma |
762c0 | 79 20 6e 6f 74 20 74 6f 6c 65 72 61 74 65 20 74 68 69 73 20 6e 6f 6e 63 6f 6d 70 6c 69 61 6e 63 | y.not.tolerate.this.noncomplianc |
762e0 | 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c | e..This.algorithm.will.place.all |
76300 | 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b | .traffic.to.a.particular.network |
76320 | 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 00 54 68 69 73 20 61 6c | .peer.on.the.same.slave..This.al |
76340 | 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 | gorithm.will.place.all.traffic.t |
76360 | 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 | o.a.particular.network.peer.on.t |
76380 | 68 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 | he.same.slave..For.non-IP.traffi |
763a0 | 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f | c,.the.formula.is.the.same.as.fo |
763c0 | 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 | r.the.layer2.transmit.hash.polic |
763e0 | 79 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 61 76 6f 69 64 69 6e 67 20 74 68 65 20 74 69 6d 65 | y..This.allows.avoiding.the.time |
76400 | 72 73 20 64 65 66 69 6e 65 64 20 69 6e 20 42 47 50 20 61 6e 64 20 4f 53 50 46 20 70 72 6f 74 6f | rs.defined.in.BGP.and.OSPF.proto |
76420 | 63 6f 6c 20 74 6f 20 65 78 70 69 72 65 73 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 | col.to.expires..This.allows.the. |
76440 | 6f 70 65 72 61 74 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6e 75 6d 62 65 72 20 6f | operator.to.control.the.number.o |
76460 | 66 20 6f 70 65 6e 20 66 69 6c 65 20 64 65 73 63 72 69 70 74 6f 72 73 20 65 61 63 68 20 64 61 65 | f.open.file.descriptors.each.dae |
76480 | 6d 6f 6e 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 74 61 72 74 20 77 69 74 68 2e 20 49 66 | mon.is.allowed.to.start.with..If |
764a0 | 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 70 6c 61 6e 73 20 74 6f 20 72 75 6e 20 62 67 70 20 77 | .the.operator.plans.to.run.bgp.w |
764c0 | 69 74 68 20 73 65 76 65 72 61 6c 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 70 65 65 72 73 20 74 | ith.several.thousands.of.peers.t |
764e0 | 68 65 6e 20 74 68 69 73 20 69 73 20 77 68 65 72 65 20 77 65 20 77 6f 75 6c 64 20 6d 6f 64 69 66 | hen.this.is.where.we.would.modif |
76500 | 79 20 46 52 52 20 74 6f 20 61 6c 6c 6f 77 20 74 68 69 73 20 74 6f 20 68 61 70 70 65 6e 2e 00 54 | y.FRR.to.allow.this.to.happen..T |
76520 | 68 69 73 20 61 6c 73 6f 20 77 6f 72 6b 73 20 66 6f 72 20 72 65 76 65 72 73 65 2d 6c 6f 6f 6b 75 | his.also.works.for.reverse-looku |
76540 | 70 20 7a 6f 6e 65 73 20 28 60 60 31 38 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 60 60 | p.zones.(``18.172.in-addr.arpa`` |
76560 | 29 2e 00 54 68 69 73 20 61 72 74 69 63 6c 65 20 74 6f 75 63 68 65 73 20 6f 6e 20 27 63 6c 61 73 | )..This.article.touches.on.'clas |
76580 | 73 69 63 27 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 69 | sic'.IP.tunneling.protocols..Thi |
765a0 | 73 20 62 6c 75 65 70 72 69 6e 74 20 75 73 65 73 20 56 79 4f 53 20 61 73 20 74 68 65 20 44 4d 56 | s.blueprint.uses.VyOS.as.the.DMV |
765c0 | 50 4e 20 48 75 62 20 61 6e 64 20 43 69 73 63 6f 20 28 37 32 30 36 56 58 52 29 20 61 6e 64 20 56 | PN.Hub.and.Cisco.(7206VXR).and.V |
765e0 | 79 4f 53 20 61 73 20 6d 75 6c 74 69 70 6c 65 20 73 70 6f 6b 65 20 73 69 74 65 73 2e 20 54 68 65 | yOS.as.multiple.spoke.sites..The |
76600 | 20 6c 61 62 20 77 61 73 20 62 75 69 6c 64 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 45 56 45 2d | .lab.was.build.using.:abbr:`EVE- |
76620 | 4e 47 20 28 45 6d 75 6c 61 74 65 64 20 56 69 72 74 75 61 6c 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 | NG.(Emulated.Virtual.Environment |
76640 | 20 4e 47 29 60 2e 00 54 68 69 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 72 6d 65 64 20 75 73 69 | .NG)`..This.can.be.confirmed.usi |
76660 | 6e 67 20 74 68 65 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 20 74 61 62 6c 65 20 31 30 30 | ng.the.``show.ip.route.table.100 |
76680 | 60 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 61 6e | ``.operational.command..This.can |
766a0 | 20 6f 6e 6c 79 20 62 65 20 64 6f 6e 65 20 69 66 20 61 6c 6c 20 79 6f 75 72 20 75 73 65 72 73 20 | .only.be.done.if.all.your.users. |
766c0 | 61 72 65 20 6c 6f 63 61 74 65 64 20 64 69 72 65 63 74 6c 79 20 75 6e 64 65 72 20 74 68 65 20 73 | are.located.directly.under.the.s |
766e0 | 61 6d 65 20 70 6f 73 69 74 69 6f 6e 20 69 6e 20 74 68 65 20 4c 44 41 50 20 74 72 65 65 20 61 6e | ame.position.in.the.LDAP.tree.an |
76700 | 64 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 6e 61 6d | d.the.login.name.is.used.for.nam |
76720 | 69 6e 67 20 65 61 63 68 20 75 73 65 72 20 6f 62 6a 65 63 74 2e 20 49 66 20 79 6f 75 72 20 4c 44 | ing.each.user.object..If.your.LD |
76740 | 41 50 20 74 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 73 65 20 63 72 69 | AP.tree.does.not.match.these.cri |
76760 | 74 65 72 69 61 73 20 6f 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 66 69 6c 74 65 72 20 | terias.or.if.you.want.to.filter. |
76780 | 77 68 6f 20 61 72 65 20 76 61 6c 69 64 20 75 73 65 72 73 20 74 68 65 6e 20 79 6f 75 20 6e 65 65 | who.are.valid.users.then.you.nee |
767a0 | 64 20 74 6f 20 75 73 65 20 61 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 74 6f 20 73 65 61 72 | d.to.use.a.search.filter.to.sear |
767c0 | 63 68 20 66 6f 72 20 79 6f 75 72 20 75 73 65 72 73 20 44 4e 20 28 60 66 69 6c 74 65 72 2d 65 78 | ch.for.your.users.DN.(`filter-ex |
767e0 | 70 72 65 73 73 69 6f 6e 60 29 2e 00 54 68 69 73 20 63 68 61 70 65 74 65 72 20 64 65 73 63 72 69 | pression`)..This.chapeter.descri |
76800 | 62 65 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6b 65 72 6e 65 6c 20 70 61 72 61 | bes.how.to.configure.kernel.para |
76820 | 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 00 54 68 69 73 20 63 68 61 70 74 65 72 20 | meters.at.runtime..This.chapter. |
76840 | 64 65 73 63 72 69 62 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 6f 66 20 61 64 | describe.the.possibilities.of.ad |
76860 | 76 61 6e 63 65 64 20 73 79 73 74 65 6d 20 62 65 68 61 76 69 6f 72 2e 00 54 68 69 73 20 63 6f 6d | vanced.system.behavior..This.com |
76880 | 6d 61 64 20 73 65 74 73 20 6e 65 74 77 6f 72 6b 20 65 6e 74 69 74 79 20 74 69 74 6c 65 20 28 4e | mad.sets.network.entity.title.(N |
768a0 | 45 54 29 20 70 72 6f 76 69 64 65 64 20 69 6e 20 49 53 4f 20 66 6f 72 6d 61 74 2e 00 54 68 69 73 | ET).provided.in.ISO.format..This |
768c0 | 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 73 20 | .command.accept.incoming.routes. |
768e0 | 77 69 74 68 20 41 53 20 70 61 74 68 20 63 6f 6e 74 61 69 6e 69 6e 67 20 41 53 20 6e 75 6d 62 65 | with.AS.path.containing.AS.numbe |
76900 | 72 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 76 61 6c 75 65 20 61 73 20 74 68 65 20 63 75 72 | r.with.the.same.value.as.the.cur |
76920 | 72 65 6e 74 20 73 79 73 74 65 6d 20 41 53 2e 20 54 68 69 73 20 69 73 20 75 73 65 64 20 77 68 65 | rent.system.AS..This.is.used.whe |
76940 | 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 | n.you.want.to.use.the.same.AS.nu |
76960 | 6d 62 65 72 20 69 6e 20 79 6f 75 72 20 73 69 74 65 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e e2 | mber.in.your.sites,.but.you.can. |
76980 | 80 99 74 20 63 6f 6e 6e 65 63 74 20 74 68 65 6d 20 64 69 72 65 63 74 6c 79 2e 00 54 68 69 73 20 | ..t.connect.them.directly..This. |
769a0 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 72 65 73 75 6c | command.allow.override.the.resul |
769c0 | 74 20 6f 66 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 74 68 | t.of.Capability.Negotiation.with |
769e0 | 20 6c 6f 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 49 67 6e 6f 72 65 20 72 65 6d | .local.configuration..Ignore.rem |
76a00 | 6f 74 65 20 70 65 65 72 e2 80 99 73 20 63 61 70 61 62 69 6c 69 74 79 20 76 61 6c 75 65 2e 00 54 | ote.peer...s.capability.value..T |
76a20 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 70 65 65 72 69 6e 67 73 20 62 65 74 77 | his.command.allows.peerings.betw |
76a40 | 65 65 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 65 42 47 50 20 70 65 65 72 | een.directly.connected.eBGP.peer |
76a60 | 73 20 75 73 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 20 77 69 74 68 6f | s.using.loopback.addresses.witho |
76a80 | 75 74 20 61 64 6a 75 73 74 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 54 54 4c 20 6f 66 20 | ut.adjusting.the.default.TTL.of. |
76aa0 | 31 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 73 65 73 73 69 6f 6e 73 20 | 1..This.command.allows.sessions. |
76ac0 | 74 6f 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 20 65 42 47 50 20 6e 65 69 67 | to.be.established.with.eBGP.neig |
76ae0 | 68 62 6f 72 73 20 77 68 65 6e 20 74 68 65 79 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 68 6f 70 | hbors.when.they.are.multiple.hop |
76b00 | 73 20 61 77 61 79 2e 20 57 68 65 6e 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 69 73 20 6e 6f 74 | s.away..When.the.neighbor.is.not |
76b20 | 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 61 6e 64 20 74 68 69 73 20 6b 6e 6f | .directly.connected.and.this.kno |
76b40 | 62 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 | b.is.not.enabled,.the.session.wi |
76b60 | 6c 6c 20 6e 6f 74 20 65 73 74 61 62 6c 69 73 68 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 | ll.not.establish..The.number.of. |
76b80 | 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 20 54 68 69 73 20 63 6f 6d | hops.range.is.1.to.255..This.com |
76ba0 | 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 | mand.is.mutually.exclusive.with. |
76bc0 | 3a 63 66 67 63 6d 64 3a 60 74 74 6c 2d 73 65 63 75 72 69 74 79 20 68 6f 70 73 60 2e 00 54 68 69 | :cfgcmd:`ttl-security.hops`..Thi |
76be0 | 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 70 | s.command.allows.the.router.to.p |
76c00 | 72 65 66 65 72 20 72 6f 75 74 65 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 | refer.route.to.specified.prefix. |
76c20 | 6c 65 61 72 6e 65 64 20 76 69 61 20 49 47 50 20 74 68 72 6f 75 67 68 20 62 61 63 6b 64 6f 6f 72 | learned.via.IGP.through.backdoor |
76c40 | 20 6c 69 6e 6b 20 69 6e 73 74 65 61 64 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 20 | .link.instead.of.a.route.to.the. |
76c60 | 73 61 6d 65 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 20 45 42 47 50 2e 00 54 68 | same.prefix.learned.via.EBGP..Th |
76c80 | 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 6c 6f 67 20 63 68 61 6e 67 65 73 | is.command.allows.to.log.changes |
76ca0 | 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c | .in.adjacency..With.the.optional |
76cc0 | 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 61 6c 6c 20 | .:cfgcmd:`detail`.argument,.all. |
76ce0 | 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 20 73 74 61 74 75 73 20 61 72 65 20 | changes.in.adjacency.status.are. |
76d00 | 73 68 6f 77 6e 2e 20 57 69 74 68 6f 75 74 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 2c | shown..Without.:cfgcmd:`detail`, |
76d20 | 20 6f 6e 6c 79 20 63 68 61 6e 67 65 73 20 74 6f 20 66 75 6c 6c 20 6f 72 20 72 65 67 72 65 73 73 | .only.changes.to.full.or.regress |
76d40 | 69 6f 6e 73 20 61 72 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | ions.are.shown..This.command.all |
76d60 | 6f 77 73 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 | ows.to.specify.the.distribution. |
76d80 | 74 79 70 65 20 66 6f 72 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 65 64 20 74 | type.for.the.network.connected.t |
76da0 | 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 | o.this.interface:.This.command.a |
76dc0 | 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 | llows.to.use.route.map.to.filter |
76de0 | 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 67 69 76 65 6e | .redistributed.routes.from.given |
76e00 | 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f | .route.source..There.are.five.mo |
76e20 | 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 | des.available.for.route.source:. |
76e40 | 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 | bgp,.connected,.kernel,.ripng,.s |
76e60 | 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 | tatic..This.command.allows.to.us |
76e80 | 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 | e.route.map.to.filter.redistribu |
76ea0 | 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 | ted.routes.from.the.given.route. |
76ec0 | 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 | source..There.are.five.modes.ava |
76ee0 | 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f | ilable.for.route.source:.bgp,.co |
76f00 | 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 | nnected,.kernel,.ospf,.static..T |
76f20 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 | his.command.allows.to.use.route. |
76f40 | 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 | map.to.filter.redistributed.rout |
76f60 | 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 | es.from.the.given.route.source.. |
76f80 | 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | There.are.five.modes.available.f |
76fa0 | 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c | or.route.source:.bgp,.connected, |
76fc0 | 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | .kernel,.rip,.static..This.comma |
76fe0 | 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 | nd.allows.to.use.route.map.to.fi |
77000 | 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 | lter.redistributed.routes.from.t |
77020 | 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 | he.given.route.source..There.are |
77040 | 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 | .six.modes.available.for.route.s |
77060 | 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f | ource:.bgp,.connected,.kernel,.o |
77080 | 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 | spf,.rip,.static..This.command.a |
770a0 | 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 | llows.to.use.route.map.to.filter |
770c0 | 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 | .redistributed.routes..There.are |
770e0 | 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 | .six.modes.available.for.route.s |
77100 | 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 | ource:.connected,.kernel,.ospf,. |
77120 | 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | rip,.static,.table..This.command |
77140 | 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 | .allows.you.apply.access.lists.t |
77160 | 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 | o.a.chosen.interface.to.filter.t |
77180 | 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | he.Babel.routes..This.command.al |
771a0 | 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 | lows.you.apply.access.lists.to.a |
771c0 | 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 | .chosen.interface.to.filter.the. |
771e0 | 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f | RIP.path..This.command.allows.yo |
77200 | 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e | u.apply.prefix.lists.to.a.chosen |
77220 | 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 | .interface.to.filter.the.Babel.r |
77240 | 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 | outes..This.command.allows.you.a |
77260 | 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e | pply.prefix.lists.to.a.chosen.in |
77280 | 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 | terface.to.filter.the.RIP.path.. |
772a0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 65 6c 65 63 | This.command.allows.you.to.selec |
772c0 | 74 20 61 20 73 70 65 63 69 66 69 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 | t.a.specific.access.concentrator |
772e0 | 20 77 68 65 6e 20 79 6f 75 20 6b 6e 6f 77 20 74 68 65 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e | .when.you.know.the.access.concen |
77300 | 74 72 61 74 6f 72 73 20 60 3c 6e 61 6d 65 3e 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 | trators.`<name>`..This.command.a |
77320 | 70 70 6c 69 65 73 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 | pplies.route-map.to.selectively. |
77340 | 75 6e 73 75 70 70 72 65 73 73 20 70 72 65 66 69 78 65 73 20 73 75 70 70 72 65 73 73 65 64 20 62 | unsuppress.prefixes.suppressed.b |
77360 | 79 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 | y.summarisation..This.command.ap |
77380 | 70 6c 69 65 73 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 | plies.the.AS.path.access.list.fi |
773a0 | 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 | lters.named.in.<name>.to.the.spe |
773c0 | 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 | cified.BGP.neighbor.to.restrict. |
773e0 | 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 | the.routing.information.that.BGP |
77400 | 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 | .learns.and/or.advertises..The.a |
77420 | 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 | rguments.:cfgcmd:`export`.and.:c |
77440 | 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 | fgcmd:`import`.specify.the.direc |
77460 | 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 73 | tion.in.which.the.AS.path.access |
77480 | 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .list.are.applied..This.command. |
774a0 | 61 70 70 6c 69 65 73 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 | applies.the.access.list.filters. |
774c0 | 6e 61 6d 65 64 20 69 6e 20 3c 6e 75 6d 62 65 72 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 | named.in.<number>.to.the.specifi |
774e0 | 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 | ed.BGP.neighbor.to.restrict.the. |
77500 | 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 | routing.information.that.BGP.lea |
77520 | 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d | rns.and/or.advertises..The.argum |
77540 | 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d | ents.:cfgcmd:`export`.and.:cfgcm |
77560 | 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e | d:`import`.specify.the.direction |
77580 | 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 | .in.which.the.access.list.are.ap |
775a0 | 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 | plied..This.command.applies.the. |
775c0 | 70 72 66 65 66 69 78 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e | prfefix.list.filters.named.in.<n |
775e0 | 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 | ame>.to.the.specified.BGP.neighb |
77600 | 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 | or.to.restrict.the.routing.infor |
77620 | 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 | mation.that.BGP.learns.and/or.ad |
77640 | 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a | vertises..The.arguments.:cfgcmd: |
77660 | 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 | `export`.and.:cfgcmd:`import`.sp |
77680 | 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 | ecify.the.direction.in.which.the |
776a0 | 20 70 72 65 66 69 78 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 | .prefix.list.are.applied..This.c |
776c0 | 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 6e 61 6d | ommand.applies.the.route.map.nam |
776e0 | 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 | ed.in.<name>.to.the.specified.BG |
77700 | 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 | P.neighbor.to.control.and.modify |
77720 | 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 | .routing.information.that.is.exc |
77740 | 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 2e 20 54 68 65 20 61 72 67 75 6d 65 | hanged.between.peers..The.argume |
77760 | 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 | nts.:cfgcmd:`export`.and.:cfgcmd |
77780 | 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 | :`import`.specify.the.direction. |
777a0 | 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 20 61 70 70 6c 69 | in.which.the.route.map.are.appli |
777c0 | 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 62 69 6e 64 20 73 70 65 63 69 66 69 63 20 70 | ed..This.command.bind.specific.p |
777e0 | 65 65 72 20 74 6f 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 6e | eer.to.peer.group.with.a.given.n |
77800 | 61 6d 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | ame..This.command.can.be.used.to |
77820 | 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 61 | .filter.the.Babel.routes.using.a |
77840 | 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 | ccess.lists..:cfgcmd:`in`.and.:c |
77860 | 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f | fgcmd:`out`.this.is.the.directio |
77880 | 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 | n.in.which.the.access.lists.are. |
778a0 | 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 | applied..This.command.can.be.use |
778c0 | 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 | d.to.filter.the.Babel.routes.usi |
778e0 | 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e | ng.prefix.lists..:cfgcmd:`in`.an |
77900 | 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 | d.:cfgcmd:`out`.this.is.the.dire |
77920 | 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 | ction.in.which.the.prefix.lists. |
77940 | 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 | are.applied..This.command.can.be |
77960 | 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 | .used.to.filter.the.RIP.path.usi |
77980 | 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e | ng.access.lists..:cfgcmd:`in`.an |
779a0 | 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 | d.:cfgcmd:`out`.this.is.the.dire |
779c0 | 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 | ction.in.which.the.access.lists. |
779e0 | 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 | are.applied..This.command.can.be |
77a00 | 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 | .used.to.filter.the.RIP.path.usi |
77a20 | 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e | ng.prefix.lists..:cfgcmd:`in`.an |
77a40 | 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 | d.:cfgcmd:`out`.this.is.the.dire |
77a60 | 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 | ction.in.which.the.prefix.lists. |
77a80 | 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 | are.applied..This.command.can.be |
77aa0 | 20 75 73 65 64 20 77 69 74 68 20 70 72 65 76 69 6f 75 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | .used.with.previous.command.to.s |
77ac0 | 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 73 70 65 63 | ets.default.RIP.distance.to.spec |
77ae0 | 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 20 73 6f 75 72 63 | ified.value.when.the.route.sourc |
77b00 | 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 | e.IP.address.matches.the.specifi |
77b20 | 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 63 63 65 | ed.prefix.and.the.specified.acce |
77b40 | 73 73 2d 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 | ss-list..This.command.change.dis |
77b60 | 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 42 47 50 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 | tance.value.of.BGP..The.argument |
77b80 | 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 | s.are.the.distance.values.for.ex |
77ba0 | 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 | ternal.routes,.internal.routes.a |
77bc0 | 6e 64 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 | nd.local.routes.respectively..Th |
77be0 | 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 | e.distance.range.is.1.to.255..Th |
77c00 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 | is.command.change.distance.value |
77c20 | 20 6f 66 20 4f 53 50 46 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 | .of.OSPF.globally..The.distance. |
77c40 | 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | range.is.1.to.255..This.command. |
77c60 | 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 2e 20 54 | change.distance.value.of.OSPF..T |
77c80 | 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 | he.arguments.are.the.distance.va |
77ca0 | 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d | lues.for.external.routes,.inter- |
77cc0 | 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 | area.routes.and.intra-area.route |
77ce0 | 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e | s.respectively..The.distance.ran |
77d00 | 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 | ge.is.1.to.255..This.command.cha |
77d20 | 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 20 67 6c 6f | nge.distance.value.of.OSPFv3.glo |
77d40 | 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 | bally..The.distance.range.is.1.t |
77d60 | 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 | o.255..This.command.change.dista |
77d80 | 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 2e 20 54 68 65 20 61 72 67 75 6d 65 6e | nce.value.of.OSPFv3..The.argumen |
77da0 | 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 | ts.are.the.distance.values.for.e |
77dc0 | 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 | xternal.routes,.inter-area.route |
77de0 | 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 | s.and.intra-area.routes.respecti |
77e00 | 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f | vely..The.distance.range.is.1.to |
77e20 | 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 74 68 65 20 64 69 | .255..This.command.change.the.di |
77e40 | 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 52 49 50 2e 20 54 68 65 20 64 69 73 74 61 6e 63 | stance.value.of.RIP..The.distanc |
77e60 | 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | e.range.is.1.to.255..This.comman |
77e80 | 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 65 42 47 50 20 62 65 68 61 76 69 6f 72 20 6f 66 20 46 | d.changes.the.eBGP.behavior.of.F |
77ea0 | 52 52 2e 20 42 79 20 64 65 66 61 75 6c 74 20 46 52 52 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a | RR..By.default.FRR.enables.:rfc: |
77ec0 | 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 61 66 66 65 63 | `8212`.functionality.which.affec |
77ee0 | 74 73 20 68 6f 77 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 | ts.how.eBGP.routes.are.advertise |
77f00 | 64 2c 20 6e 61 6d 65 6c 79 20 6e 6f 20 72 6f 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 | d,.namely.no.routes.are.advertis |
77f20 | 65 64 20 61 63 72 6f 73 73 20 65 42 47 50 20 73 65 73 73 69 6f 6e 73 20 77 69 74 68 6f 75 74 20 | ed.across.eBGP.sessions.without. |
77f40 | 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 65 67 72 65 73 73 20 72 6f 75 74 65 2d 6d 61 70 2f 70 6f | some.sort.of.egress.route-map/po |
77f60 | 6c 69 63 79 20 69 6e 20 70 6c 61 63 65 2e 20 49 6e 20 56 79 4f 53 20 68 6f 77 65 76 65 72 20 77 | licy.in.place..In.VyOS.however.w |
77f80 | 65 20 68 61 76 65 20 74 68 69 73 20 52 46 43 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 64 69 | e.have.this.RFC.functionality.di |
77fa0 | 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e | sabled.by.default.so.that.we.can |
77fc0 | 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 | .preserve.backwards.compatibilit |
77fe0 | 79 20 77 69 74 68 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 56 79 4f 53 2e 20 57 | y.with.older.versions.of.VyOS..W |
78000 | 69 74 68 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 3a | ith.this.option.one.can.enable.: |
78020 | 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 74 6f 20 6f 70 65 72 | rfc:`8212`.functionality.to.oper |
78040 | 61 74 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 70 61 64 | ate..This.command.configures.pad |
78060 | 64 69 6e 67 20 6f 6e 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 74 6f 20 61 63 63 6f 6d 6d 6f | ding.on.hello.packets.to.accommo |
78080 | 64 61 74 65 20 61 73 79 6d 6d 65 74 72 69 63 61 6c 20 6d 61 78 69 6d 75 6d 20 74 72 61 6e 73 66 | date.asymmetrical.maximum.transf |
780a0 | 65 72 20 75 6e 69 74 73 20 28 4d 54 55 73 29 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 68 | er.units.(MTUs).from.different.h |
780c0 | 6f 73 74 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 31 39 60 | osts.as.described.in.:rfc:`3719` |
780e0 | 2e 20 54 68 69 73 20 68 65 6c 70 73 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 70 72 65 6d 61 74 | ..This.helps.to.prevent.a.premat |
78100 | 75 72 65 20 61 64 6a 61 63 65 6e 63 79 20 55 70 20 73 74 61 74 65 20 77 68 65 6e 20 6f 6e 65 20 | ure.adjacency.Up.state.when.one. |
78120 | 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 4d 54 55 20 64 6f 65 73 20 6e 6f 74 20 6d 65 65 | routing.devices.MTU.does.not.mee |
78140 | 74 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 | t.the.requirements.to.establish. |
78160 | 74 68 65 20 61 64 6a 61 63 65 6e 63 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 | the.adjacency..This.command.conf |
78180 | 69 67 75 72 65 73 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f | igures.the.authentication.passwo |
781a0 | 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | rd.for.the.interface..This.comma |
781c0 | 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f | nd.configures.the.maximum.size.o |
781e0 | 66 20 67 65 6e 65 72 61 74 65 64 20 3a 61 62 62 72 3a 60 4c 53 50 73 20 28 4c 69 6e 6b 20 53 74 | f.generated.:abbr:`LSPs.(Link.St |
78200 | 61 74 65 20 50 44 55 73 29 60 2c 20 69 6e 20 62 79 74 65 73 2e 20 54 68 65 20 73 69 7a 65 20 72 | ate.PDUs)`,.in.bytes..The.size.r |
78220 | 61 6e 67 65 20 69 73 20 31 32 38 20 74 6f 20 34 33 35 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ange.is.128.to.4352..This.comman |
78240 | 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 66 6f | d.configures.the.passive.mode.fo |
78260 | 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 | r.this.interface..This.command.c |
78280 | 72 65 61 74 65 73 20 61 20 6e 65 77 20 6e 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 72 65 6d 6f | reates.a.new.neighbor.whose.remo |
782a0 | 74 65 2d 61 73 20 69 73 20 3c 6e 61 73 6e 3e 2e 20 54 68 65 20 6e 65 69 67 68 62 6f 72 20 61 64 | te-as.is.<nasn>..The.neighbor.ad |
782c0 | 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 | dress.can.be.an.IPv4.address.or. |
782e0 | 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 | an.IPv6.address.or.an.interface. |
78300 | 74 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 20 63 | to.use.for.the.connection..The.c |
78320 | 6f 6d 6d 61 6e 64 20 69 73 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 61 6e | ommand.is.applicable.for.peer.an |
78340 | 64 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 | d.peer.group..This.command.creat |
78360 | 65 73 20 61 20 6e 65 77 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 | es.a.new.route-map.policy,.ident |
78380 | 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 | ified.by.<text>..This.command.cr |
783a0 | 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 61 63 63 | eates.a.new.rule.in.the.IPv6.acc |
783c0 | 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 | ess.list.and.defines.an.action.. |
783e0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 | This.command.creates.a.new.rule. |
78400 | 69 6e 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 | in.the.IPv6.prefix-list.and.defi |
78420 | 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 | nes.an.action..This.command.crea |
78440 | 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 | tes.a.new.rule.in.the.access.lis |
78460 | 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f | t.and.defines.an.action..This.co |
78480 | 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 | mmand.creates.a.new.rule.in.the. |
784a0 | 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f | prefix-list.and.defines.an.actio |
784c0 | 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 | n..This.command.creates.the.new. |
784e0 | 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 | IPv6.access.list,.identified.by. |
78500 | 3c 74 65 78 74 3e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 | <text>.This.command.creates.the. |
78520 | 6e 65 77 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 | new.IPv6.prefix-list.policy,.ide |
78540 | 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ntified.by.<text>..This.command. |
78560 | 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 61 63 63 65 73 73 20 6c 69 73 74 20 70 6f 6c 69 | creates.the.new.access.list.poli |
78580 | 63 79 2c 20 77 68 65 72 65 20 3c 61 63 6c 5f 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 61 | cy,.where.<acl_number>.must.be.a |
785a0 | 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 36 39 39 2e 00 54 68 69 73 20 63 6f 6d | .number.from.1.to.2699..This.com |
785c0 | 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 70 72 65 66 69 78 2d 6c 69 73 74 | mand.creates.the.new.prefix-list |
785e0 | 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 | .policy,.identified.by.<text>..T |
78600 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 6e 65 77 20 70 65 65 72 20 67 | his.command.defines.a.new.peer.g |
78620 | 72 6f 75 70 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 74 6f 20 74 68 65 20 67 72 6f | roup..You.can.specify.to.the.gro |
78640 | 75 70 20 74 68 65 20 73 61 6d 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 79 6f 75 20 | up.the.same.parameters.that.you. |
78660 | 63 61 6e 20 73 70 65 63 69 66 79 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f | can.specify.for.specific.neighbo |
78680 | 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e | rs..This.command.defines.matchin |
786a0 | 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 | g.parameters.for.IPv6.access.lis |
786c0 | 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 20 | t.rule..Matching.criteria.could. |
786e0 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a | be.applied.to.source.parameters: |
78700 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 | .This.command.defines.matching.p |
78720 | 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 | arameters.for.access.list.rule.. |
78740 | 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 | Matching.criteria.could.be.appli |
78760 | 65 64 20 74 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 72 20 73 6f 75 72 63 65 20 70 61 72 61 | ed.to.destination.or.source.para |
78780 | 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 | meters:.This.command.defines.the |
787a0 | 20 49 53 2d 49 53 20 72 6f 75 74 65 72 20 62 65 68 61 76 69 6f 72 3a 00 54 68 69 73 20 63 6f 6d | .IS-IS.router.behavior:.This.com |
787c0 | 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e | mand.defines.the.accumulated.pen |
787e0 | 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 | alty.amount.at.which.the.route.i |
78800 | 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e | s.re-advertised..The.penalty.ran |
78820 | 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | ge.is.1.to.20000..This.command.d |
78840 | 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 | efines.the.accumulated.penalty.a |
78860 | 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 | mount.at.which.the.route.is.supp |
78880 | 72 65 73 73 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 | ressed..The.penalty.range.is.1.t |
788a0 | 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 | o.20000..This.command.defines.th |
788c0 | 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 66 74 65 | e.amount.of.time.in.minutes.afte |
788e0 | 72 20 77 68 69 63 68 20 61 20 70 65 6e 61 6c 74 79 20 69 73 20 72 65 64 75 63 65 64 20 62 79 20 | r.which.a.penalty.is.reduced.by. |
78900 | 68 61 6c 66 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 34 | half..The.timer.range.is.10.to.4 |
78920 | 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 | 5.minutes..This.command.defines. |
78940 | 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 72 61 6c 6c 65 6c 20 72 | the.maximum.number.of.parallel.r |
78960 | 6f 75 74 65 73 20 74 68 61 74 20 74 68 65 20 42 47 50 20 63 61 6e 20 73 75 70 70 6f 72 74 2e 20 | outes.that.the.BGP.can.support.. |
78980 | 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 42 47 50 20 74 6f 20 75 73 65 20 74 68 65 20 73 65 63 6f | In.order.for.BGP.to.use.the.seco |
789a0 | 6e 64 20 70 61 74 68 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 74 74 72 69 62 75 74 65 | nd.path,.the.following.attribute |
789c0 | 73 20 68 61 76 65 20 74 6f 20 6d 61 74 63 68 3a 20 57 65 69 67 68 74 2c 20 4c 6f 63 61 6c 20 50 | s.have.to.match:.Weight,.Local.P |
789e0 | 72 65 66 65 72 65 6e 63 65 2c 20 41 53 20 50 61 74 68 20 28 62 6f 74 68 20 41 53 20 6e 75 6d 62 | reference,.AS.Path.(both.AS.numb |
78a00 | 65 72 20 61 6e 64 20 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 29 2c 20 4f 72 69 67 69 6e 20 63 | er.and.AS.path.length),.Origin.c |
78a20 | 6f 64 65 2c 20 4d 45 44 2c 20 49 47 50 20 6d 65 74 72 69 63 2e 20 41 6c 73 6f 2c 20 74 68 65 20 | ode,.MED,.IGP.metric..Also,.the. |
78a40 | 6e 65 78 74 20 68 6f 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 6d | next.hop.address.for.each.path.m |
78a60 | 75 73 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | ust.be.different..This.command.d |
78a80 | 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 | efines.the.maximum.time.in.minut |
78aa0 | 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 | es.that.a.route.is.suppressed..T |
78ac0 | 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 20 6d 69 6e 75 74 | he.timer.range.is.1.to.255.minut |
78ae0 | 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 | es..This.command.disable.the.pee |
78b00 | 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 20 54 6f 20 72 65 65 6e 61 62 6c 65 20 74 68 65 | r.or.peer.group..To.reenable.the |
78b20 | 20 70 65 65 72 20 75 73 65 20 74 68 65 20 64 65 6c 65 74 65 20 66 6f 72 6d 20 6f 66 20 74 68 69 | .peer.use.the.delete.form.of.thi |
78b40 | 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 | s.command..This.command.disables |
78b60 | 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 | .IGP-LDP.sync.for.this.specific. |
78b80 | 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 | interface..This.command.disables |
78ba0 | 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 66 6f 72 20 50 32 50 20 61 64 6a | .Three-Way.Handshake.for.P2P.adj |
78bc0 | 61 63 65 6e 63 69 65 73 20 77 68 69 63 68 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | acencies.which.described.in.:rfc |
78be0 | 3a 60 35 33 30 33 60 2e 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 69 73 20 | :`5303`..Three-Way.Handshake.is. |
78c00 | 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | enabled.by.default..This.command |
78c20 | 20 64 69 73 61 62 6c 65 73 20 63 68 65 63 6b 20 6f 66 20 74 68 65 20 4d 54 55 20 76 61 6c 75 65 | .disables.check.of.the.MTU.value |
78c40 | 20 69 6e 20 74 68 65 20 4f 53 50 46 20 44 42 44 20 70 61 63 6b 65 74 73 2e 20 54 68 75 73 2c 20 | .in.the.OSPF.DBD.packets..Thus,. |
78c60 | 75 73 65 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 4f | use.of.this.command.allows.the.O |
78c80 | 53 50 46 20 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 46 55 4c 4c 20 | SPF.adjacency.to.reach.the.FULL. |
78ca0 | 73 74 61 74 65 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 20 69 73 20 61 6e 20 69 6e | state.even.though.there.is.an.in |
78cc0 | 74 65 72 66 61 63 65 20 4d 54 55 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 77 6f | terface.MTU.mismatch.between.two |
78ce0 | 20 4f 53 50 46 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 | .OSPF.routers..This.command.disa |
78d00 | 62 6c 65 73 20 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 72 | bles.it..This.command.disables.r |
78d20 | 6f 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 20 72 65 | oute.reflection.between.route.re |
78d40 | 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 | flector.clients..By.default,.the |
78d60 | 20 63 6c 69 65 6e 74 73 20 6f 66 20 61 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 61 72 | .clients.of.a.route.reflector.ar |
78d80 | 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 20 74 6f 20 62 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 | e.not.required.to.be.fully.meshe |
78da0 | 64 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 61 20 63 6c 69 65 6e 74 20 61 | d.and.the.routes.from.a.client.a |
78dc0 | 72 65 20 72 65 66 6c 65 63 74 65 64 20 74 6f 20 6f 74 68 65 72 20 63 6c 69 65 6e 74 73 2e 20 48 | re.reflected.to.other.clients..H |
78de0 | 6f 77 65 76 65 72 2c 20 69 66 20 74 68 65 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 75 6c 6c 79 | owever,.if.the.clients.are.fully |
78e00 | 20 6d 65 73 68 65 64 2c 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 | .meshed,.route.reflection.is.not |
78e20 | 20 72 65 71 75 69 72 65 64 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 75 73 65 20 74 68 65 | .required..In.this.case,.use.the |
78e40 | 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 2d 72 65 | .:cfgcmd:`no-client-to-client-re |
78e60 | 66 6c 65 63 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 63 6c 69 | flection`.command.to.disable.cli |
78e80 | 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 20 72 65 66 6c 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 | ent-to-client.reflection..This.c |
78ea0 | 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e | ommand.disables.split-horizon.on |
78ec0 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 | .the.interface..By.default,.VyOS |
78ee0 | 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 52 49 50 20 72 6f 75 74 65 73 20 6f | .does.not.advertise.RIP.routes.o |
78f00 | 75 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 76 65 72 20 77 68 69 63 68 20 74 68 65 79 | ut.the.interface.over.which.they |
78f20 | 20 77 65 72 65 20 6c 65 61 72 6e 65 64 20 28 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 29 2e 33 00 | .were.learned.(split.horizon).3. |
78f40 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 6c 6f 61 64 20 73 | This.command.disables.the.load.s |
78f60 | 68 61 72 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 4c 46 41 20 62 61 63 6b 75 | haring.across.multiple.LFA.backu |
78f80 | 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 64 61 | ps..This.command.displays.BGP.da |
78fa0 | 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 | mpened.routes..This.command.disp |
78fc0 | 6c 61 79 73 20 42 47 50 20 72 65 63 65 69 76 65 64 2d 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 | lays.BGP.received-routes.that.ar |
78fe0 | 65 20 61 63 63 65 70 74 65 64 20 61 66 74 65 72 20 66 69 6c 74 65 72 69 6e 67 2e 00 54 68 69 73 | e.accepted.after.filtering..This |
79000 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 64 76 | .command.displays.BGP.routes.adv |
79020 | 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d | ertised.to.a.neighbor..This.comm |
79040 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 6c 6c 6f 77 65 64 20 | and.displays.BGP.routes.allowed. |
79060 | 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 41 53 20 50 61 74 68 20 61 63 63 65 73 73 20 | by.the.specified.AS.Path.access. |
79080 | 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 | list..This.command.displays.BGP. |
790a0 | 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 | routes.originating.from.the.spec |
790c0 | 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 62 65 66 6f 72 65 20 69 6e 62 6f 75 6e | ified.BGP.neighbor.before.inboun |
790e0 | 64 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 2e 20 54 6f 20 75 73 65 20 74 68 69 73 | d.policy.is.applied..To.use.this |
79100 | 20 63 6f 6d 6d 61 6e 64 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 | .command.inbound.soft.reconfigur |
79120 | 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | ation.must.be.enabled..This.comm |
79140 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 4c 53 41 73 20 69 6e 20 4d 61 78 41 67 65 20 6c 69 73 74 | and.displays.LSAs.in.MaxAge.list |
79160 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 52 49 50 20 72 6f 75 74 | ..This.command.displays.RIP.rout |
79180 | 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 64 61 74 61 | es..This.command.displays.a.data |
791a0 | 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6c 69 6e | base.contents.for.a.specific.lin |
791c0 | 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 74 79 70 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | k.advertisement.type..This.comma |
791e0 | 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 20 77 69 74 68 | nd.displays.a.summary.table.with |
79200 | 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 28 4c 53 41 29 2e 00 54 68 69 73 | .a.database.contents.(LSA)..This |
79220 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 74 61 62 6c 65 20 6f 66 20 70 61 74 | .command.displays.a.table.of.pat |
79240 | 68 73 20 74 6f 20 61 72 65 61 20 62 6f 75 6e 64 61 72 79 20 61 6e 64 20 61 75 74 6f 6e 6f 6d 6f | hs.to.area.boundary.and.autonomo |
79260 | 75 73 20 73 79 73 74 65 6d 20 62 6f 75 6e 64 61 72 79 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 | us.system.boundary.routers..This |
79280 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 69 6e | .command.displays.all.entries.in |
792a0 | 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .BGP.routing.table..This.command |
792c0 | 20 64 69 73 70 6c 61 79 73 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 | .displays.dampened.routes.receiv |
792e0 | 65 64 20 66 72 6f 6d 20 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ed.from.BGP.neighbor..This.comma |
79300 | 6e 64 20 64 69 73 70 6c 61 79 73 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | nd.displays.external.information |
79320 | 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 69 6e 74 6f 20 4f 53 50 46 76 33 00 54 68 69 73 20 | .redistributed.into.OSPFv3.This. |
79340 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f | command.displays.information.abo |
79360 | 75 74 20 42 47 50 20 72 6f 75 74 65 73 20 77 68 6f 73 65 20 41 53 20 70 61 74 68 20 6d 61 74 63 | ut.BGP.routes.whose.AS.path.matc |
79380 | 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 | hes.the.specified.regular.expres |
793a0 | 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f | sion..This.command.displays.info |
793c0 | 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 6c 61 70 70 69 6e 67 20 42 47 50 20 72 6f 75 74 65 | rmation.about.flapping.BGP.route |
793e0 | 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 | s..This.command.displays.informa |
79400 | 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 70 61 72 74 69 63 75 6c 61 72 20 65 6e 74 72 79 20 | tion.about.the.particular.entry. |
79420 | 69 6e 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 | in.the.BGP.routing.table..This.c |
79440 | 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 | ommand.displays.routes.that.are. |
79460 | 70 65 72 6d 69 74 74 65 64 20 62 79 20 74 68 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 6c | permitted.by.the.BGP.community.l |
79480 | 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 | ist..This.command.displays.route |
794a0 | 73 20 74 68 61 74 20 62 65 6c 6f 6e 67 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 63 | s.that.belong.to.specified.BGP.c |
794c0 | 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 56 61 6c 69 64 20 76 61 6c 75 65 20 69 73 20 61 20 63 6f 6d | ommunities..Valid.value.is.a.com |
794e0 | 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 | munity.number.in.the.range.from. |
79500 | 31 20 74 6f 20 34 32 39 34 39 36 37 32 30 30 2c 20 6f 72 20 41 41 3a 4e 4e 20 28 61 75 74 6f 6e | 1.to.4294967200,.or.AA:NN.(auton |
79520 | 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2d 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 2f 32 2d | omous.system-community.number/2- |
79540 | 62 79 74 65 20 6e 75 6d 62 65 72 29 2c 20 6e 6f 2d 65 78 70 6f 72 74 2c 20 6c 6f 63 61 6c 2d 61 | byte.number),.no-export,.local-a |
79560 | 73 2c 20 6f 72 20 6e 6f 2d 61 64 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | s,.or.no-advertise..This.command |
79580 | 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 77 69 74 68 20 63 6c 61 73 73 6c 65 73 73 20 | .displays.routes.with.classless. |
795a0 | 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 28 43 49 44 52 29 2e 00 54 68 69 73 | interdomain.routing.(CIDR)..This |
795c0 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 | .command.displays.state.and.conf |
795e0 | 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | iguration.of.OSPF.the.specified. |
79600 | 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 | interface,.or.all.interfaces.if. |
79620 | 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e 00 54 68 69 73 20 63 6f 6d 6d | no.interface.is.given..This.comm |
79640 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 | and.displays.state.and.configura |
79660 | 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 | tion.of.OSPF.the.specified.inter |
79680 | 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e | face,.or.all.interfaces.if.no.in |
796a0 | 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e 20 57 68 69 74 68 20 74 68 65 20 61 72 67 75 | terface.is.given..Whith.the.argu |
796c0 | 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 60 20 74 68 69 73 20 63 6f 6d 6d 61 | ment.:cfgcmd:`prefix`.this.comma |
796e0 | 6e 64 20 73 68 6f 77 73 20 63 6f 6e 6e 65 63 74 65 64 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 | nd.shows.connected.prefixes.to.a |
79700 | 64 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 | dvertise..This.command.displays. |
79720 | 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 | the.OSPF.routing.table,.as.deter |
79740 | 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c | mined.by.the.most.recent.SPF.cal |
79760 | 63 75 6c 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 | culation..This.command.displays. |
79780 | 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 | the.OSPF.routing.table,.as.deter |
797a0 | 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c | mined.by.the.most.recent.SPF.cal |
797c0 | 63 75 6c 61 74 69 6f 6e 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 | culation..With.the.optional.:cfg |
797e0 | 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 65 61 63 68 20 72 6f 75 74 | cmd:`detail`.argument,.each.rout |
79800 | 65 20 69 74 65 6d 27 73 20 61 64 76 65 72 74 69 73 65 72 20 72 6f 75 74 65 72 20 61 6e 64 20 6e | e.item's.advertiser.router.and.n |
79820 | 65 74 77 6f 72 6b 20 61 74 74 72 69 62 75 74 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 2e 00 | etwork.attribute.will.be.shown.. |
79840 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 | This.command.displays.the.neighb |
79860 | 6f 72 20 44 52 20 63 68 6f 69 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 | or.DR.choice.information..This.c |
79880 | 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e | ommand.displays.the.neighbors.in |
798a0 | 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 20 66 6f 72 | formation.in.a.detailed.form.for |
798c0 | 20 61 20 6e 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 | .a.neighbor.whose.IP.address.is. |
798e0 | 73 70 65 63 69 66 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | specified..This.command.displays |
79900 | 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 | .the.neighbors.information.in.a. |
79920 | 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 2c 20 6e 6f 74 20 6a 75 73 74 20 61 20 73 75 6d 6d 61 72 | detailed.form,.not.just.a.summar |
79940 | 79 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 | y.table..This.command.displays.t |
79960 | 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 20 66 6f 72 20 61 20 6e 65 69 67 68 62 | he.neighbors.status.for.a.neighb |
79980 | 6f 72 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 54 | or.on.the.specified.interface..T |
799a0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f | his.command.displays.the.neighbo |
799c0 | 72 73 20 73 74 61 74 75 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | rs.status..This.command.displays |
799e0 | 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f | .the.status.of.all.BGP.connectio |
79a00 | 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 | ns..This.command.enable.logging. |
79a20 | 6e 65 69 67 68 62 6f 72 20 75 70 2f 64 6f 77 6e 20 63 68 61 6e 67 65 73 20 61 6e 64 20 72 65 73 | neighbor.up/down.changes.and.res |
79a40 | 65 74 20 72 65 61 73 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 2f 64 | et.reason..This.command.enable/d |
79a60 | 69 73 61 62 6c 65 73 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f | isables.summarisation.for.the.co |
79a80 | 6e 66 69 67 75 72 65 64 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 2e 00 54 68 69 73 20 63 6f 6d | nfigured.address.range..This.com |
79aa0 | 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 | mand.enables.:abbr:`BFD.(Bidirec |
79ac0 | 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 60 20 6f 6e | tional.Forwarding.Detection)`.on |
79ae0 | 20 74 68 69 73 20 4f 53 50 46 20 6c 69 6e 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 | .this.OSPF.link.interface..This. |
79b00 | 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 36 32 33 32 60 20 70 75 72 67 | command.enables.:rfc:`6232`.purg |
79b20 | 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 2e 20 45 6e 61 | e.originator.identification..Ena |
79b40 | 62 6c 65 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 74 | ble.purge.originator.identificat |
79b60 | 69 6f 6e 20 28 50 4f 49 29 20 62 79 20 61 64 64 69 6e 67 20 74 68 65 20 74 79 70 65 2c 20 6c 65 | ion.(POI).by.adding.the.type,.le |
79b80 | 6e 67 74 68 20 61 6e 64 20 76 61 6c 75 65 20 28 54 4c 56 29 20 77 69 74 68 20 74 68 65 20 49 6e | ngth.and.value.(TLV).with.the.In |
79ba0 | 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 29 20 69 64 65 6e 74 69 66 69 63 | termediate.System.(IS).identific |
79bc0 | 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 4c 53 50 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 63 6f | ation.to.the.LSPs.that.do.not.co |
79be0 | 6e 74 61 69 6e 20 50 4f 49 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 6e 20 49 53 20 | ntain.POI.information..If.an.IS. |
79c00 | 67 65 6e 65 72 61 74 65 73 20 61 20 70 75 72 67 65 2c 20 56 79 4f 53 20 61 64 64 73 20 74 68 69 | generates.a.purge,.VyOS.adds.thi |
79c20 | 73 20 54 4c 56 20 77 69 74 68 20 74 68 65 20 73 79 73 74 65 6d 20 49 44 20 6f 66 20 74 68 65 20 | s.TLV.with.the.system.ID.of.the. |
79c40 | 49 53 20 74 6f 20 74 68 65 20 70 75 72 67 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e | IS.to.the.purge..This.command.en |
79c60 | 61 62 6c 65 73 20 49 50 20 66 61 73 74 20 72 65 2d 72 6f 75 74 69 6e 67 20 74 68 61 74 20 69 73 | ables.IP.fast.re-routing.that.is |
79c80 | 20 70 61 72 74 20 6f 66 20 3a 72 66 63 3a 60 35 32 38 36 60 2e 20 53 70 65 63 69 66 69 63 61 6c | .part.of.:rfc:`5286`..Specifical |
79ca0 | 6c 79 20 74 68 69 73 20 69 73 20 61 20 70 72 65 66 69 78 20 6c 69 73 74 20 77 68 69 63 68 20 72 | ly.this.is.a.prefix.list.which.r |
79cc0 | 65 66 65 72 65 6e 63 65 73 20 61 20 70 72 65 66 69 78 20 69 6e 20 77 68 69 63 68 20 77 69 6c 6c | eferences.a.prefix.in.which.will |
79ce0 | 20 73 65 6c 65 63 74 20 65 6c 69 67 69 62 6c 65 20 50 51 20 6e 6f 64 65 73 20 66 6f 72 20 72 65 | .select.eligible.PQ.nodes.for.re |
79d00 | 6d 6f 74 65 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 | mote.LFA.backups..This.command.e |
79d20 | 6e 61 62 6c 65 73 20 49 53 2d 49 53 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2c 20 | nables.IS-IS.on.this.interface,. |
79d40 | 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 6f 63 63 75 | and.allows.for.adjacency.to.occu |
79d60 | 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 49 53 2d 49 53 20 69 | r..Note.that.the.name.of.IS-IS.i |
79d80 | 6e 73 74 61 6e 63 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 | nstance.must.be.the.same.as.the. |
79da0 | 6f 6e 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 53 2d 49 53 20 | one.used.to.configure.the.IS-IS. |
79dc0 | 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 52 49 | process..This.command.enables.RI |
79de0 | 50 20 61 6e 64 20 73 65 74 73 20 74 68 65 20 52 49 50 20 65 6e 61 62 6c 65 20 69 6e 74 65 72 66 | P.and.sets.the.RIP.enable.interf |
79e00 | 61 63 65 20 62 79 20 4e 45 54 57 4f 52 4b 2e 20 54 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 | ace.by.NETWORK..The.interfaces.w |
79e20 | 68 69 63 68 20 68 61 76 65 20 61 64 64 72 65 73 73 65 73 20 6d 61 74 63 68 69 6e 67 20 77 69 74 | hich.have.addresses.matching.wit |
79e40 | 68 20 4e 45 54 57 4f 52 4b 20 61 72 65 20 65 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | h.NETWORK.are.enabled..This.comm |
79e60 | 61 6e 64 20 65 6e 61 62 6c 65 73 20 70 6f 69 73 6f 6e 2d 72 65 76 65 72 73 65 20 6f 6e 20 74 68 | and.enables.poison-reverse.on.th |
79e80 | 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 62 6f 74 68 20 70 6f 69 73 6f 6e 20 72 65 76 65 | e.interface..If.both.poison.reve |
79ea0 | 72 73 65 20 61 6e 64 20 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 20 61 72 65 20 65 6e 61 62 6c 65 | rse.and.split.horizon.are.enable |
79ec0 | 64 2c 20 74 68 65 6e 20 56 79 4f 53 20 61 64 76 65 72 74 69 73 65 73 20 74 68 65 20 6c 65 61 72 | d,.then.VyOS.advertises.the.lear |
79ee0 | 6e 65 64 20 72 6f 75 74 65 73 20 61 73 20 75 6e 72 65 61 63 68 61 62 6c 65 20 6f 76 65 72 20 74 | ned.routes.as.unreachable.over.t |
79f00 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 | he.interface.on.which.the.route. |
79f20 | 77 61 73 20 6c 65 61 72 6e 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 | was.learned..This.command.enable |
79f40 | 73 20 72 6f 75 74 69 6e 67 20 75 73 69 6e 67 20 72 61 64 69 6f 20 66 72 65 71 75 65 6e 63 79 20 | s.routing.using.radio.frequency. |
79f60 | 64 69 76 65 72 73 69 74 79 2e 20 54 68 69 73 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d | diversity..This.is.highly.recomm |
79f80 | 65 6e 64 65 64 20 69 6e 20 6e 65 74 77 6f 72 6b 73 20 77 69 74 68 20 6d 61 6e 79 20 77 69 72 65 | ended.in.networks.with.many.wire |
79fa0 | 6c 65 73 73 20 6e 6f 64 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 | less.nodes..This.command.enables |
79fc0 | 20 73 65 6e 64 69 6e 67 20 74 69 6d 65 73 74 61 6d 70 73 20 77 69 74 68 20 65 61 63 68 20 48 65 | .sending.timestamps.with.each.He |
79fe0 | 6c 6c 6f 20 61 6e 64 20 49 48 55 20 6d 65 73 73 61 67 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 | llo.and.IHU.message.in.order.to. |
7a000 | 63 6f 6d 70 75 74 65 20 52 54 54 20 76 61 6c 75 65 73 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d | compute.RTT.values..It.is.recomm |
7a020 | 65 6e 64 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 69 6d 65 73 74 61 6d 70 73 20 6f 6e 20 74 75 | ended.to.enable.timestamps.on.tu |
7a040 | 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e | nnel.interfaces..This.command.en |
7a060 | 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 | ables.support.for.dynamic.hostna |
7a080 | 6d 65 20 54 4c 56 2e 20 44 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 | me.TLV..Dynamic.hostname.mapping |
7a0a0 | 20 64 65 74 65 72 6d 69 6e 65 64 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | .determined.as.described.in.:rfc |
7a0c0 | 3a 60 32 37 36 33 60 2c 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 6e 61 6d 65 20 45 78 63 68 61 6e | :`2763`,.Dynamic.Hostname.Exchan |
7a0e0 | 67 65 20 4d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 49 53 2d 49 53 2e 00 54 68 69 73 20 63 6f 6d | ge.Mechanism.for.IS-IS..This.com |
7a100 | 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 74 68 65 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 | mand.enables.the.ORF.capability. |
7a120 | 28 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 32 39 31 60 29 20 6f 6e 20 74 68 | (described.in.:rfc:`5291`).on.th |
7a140 | 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 52 46 20 | e.local.router,.and.enables.ORF. |
7a160 | 63 61 70 61 62 69 6c 69 74 79 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 74 6f 20 74 68 65 20 | capability.advertisement.to.the. |
7a180 | 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 72 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a | specified.BGP.peer..The.:cfgcmd: |
7a1a0 | 60 72 65 63 65 69 76 65 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 | `receive`.keyword.configures.a.r |
7a1c0 | 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 20 72 65 63 65 69 76 65 20 63 | outer.to.advertise.ORF.receive.c |
7a1e0 | 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 73 65 6e 64 60 20 | apabilities..The.:cfgcmd:`send`. |
7a200 | 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 | keyword.configures.a.router.to.a |
7a220 | 64 76 65 72 74 69 73 65 20 4f 52 46 20 73 65 6e 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 | dvertise.ORF.send.capabilities.. |
7a240 | 54 6f 20 61 64 76 65 72 74 69 73 65 20 61 20 66 69 6c 74 65 72 20 66 72 6f 6d 20 61 20 73 65 6e | To.advertise.a.filter.from.a.sen |
7a260 | 64 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 6e 20 49 50 20 70 72 65 66 69 | der,.you.must.create.an.IP.prefi |
7a280 | 78 20 6c 69 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 | x.list.for.the.specified.BGP.pee |
7a2a0 | 72 20 61 70 70 6c 69 65 64 20 69 6e 20 69 6e 62 6f 75 6e 64 20 64 65 72 65 63 74 69 6f 6e 2e 00 | r.applied.in.inbound.derection.. |
7a2c0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 66 6f 72 63 65 73 20 47 65 6e 65 72 61 6c 69 7a 65 | This.command.enforces.Generalize |
7a2e0 | 64 20 54 54 4c 20 53 65 63 75 72 69 74 79 20 4d 65 63 68 61 6e 69 73 6d 20 28 47 54 53 4d 29 2c | d.TTL.Security.Mechanism.(GTSM), |
7a300 | 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 30 38 32 60 2e 20 57 69 | .as.specified.in.:rfc:`5082`..Wi |
7a320 | 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 6f 6e 6c 79 20 6e 65 69 67 68 62 6f 72 73 20 | th.this.command,.only.neighbors. |
7a340 | 74 68 61 74 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 | that.are.specified.number.of.hop |
7a360 | 73 20 61 77 61 79 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 62 65 63 6f 6d 65 | s.away.will.be.allowed.to.become |
7a380 | 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 | .neighbors..The.number.of.hops.r |
7a3a0 | 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 34 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 | ange.is.1.to.254..This.command.i |
7a3c0 | 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d | s.mutually.exclusive.with.:cfgcm |
7a3e0 | 64 3a 60 65 62 67 70 2d 6d 75 6c 74 69 68 6f 70 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | d:`ebgp-multihop`..This.command. |
7a400 | 66 6f 72 63 65 73 20 73 74 72 69 63 74 6c 79 20 63 6f 6d 70 61 72 65 20 72 65 6d 6f 74 65 20 63 | forces.strictly.compare.remote.c |
7a420 | 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 63 61 70 61 62 69 6c 69 74 69 | apabilities.and.local.capabiliti |
7a440 | 65 73 2e 20 49 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 72 65 20 64 69 66 66 65 72 65 6e | es..If.capabilities.are.differen |
7a460 | 74 2c 20 73 65 6e 64 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 | t,.send.Unsupported.Capability.e |
7a480 | 72 72 6f 72 20 74 68 65 6e 20 72 65 73 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 69 73 | rror.then.reset.connection..This |
7a4a0 | 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 | .command.forces.the.BGP.speaker. |
7a4c0 | 74 6f 20 72 65 70 6f 72 74 20 69 74 73 65 6c 66 20 61 73 20 74 68 65 20 6e 65 78 74 20 68 6f 70 | to.report.itself.as.the.next.hop |
7a4e0 | 20 66 6f 72 20 61 6e 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 74 65 20 69 74 20 61 64 76 65 | .for.an.advertised.route.it.adve |
7a500 | 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | rtised.to.a.neighbor..This.comma |
7a520 | 6e 64 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f | nd.generate.a.default.route.into |
7a540 | 20 74 68 65 20 52 49 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 69 76 65 73 20 61 20 62 | .the.RIP..This.command.gives.a.b |
7a560 | 72 69 65 66 20 73 74 61 74 75 73 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 70 65 63 69 66 | rief.status.overview.of.a.specif |
7a580 | 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 | ied.wireless.interface..The.wire |
7a5a0 | 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 | less.interface.identifier.can.ra |
7a5c0 | 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 | nge.from.wlan0.to.wlan999..This. |
7a5e0 | 63 6f 6d 6d 61 6e 64 20 67 6f 65 73 20 68 61 6e 64 20 69 6e 20 68 61 6e 64 20 77 69 74 68 20 74 | command.goes.hand.in.hand.with.t |
7a600 | 68 65 20 6c 69 73 74 65 6e 20 72 61 6e 67 65 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6d 69 74 | he.listen.range.command.to.limit |
7a620 | 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 | .the.amount.of.BGP.neighbors.tha |
7a640 | 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 | t.are.allowed.to.connect.to.the. |
7a660 | 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6c 69 6d 69 74 20 72 61 6e 67 65 20 69 73 | local.router..The.limit.range.is |
7a680 | 20 31 20 74 6f 20 35 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 74 20 61 64 64 | .1.to.5000..This.command.got.add |
7a6a0 | 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 69 6e 76 65 72 74 73 20 74 68 65 20 6c | ed.in.VyOS.1.4.and.inverts.the.l |
7a6c0 | 6f 67 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 6c 64 20 60 60 64 65 66 61 75 6c 74 2d 72 6f 75 74 | ogic.from.the.old.``default-rout |
7a6e0 | 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 73 | e``.CLI.option..This.command.ins |
7a700 | 74 65 61 64 20 6f 66 20 73 75 6d 6d 61 72 69 7a 69 6e 67 20 69 6e 74 72 61 20 61 72 65 61 20 70 | tead.of.summarizing.intra.area.p |
7a720 | 61 74 68 73 20 66 69 6c 74 65 72 20 74 68 65 6d 20 2d 20 69 2e 65 2e 20 69 6e 74 72 61 20 61 72 | aths.filter.them.-.i.e..intra.ar |
7a740 | 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 74 68 69 73 20 72 61 6e 67 65 20 61 72 65 20 6e 6f 74 | ea.paths.from.this.range.are.not |
7a760 | 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 | .advertised.into.other.areas..Th |
7a780 | 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e | is.command.makes.sense.in.ABR.on |
7a7a0 | 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f | ly..This.command.is.also.used.to |
7a7c0 | 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 | .enable.the.OSPF.process..The.ar |
7a7e0 | 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 | ea.number.can.be.specified.in.de |
7a800 | 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d | cimal.notation.in.the.range.from |
7a820 | 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 | .0.to.4294967295..Or.it.can.be.s |
7a840 | 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 | pecified.in.dotted.decimal.notat |
7a860 | 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 | ion.similar.to.ip.address..This. |
7a880 | 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 | command.is.only.allowed.for.eBGP |
7a8a0 | 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c | .peers..This.command.is.only.all |
7a8c0 | 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 20 49 74 20 69 73 20 6e 6f 74 20 61 | owed.for.eBGP.peers..It.is.not.a |
7a8e0 | 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 | pplicable.for.peer.groups..This. |
7a900 | 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 61 74 20 73 63 61 6c 65 20 | command.is.only.useful.at.scale. |
7a920 | 77 68 65 6e 20 79 6f 75 20 63 61 6e 20 70 6f 73 73 69 62 6c 79 20 68 61 76 65 20 61 20 6c 61 72 | when.you.can.possibly.have.a.lar |
7a940 | 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 50 49 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 | ge.number.of.PIM.control.packets |
7a960 | 20 66 6c 6f 77 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 73 70 65 63 69 66 | .flowing..This.command.is.specif |
7a980 | 69 63 20 74 6f 20 46 52 52 20 61 6e 64 20 56 79 4f 53 2e 20 54 68 65 20 72 6f 75 74 65 20 63 6f | ic.to.FRR.and.VyOS..The.route.co |
7a9a0 | 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 6f 6e 6c 79 20 | mmand.makes.a.static.route.only. |
7a9c0 | 69 6e 73 69 64 65 20 52 49 50 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 | inside.RIP..This.command.should. |
7a9e0 | 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 62 79 20 61 64 76 61 6e 63 65 64 20 75 73 65 72 73 20 77 | be.used.only.by.advanced.users.w |
7aa00 | 68 6f 20 61 72 65 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 6b 6e 6f 77 6c 65 64 67 65 61 62 6c | ho.are.particularly.knowledgeabl |
7aa20 | 65 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 6e 20 6d 6f 73 | e.about.the.RIP.protocol..In.mos |
7aa40 | 74 20 63 61 73 65 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 63 72 65 61 74 69 6e 67 20 61 | t.cases,.we.recommend.creating.a |
7aa60 | 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 64 69 73 74 | .static.route.in.VyOS.and.redist |
7aa80 | 72 69 62 75 74 69 6e 67 20 69 74 20 69 6e 20 52 49 50 20 75 73 69 6e 67 20 3a 63 66 67 63 6d 64 | ributing.it.in.RIP.using.:cfgcmd |
7aaa0 | 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 73 74 61 74 69 63 60 2e 00 54 68 69 73 20 63 6f 6d | :`redistribute.static`..This.com |
7aac0 | 6d 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 49 50 76 | mand.is.used.for.advertising.IPv |
7aae0 | 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | 4.or.IPv6.networks..This.command |
7ab00 | 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .is.used.to.retrieve.information |
7ab20 | 20 61 62 6f 75 74 20 57 41 50 20 77 69 74 68 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 79 | .about.WAP.within.the.range.of.y |
7ab40 | 6f 75 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d | our.wireless.interface..This.com |
7ab60 | 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 | mand.is.useful.on.wireless.inter |
7ab80 | 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 6d 6f 64 65 | faces.configured.in.station.mode |
7aba0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 6f 6e 65 20 | ..This.command.is.useful.if.one. |
7abc0 | 64 65 73 69 72 65 73 20 74 6f 20 6c 6f 6f 73 65 6e 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e | desires.to.loosen.the.requiremen |
7abe0 | 74 20 66 6f 72 20 42 47 50 20 74 6f 20 68 61 76 65 20 73 74 72 69 63 74 6c 79 20 64 65 66 69 6e | t.for.BGP.to.have.strictly.defin |
7ac00 | 65 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 53 70 65 63 69 66 69 63 61 6c 6c 79 20 77 68 61 74 20 | ed.neighbors..Specifically.what. |
7ac20 | 69 73 20 61 6c 6c 6f 77 65 64 20 69 73 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 | is.allowed.is.for.the.local.rout |
7ac40 | 65 72 20 74 6f 20 6c 69 73 74 65 6e 20 74 6f 20 61 20 72 61 6e 67 65 20 6f 66 20 49 50 76 34 20 | er.to.listen.to.a.range.of.IPv4. |
7ac60 | 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 64 65 66 69 6e 65 64 20 62 79 20 61 20 70 | or.IPv6.addresses.defined.by.a.p |
7ac80 | 72 65 66 69 78 20 61 6e 64 20 74 6f 20 61 63 63 65 70 74 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 | refix.and.to.accept.BGP.open.mes |
7aca0 | 73 61 67 65 73 2e 20 57 68 65 6e 20 61 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 6e | sages..When.a.TCP.connection.(an |
7acc0 | 64 20 73 75 62 73 65 71 75 65 6e 74 6c 79 20 61 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 | d.subsequently.a.BGP.open.messag |
7ace0 | 65 29 20 66 72 6f 6d 20 77 69 74 68 69 6e 20 74 68 69 73 20 72 61 6e 67 65 20 74 72 69 65 73 20 | e).from.within.this.range.tries. |
7ad00 | 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 68 65 6e | to.connect.the.local.router.then |
7ad20 | 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 61 | .the.local.router.will.respond.a |
7ad40 | 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 | nd.connect.with.the.parameters.t |
7ad60 | 68 61 74 20 61 72 65 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 70 65 65 72 20 | hat.are.defined.within.the.peer. |
7ad80 | 67 72 6f 75 70 2e 20 4f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 70 65 65 72 2d 67 72 | group..One.must.define.a.peer-gr |
7ada0 | 6f 75 70 20 66 6f 72 20 65 61 63 68 20 72 61 6e 67 65 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 | oup.for.each.range.that.is.liste |
7adc0 | 64 2e 20 49 66 20 6e 6f 20 70 65 65 72 2d 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 20 74 | d..If.no.peer-group.is.defined.t |
7ade0 | 68 65 6e 20 61 6e 20 65 72 72 6f 72 20 77 69 6c 6c 20 6b 65 65 70 20 79 6f 75 20 66 72 6f 6d 20 | hen.an.error.will.keep.you.from. |
7ae00 | 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 | committing.the.configuration..Th |
7ae20 | 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 | is.command.modifies.the.default. |
7ae40 | 6d 65 74 72 69 63 20 28 68 6f 70 20 63 6f 75 6e 74 29 20 76 61 6c 75 65 20 66 6f 72 20 72 65 64 | metric.(hop.count).value.for.red |
7ae60 | 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 | istributed.routes..The.metric.ra |
7ae80 | 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | nge.is.1.to.16..The.default.valu |
7aea0 | 65 20 69 73 20 31 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 61 66 | e.is.1..This.command.does.not.af |
7aec0 | 66 65 63 74 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 20 65 76 65 6e 20 69 66 20 69 74 20 | fect.connected.route.even.if.it. |
7aee0 | 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 | is.redistributed.by.:cfgcmd:`red |
7af00 | 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 60 2e 20 54 6f 20 6d 6f 64 69 66 79 20 | istribute.connected`..To.modify. |
7af20 | 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2c 20 70 | connected.routes.metric.value,.p |
7af40 | 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 | lease.use.:cfgcmd:`redistribute. |
7af60 | 63 6f 6e 6e 65 63 74 65 64 20 6d 65 74 72 69 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | connected.metric`..This.command. |
7af80 | 6f 76 65 72 72 69 64 65 20 41 53 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 6f 72 69 67 69 6e | override.AS.number.of.the.origin |
7afa0 | 61 74 69 6e 67 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 6c 6f 63 61 6c 20 41 53 20 6e | ating.router.with.the.local.AS.n |
7afc0 | 75 6d 62 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 65 76 65 6e 74 73 20 66 72 6f | umber..This.command.prevents.fro |
7afe0 | 6d 20 73 65 6e 64 69 6e 67 20 62 61 63 6b 20 70 72 65 66 69 78 65 73 20 6c 65 61 72 6e 65 64 20 | m.sending.back.prefixes.learned. |
7b000 | 66 72 6f 6d 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | from.the.neighbor..This.command. |
7b020 | 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 4d 45 | provides.to.compare.different.ME |
7b040 | 44 20 76 61 6c 75 65 73 20 74 68 61 74 20 61 64 76 65 72 74 69 73 65 64 20 62 79 20 6e 65 69 67 | D.values.that.advertised.by.neig |
7b060 | 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 66 6f 72 20 72 6f 75 74 65 73 | hbours.in.the.same.AS.for.routes |
7b080 | 20 73 65 6c 65 63 74 69 6f 6e 2e 20 57 68 65 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 | .selection..When.this.command.is |
7b0a0 | 20 65 6e 61 62 6c 65 64 2c 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 61 | .enabled,.routes.from.the.same.a |
7b0c0 | 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 61 72 65 20 67 72 6f 75 70 65 64 20 74 6f 67 | utonomous.system.are.grouped.tog |
7b0e0 | 65 74 68 65 72 2c 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 6e 74 72 69 65 73 20 6f 66 20 65 | ether,.and.the.best.entries.of.e |
7b100 | 61 63 68 20 67 72 6f 75 70 20 61 72 65 20 63 6f 6d 70 61 72 65 64 2e 00 54 68 69 73 20 63 6f 6d | ach.group.are.compared..This.com |
7b120 | 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 74 68 65 20 4d 45 44 | mand.provides.to.compare.the.MED |
7b140 | 20 6f 6e 20 72 6f 75 74 65 73 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 79 20 77 65 72 65 20 | .on.routes,.even.when.they.were. |
7b160 | 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 6e 65 69 67 68 62 6f 75 | received.from.different.neighbou |
7b180 | 72 69 6e 67 20 41 53 65 73 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6d | ring.ASes..Setting.this.option.m |
7b1a0 | 61 6b 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 6f 66 20 | akes.the.order.of.preference.of. |
7b1c0 | 72 6f 75 74 65 73 20 6d 6f 72 65 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 | routes.more.defined,.and.should. |
7b1e0 | 65 6c 69 6d 69 6e 61 74 65 20 4d 45 44 20 69 6e 64 75 63 65 64 20 6f 73 63 69 6c 6c 61 74 69 6f | eliminate.MED.induced.oscillatio |
7b200 | 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 | ns..This.command.redistributes.r |
7b220 | 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 | outing.information.from.the.give |
7b240 | 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 | n.route.source.into.the.ISIS.dat |
7b260 | 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c 2d 31 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 | abase.as.Level-1..There.are.six. |
7b280 | 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | modes.available.for.route.source |
7b2a0 | 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 | :.bgp,.connected,.kernel,.ospf,. |
7b2c0 | 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 | rip,.static..This.command.redist |
7b2e0 | 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d | ributes.routing.information.from |
7b300 | 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 | .the.given.route.source.into.the |
7b320 | 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c 2d 32 2e 20 54 68 65 72 65 | .ISIS.database.as.Level-2..There |
7b340 | 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 | .are.six.modes.available.for.rou |
7b360 | 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 | te.source:.bgp,.connected,.kerne |
7b380 | 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | l,.ospf,.rip,.static..This.comma |
7b3a0 | 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | nd.redistributes.routing.informa |
7b3c0 | 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | tion.from.the.given.route.source |
7b3e0 | 20 69 6e 74 6f 20 74 68 65 20 52 49 50 20 74 61 62 6c 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 | .into.the.RIP.tables..There.are. |
7b400 | 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 | five.modes.available.for.route.s |
7b420 | 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f | ource:.bgp,.connected,.kernel,.o |
7b440 | 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 | spf,.static..This.command.redist |
7b460 | 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d | ributes.routing.information.from |
7b480 | 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 | .the.given.route.source.to.the.B |
7b4a0 | 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 | GP.process..There.are.six.modes. |
7b4c0 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e | available.for.route.source:.conn |
7b4e0 | 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 | ected,.kernel,.ospf,.rip,.static |
7b500 | 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 | ,.table..This.command.redistribu |
7b520 | 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 | tes.routing.information.from.the |
7b540 | 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 61 62 65 6c | .given.route.source.to.the.Babel |
7b560 | 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 | .process..This.command.redistrib |
7b580 | 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 | utes.routing.information.from.th |
7b5a0 | 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 | e.given.route.source.to.the.OSPF |
7b5c0 | 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 | .process..There.are.five.modes.a |
7b5e0 | 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 | vailable.for.route.source:.bgp,. |
7b600 | 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 | connected,.kernel,.rip,.static.. |
7b620 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 | This.command.redistributes.routi |
7b640 | 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f | ng.information.from.the.given.ro |
7b660 | 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 | ute.source.to.the.OSPFv3.process |
7b680 | 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 | ..There.are.five.modes.available |
7b6a0 | 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 | .for.route.source:.bgp,.connecte |
7b6c0 | 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 | d,.kernel,.ripng,.static..This.c |
7b6e0 | 6f 6d 6d 61 6e 64 20 72 65 6d 6f 76 65 73 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 6f | ommand.removes.the.private.ASN.o |
7b700 | 66 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 | f.routes.that.are.advertised.to. |
7b720 | 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 65 72 2e 20 49 74 20 72 65 6d 6f 76 65 73 20 | the.configured.peer..It.removes. |
7b740 | 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 6f 6e 20 72 6f 75 74 65 73 20 61 64 76 65 | only.private.ASNs.on.routes.adve |
7b760 | 72 74 69 73 65 64 20 74 6f 20 45 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | rtised.to.EBGP.peers..This.comma |
7b780 | 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 | nd.resets.BGP.connections.to.the |
7b7a0 | 20 73 70 65 63 69 66 69 65 64 20 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 | .specified.neighbor.IP.address.. |
7b7c0 | 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 | With.argument.:cfgcmd:`soft`.thi |
7b7e0 | 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 | s.command.initiates.a.soft.reset |
7b800 | 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 | ..If.you.do.not.specify.the.:cfg |
7b820 | 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e | cmd:`in`.or.:cfgcmd:`out`.option |
7b840 | 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 | s,.both.inbound.and.outbound.sof |
7b860 | 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e | t.reconfiguration.are.triggered. |
7b880 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 | .This.command.resets.BGP.connect |
7b8a0 | 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 65 65 72 20 67 72 6f 75 70 | ions.to.the.specified.peer.group |
7b8c0 | 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 | ..With.argument.:cfgcmd:`soft`.t |
7b8e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 | his.command.initiates.a.soft.res |
7b900 | 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 | et..If.you.do.not.specify.the.:c |
7b920 | 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 | fgcmd:`in`.or.:cfgcmd:`out`.opti |
7b940 | 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 | ons,.both.inbound.and.outbound.s |
7b960 | 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 | oft.reconfiguration.are.triggere |
7b980 | 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 42 47 50 20 63 | d..This.command.resets.all.BGP.c |
7b9a0 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 | onnections.of.given.router..This |
7b9c0 | 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 42 47 50 | .command.resets.all.external.BGP |
7b9e0 | 20 70 65 65 72 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d | .peers.of.given.router..This.com |
7ba00 | 6d 61 6e 64 20 73 65 6c 65 63 74 73 20 41 42 52 20 6d 6f 64 65 6c 2e 20 4f 53 50 46 20 72 6f 75 | mand.selects.ABR.model..OSPF.rou |
7ba20 | 74 65 72 20 73 75 70 70 6f 72 74 73 20 66 6f 75 72 20 41 42 52 20 6d 6f 64 65 6c 73 3a 00 54 68 | ter.supports.four.ABR.models:.Th |
7ba40 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 66 6f | is.command.set.default.metric.fo |
7ba60 | 72 20 63 69 72 63 75 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 74 68 65 20 | r.circuit..This.command.set.the. |
7ba80 | 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 72 6f | channel.number.that.diversity.ro |
7baa0 | 75 74 69 6e 67 20 75 73 65 73 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 73 | uting.uses.for.this.interface.(s |
7bac0 | 65 65 20 64 69 76 65 72 73 69 74 79 20 6f 70 74 69 6f 6e 20 61 62 6f 76 65 29 2e 00 54 68 69 73 | ee.diversity.option.above)..This |
7bae0 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 41 54 54 20 62 69 74 20 74 6f 20 31 20 69 6e 20 4c 65 | .command.sets.ATT.bit.to.1.in.Le |
7bb00 | 76 65 6c 31 20 4c 53 50 73 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 | vel1.LSPs..It.is.described.in.:r |
7bb20 | 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 | fc:`3787`..This.command.sets.LSP |
7bb40 | 20 6d 61 78 69 6d 75 6d 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 | .maximum.LSP.lifetime.in.seconds |
7bb60 | 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 35 30 20 74 6f 20 36 | ..The.interval.range.is.350.to.6 |
7bb80 | 35 35 33 35 2e 20 4c 53 50 73 20 72 65 6d 61 69 6e 20 69 6e 20 61 20 64 61 74 61 62 61 73 65 20 | 5535..LSPs.remain.in.a.database. |
7bba0 | 66 6f 72 20 31 32 30 30 20 73 65 63 6f 6e 64 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 66 20 | for.1200.seconds.by.default..If. |
7bbc0 | 74 68 65 79 20 61 72 65 20 6e 6f 74 20 72 65 66 72 65 73 68 65 64 20 62 79 20 74 68 61 74 20 74 | they.are.not.refreshed.by.that.t |
7bbe0 | 69 6d 65 2c 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 2e 20 59 6f 75 20 63 61 6e 20 63 | ime,.they.are.deleted..You.can.c |
7bc00 | 68 61 6e 67 65 20 74 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 6f | hange.the.LSP.refresh.interval.o |
7bc20 | 72 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 2e 20 54 68 65 20 4c 53 50 20 72 65 66 72 | r.the.LSP.lifetime..The.LSP.refr |
7bc40 | 65 73 68 20 69 6e 74 65 72 76 61 6c 20 73 68 6f 75 6c 64 20 62 65 20 6c 65 73 73 20 74 68 61 6e | esh.interval.should.be.less.than |
7bc60 | 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 6f 72 20 65 6c 73 65 20 4c 53 50 73 20 77 | .the.LSP.lifetime.or.else.LSPs.w |
7bc80 | 69 6c 6c 20 74 69 6d 65 20 6f 75 74 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 72 65 66 | ill.time.out.before.they.are.ref |
7bca0 | 72 65 73 68 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 72 65 | reshed..This.command.sets.LSP.re |
7bcc0 | 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 49 53 2d 49 53 | fresh.interval.in.seconds..IS-IS |
7bce0 | 20 67 65 6e 65 72 61 74 65 73 20 4c 53 50 73 20 77 68 65 6e 20 74 68 65 20 73 74 61 74 65 20 6f | .generates.LSPs.when.the.state.o |
7bd00 | 66 20 61 20 6c 69 6e 6b 20 63 68 61 6e 67 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 74 6f 20 65 6e | f.a.link.changes..However,.to.en |
7bd20 | 73 75 72 65 20 74 68 61 74 20 72 6f 75 74 69 6e 67 20 64 61 74 61 62 61 73 65 73 20 6f 6e 20 61 | sure.that.routing.databases.on.a |
7bd40 | 6c 6c 20 72 6f 75 74 65 72 73 20 72 65 6d 61 69 6e 20 63 6f 6e 76 65 72 67 65 64 2c 20 4c 53 50 | ll.routers.remain.converged,.LSP |
7bd60 | 73 20 69 6e 20 73 74 61 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 61 72 65 20 67 65 6e 65 72 61 74 | s.in.stable.networks.are.generat |
7bd80 | 65 64 20 6f 6e 20 61 20 72 65 67 75 6c 61 72 20 62 61 73 69 73 20 65 76 65 6e 20 74 68 6f 75 67 | ed.on.a.regular.basis.even.thoug |
7bda0 | 68 20 74 68 65 72 65 20 68 61 73 20 62 65 65 6e 20 6e 6f 20 63 68 61 6e 67 65 20 74 6f 20 74 68 | h.there.has.been.no.change.to.th |
7bdc0 | 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 6c 69 6e 6b 73 2e 20 54 68 65 20 69 6e 74 65 72 76 | e.state.of.the.links..The.interv |
7bde0 | 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 32 33 35 2e 20 54 68 65 20 64 65 66 61 | al.range.is.1.to.65235..The.defa |
7be00 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 39 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 | ult.value.is.900.seconds..This.c |
7be20 | 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | ommand.sets.OSPF.authentication. |
7be40 | 6b 65 79 20 74 6f 20 61 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 2e 20 41 66 74 65 72 20 | key.to.a.simple.password..After. |
7be60 | 73 65 74 74 69 6e 67 2c 20 61 6c 6c 20 4f 53 50 46 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 75 | setting,.all.OSPF.packets.are.au |
7be80 | 74 68 65 6e 74 69 63 61 74 65 64 2e 20 4b 65 79 20 68 61 73 20 6c 65 6e 67 74 68 20 75 70 20 74 | thenticated..Key.has.length.up.t |
7bea0 | 6f 20 38 20 63 68 61 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 50 53 4e | o.8.chars..This.command.sets.PSN |
7bec0 | 50 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 | P.interval.in.seconds..The.inter |
7bee0 | 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d | val.range.is.0.to.127..This.comm |
7bf00 | 61 6e 64 20 73 65 74 73 20 52 6f 75 74 65 72 20 50 72 69 6f 72 69 74 79 20 69 6e 74 65 67 65 72 | and.sets.Router.Priority.integer |
7bf20 | 20 76 61 6c 75 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 | .value..The.router.with.the.high |
7bf40 | 65 73 74 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 65 6c 69 67 69 62 | est.priority.will.be.more.eligib |
7bf60 | 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 | le.to.become.Designated.Router.. |
7bf80 | 53 65 74 74 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 74 6f 20 30 2c 20 6d 61 6b 65 73 20 74 68 | Setting.the.value.to.0,.makes.th |
7bfa0 | 65 20 72 6f 75 74 65 72 20 69 6e 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 | e.router.ineligible.to.become.De |
7bfc0 | 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | signated.Router..The.default.val |
7bfe0 | 75 65 20 69 73 20 31 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 | ue.is.1..The.interval.range.is.0 |
7c000 | 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 64 65 66 61 75 | .to.255..This.command.sets.defau |
7c020 | 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 20 73 70 65 63 69 66 69 65 64 20 76 | lt.RIP.distance.to.a.specified.v |
7c040 | 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 73 20 73 6f 75 72 63 65 20 49 50 20 61 | alue.when.the.routes.source.IP.a |
7c060 | 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 | ddress.matches.the.specified.pre |
7c080 | 66 69 78 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 68 65 6c 6c 6f 20 69 6e 74 | fix..This.command.sets.hello.int |
7c0a0 | 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 | erval.in.seconds.on.a.given.inte |
7c0c0 | 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 30 30 2e 00 54 68 | rface..The.range.is.1.to.600..Th |
7c0e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6c 69 6e 6b 20 63 6f 73 74 20 66 6f 72 20 74 68 | is.command.sets.link.cost.for.th |
7c100 | 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 63 6f 73 74 20 | e.specified.interface..The.cost. |
7c120 | 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 72 6f 75 74 65 72 2d 4c 53 41 e2 80 99 73 20 6d | value.is.set.to.router-LSA...s.m |
7c140 | 65 74 72 69 63 20 66 69 65 6c 64 20 61 6e 64 20 75 73 65 64 20 66 6f 72 20 53 50 46 20 63 61 6c | etric.field.and.used.for.SPF.cal |
7c160 | 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f | culation..The.cost.range.is.1.to |
7c180 | 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 | .65535..This.command.sets.minimu |
7c1a0 | 6d 20 69 6e 74 65 72 76 61 6c 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 | m.interval.between.consecutive.S |
7c1c0 | 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 73 65 63 6f 6e 64 73 2e 54 68 65 20 69 | PF.calculations.in.seconds.The.i |
7c1e0 | 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 | nterval.range.is.1.to.120..This. |
7c200 | 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 69 6e | command.sets.minimum.interval.in |
7c220 | 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 67 65 6e 65 72 61 74 69 6e 67 20 73 61 | .seconds.between.regenerating.sa |
7c240 | 6d 65 20 4c 53 50 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 | me.LSP..The.interval.range.is.1. |
7c260 | 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 75 6c 74 69 70 | to.120..This.command.sets.multip |
7c280 | 6c 69 65 72 20 66 6f 72 20 68 65 6c 6c 6f 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 6f 6e 20 61 | lier.for.hello.holding.time.on.a |
7c2a0 | 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 32 | .given.interface..The.range.is.2 |
7c2c0 | 20 74 6f 20 31 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 | .to.100..This.command.sets.numbe |
7c2e0 | 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 49 6e 66 54 72 61 6e 73 44 65 6c 61 79 20 76 | r.of.seconds.for.InfTransDelay.v |
7c300 | 61 6c 75 65 2e 20 49 74 20 61 6c 6c 6f 77 73 20 74 6f 20 73 65 74 20 61 6e 64 20 61 64 6a 75 73 | alue..It.allows.to.set.and.adjus |
7c320 | 74 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 64 65 6c 61 79 20 69 | t.for.each.interface.the.delay.i |
7c340 | 6e 74 65 72 76 61 6c 20 62 65 66 6f 72 65 20 73 74 61 72 74 69 6e 67 20 74 68 65 20 73 79 6e 63 | nterval.before.starting.the.sync |
7c360 | 68 72 6f 6e 69 7a 69 6e 67 20 70 72 6f 63 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 27 | hronizing.process.of.the.router' |
7c380 | 73 20 64 61 74 61 62 61 73 65 20 77 69 74 68 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 | s.database.with.all.neighbors..T |
7c3a0 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 20 73 65 63 6f 6e 64 73 2e 20 54 | he.default.value.is.1.seconds..T |
7c3c0 | 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e | he.interval.range.is.3.to.65535. |
7c3e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 | .This.command.sets.number.of.sec |
7c400 | 6f 6e 64 73 20 66 6f 72 20 52 78 6d 74 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 | onds.for.RxmtInterval.timer.valu |
7c420 | 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 72 65 74 72 61 | e..This.value.is.used.when.retra |
7c440 | 6e 73 6d 69 74 74 69 6e 67 20 44 61 74 61 62 61 73 65 20 44 65 73 63 72 69 70 74 69 6f 6e 20 61 | nsmitting.Database.Description.a |
7c460 | 6e 64 20 4c 69 6e 6b 20 53 74 61 74 65 20 52 65 71 75 65 73 74 20 70 61 63 6b 65 74 73 20 69 66 | nd.Link.State.Request.packets.if |
7c480 | 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 77 61 73 20 6e 6f 74 20 72 65 63 65 69 76 65 64 2e 20 54 | .acknowledge.was.not.received..T |
7c4a0 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 35 20 73 65 63 6f 6e 64 73 2e 20 54 | he.default.value.is.5.seconds..T |
7c4c0 | 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e | he.interval.range.is.3.to.65535. |
7c4e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 6c 64 2d 73 74 79 6c 65 20 28 49 53 | .This.command.sets.old-style.(IS |
7c500 | 4f 20 31 30 35 38 39 29 20 6f 72 20 6e 65 77 20 73 74 79 6c 65 20 70 61 63 6b 65 74 20 66 6f 72 | O.10589).or.new.style.packet.for |
7c520 | 6d 61 74 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 74 68 65 72 20 63 6f | mats:.This.command.sets.other.co |
7c540 | 6e 66 65 64 65 72 61 74 69 6f 6e 73 20 3c 6e 73 75 62 61 73 6e 3e 20 61 73 20 6d 65 6d 62 65 72 | nfederations.<nsubasn>.as.member |
7c560 | 73 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 73 70 65 63 69 66 69 65 64 | s.of.autonomous.system.specified |
7c580 | 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 | .by.:cfgcmd:`confederation.ident |
7c5a0 | 69 66 69 65 72 20 3c 61 73 6e 3e 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 | ifier.<asn>`..This.command.sets. |
7c5c0 | 6f 76 65 72 6c 6f 61 64 20 62 69 74 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 74 72 61 6e 73 69 | overload.bit.to.avoid.any.transi |
7c5e0 | 74 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 49 | t.traffic.through.this.router..I |
7c600 | 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 | t.is.described.in.:rfc:`3787`..T |
7c620 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 | his.command.sets.priority.for.th |
7c640 | 65 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 3a 61 62 62 72 3a 60 44 49 53 20 28 44 65 73 69 | e.interface.for.:abbr:`DIS.(Desi |
7c660 | 67 6e 61 74 65 64 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 65 6c 65 | gnated.Intermediate.System)`.ele |
7c680 | 63 74 69 6f 6e 2e 20 54 68 65 20 70 72 69 6f 72 69 74 79 20 72 61 6e 67 65 20 69 73 20 30 20 74 | ction..The.priority.range.is.0.t |
7c6a0 | 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 61 64 6d | o.127..This.command.sets.the.adm |
7c6c0 | 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 61 20 70 61 72 74 69 | inistrative.distance.for.a.parti |
7c6e0 | 63 75 6c 61 72 20 72 6f 75 74 65 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 | cular.route..The.distance.range. |
7c700 | 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 | is.1.to.255..This.command.sets.t |
7c720 | 68 65 20 63 6f 73 74 20 6f 66 20 64 65 66 61 75 6c 74 2d 73 75 6d 6d 61 72 79 20 4c 53 41 73 20 | he.cost.of.default-summary.LSAs. |
7c740 | 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 73 74 75 62 62 79 20 61 72 65 61 73 2e 20 54 68 65 20 63 | announced.to.stubby.areas..The.c |
7c760 | 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 | ost.range.is.0.to.16777215..This |
7c780 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 73 74 20 6f | .command.sets.the.default.cost.o |
7c7a0 | 66 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 4e 53 53 41 20 61 72 65 61 73 2e 20 | f.LSAs.announced.to.NSSA.areas.. |
7c7c0 | 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e | The.cost.range.is.0.to.16777215. |
7c7e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 64 | .This.command.sets.the.initial.d |
7c800 | 65 6c 61 79 2c 20 74 68 65 20 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 20 61 6e 64 20 74 | elay,.the.initial-holdtime.and.t |
7c820 | 68 65 20 6d 61 78 69 6d 75 6d 2d 68 6f 6c 64 74 69 6d 65 20 62 65 74 77 65 65 6e 20 77 68 65 6e | he.maximum-holdtime.between.when |
7c840 | 20 53 50 46 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 6e 64 20 74 68 65 20 65 76 65 6e 74 | .SPF.is.calculated.and.the.event |
7c860 | 20 77 68 69 63 68 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e | .which.triggered.the.calculation |
7c880 | 2e 20 54 68 65 20 74 69 6d 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 6d 69 6c | ..The.times.are.specified.in.mil |
7c8a0 | 6c 69 73 65 63 6f 6e 64 73 20 61 6e 64 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 72 61 6e | liseconds.and.must.be.in.the.ran |
7c8c0 | 67 65 20 6f 66 20 30 20 74 6f 20 36 30 30 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 | ge.of.0.to.600000.milliseconds.. |
7c8e0 | 3a 63 66 67 63 6d 64 3a 60 64 65 6c 61 79 60 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c | :cfgcmd:`delay`.sets.the.initial |
7c900 | 20 53 50 46 20 73 63 68 65 64 75 6c 65 20 64 65 6c 61 79 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f | .SPF.schedule.delay.in.milliseco |
7c920 | 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 30 30 20 6d 73 | nds..The.default.value.is.200.ms |
7c940 | 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 | ..:cfgcmd:`initial-holdtime`.set |
7c960 | 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 68 6f 6c 64 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 | s.the.minimum.hold.time.between. |
7c980 | 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 | two.consecutive.SPF.calculations |
7c9a0 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 73 2e 20 | ..The.default.value.is.1000.ms.. |
7c9c0 | 3a 63 66 67 63 6d 64 3a 60 6d 61 78 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 | :cfgcmd:`max-holdtime`.sets.the. |
7c9e0 | 6d 61 78 69 6d 75 6d 20 77 61 69 74 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f | maximum.wait.time.between.two.co |
7ca00 | 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 | nsecutive.SPF.calculations..The. |
7ca20 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 | default.value.is.10000.ms..This. |
7ca40 | 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 62 61 6e 64 77 | command.sets.the.interface.bandw |
7ca60 | 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 | idth.for.cost.calculations,.wher |
7ca80 | 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d | e.bandwidth.can.be.in.range.from |
7caa0 | 20 31 20 74 6f 20 31 30 30 30 30 30 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 | .1.to.100000,.specified.in.Mbits |
7cac0 | 2f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 | /s..This.command.sets.the.interf |
7cae0 | 61 63 65 20 74 79 70 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 | ace.type:.This.command.sets.the. |
7cb00 | 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 4d 44 35 20 61 75 74 68 65 6e 74 69 63 | interface.with.RIP.MD5.authentic |
7cb20 | 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 4d 44 | ation..This.command.also.sets.MD |
7cb40 | 35 20 4b 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 | 5.Key..The.key.must.be.shorter.t |
7cb60 | 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | han.16.characters..This.command. |
7cb80 | 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 73 69 6d 70 | sets.the.interface.with.RIP.simp |
7cba0 | 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 | le.password.authentication..This |
7cbc0 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | .command.also.sets.authenticatio |
7cbe0 | 6e 20 73 74 72 69 6e 67 2e 20 54 68 65 20 73 74 72 69 6e 67 20 6d 75 73 74 20 62 65 20 73 68 6f | n.string..The.string.must.be.sho |
7cc00 | 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f | rter.than.16.characters..This.co |
7cc20 | 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 63 61 74 69 76 65 20 66 61 | mmand.sets.the.multiplicative.fa |
7cc40 | 63 74 6f 72 20 75 73 65 64 20 66 6f 72 20 64 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 2c | ctor.used.for.diversity.routing, |
7cc60 | 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 3b 20 6c 6f 77 65 72 20 76 61 6c 75 65 73 | .in.units.of.1/256;.lower.values |
7cc80 | 20 63 61 75 73 65 20 64 69 76 65 72 73 69 74 79 20 74 6f 20 70 6c 61 79 20 61 20 6d 6f 72 65 20 | .cause.diversity.to.play.a.more. |
7cca0 | 69 6d 70 6f 72 74 61 6e 74 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f | important.role.in.route.selectio |
7ccc0 | 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 74 20 32 35 36 2c 20 77 68 69 63 68 20 6d 65 61 | n..The.default.it.256,.which.mea |
7cce0 | 6e 73 20 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 70 6c 61 79 73 20 6e 6f 20 72 6f 6c 65 20 | ns.that.diversity.plays.no.role. |
7cd00 | 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 3b 20 79 6f 75 20 77 69 6c 6c 20 70 72 6f | in.route.selection;.you.will.pro |
7cd20 | 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 74 68 61 74 20 74 6f 20 31 32 38 20 6f 72 | bably.want.to.set.that.to.128.or |
7cd40 | 20 6c 65 73 73 20 6f 6e 20 6e 6f 64 65 73 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 69 6e 64 | .less.on.nodes.with.multiple.ind |
7cd60 | 65 70 65 6e 64 65 6e 74 20 72 61 64 69 6f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | ependent.radios..This.command.se |
7cd80 | 74 73 20 74 68 65 20 72 65 66 65 72 65 6e 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 | ts.the.reference.bandwidth.for.c |
7cda0 | 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 | ost.calculations,.where.bandwidt |
7cdc0 | 68 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 | h.can.be.in.range.from.1.to.4294 |
7cde0 | 39 36 37 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 20 54 68 65 20 64 | 967,.specified.in.Mbits/s..The.d |
7ce00 | 65 66 61 75 6c 74 20 69 73 20 31 30 30 4d 62 69 74 2f 73 20 28 69 2e 65 2e 20 61 20 6c 69 6e 6b | efault.is.100Mbit/s.(i.e..a.link |
7ce20 | 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 31 30 30 4d 62 69 74 2f 73 20 6f 72 20 68 69 67 68 65 | .of.bandwidth.100Mbit/s.or.highe |
7ce40 | 72 20 77 69 6c 6c 20 68 61 76 65 20 61 20 63 6f 73 74 20 6f 66 20 31 2e 20 43 6f 73 74 20 6f 66 | r.will.have.a.cost.of.1..Cost.of |
7ce60 | 20 6c 6f 77 65 72 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 20 77 69 6c 6c 20 62 65 20 73 | .lower.bandwidth.links.will.be.s |
7ce80 | 63 61 6c 65 64 20 77 69 74 68 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 69 73 20 63 6f 73 | caled.with.reference.to.this.cos |
7cea0 | 74 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 | t)..This.command.sets.the.router |
7cec0 | 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 | -ID.of.the.OSPF.process..The.rou |
7cee0 | 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 | ter-ID.may.be.an.IP.address.of.t |
7cf00 | 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 | he.router,.but.need.not.be.....i |
7cf20 | 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d | t.can.be.any.arbitrary.32bit.num |
7cf40 | 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 | ber..However.it.MUST.be.unique.w |
7cf60 | 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 20 64 6f 6d 61 69 6e 20 74 6f 20 | ithin.the.entire.OSPF.domain.to. |
7cf80 | 74 68 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 | the.OSPF.speaker.....bad.things. |
7cfa0 | 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 20 73 70 65 | will.happen.if.multiple.OSPF.spe |
7cfc0 | 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 | akers.are.configured.with.the.sa |
7cfe0 | 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 | me.router-ID!.This.command.sets. |
7d000 | 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 | the.router-ID.of.the.OSPFv3.proc |
7d020 | 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 | ess..The.router-ID.may.be.an.IP. |
7d040 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 | address.of.the.router,.but.need. |
7d060 | 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 | not.be.....it.can.be.any.arbitra |
7d080 | 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 | ry.32bit.number..However.it.MUST |
7d0a0 | 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 | .be.unique.within.the.entire.OSP |
7d0c0 | 46 76 33 20 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 | Fv3.domain.to.the.OSPFv3.speaker |
7d0e0 | 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d | .....bad.things.will.happen.if.m |
7d100 | 75 6c 74 69 70 6c 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 | ultiple.OSPFv3.speakers.are.conf |
7d120 | 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 | igured.with.the.same.router-ID!. |
7d140 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | This.command.sets.the.specified. |
7d160 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 20 4f 6e 20 70 61 | interface.to.passive.mode..On.pa |
7d180 | 73 73 69 76 65 20 6d 6f 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6c 6c 20 72 65 63 65 69 76 | ssive.mode.interface,.all.receiv |
7d1a0 | 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 61 73 20 6e 6f 72 | ing.packets.are.processed.as.nor |
7d1c0 | 6d 61 6c 20 61 6e 64 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 65 69 74 68 65 | mal.and.VyOS.does.not.send.eithe |
7d1e0 | 72 20 6d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 52 49 50 20 70 61 63 6b 65 | r.multicast.or.unicast.RIP.packe |
7d200 | 74 73 20 65 78 63 65 70 74 20 74 6f 20 52 49 50 20 6e 65 69 67 68 62 6f 72 73 20 73 70 65 63 69 | ts.except.to.RIP.neighbors.speci |
7d220 | 66 69 65 64 20 77 69 74 68 20 6e 65 69 67 68 62 6f 72 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 | fied.with.neighbor.command..This |
7d240 | 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 4e 4f 54 20 62 65 20 73 65 74 20 6e 6f 72 6d 61 | .command.should.NOT.be.set.norma |
7d260 | 6c 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 62 6f 74 68 20 73 74 61 | lly..This.command.shows.both.sta |
7d280 | 74 75 73 20 61 6e 64 20 73 74 61 74 69 73 74 69 63 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 | tus.and.statistics.on.the.specif |
7d2a0 | 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 | ied.wireless.interface..The.wire |
7d2c0 | 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 | less.interface.identifier.can.ra |
7d2e0 | 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 | nge.from.wlan0.to.wlan999..This. |
7d300 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 47 50 20 63 6f 6e 66 65 64 65 72 | command.specifies.a.BGP.confeder |
7d320 | 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 2e 20 3c 61 73 6e 3e 20 69 73 20 74 68 65 20 6e | ation.identifier..<asn>.is.the.n |
7d340 | 75 6d 62 65 72 20 6f 66 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 74 | umber.of.the.autonomous.system.t |
7d360 | 68 61 74 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 63 6c 75 64 65 73 20 6d 75 6c 74 69 70 6c 65 | hat.internally.includes.multiple |
7d380 | 20 73 75 62 2d 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 20 28 61 20 63 6f 6e 66 65 | .sub-autonomous.systems.(a.confe |
7d3a0 | 64 65 72 61 74 69 6f 6e 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | deration)..This.command.specifie |
7d3c0 | 73 20 61 20 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 | s.a.Babel.enabled.interface.by.i |
7d3e0 | 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 | nterface.name..Both.the.sending. |
7d400 | 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 42 61 62 65 6c 20 70 61 63 6b 65 74 73 20 77 | and.receiving.of.Babel.packets.w |
7d420 | 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | ill.be.enabled.on.the.interface. |
7d440 | 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 | specified.in.this.command..This. |
7d460 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 4d 44 35 20 70 61 73 73 77 6f 72 64 | command.specifies.a.MD5.password |
7d480 | 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 74 63 70 20 73 6f 63 6b 65 74 20 | .to.be.used.with.the.tcp.socket. |
7d4a0 | 74 68 61 74 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f | that.is.being.used.to.connect.to |
7d4c0 | 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | .the.remote.peer..This.command.s |
7d4e0 | 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 | pecifies.a.RIP.enabled.interface |
7d500 | 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e | .by.interface.name..Both.the.sen |
7d520 | 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 52 49 50 20 70 61 63 6b 65 74 | ding.and.receiving.of.RIP.packet |
7d540 | 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 70 6f 72 74 20 73 70 | s.will.be.enabled.on.the.port.sp |
7d560 | 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f | ecified.in.this.command..This.co |
7d580 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 6e 65 69 67 68 62 6f 72 2e 20 | mmand.specifies.a.RIP.neighbor.. |
7d5a0 | 57 68 65 6e 20 61 20 6e 65 69 67 68 62 6f 72 20 64 6f 65 73 6e e2 80 99 74 20 75 6e 64 65 72 73 | When.a.neighbor.doesn...t.unders |
7d5c0 | 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | tand.multicast,.this.command.is. |
7d5e0 | 75 73 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 6e 20 73 6f | used.to.specify.neighbors..In.so |
7d600 | 6d 65 20 63 61 73 65 73 2c 20 6e 6f 74 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 62 | me.cases,.not.all.routers.will.b |
7d620 | 65 20 61 62 6c 65 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 69 6e | e.able.to.understand.multicastin |
7d640 | 67 2c 20 77 68 65 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 6f 20 61 20 6e | g,.where.packets.are.sent.to.a.n |
7d660 | 65 74 77 6f 72 6b 20 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 61 64 64 72 65 73 73 65 73 2e 20 | etwork.or.a.group.of.addresses.. |
7d680 | 49 6e 20 61 20 73 69 74 75 61 74 69 6f 6e 20 77 68 65 72 65 20 61 20 6e 65 69 67 68 62 6f 72 20 | In.a.situation.where.a.neighbor. |
7d6a0 | 63 61 6e 6e 6f 74 20 70 72 6f 63 65 73 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 | cannot.process.multicast.packets |
7d6c0 | 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 | ,.it.is.necessary.to.establish.a |
7d6e0 | 20 64 69 72 65 63 74 20 6c 69 6e 6b 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 54 68 | .direct.link.between.routers..Th |
7d700 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 64 65 66 61 75 6c 74 20 77 | is.command.specifies.a.default.w |
7d720 | 65 69 67 68 74 20 76 61 6c 75 65 20 66 6f 72 20 74 68 65 20 6e 65 69 67 68 62 6f 72 e2 80 99 73 | eight.value.for.the.neighbor...s |
7d740 | 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 | .routes..The.number.range.is.1.t |
7d760 | 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | o.65535..This.command.specifies. |
7d780 | 61 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 72 65 66 69 78 65 73 20 77 65 20 | a.maximum.number.of.prefixes.we. |
7d7a0 | 63 61 6e 20 72 65 63 65 69 76 65 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 20 49 | can.receive.from.a.given.peer..I |
7d7c0 | 66 20 74 68 69 73 20 6e 75 6d 62 65 72 20 69 73 20 65 78 63 65 65 64 65 64 2c 20 74 68 65 20 42 | f.this.number.is.exceeded,.the.B |
7d7e0 | 47 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 73 74 72 6f 79 65 64 2e 20 54 68 | GP.session.will.be.destroyed..Th |
7d800 | 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 39 | e.number.range.is.1.to.429496729 |
7d820 | 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e | 5..This.command.specifies.all.in |
7d840 | 74 65 72 66 61 63 65 73 20 61 73 20 70 61 73 73 69 76 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 | terfaces.as.passive.by.default.. |
7d860 | 42 65 63 61 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 | Because.this.command.changes.the |
7d880 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 6f 67 69 63 20 74 6f 20 61 20 64 65 66 61 75 6c | .configuration.logic.to.a.defaul |
7d8a0 | 74 20 70 61 73 73 69 76 65 3b 20 74 68 65 72 65 66 6f 72 65 2c 20 69 6e 74 65 72 66 61 63 65 73 | t.passive;.therefore,.interfaces |
7d8c0 | 20 77 68 65 72 65 20 72 6f 75 74 65 72 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 65 78 | .where.router.adjacencies.are.ex |
7d8e0 | 70 65 63 74 65 64 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 | pected.need.to.be.configured.wit |
7d900 | 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 | h.the.:cfgcmd:`passive-interface |
7d920 | 2d 65 78 63 6c 75 64 65 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | -exclude`.command..This.command. |
7d940 | 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 70 61 73 73 | specifies.all.interfaces.to.pass |
7d960 | 69 76 65 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | ive.mode..This.command.specifies |
7d980 | 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 72 6f 76 69 64 | .an.aggregate.address.and.provid |
7d9a0 | 65 73 20 74 68 61 74 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f | es.that.longer-prefixes.inside.o |
7d9c0 | 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 61 72 65 20 73 75 70 70 | f.the.aggregate.address.are.supp |
7d9e0 | 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 42 47 50 20 75 70 64 61 74 65 | ressed.before.sending.BGP.update |
7da00 | 73 20 6f 75 74 20 74 6f 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | s.out.to.peers..This.command.spe |
7da20 | 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 77 69 74 68 | cifies.an.aggregate.address.with |
7da40 | 20 61 20 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 73 65 74 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 | .a.mathematical.set.of.autonomou |
7da60 | 73 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a | s.systems..This.command.summariz |
7da80 | 65 73 20 74 68 65 20 41 53 5f 50 41 54 48 20 61 74 74 72 69 62 75 74 65 73 20 6f 66 20 61 6c 6c | es.the.AS_PATH.attributes.of.all |
7daa0 | 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d | .the.individual.routes..This.com |
7dac0 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 | mand.specifies.an.aggregate.addr |
7dae0 | 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 6c 73 6f 20 61 6e 6e 6f 75 6e | ess..The.router.will.also.announ |
7db00 | 63 65 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 | ce.longer-prefixes.inside.of.the |
7db20 | 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .aggregate.address..This.command |
7db40 | 20 73 70 65 63 69 66 69 65 73 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 62 65 20 6c 65 66 74 | .specifies.attributes.to.be.left |
7db60 | 20 75 6e 63 68 61 6e 67 65 64 20 66 6f 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 73 65 | .unchanged.for.advertisements.se |
7db80 | 6e 74 20 74 6f 20 61 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 | nt.to.a.peer.or.peer.group..This |
7dba0 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 69 72 63 75 69 74 20 74 79 70 65 20 | .command.specifies.circuit.type. |
7dbc0 | 66 6f 72 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 | for.interface:.This.command.spec |
7dbe0 | 69 66 69 65 73 20 63 6c 75 73 74 65 72 20 49 44 20 77 68 69 63 68 20 69 64 65 6e 74 69 66 69 65 | ifies.cluster.ID.which.identifie |
7dc00 | 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f | s.a.collection.of.route.reflecto |
7dc20 | 72 73 20 61 6e 64 20 74 68 65 69 72 20 63 6c 69 65 6e 74 73 2c 20 61 6e 64 20 69 73 20 75 73 65 | rs.and.their.clients,.and.is.use |
7dc40 | 64 20 62 79 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 74 6f 20 61 76 6f 69 64 20 6c | d.by.route.reflectors.to.avoid.l |
7dc60 | 6f 6f 70 69 6e 67 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6c 75 73 74 65 72 20 49 44 20 69 73 | ooping..By.default.cluster.ID.is |
7dc80 | 20 73 65 74 20 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 69 64 20 76 61 6c 75 65 2c | .set.to.the.BGP.router.id.value, |
7dca0 | 20 62 75 74 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 | .but.can.be.set.to.an.arbitrary. |
7dcc0 | 33 32 2d 62 69 74 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | 32-bit.value..This.command.speci |
7dce0 | 66 69 65 73 20 68 6f 6c 64 2d 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 | fies.hold-time.in.seconds..The.t |
7dd00 | 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 34 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 | imer.range.is.4.to.65535..The.de |
7dd20 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 2e 20 49 66 20 79 6f | fault.value.is.180.second..If.yo |
7dd40 | 75 20 73 65 74 20 76 61 6c 75 65 20 74 6f 20 30 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 68 | u.set.value.to.0.VyOS.will.not.h |
7dd60 | 6f 6c 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | old.routes..This.command.specifi |
7dd80 | 65 73 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 70 61 73 73 69 76 65 2e 20 50 61 73 73 69 76 65 | es.interface.as.passive..Passive |
7dda0 | 20 69 6e 74 65 72 66 61 63 65 20 61 64 76 65 72 74 69 73 65 73 20 69 74 73 20 61 64 64 72 65 73 | .interface.advertises.its.addres |
7ddc0 | 73 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 72 75 6e 20 74 68 65 20 4f 53 50 46 20 70 72 6f | s,.but.does.not.run.the.OSPF.pro |
7dde0 | 74 6f 63 6f 6c 20 28 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 6d 65 | tocol.(adjacencies.are.not.forme |
7de00 | 64 20 61 6e 64 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 67 65 6e 65 | d.and.hello.packets.are.not.gene |
7de20 | 72 61 74 65 64 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6b | rated)..This.command.specifies.k |
7de40 | 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 | eep-alive.time.in.seconds..The.t |
7de60 | 69 6d 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 34 20 74 6f 20 36 35 35 33 35 2e 20 | imer.can.range.from.4.to.65535.. |
7de80 | 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 2e 00 | The.default.value.is.60.second.. |
7dea0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 28 4d | This.command.specifies.metric.(M |
7dec0 | 45 44 29 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 | ED).for.redistributed.routes..Th |
7dee0 | 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 | e.metric.range.is.0.to.429496729 |
7df00 | 35 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 | 5..There.are.six.modes.available |
7df20 | 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 | .for.route.source:.connected,.ke |
7df40 | 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 | rnel,.ospf,.rip,.static,.table.. |
7df60 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f | This.command.specifies.metric.fo |
7df80 | 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 | r.redistributed.routes.from.the. |
7dfa0 | 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 | given.route.source..There.are.fi |
7dfc0 | 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 | ve.modes.available.for.route.sou |
7dfe0 | 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 | rce:.bgp,.connected,.kernel,.osp |
7e000 | 66 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 | f,.static..The.metric.range.is.1 |
7e020 | 20 74 6f 20 31 36 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d | .to.16..This.command.specifies.m |
7e040 | 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 | etric.for.redistributed.routes.f |
7e060 | 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 | rom.the.given.route.source..Ther |
7e080 | 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 | e.are.five.modes.available.for.r |
7e0a0 | 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 | oute.source:.bgp,.connected,.ker |
7e0c0 | 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e | nel,.rip,.static..The.metric.ran |
7e0e0 | 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ge.is.1.to.16777214..This.comman |
7e100 | 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 | d.specifies.metric.for.redistrib |
7e120 | 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 | uted.routes.from.the.given.route |
7e140 | 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 | .source..There.are.six.modes.ava |
7e160 | 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f | ilable.for.route.source:.bgp,.co |
7e180 | 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 | nnected,.kernel,.ospf,.rip,.stat |
7e1a0 | 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 | ic..The.metric.range.is.1.to.167 |
7e1c0 | 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 | 77215..This.command.specifies.me |
7e1e0 | 74 72 69 63 20 74 79 70 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 | tric.type.for.redistributed.rout |
7e200 | 65 73 2e 20 44 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 65 74 72 69 | es..Difference.between.two.metri |
7e220 | 63 20 74 79 70 65 73 20 74 68 61 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 73 20 61 20 | c.types.that.metric.type.1.is.a. |
7e240 | 6d 65 74 72 69 63 20 77 68 69 63 68 20 69 73 20 22 63 6f 6d 6d 65 6e 73 75 72 61 62 6c 65 22 20 | metric.which.is."commensurable". |
7e260 | 77 69 74 68 20 69 6e 6e 65 72 20 4f 53 50 46 20 6c 69 6e 6b 73 2e 20 57 68 65 6e 20 63 61 6c 63 | with.inner.OSPF.links..When.calc |
7e280 | 75 6c 61 74 69 6e 67 20 61 20 6d 65 74 72 69 63 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c | ulating.a.metric.to.the.external |
7e2a0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6d 65 74 72 | .destination,.the.full.path.metr |
7e2c0 | 69 63 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 73 20 61 20 6d 65 74 72 69 63 20 73 75 6d | ic.is.calculated.as.a.metric.sum |
7e2e0 | 20 70 61 74 68 20 6f 66 20 61 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 68 61 64 20 61 64 76 65 | .path.of.a.router.which.had.adve |
7e300 | 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 70 6c 75 73 20 74 68 65 20 6c 69 6e 6b 20 6d | rtised.this.link.plus.the.link.m |
7e320 | 65 74 72 69 63 2e 20 54 68 75 73 2c 20 61 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 65 | etric..Thus,.a.route.with.the.le |
7e340 | 61 73 74 20 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 62 65 20 73 65 6c 65 63 | ast.summary.metric.will.be.selec |
7e360 | 74 65 64 2e 20 49 66 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 69 73 20 61 64 76 65 72 74 69 | ted..If.external.link.is.adverti |
7e380 | 73 65 64 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 20 74 68 65 20 70 61 74 68 20 | sed.with.metric.type.2.the.path. |
7e3a0 | 69 73 20 73 65 6c 65 63 74 65 64 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 | is.selected.which.lies.through.t |
7e3c0 | 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 | he.router.which.advertised.this. |
7e3e0 | 6c 69 6e 6b 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 6d 65 74 72 69 63 20 64 65 73 70 69 | link.with.the.least.metric.despi |
7e400 | 74 65 20 6f 66 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 | te.of.the.fact.that.internal.pat |
7e420 | 68 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 69 73 20 6c 6f 6e 67 65 72 20 28 77 69 74 68 | h.to.this.router.is.longer.(with |
7e440 | 20 6d 6f 72 65 20 63 6f 73 74 29 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 74 77 6f 20 72 6f 75 | .more.cost)..However,.if.two.rou |
7e460 | 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b | ters.advertised.an.external.link |
7e480 | 20 61 6e 64 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 20 74 68 65 20 70 72 65 66 | .and.with.metric.type.2.the.pref |
7e4a0 | 65 72 65 6e 63 65 20 69 73 20 67 69 76 65 6e 20 74 6f 20 74 68 65 20 70 61 74 68 20 77 68 69 63 | erence.is.given.to.the.path.whic |
7e4c0 | 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 | h.lies.through.the.router.with.a |
7e4e0 | 20 73 68 6f 72 74 65 72 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 2e 20 49 66 20 74 77 6f 20 64 | .shorter.internal.path..If.two.d |
7e500 | 69 66 66 65 72 65 6e 74 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 20 74 77 6f 20 | ifferent.routers.advertised.two. |
7e520 | 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 | links.to.the.same.external.desti |
7e540 | 6d 61 74 69 6f 6e 20 62 75 74 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 | mation.but.with.different.metric |
7e560 | 20 74 79 70 65 2c 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 73 20 70 72 65 66 65 72 72 65 | .type,.metric.type.1.is.preferre |
7e580 | 64 2e 20 49 66 20 74 79 70 65 20 6f 66 20 61 20 6d 65 74 72 69 63 20 6c 65 66 74 20 75 6e 64 65 | d..If.type.of.a.metric.left.unde |
7e5a0 | 66 69 6e 65 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 63 6f 6e 73 69 64 65 72 20 74 | fined.the.router.will.consider.t |
7e5c0 | 68 65 73 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 20 74 6f 20 68 61 76 65 20 61 20 64 65 | hese.external.links.to.have.a.de |
7e5e0 | 66 61 75 6c 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | fault.metric.type.2..This.comman |
7e600 | 64 20 73 70 65 63 69 66 69 65 73 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 74 6f 20 50 6f 69 6e | d.specifies.network.type.to.Poin |
7e620 | 74 2d 74 6f 2d 50 6f 69 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 6e 65 74 77 6f 72 6b 20 | t-to-Point..The.default.network. |
7e640 | 74 79 70 65 20 69 73 20 62 72 6f 61 64 63 61 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | type.is.broadcast..This.command. |
7e660 | 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 | specifies.that.BGP.considers.the |
7e680 | 20 4d 45 44 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 6f 72 69 67 69 | .MED.when.comparing.routes.origi |
7e6a0 | 6e 61 74 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 2d 41 53 73 20 77 69 74 | nated.from.different.sub-ASs.wit |
7e6c0 | 68 69 6e 20 74 68 65 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 74 6f 20 77 68 69 63 68 20 74 | hin.the.confederation.to.which.t |
7e6e0 | 68 69 73 20 42 47 50 20 73 70 65 61 6b 65 72 20 62 65 6c 6f 6e 67 73 2e 20 54 68 65 20 64 65 66 | his.BGP.speaker.belongs..The.def |
7e700 | 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 4d 45 44 20 61 74 74 72 69 62 | ault.state,.where.the.MED.attrib |
7e720 | 75 74 65 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | ute.is.not.considered..This.comm |
7e740 | 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 64 65 63 69 73 69 6f 6e 20 | and.specifies.that.BGP.decision. |
7e760 | 70 72 6f 63 65 73 73 20 73 68 6f 75 6c 64 20 63 6f 6e 73 69 64 65 72 20 70 61 74 68 73 20 6f 66 | process.should.consider.paths.of |
7e780 | 20 65 71 75 61 6c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 63 61 6e 64 69 64 61 74 65 73 | .equal.AS_PATH.length.candidates |
7e7a0 | 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 20 57 69 74 68 | .for.multipath.computation..With |
7e7c0 | 6f 75 74 20 74 68 65 20 6b 6e 6f 62 2c 20 74 68 65 20 65 6e 74 69 72 65 20 41 53 5f 50 41 54 48 | out.the.knob,.the.entire.AS_PATH |
7e7e0 | 20 6d 75 73 74 20 6d 61 74 63 68 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 | .must.match.for.multipath.comput |
7e800 | 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | ation..This.command.specifies.th |
7e820 | 61 74 20 61 20 72 6f 75 74 65 20 77 69 74 68 20 61 20 4d 45 44 20 69 73 20 61 6c 77 61 79 73 20 | at.a.route.with.a.MED.is.always. |
7e840 | 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 61 20 72 | considered.to.be.better.than.a.r |
7e860 | 6f 75 74 65 20 77 69 74 68 6f 75 74 20 61 20 4d 45 44 20 62 79 20 63 61 75 73 69 6e 67 20 74 68 | oute.without.a.MED.by.causing.th |
7e880 | 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 74 6f 20 68 61 76 65 20 | e.missing.MED.attribute.to.have. |
7e8a0 | 61 20 76 61 6c 75 65 20 6f 66 20 69 6e 66 69 6e 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | a.value.of.infinity..The.default |
7e8c0 | 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 | .state,.where.the.missing.MED.at |
7e8e0 | 74 72 69 62 75 74 65 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 68 61 76 65 20 61 20 | tribute.is.considered.to.have.a. |
7e900 | 76 61 6c 75 65 20 6f 66 20 7a 65 72 6f 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 | value.of.zero..This.command.spec |
7e920 | 69 66 69 65 73 20 74 68 61 74 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 72 65 63 65 69 76 65 | ifies.that.route.updates.receive |
7e940 | 64 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 20 77 69 6c 6c 20 62 65 20 73 74 6f | d.from.this.neighbor.will.be.sto |
7e960 | 72 65 64 20 75 6e 6d 6f 64 69 66 69 65 64 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 | red.unmodified,.regardless.of.th |
7e980 | 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 2e 20 57 68 65 6e 20 69 6e 62 6f 75 6e 64 20 73 | e.inbound.policy..When.inbound.s |
7e9a0 | 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 | oft.reconfiguration.is.enabled,. |
7e9c0 | 74 68 65 20 73 74 6f 72 65 64 20 75 70 64 61 74 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 | the.stored.updates.are.processed |
7e9e0 | 20 62 79 20 74 68 65 20 6e 65 77 20 70 6f 6c 69 63 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .by.the.new.policy.configuration |
7ea00 | 20 74 6f 20 63 72 65 61 74 65 20 6e 65 77 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 2e 00 | .to.create.new.inbound.updates.. |
7ea20 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 73 69 6d 70 | This.command.specifies.that.simp |
7ea40 | 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 68 6f 75 6c | le.password.authentication.shoul |
7ea60 | 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 54 68 | d.be.used.for.the.given.area..Th |
7ea80 | 65 20 70 61 73 73 77 6f 72 64 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 | e.password.must.also.be.configur |
7eaa0 | 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 69 | ed.on.a.per-interface.basis..Thi |
7eac0 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 63 6f 6d | s.command.specifies.that.the.com |
7eae0 | 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 | munity.attribute.should.not.be.s |
7eb00 | 65 6e 74 20 69 6e 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 6f 20 61 20 70 65 65 72 2e 20 | ent.in.route.updates.to.a.peer.. |
7eb20 | 42 79 20 64 65 66 61 75 6c 74 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 | By.default.community.attribute.i |
7eb40 | 73 20 73 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | s.sent..This.command.specifies.t |
7eb60 | 68 61 74 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 | hat.the.length.of.confederation. |
7eb80 | 70 61 74 68 20 73 65 74 73 20 61 6e 64 20 73 65 71 75 65 6e 63 65 73 20 73 68 6f 75 6c 64 20 62 | path.sets.and.sequences.should.b |
7eba0 | 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 64 75 72 69 6e 67 20 74 68 65 20 | e.taken.into.account.during.the. |
7ebc0 | 42 47 50 20 62 65 73 74 20 70 61 74 68 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 | BGP.best.path.decision.process.. |
7ebe0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 | This.command.specifies.the.IP.ad |
7ec00 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 64 65 76 69 63 65 2e | dress.of.the.neighboring.device. |
7ec20 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 | .This.command.specifies.the.OSPF |
7ec40 | 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 28 73 29 2e 20 49 66 20 74 68 65 20 69 6e | .enabled.interface(s)..If.the.in |
7ec60 | 74 65 72 66 61 63 65 20 68 61 73 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 64 65 66 69 | terface.has.an.address.from.defi |
7ec80 | 6e 65 64 20 72 61 6e 67 65 20 74 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c | ned.range.then.the.command.enabl |
7eca0 | 65 73 20 4f 53 50 46 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 72 6f 75 | es.OSPF.on.this.interface.so.rou |
7ecc0 | 74 65 72 20 63 61 6e 20 70 72 6f 76 69 64 65 20 6e 65 74 77 6f 72 6b 20 69 6e 66 6f 72 6d 61 74 | ter.can.provide.network.informat |
7ece0 | 69 6f 6e 20 74 6f 20 74 68 65 20 6f 74 68 65 72 20 6f 73 70 66 20 72 6f 75 74 65 72 73 20 76 69 | ion.to.the.other.ospf.routers.vi |
7ed00 | 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | a.this.interface..This.command.s |
7ed20 | 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 76 33 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 | pecifies.the.OSPFv3.enabled.inte |
7ed40 | 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 | rface..This.command.is.also.used |
7ed60 | 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 | .to.enable.the.OSPF.process..The |
7ed80 | 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e | .area.number.can.be.specified.in |
7eda0 | 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 | .decimal.notation.in.the.range.f |
7edc0 | 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 | rom.0.to.4294967295..Or.it.can.b |
7ede0 | 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f | e.specified.in.dotted.decimal.no |
7ee00 | 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 | tation.similar.to.ip.address..Th |
7ee20 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f | is.command.specifies.the.area.to |
7ee40 | 20 62 65 20 61 20 4e 53 53 41 20 54 6f 74 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 41 42 | .be.a.NSSA.Totally.Stub.Area..AB |
7ee60 | 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 | Rs.for.such.an.area.do.not.need. |
7ee80 | 74 6f 20 70 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 | to.pass.Network-Summary.(type-3) |
7eea0 | 20 4c 53 41 73 20 28 65 78 63 65 70 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 | .LSAs.(except.the.default.summar |
7eec0 | 79 20 72 6f 75 74 65 29 2c 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 | y.route),.ASBR-Summary.LSAs.(typ |
7eee0 | 65 2d 34 29 20 61 6e 64 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d | e-4).and.AS-External.LSAs.(type- |
7ef00 | 35 29 20 69 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 42 75 74 20 54 79 70 65 2d 37 20 4c 53 41 | 5).into.the.area..But.Type-7.LSA |
7ef20 | 73 20 74 68 61 74 20 63 6f 6e 76 65 72 74 20 74 6f 20 54 79 70 65 2d 35 20 61 74 20 74 68 65 20 | s.that.convert.to.Type-5.at.the. |
7ef40 | 4e 53 53 41 20 41 42 52 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | NSSA.ABR.are.allowed..This.comma |
7ef60 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 6f | nd.specifies.the.area.to.be.a.No |
7ef80 | 74 20 53 6f 20 53 74 75 62 62 79 20 41 72 65 61 2e 20 45 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 | t.So.Stubby.Area..External.routi |
7efa0 | 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 69 6d 70 6f 72 74 65 64 20 69 6e 74 6f 20 | ng.information.is.imported.into. |
7efc0 | 61 6e 20 4e 53 53 41 20 69 6e 20 54 79 70 65 2d 37 20 4c 53 41 73 2e 20 54 79 70 65 2d 37 20 4c | an.NSSA.in.Type-7.LSAs..Type-7.L |
7efe0 | 53 41 73 20 61 72 65 20 73 69 6d 69 6c 61 72 20 74 6f 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 | SAs.are.similar.to.Type-5.AS-ext |
7f000 | 65 72 6e 61 6c 20 4c 53 41 73 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 74 68 65 79 20 63 61 6e | ernal.LSAs,.except.that.they.can |
7f020 | 20 6f 6e 6c 79 20 62 65 20 66 6c 6f 6f 64 65 64 20 69 6e 74 6f 20 74 68 65 20 4e 53 53 41 2e 20 | .only.be.flooded.into.the.NSSA.. |
7f040 | 49 6e 20 6f 72 64 65 72 20 74 6f 20 66 75 72 74 68 65 72 20 70 72 6f 70 61 67 61 74 65 20 74 68 | In.order.to.further.propagate.th |
7f060 | 65 20 4e 53 53 41 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 | e.NSSA.external.information,.the |
7f080 | 20 54 79 70 65 2d 37 20 4c 53 41 20 6d 75 73 74 20 62 65 20 74 72 61 6e 73 6c 61 74 65 64 20 74 | .Type-7.LSA.must.be.translated.t |
7f0a0 | 6f 20 61 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d 4c 53 41 20 62 79 20 74 68 | o.a.Type-5.AS-external-LSA.by.th |
7f0c0 | 65 20 4e 53 53 41 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | e.NSSA.ABR..This.command.specifi |
7f0e0 | 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 53 74 75 62 20 41 72 65 61 2e 20 54 | es.the.area.to.be.a.Stub.Area..T |
7f100 | 68 61 74 20 69 73 2c 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 6e 6f 20 72 6f 75 74 65 72 20 | hat.is,.an.area.where.no.router. |
7f120 | 6f 72 69 67 69 6e 61 74 65 73 20 72 6f 75 74 65 73 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 4f 53 | originates.routes.external.to.OS |
7f140 | 50 46 20 61 6e 64 20 68 65 6e 63 65 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 61 6c 6c 20 65 | PF.and.hence.an.area.where.all.e |
7f160 | 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 72 65 20 76 69 61 20 74 68 65 20 41 42 52 28 73 | xternal.routes.are.via.the.ABR(s |
7f180 | 29 2e 20 48 65 6e 63 65 2c 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 | )..Hence,.ABRs.for.such.an.area. |
7f1a0 | 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 | do.not.need.to.pass.AS-External. |
7f1c0 | 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 6f 72 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 | LSAs.(type-5).or.ASBR-Summary.LS |
7f1e0 | 41 73 20 28 74 79 70 65 2d 34 29 20 69 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 54 68 65 79 20 | As.(type-4).into.the.area..They. |
7f200 | 6e 65 65 64 20 6f 6e 6c 79 20 70 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 | need.only.pass.Network-Summary.( |
7f220 | 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 73 75 63 68 20 61 6e 20 61 72 65 61 2c 20 | type-3).LSAs.into.such.an.area,. |
7f240 | 61 6c 6f 6e 67 20 77 69 74 68 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 73 75 6d 6d 61 | along.with.a.default-route.summa |
7f260 | 72 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 | ry..This.command.specifies.the.a |
7f280 | 72 65 61 20 74 6f 20 62 65 20 61 20 54 6f 74 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 49 | rea.to.be.a.Totally.Stub.Area..I |
7f2a0 | 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 73 74 75 62 20 61 72 65 61 20 6c 69 6d 69 74 61 74 69 | n.addition.to.stub.area.limitati |
7f2c0 | 6f 6e 73 20 74 68 69 73 20 61 72 65 61 20 74 79 70 65 20 70 72 65 76 65 6e 74 73 20 61 6e 20 41 | ons.this.area.type.prevents.an.A |
7f2e0 | 42 52 20 66 72 6f 6d 20 69 6e 6a 65 63 74 69 6e 67 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 | BR.from.injecting.Network-Summar |
7f300 | 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 | y.(type-3).LSAs.into.the.specifi |
7f320 | 65 64 20 73 74 75 62 20 61 72 65 61 2e 20 4f 6e 6c 79 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 | ed.stub.area..Only.default.summa |
7f340 | 72 79 20 72 6f 75 74 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ry.route.is.allowed..This.comman |
7f360 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 72 65 63 65 69 76 65 20 63 6f 73 | d.specifies.the.base.receive.cos |
7f380 | 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 46 6f 72 20 77 69 72 65 6c 65 | t.for.this.interface..For.wirele |
7f3a0 | 73 73 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 | ss.interfaces,.it.specifies.the. |
7f3c0 | 6d 75 6c 74 69 70 6c 69 65 72 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 70 75 74 69 6e 67 20 74 68 | multiplier.used.for.computing.th |
7f3e0 | 65 20 45 54 58 20 72 65 63 65 70 74 69 6f 6e 20 63 6f 73 74 20 28 64 65 66 61 75 6c 74 20 32 35 | e.ETX.reception.cost.(default.25 |
7f400 | 36 29 3b 20 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 | 6);.for.wired.interfaces,.it.spe |
7f420 | 63 69 66 69 65 73 20 74 68 65 20 63 6f 73 74 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 64 76 | cifies.the.cost.that.will.be.adv |
7f440 | 65 72 74 69 73 65 64 20 74 6f 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d | ertised.to.neighbours..This.comm |
7f460 | 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 63 61 79 20 66 61 63 74 6f 72 20 66 | and.specifies.the.decay.factor.f |
7f480 | 6f 72 20 74 68 65 20 65 78 70 6f 6e 65 6e 74 69 61 6c 20 6d 6f 76 69 6e 67 20 61 76 65 72 61 67 | or.the.exponential.moving.averag |
7f4a0 | 65 20 6f 66 20 52 54 54 20 73 61 6d 70 6c 65 73 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f | e.of.RTT.samples,.in.units.of.1/ |
7f4c0 | 32 35 36 2e 20 48 69 67 68 65 72 20 76 61 6c 75 65 73 20 64 69 73 63 61 72 64 20 6f 6c 64 20 73 | 256..Higher.values.discard.old.s |
7f4e0 | 61 6d 70 6c 65 73 20 66 61 73 74 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 32 | amples.faster..The.default.is.42 |
7f500 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 | ..This.command.specifies.the.def |
7f520 | 61 75 6c 74 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 | ault.local.preference.value..The |
7f540 | 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 | .local.preference.range.is.0.to. |
7f560 | 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | 4294967295..This.command.specifi |
7f580 | 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 76 61 6c 75 65 20 6f 66 20 72 | es.the.default.metric.value.of.r |
7f5a0 | 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 | edistributed.routes..The.metric. |
7f5c0 | 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d | range.is.0.to.16777214..This.com |
7f5e0 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 | mand.specifies.the.garbage-colle |
7f600 | 63 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 | ction.timer..Upon.expiration.of. |
7f620 | 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2c 20 74 68 | the.garbage-collection.timer,.th |
7f640 | 65 20 72 6f 75 74 65 20 69 73 20 66 69 6e 61 6c 6c 79 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 | e.route.is.finally.removed.from. |
7f660 | 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 | the.routing.table..The.time.rang |
7f680 | 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c | e.is.5.to.2147483647..The.defaul |
7f6a0 | 74 20 76 61 6c 75 65 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d | t.value.is.120.seconds..This.com |
7f6c0 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f | mand.specifies.the.given.neighbo |
7f6e0 | 72 20 61 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 2e 00 54 68 69 | r.as.route.reflector.client..Thi |
7f700 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6c 65 6e 67 74 68 20 6f | s.command.specifies.the.length.o |
7f720 | 66 20 74 69 6d 65 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 62 65 66 6f 72 65 20 74 68 65 20 72 | f.time,.in.seconds,.before.the.r |
7f740 | 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 73 65 6e 64 73 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 | outing.device.sends.hello.packet |
7f760 | 73 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 62 65 66 6f 72 65 20 69 74 | s.out.of.the.interface.before.it |
7f780 | 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 64 6a 61 63 65 6e 63 79 20 77 69 74 68 20 61 20 6e 65 | .establishes.adjacency.with.a.ne |
7f7a0 | 69 67 68 62 6f 72 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 20 | ighbor..The.range.is.1.to.65535. |
7f7c0 | 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 | seconds..The.default.value.is.60 |
7f7e0 | 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .seconds..This.command.specifies |
7f800 | 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 | .the.maximum.RTT,.in.millisecond |
7f820 | 73 2c 20 61 62 6f 76 65 20 77 68 69 63 68 20 77 65 20 64 6f 6e 27 74 20 69 6e 63 72 65 61 73 65 | s,.above.which.we.don't.increase |
7f840 | 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 64 65 | .the.cost.to.a.neighbour..The.de |
7f860 | 66 61 75 6c 74 20 69 73 20 31 32 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | fault.is.120.ms..This.command.sp |
7f880 | 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 63 6f 73 74 20 61 64 64 65 64 20 74 | ecifies.the.maximum.cost.added.t |
7f8a0 | 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 20 62 65 63 61 75 73 65 20 6f 66 20 52 54 54 2c 20 69 2e | o.a.neighbour.because.of.RTT,.i. |
7f8c0 | 65 2e 20 77 68 65 6e 20 74 68 65 20 52 54 54 20 69 73 20 68 69 67 68 65 72 20 6f 72 20 65 71 75 | e..when.the.RTT.is.higher.or.equ |
7f8e0 | 61 6c 20 74 68 61 6e 20 72 74 74 2d 6d 61 78 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 | al.than.rtt-max..The.default.is. |
7f900 | 31 35 30 2e 20 53 65 74 74 69 6e 67 20 69 74 20 74 6f 20 30 20 65 66 66 65 63 74 69 76 65 6c 79 | 150..Setting.it.to.0.effectively |
7f920 | 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 52 54 54 2d 62 61 73 65 64 | .disables.the.use.of.a.RTT-based |
7f940 | 20 63 6f 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | .cost..This.command.specifies.th |
7f960 | 65 20 6d 69 6e 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 | e.minimum.RTT,.in.milliseconds,. |
7f980 | 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 77 68 69 63 68 20 77 65 20 69 6e 63 72 65 61 73 65 20 | starting.from.which.we.increase. |
7f9a0 | 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 61 64 64 | the.cost.to.a.neighbour..The.add |
7f9c0 | 69 74 69 6f 6e 61 6c 20 63 6f 73 74 20 69 73 20 6c 69 6e 65 61 72 20 69 6e 20 28 72 74 74 20 2d | itional.cost.is.linear.in.(rtt.- |
7f9e0 | 20 72 74 74 2d 6d 69 6e 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 20 6d 73 2e | .rtt-min)..The.default.is.10.ms. |
7fa00 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 | .This.command.specifies.the.mini |
7fa20 | 6d 75 6d 20 72 6f 75 74 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c | mum.route.advertisement.interval |
7fa40 | 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 76 61 6c 75 | .for.the.peer..The.interval.valu |
7fa60 | 65 20 69 73 20 30 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2c 20 77 69 74 68 20 74 68 65 20 | e.is.0.to.600.seconds,.with.the. |
7fa80 | 64 65 66 61 75 6c 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 62 | default.advertisement.interval.b |
7faa0 | 65 69 6e 67 20 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | eing.0..This.command.specifies.t |
7fac0 | 68 65 20 72 6f 75 74 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 | he.router.priority.value.of.the. |
7fae0 | 6e 6f 6e 62 72 6f 61 64 63 61 73 74 20 6e 65 69 67 68 62 6f 72 20 61 73 73 6f 63 69 61 74 65 64 | nonbroadcast.neighbor.associated |
7fb00 | 20 77 69 74 68 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 2e 20 | .with.the.IP.address.specified.. |
7fb20 | 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 30 2e 20 54 68 69 73 20 6b 65 79 77 6f 72 64 20 64 | The.default.is.0..This.keyword.d |
7fb40 | 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 | oes.not.apply.to.point-to-multip |
7fb60 | 6f 69 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | oint.interfaces..This.command.sp |
7fb80 | 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 2e 20 49 66 20 72 6f 75 74 65 72 | ecifies.the.router-ID..If.router |
7fba0 | 20 49 44 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 74 20 77 69 6c 6c 20 75 73 65 | .ID.is.not.specified.it.will.use |
7fbc0 | 20 74 68 65 20 68 69 67 68 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 49 50 20 61 64 64 72 65 73 | .the.highest.interface.IP.addres |
7fbe0 | 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 | s..This.command.specifies.the.ti |
7fc00 | 6d 65 20 63 6f 6e 73 74 61 6e 74 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 6f 66 20 74 68 65 20 | me.constant,.in.seconds,.of.the. |
7fc20 | 73 6d 6f 6f 74 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 75 73 65 64 20 66 6f 72 20 69 6d 70 | smoothing.algorithm.used.for.imp |
7fc40 | 6c 65 6d 65 6e 74 69 6e 67 20 68 79 73 74 65 72 65 73 69 73 2e 20 4c 61 72 67 65 72 20 76 61 6c | lementing.hysteresis..Larger.val |
7fc60 | 75 65 73 20 72 65 64 75 63 65 20 72 6f 75 74 65 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 20 61 74 20 | ues.reduce.route.oscillation.at. |
7fc80 | 74 68 65 20 63 6f 73 74 20 6f 66 20 76 65 72 79 20 73 6c 69 67 68 74 6c 79 20 69 6e 63 72 65 61 | the.cost.of.very.slightly.increa |
7fca0 | 73 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 2e 20 54 68 65 20 76 61 6c 75 65 | sing.convergence.time..The.value |
7fcc0 | 20 30 20 64 69 73 61 62 6c 65 73 20 68 79 73 74 65 72 65 73 69 73 2c 20 61 6e 64 20 69 73 20 73 | .0.disables.hysteresis,.and.is.s |
7fce0 | 75 69 74 61 62 6c 65 20 66 6f 72 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 | uitable.for.wired.networks..The. |
7fd00 | 64 65 66 61 75 6c 74 20 69 73 20 34 20 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | default.is.4.s..This.command.spe |
7fd20 | 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 | cifies.the.time.in.milliseconds. |
7fd40 | 61 66 74 65 72 20 77 68 69 63 68 20 61 6e 20 27 69 6d 70 6f 72 74 61 6e 74 27 20 72 65 71 75 65 | after.which.an.'important'.reque |
7fd60 | 73 74 20 6f 72 20 75 70 64 61 74 65 20 77 69 6c 6c 20 62 65 20 72 65 73 65 6e 74 2e 20 54 68 65 | st.or.update.will.be.resent..The |
7fd80 | 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .default.is.2000.ms..This.comman |
7fda0 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 | d.specifies.the.time.in.millisec |
7fdc0 | 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 75 6c 65 64 20 68 65 6c 6c 6f | onds.between.two.scheduled.hello |
7fde0 | 73 2e 20 4f 6e 20 77 69 72 65 64 20 6c 69 6e 6b 73 2c 20 42 61 62 65 6c 20 6e 6f 74 69 63 65 73 | s..On.wired.links,.Babel.notices |
7fe00 | 20 61 20 6c 69 6e 6b 20 66 61 69 6c 75 72 65 20 77 69 74 68 69 6e 20 74 77 6f 20 68 65 6c 6c 6f | .a.link.failure.within.two.hello |
7fe20 | 20 69 6e 74 65 72 76 61 6c 73 3b 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 74 | .intervals;.on.wireless.links,.t |
7fe40 | 68 65 20 6c 69 6e 6b 20 71 75 61 6c 69 74 79 20 76 61 6c 75 65 20 69 73 20 72 65 65 73 74 69 6d | he.link.quality.value.is.reestim |
7fe60 | 61 74 65 64 20 61 74 20 65 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 2e 20 54 68 | ated.at.every.hello.interval..Th |
7fe80 | 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | e.default.is.4000.ms..This.comma |
7fea0 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 | nd.specifies.the.time.in.millise |
7fec0 | 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 75 6c 65 64 20 75 70 64 61 | conds.between.two.scheduled.upda |
7fee0 | 74 65 73 2e 20 53 69 6e 63 65 20 42 61 62 65 6c 20 6d 61 6b 65 73 20 65 78 74 65 6e 73 69 76 65 | tes..Since.Babel.makes.extensive |
7ff00 | 20 75 73 65 20 6f 66 20 74 72 69 67 67 65 72 65 64 20 75 70 64 61 74 65 73 2c 20 74 68 69 73 20 | .use.of.triggered.updates,.this. |
7ff20 | 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 66 61 69 72 6c 79 20 68 69 67 68 20 76 61 6c 75 65 73 | can.be.set.to.fairly.high.values |
7ff40 | 20 6f 6e 20 6c 69 6e 6b 73 20 77 69 74 68 20 6c 69 74 74 6c 65 20 70 61 63 6b 65 74 20 6c 6f 73 | .on.links.with.little.packet.los |
7ff60 | 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 30 20 6d 73 2e 00 54 68 69 73 | s..The.default.is.20000.ms..This |
7ff80 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 6f 75 74 20 74 | .command.specifies.the.timeout.t |
7ffa0 | 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 69 6d | imer..Upon.expiration.of.the.tim |
7ffc0 | 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 76 61 6c | eout,.the.route.is.no.longer.val |
7ffe0 | 69 64 3b 20 68 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 72 65 74 61 69 6e 65 64 20 69 6e 20 74 | id;.however,.it.is.retained.in.t |
80000 | 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 61 20 73 68 6f 72 74 20 74 69 6d | he.routing.table.for.a.short.tim |
80020 | 65 20 73 6f 20 74 68 61 74 20 6e 65 69 67 68 62 6f 72 73 20 63 61 6e 20 62 65 20 6e 6f 74 69 66 | e.so.that.neighbors.can.be.notif |
80040 | 69 65 64 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 62 65 65 6e 20 64 72 6f 70 | ied.that.the.route.has.been.drop |
80060 | 70 65 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 | ped..The.time.range.is.5.to.2147 |
80080 | 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 | 483647..The.default.value.is.180 |
800a0 | 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .seconds..This.command.specifies |
800c0 | 20 74 68 65 20 75 70 64 61 74 65 20 74 69 6d 65 72 2e 20 45 76 65 72 79 20 75 70 64 61 74 65 20 | .the.update.timer..Every.update. |
800e0 | 74 69 6d 65 72 20 73 65 63 6f 6e 64 73 2c 20 74 68 65 20 52 49 50 20 70 72 6f 63 65 73 73 20 69 | timer.seconds,.the.RIP.process.i |
80100 | 73 20 61 77 61 6b 65 6e 65 64 20 74 6f 20 73 65 6e 64 20 61 6e 20 75 6e 73 6f 6c 69 63 69 74 65 | s.awakened.to.send.an.unsolicite |
80120 | 64 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 | d.response.message.containing.th |
80140 | 65 20 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 61 6c 6c 20 | e.complete.routing.table.to.all. |
80160 | 6e 65 69 67 68 62 6f 72 69 6e 67 20 52 49 50 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 74 69 6d | neighboring.RIP.routers..The.tim |
80180 | 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 | e.range.is.5.to.2147483647..The. |
801a0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 | default.value.is.30.seconds..Thi |
801c0 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 6f 20 70 | s.command.specifies.whether.to.p |
801e0 | 65 72 66 6f 72 6d 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 | erform.split-horizon.on.the.inte |
80200 | 72 66 61 63 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 6e 6f 20 62 61 62 65 6c 20 73 70 6c 69 74 | rface..Specifying.no.babel.split |
80220 | 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 63 6f 72 72 65 63 74 2c 20 77 68 69 6c | -horizon.is.always.correct,.whil |
80240 | 65 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6e 20 6f 70 74 69 | e.babel.split-horizon.is.an.opti |
80260 | 6d 69 73 61 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 | misation.that.should.only.be.use |
80280 | 64 20 6f 6e 20 73 79 6d 6d 65 74 72 69 63 20 61 6e 64 20 74 72 61 6e 73 69 74 69 76 65 20 28 77 | d.on.symmetric.and.transitive.(w |
802a0 | 69 72 65 64 29 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | ired).networks..This.command.spe |
802c0 | 63 69 66 79 20 74 68 61 74 20 4f 53 50 46 20 70 61 63 6b 65 74 73 20 6d 75 73 74 20 62 65 20 61 | cify.that.OSPF.packets.must.be.a |
802e0 | 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 69 74 68 20 4d 44 35 20 48 4d 41 43 73 20 77 69 74 68 | uthenticated.with.MD5.HMACs.with |
80300 | 69 6e 20 74 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 4b 65 79 69 6e 67 20 6d 61 74 65 72 69 | in.the.given.area..Keying.materi |
80320 | 61 6c 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 | al.must.also.be.configured.on.a. |
80340 | 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | per-interface.basis..This.comman |
80360 | 64 20 73 70 65 63 69 66 79 73 20 74 68 61 74 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 | d.specifys.that.MD5.HMAC.authent |
80380 | 69 63 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 | ication.must.be.used.on.this.int |
803a0 | 65 72 66 61 63 65 2e 20 49 74 20 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 | erface..It.sets.OSPF.authenticat |
803c0 | 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 61 73 73 77 | ion.key.to.a.cryptographic.passw |
803e0 | 6f 72 64 2e 20 4b 65 79 2d 69 64 20 69 64 65 6e 74 69 66 69 65 73 20 73 65 63 72 65 74 20 6b 65 | ord..Key-id.identifies.secret.ke |
80400 | 79 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 6d 65 73 73 61 67 65 20 64 69 67 | y.used.to.create.the.message.dig |
80420 | 65 73 74 2e 20 54 68 69 73 20 49 44 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 72 6f 74 | est..This.ID.is.part.of.the.prot |
80440 | 6f 63 6f 6c 20 61 6e 64 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f | ocol.and.must.be.consistent.acro |
80460 | 73 73 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 6c 69 6e 6b 2e 20 54 68 65 20 6b 65 79 20 63 61 | ss.routers.on.a.link..The.key.ca |
80480 | 6e 20 62 65 20 6c 6f 6e 67 20 75 70 20 74 6f 20 31 36 20 63 68 61 72 73 20 28 6c 61 72 67 65 72 | n.be.long.up.to.16.chars.(larger |
804a0 | 20 73 74 72 69 6e 67 73 20 77 69 6c 6c 20 62 65 20 74 72 75 6e 63 61 74 65 64 29 2c 20 61 6e 64 | .strings.will.be.truncated),.and |
804c0 | 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 67 69 76 65 6e 20 6b 65 | .is.associated.with.the.given.ke |
804e0 | 79 2d 69 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e | y-id..This.command.summarizes.in |
80500 | 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 | tra.area.paths.from.specified.ar |
80520 | 65 61 20 69 6e 74 6f 20 6f 6e 65 20 54 79 70 65 2d 33 20 49 6e 74 65 72 2d 41 72 65 61 20 50 72 | ea.into.one.Type-3.Inter-Area.Pr |
80540 | 65 66 69 78 20 4c 53 41 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 | efix.LSA.announced.to.other.area |
80560 | 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 | s..This.command.can.be.used.only |
80580 | 20 69 6e 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 | .in.ABR..This.command.summarizes |
805a0 | 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 | .intra.area.paths.from.specified |
805c0 | 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 73 75 6d 6d 61 72 79 2d 4c 53 41 20 28 54 79 70 65 | .area.into.one.summary-LSA.(Type |
805e0 | 2d 33 29 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 | -3).announced.to.other.areas..Th |
80600 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 | is.command.can.be.used.only.in.A |
80620 | 42 52 20 61 6e 64 20 4f 4e 4c 59 20 72 6f 75 74 65 72 2d 4c 53 41 73 20 28 54 79 70 65 2d 31 29 | BR.and.ONLY.router-LSAs.(Type-1) |
80640 | 20 61 6e 64 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 73 20 28 54 79 70 65 2d 32 29 20 28 69 2e 65 2e | .and.network-LSAs.(Type-2).(i.e. |
80660 | 20 4c 53 41 73 20 77 69 74 68 20 73 63 6f 70 65 20 61 72 65 61 29 20 63 61 6e 20 62 65 20 73 75 | .LSAs.with.scope.area).can.be.su |
80680 | 6d 6d 61 72 69 7a 65 64 2e 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d 4c 53 41 73 20 28 54 79 70 65 | mmarized..AS-external-LSAs.(Type |
806a0 | 2d 35 29 20 63 61 6e e2 80 99 74 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 20 2d 20 74 68 65 69 | -5).can...t.be.summarized.-.thei |
806c0 | 72 20 73 63 6f 70 65 20 69 73 20 41 53 2e 20 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 | r.scope.is.AS..The.optional.argu |
806e0 | 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 63 6f 73 74 60 20 73 70 65 63 69 66 69 65 73 20 74 68 | ment.:cfgcmd:`cost`.specifies.th |
80700 | 65 20 61 67 67 72 65 67 61 74 65 64 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 65 20 6d 65 | e.aggregated.link.metric..The.me |
80720 | 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 | tric.range.is.0.to.16777215..Thi |
80740 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 73 75 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 | s.command.to.ensure.not.advertis |
80760 | 65 20 74 68 65 20 73 75 6d 6d 61 72 79 20 6c 73 61 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 | e.the.summary.lsa.for.the.matche |
80780 | 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 75 73 | d.external.LSAs..This.command.us |
807a0 | 65 73 20 74 6f 20 63 6c 65 61 72 20 42 47 50 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 | es.to.clear.BGP.route.dampening. |
807c0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 6f 20 75 6e 73 75 70 70 72 65 73 73 20 73 75 | information.and.to.unsuppress.su |
807e0 | 70 70 72 65 73 73 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 | ppressed.routes..This.command.wa |
80800 | 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 | s.introduced.in.VyOS.1.4.-.it.wa |
80820 | 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 | s.previously.called:.``set.firew |
80840 | 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a | all.options.interface.<name>.adj |
80860 | 75 73 74 2d 6d 73 73 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 | ust-mss.<value>``.This.command.w |
80880 | 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 | as.introduced.in.VyOS.1.4.-.it.w |
808a0 | 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 | as.previously.called:.``set.fire |
808c0 | 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 | wall.options.interface.<name>.ad |
808e0 | 6a 75 73 74 2d 6d 73 73 36 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | just-mss6.<value>``.This.command |
80900 | 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 | .will.change.the.hold.down.value |
80920 | 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 | .for.IGP-LDP.synchronization.dur |
80940 | 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 | ing.convergence/interface.flap.e |
80960 | 76 65 6e 74 73 2c 20 62 75 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 6e | vents,.but.for.this.interface.on |
80980 | 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 | ly..This.command.will.change.the |
809a0 | 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 47 | .hold.down.value.globally.for.IG |
809c0 | 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e | P-LDP.synchronization.during.con |
809e0 | 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2e 00 | vergence/interface.flap.events.. |
80a00 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 74 69 | This.command.will.configure.a.ti |
80a20 | 65 2d 62 72 65 61 6b 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6c 6f 63 61 6c 20 4c 46 41 | e-breaker.for.multiple.local.LFA |
80a40 | 20 62 61 63 6b 75 70 73 2e 20 54 68 65 20 6c 6f 77 65 72 20 69 6e 64 65 78 20 6e 75 6d 62 65 72 | .backups..The.lower.index.number |
80a60 | 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 66 69 72 73 74 2e 00 54 68 69 73 20 | s.will.be.processed.first..This. |
80a80 | 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 | command.will.enable.IGP-LDP.sync |
80aa0 | 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 53 49 53 2e 20 54 | hronization.globally.for.ISIS..T |
80ac0 | 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 | his.requires.for.LDP.to.be.funct |
80ae0 | 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | ional..This.is.described.in.:rfc |
80b00 | 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 | :`5443`..By.default.all.interfac |
80b20 | 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 49 53 2d 49 53 20 61 72 65 20 65 6e 61 62 | es.operational.in.IS-IS.are.enab |
80b40 | 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 | led.for.synchronization..Loopbac |
80b60 | 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c | ks.are.exempt..This.command.will |
80b80 | 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 | .enable.IGP-LDP.synchronization. |
80ba0 | 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 4f 53 50 46 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 | globally.for.OSPF..This.requires |
80bc0 | 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 | .for.LDP.to.be.functional..This. |
80be0 | 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 | is.described.in.:rfc:`5443`..By. |
80c00 | 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e | default.all.interfaces.operation |
80c20 | 61 6c 20 69 6e 20 4f 53 50 46 20 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 | al.in.OSPF.are.enabled.for.synch |
80c40 | 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 | ronization..Loopbacks.are.exempt |
80c60 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 | ..This.command.will.generate.a.d |
80c80 | 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 31 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 | efault-route.in.L1.database..Thi |
80ca0 | 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c | s.command.will.generate.a.defaul |
80cc0 | 74 2d 72 6f 75 74 65 20 69 6e 20 4c 32 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d | t-route.in.L2.database..This.com |
80ce0 | 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 | mand.will.give.an.overview.of.a. |
80d00 | 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 00 54 68 69 73 20 63 | rule.in.a.single.rule-set.This.c |
80d20 | 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 | ommand.will.give.an.overview.of. |
80d40 | 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2c 20 70 6c 75 | a.rule.in.a.single.rule-set,.plu |
80d60 | 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e | s.information.for.default.action |
80d80 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 | ..This.command.will.give.an.over |
80da0 | 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d | view.of.a.rule.in.a.single.rule- |
80dc0 | 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f | set..This.command.will.give.an.o |
80de0 | 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 | verview.of.a.single.rule-set..Th |
80e00 | 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6c 69 6d 69 74 20 4c 46 41 20 62 61 63 6b 75 70 | is.command.will.limit.LFA.backup |
80e20 | 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 75 70 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | .computation.up.to.the.specified |
80e40 | 20 70 72 65 66 69 78 20 70 72 69 6f 72 69 74 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 | .prefix.priority..This.command.w |
80e60 | 6f 75 6c 64 20 61 6c 6c 6f 77 20 74 68 65 20 64 79 6e 61 6d 69 63 20 75 70 64 61 74 65 20 6f 66 | ould.allow.the.dynamic.update.of |
80e80 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 76 65 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 | .capabilities.over.an.establishe |
80ea0 | 64 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 63 72 65 | d.BGP.session..This.commands.cre |
80ec0 | 61 74 65 73 20 61 20 62 72 69 64 67 65 20 74 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 62 69 | ates.a.bridge.that.is.used.to.bi |
80ee0 | 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 74 68 31 20 76 6c 61 6e 20 32 34 31 20 77 69 74 68 | nd.traffic.on.eth1.vlan.241.with |
80f00 | 20 74 68 65 20 76 78 6c 61 6e 32 34 31 2d 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 49 50 20 | .the.vxlan241-interface..The.IP. |
80f20 | 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 49 74 20 6d 61 79 20 | address.is.not.required..It.may. |
80f40 | 68 6f 77 65 76 65 72 20 62 65 20 75 73 65 64 20 61 73 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 | however.be.used.as.a.default.gat |
80f60 | 65 77 61 79 20 66 6f 72 20 65 61 63 68 20 4c 65 61 66 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 | eway.for.each.Leaf.which.allows. |
80f80 | 64 65 76 69 63 65 73 20 6f 6e 20 74 68 65 20 76 6c 61 6e 20 74 6f 20 72 65 61 63 68 20 6f 74 68 | devices.on.the.vlan.to.reach.oth |
80fa0 | 65 72 20 73 75 62 6e 65 74 73 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 | er.subnets..This.requires.that.t |
80fc0 | 68 65 20 73 75 62 6e 65 74 73 20 61 72 65 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 | he.subnets.are.redistributed.by. |
80fe0 | 4f 53 50 46 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 20 77 69 6c 6c 20 6c 65 61 72 | OSPF.so.that.the.Spine.will.lear |
81000 | 6e 20 68 6f 77 20 74 6f 20 72 65 61 63 68 20 69 74 2e 20 54 6f 20 64 6f 20 74 68 69 73 20 79 6f | n.how.to.reach.it..To.do.this.yo |
81020 | 75 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 4f 53 50 46 20 6e 65 74 77 6f 72 | u.need.to.change.the.OSPF.networ |
81040 | 6b 20 66 72 6f 6d 20 27 31 30 2e 30 2e 30 2e 30 2f 38 27 20 74 6f 20 27 30 2e 30 2e 30 2e 30 2f | k.from.'10.0.0.0/8'.to.'0.0.0.0/ |
81060 | 30 27 20 74 6f 20 61 6c 6c 6f 77 20 31 37 32 2e 31 36 2f 31 32 2d 6e 65 74 77 6f 72 6b 73 20 74 | 0'.to.allow.172.16/12-networks.t |
81080 | 6f 20 62 65 20 61 64 76 65 72 74 69 73 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 73 | o.be.advertised..This.commands.s |
810a0 | 70 65 63 69 66 69 65 73 20 74 68 65 20 46 69 6e 69 74 65 20 53 74 61 74 65 20 4d 61 63 68 69 6e | pecifies.the.Finite.State.Machin |
810c0 | 65 20 28 46 53 4d 29 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 | e.(FSM).intended.to.control.the. |
810e0 | 74 69 6d 69 6e 67 20 6f 66 20 74 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 53 50 46 20 63 | timing.of.the.execution.of.SPF.c |
81100 | 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 49 47 50 20 65 | alculations.in.response.to.IGP.e |
81120 | 76 65 6e 74 73 2e 20 54 68 65 20 70 72 6f 63 65 73 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 | vents..The.process.described.in. |
81140 | 3a 72 66 63 3a 60 38 34 30 35 60 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | :rfc:`8405`..This.configuration. |
81160 | 65 6e 61 62 6c 65 73 20 74 68 65 20 54 43 50 20 72 65 76 65 72 73 65 20 70 72 6f 78 79 20 66 6f | enables.the.TCP.reverse.proxy.fo |
81180 | 72 20 74 68 65 20 22 6d 79 2d 74 63 70 2d 61 70 69 22 20 73 65 72 76 69 63 65 2e 20 49 6e 63 6f | r.the."my-tcp-api".service..Inco |
811a0 | 6d 69 6e 67 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 70 6f 72 74 20 38 38 38 | ming.TCP.connections.on.port.888 |
811c0 | 38 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 | 8.will.be.load.balanced.across.t |
811e0 | 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 73 20 28 73 72 76 30 31 20 61 6e 64 20 73 72 | he.backend.servers.(srv01.and.sr |
81200 | 76 30 32 29 20 75 73 69 6e 67 20 74 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 6c 6f 61 64 2d | v02).using.the.round-robin.load- |
81220 | 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 | balancing.algorithm..This.config |
81240 | 75 72 61 74 69 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 72 65 | uration.listen.on.port.80.and.re |
81260 | 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 73 74 73 20 74 6f 20 48 54 54 50 | direct.incoming.requests.to.HTTP |
81280 | 53 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 | S:.This.configuration.modifies.t |
812a0 | 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 | he.behavior.of.the.network.state |
812c0 | 6d 65 6e 74 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 65 | ment..If.you.have.this.configure |
812e0 | 64 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 65 78 | d.the.underlying.network.must.ex |
81300 | 69 73 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 | ist.in.the.routing.table..This.c |
81320 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 | onfiguration.parameter.is.requir |
81340 | 65 64 20 61 6e 64 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 74 6f 20 65 61 63 68 20 73 75 | ed.and.must.be.unique.to.each.su |
81360 | 62 6e 65 74 2e 20 49 74 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 70 20 73 75 62 6e | bnet..It.is.required.to.map.subn |
81380 | 65 74 73 20 74 6f 20 6c 65 61 73 65 20 66 69 6c 65 20 65 6e 74 72 69 65 73 2e 00 54 68 69 73 20 | ets.to.lease.file.entries..This. |
813a0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 74 68 65 | configuration.parameter.lets.the |
813c0 | 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 | .DHCP.server.to.listen.for.DHCP. |
813e0 | 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 | requests.sent.to.the.specified.a |
81400 | 64 64 72 65 73 73 2c 20 69 74 20 69 73 20 6f 6e 6c 79 20 72 65 61 6c 69 73 74 69 63 61 6c 6c 79 | ddress,.it.is.only.realistically |
81420 | 20 75 73 65 66 75 6c 20 66 6f 72 20 61 20 73 65 72 76 65 72 20 77 68 6f 73 65 20 6f 6e 6c 79 20 | .useful.for.a.server.whose.only. |
81440 | 63 6c 69 65 6e 74 73 20 61 72 65 20 72 65 61 63 68 65 64 20 76 69 61 20 75 6e 69 63 61 73 74 73 | clients.are.reached.via.unicasts |
81460 | 2c 20 73 75 63 68 20 61 73 20 76 69 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 73 2e | ,.such.as.via.DHCP.relay.agents. |
81480 | 00 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 68 65 6c 70 66 75 6c 20 69 66 20 79 6f 75 20 77 61 | .This.could.be.helpful.if.you.wa |
814a0 | 6e 74 20 74 6f 20 74 65 73 74 20 68 6f 77 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 | nt.to.test.how.an.application.be |
814c0 | 68 61 76 65 73 20 75 6e 64 65 72 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 64 | haves.under.certain.network.cond |
814e0 | 69 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 72 65 61 74 65 73 20 61 20 72 6f 75 74 65 20 70 6f 6c | itions..This.creates.a.route.pol |
81500 | 69 63 79 20 63 61 6c 6c 65 64 20 46 49 4c 54 45 52 2d 57 45 42 20 77 69 74 68 20 6f 6e 65 20 72 | icy.called.FILTER-WEB.with.one.r |
81520 | 75 6c 65 20 74 6f 20 73 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 | ule.to.set.the.routing.table.for |
81540 | 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 28 54 43 50 20 70 6f 72 74 20 38 30 29 20 | .matching.traffic.(TCP.port.80). |
81560 | 74 6f 20 74 61 62 6c 65 20 49 44 20 31 30 30 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 | to.table.ID.100.instead.of.the.d |
81580 | 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 64 65 66 61 75 | efault.routing.table..This.defau |
815a0 | 6c 74 73 20 74 6f 20 31 30 30 30 30 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 | lts.to.10000..This.defaults.to.1 |
815c0 | 38 31 32 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 30 37 2e 00 54 68 69 73 | 812..This.defaults.to.2007..This |
815e0 | 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 | .defaults.to.30.seconds..This.de |
81600 | 66 61 75 6c 74 73 20 74 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 | faults.to.300.seconds..This.defa |
81620 | 75 6c 74 73 20 74 6f 20 34 39 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 2e 00 | ults.to.49..This.defaults.to.5.. |
81640 | 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 44 50 00 54 68 69 73 20 64 65 66 61 75 6c | This.defaults.to.UDP.This.defaul |
81660 | 74 73 20 74 6f 20 62 6f 74 68 20 31 2e 32 20 61 6e 64 20 31 2e 33 2e 00 54 68 69 73 20 64 65 66 | ts.to.both.1.2.and.1.3..This.def |
81680 | 61 75 6c 74 73 20 74 6f 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d 76 30 32 2e 61 70 69 2e 6c 65 | aults.to.https://acme-v02.api.le |
816a0 | 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 00 54 68 69 73 20 64 65 66 | tsencrypt.org/directory.This.def |
816c0 | 61 75 6c 74 73 20 74 6f 20 70 68 79 30 2e 00 54 68 69 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 | aults.to.phy0..This.depends.on.t |
816e0 | 68 65 20 64 72 69 76 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 6d 61 79 20 6e | he.driver.capabilities.and.may.n |
81700 | 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 77 69 74 68 20 61 6c 6c 20 64 72 69 76 65 72 73 | ot.be.available.with.all.drivers |
81720 | 2e 00 54 68 69 73 20 64 69 61 62 6c 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 | ..This.diable.the.external.cache |
81740 | 20 61 6e 64 20 64 69 72 65 63 74 6c 79 20 69 6e 6a 65 63 74 73 20 74 68 65 20 66 6c 6f 77 2d 73 | .and.directly.injects.the.flow-s |
81760 | 74 61 74 65 73 20 69 6e 74 6f 20 74 68 65 20 69 6e 2d 6b 65 72 6e 65 6c 20 43 6f 6e 6e 65 63 74 | tates.into.the.in-kernel.Connect |
81780 | 69 6f 6e 20 54 72 61 63 6b 69 6e 67 20 53 79 73 74 65 6d 20 6f 66 20 74 68 65 20 62 61 63 6b 75 | ion.Tracking.System.of.the.backu |
817a0 | 70 20 66 69 72 65 77 61 6c 6c 2e 00 54 68 69 73 20 64 69 61 67 72 61 6d 20 63 6f 72 72 65 73 70 | p.firewall..This.diagram.corresp |
817c0 | 6f 6e 64 73 20 77 69 74 68 20 74 68 65 20 65 78 61 6d 70 6c 65 20 73 69 74 65 20 74 6f 20 73 69 | onds.with.the.example.site.to.si |
817e0 | 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 00 54 68 69 73 20 65 6e 61 | te.configuration.below..This.ena |
81800 | 62 6c 65 73 20 3a 72 66 63 3a 60 33 31 33 37 60 20 73 75 70 70 6f 72 74 2c 20 77 68 65 72 65 20 | bles.:rfc:`3137`.support,.where. |
81820 | 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 64 65 73 63 72 69 62 65 73 20 69 74 73 20 74 | the.OSPF.process.describes.its.t |
81840 | 72 61 6e 73 69 74 20 6c 69 6e 6b 73 20 69 6e 20 69 74 73 20 72 6f 75 74 65 72 2d 4c 53 41 20 61 | ransit.links.in.its.router-LSA.a |
81860 | 73 20 68 61 76 69 6e 67 20 69 6e 66 69 6e 69 74 65 20 64 69 73 74 61 6e 63 65 20 73 6f 20 74 68 | s.having.infinite.distance.so.th |
81880 | 61 74 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 61 76 6f 69 64 20 63 61 6c 63 | at.other.routers.will.avoid.calc |
818a0 | 75 6c 61 74 69 6e 67 20 74 72 61 6e 73 69 74 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 20 74 68 | ulating.transit.paths.through.th |
818c0 | 65 20 72 6f 75 74 65 72 20 77 68 69 6c 65 20 73 74 69 6c 6c 20 62 65 69 6e 67 20 61 62 6c 65 20 | e.router.while.still.being.able. |
818e0 | 74 6f 20 72 65 61 63 68 20 6e 65 74 77 6f 72 6b 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f | to.reach.networks.through.the.ro |
81900 | 75 74 65 72 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 74 68 65 20 67 72 65 65 6e 66 69 65 6c | uter..This.enables.the.greenfiel |
81920 | 64 20 6f 70 74 69 6f 6e 20 77 68 69 63 68 20 73 65 74 73 20 74 68 65 20 60 60 5b 47 46 5d 60 60 | d.option.which.sets.the.``[GF]`` |
81940 | 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 65 73 74 61 62 6c 69 73 68 65 73 20 6f 75 72 20 50 6f 72 | .option.This.establishes.our.Por |
81960 | 74 20 46 6f 72 77 61 72 64 20 72 75 6c 65 2c 20 62 75 74 20 69 66 20 77 65 20 63 72 65 61 74 65 | t.Forward.rule,.but.if.we.create |
81980 | 64 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 74 20 77 69 6c 6c 20 6c 69 6b 65 | d.a.firewall.policy.it.will.like |
819a0 | 6c 79 20 62 6c 6f 63 6b 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 54 68 69 73 20 65 78 61 6d 70 | ly.block.the.traffic..This.examp |
819c0 | 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 74 61 72 67 65 74 20 61 6e 20 4d 53 53 20 63 6c | le.shows.how.to.target.an.MSS.cl |
819e0 | 61 6d 70 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 6f 20 31 33 36 30 20 62 79 74 65 | amp.(in.our.example.to.1360.byte |
81a00 | 73 29 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 2e | s).to.a.specific.destination.IP. |
81a20 | 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 75 73 65 73 20 43 41 43 65 72 74 20 61 73 20 63 65 72 | .This.example.uses.CACert.as.cer |
81a40 | 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 | tificate.authority..This.feature |
81a60 | 20 63 6c 6f 73 65 6c 79 20 77 6f 72 6b 73 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 65 | .closely.works.together.with.:re |
81a80 | 66 3a 60 70 6b 69 60 20 73 75 62 73 79 73 74 65 6d 20 61 73 20 79 6f 75 20 72 65 71 75 69 72 65 | f:`pki`.subsystem.as.you.require |
81aa0 | 64 20 61 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 54 68 69 73 20 66 65 61 74 75 | d.a.x509.certificate..This.featu |
81ac0 | 72 65 20 73 65 72 76 65 73 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 74 68 69 67 68 74 65 | re.serves.the.purpose.of.thighte |
81ae0 | 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 71 75 69 | ning.the.packet.validation.requi |
81b00 | 72 65 6d 65 6e 74 73 20 74 6f 20 61 76 6f 69 64 20 72 65 63 65 69 76 69 6e 67 20 42 46 44 20 63 | rements.to.avoid.receiving.BFD.c |
81b20 | 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 73 65 73 73 69 6f | ontrol.packets.from.other.sessio |
81b40 | 6e 73 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 75 6d 6d 61 72 69 73 65 73 20 6f 72 69 67 | ns..This.feature.summarises.orig |
81b60 | 69 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 54 79 70 65 2d 35 20 61 6e 64 | inated.external.LSAs.(Type-5.and |
81b80 | 20 54 79 70 65 2d 37 29 2e 20 53 75 6d 6d 61 72 79 20 52 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 | .Type-7)..Summary.Route.will.be. |
81ba0 | 6f 72 69 67 69 6e 61 74 65 64 20 6f 6e 2d 62 65 68 61 6c 66 20 6f 66 20 61 6c 6c 20 6d 61 74 63 | originated.on-behalf.of.all.matc |
81bc0 | 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e | hed.external.LSAs..This.function |
81be0 | 61 6c 69 74 79 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 20 61 64 64 69 6e 67 20 74 68 | ality.is.controlled.by.adding.th |
81c00 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 | e.following.configuration:.This. |
81c20 | 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 62 6f 74 68 20 69 6e 64 69 76 69 64 75 61 6c 20 61 64 | functions.for.both.individual.ad |
81c40 | 64 72 65 73 73 65 73 20 61 6e 64 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 73 2e 00 54 68 69 73 | dresses.and.address.groups..This |
81c60 | 20 67 69 76 65 73 20 75 73 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f | .gives.us.IGP-LDP.synchronizatio |
81c80 | 6e 20 66 6f 72 20 61 6c 6c 20 6e 6f 6e 2d 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 | n.for.all.non-loopback.interface |
81ca0 | 73 20 77 69 74 68 20 61 20 68 6f 6c 64 64 6f 77 6e 20 74 69 6d 65 72 20 6f 66 20 7a 65 72 6f 20 | s.with.a.holddown.timer.of.zero. |
81cc0 | 73 65 63 6f 6e 64 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 4d 50 4c 53 20 73 65 67 6d | seconds:.This.gives.us.MPLS.segm |
81ce0 | 65 6e 74 20 72 6f 75 74 69 6e 67 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6c 61 62 65 6c 73 20 66 | ent.routing.enabled.and.labels.f |
81d00 | 6f 72 20 66 61 72 20 65 6e 64 20 6c 6f 6f 70 62 61 63 6b 73 3a 00 54 68 69 73 20 67 69 76 65 73 | or.far.end.loopbacks:.This.gives |
81d20 | 20 75 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6e 65 69 67 68 62 6f 72 73 68 69 70 73 2c | .us.the.following.neighborships, |
81d40 | 20 4c 65 76 65 6c 20 31 20 61 6e 64 20 4c 65 76 65 6c 20 32 3a 00 54 68 69 73 20 69 6e 73 74 72 | .Level.1.and.Level.2:.This.instr |
81d60 | 75 63 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 72 65 70 6c 79 20 77 69 74 68 20 61 75 74 68 | ucts.opennhrp.to.reply.with.auth |
81d80 | 6f 72 61 74 69 76 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 | orative.answers.on.NHRP.Resoluti |
81da0 | 6f 6e 20 52 65 71 75 65 73 74 73 20 64 65 73 74 69 6e 69 65 64 20 74 6f 20 61 64 64 72 65 73 73 | on.Requests.destinied.to.address |
81dc0 | 65 73 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 69 6e 73 74 65 61 64 20 6f 66 | es.in.this.interface.(instead.of |
81de0 | 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 73 29 2e 20 54 68 69 73 20 65 | .forwarding.the.packets)..This.e |
81e00 | 66 66 65 63 74 69 76 65 6c 79 20 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f | ffectively.allows.the.creation.o |
81e20 | 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 20 74 6f 20 73 75 62 6e 65 74 73 20 6c 6f 63 | f.shortcut.routes.to.subnets.loc |
81e40 | 61 74 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 61 | ated.on.the.interface..This.is.a |
81e60 | 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 20 77 68 65 72 65 20 62 6f 74 68 20 3a 72 65 66 | .common.scenario.where.both.:ref |
81e80 | 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 | :`source-nat`.and.:ref:`destinat |
81ea0 | 69 6f 6e 2d 6e 61 74 60 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 74 20 74 68 65 20 73 | ion-nat`.are.configured.at.the.s |
81ec0 | 61 6d 65 20 74 69 6d 65 2e 20 49 74 27 73 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 77 68 65 | ame.time..It's.commonly.used.whe |
81ee0 | 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 73 20 6e 65 65 64 20 | n.internal.(private).hosts.need. |
81f00 | 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 65 | to.establish.a.connection.with.e |
81f20 | 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 73 | xternal.resources.and.external.s |
81f40 | 79 73 74 65 6d 73 20 6e 65 65 64 20 74 6f 20 61 63 63 65 73 73 20 69 6e 74 65 72 6e 61 6c 20 28 | ystems.need.to.access.internal.( |
81f60 | 70 72 69 76 61 74 65 29 20 72 65 73 6f 75 72 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f | private).resources..This.is.a.co |
81f80 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 60 3c | nfiguration.parameter.for.the.`< |
81fa0 | 73 75 62 6e 65 74 3e 60 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 | subnet>`,.saying.that.as.part.of |
81fc0 | 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 | .the.response,.tell.the.client.t |
81fe0 | 68 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 72 | hat.the.default.gateway.can.be.r |
82000 | 65 61 63 68 65 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 20 61 | eached.at.`<address>`..This.is.a |
82020 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 | .configuration.parameter.for.the |
82040 | 20 73 75 62 6e 65 74 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 | .subnet,.saying.that.as.part.of. |
82060 | 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 | the.response,.tell.the.client.th |
82080 | 61 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 | at.the.DNS.server.can.be.found.a |
820a0 | 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f | t.`<address>`..This.is.a.mandato |
820c0 | 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 | ry.command..Sets.regular.express |
820e0 | 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 74 72 69 6e 67 20 | ion.to.match.against.log.string. |
82100 | 6d 65 73 73 61 67 65 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d | message..This.is.a.mandatory.com |
82120 | 6d 61 6e 64 2e 20 53 65 74 73 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 | mand..Sets.the.full.path.to.the. |
82140 | 73 63 72 69 70 74 2e 20 54 68 65 20 73 63 72 69 70 74 20 66 69 6c 65 20 6d 75 73 74 20 62 65 20 | script..The.script.file.must.be. |
82160 | 65 78 65 63 75 74 61 62 6c 65 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 | executable..This.is.a.mandatory. |
82180 | 6f 70 74 69 6f 6e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 73 65 74 74 69 | option.This.is.a.mandatory.setti |
821a0 | 6e 67 2e 00 54 68 69 73 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 | ng..This.is.achieved.by.using.th |
821c0 | 65 20 66 69 72 73 74 20 74 68 72 65 65 20 62 69 74 73 20 6f 66 20 74 68 65 20 54 6f 53 20 28 54 | e.first.three.bits.of.the.ToS.(T |
821e0 | 79 70 65 20 6f 66 20 53 65 72 76 69 63 65 29 20 66 69 65 6c 64 20 74 6f 20 63 61 74 65 67 6f 72 | ype.of.Service).field.to.categor |
82200 | 69 7a 65 20 64 61 74 61 20 73 74 72 65 61 6d 73 20 61 6e 64 2c 20 69 6e 20 61 63 63 6f 72 64 61 | ize.data.streams.and,.in.accorda |
82220 | 6e 63 65 20 77 69 74 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 70 72 65 63 65 64 65 6e 63 65 20 | nce.with.the.defined.precedence. |
82240 | 70 61 72 61 6d 65 74 65 72 73 2c 20 61 20 64 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 2e 00 | parameters,.a.decision.is.made.. |
82260 | 54 68 69 73 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 74 68 65 20 48 55 42 73 20 49 | This.is.also.known.as.the.HUBs.I |
82280 | 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 | P.address.or.FQDN..This.is.an.op |
822a0 | 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 62 65 63 61 75 73 65 20 74 68 65 20 65 76 65 6e 74 | tional.command.because.the.event |
822c0 | 20 68 61 6e 64 6c 65 72 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 | .handler.will.be.automatically.c |
822e0 | 72 65 61 74 65 64 20 61 66 74 65 72 20 61 6e 79 20 6f 66 20 74 68 65 20 6e 65 78 74 20 63 6f 6d | reated.after.any.of.the.next.com |
82300 | 6d 61 6e 64 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 | mands..This.is.an.optional.comma |
82320 | 6e 64 2e 20 41 64 64 73 20 61 72 67 75 6d 65 6e 74 73 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 | nd..Adds.arguments.to.the.script |
82340 | 2e 20 41 72 67 75 6d 65 6e 74 73 20 6d 75 73 74 20 62 65 20 73 65 70 61 72 61 74 65 64 20 62 79 | ..Arguments.must.be.separated.by |
82360 | 20 73 70 61 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d | .spaces..This.is.an.optional.com |
82380 | 6d 61 6e 64 2e 20 41 64 64 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 61 6e 64 20 69 74 73 20 76 | mand..Adds.environment.and.its.v |
823a0 | 61 6c 75 65 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 55 73 65 20 73 65 70 61 72 61 74 65 | alue.to.the.script..Use.separate |
823c0 | 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 65 61 63 68 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 00 | .commands.for.each.environment.. |
823e0 | 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 46 69 6c | This.is.an.optional.command..Fil |
82400 | 74 65 72 73 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 62 79 20 73 79 73 6c 6f 67 2d 69 64 65 6e | ters.log.messages.by.syslog-iden |
82420 | 74 69 66 69 65 72 2e 00 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 6f 20 73 75 70 70 6f 72 74 20 | tifier..This.is.done.to.support. |
82440 | 28 65 74 68 65 72 6e 65 74 29 20 73 77 69 74 63 68 20 66 65 61 74 75 72 65 73 2c 20 6c 69 6b 65 | (ethernet).switch.features,.like |
82460 | 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 77 68 65 72 65 20 74 68 65 20 69 6e 64 69 76 69 64 75 | .:rfc:`3069`,.where.the.individu |
82480 | 61 6c 20 70 6f 72 74 73 20 61 72 65 20 4e 4f 54 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6d 6d | al.ports.are.NOT.allowed.to.comm |
824a0 | 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 65 72 2c 20 62 75 74 20 74 68 65 | unicate.with.each.other,.but.the |
824c0 | 79 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 75 70 73 | y.are.allowed.to.talk.to.the.ups |
824e0 | 74 72 65 61 6d 20 72 6f 75 74 65 72 2e 20 41 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 | tream.router..As.described.in.:r |
82500 | 66 63 3a 60 33 30 36 39 60 2c 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 6c 6c | fc:`3069`,.it.is.possible.to.all |
82520 | 6f 77 20 74 68 65 73 65 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 74 68 | ow.these.hosts.to.communicate.th |
82540 | 72 6f 75 67 68 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 74 65 72 20 62 79 20 70 72 6f | rough.the.upstream.router.by.pro |
82560 | 78 79 5f 61 72 70 27 69 6e 67 2e 00 54 68 69 73 20 69 73 20 65 73 70 65 63 69 61 6c 6c 79 20 75 | xy_arp'ing..This.is.especially.u |
82580 | 73 65 66 75 6c 20 66 6f 72 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 | seful.for.the.upstream.interface |
825a0 | 2c 20 73 69 6e 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 | ,.since.the.source.for.multicast |
825c0 | 20 74 72 61 66 66 69 63 20 69 73 20 6f 66 74 65 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 | .traffic.is.often.from.a.remote. |
825e0 | 6c 6f 63 61 74 69 6f 6e 2e 00 54 68 69 73 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 69 6d | location..This.is.one.of.the.sim |
82600 | 70 6c 65 73 74 20 74 79 70 65 73 20 6f 66 20 74 75 6e 6e 65 6c 73 2c 20 61 73 20 64 65 66 69 6e | plest.types.of.tunnels,.as.defin |
82620 | 65 64 20 62 79 20 3a 72 66 63 3a 60 32 30 30 33 60 2e 20 49 74 20 74 61 6b 65 73 20 61 6e 20 49 | ed.by.:rfc:`2003`..It.takes.an.I |
82640 | 50 76 34 20 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 69 74 20 61 73 20 61 20 70 61 79 | Pv4.packet.and.sends.it.as.a.pay |
82660 | 6c 6f 61 64 20 6f 66 20 61 6e 6f 74 68 65 72 20 49 50 76 34 20 70 61 63 6b 65 74 2e 20 46 6f 72 | load.of.another.IPv4.packet..For |
82680 | 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6f 74 68 65 72 | .this.reason,.there.are.no.other |
826a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 | .configuration.options.for.this. |
826c0 | 6b 69 6e 64 20 6f 66 20 74 75 6e 6e 65 6c 2e 00 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c | kind.of.tunnel..This.is.optional |
826e0 | 2e 00 54 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b | ..This.is.similar.to.the.network |
82700 | 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 | .groups.part,.but.here.you.are.a |
82720 | 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 | ble.to.negate.the.matching.addre |
82740 | 73 73 65 73 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 49 50 76 36 20 63 6f 75 6e 74 65 72 70 61 | sses..This.is.the.IPv6.counterpa |
82760 | 72 74 20 6f 66 20 49 50 49 50 2e 20 49 27 6d 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 61 6e 20 | rt.of.IPIP..I'm.not.aware.of.an. |
82780 | 52 46 43 20 74 68 61 74 20 64 65 66 69 6e 65 73 20 74 68 69 73 20 65 6e 63 61 70 73 75 6c 61 74 | RFC.that.defines.this.encapsulat |
827a0 | 69 6f 6e 20 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 62 75 74 20 69 74 27 73 20 61 20 6e 61 74 | ion.specifically,.but.it's.a.nat |
827c0 | 75 72 61 6c 20 73 70 65 63 69 66 69 63 20 63 61 73 65 20 6f 66 20 49 50 76 36 20 65 6e 63 61 70 | ural.specific.case.of.IPv6.encap |
827e0 | 73 75 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 20 64 65 73 63 72 69 62 65 64 20 69 6e | sulation.mechanisms.described.in |
82800 | 20 3a 72 66 63 3a 32 34 37 33 60 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 41 4e 20 65 78 74 | .:rfc:2473`..This.is.the.LAN.ext |
82820 | 65 6e 73 69 6f 6e 20 75 73 65 20 63 61 73 65 2e 20 54 68 65 20 65 74 68 30 20 70 6f 72 74 20 6f | ension.use.case..The.eth0.port.o |
82840 | 66 20 74 68 65 20 64 69 73 74 61 6e 74 20 56 50 4e 20 70 65 65 72 73 20 77 69 6c 6c 20 62 65 20 | f.the.distant.VPN.peers.will.be. |
82860 | 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6b 65 20 69 66 20 74 68 65 72 65 | directly.connected.like.if.there |
82880 | 20 77 61 73 20 61 20 73 77 69 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 6d 2e 00 54 68 69 73 | .was.a.switch.between.them..This |
828a0 | 20 69 73 20 74 68 65 20 4c 43 44 20 6d 6f 64 65 6c 20 75 73 65 64 20 69 6e 20 79 6f 75 72 20 73 | .is.the.LCD.model.used.in.your.s |
828c0 | 79 73 74 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ystem..This.is.the.configuration |
828e0 | 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 | .parameter.for.the.entire.shared |
82900 | 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 | .network.definition..All.subnets |
82920 | 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .will.inherit.this.configuration |
82940 | 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 | .item.if.not.specified.locally.. |
82960 | 54 68 69 73 20 69 73 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 68 6f | This.is.the.equivalent.of.the.ho |
82980 | 73 74 20 62 6c 6f 63 6b 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 6f 66 20 69 73 63 2d 64 68 | st.block.in.dhcpd.conf.of.isc-dh |
829a0 | 63 70 64 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 68 79 | cpd..This.is.the.name.of.the.phy |
829c0 | 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 | sical.interface.used.to.connect. |
829e0 | 74 6f 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 61 62 20 63 6f 6d 70 6c 65 74 | to.your.LCD.display..Tab.complet |
82a00 | 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 6c 69 73 | ion.is.supported.and.it.will.lis |
82a20 | 74 20 79 6f 75 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 73 65 72 69 61 6c 20 69 6e 74 65 72 | t.you.all.available.serial.inter |
82a40 | 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 70 6f 6c 69 63 79 20 74 68 61 74 20 72 65 | face..This.is.the.policy.that.re |
82a60 | 71 75 69 65 72 65 73 20 74 68 65 20 6c 6f 77 65 73 74 20 72 65 73 6f 75 72 63 65 73 20 66 6f 72 | quieres.the.lowest.resources.for |
82a80 | 20 74 68 65 20 73 61 6d 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 66 66 69 63 2e 20 42 75 74 | .the.same.amount.of.traffic..But |
82aa0 | 20 2a 2a 76 65 72 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 69 | .**very.likely.you.do.not.need.i |
82ac0 | 74 20 61 73 20 79 6f 75 20 63 61 6e 6e 6f 74 20 67 65 74 20 6d 75 63 68 20 66 72 6f 6d 20 69 74 | t.as.you.cannot.get.much.from.it |
82ae0 | 2e 20 53 6f 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 64 20 6a 75 73 74 20 74 6f 20 65 | ..Sometimes.it.is.used.just.to.e |
82b00 | 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 2e 2a 2a 00 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 2c | nable.logging.**.This.is.useful, |
82b20 | 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 | .for.example,.in.combination.wit |
82b40 | 68 20 68 6f 73 74 66 69 6c 65 20 75 70 64 61 74 65 2e 00 54 68 69 73 20 69 73 20 77 68 65 72 65 | h.hostfile.update..This.is.where |
82b60 | 20 22 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 22 20 63 6f 6d 65 73 20 69 6e 74 | ."UDP.broadcast.relay".comes.int |
82b80 | 6f 20 70 6c 61 79 21 20 49 74 20 77 69 6c 6c 20 66 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 | o.play!.It.will.forward.received |
82ba0 | 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 65 64 20 | .broadcasts.to.other.configured. |
82bc0 | 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 6d 61 6b 65 73 20 74 68 65 20 73 65 72 76 65 72 20 | networks..This.makes.the.server. |
82be0 | 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 3a 20 31 30 | authoritatively.not.aware.of:.10 |
82c00 | 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 | .in-addr.arpa,.168.192.in-addr.a |
82c20 | 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 77 68 69 | rpa,.16-31.172.in-addr.arpa,.whi |
82c40 | 63 68 20 65 6e 61 62 6c 69 6e 67 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 28 | ch.enabling.upstream.DNS.server( |
82c60 | 73 29 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 | s).to.be.used.for.reverse.lookup |
82c80 | 73 20 6f 66 20 74 68 65 73 65 20 7a 6f 6e 65 73 2e 00 54 68 69 73 20 6d 65 74 68 6f 64 20 61 75 | s.of.these.zones..This.method.au |
82ca0 | 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 49 50 76 36 20 74 72 61 66 66 69 | tomatically.disables.IPv6.traffi |
82cc0 | 63 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e | c.forwarding.on.the.interface.in |
82ce0 | 20 71 75 65 73 74 69 6f 6e 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 | .question..This.mode.provides.fa |
82d00 | 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 | ult.tolerance..This.mode.provide |
82d20 | 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 | s.fault.tolerance..The.:cfgcmd:` |
82d40 | 70 72 69 6d 61 72 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f | primary`.option,.documented.belo |
82d60 | 77 2c 20 61 66 66 65 63 74 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 | w,.affects.the.behavior.of.this. |
82d80 | 6d 6f 64 65 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 6c 6f 61 64 20 62 61 | mode..This.mode.provides.load.ba |
82da0 | 6c 61 6e 63 69 6e 67 20 61 6e 64 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 | lancing.and.fault.tolerance..Thi |
82dc0 | 73 20 6f 70 74 69 6f 6e 20 61 64 64 73 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 | s.option.adds.Power.Constraint.e |
82de0 | 6c 65 6d 65 6e 74 20 77 68 65 6e 20 61 70 70 6c 69 63 61 62 6c 65 20 61 6e 64 20 43 6f 75 6e 74 | lement.when.applicable.and.Count |
82e00 | 72 79 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 64 64 65 64 2e 20 50 6f 77 65 72 20 43 6f 6e 73 74 | ry.element.is.added..Power.Const |
82e20 | 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 54 72 61 | raint.element.is.required.by.Tra |
82e40 | 6e 73 6d 69 74 20 50 6f 77 65 72 20 43 6f 6e 74 72 6f 6c 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e | nsmit.Power.Control..This.option |
82e60 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 | .can.be.specified.multiple.times |
82e80 | 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 6d 75 | ..This.option.can.be.supplied.mu |
82ea0 | 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6d 61 6e | ltiple.times..This.option.is.man |
82ec0 | 64 61 74 6f 72 79 20 69 6e 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 20 6d 6f 64 65 2e 00 54 68 69 | datory.in.Access-Point.mode..Thi |
82ee0 | 73 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 77 68 65 6e 20 72 75 6e 6e 69 6e | s.option.is.required.when.runnin |
82f00 | 67 20 61 20 44 4d 56 50 4e 20 73 70 6f 6b 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 | g.a.DMVPN.spoke..This.option.is. |
82f20 | 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 73 20 61 20 77 | used.by.some.DHCP.clients.as.a.w |
82f40 | 61 79 20 66 6f 72 20 75 73 65 72 73 20 74 6f 20 73 70 65 63 69 66 79 20 69 64 65 6e 74 69 66 79 | ay.for.users.to.specify.identify |
82f60 | 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 | ing.information.to.the.client..T |
82f80 | 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 61 20 73 69 6d 69 6c 61 72 20 77 61 79 | his.can.be.used.in.a.similar.way |
82fa0 | 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 65 6e 74 69 66 69 65 72 20 | .to.the.vendor-class-identifier. |
82fc0 | 6f 70 74 69 6f 6e 2c 20 62 75 74 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6f 70 74 | option,.but.the.value.of.the.opt |
82fe0 | 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2c 20 6e 6f | ion.is.specified.by.the.user,.no |
83000 | 74 20 74 68 65 20 76 65 6e 64 6f 72 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 | t.the.vendor..This.option.is.use |
83020 | 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 74 6f 20 69 64 65 6e 74 69 | d.by.some.DHCP.clients.to.identi |
83040 | 66 79 20 74 68 65 20 76 65 6e 64 6f 72 20 74 79 70 65 20 61 6e 64 20 70 6f 73 73 69 62 6c 79 20 | fy.the.vendor.type.and.possibly. |
83060 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 63 6c 69 65 | the.configuration.of.a.DHCP.clie |
83080 | 6e 74 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 61 20 73 74 72 69 6e 67 20 | nt..The.information.is.a.string. |
830a0 | 6f 66 20 62 79 74 65 73 20 77 68 6f 73 65 20 63 6f 6e 74 65 6e 74 73 20 61 72 65 20 73 70 65 63 | of.bytes.whose.contents.are.spec |
830c0 | 69 66 69 63 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 20 61 6e 64 20 61 72 65 20 6e 6f 74 20 73 | ific.to.the.vendor.and.are.not.s |
830e0 | 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 74 61 6e 64 61 72 64 2e 00 54 68 69 73 20 6f 70 74 | pecified.in.a.standard..This.opt |
83100 | 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 60 60 74 69 6d 65 6f 75 74 60 | ion.must.be.used.with.``timeout` |
83120 | 60 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e 6c 79 20 61 66 66 65 63 | `.option..This.option.only.affec |
83140 | 74 73 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 | ts.802.3ad.mode..This.option.spe |
83160 | 63 69 66 69 65 73 20 61 20 64 65 6c 61 79 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 | cifies.a.delay.in.seconds.before |
83180 | 20 76 72 72 70 20 69 6e 73 74 61 6e 63 65 73 20 73 74 61 72 74 20 75 70 20 61 66 74 65 72 20 6b | .vrrp.instances.start.up.after.k |
831a0 | 65 65 70 61 6c 69 76 65 64 20 73 74 61 72 74 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 73 20 64 | eepalived.starts..This.options.d |
831c0 | 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 00 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 61 | efaults.to.2048.This.parameter.a |
831e0 | 6c 6c 6f 77 73 20 74 6f 20 22 73 68 6f 72 74 63 75 74 22 20 72 6f 75 74 65 73 20 28 6e 6f 6e 2d | llows.to."shortcut".routes.(non- |
83200 | 62 61 63 6b 62 6f 6e 65 29 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 2e | backbone).for.inter-area.routes. |
83220 | 20 54 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 | .There.are.three.modes.available |
83240 | 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 3a 00 54 68 69 73 20 70 | .for.routes.shortcutting:.This.p |
83260 | 6f 6c 69 63 79 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 6d | olicy.is.intended.to.provide.a.m |
83280 | 6f 72 65 20 62 61 6c 61 6e 63 65 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 72 61 | ore.balanced.distribution.of.tra |
832a0 | 66 66 69 63 20 74 68 61 6e 20 6c 61 79 65 72 32 20 61 6c 6f 6e 65 2c 20 65 73 70 65 63 69 61 6c | ffic.than.layer2.alone,.especial |
832c0 | 6c 79 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 65 72 65 20 61 20 6c 61 79 65 72 | ly.in.environments.where.a.layer |
832e0 | 33 20 67 61 74 65 77 61 79 20 64 65 76 69 63 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 | 3.gateway.device.is.required.to. |
83300 | 72 65 61 63 68 20 6d 6f 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 70 72 | reach.most.destinations..This.pr |
83320 | 6f 6d 70 74 65 64 20 73 6f 6d 65 20 49 53 50 73 20 74 6f 20 64 65 76 65 6c 6f 70 20 61 20 70 6f | ompted.some.ISPs.to.develop.a.po |
83340 | 6c 69 63 79 20 77 69 74 68 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 41 52 49 4e 20 28 41 6d 65 | licy.within.the.:abbr:`ARIN.(Ame |
83360 | 72 69 63 61 6e 20 52 65 67 69 73 74 72 79 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 4e 75 6d 62 | rican.Registry.for.Internet.Numb |
83380 | 65 72 73 29 60 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6e 65 77 20 70 72 69 76 61 74 65 20 61 64 | ers)`.to.allocate.new.private.ad |
833a0 | 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 43 47 4e 73 2c 20 62 75 74 20 41 52 49 4e 20 64 | dress.space.for.CGNs,.but.ARIN.d |
833c0 | 65 66 65 72 72 65 64 20 74 6f 20 74 68 65 20 49 45 54 46 20 62 65 66 6f 72 65 20 69 6d 70 6c 65 | eferred.to.the.IETF.before.imple |
833e0 | 6d 65 6e 74 69 6e 67 20 74 68 65 20 70 6f 6c 69 63 79 20 69 6e 64 69 63 61 74 69 6e 67 20 74 68 | menting.the.policy.indicating.th |
83400 | 61 74 20 74 68 65 20 6d 61 74 74 65 72 20 77 61 73 20 6e 6f 74 20 61 20 74 79 70 69 63 61 6c 20 | at.the.matter.was.not.a.typical. |
83420 | 61 6c 6c 6f 63 61 74 69 6f 6e 20 69 73 73 75 65 20 62 75 74 20 61 20 72 65 73 65 72 76 61 74 69 | allocation.issue.but.a.reservati |
83440 | 6f 6e 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 65 63 68 6e 69 63 61 6c 20 70 75 | on.of.addresses.for.technical.pu |
83460 | 72 70 6f 73 65 73 20 28 70 65 72 20 3a 72 66 63 3a 60 32 38 36 30 60 29 2e 00 54 68 69 73 20 72 | rposes.(per.:rfc:`2860`)..This.r |
83480 | 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 | equired.setting.defines.the.acti |
834a0 | 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f | on.of.the.current.rule..If.actio |
834c0 | 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 6a 75 6d | n.is.set.to.``jump``,.then.``jum |
834e0 | 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 | p-target``.is.also.needed..This. |
83500 | 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 | required.setting.defines.the.act |
83520 | 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 | ion.of.the.current.rule..If.acti |
83540 | 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2c 20 74 68 65 6e 20 6a 75 6d 70 2d 74 61 72 | on.is.set.to.jump,.then.jump-tar |
83560 | 67 65 74 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 | get.is.also.needed..This.require |
83580 | 73 20 74 77 6f 20 66 69 6c 65 73 2c 20 6f 6e 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 64 | s.two.files,.one.to.create.the.d |
835a0 | 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 64 65 76 29 20 61 6e 64 20 6f 6e 65 20 74 6f 20 63 6f | evice.(XXX.netdev).and.one.to.co |
835c0 | 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 6f 6e 20 74 68 65 20 64 65 76 69 63 | nfigure.the.network.on.the.devic |
835e0 | 65 20 28 58 58 58 2e 6e 65 74 77 6f 72 6b 29 00 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 | e.(XXX.network).This.results.in. |
83600 | 74 68 65 20 61 63 74 69 76 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 73 | the.active.configuration:.This.s |
83620 | 61 79 73 20 74 68 61 74 20 74 68 69 73 20 64 65 76 69 63 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 | ays.that.this.device.is.the.only |
83640 | 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 49 | .DHCP.server.for.this.network..I |
83660 | 66 20 6f 74 68 65 72 20 64 65 76 69 63 65 73 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 6f 66 | f.other.devices.are.trying.to.of |
83680 | 66 65 72 20 44 48 43 50 20 6c 65 61 73 65 73 2c 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 77 69 | fer.DHCP.leases,.this.machine.wi |
836a0 | 6c 6c 20 73 65 6e 64 20 27 44 48 43 50 4e 41 4b 27 20 74 6f 20 61 6e 79 20 64 65 76 69 63 65 20 | ll.send.'DHCPNAK'.to.any.device. |
836c0 | 74 72 79 69 6e 67 20 74 6f 20 72 65 71 75 65 73 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 | trying.to.request.an.IP.address. |
836e0 | 74 68 61 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f | that.is.not.valid.for.this.netwo |
83700 | 72 6b 2e 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 65 73 20 63 6f 6e 66 69 | rk..This.section.describes.confi |
83720 | 67 75 72 69 6e 67 20 44 4e 53 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 6e 61 6d 65 6c 79 | guring.DNS.on.the.system,.namely |
83740 | 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 65 73 20 74 68 65 20 73 79 73 | :.This.section.describes.the.sys |
83760 | 74 65 6d 27 73 20 68 6f 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 68 6f 77 20 74 | tem's.host.information.and.how.t |
83780 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2c 20 69 74 20 63 6f 76 65 72 73 20 74 68 65 20 | o.configure.them,.it.covers.the. |
837a0 | 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 69 63 73 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 6e | following.topics:.This.section.n |
837c0 | 65 65 64 73 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 2c 20 65 78 61 6d 70 6c 65 73 20 61 6e 64 20 | eeds.improvements,.examples.and. |
837e0 | 65 78 70 6c 61 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 | explanations..This.set.the.defau |
83800 | 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 | lt.action.of.the.rule-set.if.no. |
83820 | 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 | rule.matched.a.packet.criteria.. |
83840 | 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a | If.defacult-action.is.set.to.``j |
83860 | 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 | ump``,.then.``default-jump-targe |
83880 | 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 | t``.is.also.needed..This.set.the |
838a0 | 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 | .default.action.of.the.rule-set. |
838c0 | 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 | if.no.rule.matched.a.packet.crit |
838e0 | 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 | eria..If.defacult-action.is.set. |
83900 | 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 | to.``jump``,.then.``default-jump |
83920 | 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 | -target``.is.also.needed..Note.t |
83940 | 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 | hat.for.base.chains,.default.act |
83960 | 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 | ion.can.only.be.set.to.``accept` |
83980 | 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 | `.or.``drop``,.while.on.custom.c |
839a0 | 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 | hain,.more.actions.are.available |
839c0 | 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 | ..This.set.the.default.action.of |
839e0 | 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 | .the.rule-set.if.no.rule.matched |
83a00 | 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 75 6c 74 2d 61 | .a.packet.criteria..If.default-a |
83a20 | 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 | ction.is.set.to.``jump``,.then.` |
83a40 | 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e | `default-jump-target``.is.also.n |
83a60 | 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 | eeded..Note.that.for.base.chains |
83a80 | 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 | ,.default.action.can.only.be.set |
83aa0 | 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c | .to.``accept``.or.``drop``,.whil |
83ac0 | 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 | e.on.custom.chain,.more.actions. |
83ae0 | 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 73 20 74 68 65 20 61 63 63 | are.available..This.sets.the.acc |
83b00 | 65 70 74 65 64 20 63 69 70 68 65 72 73 20 74 6f 20 75 73 65 20 77 68 65 6e 20 76 65 72 73 69 6f | epted.ciphers.to.use.when.versio |
83b20 | 6e 20 3d 3e 20 32 2e 34 2e 30 20 61 6e 64 20 4e 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 28 77 | n.=>.2.4.0.and.NCP.is.enabled.(w |
83b40 | 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 29 2e 20 44 65 66 61 75 6c 74 20 4e 43 | hich.is.the.default)..Default.NC |
83b60 | 50 20 63 69 70 68 65 72 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 3e 3d 20 32 2e 34 2e 30 20 69 | P.cipher.for.versions.>=.2.4.0.i |
83b80 | 73 20 61 65 73 32 35 36 67 63 6d 2e 20 54 68 65 20 66 69 72 73 74 20 63 69 70 68 65 72 20 69 6e | s.aes256gcm..The.first.cipher.in |
83ba0 | 20 74 68 69 73 20 6c 69 73 74 20 69 73 20 77 68 61 74 20 73 65 72 76 65 72 20 70 75 73 68 65 73 | .this.list.is.what.server.pushes |
83bc0 | 20 74 6f 20 63 6c 69 65 6e 74 73 2e 00 54 68 69 73 20 73 65 74 73 20 74 68 65 20 63 69 70 68 65 | .to.clients..This.sets.the.ciphe |
83be0 | 72 20 77 68 65 6e 20 4e 43 50 20 28 4e 65 67 6f 74 69 61 62 6c 65 20 43 72 79 70 74 6f 20 50 61 | r.when.NCP.(Negotiable.Crypto.Pa |
83c00 | 72 61 6d 65 74 65 72 73 29 20 69 73 20 64 69 73 61 62 6c 65 64 20 6f 72 20 4f 70 65 6e 56 50 4e | rameters).is.disabled.or.OpenVPN |
83c20 | 20 76 65 72 73 69 6f 6e 20 3c 20 32 2e 34 2e 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 64 | .version.<.2.4.0..This.setting.d |
83c40 | 65 66 61 75 6c 74 73 20 74 6f 20 31 35 30 30 20 61 6e 64 20 69 73 20 76 61 6c 69 64 20 62 65 74 | efaults.to.1500.and.is.valid.bet |
83c60 | 77 65 65 6e 20 31 30 20 61 6e 64 20 36 30 30 30 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 | ween.10.and.60000..This.setting. |
83c80 | 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 6f | enable.or.disable.the.response.o |
83ca0 | 66 20 69 63 6d 70 20 62 72 6f 61 64 63 61 73 74 20 6d 65 73 73 61 67 65 73 2e 20 54 68 65 20 66 | f.icmp.broadcast.messages..The.f |
83cc0 | 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 | ollowing.system.parameter.will.b |
83ce0 | 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 68 61 6e 64 6c 65 20 69 | e.altered:.This.setting.handle.i |
83d00 | 66 20 56 79 4f 53 20 61 63 63 65 70 74 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 73 6f 75 | f.VyOS.accept.packets.with.a.sou |
83d20 | 72 63 65 20 72 6f 75 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | rce.route.option..The.following. |
83d40 | 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 | system.parameter.will.be.altered |
83d60 | 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 2c 20 77 68 69 63 68 20 64 65 66 61 75 6c 74 73 20 74 | :.This.setting,.which.defaults.t |
83d80 | 6f 20 33 36 30 30 20 73 65 63 6f 6e 64 73 2c 20 70 75 74 73 20 61 20 6d 61 78 69 6d 75 6d 20 6f | o.3600.seconds,.puts.a.maximum.o |
83da0 | 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 6e 65 67 61 74 69 76 65 20 65 6e | n.the.amount.of.time.negative.en |
83dc0 | 74 72 69 65 73 20 61 72 65 20 63 61 63 68 65 64 2e 00 54 68 69 73 20 73 65 74 75 70 20 77 69 6c | tries.are.cached..This.setup.wil |
83de0 | 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 | l.make.the.VRRP.process.execute. |
83e00 | 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 63 68 65 63 6b | the.``/config/scripts/vrrp-check |
83e20 | 2e 73 68 20 73 63 72 69 70 74 60 60 20 65 76 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2c 20 61 | .sh.script``.every.60.seconds,.a |
83e40 | 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 67 72 6f 75 70 20 74 6f 20 74 68 65 20 66 | nd.transition.the.group.to.the.f |
83e60 | 61 75 6c 74 20 73 74 61 74 65 20 69 66 20 69 74 20 66 61 69 6c 73 20 28 69 2e 65 2e 20 65 78 69 | ault.state.if.it.fails.(i.e..exi |
83e80 | 74 73 20 77 69 74 68 20 6e 6f 6e 2d 7a 65 72 6f 20 73 74 61 74 75 73 29 20 74 68 72 65 65 20 74 | ts.with.non-zero.status).three.t |
83ea0 | 69 6d 65 73 3a 00 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 73 70 65 63 69 66 69 65 73 20 64 | imes:.This.statement.specifies.d |
83ec0 | 68 63 70 36 63 20 74 6f 20 6f 6e 6c 79 20 65 78 63 68 61 6e 67 65 20 69 6e 66 6f 72 6d 61 74 69 | hcp6c.to.only.exchange.informati |
83ee0 | 6f 6e 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 77 69 | onal.configuration.parameters.wi |
83f00 | 74 68 20 73 65 72 76 65 72 73 2e 20 41 20 6c 69 73 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 | th.servers..A.list.of.DNS.server |
83f20 | 20 61 64 64 72 65 73 73 65 73 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 73 75 63 68 | .addresses.is.an.example.of.such |
83f40 | 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 75 | .parameters..This.statement.is.u |
83f60 | 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 6e | seful.when.the.client.does.not.n |
83f80 | 65 65 64 20 73 74 61 74 65 66 75 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d | eed.stateful.configuration.param |
83fa0 | 65 74 65 72 73 20 73 75 63 68 20 61 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 | eters.such.as.IPv6.addresses.or. |
83fc0 | 70 72 65 66 69 78 65 73 2e 00 54 68 69 73 20 73 75 70 70 6f 72 74 20 6d 61 79 20 62 65 20 65 6e | prefixes..This.support.may.be.en |
83fe0 | 61 62 6c 65 64 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 28 61 6e 64 20 69 6e 64 65 | abled.administratively.(and.inde |
84000 | 66 69 6e 69 74 65 6c 79 29 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 64 6d 69 | finitely).with.the.:cfgcmd:`admi |
84020 | 6e 69 73 74 72 61 74 69 76 65 60 20 63 6f 6d 6d 61 6e 64 2e 20 49 74 20 6d 61 79 20 61 6c 73 6f | nistrative`.command..It.may.also |
84040 | 20 62 65 20 65 6e 61 62 6c 65 64 20 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 2e 20 43 6f 6e 64 69 | .be.enabled.conditionally..Condi |
84060 | 74 69 6f 6e 61 6c 20 65 6e 61 62 6c 69 6e 67 20 6f 66 20 6d 61 78 2d 6d 65 74 72 69 63 20 72 6f | tional.enabling.of.max-metric.ro |
84080 | 75 74 65 72 2d 6c 73 61 73 20 63 61 6e 20 62 65 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 | uter-lsas.can.be.for.a.period.of |
840a0 | 20 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 73 74 61 72 74 75 70 20 77 69 74 68 20 74 68 65 20 | .seconds.after.startup.with.the. |
840c0 | 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 74 61 72 74 75 70 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 | :cfgcmd:`on-startup.<seconds>`.c |
840e0 | 6f 6d 6d 61 6e 64 20 61 6e 64 2f 6f 72 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 | ommand.and/or.for.a.period.of.se |
84100 | 63 6f 6e 64 73 20 70 72 69 6f 72 20 74 6f 20 73 68 75 74 64 6f 77 6e 20 77 69 74 68 20 74 68 65 | conds.prior.to.shutdown.with.the |
84120 | 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 68 75 74 64 6f 77 6e 20 3c 73 65 63 6f 6e 64 73 3e 60 | .:cfgcmd:`on-shutdown.<seconds>` |
84140 | 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f | .command..The.time.range.is.5.to |
84160 | 20 38 36 34 30 30 2e 00 54 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 63 6f 6d 6d 6f 6e | .86400..This.technique.is.common |
84180 | 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e | ly.referred.to.as.NAT.Reflection |
841a0 | 20 6f 72 20 48 61 69 72 70 69 6e 20 4e 41 54 2e 00 54 68 69 73 20 74 65 63 68 6e 6f 6c 6f 67 79 | .or.Hairpin.NAT..This.technology |
841c0 | 20 69 73 20 6b 6e 6f 77 6e 20 62 79 20 64 69 66 66 65 72 65 6e 74 20 6e 61 6d 65 73 3a 00 54 68 | .is.known.by.different.names:.Th |
841e0 | 69 73 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 71 75 65 75 65 20 70 6f 73 73 69 62 6c 65 20 79 | is.the.simplest.queue.possible.y |
84200 | 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 74 6f 20 79 6f 75 72 20 74 72 61 66 66 69 63 2e 20 54 72 | ou.can.apply.to.your.traffic..Tr |
84220 | 61 66 66 69 63 20 6d 75 73 74 20 67 6f 20 74 68 72 6f 75 67 68 20 61 20 66 69 6e 69 74 65 20 71 | affic.must.go.through.a.finite.q |
84240 | 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 2e | ueue.before.it.is.actually.sent. |
84260 | 20 59 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 68 6f 77 20 6d 61 6e 79 20 70 61 63 6b 65 74 | .You.must.define.how.many.packet |
84280 | 73 20 74 68 61 74 20 71 75 65 75 65 20 63 61 6e 20 63 6f 6e 74 61 69 6e 2e 00 54 68 69 73 20 74 | s.that.queue.can.contain..This.t |
842a0 | 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 47 4e 53 33 2e 00 54 68 | opology.was.built.using.GNS3..Th |
842c0 | 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 74 69 6f 6e | is.will.add.the.following.option |
842e0 | 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 | .to.the.Kernel.commandline:.This |
84300 | 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 77 6f 20 6f 70 74 69 | .will.add.the.following.two.opti |
84320 | 6f 6e 73 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 | ons.to.the.Kernel.commandline:.T |
84340 | 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6d 6f 73 74 20 77 69 64 65 6c 79 20 75 73 65 64 | his.will.be.the.most.widely.used |
84360 | 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 61 20 72 6f 75 74 65 72 20 63 61 72 72 79 69 6e 67 20 | .interface.on.a.router.carrying. |
84380 | 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 72 65 61 6c 20 77 6f 72 6c 64 2e 00 54 68 69 73 20 | traffic.to.the.real.world..This. |
843a0 | 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 41 52 50 20 65 6e 74 72 | will.configure.a.static.ARP.entr |
843c0 | 79 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 69 6e 67 20 60 3c 61 64 64 72 65 73 73 3e 60 20 74 | y.always.resolving.`<address>`.t |
843e0 | 6f 20 60 3c 6d 61 63 3e 60 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 | o.`<mac>`.for.interface.`<interf |
84400 | 61 63 65 3e 60 2e 00 54 68 69 73 20 77 69 6c 6c 20 6d 61 74 63 68 20 54 43 50 20 74 72 61 66 66 | ace>`..This.will.match.TCP.traff |
84420 | 69 63 20 77 69 74 68 20 73 6f 75 72 63 65 20 70 6f 72 74 20 38 30 2e 00 54 68 69 73 20 77 69 6c | ic.with.source.port.80..This.wil |
84440 | 6c 20 72 65 6e 64 65 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 64 63 6c 69 65 6e 74 5f | l.render.the.following.ddclient_ |
84460 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 74 72 79 3a 00 54 68 69 73 20 77 69 6c 6c 20 | .configuration.entry:.This.will. |
84480 | 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 | show.you.a.basic.firewall.overvi |
844a0 | 65 77 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 | ew.This.will.show.you.a.basic.fi |
844c0 | 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 2c 20 66 6f 72 20 61 6c 6c 20 72 75 6c 65 73 65 74 | rewall.overview,.for.all.ruleset |
844e0 | 2c 20 61 6e 64 20 6e 6f 74 20 6f 6e 6c 79 20 66 6f 72 20 69 70 76 34 00 54 68 69 73 20 77 69 6c | ,.and.not.only.for.ipv4.This.wil |
84500 | 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 61 20 | l.show.you.a.basic.summary.of.a. |
84520 | 70 61 72 74 69 63 75 6c 61 72 20 7a 6f 6e 65 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 | particular.zone..This.will.show. |
84540 | 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 7a 6f 6e 65 73 20 63 6f 6e | you.a.basic.summary.of.zones.con |
84560 | 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 | figuration..This.will.show.you.a |
84580 | 20 72 75 6c 65 2d 73 65 74 20 73 74 61 74 69 73 74 69 63 20 73 69 6e 63 65 20 74 68 65 20 6c 61 | .rule-set.statistic.since.the.la |
845a0 | 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 74 | st.boot..This.will.show.you.a.st |
845c0 | 61 74 69 73 74 69 63 20 6f 66 20 61 6c 6c 20 72 75 6c 65 2d 73 65 74 73 20 73 69 6e 63 65 20 74 | atistic.of.all.rule-sets.since.t |
845e0 | 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 | he.last.boot..This.will.show.you |
84600 | 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 75 6c 65 2d 73 65 74 73 20 61 6e 64 20 67 72 6f 75 | .a.summary.of.rule-sets.and.grou |
84620 | 70 73 00 54 68 69 73 20 77 6f 72 6b 61 72 6f 75 6e 64 20 6c 65 74 73 20 79 6f 75 20 61 70 70 6c | ps.This.workaround.lets.you.appl |
84640 | 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 | y.a.shaping.policy.to.the.ingres |
84660 | 73 20 74 72 61 66 66 69 63 20 62 79 20 66 69 72 73 74 20 72 65 64 69 72 65 63 74 69 6e 67 20 69 | s.traffic.by.first.redirecting.i |
84680 | 74 20 74 6f 20 61 6e 20 69 6e 2d 62 65 74 77 65 65 6e 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 | t.to.an.in-between.virtual.inter |
846a0 | 66 61 63 65 20 28 60 49 6e 74 65 72 6d 65 64 69 61 74 65 20 46 75 6e 63 74 69 6f 6e 61 6c 20 42 | face.(`Intermediate.Functional.B |
846c0 | 6c 6f 63 6b 60 5f 29 2e 20 54 68 65 72 65 2c 20 69 6e 20 74 68 61 74 20 76 69 72 74 75 61 6c 20 | lock`_)..There,.in.that.virtual. |
846e0 | 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 61 | interface,.you.will.be.able.to.a |
84700 | 70 70 6c 79 20 61 6e 79 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 77 6f | pply.any.of.the.policies.that.wo |
84720 | 72 6b 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2c 20 66 6f 72 20 69 6e 73 | rk.for.outbound.traffic,.for.ins |
84740 | 74 61 6e 63 65 2c 20 61 20 73 68 61 70 69 6e 67 20 6f 6e 65 2e 00 54 68 69 73 20 77 6f 75 6c 64 | tance,.a.shaping.one..This.would |
84760 | 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 | .generate.the.following.configur |
84780 | 61 74 69 6f 6e 3a 00 54 68 72 65 65 20 73 69 67 6e 69 66 69 63 61 6e 74 20 76 65 72 73 69 6f 6e | ation:.Three.significant.version |
847a0 | 73 20 6f 66 20 53 4e 4d 50 20 68 61 76 65 20 62 65 65 6e 20 64 65 76 65 6c 6f 70 65 64 20 61 6e | s.of.SNMP.have.been.developed.an |
847c0 | 64 20 64 65 70 6c 6f 79 65 64 2e 20 53 4e 4d 50 76 31 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e | d.deployed..SNMPv1.is.the.origin |
847e0 | 61 6c 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 4d 6f 72 65 | al.version.of.the.protocol..More |
84800 | 20 72 65 63 65 6e 74 20 76 65 72 73 69 6f 6e 73 2c 20 53 4e 4d 50 76 32 63 20 61 6e 64 20 53 4e | .recent.versions,.SNMPv2c.and.SN |
84820 | 4d 50 76 33 2c 20 66 65 61 74 75 72 65 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 20 69 6e 20 70 65 | MPv3,.feature.improvements.in.pe |
84840 | 72 66 6f 72 6d 61 6e 63 65 2c 20 66 6c 65 78 69 62 69 6c 69 74 79 20 61 6e 64 20 73 65 63 75 72 | rformance,.flexibility.and.secur |
84860 | 69 74 79 2e 00 54 69 6d 65 20 5a 6f 6e 65 00 54 69 6d 65 20 5a 6f 6e 65 20 73 65 74 74 69 6e 67 | ity..Time.Zone.Time.Zone.setting |
84880 | 20 69 73 20 76 65 72 79 20 69 6d 70 6f 72 74 61 6e 74 20 61 73 20 65 2e 67 20 61 6c 6c 20 79 6f | .is.very.important.as.e.g.all.yo |
848a0 | 75 72 20 6c 6f 67 66 69 6c 65 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 62 65 20 62 61 73 65 64 | ur.logfile.entries.will.be.based |
848c0 | 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 7a 6f 6e 65 2e 20 57 69 74 68 6f 75 74 | .on.the.configured.zone..Without |
848e0 | 20 70 72 6f 70 65 72 20 74 69 6d 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | .proper.time.zone.configuration. |
84900 | 69 74 20 77 69 6c 6c 20 62 65 20 76 65 72 79 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6d | it.will.be.very.difficult.to.com |
84920 | 70 61 72 65 20 6c 6f 67 66 69 6c 65 73 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 79 73 | pare.logfiles.from.different.sys |
84940 | 74 65 6d 73 2e 00 54 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 | tems..Time.in.milliseconds.betwe |
84960 | 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 20 4e 65 69 67 68 62 6f 72 20 53 6f 6c 69 63 69 | en.retransmitted.Neighbor.Solici |
84980 | 74 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 | tation.messages.Time.in.seconds. |
849a0 | 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 70 72 65 66 | that.the.prefix.will.remain.pref |
849c0 | 65 72 72 65 64 20 28 64 65 66 61 75 6c 74 20 34 20 68 6f 75 72 73 29 00 54 69 6d 65 20 69 6e 20 | erred.(default.4.hours).Time.in. |
849e0 | 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d | seconds.that.the.prefix.will.rem |
84a00 | 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a 20 33 30 20 64 61 79 73 29 00 54 69 6d | ain.valid.(default:.30.days).Tim |
84a20 | 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c | e.in.seconds.that.the.prefix.wil |
84a40 | 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a 20 36 35 35 32 38 20 73 | l.remain.valid.(default:.65528.s |
84a60 | 65 63 6f 6e 64 73 29 00 54 69 6d 65 20 69 73 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 64 | econds).Time.is.in.minutes.and.d |
84a80 | 65 66 61 75 6c 74 73 20 74 6f 20 36 30 2e 00 54 69 6d 65 20 74 6f 20 6d 61 74 63 68 20 74 68 65 | efaults.to.60..Time.to.match.the |
84aa0 | 20 64 65 66 69 6e 65 64 20 72 75 6c 65 2e 00 54 69 6d 65 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 | .defined.rule..Time,.in.millisec |
84ac0 | 6f 6e 64 73 2c 20 74 68 61 74 20 61 20 6e 6f 64 65 20 61 73 73 75 6d 65 73 20 61 20 6e 65 69 67 | onds,.that.a.node.assumes.a.neig |
84ae0 | 68 62 6f 72 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 66 74 65 72 20 68 61 76 69 6e 67 20 72 | hbor.is.reachable.after.having.r |
84b00 | 65 63 65 69 76 65 64 20 61 20 72 65 61 63 68 61 62 69 6c 69 74 79 20 63 6f 6e 66 69 72 6d 61 74 | eceived.a.reachability.confirmat |
84b20 | 69 6f 6e 00 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 00 54 69 6d 65 6f 75 74 20 69 | ion.Timeout.in.seconds.Timeout.i |
84b40 | 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 68 65 61 6c 74 68 20 74 61 72 67 65 74 20 | n.seconds.between.health.target. |
84b60 | 63 68 65 63 6b 73 2e 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 72 65 70 6c 79 20 66 6f | checks..Timeout.to.wait.reply.fo |
84b80 | 72 20 49 6e 74 65 72 69 6d 2d 55 70 64 61 74 65 20 70 61 63 6b 65 74 73 2e 20 28 64 65 66 61 75 | r.Interim-Update.packets..(defau |
84ba0 | 6c 74 20 33 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 72 65 | lt.3.seconds).Timeout.to.wait.re |
84bc0 | 73 70 6f 6e 73 65 20 66 72 6f 6d 20 73 65 72 76 65 72 20 28 73 65 63 6f 6e 64 73 29 00 54 69 6d | sponse.from.server.(seconds).Tim |
84be0 | 65 72 73 00 54 6f 20 61 63 74 69 76 61 74 65 20 74 68 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 | ers.To.activate.the.VLAN.aware.b |
84c00 | 72 69 64 67 65 2c 20 79 6f 75 20 6d 75 73 74 20 61 63 74 69 76 61 74 65 20 74 68 69 73 20 73 65 | ridge,.you.must.activate.this.se |
84c20 | 74 74 69 6e 67 20 74 6f 20 75 73 65 20 56 4c 41 4e 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 | tting.to.use.VLAN.settings.for.t |
84c40 | 68 65 20 62 72 69 64 67 65 00 54 6f 20 61 6c 6c 6f 77 20 56 50 4e 2d 63 6c 69 65 6e 74 73 20 61 | he.bridge.To.allow.VPN-clients.a |
84c60 | 63 63 65 73 73 20 76 69 61 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 2c | ccess.via.your.external.address, |
84c80 | 20 61 20 4e 41 54 20 72 75 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 3a 00 54 6f 20 61 6c 6c 6f | .a.NAT.rule.is.required:.To.allo |
84ca0 | 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 | w.listing.additional.custom.doma |
84cc0 | 69 6e 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 6f 70 65 6e 74 68 72 65 61 64 2e 74 68 72 | in,.for.example.``openthread.thr |
84ce0 | 65 61 64 2e 68 6f 6d 65 2e 61 72 70 61 60 60 2c 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 | ead.home.arpa``,.so.that.it.can. |
84d00 | 72 65 66 6c 65 63 74 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 | reflected.in.addition.to.the.def |
84d20 | 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | ault.``local``,.use.the.followin |
84d40 | 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 | g.command:.To.allow.only.specifi |
84d60 | 63 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 5f 61 69 72 70 6c | c.services,.for.example.``_airpl |
84d80 | 61 79 2e 5f 74 63 70 60 60 20 6f 72 20 60 60 5f 69 70 70 2e 5f 74 63 70 60 60 2c 20 28 69 6e 73 | ay._tcp``.or.``_ipp._tcp``,.(ins |
84da0 | 74 65 61 64 20 6f 66 20 61 6c 6c 20 73 65 72 76 69 63 65 73 29 20 74 6f 20 62 65 20 72 65 2d 62 | tead.of.all.services).to.be.re-b |
84dc0 | 72 6f 61 64 63 61 73 74 65 64 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | roadcasted,.use.the.following.co |
84de0 | 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 | mmand:.To.allow.traffic.to.pass. |
84e00 | 74 68 72 6f 75 67 68 20 74 6f 20 63 6c 69 65 6e 74 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 | through.to.clients,.you.need.to. |
84e20 | 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 75 6c 65 73 2e 20 28 69 66 20 79 6f 75 | add.the.following.rules..(if.you |
84e40 | 20 75 73 65 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | .used.the.default.configuration. |
84e60 | 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 69 73 20 70 61 67 65 29 00 54 6f 20 61 70 70 6c | at.the.top.of.this.page).To.appl |
84e80 | 79 20 74 68 69 73 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 69 6e 74 | y.this.policy.to.the.correct.int |
84ea0 | 65 72 66 61 63 65 2c 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 6f 6e 20 74 68 65 20 69 6e 74 65 | erface,.configure.it.on.the.inte |
84ec0 | 72 66 61 63 65 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6c 6f 63 61 6c 20 68 6f 73 74 20 77 69 6c | rface.the.inbound.local.host.wil |
84ee0 | 6c 20 73 65 6e 64 20 74 68 72 6f 75 67 68 20 74 6f 20 72 65 61 63 68 20 6f 75 72 20 64 65 73 74 | l.send.through.to.reach.our.dest |
84f00 | 69 6e 65 64 20 74 61 72 67 65 74 20 68 6f 73 74 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 | ined.target.host.(in.our.example |
84f20 | 20 65 74 68 31 29 2e 00 54 6f 20 61 75 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 62 6c 61 63 6b | .eth1)..To.auto.update.the.black |
84f40 | 6c 69 73 74 20 66 69 6c 65 73 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 | list.files.To.automatically.assi |
84f60 | 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 | gn.the.client.an.IP.address.as.t |
84f80 | 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c | unnel.endpoint,.a.client.IP.pool |
84fa0 | 20 69 73 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 | .is.needed..The.source.can.be.ei |
84fc0 | 74 68 65 72 20 52 41 44 49 55 53 20 6f 72 20 61 20 6c 6f 63 61 6c 20 73 75 62 6e 65 74 20 6f 72 | ther.RADIUS.or.a.local.subnet.or |
84fe0 | 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2e 00 54 6f 20 61 75 74 6f 6d 61 74 | .IP.range.definition..To.automat |
85000 | 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 | ically.assign.the.client.an.IP.a |
85020 | 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 | ddress.as.tunnel.endpoint,.a.cli |
85040 | 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 | ent.IP.pool.is.needed..The.sourc |
85060 | 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f 72 20 61 20 6e 61 6d 65 | e.can.be.either.RADIUS.or.a.name |
85080 | 64 20 70 6f 6f 6c 2e 20 54 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 | d.pool..There.is.possibility.to. |
850a0 | 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 64 20 70 6f 6f 6c 73 2e 20 45 61 63 | create.multiple.named.pools..Eac |
850c0 | 68 20 6e 61 6d 65 64 20 70 6f 6f 6c 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 6f 6e 6c 79 20 6f 6e | h.named.pool.can.include.only.on |
850e0 | 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 2e 20 54 6f 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 | e.address.range..To.use.multiple |
85100 | 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 63 6f 6e 66 69 67 75 72 65 20 60 60 6e 65 78 74 | .address.ranges.configure.``next |
85120 | 2d 70 6f 6f 6c 60 60 20 6f 70 74 69 6f 6e 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 | -pool``.option..To.be.used.only. |
85140 | 77 68 65 6e 20 60 60 61 63 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 | when.``action``.is.set.to.``jump |
85160 | 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 | ``..Use.this.command.to.specify. |
85180 | 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 | jump.target..To.be.used.only.whe |
851a0 | 6e 20 60 60 64 65 66 75 6c 74 2d 61 63 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 | n.``defult-action``.is.set.to.`` |
851c0 | 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 | jump``..Use.this.command.to.spec |
851e0 | 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 20 66 6f 72 20 64 65 66 61 75 6c 74 20 72 75 6c 65 | ify.jump.target.for.default.rule |
85200 | 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 | ..To.be.used.only.when.action.is |
85220 | 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | .set.to.``jump``..Use.this.comma |
85240 | 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 | nd.to.specify.jump.target..To.be |
85260 | 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f | .used.only.when.action.is.set.to |
85280 | 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | .``queue``..Use.this.command.to. |
852a0 | 64 69 73 74 72 69 62 75 74 65 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 | distribute.packets.between.sever |
852c0 | 61 6c 20 71 75 65 75 65 73 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 | al.queues..To.be.used.only.when. |
852e0 | 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 | action.is.set.to.``queue``..Use. |
85300 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 65 74 20 70 61 63 6b 65 74 20 67 6f 20 74 68 | this.command.to.let.packet.go.th |
85320 | 72 6f 75 67 68 20 66 69 72 65 77 61 6c 6c 20 77 68 65 6e 20 6e 6f 20 75 73 65 72 73 70 61 63 65 | rough.firewall.when.no.userspace |
85340 | 20 73 6f 66 74 77 61 72 65 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 71 75 | .software.is.connected.to.the.qu |
85360 | 65 75 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e | eue..To.be.used.only.when.action |
85380 | 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 | .is.set.to.``queue``..Use.this.c |
853a0 | 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 71 75 65 75 65 20 74 61 72 67 65 74 20 74 | ommand.to.specify.queue.target.t |
853c0 | 6f 20 75 73 65 2e 20 51 75 65 75 65 20 72 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f | o.use..Queue.range.is.also.suppo |
853e0 | 72 74 65 64 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f | rted..To.be.used.only.when.actio |
85400 | 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | n.is.set.to.jump..Use.this.comma |
85420 | 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 79 | nd.to.specify.jump.target..To.by |
85440 | 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 | pass.the.proxy.for.every.request |
85460 | 20 74 68 61 74 20 69 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 63 20 | .that.is.coming.from.a.specific. |
85480 | 73 6f 75 72 63 65 3a 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 | source:.To.bypass.the.proxy.for. |
854a0 | 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 65 64 20 74 | every.request.that.is.directed.t |
854c0 | 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 3a 00 54 6f 20 63 6f 6e | o.a.specific.destination:.To.con |
854e0 | 66 69 67 75 72 65 20 49 50 76 36 20 61 73 73 69 67 6e 6d 65 6e 74 73 20 66 6f 72 20 63 6c 69 65 | figure.IPv6.assignments.for.clie |
85500 | 6e 74 73 2c 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 | nts,.two.options.need.to.be.conf |
85520 | 69 67 75 72 65 64 2e 20 41 20 67 6c 6f 62 61 6c 20 70 72 65 66 69 78 20 77 68 69 63 68 20 69 73 | igured..A.global.prefix.which.is |
85540 | 20 74 65 72 6d 69 6e 61 74 65 64 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 20 61 | .terminated.on.the.clients.cpe.a |
85560 | 6e 64 20 61 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 2c 20 74 68 65 20 63 6c 69 65 6e | nd.a.delegated.prefix,.the.clien |
85580 | 74 20 63 61 6e 20 75 73 65 20 66 6f 72 20 64 65 76 69 63 65 73 20 72 6f 75 74 65 64 20 76 69 61 | t.can.use.for.devices.routed.via |
855a0 | 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 | .the.clients.cpe..To.configure.V |
855c0 | 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 | yOS.with.the.:doc:`legacy.firewa |
855e0 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ll.configuration.</configuration |
85600 | 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 00 54 6f 20 63 6f | /firewall/general-legacy>`.To.co |
85620 | 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 7a 6f 6e 65 | nfigure.VyOS.with.the.:doc:`zone |
85640 | 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f | -based.firewall.configuration.</ |
85660 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 7a 6f 6e 65 3e 60 00 54 6f | configuration/firewall/zone>`.To |
85680 | 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 3a 64 6f | .configure.VyOS.with.the.new.:do |
856a0 | 63 3a 60 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 | c:`firewall.configuration.</conf |
856c0 | 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 3e 60 00 54 6f 20 | iguration/firewall/general>`.To. |
856e0 | 63 6f 6e 66 69 67 75 72 65 20 62 6c 6f 63 6b 69 6e 67 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f | configure.blocking.add.the.follo |
85700 | 77 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 6f 20 63 6f 6e | wing.to.the.configuration.To.con |
85720 | 66 69 67 75 72 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 79 | figure.site-to-site.connection.y |
85740 | 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 20 60 60 | ou.need.to.add.peers.with.the.`` |
85760 | 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 | set.vpn.ipsec.site-to-site.peer. |
85780 | 3c 6e 61 6d 65 3e 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 | <name>``.command..To.configure.s |
857a0 | 79 73 6c 6f 67 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 68 20 69 6e 74 6f 20 63 | yslog,.you.need.to.switch.into.c |
857c0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 | onfiguration.mode..To.configure. |
857e0 | 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 20 79 6f 75 20 6d 75 73 74 20 66 69 72 73 74 20 | your.LCD.display.you.must.first. |
85800 | 69 64 65 6e 74 69 66 79 20 74 68 65 20 75 73 65 64 20 68 61 72 64 77 61 72 65 2c 20 61 6e 64 20 | identify.the.used.hardware,.and. |
85820 | 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 6f 66 20 74 68 65 20 64 69 73 70 6c 61 79 20 74 6f 20 79 | connectivity.of.the.display.to.y |
85840 | 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 6e 79 20 73 65 72 69 | our.system..This.can.be.any.seri |
85860 | 61 6c 20 70 6f 72 74 20 28 60 74 74 79 53 78 78 60 29 20 6f 72 20 73 65 72 69 61 6c 20 76 69 61 | al.port.(`ttySxx`).or.serial.via |
85880 | 20 55 53 42 20 6f 72 20 65 76 65 6e 20 6f 6c 64 20 70 61 72 61 6c 6c 65 6c 20 70 6f 72 74 20 69 | .USB.or.even.old.parallel.port.i |
858a0 | 6e 74 65 72 66 61 63 65 73 2e 00 54 6f 20 63 72 65 61 74 65 20 56 4c 41 4e 73 20 70 65 72 20 75 | nterfaces..To.create.VLANs.per.u |
858c0 | 73 65 72 20 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | ser.during.runtime,.the.followin |
858e0 | 67 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 72 65 71 75 69 72 65 64 20 6f 6e 20 61 20 70 65 72 | g.settings.are.required.on.a.per |
85900 | 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 20 56 4c 41 4e 20 49 44 20 61 6e 64 20 56 4c | .interface.basis..VLAN.ID.and.VL |
85920 | 41 4e 20 72 61 6e 67 65 20 63 61 6e 20 62 65 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 63 | AN.range.can.be.present.in.the.c |
85940 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 54 | onfiguration.at.the.same.time..T |
85960 | 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 69 6e 65 20 69 6e 20 79 6f 75 72 20 6c 6f 67 69 | o.create.a.new.line.in.your.logi |
85980 | 6e 20 6d 65 73 73 61 67 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 73 63 61 70 65 20 74 68 65 | n.message.you.need.to.escape.the |
859a0 | 20 6e 65 77 20 6c 69 6e 65 20 63 68 61 72 61 63 74 65 72 20 62 79 20 75 73 69 6e 67 20 60 60 5c | .new.line.character.by.using.``\ |
859c0 | 5c 6e 60 60 2e 00 54 6f 20 63 72 65 61 74 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 74 75 | \n``..To.create.more.than.one.tu |
859e0 | 6e 6e 65 6c 2c 20 75 73 65 20 64 69 73 74 69 6e 63 74 20 55 44 50 20 70 6f 72 74 73 2e 00 54 6f | nnel,.use.distinct.UDP.ports..To |
85a00 | 20 63 72 65 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 31 30 30 20 61 6e 64 20 61 64 | .create.routing.table.100.and.ad |
85a20 | 64 20 61 20 6e 65 77 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 74 6f 20 62 65 20 75 73 | d.a.new.default.gateway.to.be.us |
85a40 | 65 64 20 62 79 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 6f 75 72 20 72 6f 75 74 65 | ed.by.traffic.matching.our.route |
85a60 | 20 70 6f 6c 69 63 79 3a 00 54 6f 20 64 65 66 69 6e 65 20 61 20 7a 6f 6e 65 20 73 65 74 75 70 20 | .policy:.To.define.a.zone.setup. |
85a80 | 65 69 74 68 65 72 20 6f 6e 65 20 77 69 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6f 72 20 61 20 | either.one.with.interfaces.or.a. |
85aa0 | 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 00 54 6f 20 64 69 73 61 62 6c 65 20 61 64 76 65 72 74 69 73 65 | local.zone..To.disable.advertise |
85ac0 | 6d 65 6e 74 73 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 | ments.without.deleting.the.confi |
85ae0 | 67 75 72 61 74 69 6f 6e 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 75 | guration:.To.display.the.configu |
85b00 | 72 65 64 20 4f 54 50 20 75 73 65 72 20 6b 65 79 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e | red.OTP.user.key,.use.the.comman |
85b20 | 64 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 | d:.To.display.the.configured.OTP |
85b40 | 20 75 73 65 72 20 73 65 74 74 69 6e 67 73 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a | .user.settings,.use.the.command: |
85b60 | 00 54 6f 20 65 6e 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 | .To.enable.MLD.reports.and.query |
85b80 | 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 | .on.interfaces.`eth0`.and.`eth1` |
85ba0 | 3a 00 54 6f 20 65 6e 61 62 6c 65 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 | :.To.enable.RADIUS.based.authent |
85bc0 | 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 | ication,.the.authentication.mode |
85be0 | 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 | .needs.to.be.changed.within.the. |
85c00 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 72 65 76 69 6f 75 73 20 73 65 74 74 69 6e 67 73 | configuration..Previous.settings |
85c20 | 20 6c 69 6b 65 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 73 2c 20 73 74 69 6c 6c 20 65 78 69 | .like.the.local.users,.still.exi |
85c40 | 73 74 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 68 6f | sts.within.the.configuration,.ho |
85c60 | 77 65 76 65 72 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 75 73 65 64 20 69 66 20 74 68 65 20 6d | wever.they.are.not.used.if.the.m |
85c80 | 6f 64 65 20 68 61 73 20 62 65 65 6e 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 6c 6f 63 61 6c 20 | ode.has.been.changed.from.local. |
85ca0 | 74 6f 20 72 61 64 69 75 73 2e 20 4f 6e 63 65 20 63 68 61 6e 67 65 64 20 62 61 63 6b 20 74 6f 20 | to.radius..Once.changed.back.to. |
85cc0 | 6c 6f 63 61 6c 2c 20 69 74 20 77 69 6c 6c 20 75 73 65 20 61 6c 6c 20 6c 6f 63 61 6c 20 61 63 63 | local,.it.will.use.all.local.acc |
85ce0 | 6f 75 6e 74 73 20 61 67 61 69 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 | ounts.again..To.enable.bandwidth |
85d00 | 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2c 20 74 68 65 20 6f 70 74 69 6f 6e 20 | .shaping.via.RADIUS,.the.option. |
85d20 | 72 61 74 65 2d 6c 69 6d 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 | rate-limit.needs.to.be.enabled.. |
85d40 | 54 6f 20 65 6e 61 62 6c 65 20 64 65 62 75 67 20 6d 65 73 73 61 67 65 73 2e 20 41 76 61 69 6c 61 | To.enable.debug.messages..Availa |
85d60 | 62 6c 65 20 76 69 61 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 6c 6f 67 60 20 6f 72 20 3a 6f 70 | ble.via.:opcmd:`show.log`.or.:op |
85d80 | 63 6d 64 3a 60 6d 6f 6e 69 74 6f 72 20 6c 6f 67 60 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 | cmd:`monitor.log`.To.enable.mDNS |
85da0 | 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | .repeater.you.need.to.configure. |
85dc0 | 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 73 6f 20 74 68 61 74 20 | at.least.two.interfaces.so.that. |
85de0 | 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f | all.incoming.mDNS.packets.from.o |
85e00 | 6e 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 63 61 6e | ne.interface.configured.here.can |
85e20 | 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 | .be.re-broadcasted.to.any.other. |
85e40 | 69 6e 74 65 72 66 61 63 65 28 73 29 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 | interface(s).configured.under.th |
85e60 | 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 | is.section..To.enable.mDNS.repea |
85e80 | 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 | ter.you.need.to.configure.at.lea |
85ea0 | 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 72 65 2d 62 72 6f 61 64 63 61 | st.two.interfaces..To.re-broadca |
85ec0 | 73 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f | st.all.incoming.mDNS.packets.fro |
85ee0 | 6d 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 | m.any.interface.configured.here. |
85f00 | 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 | to.any.other.interface.configure |
85f20 | 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 | d.under.this.section..To.enable. |
85f40 | 74 68 65 20 48 54 54 50 20 73 65 63 75 72 69 74 79 20 68 65 61 64 65 72 73 20 69 6e 20 74 68 65 | the.HTTP.security.headers.in.the |
85f60 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2c 20 75 73 65 20 74 68 65 20 63 6f 6d | .configuration.file,.use.the.com |
85f80 | 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 68 65 6c 70 65 72 20 73 | mand:.To.enable/disable.helper.s |
85fa0 | 75 70 70 6f 72 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 75 72 2c | upport.for.a.specific.neighbour, |
85fc0 | 20 74 68 65 20 72 6f 75 74 65 72 2d 69 64 20 28 41 2e 42 2e 43 2e 44 29 20 68 61 73 20 74 6f 20 | .the.router-id.(A.B.C.D).has.to. |
85fe0 | 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 54 6f 20 65 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 | be.specified..To.exclude.traffic |
86000 | 20 66 72 6f 6d 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2c 20 74 72 61 66 66 69 63 20 6d 61 | .from.load.balancing,.traffic.ma |
86020 | 74 63 68 69 6e 67 20 61 6e 20 65 78 63 6c 75 64 65 20 72 75 6c 65 20 69 73 20 6e 6f 74 20 62 61 | tching.an.exclude.rule.is.not.ba |
86040 | 6c 61 6e 63 65 64 20 62 75 74 20 72 6f 75 74 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 79 | lanced.but.routed.through.the.sy |
86060 | 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 6e 73 74 65 61 64 3a 00 54 6f 20 65 | stem.routing.table.instead:.To.e |
86080 | 78 70 6c 61 69 6e 20 74 68 65 20 75 73 61 67 65 20 6f 66 20 4c 4e 53 20 66 6f 6c 6c 6f 77 20 6f | xplain.the.usage.of.LNS.follow.o |
860a0 | 75 72 20 62 6c 75 65 70 72 69 6e 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 6c 61 63 2d | ur.blueprint.:ref:`examples-lac- |
860c0 | 6c 6e 73 60 2e 00 54 6f 20 65 78 74 65 6e 64 20 53 4e 4d 50 20 61 67 65 6e 74 20 66 75 6e 63 74 | lns`..To.extend.SNMP.agent.funct |
860e0 | 69 6f 6e 61 6c 69 74 79 2c 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 73 20 63 61 6e 20 62 65 20 | ionality,.custom.scripts.can.be. |
86100 | 65 78 65 63 75 74 65 64 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 65 20 61 67 65 6e 74 20 69 73 | executed.every.time.the.agent.is |
86120 | 20 62 65 69 6e 67 20 63 61 6c 6c 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 | .being.called..This.can.be.achie |
86140 | 76 65 64 20 62 79 20 75 73 69 6e 67 20 60 60 61 72 62 69 74 72 61 72 79 20 65 78 74 65 6e 73 69 | ved.by.using.``arbitrary.extensi |
86160 | 6f 6e 63 6f 6d 6d 61 6e 64 73 60 60 2e 20 54 68 65 20 66 69 72 73 74 20 73 74 65 70 20 69 73 20 | oncommands``..The.first.step.is. |
86180 | 74 6f 20 63 72 65 61 74 65 20 61 20 66 75 6e 63 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 6f 66 | to.create.a.functional.script.of |
861a0 | 20 63 6f 75 72 73 65 2c 20 74 68 65 6e 20 75 70 6c 6f 61 64 20 69 74 20 74 6f 20 79 6f 75 72 20 | .course,.then.upload.it.to.your. |
861c0 | 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 | VyOS.instance.via.the.command.`` |
861e0 | 73 63 70 20 79 6f 75 72 5f 73 63 72 69 70 74 2e 73 68 20 76 79 6f 73 40 79 6f 75 72 5f 72 6f 75 | scp.your_script.sh.vyos@your_rou |
86200 | 74 65 72 3a 2f 63 6f 6e 66 69 67 2f 75 73 65 72 2d 64 61 74 61 60 60 2e 20 4f 6e 63 65 20 74 68 | ter:/config/user-data``..Once.th |
86220 | 65 20 73 63 72 69 70 74 20 69 73 20 75 70 6c 6f 61 64 65 64 2c 20 69 74 20 6e 65 65 64 73 20 74 | e.script.is.uploaded,.it.needs.t |
86240 | 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 | o.be.configured.via.the.command. |
86260 | 62 65 6c 6f 77 2e 00 54 6f 20 66 6f 72 77 61 72 64 20 61 6c 6c 20 62 72 6f 61 64 63 61 73 74 20 | below..To.forward.all.broadcast. |
86280 | 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 55 44 50 20 70 6f 72 74 20 31 39 | packets.received.on.`UDP.port.19 |
862a0 | 30 30 60 20 6f 6e 20 60 65 74 68 33 60 2c 20 60 65 74 68 34 60 20 6f 72 20 60 65 74 68 35 60 20 | 00`.on.`eth3`,.`eth4`.or.`eth5`. |
862c0 | 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 74 68 69 73 20 | to.all.other.interfaces.in.this. |
862e0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 43 | configuration..To.generate.the.C |
86300 | 41 2c 20 74 68 65 20 73 65 72 76 65 72 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 6e 64 20 63 65 | A,.the.server.private.key.and.ce |
86320 | 72 74 69 66 69 63 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 | rtificates.the.following.command |
86340 | 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 67 65 74 20 69 74 20 74 6f 20 77 6f 72 6b | s.can.be.used..To.get.it.to.work |
86360 | 20 61 73 20 61 6e 20 61 63 63 65 73 73 20 70 6f 69 6e 74 20 77 69 74 68 20 74 68 69 73 20 63 6f | .as.an.access.point.with.this.co |
86380 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 73 65 74 | nfiguration.you.will.need.to.set |
863a0 | 20 75 70 20 61 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 74 | .up.a.DHCP.server.to.work.with.t |
863c0 | 68 61 74 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 63 61 6e 20 2d 20 6f 66 20 63 6f 75 72 73 65 | hat.network..You.can.-.of.course |
863e0 | 20 2d 20 61 6c 73 6f 20 62 72 69 64 67 65 20 74 68 65 20 57 69 72 65 6c 65 73 73 20 69 6e 74 65 | .-.also.bridge.the.Wireless.inte |
86400 | 72 66 61 63 65 20 77 69 74 68 20 61 6e 79 20 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 | rface.with.any.configured.bridge |
86420 | 20 28 3a 72 65 66 3a 60 62 72 69 64 67 65 2d 69 6e 74 65 72 66 61 63 65 60 29 20 6f 6e 20 74 68 | .(:ref:`bridge-interface`).on.th |
86440 | 65 20 73 79 73 74 65 6d 2e 00 54 6f 20 68 61 6e 64 20 6f 75 74 20 69 6e 64 69 76 69 64 75 61 6c | e.system..To.hand.out.individual |
86460 | 20 70 72 65 66 69 78 65 73 20 74 6f 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 74 68 65 20 66 6f | .prefixes.to.your.clients.the.fo |
86480 | 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 3a 00 54 | llowing.configuration.is.used:.T |
864a0 | 6f 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 73 79 73 74 65 6d 20 | o.import.it.from.the.filesystem. |
864c0 | 75 73 65 3a 00 54 6f 20 6b 6e 6f 77 20 6d 6f 72 65 20 61 62 6f 75 74 20 73 63 72 69 70 74 69 6e | use:.To.know.more.about.scriptin |
864e0 | 67 2c 20 63 68 65 63 6b 20 74 68 65 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 | g,.check.the.:ref:`command-scrip |
86500 | 74 69 6e 67 60 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 | ting`.section..To.listen.on.both |
86520 | 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 | .`eth0`.and.`eth1`.mDNS.packets. |
86540 | 61 6e 64 20 61 6c 73 6f 20 72 65 70 65 61 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 | and.also.repeat.packets.received |
86560 | 20 6f 6e 20 60 65 74 68 30 60 20 74 6f 20 60 65 74 68 31 60 20 28 61 6e 64 20 76 69 63 65 2d 76 | .on.`eth0`.to.`eth1`.(and.vice-v |
86580 | 65 72 73 61 29 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 | ersa).use.the.following.commands |
865a0 | 3a 00 54 6f 20 6d 61 6e 69 70 75 6c 61 74 65 20 6f 72 20 64 69 73 70 6c 61 79 20 41 52 50 5f 20 | :.To.manipulate.or.display.ARP_. |
865c0 | 74 61 62 6c 65 20 65 6e 74 72 69 65 73 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d | table.entries,.the.following.com |
865e0 | 6d 61 6e 64 73 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 54 6f 20 70 65 72 66 6f 72 | mands.are.implemented..To.perfor |
86600 | 6d 20 61 20 67 72 61 63 65 66 75 6c 20 73 68 75 74 64 6f 77 6e 2c 20 74 68 65 20 46 52 52 20 60 | m.a.graceful.shutdown,.the.FRR.` |
86620 | 60 67 72 61 63 65 66 75 6c 2d 72 65 73 74 61 72 74 20 70 72 65 70 61 72 65 20 69 70 20 6f 73 70 | `graceful-restart.prepare.ip.osp |
86640 | 66 60 60 20 45 58 45 43 2d 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 20 6e 65 65 64 73 20 74 6f 20 | f``.EXEC-level.command.needs.to. |
86660 | 62 65 20 69 73 73 75 65 64 20 62 65 66 6f 72 65 20 72 65 73 74 61 72 74 69 6e 67 20 74 68 65 20 | be.issued.before.restarting.the. |
86680 | 6f 73 70 66 64 20 64 61 65 6d 6f 6e 2e 00 54 6f 20 72 65 71 75 65 73 74 20 61 20 2f 35 36 20 70 | ospfd.daemon..To.request.a./56.p |
866a0 | 72 65 66 69 78 20 66 72 6f 6d 20 79 6f 75 72 20 49 53 50 20 75 73 65 3a 00 54 6f 20 72 65 73 74 | refix.from.your.ISP.use:.To.rest |
866c0 | 61 72 74 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 00 54 6f 20 73 65 74 75 70 20 53 | art.the.DHCPv6.server.To.setup.S |
866e0 | 4e 41 54 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 3a 00 54 6f 20 73 65 74 75 70 20 61 | NAT,.we.need.to.know:.To.setup.a |
86700 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 72 75 6c 65 20 77 65 20 6e 65 65 64 20 74 6f | .destination.NAT.rule.we.need.to |
86720 | 20 67 61 74 68 65 72 3a 00 54 6f 20 75 70 64 61 74 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 2c | .gather:.To.update.the.firmware, |
86740 | 20 56 79 4f 53 20 61 6c 73 6f 20 73 68 69 70 73 20 74 68 65 20 60 71 6d 69 2d 66 69 72 6d 77 61 | .VyOS.also.ships.the.`qmi-firmwa |
86760 | 72 65 2d 75 70 64 61 74 65 60 20 62 69 6e 61 72 79 2e 20 54 6f 20 75 70 67 72 61 64 65 20 74 68 | re-update`.binary..To.upgrade.th |
86780 | 65 20 66 69 72 6d 77 61 72 65 20 6f 66 20 61 6e 20 65 2e 67 2e 20 53 69 65 72 72 61 20 57 69 72 | e.firmware.of.an.e.g..Sierra.Wir |
867a0 | 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 6f 64 75 6c 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 | eless.MC7710.module.to.the.firmw |
867c0 | 61 72 65 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 66 69 6c 65 20 60 60 39 39 39 39 39 | are.provided.in.the.file.``99999 |
867e0 | 39 39 5f 39 39 39 39 39 39 39 5f 39 32 30 30 5f 30 33 2e 30 35 2e 31 34 2e 30 30 5f 30 30 5f 67 | 99_9999999_9200_03.05.14.00_00_g |
86800 | 65 6e 65 72 69 63 5f 30 30 30 2e 30 30 30 5f 30 30 31 5f 53 50 4b 47 5f 4d 43 2e 63 77 65 60 60 | eneric_000.000_001_SPKG_MC.cwe`` |
86820 | 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 75 | .use.the.following.command:.To.u |
86840 | 73 65 20 61 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 | se.a.RADIUS.server.for.authentic |
86860 | 61 74 69 6f 6e 20 61 6e 64 20 62 61 6e 64 77 69 64 74 68 2d 73 68 61 70 69 6e 67 2c 20 74 68 65 | ation.and.bandwidth-shaping,.the |
86880 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .following.example.configuration |
868a0 | 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 75 73 65 20 61 20 72 61 64 69 75 73 20 73 65 | .can.be.used..To.use.a.radius.se |
868c0 | 72 76 65 72 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 68 20 74 6f 20 61 75 74 68 | rver,.you.need.to.switch.to.auth |
868e0 | 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 20 61 6e 64 20 74 68 65 6e 20 | entication.mode.RADIUS.and.then. |
86900 | 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 00 54 6f 20 75 73 65 20 73 75 63 68 20 61 20 73 65 72 76 | configure.it..To.use.such.a.serv |
86920 | 69 63 65 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 6c 6f 67 69 6e 2c 20 70 61 | ice,.one.must.define.a.login,.pa |
86940 | 73 73 77 6f 72 64 2c 20 6f 6e 65 20 6f 72 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 6e 61 6d 65 | ssword,.one.or.multiple.hostname |
86960 | 73 2c 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 73 65 72 76 65 72 2e 00 54 6f 20 75 73 65 20 74 | s,.protocol.and.server..To.use.t |
86980 | 68 65 20 53 61 6c 74 2d 4d 69 6e 69 6f 6e 2c 20 61 20 72 75 6e 6e 69 6e 67 20 53 61 6c 74 2d 4d | he.Salt-Minion,.a.running.Salt-M |
869a0 | 61 73 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 59 6f 75 20 63 61 6e 20 66 69 6e 64 20 | aster.is.required..You.can.find. |
869c0 | 6d 6f 72 65 20 69 6e 20 74 68 65 20 60 53 61 6c 74 20 50 6f 6a 65 63 74 20 44 6f 63 75 6d 65 6e | more.in.the.`Salt.Poject.Documen |
869e0 | 74 61 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 73 61 6c 74 70 72 6f 6a 65 63 74 2e | taion.<https://docs.saltproject. |
86a00 | 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 74 65 6e 74 73 2e 68 74 6d 6c 3e 60 5f 00 54 6f | io/en/latest/contents.html>`_.To |
86a20 | 20 75 73 65 20 74 68 69 73 20 66 75 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 | .use.this.full.configuration.we. |
86a40 | 61 73 75 6d 65 20 61 20 70 75 62 6c 69 63 20 61 63 63 65 73 73 69 62 6c 65 20 68 6f 73 74 6e 61 | asume.a.public.accessible.hostna |
86a60 | 6d 65 2e 00 54 6f 70 6f 6c 6f 67 79 3a 00 54 6f 70 6f 6c 6f 67 79 3a 20 50 43 34 20 2d 20 4c 65 | me..Topology:.Topology:.PC4.-.Le |
86a80 | 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 20 2d 20 50 43 35 00 54 6f 75 62 6c | af2.-.Spine1.-.Leaf3.-.PC5.Toubl |
86aa0 | 65 73 68 6f 6f 74 69 6e 67 00 54 72 61 63 6b 00 54 72 61 63 6b 20 6f 70 74 69 6f 6e 20 74 6f 20 | eshooting.Track.Track.option.to. |
86ac0 | 74 72 61 63 6b 20 6e 6f 6e 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 73 2e | track.non.VRRP.interface.states. |
86ae0 | 20 56 52 52 50 20 63 68 61 6e 67 65 73 20 73 74 61 74 75 73 20 74 6f 20 60 60 46 41 55 4c 54 60 | .VRRP.changes.status.to.``FAULT` |
86b00 | 60 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 74 72 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 | `.if.one.of.the.track.interfaces |
86b20 | 20 69 6e 20 73 74 61 74 65 20 60 60 64 6f 77 6e 60 60 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 20 | .in.state.``down``..Traditional. |
86b40 | 42 47 50 20 64 69 64 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 66 65 61 74 75 72 65 20 74 6f 20 | BGP.did.not.have.the.feature.to. |
86b60 | 64 65 74 65 63 74 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 | detect.a.remote.peer's.capabilit |
86b80 | 69 65 73 2c 20 65 2e 67 2e 20 77 68 65 74 68 65 72 20 69 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 | ies,.e.g..whether.it.can.handle. |
86ba0 | 70 72 65 66 69 78 20 74 79 70 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 | prefix.types.other.than.IPv4.uni |
86bc0 | 63 61 73 74 20 72 6f 75 74 65 73 2e 20 54 68 69 73 20 77 61 73 20 61 20 62 69 67 20 70 72 6f 62 | cast.routes..This.was.a.big.prob |
86be0 | 6c 65 6d 20 75 73 69 6e 67 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f | lem.using.Multiprotocol.Extensio |
86c00 | 6e 20 66 6f 72 20 42 47 50 20 69 6e 20 61 6e 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6e 65 74 77 | n.for.BGP.in.an.operational.netw |
86c20 | 6f 72 6b 2e 20 3a 72 66 63 3a 60 32 38 34 32 60 20 61 64 6f 70 74 65 64 20 61 20 66 65 61 74 75 | ork..:rfc:`2842`.adopted.a.featu |
86c40 | 72 65 20 63 61 6c 6c 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e | re.called.Capability.Negotiation |
86c60 | 2e 20 2a 62 67 70 64 2a 20 75 73 65 20 74 68 69 73 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 | ..*bgpd*.use.this.Capability.Neg |
86c80 | 6f 74 69 61 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 | otiation.to.detect.the.remote.pe |
86ca0 | 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 61 20 70 65 65 72 20 69 73 20 | er's.capabilities..If.a.peer.is. |
86cc0 | 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 75 6e 69 63 61 | only.configured.as.an.IPv4.unica |
86ce0 | 73 74 20 6e 65 69 67 68 62 6f 72 2c 20 2a 62 67 70 64 2a 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e | st.neighbor,.*bgpd*.does.not.sen |
86d00 | 64 20 74 68 65 73 65 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 70 | d.these.Capability.Negotiation.p |
86d20 | 61 63 6b 65 74 73 20 28 61 74 20 6c 65 61 73 74 20 6e 6f 74 20 75 6e 6c 65 73 73 20 6f 74 68 65 | ackets.(at.least.not.unless.othe |
86d40 | 72 20 6f 70 74 69 6f 6e 61 6c 20 42 47 50 20 66 65 61 74 75 72 65 73 20 72 65 71 75 69 72 65 20 | r.optional.BGP.features.require. |
86d60 | 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 29 2e 00 54 72 61 64 69 74 69 | capability.negotiation)..Traditi |
86d80 | 6f 6e 61 6c 6c 79 20 66 69 72 65 77 61 6c 6c 73 20 77 65 65 72 65 20 63 6f 6e 66 69 67 75 72 65 | onally.firewalls.weere.configure |
86da0 | 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 64 61 74 61 20 67 6f 69 6e 67 | d.with.the.concept.of.data.going |
86dc0 | 20 69 6e 20 61 6e 64 20 6f 75 74 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 | .in.and.out.of.an.interface..The |
86de0 | 20 72 6f 75 74 65 72 20 6a 75 73 74 20 6c 69 73 74 65 6e 65 64 20 74 6f 20 74 68 65 20 64 61 74 | .router.just.listened.to.the.dat |
86e00 | 61 20 66 6c 6f 77 69 6e 67 20 74 68 72 6f 75 67 68 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 | a.flowing.through.and.responding |
86e20 | 20 61 73 20 72 65 71 75 69 72 65 64 20 69 66 20 69 74 20 77 61 73 20 64 69 72 65 63 74 65 64 20 | .as.required.if.it.was.directed. |
86e40 | 61 74 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 54 72 61 64 69 74 69 6f 6e 61 | at.the.router.itself..Traditiona |
86e60 | 6c 6c 79 20 68 61 72 64 77 61 72 65 20 72 6f 75 74 65 72 73 20 69 6d 70 6c 65 6d 65 6e 74 20 49 | lly.hardware.routers.implement.I |
86e80 | 50 73 65 63 20 65 78 63 6c 75 73 69 76 65 6c 79 20 64 75 65 20 74 6f 20 72 65 6c 61 74 69 76 65 | Psec.exclusively.due.to.relative |
86ea0 | 20 65 61 73 65 20 6f 66 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 69 74 20 69 6e 20 68 61 72 64 | .ease.of.implementing.it.in.hard |
86ec0 | 77 61 72 65 20 61 6e 64 20 69 6e 73 75 66 66 69 63 69 65 6e 74 20 43 50 55 20 70 6f 77 65 72 20 | ware.and.insufficient.CPU.power. |
86ee0 | 66 6f 72 20 64 6f 69 6e 67 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 6e 20 73 6f 66 74 77 61 72 65 | for.doing.encryption.in.software |
86f00 | 2e 20 53 69 6e 63 65 20 56 79 4f 53 20 69 73 20 61 20 73 6f 66 74 77 61 72 65 20 72 6f 75 74 65 | ..Since.VyOS.is.a.software.route |
86f20 | 72 2c 20 74 68 69 73 20 69 73 20 6c 65 73 73 20 6f 66 20 61 20 63 6f 6e 63 65 72 6e 2e 20 4f 70 | r,.this.is.less.of.a.concern..Op |
86f40 | 65 6e 56 50 4e 20 68 61 73 20 62 65 65 6e 20 77 69 64 65 6c 79 20 75 73 65 64 20 6f 6e 20 55 4e | enVPN.has.been.widely.used.on.UN |
86f60 | 49 58 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 61 20 6c 6f 6e 67 20 74 69 6d 65 20 61 6e 64 20 | IX.platform.for.a.long.time.and. |
86f80 | 69 73 20 61 20 70 6f 70 75 6c 61 72 20 6f 70 74 69 6f 6e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 | is.a.popular.option.for.remote.a |
86fa0 | 63 63 65 73 73 20 56 50 4e 2c 20 74 68 6f 75 67 68 20 69 74 27 73 20 61 6c 73 6f 20 63 61 70 61 | ccess.VPN,.though.it's.also.capa |
86fc0 | 62 6c 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e | ble.of.site-to-site.connections. |
86fe0 | 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 | .Traffic.Filters.Traffic.Filters |
87000 | 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 70 61 63 6b 65 | .are.used.to.control.which.packe |
87020 | 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 20 64 65 66 69 6e 65 64 20 4e 41 54 20 72 75 6c | ts.will.have.the.defined.NAT.rul |
87040 | 65 73 20 61 70 70 6c 69 65 64 2e 20 46 69 76 65 20 64 69 66 66 65 72 65 6e 74 20 66 69 6c 74 65 | es.applied..Five.different.filte |
87060 | 72 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 77 69 74 68 69 6e 20 61 20 4e 41 54 20 72 | rs.can.be.applied.within.a.NAT.r |
87080 | 75 6c 65 2e 00 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 00 54 72 61 66 66 69 63 20 63 61 6e 6e | ule..Traffic.Policy.Traffic.cann |
870a0 | 6f 74 20 66 6c 6f 77 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 | ot.flow.between.zone.member.inte |
870c0 | 72 66 61 63 65 20 61 6e 64 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 | rface.and.any.interface.that.is. |
870e0 | 6e 6f 74 20 61 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 | not.a.zone.member..Traffic.from. |
87100 | 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 | multicast.sources.will.go.to.the |
87120 | 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 | .Rendezvous.Point,.and.receivers |
87140 | 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 | .will.pull.it.from.a.shared.tree |
87160 | 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f | .using.:abbr:`IGMP.(Internet.Gro |
87180 | 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 2e 00 54 72 61 66 66 69 | up.Management.Protocol)`..Traffi |
871a0 | 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f | c.from.multicast.sources.will.go |
871c0 | 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 | .to.the.Rendezvous.Point,.and.re |
871e0 | 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 | ceivers.will.pull.it.from.a.shar |
87200 | 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f | ed.tree.using.IGMP.(Internet.Gro |
87220 | 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 2e 00 54 72 61 66 66 69 63 | up.Management.Protocol)..Traffic |
87240 | 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 | .from.multicast.sources.will.go. |
87260 | 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 | to.the.Rendezvous.Point,.and.rec |
87280 | 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 | eivers.will.pull.it.from.a.share |
872a0 | 64 20 74 72 65 65 20 75 73 69 6e 67 20 4d 4c 44 20 28 4d 75 6c 74 69 63 61 73 74 20 4c 69 73 74 | d.tree.using.MLD.(Multicast.List |
872c0 | 65 6e 65 72 20 44 69 73 63 6f 76 65 72 79 29 2e 00 54 72 61 66 66 69 63 20 6d 75 73 74 20 62 65 | ener.Discovery)..Traffic.must.be |
872e0 | 20 73 79 6d 6d 65 74 72 69 63 00 54 72 61 66 66 69 63 20 77 68 69 63 68 20 69 73 20 72 65 63 65 | .symmetric.Traffic.which.is.rece |
87300 | 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 | ived.by.the.router.on.an.interfa |
87320 | 63 65 20 77 68 69 63 68 20 69 73 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 62 72 69 64 67 65 20 69 | ce.which.is.member.of.a.bridge.i |
87340 | 73 20 70 72 6f 63 65 73 73 65 64 20 6f 6e 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 | s.processed.on.the.**Bridge.Laye |
87360 | 72 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 | r**..A.simplified.packet.flow.di |
87380 | 61 67 72 61 6d 20 66 6f 72 20 74 68 69 73 20 6c 61 79 65 72 20 69 73 20 73 68 6f 77 6e 20 6e 65 | agram.for.this.layer.is.shown.ne |
873a0 | 78 74 3a 00 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 00 54 72 61 6e 73 69 74 69 6f | xt:.Transition.scripts.Transitio |
873c0 | 6e 20 73 63 72 69 70 74 73 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 69 6d 70 6c 65 6d 65 6e 74 | n.scripts.can.help.you.implement |
873e0 | 20 76 61 72 69 6f 75 73 20 66 69 78 75 70 73 2c 20 73 75 63 68 20 61 73 20 73 74 61 72 74 69 6e | .various.fixups,.such.as.startin |
87400 | 67 20 61 6e 64 20 73 74 6f 70 70 69 6e 67 20 73 65 72 76 69 63 65 73 2c 20 6f 72 20 65 76 65 6e | g.and.stopping.services,.or.even |
87420 | 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 56 79 4f 53 20 63 6f 6e 66 69 67 20 6f 6e 20 56 52 | .modifying.the.VyOS.config.on.VR |
87440 | 52 50 20 74 72 61 6e 73 69 74 69 6f 6e 2e 20 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d | RP.transition..This.setup.will.m |
87460 | 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 | ake.the.VRRP.process.execute.the |
87480 | 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 66 61 69 6c 2e 73 68 60 | .``/config/scripts/vrrp-fail.sh` |
874a0 | 60 20 77 69 74 68 20 61 72 67 75 6d 65 6e 74 20 60 60 46 6f 6f 60 60 20 77 68 65 6e 20 56 52 52 | `.with.argument.``Foo``.when.VRR |
874c0 | 50 20 66 61 69 6c 73 2c 20 61 6e 64 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 | P.fails,.and.the.``/config/scrip |
874e0 | 74 73 2f 76 72 72 70 2d 6d 61 73 74 65 72 2e 73 68 60 60 20 77 68 65 6e 20 74 68 65 20 72 6f 75 | ts/vrrp-master.sh``.when.the.rou |
87500 | 74 65 72 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 3a 00 54 72 61 6e 73 70 61 72 | ter.becomes.the.master:.Transpar |
87520 | 65 6e 74 20 50 72 6f 78 79 00 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 75 6e 69 6e 67 | ent.Proxy.Troubleshooting.Tuning |
87540 | 20 63 6f 6d 6d 61 6e 64 73 00 54 75 6e 6e 65 6c 00 54 75 6e 6e 65 6c 20 6b 65 79 73 00 54 75 6e | .commands.Tunnel.Tunnel.keys.Tun |
87560 | 6e 65 6c 20 70 61 73 73 77 6f 72 64 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 | nel.password.used.to.authenticat |
87580 | 65 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 00 54 77 6f 20 65 6e 76 69 72 6f 6e 6d 65 | e.the.client.(LAC).Two.environme |
875a0 | 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 3a 00 54 77 6f 20 | nt.variables.are.available:.Two. |
875c0 | 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 | interfaces.are.going.to.be.used. |
875e0 | 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 73 3a 20 65 74 68 30 20 61 6e 64 20 65 74 68 31 | in.the.flowtables:.eth0.and.eth1 |
87600 | 00 54 77 6f 20 6e 65 77 20 66 69 6c 65 73 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 | .Two.new.files.``/config/auth/id |
87620 | 5f 72 73 61 5f 72 70 6b 69 60 60 20 61 6e 64 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 | _rsa_rpki``.and.``/config/auth/i |
87640 | 64 5f 72 73 61 5f 72 70 6b 69 2e 70 75 62 60 60 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 | d_rsa_rpki.pub``.will.be.created |
87660 | 2e 00 54 77 6f 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 62 6f 74 68 20 76 69 61 | ..Two.routers.connected.both.via |
87680 | 20 65 74 68 31 20 74 68 72 6f 75 67 68 20 61 6e 20 75 6e 74 72 75 73 74 65 64 20 73 77 69 74 63 | .eth1.through.an.untrusted.switc |
876a0 | 68 00 54 79 70 65 20 6f 66 20 6d 65 74 72 69 63 73 20 67 72 6f 75 70 69 6e 67 20 77 68 65 6e 20 | h.Type.of.metrics.grouping.when. |
876c0 | 70 75 73 68 20 74 6f 20 41 7a 75 72 65 20 44 61 74 61 20 45 78 70 6c 6f 72 65 72 2e 20 54 68 65 | push.to.Azure.Data.Explorer..The |
876e0 | 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 74 61 62 6c 65 2d 70 65 72 2d 6d 65 74 72 69 63 60 60 | .default.is.``table-per-metric`` |
87700 | 2e 00 54 79 70 69 63 61 6c 6c 79 2c 20 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 72 75 6c 65 20 6f | ..Typically,.a.1-to-1.NAT.rule.o |
87720 | 6d 69 74 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 28 61 6c 6c 20 70 | mits.the.destination.port.(all.p |
87740 | 6f 72 74 73 29 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 | orts).and.replaces.the.protocol. |
87760 | 77 69 74 68 20 65 69 74 68 65 72 20 2a 2a 61 6c 6c 2a 2a 20 6f 72 20 2a 2a 69 70 2a 2a 2e 00 55 | with.either.**all**.or.**ip**..U |
87780 | 44 50 20 42 72 6f 61 64 63 61 73 74 20 52 65 6c 61 79 00 55 44 50 20 6d 6f 64 65 20 77 6f 72 6b | DP.Broadcast.Relay.UDP.mode.work |
877a0 | 73 20 62 65 74 74 65 72 20 77 69 74 68 20 4e 41 54 3a 00 55 44 50 20 70 6f 72 74 20 31 37 30 31 | s.better.with.NAT:.UDP.port.1701 |
877c0 | 20 66 6f 72 20 49 50 73 65 63 00 55 44 50 20 70 6f 72 74 20 34 35 30 30 20 28 4e 41 54 2d 54 29 | .for.IPsec.UDP.port.4500.(NAT-T) |
877e0 | 00 55 44 50 20 70 6f 72 74 20 35 30 30 20 28 49 4b 45 29 00 55 52 4c 20 46 69 6c 74 65 72 69 6e | .UDP.port.500.(IKE).URL.Filterin |
87800 | 67 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 53 71 75 69 64 47 75 61 72 64 5f 2e 00 55 52 | g.is.provided.by.SquidGuard_..UR |
87820 | 4c 20 66 69 6c 74 65 72 69 6e 67 00 55 52 4c 20 77 69 74 68 20 73 69 67 6e 61 74 75 72 65 20 6f | L.filtering.URL.with.signature.o |
87840 | 66 20 6d 61 73 74 65 72 20 66 6f 72 20 61 75 74 68 20 72 65 70 6c 79 20 76 65 72 69 66 69 63 61 | f.master.for.auth.reply.verifica |
87860 | 74 69 6f 6e 00 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 77 69 | tion.USB.to.serial.converters.wi |
87880 | 6c 6c 20 68 61 6e 64 6c 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 77 6f 72 6b 20 69 6e 20 | ll.handle.most.of.their.work.in. |
878a0 | 73 6f 66 74 77 61 72 65 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 63 61 72 65 66 75 | software.so.you.should.be.carefu |
878c0 | 6c 6c 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 62 61 75 64 72 61 74 65 20 61 73 | ll.with.the.selected.baudrate.as |
878e0 | 20 73 6f 6d 65 20 74 69 6d 65 73 20 74 68 65 79 20 63 61 6e 27 74 20 63 6f 70 65 20 77 69 74 68 | .some.times.they.can't.cope.with |
87900 | 20 74 68 65 20 65 78 70 65 63 74 65 64 20 73 70 65 65 64 2e 00 55 55 43 50 20 73 75 62 73 79 73 | .the.expected.speed..UUCP.subsys |
87920 | 74 65 6d 00 55 6e 69 63 61 73 74 00 55 6e 69 63 61 73 74 20 56 52 52 50 00 55 6e 69 63 61 73 74 | tem.Unicast.Unicast.VRRP.Unicast |
87940 | 20 56 58 4c 41 4e 00 55 6e 69 74 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 4d | .VXLAN.Unit.of.this.command.is.M |
87960 | 42 2e 00 55 6e 69 74 73 00 55 6e 74 69 6c 20 56 79 4f 53 20 31 2e 34 2c 20 74 68 65 20 6f 6e 6c | B..Units.Until.VyOS.1.4,.the.onl |
87980 | 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 | y.option.for.site-to-site.OpenVP |
879a0 | 4e 20 77 69 74 68 6f 75 74 20 50 4b 49 20 77 61 73 20 74 6f 20 75 73 65 20 70 72 65 2d 73 68 61 | N.without.PKI.was.to.use.pre-sha |
879c0 | 72 65 64 20 6b 65 79 73 2e 20 54 68 61 74 20 6f 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 61 | red.keys..That.option.is.still.a |
879e0 | 76 61 69 6c 61 62 6c 65 20 62 75 74 20 69 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e | vailable.but.it.is.deprecated.an |
87a00 | 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e | d.will.be.removed.in.the.future. |
87a20 | 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 | .However,.if.you.need.to.set.up. |
87a40 | 61 20 74 75 6e 6e 65 6c 20 74 6f 20 61 6e 20 6f 6c 64 65 72 20 56 79 4f 53 20 76 65 72 73 69 6f | a.tunnel.to.an.older.VyOS.versio |
87a60 | 6e 20 6f 72 20 61 20 73 79 73 74 65 6d 20 77 69 74 68 20 6f 6c 64 65 72 20 4f 70 65 6e 56 50 4e | n.or.a.system.with.older.OpenVPN |
87a80 | 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 | ,.you.need.to.still.need.to.know |
87aa0 | 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 2e 00 55 70 20 74 6f 20 73 65 76 65 6e 20 71 75 65 75 | .how.to.use.it..Up.to.seven.queu |
87ac0 | 65 73 20 2d 64 65 66 69 6e 65 64 20 61 73 20 63 6c 61 73 73 65 73 5f 20 77 69 74 68 20 64 69 66 | es.-defined.as.classes_.with.dif |
87ae0 | 66 65 72 65 6e 74 20 70 72 69 6f 72 69 74 69 65 73 2d 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | ferent.priorities-.can.be.config |
87b00 | 75 72 65 64 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 70 6c 61 63 65 64 20 69 6e 74 6f 20 71 75 | ured..Packets.are.placed.into.qu |
87b20 | 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 61 73 73 6f 63 69 61 74 65 64 20 6d 61 74 63 68 20 63 | eues.based.on.associated.match.c |
87b40 | 72 69 74 65 72 69 61 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 74 72 61 6e 73 6d 69 74 74 65 64 | riteria..Packets.are.transmitted |
87b60 | 20 66 72 6f 6d 20 74 68 65 20 71 75 65 75 65 73 20 69 6e 20 70 72 69 6f 72 69 74 79 20 6f 72 64 | .from.the.queues.in.priority.ord |
87b80 | 65 72 2e 20 49 66 20 63 6c 61 73 73 65 73 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 | er..If.classes.with.a.higher.pri |
87ba0 | 6f 72 69 74 79 20 61 72 65 20 62 65 69 6e 67 20 66 69 6c 6c 65 64 20 77 69 74 68 20 70 61 63 6b | ority.are.being.filled.with.pack |
87bc0 | 65 74 73 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 2c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6c | ets.continuously,.packets.from.l |
87be0 | 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 | ower.priority.classes.will.only. |
87c00 | 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 61 66 74 65 72 20 74 72 61 66 66 69 63 20 76 6f 6c | be.transmitted.after.traffic.vol |
87c20 | 75 6d 65 20 66 72 6f 6d 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 | ume.from.higher.priority.classes |
87c40 | 20 64 65 63 72 65 61 73 65 73 2e 00 55 70 64 61 74 65 00 55 70 64 61 74 65 20 63 6f 6e 74 61 69 | .decreases..Update.Update.contai |
87c60 | 6e 65 72 20 69 6d 61 67 65 00 55 70 64 61 74 65 20 67 65 6f 69 70 20 64 61 74 61 62 61 73 65 00 | ner.image.Update.geoip.database. |
87c80 | 55 70 64 61 74 65 73 00 55 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 52 50 4b 49 20 63 61 | Updates.Updates.from.the.RPKI.ca |
87ca0 | 63 68 65 20 73 65 72 76 65 72 73 20 61 72 65 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 69 65 64 | che.servers.are.directly.applied |
87cc0 | 20 61 6e 64 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 61 | .and.path.selection.is.updated.a |
87ce0 | 63 63 6f 72 64 69 6e 67 6c 79 2e 20 28 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f | ccordingly..(Soft.reconfiguratio |
87d00 | 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f | n.must.be.enabled.for.this.to.wo |
87d20 | 72 6b 29 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b | rk)..Upload.bandwidth.limit.in.k |
87d40 | 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 | bit/s.for.`<user>`..Upload.bandw |
87d60 | 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 66 6f 72 20 75 73 65 | idth.limit.in.kbit/s.for.for.use |
87d80 | 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 55 70 | r.on.interface.`<interface>`..Up |
87da0 | 6f 6e 20 72 65 63 65 70 74 69 6f 6e 20 6f 66 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b | on.reception.of.an.incoming.pack |
87dc0 | 65 74 2c 20 77 68 65 6e 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 20 73 65 6e 74 2c 20 69 74 20 | et,.when.a.response.is.sent,.it. |
87de0 | 6d 69 67 68 74 20 62 65 20 64 65 73 69 72 65 64 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 | might.be.desired.to.ensure.that. |
87e00 | 69 74 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 | it.leaves.from.the.same.interfac |
87e20 | 65 20 61 73 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6f 6e 65 2e 20 54 68 69 73 20 63 61 6e 20 62 | e.as.the.inbound.one..This.can.b |
87e40 | 65 20 61 63 68 69 65 76 65 64 20 62 79 20 65 6e 61 62 6c 69 6e 67 20 73 74 69 63 6b 79 20 63 6f | e.achieved.by.enabling.sticky.co |
87e60 | 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a | nnections.in.the.load.balancing: |
87e80 | 00 55 70 6f 6e 20 73 68 75 74 64 6f 77 6e 2c 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 77 69 6c 6c | .Upon.shutdown,.this.option.will |
87ea0 | 20 64 65 70 72 65 63 61 74 65 20 74 68 65 20 70 72 65 66 69 78 20 62 79 20 61 6e 6e 6f 75 6e 63 | .deprecate.the.prefix.by.announc |
87ec0 | 69 6e 67 20 69 74 20 69 6e 20 74 68 65 20 73 68 75 74 64 6f 77 6e 20 52 41 00 55 73 65 20 38 30 | ing.it.in.the.shutdown.RA.Use.80 |
87ee0 | 32 2e 31 31 6e 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 | 2.11n.protocol.Use.:abbr:`DH.(Di |
87f00 | 66 66 69 65 e2 80 93 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 74 65 72 73 20 66 72 6f 6d | ffie...Hellman)`.parameters.from |
87f20 | 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 2e 20 4d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 | .PKI.subsystem..Must.be.at.least |
87f40 | 20 32 30 34 38 20 62 69 74 73 20 69 6e 20 6c 65 6e 67 74 68 2e 00 55 73 65 20 43 41 20 63 65 72 | .2048.bits.in.length..Use.CA.cer |
87f60 | 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 | tificate.from.PKI.subsystem.Use. |
87f80 | 44 79 6e 44 4e 53 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 | DynDNS.as.your.preferred.provide |
87fa0 | 72 3a 00 55 73 65 20 54 4c 53 20 62 75 74 20 73 6b 69 70 20 68 6f 73 74 20 76 61 6c 69 64 61 74 | r:.Use.TLS.but.skip.host.validat |
87fc0 | 69 6f 6e 00 55 73 65 20 54 4c 53 20 65 6e 63 72 79 70 74 69 6f 6e 2e 00 55 73 65 20 60 3c 73 75 | ion.Use.TLS.encryption..Use.`<su |
87fe0 | 62 6e 65 74 3e 60 20 61 73 20 74 68 65 20 49 50 20 70 6f 6f 6c 20 66 6f 72 20 61 6c 6c 20 63 6f | bnet>`.as.the.IP.pool.for.all.co |
88000 | 6e 6e 65 63 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 60 60 73 68 6f 77 20 6c 6f 67 | nnecting.clients..Use.``show.log |
88020 | 20 7c 20 73 74 72 69 70 2d 70 72 69 76 61 74 65 60 60 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 | .|.strip-private``.if.you.want.t |
88040 | 6f 20 68 69 64 65 20 70 72 69 76 61 74 65 20 64 61 74 61 20 77 68 65 6e 20 73 68 61 72 69 6e 67 | o.hide.private.data.when.sharing |
88060 | 20 79 6f 75 72 20 6c 6f 67 73 2e 00 55 73 65 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 | .your.logs..Use.`delete.system.c |
88080 | 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 60 20 74 6f 20 64 65 61 63 74 69 76 65 20 61 6c | onntrack.modules`.to.deactive.al |
880a0 | 6c 20 6d 6f 64 75 6c 65 73 2e 00 55 73 65 20 61 20 70 65 72 73 69 73 74 65 6e 74 20 4c 44 41 50 | l.modules..Use.a.persistent.LDAP |
880c0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 6f 72 6d 61 6c 6c 79 20 74 68 65 20 4c 44 41 50 20 63 | .connection..Normally.the.LDAP.c |
880e0 | 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 6f 70 65 6e 20 77 68 69 6c 65 20 76 61 6c | onnection.is.only.open.while.val |
88100 | 69 64 61 74 69 6e 67 20 61 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 70 72 65 73 65 72 76 65 20 72 | idating.a.username.to.preserve.r |
88120 | 65 73 6f 75 72 63 65 73 20 61 74 20 74 68 65 20 4c 44 41 50 20 73 65 72 76 65 72 2e 20 54 68 69 | esources.at.the.LDAP.server..Thi |
88140 | 73 20 6f 70 74 69 6f 6e 20 63 61 75 73 65 73 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 | s.option.causes.the.LDAP.connect |
88160 | 69 6f 6e 20 74 6f 20 62 65 20 6b 65 70 74 20 6f 70 65 6e 2c 20 61 6c 6c 6f 77 69 6e 67 20 69 74 | ion.to.be.kept.open,.allowing.it |
88180 | 20 74 6f 20 62 65 20 72 65 75 73 65 64 20 66 6f 72 20 66 75 72 74 68 65 72 20 75 73 65 72 20 76 | .to.be.reused.for.further.user.v |
881a0 | 61 6c 69 64 61 74 69 6f 6e 73 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 | alidations..Use.a.specific.addre |
881c0 | 73 73 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 | ss-group..Prepend.character.``!` |
881e0 | 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | `.for.inverted.matching.criteria |
88200 | 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2d 67 72 6f 75 70 2e 20 50 | ..Use.a.specific.domain-group..P |
88220 | 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 | repend.character.``!``.for.inver |
88240 | 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 | ted.matching.criteria..Use.a.spe |
88260 | 63 69 66 69 63 20 6d 61 63 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 | cific.mac-group..Prepend.charact |
88280 | 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 | er.``!``.for.inverted.matching.c |
882a0 | 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 2d | riteria..Use.a.specific.network- |
882c0 | 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 | group..Prepend.character.``!``.f |
882e0 | 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 | or.inverted.matching.criteria..U |
88300 | 73 65 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e | se.a.specific.port-group..Prepen |
88320 | 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d | d.character.``!``.for.inverted.m |
88340 | 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 64 64 72 65 73 73 20 60 6d | atching.criteria..Use.address.`m |
88360 | 61 73 71 75 65 72 61 64 65 60 20 28 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 70 72 69 6d 61 | asquerade`.(the.interfaces.prima |
88380 | 72 79 20 61 64 64 72 65 73 73 29 20 6f 6e 20 72 75 6c 65 20 33 30 00 55 73 65 20 61 6e 20 61 75 | ry.address).on.rule.30.Use.an.au |
883a0 | 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 73 65 6c 66 2d 73 69 67 6e 65 | tomatically.generated.self-signe |
883c0 | 64 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 65 20 61 6e 79 20 6c 6f 63 61 6c 20 61 64 64 72 | d.certificate.Use.any.local.addr |
883e0 | 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 | ess,.configured.on.any.interface |
88400 | 20 69 66 20 74 68 69 73 20 69 73 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 61 75 74 68 20 6b 65 | .if.this.is.not.set..Use.auth.ke |
88420 | 79 20 66 69 6c 65 20 61 74 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6d 79 2e 6b 65 79 60 | y.file.at.``/config/auth/my.key` |
88440 | 60 00 55 73 65 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 | `.Use.certificate.from.PKI.subsy |
88460 | 73 74 65 6d 00 55 73 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 3c 75 72 6c 3e 60 20 74 6f 20 64 | stem.Use.configured.`<url>`.to.d |
88480 | 65 74 65 72 6d 69 6e 65 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 64 64 63 6c 69 65 | etermine.your.IP.address..ddclie |
884a0 | 6e 74 5f 20 77 69 6c 6c 20 6c 6f 61 64 20 60 3c 75 72 6c 3e 60 20 61 6e 64 20 74 72 69 65 73 20 | nt_.will.load.`<url>`.and.tries. |
884c0 | 74 6f 20 65 78 74 72 61 63 74 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 | to.extract.your.IP.address.from. |
884e0 | 74 68 65 20 72 65 73 70 6f 6e 73 65 2e 00 55 73 65 20 64 65 53 45 43 20 28 64 65 64 79 6e 2e 69 | the.response..Use.deSEC.(dedyn.i |
88500 | 6f 29 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 | o).as.your.preferred.provider:.U |
88520 | 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 | se.inverse-match.to.match.anythi |
88540 | 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 | ng.except.the.given.country-code |
88560 | 73 2e 00 55 73 65 20 6c 6f 63 61 6c 20 73 6f 63 6b 65 74 20 66 6f 72 20 41 50 49 00 55 73 65 20 | s..Use.local.socket.for.API.Use. |
88580 | 6c 6f 63 61 6c 20 75 73 65 72 20 60 66 6f 6f 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 | local.user.`foo`.with.password.` |
885a0 | 62 61 72 60 00 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 | bar`.Use.tab.completion.to.get.a |
885c0 | 20 6c 69 73 74 20 6f 66 20 63 61 74 65 67 6f 72 69 65 73 2e 00 55 73 65 20 74 68 65 20 61 64 64 | .list.of.categories..Use.the.add |
885e0 | 72 65 73 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 | ress.of.the.specified.interface. |
88600 | 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 | on.the.local.machine.as.the.sour |
88620 | 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 | ce.address.of.the.connection..Us |
88640 | 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 62 75 69 6c | e.the.following.topology.to.buil |
88660 | 64 20 61 20 6e 61 74 36 36 20 62 61 73 65 64 20 69 73 6f 6c 61 74 65 64 20 6e 65 74 77 6f 72 6b | d.a.nat66.based.isolated.network |
88680 | 20 62 65 74 77 65 65 6e 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e | .between.internal.and.external.n |
886a0 | 65 74 77 6f 72 6b 73 20 28 64 79 6e 61 6d 69 63 20 70 72 65 66 69 78 20 69 73 20 6e 6f 74 20 73 | etworks.(dynamic.prefix.is.not.s |
886c0 | 75 70 70 6f 72 74 65 64 29 3a 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 | upported):.Use.the.following.top |
886e0 | 6f 6c 6f 67 79 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 | ology.to.translate.internal.user |
88700 | 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 28 60 60 66 63 3a 3a 2f 37 60 60 29 20 74 6f | .local.addresses.(``fc::/7``).to |
88720 | 20 44 48 43 50 76 36 2d 50 44 20 70 72 6f 76 69 64 65 64 20 70 72 65 66 69 78 65 73 20 66 72 6f | .DHCPv6-PD.provided.prefixes.fro |
88740 | 6d 20 61 6e 20 49 53 50 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 56 79 4f 53 20 48 41 20 | m.an.ISP.connected.to.a.VyOS.HA. |
88760 | 70 61 69 72 2e 00 55 73 65 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 | pair..Use.the.specified.address. |
88780 | 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 | on.the.local.machine.as.the.sour |
887a0 | 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4f 6e | ce.address.of.the.connection..On |
887c0 | 6c 79 20 75 73 65 66 75 6c 20 6f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 6f 72 65 20 74 | ly.useful.on.systems.with.more.t |
887e0 | 68 61 6e 20 6f 6e 65 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 | han.one.address..Use.these.comma |
88800 | 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 | nds.if.you.would.like.to.set.the |
88820 | 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 | .discovery.hello.and.hold.time.p |
88840 | 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 74 68 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 6e | arameters.for.the.targeted.LDP.n |
88860 | 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 | eighbors..Use.these.commands.if. |
88880 | 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 | you.would.like.to.set.the.discov |
888a0 | 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 | ery.hello.and.hold.time.paramete |
888c0 | 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f | rs..Use.these.commands.to.contro |
888e0 | 6c 20 74 68 65 20 65 78 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 | l.the.exporting.of.forwarding.eq |
88900 | 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 | uivalence.classes.(FECs).for.LDP |
88920 | 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 | .to.neighbors..This.would.be.use |
88940 | 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 6e 6e 6f 75 6e 63 69 | ful.for.example.on.only.announci |
88960 | 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 6e | ng.the.labeled.routes.that.are.n |
88980 | 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 | eeded.and.not.ones.that.are.not. |
889a0 | 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 6c 6f 6f 70 62 | needed,.such.as.announcing.loopb |
889c0 | 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 6e 6f 20 6f 74 68 65 72 73 2e 00 55 73 | ack.interfaces.and.no.others..Us |
889e0 | 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 | e.these.commands.to.control.the. |
88a00 | 69 6d 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 | importing.of.forwarding.equivale |
88a20 | 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 20 66 72 6f 6d 20 | nce.classes.(FECs).for.LDP.from. |
88a40 | 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 | neighbors..This.would.be.useful. |
88a60 | 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 63 63 65 70 74 69 6e 67 20 74 68 | for.example.on.only.accepting.th |
88a80 | 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 | e.labeled.routes.that.are.needed |
88aa0 | 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 | .and.not.ones.that.are.not.neede |
88ac0 | 64 2c 20 73 75 63 68 20 61 73 20 61 63 63 65 70 74 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e | d,.such.as.accepting.loopback.in |
88ae0 | 74 65 72 66 61 63 65 73 20 61 6e 64 20 72 65 6a 65 63 74 69 6e 67 20 61 6c 6c 20 6f 74 68 65 72 | terfaces.and.rejecting.all.other |
88b00 | 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 69 6e 20 74 68 65 20 73 | s..Use.this.PIM.command.in.the.s |
88b20 | 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 73 65 74 20 74 68 65 20 70 72 69 | elected.interface.to.set.the.pri |
88b40 | 6f 72 69 74 79 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 79 6f 75 20 77 61 6e 74 20 74 6f | ority.(1-4294967295).you.want.to |
88b60 | 20 69 6e 66 6c 75 65 6e 63 65 20 69 6e 20 74 68 65 20 65 6c 65 63 74 69 6f 6e 20 6f 66 20 61 20 | .influence.in.the.election.of.a. |
88b80 | 6e 6f 64 65 20 74 6f 20 62 65 63 6f 6d 65 20 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f | node.to.become.the.Designated.Ro |
88ba0 | 75 74 65 72 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 20 54 68 65 20 64 65 66 61 | uter.for.a.LAN.segment..The.defa |
88bc0 | 75 6c 74 20 70 72 69 6f 72 69 74 79 20 69 73 20 31 2c 20 73 65 74 20 61 20 20 68 69 67 68 65 72 | ult.priority.is.1,.set.a..higher |
88be0 | 20 76 61 6c 75 65 20 74 6f 20 67 69 76 65 20 74 68 65 20 72 6f 75 74 65 72 20 6d 6f 72 65 20 70 | .value.to.give.the.router.more.p |
88c00 | 72 65 66 65 72 65 6e 63 65 20 69 6e 20 74 68 65 20 44 52 20 65 6c 65 63 74 69 6f 6e 20 70 72 6f | reference.in.the.DR.election.pro |
88c20 | 63 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 6f | cess..Use.this.PIM.command.to.mo |
88c40 | 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 28 33 31 2d 36 30 30 30 | dify.the.time.out.value.(31-6000 |
88c60 | 30 20 73 65 63 6f 6e 64 73 29 20 66 6f 72 20 61 6e 20 60 28 53 2c 47 29 20 3c 68 74 74 70 73 3a | 0.seconds).for.an.`(S,G).<https: |
88c80 | 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 | //tools.ietf.org/html/rfc7761#se |
88ca0 | 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 66 6c 6f 77 2e 20 33 31 20 73 65 63 6f 6e 64 73 20 69 73 | ction-4.1>`_.flow..31.seconds.is |
88cc0 | 20 63 68 6f 73 65 6e 20 66 6f 72 20 61 20 6c 6f 77 65 72 20 62 6f 75 6e 64 20 61 73 20 73 6f 6d | .chosen.for.a.lower.bound.as.som |
88ce0 | 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 | e.hardware.platforms.cannot.see. |
88d00 | 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 | data.flowing.in.better.than.30.s |
88d20 | 65 63 6f 6e 64 73 20 63 68 75 6e 6b 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 | econds.chunks..Use.this.comand.t |
88d40 | 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d | o.set.the.IPv6.address.pool.from |
88d60 | 20 77 68 69 63 68 20 61 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 | .which.a.PPPoE.client.will.get.a |
88d80 | 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 | n.IPv6.prefix.of.your.defined.le |
88da0 | 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 | ngth.(mask).to.terminate.the.PPP |
88dc0 | 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d | oE.endpoint.at.their.side..The.m |
88de0 | 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f | ask.length.can.be.set.from.48.to |
88e00 | 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | .128.bit.long,.the.default.value |
88e20 | 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 | .is.64..Use.this.comand.to.set.t |
88e40 | 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 | he.IPv6.address.pool.from.which. |
88e60 | 61 6e 20 49 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 | an.IPoE.client.will.get.an.IPv6. |
88e80 | 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d | prefix.of.your.defined.length.(m |
88ea0 | 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 49 50 6f 45 20 65 6e 64 70 6f | ask).to.terminate.the.IPoE.endpo |
88ec0 | 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 | int.at.their.side..The.mask.leng |
88ee0 | 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 | th.can.be.set.from.48.to.128.bit |
88f00 | 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 | .long,.the.default.value.is.64.. |
88f20 | 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 | Use.this.comand.to.set.the.IPv6. |
88f40 | 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 50 6f 45 | address.pool.from.which.an.PPPoE |
88f60 | 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 | .client.will.get.an.IPv6.prefix. |
88f80 | 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f | of.your.defined.length.(mask).to |
88fa0 | 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 | .terminate.the.PPPoE.endpoint.at |
88fc0 | 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e | .their.side..The.mask.length.can |
88fe0 | 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c | .be.set.from.48.to.128.bit.long, |
89000 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 | .the.default.value.is.64..Use.th |
89020 | 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 | is.comand.to.set.the.IPv6.addres |
89040 | 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 54 50 20 63 6c 69 65 6e 74 | s.pool.from.which.an.PPTP.client |
89060 | 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 | .will.get.an.IPv6.prefix.of.your |
89080 | 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e | .defined.length.(mask).to.termin |
890a0 | 61 74 65 20 74 68 65 20 50 50 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 | ate.the.PPTP.endpoint.at.their.s |
890c0 | 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 | ide..The.mask.length.can.be.set. |
890e0 | 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 | from.48.to.128.bit.long,.the.def |
89100 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e | ault.value.is.64..Use.this.coman |
89120 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 | d.to.set.the.IPv6.address.pool.f |
89140 | 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 53 53 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 | rom.which.an.SSTP.client.will.ge |
89160 | 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 | t.an.IPv6.prefix.of.your.defined |
89180 | 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 | .length.(mask).to.terminate.the. |
891a0 | 53 53 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 | SSTP.endpoint.at.their.side..The |
891c0 | 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 | .mask.length.can.be.set.from.48. |
891e0 | 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | to.128.bit.long,.the.default.val |
89200 | 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 | ue.is.64..Use.this.comand.to.set |
89220 | 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 | .the.IPv6.address.pool.from.whic |
89240 | 68 20 61 6e 20 6c 32 74 70 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 | h.an.l2tp.client.will.get.an.IPv |
89260 | 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 | 6.prefix.of.your.defined.length. |
89280 | 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 6c 32 74 70 20 65 6e 64 | (mask).to.terminate.the.l2tp.end |
892a0 | 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 | point.at.their.side..The.mask.le |
892c0 | 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 | ngth.can.be.set.from.48.to.128.b |
892e0 | 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 | it.long,.the.default.value.is.64 |
89300 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f | ..Use.this.command.for.every.poo |
89320 | 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e | l.of.client.IP.addresses.you.wan |
89340 | 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 | t.to.define..The.addresses.of.th |
89360 | 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 | is.pool.will.be.given.to.PPPoE.c |
89380 | 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 | lients..You.must.use.CIDR.notati |
893a0 | 6f 6e 20 61 6e 64 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 | on.and.it.must.be.within.a./24.s |
893c0 | 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 | ubnet..Use.this.command.for.ever |
893e0 | 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 79 6f | y.pool.of.client.IP.addresses.yo |
89400 | 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 65 73 20 | u.want.to.define..The.addresses. |
89420 | 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 | of.this.pool.will.be.given.to.PP |
89440 | 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 52 20 6e | PoE.clients..You.must.use.CIDR.n |
89460 | 6f 74 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 | otation..Use.this.command.if.you |
89480 | 20 77 6f 75 6c 64 20 6c 69 6b 65 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 61 64 | .would.like.for.the.router.to.ad |
894a0 | 76 65 72 74 69 73 65 20 46 45 43 73 20 77 69 74 68 20 61 20 6c 61 62 65 6c 20 6f 66 20 30 20 66 | vertise.FECs.with.a.label.of.0.f |
894c0 | 6f 72 20 65 78 70 6c 69 63 69 74 20 6e 75 6c 6c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 55 73 65 | or.explicit.null.operations..Use |
894e0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 | .this.command.if.you.would.like. |
89500 | 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6c 6f 63 61 6c 20 46 45 43 20 61 6c 6c 6f 63 61 74 | to.control.the.local.FEC.allocat |
89520 | 69 6f 6e 73 20 66 6f 72 20 4c 44 50 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 | ions.for.LDP..A.good.example.wou |
89540 | 6c 64 20 62 65 20 66 6f 72 20 79 6f 75 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6e | ld.be.for.your.local.router.to.n |
89560 | 6f 74 20 61 6c 6c 6f 63 61 74 65 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 65 76 65 72 79 74 68 69 | ot.allocate.a.label.for.everythi |
89580 | 6e 67 2e 20 4a 75 73 74 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 77 68 61 74 20 69 74 27 73 20 75 | ng..Just.a.label.for.what.it's.u |
895a0 | 73 65 66 75 6c 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 6a | seful..A.good.example.would.be.j |
895c0 | 75 73 74 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6c 61 62 65 6c 2e 00 55 73 65 20 74 68 69 73 20 63 | ust.a.loopback.label..Use.this.c |
895e0 | 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 | ommand.if.you.would.like.to.set. |
89600 | 74 68 65 20 54 43 50 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 69 6e 74 65 72 76 | the.TCP.session.hold.time.interv |
89620 | 61 6c 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 | als..Use.this.command.to.allow.t |
89640 | 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 | he.selected.interface.to.join.a. |
89660 | 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 6d 75 6c | multicast.group.defining.the.mul |
89680 | 74 69 63 61 73 74 20 61 64 64 72 65 73 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 6a 6f 69 6e 20 | ticast.address.you.want.to.join. |
896a0 | 61 6e 64 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 6f 2e 00 55 | and.the.source.IP.address.too..U |
896c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c | se.this.command.to.allow.the.sel |
896e0 | 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 | ected.interface.to.join.a.multic |
89700 | 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 | ast.group..Use.this.command.to.a |
89720 | 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a | llow.the.selected.interface.to.j |
89740 | 6f 69 6e 20 61 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 | oin.a.source-specific.multicast. |
89760 | 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b | group..Use.this.command.to.check |
89780 | 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 63 | .the.tunnel.status.for.OpenVPN.c |
897a0 | 6c 69 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | lient.interfaces..Use.this.comma |
897c0 | 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f | nd.to.check.the.tunnel.status.fo |
897e0 | 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 | r.OpenVPN.server.interfaces..Use |
89800 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 | .this.command.to.check.the.tunne |
89820 | 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 | l.status.for.OpenVPN.site-to-sit |
89840 | 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | e.interfaces..Use.this.command.t |
89860 | 6f 20 63 6c 65 61 72 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 | o.clear.Border.Gateway.Protocol. |
89880 | 73 74 61 74 69 73 74 69 63 73 20 6f 72 20 73 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 | statistics.or.status..Use.this.c |
898a0 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 | ommand.to.configure.DHCPv6.Prefi |
898c0 | 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 49 50 6f 45 2e 20 | x.Delegation.(RFC3633).on.IPoE.. |
898e0 | 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 | You.will.have.to.set.your.IPv6.p |
89900 | 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 | ool.and.the.length.of.the.delega |
89920 | 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 | tion.prefix..From.the.defined.IP |
89940 | 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 | v6.pool.you.will.be.handing.out. |
89960 | 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 | networks.of.the.defined.length.( |
89980 | 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f | delegation-prefix)..The.length.o |
899a0 | 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 | f.the.delegation.prefix.can.be.s |
899c0 | 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 | et.from.32.to.64.bit.long..Use.t |
899e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 | his.command.to.configure.DHCPv6. |
89a00 | 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 | Prefix.Delegation.(RFC3633).on.P |
89a20 | 50 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 | PPoE..You.will.have.to.set.your. |
89a40 | 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 | IPv6.pool.and.the.length.of.the. |
89a60 | 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 | delegation.prefix..From.the.defi |
89a80 | 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e | ned.IPv6.pool.you.will.be.handin |
89aa0 | 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 | g.out.networks.of.the.defined.le |
89ac0 | 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 | ngth.(delegation-prefix)..The.le |
89ae0 | 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 | ngth.of.the.delegation.prefix.ca |
89b00 | 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e | n.be.set.from.32.to.64.bit.long. |
89b20 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 | .Use.this.command.to.configure.D |
89b40 | 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 | HCPv6.Prefix.Delegation.(RFC3633 |
89b60 | 29 20 6f 6e 20 50 50 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 | ).on.PPTP..You.will.have.to.set. |
89b80 | 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 | your.IPv6.pool.and.the.length.of |
89ba0 | 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 | .the.delegation.prefix..From.the |
89bc0 | 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 | .defined.IPv6.pool.you.will.be.h |
89be0 | 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e | anding.out.networks.of.the.defin |
89c00 | 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 | ed.length.(delegation-prefix)..T |
89c20 | 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 | he.length.of.the.delegation.pref |
89c40 | 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 | ix.can.be.set.from.32.to.64.bit. |
89c60 | 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | long..Use.this.command.to.config |
89c80 | 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 | ure.DHCPv6.Prefix.Delegation.(RF |
89ca0 | 43 33 36 33 33 29 20 6f 6e 20 53 53 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f | C3633).on.SSTP..You.will.have.to |
89cc0 | 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 | .set.your.IPv6.pool.and.the.leng |
89ce0 | 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f | th.of.the.delegation.prefix..Fro |
89d00 | 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c | m.the.defined.IPv6.pool.you.will |
89d20 | 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 | .be.handing.out.networks.of.the. |
89d40 | 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 | defined.length.(delegation-prefi |
89d60 | 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e | x)..The.length.of.the.delegation |
89d80 | 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 | .prefix.can.be.set.from.32.to.64 |
89da0 | 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | .bit.long..Use.this.command.to.c |
89dc0 | 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f | onfigure.DHCPv6.Prefix.Delegatio |
89de0 | 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 6c 32 74 70 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 | n.(RFC3633).on.l2tp..You.will.ha |
89e00 | 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 | ve.to.set.your.IPv6.pool.and.the |
89e20 | 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 | .length.of.the.delegation.prefix |
89e40 | 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 | ..From.the.defined.IPv6.pool.you |
89e60 | 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 | .will.be.handing.out.networks.of |
89e80 | 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d | .the.defined.length.(delegation- |
89ea0 | 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 | prefix)..The.length.of.the.deleg |
89ec0 | 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 | ation.prefix.can.be.set.from.32. |
89ee0 | 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | to.64.bit.long..Use.this.command |
89f00 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 | .to.configure.DHCPv6.Prefix.Dele |
89f20 | 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 | gation.(RFC3633)..You.will.have. |
89f40 | 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 | to.set.your.IPv6.pool.and.the.le |
89f60 | 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 | ngth.of.the.delegation.prefix..F |
89f80 | 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 | rom.the.defined.IPv6.pool.you.wi |
89fa0 | 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 | ll.be.handing.out.networks.of.th |
89fc0 | 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 | e.defined.length.(delegation-pre |
89fe0 | 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 | fix)..The.length.of.the.delegati |
8a000 | 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 | on.prefix.can.be.set.from.32.to. |
8a020 | 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | 64.bit.long..Use.this.command.to |
8a040 | 20 63 6f 6e 66 69 67 75 72 65 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e | .configure.Dynamic.Authorization |
8a060 | 20 45 78 74 65 6e 73 69 6f 6e 73 20 74 6f 20 52 41 44 49 55 53 20 73 6f 20 74 68 61 74 20 79 6f | .Extensions.to.RADIUS.so.that.yo |
8a080 | 75 20 63 61 6e 20 72 65 6d 6f 74 65 6c 79 20 64 69 73 63 6f 6e 6e 65 63 74 20 73 65 73 73 69 6f | u.can.remotely.disconnect.sessio |
8a0a0 | 6e 73 20 61 6e 64 20 63 68 61 6e 67 65 20 73 6f 6d 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ns.and.change.some.authenticatio |
8a0c0 | 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | n.parameters..Use.this.command.t |
8a0e0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 22 62 6c 61 63 6b 2d 68 6f 6c 65 22 20 72 6f 75 74 65 | o.configure.a."black-hole".route |
8a100 | 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2e 20 41 20 62 6c 61 63 6b 2d 68 6f 6c 65 20 72 6f 75 | .on.the.router..A.black-hole.rou |
8a120 | 74 65 20 69 73 20 61 20 72 6f 75 74 65 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 73 79 73 74 | te.is.a.route.for.which.the.syst |
8a140 | 65 6d 20 73 69 6c 65 6e 74 6c 79 20 64 69 73 63 61 72 64 20 70 61 63 6b 65 74 73 20 74 68 61 74 | em.silently.discard.packets.that |
8a160 | 20 61 72 65 20 6d 61 74 63 68 65 64 2e 20 54 68 69 73 20 70 72 65 76 65 6e 74 73 20 6e 65 74 77 | .are.matched..This.prevents.netw |
8a180 | 6f 72 6b 73 20 6c 65 61 6b 69 6e 67 20 6f 75 74 20 70 75 62 6c 69 63 20 69 6e 74 65 72 66 61 63 | orks.leaking.out.public.interfac |
8a1a0 | 65 73 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 70 72 65 76 65 6e 74 20 74 68 65 6d | es,.but.it.does.not.prevent.them |
8a1c0 | 20 66 72 6f 6d 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 61 20 6d 6f 72 65 20 73 70 65 63 69 | .from.being.used.as.a.more.speci |
8a1e0 | 66 69 63 20 72 6f 75 74 65 20 69 6e 73 69 64 65 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2e 00 55 | fic.route.inside.your.network..U |
8a200 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4e | se.this.command.to.configure.a.N |
8a220 | 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 64 65 66 69 6e 69 6e 67 20 | etwork.Emulator.policy.defining. |
8a240 | 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 66 69 78 65 64 20 61 6d 6f 75 6e 74 20 6f 66 | its.name.and.the.fixed.amount.of |
8a260 | 20 74 69 6d 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 64 64 20 74 6f 20 61 6c 6c 20 70 61 63 | .time.you.want.to.add.to.all.pac |
8a280 | 6b 65 74 20 67 6f 69 6e 67 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 | ket.going.out.of.the.interface.. |
8a2a0 | 54 68 65 20 6c 61 74 65 6e 63 79 20 77 69 6c 6c 20 62 65 20 61 64 64 65 64 20 74 68 72 6f 75 67 | The.latency.will.be.added.throug |
8a2c0 | 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 73 63 2e | h.the.Token.Bucket.Filter.qdisc. |
8a2e0 | 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 | .It.will.only.take.effect.if.you |
8a300 | 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 | .have.configured.its.bandwidth.t |
8a320 | 6f 6f 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 73 65 63 73 2c 20 6d 73 20 61 6e 64 20 75 73 2e | oo..You.can.use.secs,.ms.and.us. |
8a340 | 20 44 65 66 61 75 6c 74 3a 20 35 30 6d 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .Default:.50ms..Use.this.command |
8a360 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 | .to.configure.a.Priority.Queue.p |
8a380 | 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 | olicy,.set.its.name,.set.a.class |
8a3a0 | 20 77 69 74 68 20 61 20 70 72 69 6f 72 69 74 79 20 66 72 6f 6d 20 31 20 74 6f 20 37 20 61 6e 64 | .with.a.priority.from.1.to.7.and |
8a3c0 | 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c | .define.a.hard.limit.on.the.real |
8a3e0 | 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 | .queue.size..When.this.limit.is. |
8a400 | 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 | reached,.new.packets.are.dropped |
8a420 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8a440 | 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 | a.Random-Detect.policy.and.set.i |
8a460 | 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 6e 61 6d 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 | ts.name,.then.name.the.IP.Preced |
8a480 | 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 | ence.for.the.virtual.queue.you.a |
8a4a0 | 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 74 68 65 20 6d 61 78 69 | re.configuring.and.what.the.maxi |
8a4c0 | 6d 75 6d 20 73 69 7a 65 20 6f 66 20 69 74 73 20 71 75 65 75 65 20 77 69 6c 6c 20 62 65 20 28 66 | mum.size.of.its.queue.will.be.(f |
8a4e0 | 72 6f 6d 20 31 20 74 6f 20 31 2d 34 32 39 34 39 36 37 32 39 35 20 70 61 63 6b 65 74 73 29 2e 20 | rom.1.to.1-4294967295.packets).. |
8a500 | 50 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 68 65 20 63 75 72 | Packets.are.dropped.when.the.cur |
8a520 | 72 65 6e 74 20 71 75 65 75 65 20 6c 65 6e 67 74 68 20 72 65 61 63 68 65 73 20 74 68 69 73 20 76 | rent.queue.length.reaches.this.v |
8a540 | 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | alue..Use.this.command.to.config |
8a560 | 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 | ure.a.Random-Detect.policy.and.s |
8a580 | 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 | et.its.name,.then.state.the.IP.P |
8a5a0 | 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 | recedence.for.the.virtual.queue. |
8a5c0 | 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 | you.are.configuring.and.what.its |
8a5e0 | 20 6d 61 72 6b 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 77 69 6c 6c 20 62 65 | .mark.(drop).probability.will.be |
8a600 | 2e 20 53 65 74 20 74 68 65 20 70 72 6f 62 61 62 69 6c 69 74 79 20 62 79 20 67 69 76 69 6e 67 20 | ..Set.the.probability.by.giving. |
8a620 | 74 68 65 20 4e 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 66 72 61 63 74 69 6f 6e 20 31 2f 4e 20 | the.N.value.of.the.fraction.1/N. |
8a640 | 28 64 65 66 61 75 6c 74 3a 20 31 30 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | (default:.10)..Use.this.command. |
8a660 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c | to.configure.a.Random-Detect.pol |
8a680 | 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 | icy.and.set.its.name,.then.state |
8a6a0 | 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 | .the.IP.Precedence.for.the.virtu |
8a6c0 | 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 | al.queue.you.are.configuring.and |
8a6e0 | 20 77 68 61 74 20 69 74 73 20 6d 61 78 69 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 | .what.its.maximum.threshold.for. |
8a700 | 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 | random.detection.will.be.(from.0 |
8a720 | 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 38 29 2e 20 | .to.4096.packets,.default:.18).. |
8a740 | 41 74 20 74 68 69 73 20 73 69 7a 65 2c 20 74 68 65 20 6d 61 72 6b 69 6e 67 20 28 64 72 6f 70 29 | At.this.size,.the.marking.(drop) |
8a760 | 20 70 72 6f 62 61 62 69 6c 69 74 79 20 69 73 20 6d 61 78 69 6d 61 6c 2e 00 55 73 65 20 74 68 69 | .probability.is.maximal..Use.thi |
8a780 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d | s.command.to.configure.a.Random- |
8a7a0 | 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 | Detect.policy.and.set.its.name,. |
8a7c0 | 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 | then.state.the.IP.Precedence.for |
8a7e0 | 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 | .the.virtual.queue.you.are.confi |
8a800 | 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 69 6e 69 6d 75 6d 20 74 68 72 65 | guring.and.what.its.minimum.thre |
8a820 | 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 | shold.for.random.detection.will. |
8a840 | 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 29 2e 20 20 49 66 | be.(from.0.to.4096.packets)...If |
8a860 | 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 65 78 63 65 65 64 65 64 2c 20 70 61 63 6b 65 74 73 | .this.value.is.exceeded,.packets |
8a880 | 20 73 74 61 72 74 20 62 65 69 6e 67 20 65 6c 69 67 69 62 6c 65 20 66 6f 72 20 62 65 69 6e 67 20 | .start.being.eligible.for.being. |
8a8a0 | 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | dropped..Use.this.command.to.con |
8a8c0 | 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e | figure.a.Random-Detect.policy.an |
8a8e0 | 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 | d.set.its.name,.then.state.the.I |
8a900 | 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 | P.Precedence.for.the.virtual.que |
8a920 | 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 | ue.you.are.configuring.and.what. |
8a940 | 74 68 65 20 73 69 7a 65 20 6f 66 20 69 74 73 20 61 76 65 72 61 67 65 2d 70 61 63 6b 65 74 20 73 | the.size.of.its.average-packet.s |
8a960 | 68 6f 75 6c 64 20 62 65 20 28 69 6e 20 62 79 74 65 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 32 | hould.be.(in.bytes,.default:.102 |
8a980 | 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | 4)..Use.this.command.to.configur |
8a9a0 | 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 | e.a.Random-Detect.policy,.set.it |
8a9c0 | 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 74 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e | s.name.and.set.the.available.ban |
8a9e0 | 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 2e 20 49 74 20 69 73 20 75 73 | dwidth.for.this.policy..It.is.us |
8aa00 | 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 61 76 65 72 61 67 65 20 71 | ed.for.calculating.the.average.q |
8aa20 | 75 65 75 65 20 73 69 7a 65 20 61 66 74 65 72 20 73 6f 6d 65 20 69 64 6c 65 20 74 69 6d 65 2e 20 | ueue.size.after.some.idle.time.. |
8aa40 | 49 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 74 20 74 6f 20 74 68 65 20 62 61 6e 64 77 69 64 74 | It.should.be.set.to.the.bandwidt |
8aa60 | 68 20 6f 66 20 79 6f 75 72 20 69 6e 74 65 72 66 61 63 65 2e 20 52 61 6e 64 6f 6d 20 44 65 74 65 | h.of.your.interface..Random.Dete |
8aa80 | 63 74 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 2c 20 74 68 69 73 | ct.is.not.a.shaping.policy,.this |
8aaa0 | 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 73 68 61 70 65 2e 00 55 73 65 20 74 68 69 | .command.will.not.shape..Use.thi |
8aac0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f | s.command.to.configure.a.Rate-Co |
8aae0 | 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 | ntrol.policy,.set.its.name.and.t |
8ab00 | 68 65 20 6d 61 78 69 6d 75 6d 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 61 20 70 61 63 6b | he.maximum.amount.of.time.a.pack |
8ab20 | 65 74 20 63 61 6e 20 62 65 20 71 75 65 75 65 64 20 28 64 65 66 61 75 6c 74 3a 20 35 30 20 6d 73 | et.can.be.queued.(default:.50.ms |
8ab40 | 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | )..Use.this.command.to.configure |
8ab60 | 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 | .a.Rate-Control.policy,.set.its. |
8ab80 | 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 79 6f 75 20 77 61 6e 74 | name.and.the.rate.limit.you.want |
8aba0 | 20 74 6f 20 68 61 76 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | .to.have..Use.this.command.to.co |
8abc0 | 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 | nfigure.a.Rate-Control.policy,.s |
8abe0 | 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 | et.its.name.and.the.size.of.the. |
8ac00 | 62 75 63 6b 65 74 20 69 6e 20 62 79 74 65 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 | bucket.in.bytes.which.will.be.av |
8ac20 | 61 69 6c 61 62 6c 65 20 66 6f 72 20 62 75 72 73 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ailable.for.burst..Use.this.comm |
8ac40 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 | and.to.configure.a.Round-Robin.p |
8ac60 | 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 | olicy,.set.its.name,.set.a.class |
8ac80 | 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 61 6e 74 75 6d 20 66 6f 72 20 74 68 61 74 20 63 6c | .ID,.and.the.quantum.for.that.cl |
8aca0 | 61 73 73 2e 20 54 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 61 64 | ass..The.deficit.counter.will.ad |
8acc0 | 64 20 74 68 61 74 20 76 61 6c 75 65 20 65 61 63 68 20 72 6f 75 6e 64 2e 00 55 73 65 20 74 68 69 | d.that.value.each.round..Use.thi |
8ace0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 | s.command.to.configure.a.Round-R |
8ad00 | 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 | obin.policy,.set.its.name,.set.a |
8ad20 | 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 6e | .class.ID,.and.the.queue.size.in |
8ad40 | 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | .packets..Use.this.command.to.co |
8ad60 | 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 | nfigure.a.Shaper.policy,.set.its |
8ad80 | 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 62 61 6e 64 77 69 64 74 68 20 | .name.and.the.maximum.bandwidth. |
8ada0 | 66 6f 72 20 61 6c 6c 20 63 6f 6d 62 69 6e 65 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 | for.all.combined.traffic..Use.th |
8adc0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 | is.command.to.configure.a.Shaper |
8ade0 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 | .policy,.set.its.name,.define.a. |
8ae00 | 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 | class.and.set.the.guaranteed.tra |
8ae20 | 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 74 6f 20 74 68 61 | ffic.you.want.to.allocate.to.tha |
8ae40 | 74 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | t.class..Use.this.command.to.con |
8ae60 | 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 | figure.a.Shaper.policy,.set.its. |
8ae80 | 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 | name,.define.a.class.and.set.the |
8aea0 | 20 6d 61 78 69 6d 75 6d 20 73 70 65 65 64 20 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 74 68 69 73 | .maximum.speed.possible.for.this |
8aec0 | 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 63 65 69 6c 69 6e 67 20 76 61 6c 75 | .class..The.default.ceiling.valu |
8aee0 | 65 20 69 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 | e.is.the.bandwidth.value..Use.th |
8af00 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 | is.command.to.configure.a.Shaper |
8af20 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 | .policy,.set.its.name,.define.a. |
8af40 | 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 75 | class.and.set.the.priority.for.u |
8af60 | 73 61 67 65 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 6f 6e 63 65 | sage.of.available.bandwidth.once |
8af80 | 20 67 75 61 72 61 6e 74 65 65 73 20 68 61 76 65 20 62 65 65 6e 20 6d 65 74 2e 20 54 68 65 20 6c | .guarantees.have.been.met..The.l |
8afa0 | 6f 77 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 | ower.the.priority.number,.the.hi |
8afc0 | 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 | gher.the.priority..The.default.p |
8afe0 | 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 73 20 30 2c 20 74 68 65 20 68 69 67 68 65 73 74 20 | riority.value.is.0,.the.highest. |
8b000 | 70 72 69 6f 72 69 74 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | priority..Use.this.command.to.co |
8b020 | 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 | nfigure.a.Shaper.policy,.set.its |
8b040 | 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 | .name,.define.a.class.and.set.th |
8b060 | 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 60 74 6f 63 6b 65 6e 20 62 75 63 6b 65 74 60 5f 20 69 | e.size.of.the.`tocken.bucket`_.i |
8b080 | 6e 20 62 79 74 65 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 | n.bytes,.which.will.be.available |
8b0a0 | 20 74 6f 20 62 65 20 73 65 6e 74 20 61 74 20 63 65 69 6c 69 6e 67 20 73 70 65 65 64 20 28 64 65 | .to.be.sent.at.ceiling.speed.(de |
8b0c0 | 66 61 75 6c 74 3a 20 31 35 4b 62 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | fault:.15Kb)..Use.this.command.t |
8b0e0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 61 74 61 2d 72 61 74 65 20 6c 69 6d 69 74 20 74 6f | o.configure.a.data-rate.limit.to |
8b100 | 20 50 50 50 4f 6f 45 20 63 6c 69 65 6e 74 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 64 6f 77 6e | .PPPOoE.clients.for.traffic.down |
8b120 | 6c 6f 61 64 20 6f 72 20 75 70 6c 6f 61 64 2e 20 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 | load.or.upload..The.rate-limit.i |
8b140 | 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | s.set.in.kbit/sec..Use.this.comm |
8b160 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 72 6f 70 2d 74 61 69 6c 20 70 6f 6c | and.to.configure.a.drop-tail.pol |
8b180 | 69 63 79 20 28 50 46 49 46 4f 29 2e 20 43 68 6f 6f 73 65 20 61 20 75 6e 69 71 75 65 20 6e 61 6d | icy.(PFIFO)..Choose.a.unique.nam |
8b1a0 | 65 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f | e.for.this.policy.and.the.size.o |
8b1c0 | 66 20 74 68 65 20 71 75 65 75 65 20 62 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 6e 75 6d 62 65 | f.the.queue.by.setting.the.numbe |
8b1e0 | 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 74 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 28 6d 61 78 | r.of.packets.it.can.contain.(max |
8b200 | 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | imum.4294967295)..Use.this.comma |
8b220 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 70 65 63 69 66 69 63 20 73 65 73 73 69 | nd.to.configure.a.specific.sessi |
8b240 | 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 | on.hold.time.for.LDP.peers..Set. |
8b260 | 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 | the.IP.address.of.the.LDP.peer.a |
8b280 | 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 74 68 61 74 20 73 68 6f 75 | nd.a.session.hold.time.that.shou |
8b2a0 | 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 69 74 2e 20 59 6f 75 20 6d 61 79 | ld.be.configured.for.it..You.may |
8b2c0 | 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 | .have.to.reset.the.neighbor.for. |
8b2e0 | 74 68 69 73 20 74 6f 20 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | this.to.work..Use.this.command.t |
8b300 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 | o.configure.an.Ingress.Policer,. |
8b320 | 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 | defining.its.name.and.the.burst. |
8b340 | 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 20 66 6f 72 20 | size.in.bytes.(default:.15).for. |
8b360 | 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | its.default.policy..Use.this.com |
8b380 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c | mand.to.configure.an.Ingress.Pol |
8b3a0 | 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 | icer,.defining.its.name.and.the. |
8b3c0 | 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 69 74 | maximum.allowed.bandwidth.for.it |
8b3e0 | 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | s.default.policy..Use.this.comma |
8b400 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 | nd.to.configure.an.Ingress.Polic |
8b420 | 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 | er,.defining.its.name,.a.class.i |
8b440 | 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 | dentifier.(1-4090).and.the.burst |
8b460 | 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 20 28 64 | .size.in.bytes.for.this.class.(d |
8b480 | 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | efault:.15)..Use.this.command.to |
8b4a0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 | .configure.an.Ingress.Policer,.d |
8b4c0 | 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 | efining.its.name,.a.class.identi |
8b4e0 | 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c | fier.(1-4090).and.the.maximum.al |
8b500 | 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 2e 00 | lowed.bandwidth.for.this.class.. |
8b520 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e | Use.this.command.to.configure.an |
8b540 | 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e | .Ingress.Policer,.defining.its.n |
8b560 | 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 | ame,.a.class.identifier.(1-4090) |
8b580 | 2c 20 61 20 63 6c 61 73 73 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 6e 61 6d 65 20 61 6e 64 | ,.a.class.matching.rule.name.and |
8b5a0 | 20 69 74 73 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | .its.description..Use.this.comma |
8b5c0 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 | nd.to.configure.an.Ingress.Polic |
8b5e0 | 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 | er,.defining.its.name,.a.class.i |
8b600 | 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 6e 64 20 74 68 65 20 70 72 69 6f | dentifier.(1-4090),.and.the.prio |
8b620 | 72 69 74 79 20 28 30 2d 32 30 2c 20 64 65 66 61 75 6c 74 20 32 30 29 20 69 6e 20 77 68 69 63 68 | rity.(0-20,.default.20).in.which |
8b640 | 20 74 68 65 20 72 75 6c 65 20 69 73 20 65 76 61 6c 75 61 74 65 64 20 28 74 68 65 20 6c 6f 77 65 | .the.rule.is.evaluated.(the.lowe |
8b660 | 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 | r.the.number,.the.higher.the.pri |
8b680 | 6f 72 69 74 79 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | ority)..Use.this.command.to.conf |
8b6a0 | 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 | igure.an.fq-codel.policy,.set.it |
8b6c0 | 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 | s.name.and.the.maximum.number.of |
8b6e0 | 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 31 34 29 20 74 6f 20 62 65 20 64 65 71 | .bytes.(default:.1514).to.be.deq |
8b700 | 75 65 75 65 64 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 61 74 20 6f 6e 63 65 2e 00 55 73 65 20 | ueued.from.a.queue.at.once..Use. |
8b720 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d | this.command.to.configure.an.fq- |
8b740 | 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 | codel.policy,.set.its.name.and.t |
8b760 | 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 62 2d 71 75 65 75 65 73 20 28 64 65 66 61 75 6c 74 | he.number.of.sub-queues.(default |
8b780 | 3a 20 31 30 32 34 29 20 69 6e 74 6f 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 | :.1024).into.which.packets.are.c |
8b7a0 | 6c 61 73 73 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | lassified..Use.this.command.to.c |
8b7c0 | 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 | onfigure.an.fq-codel.policy,.set |
8b7e0 | 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 74 69 6d 65 20 70 65 72 69 6f 64 20 75 73 | .its.name.and.the.time.period.us |
8b800 | 65 64 20 62 79 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 6c 6f 6f 70 20 6f 66 20 43 6f 44 65 6c 20 | ed.by.the.control.loop.of.CoDel. |
8b820 | 74 6f 20 64 65 74 65 63 74 20 77 68 65 6e 20 61 20 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 | to.detect.when.a.persistent.queu |
8b840 | 65 20 69 73 20 64 65 76 65 6c 6f 70 69 6e 67 2c 20 65 6e 73 75 72 69 6e 67 20 74 68 61 74 20 74 | e.is.developing,.ensuring.that.t |
8b860 | 68 65 20 6d 65 61 73 75 72 65 64 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 79 20 64 6f 65 73 20 6e | he.measured.minimum.delay.does.n |
8b880 | 6f 74 20 62 65 63 6f 6d 65 20 74 6f 6f 20 73 74 61 6c 65 20 28 64 65 66 61 75 6c 74 3a 20 31 30 | ot.become.too.stale.(default:.10 |
8b8a0 | 30 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | 0ms)..Use.this.command.to.config |
8b8c0 | 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 | ure.an.fq-codel.policy,.set.its. |
8b8e0 | 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e | name,.and.define.a.hard.limit.on |
8b900 | 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 | .the.real.queue.size..When.this. |
8b920 | 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 | limit.is.reached,.new.packets.ar |
8b940 | 65 20 64 72 6f 70 70 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 30 20 70 61 63 6b 65 74 | e.dropped.(default:.10240.packet |
8b960 | 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | s)..Use.this.command.to.configur |
8b980 | 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 | e.an.fq-codel.policy,.set.its.na |
8b9a0 | 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 74 68 65 20 61 63 63 65 70 74 61 62 6c 65 20 6d 69 | me,.and.define.the.acceptable.mi |
8b9c0 | 6e 69 6d 75 6d 20 73 74 61 6e 64 69 6e 67 2f 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 | nimum.standing/persistent.queue. |
8b9e0 | 64 65 6c 61 79 2e 20 54 68 69 73 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 79 20 69 73 20 69 64 65 | delay..This.minimum.delay.is.ide |
8ba00 | 6e 74 69 66 69 65 64 20 62 79 20 74 72 61 63 6b 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 6d 69 | ntified.by.tracking.the.local.mi |
8ba20 | 6e 69 6d 75 6d 20 71 75 65 75 65 20 64 65 6c 61 79 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 65 | nimum.queue.delay.that.packets.e |
8ba40 | 78 70 65 72 69 65 6e 63 65 20 28 64 65 66 61 75 6c 74 3a 20 35 6d 73 29 2e 00 55 73 65 20 74 68 | xperience.(default:.5ms)..Use.th |
8ba60 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 69 6e 74 65 72 | is.command.to.configure.an.inter |
8ba80 | 66 61 63 65 20 77 69 74 68 20 49 47 4d 50 20 73 6f 20 74 68 61 74 20 50 49 4d 20 63 61 6e 20 72 | face.with.IGMP.so.that.PIM.can.r |
8baa0 | 65 63 65 69 76 65 20 49 47 4d 50 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e | eceive.IGMP.reports.and.query.on |
8bac0 | 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 | .the.selected.interface..By.defa |
8bae0 | 75 6c 74 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 33 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e | ult.IGMP.version.3.will.be.used. |
8bb00 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
8bb20 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 | uthentication.for.LDP.peers..Set |
8bb40 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 | .the.IP.address.of.the.LDP.peer. |
8bb60 | 61 6e 64 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 | and.a.password.that.should.be.sh |
8bb80 | 61 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 | ared.in.order.to.become.neighbor |
8bba0 | 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | s..Use.this.command.to.configure |
8bbc0 | 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 | .in.the.selected.interface.the.I |
8bbe0 | 47 4d 50 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 31 38 30 30 29 | GMP.host.query.interval.(1-1800) |
8bc00 | 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 00 55 | .in.seconds.that.PIM.will.use..U |
8bc20 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 | se.this.command.to.configure.in. |
8bc40 | 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 | the.selected.interface.the.IGMP. |
8bc60 | 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 | query.response.timeout.value.(10 |
8bc80 | 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 | -250).in.deciseconds..If.a.repor |
8bca0 | 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 | t.is.not.returned.in.the.specifi |
8bcc0 | 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 | ed.time,.it.will.be.assumed.the. |
8bce0 | 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 | (S,G).or.(*,G).state.:rfc:`7761# |
8bd00 | 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 | section-4.1`.has.timed.out..Use. |
8bd20 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 | this.command.to.configure.in.the |
8bd40 | 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 | .selected.interface.the.IGMP.que |
8bd60 | 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 | ry.response.timeout.value.(10-25 |
8bd80 | 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 | 0).in.deciseconds..If.a.report.i |
8bda0 | 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | s.not.returned.in.the.specified. |
8bdc0 | 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c | time,.it.will.be.assumed.the.(S, |
8bde0 | 47 29 20 6f 72 20 28 5c 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 | G).or.(\*,G).state.:rfc:`7761#se |
8be00 | 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 | ction-4.1`.has.timed.out..Use.th |
8be20 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 | is.command.to.configure.in.the.s |
8be40 | 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 | elected.interface.the.IGMP.query |
8be60 | 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 | .response.timeout.value.(10-250) |
8be80 | 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 | .in.deciseconds..If.a.report.is. |
8bea0 | 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 | not.returned.in.the.specified.ti |
8bec0 | 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 60 28 53 2c 47 | me,.it.will.be.assumed.the.`(S,G |
8bee0 | 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e | ).or.(*,G).state.<https://tools. |
8bf00 | 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e | ietf.org/html/rfc7761#section-4. |
8bf20 | 31 3e 60 5f 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | 1>`_.has.timed.out..Use.this.com |
8bf40 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 | mand.to.configure.in.the.selecte |
8bf60 | 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 4d 4c 44 20 68 6f 73 74 20 71 75 65 72 79 20 69 | d.interface.the.MLD.host.query.i |
8bf80 | 6e 74 65 72 76 61 6c 20 28 31 2d 36 35 35 33 35 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 | nterval.(1-65535).in.seconds.tha |
8bfa0 | 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | t.PIM.will.use..The.default.valu |
8bfc0 | 65 20 69 73 20 31 32 35 20 73 65 63 6f 6e 64 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | e.is.125.seconds..Use.this.comma |
8bfe0 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 20 73 61 6d 70 6c 69 6e 67 20 72 61 | nd.to.configure.the..sampling.ra |
8c000 | 74 65 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 73 79 73 74 | te.for.flow.accounting..The.syst |
8c020 | 65 6d 20 73 61 6d 70 6c 65 73 20 6f 6e 65 20 69 6e 20 65 76 65 72 79 20 60 3c 72 61 74 65 3e 60 | em.samples.one.in.every.`<rate>` |
8c040 | 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 60 3c 72 61 74 65 3e 60 20 69 73 20 74 68 65 20 | .packets,.where.`<rate>`.is.the. |
8c060 | 76 61 6c 75 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 61 6d 70 6c 69 6e | value.configured.for.the.samplin |
8c080 | 67 2d 72 61 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 | g-rate.option..The.advantage.of. |
8c0a0 | 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 6e 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 | sampling.every.n.packets,.where. |
8c0c0 | 6e 20 3e 20 31 2c 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 63 72 65 61 73 65 20 74 68 | n.>.1,.allows.you.to.decrease.th |
8c0e0 | 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 6f 63 65 73 73 69 6e 67 20 72 65 73 6f 75 72 63 65 73 | e.amount.of.processing.resources |
8c100 | 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 | .required.for.flow.accounting..T |
8c120 | 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 6f 66 20 6e 6f 74 20 73 61 6d 70 6c 69 6e 67 20 | he.disadvantage.of.not.sampling. |
8c140 | 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 73 74 | every.packet.is.that.the.statist |
8c160 | 69 63 73 20 70 72 6f 64 75 63 65 64 20 61 72 65 20 65 73 74 69 6d 61 74 65 73 20 6f 66 20 61 63 | ics.produced.are.estimates.of.ac |
8c180 | 74 75 61 6c 20 64 61 74 61 20 66 6c 6f 77 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | tual.data.flows..Use.this.comman |
8c1a0 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e | d.to.configure.the.IP.address.an |
8c1c0 | 64 20 74 68 65 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 | d.the.shared.secret.key.of.your. |
8c1e0 | 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 20 59 6f 75 20 63 61 6e 20 68 61 76 65 20 6d 75 6c | RADIUS.server...You.can.have.mul |
8c200 | 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 | tiple.RADIUS.servers.configured. |
8c220 | 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 61 63 68 69 65 76 65 20 72 65 64 75 6e 64 61 6e 63 | if.you.wish.to.achieve.redundanc |
8c240 | 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | y..Use.this.command.to.configure |
8c260 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 61 73 20 74 68 65 20 4c 44 50 20 | .the.IP.address.used.as.the.LDP. |
8c280 | 72 6f 75 74 65 72 2d 69 64 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 64 65 76 69 63 65 2e 00 55 | router-id.of.the.local.device..U |
8c2a0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | se.this.command.to.configure.the |
8c2c0 | 20 50 49 4d 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 | .PIM.hello.interval.in.seconds.( |
8c2e0 | 31 2d 31 38 30 29 20 66 6f 72 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 | 1-180).for.the.selected.interfac |
8c300 | 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | e..Use.this.command.to.configure |
8c320 | 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 74 72 61 66 66 69 63 20 69 | .the.burst.size.of.the.traffic.i |
8c340 | 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 | n.a.Network.Emulator.policy..Def |
8c360 | 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c | ine.the.name.of.the.Network.Emul |
8c380 | 61 74 6f 72 20 70 6f 6c 69 63 79 20 61 6e 64 20 69 74 73 20 74 72 61 66 66 69 63 20 62 75 72 73 | ator.policy.and.its.traffic.burs |
8c3a0 | 74 20 73 69 7a 65 20 28 69 74 20 77 69 6c 6c 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 | t.size.(it.will.be.configured.th |
8c3c0 | 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 | rough.the.Token.Bucket.Filter.qd |
8c3e0 | 69 73 63 29 2e 20 44 65 66 61 75 6c 74 3a 31 35 6b 62 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 | isc)..Default:15kb..It.will.only |
8c400 | 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 | .take.effect.if.you.have.configu |
8c420 | 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 | red.its.bandwidth.too..Use.this. |
8c440 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 67 | command.to.configure.the.local.g |
8c460 | 61 74 65 77 61 79 20 49 50 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ateway.IP.address..Use.this.comm |
8c480 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 61 74 | and.to.configure.the.maximum.rat |
8c4a0 | 65 20 61 74 20 77 68 69 63 68 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 73 68 61 70 65 | e.at.which.traffic.will.be.shape |
8c4c0 | 64 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 | d.in.a.Network.Emulator.policy.. |
8c4e0 | 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 79 20 61 6e | Define.the.name.of.the.policy.an |
8c500 | 64 20 74 68 65 20 72 61 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | d.the.rate..Use.this.command.to. |
8c520 | 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 | configure.the.sampling.rate.for. |
8c540 | 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 28 64 65 66 61 75 6c 74 3a 20 31 30 30 30 29 | sFlow.accounting.(default:.1000) |
8c560 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | .Use.this.command.to.configure.t |
8c580 | 68 65 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 6f 66 20 | he.username.and.the.password.of. |
8c5a0 | 61 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 65 72 2e 00 55 73 65 20 74 | a.locally.configured.user..Use.t |
8c5c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6d 61 78 69 6d | his.command.to.control.the.maxim |
8c5e0 | 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 71 75 61 6c 20 63 6f 73 74 20 70 61 74 68 73 20 74 6f | um.number.of.equal.cost.paths.to |
8c600 | 20 72 65 61 63 68 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 | .reach.a.specific.destination..T |
8c620 | 68 65 20 75 70 70 65 72 20 6c 69 6d 69 74 20 6d 61 79 20 64 69 66 66 65 72 20 69 66 20 79 6f 75 | he.upper.limit.may.differ.if.you |
8c640 | 20 63 68 61 6e 67 65 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 4d 55 4c 54 49 50 41 54 48 5f 4e | .change.the.value.of.MULTIPATH_N |
8c660 | 55 4d 20 64 75 72 69 6e 67 20 63 6f 6d 70 69 6c 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 | UM.during.compilation..The.defau |
8c680 | 6c 74 20 69 73 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 28 36 34 29 2e 00 55 73 65 20 74 68 | lt.is.MULTIPATH_NUM.(64)..Use.th |
8c6a0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 46 61 69 72 2d 51 75 65 75 | is.command.to.create.a.Fair-Queu |
8c6c0 | 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 67 69 76 65 20 69 74 20 61 20 6e 61 6d 65 2e 20 49 74 20 | e.policy.and.give.it.a.name..It. |
8c6e0 | 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e | is.based.on.the.Stochastic.Fairn |
8c700 | 65 73 73 20 51 75 65 75 65 69 6e 67 20 61 6e 64 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 | ess.Queueing.and.can.be.applied. |
8c720 | 74 6f 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f | to.outbound.traffic..Use.this.co |
8c740 | 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 49 50 73 65 63 20 69 6e 74 65 72 66 61 63 65 2e | mmand.to.define.IPsec.interface. |
8c760 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 | .Use.this.command.to.define.a.Fa |
8c780 | 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 | ir-Queue.policy,.based.on.the.St |
8c7a0 | 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 | ochastic.Fairness.Queueing,.and. |
8c7c0 | 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 | set.the.number.of.maximum.packet |
8c7e0 | 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 61 69 74 20 69 6e 20 74 68 65 20 71 75 65 75 65 2e 20 | s.allowed.to.wait.in.the.queue.. |
8c800 | 41 6e 79 20 6f 74 68 65 72 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 | Any.other.packet.will.be.dropped |
8c820 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 | ..Use.this.command.to.define.a.F |
8c840 | 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 | air-Queue.policy,.based.on.the.S |
8c860 | 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 | tochastic.Fairness.Queueing,.and |
8c880 | 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 74 20 77 68 | .set.the.number.of.seconds.at.wh |
8c8a0 | 69 63 68 20 61 20 6e 65 77 20 71 75 65 75 65 20 61 6c 67 6f 72 69 74 68 6d 20 70 65 72 74 75 72 | ich.a.new.queue.algorithm.pertur |
8c8c0 | 62 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 20 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 | bation.will.occur.(maximum.42949 |
8c8e0 | 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 | 67295)..Use.this.command.to.defi |
8c900 | 6e 65 20 64 65 66 61 75 6c 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d | ne.default.IPv6.address.pool.nam |
8c920 | 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 | e..Use.this.command.to.define.de |
8c940 | 66 61 75 6c 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 | fault.address.pool.name..Use.thi |
8c960 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 6f 6d 61 69 6e 73 2c 20 6f 6e 65 | s.command.to.define.domains,.one |
8c980 | 20 61 74 20 61 20 74 69 6d 65 2c 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 79 73 74 65 6d 20 75 | .at.a.time,.so.that.the.system.u |
8c9a0 | 73 65 73 20 74 68 65 6d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 | ses.them.to.complete.unqualified |
8c9c0 | 20 68 6f 73 74 20 6e 61 6d 65 73 2e 20 4d 61 78 69 6d 75 6d 3a 20 36 20 65 6e 74 72 69 65 73 2e | .host.names..Maximum:.6.entries. |
8c9e0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 | .Use.this.command.to.define.in.t |
8ca00 | 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 65 72 20 79 6f | he.selected.interface.whether.yo |
8ca20 | 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e 00 55 73 | u.choose.IGMP.version.2.or.3..Us |
8ca40 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 | e.this.command.to.define.in.the. |
8ca60 | 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 | selected.interface.whether.you.c |
8ca80 | 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e 20 54 68 65 20 64 | hoose.IGMP.version.2.or.3..The.d |
8caa0 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | efault.value.is.3..Use.this.comm |
8cac0 | 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e | and.to.define.the.IP.address.ran |
8cae0 | 67 65 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e | ge.to.be.given.to.PPPoE.clients. |
8cb00 | 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 | .If.notation.``x.x.x.x-x.x.x.x`` |
8cb20 | 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 | ,.it.must.be.within.a./24.subnet |
8cb40 | 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 | ..If.notation.``x.x.x.x/x``.is.u |
8cb60 | 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 | sed.there.is.possibility.to.set. |
8cb80 | 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | host/netmask..Use.this.command.t |
8cba0 | 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 | o.define.the.first.IP.address.of |
8cbc0 | 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e | .a.pool.of.addresses.to.be.given |
8cbe0 | 20 74 6f 20 49 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 | .to.IPoE.clients..If.notation.`` |
8cc00 | 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 | x.x.x.x-x.x.x.x``,.it.must.be.wi |
8cc20 | 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 | thin.a./24.subnet..If.notation.` |
8cc40 | 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f | `x.x.x.x/x``.is.used.there.is.po |
8cc60 | 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 | ssibility.to.set.host/netmask..U |
8cc80 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 | se.this.command.to.define.the.fi |
8cca0 | 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 | rst.IP.address.of.a.pool.of.addr |
8ccc0 | 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e | esses.to.be.given.to.PPPoE.clien |
8cce0 | 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e | ts..It.must.be.within.a./24.subn |
8cd00 | 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 | et..Use.this.command.to.define.t |
8cd20 | 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 | he.first.IP.address.of.a.pool.of |
8cd40 | 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 54 50 20 63 | .addresses.to.be.given.to.PPTP.c |
8cd60 | 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e | lients..If.notation.``x.x.x.x-x. |
8cd80 | 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 | x.x.x``,.it.must.be.within.a./24 |
8cda0 | 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 | .subnet..If.notation.``x.x.x.x/x |
8cdc0 | 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 | ``.is.used.there.is.possibility. |
8cde0 | 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f | to.set.host/netmask..Use.this.co |
8ce00 | 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 | mmand.to.define.the.first.IP.add |
8ce20 | 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 | ress.of.a.pool.of.addresses.to.b |
8ce40 | 65 20 67 69 76 65 6e 20 74 6f 20 53 53 54 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 | e.given.to.SSTP.clients..If.nota |
8ce60 | 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 | tion.``x.x.x.x-x.x.x.x``,.it.mus |
8ce80 | 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 | t.be.within.a./24.subnet..If.not |
8cea0 | 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 | ation.``x.x.x.x/x``.is.used.ther |
8cec0 | 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 | e.is.possibility.to.set.host/net |
8cee0 | 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 | mask..Use.this.command.to.define |
8cf00 | 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 | .the.first.IP.address.of.a.pool. |
8cf20 | 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 6c 32 74 70 | of.addresses.to.be.given.to.l2tp |
8cf40 | 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d | .clients..If.notation.``x.x.x.x- |
8cf60 | 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f | x.x.x.x``,.it.must.be.within.a./ |
8cf80 | 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 | 24.subnet..If.notation.``x.x.x.x |
8cfa0 | 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 | /x``.is.used.there.is.possibilit |
8cfc0 | 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 | y.to.set.host/netmask..Use.this. |
8cfe0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 | command.to.define.the.first.IP.a |
8d000 | 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f | ddress.of.a.pool.of.addresses.to |
8d020 | 20 62 65 20 67 69 76 65 6e 20 74 6f 20 70 70 70 6f 65 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e | .be.given.to.pppoe.clients..If.n |
8d040 | 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 | otation.``x.x.x.x-x.x.x.x``,.it. |
8d060 | 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 | must.be.within.a./24.subnet..If. |
8d080 | 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 | notation.``x.x.x.x/x``.is.used.t |
8d0a0 | 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f | here.is.possibility.to.set.host/ |
8d0c0 | 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | netmask..Use.this.command.to.def |
8d0e0 | 69 6e 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 | ine.the.interface.the.PPPoE.serv |
8d100 | 65 72 20 77 69 6c 6c 20 75 73 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 50 50 50 6f 45 20 | er.will.use.to.listen.for.PPPoE. |
8d120 | 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | clients..Use.this.command.to.def |
8d140 | 69 6e 65 20 74 68 65 20 6c 61 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f | ine.the.last.IP.address.of.a.poo |
8d160 | 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 | l.of.addresses.to.be.given.to.PP |
8d180 | 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 | PoE.clients..It.must.be.within.a |
8d1a0 | 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ./24.subnet..Use.this.command.to |
8d1c0 | 20 64 65 66 69 6e 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 | .define.the.length.of.the.queue. |
8d1e0 | 6f 66 20 79 6f 75 72 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e | of.your.Network.Emulator.policy. |
8d200 | 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 | .Set.the.policy.name.and.the.max |
8d220 | 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 28 31 2d 34 32 39 34 39 36 | imum.number.of.packets.(1-429496 |
8d240 | 37 32 39 35 29 20 74 68 65 20 71 75 65 75 65 20 6d 61 79 20 68 6f 6c 64 20 71 75 65 75 65 64 20 | 7295).the.queue.may.hold.queued. |
8d260 | 61 74 20 61 20 74 69 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 | at.a.time..Use.this.command.to.d |
8d280 | 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 | efine.the.maximum.number.of.entr |
8d2a0 | 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 41 52 50 20 63 61 63 68 65 20 28 31 30 | ies.to.keep.in.the.ARP.cache.(10 |
8d2c0 | 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 | 24,.2048,.4096,.8192,.16384,.327 |
8d2e0 | 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 | 68)..Use.this.command.to.define. |
8d300 | 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f | the.maximum.number.of.entries.to |
8d320 | 20 6b 65 65 70 20 69 6e 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 63 61 63 68 65 20 28 31 30 32 | .keep.in.the.Neighbor.cache.(102 |
8d340 | 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 | 4,.2048,.4096,.8192,.16384,.3276 |
8d360 | 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 | 8)..Use.this.command.to.define.t |
8d380 | 68 65 20 6e 65 78 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 | he.next.address.pool.name..Use.t |
8d3a0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 77 68 65 74 68 65 72 20 79 6f | his.command.to.define.whether.yo |
8d3c0 | 75 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 6c 6f 63 61 6c 6c 79 20 61 75 | ur.PPPoE.clients.will.locally.au |
8d3e0 | 74 68 65 6e 74 69 63 61 74 65 20 69 6e 20 79 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 6d 20 6f | thenticate.in.your.VyOS.system.o |
8d400 | 72 20 69 6e 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | r.in.RADIUS.server..Use.this.com |
8d420 | 6d 61 6e 64 20 74 6f 20 64 69 72 65 63 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6e | mand.to.direct.an.interface.to.n |
8d440 | 6f 74 20 64 65 74 65 63 74 20 61 6e 79 20 70 68 79 73 69 63 61 6c 20 73 74 61 74 65 20 63 68 61 | ot.detect.any.physical.state.cha |
8d460 | 6e 67 65 73 20 6f 6e 20 61 20 6c 69 6e 6b 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 | nges.on.a.link,.for.example,.whe |
8d480 | 6e 20 74 68 65 20 63 61 62 6c 65 20 69 73 20 75 6e 70 6c 75 67 67 65 64 2e 00 55 73 65 20 74 68 | n.the.cable.is.unplugged..Use.th |
8d4a0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 64 69 72 65 63 | is.command.to.disable.IPv4.direc |
8d4c0 | 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 | ted.broadcast.forwarding.on.all. |
8d4e0 | 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | interfaces..Use.this.command.to. |
8d500 | 64 69 73 61 62 6c 65 20 49 50 76 34 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 | disable.IPv4.forwarding.on.all.i |
8d520 | 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 | nterfaces..Use.this.command.to.d |
8d540 | 69 73 61 62 6c 65 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e | isable.IPv6.forwarding.on.all.in |
8d560 | 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 | terfaces..Use.this.command.to.di |
8d580 | 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 | sable.IPv6.operation.on.interfac |
8d5a0 | 65 20 77 68 65 6e 20 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 | e.when.Duplicate.Address.Detecti |
8d5c0 | 6f 6e 20 66 61 69 6c 73 20 6f 6e 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 73 2e 00 | on.fails.on.Link-Local.address.. |
8d5e0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 | Use.this.command.to.disable.the. |
8d600 | 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 | generation.of.Ethernet.flow.cont |
8d620 | 72 6f 6c 20 28 70 61 75 73 65 20 66 72 61 6d 65 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | rol.(pause.frames)..Use.this.com |
8d640 | 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 6e 6f 69 73 65 20 69 6e 20 61 20 4e 65 74 77 6f | mand.to.emulate.noise.in.a.Netwo |
8d660 | 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 | rk.Emulator.policy..Set.the.poli |
8d680 | 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 63 6f | cy.name.and.the.percentage.of.co |
8d6a0 | 72 72 75 70 74 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 20 77 61 6e 74 2e 20 41 20 72 61 6e 64 | rrupted.packets.you.want..A.rand |
8d6c0 | 6f 6d 20 65 72 72 6f 72 20 77 69 6c 6c 20 62 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 61 | om.error.will.be.introduced.in.a |
8d6e0 | 20 72 61 6e 64 6f 6d 20 70 6f 73 69 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 68 6f 73 65 6e 20 | .random.position.for.the.chosen. |
8d700 | 70 65 72 63 65 6e 74 20 6f 66 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | percent.of.packets..Use.this.com |
8d720 | 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 6c 6f 73 73 20 63 6f 6e 64 | mand.to.emulate.packet-loss.cond |
8d740 | 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c | itions.in.a.Network.Emulator.pol |
8d760 | 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 | icy..Set.the.policy.name.and.the |
8d780 | 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 6c 6f 73 73 20 70 61 63 6b 65 74 73 20 79 6f 75 72 | .percentage.of.loss.packets.your |
8d7a0 | 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 | .traffic.will.suffer..Use.this.c |
8d7c0 | 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 72 65 6f 72 64 65 72 | ommand.to.emulate.packet-reorder |
8d7e0 | 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c | ing.conditions.in.a.Network.Emul |
8d800 | 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 | ator.policy..Set.the.policy.name |
8d820 | 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 72 65 6f 72 64 65 72 65 64 | .and.the.percentage.of.reordered |
8d840 | 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 | .packets.your.traffic.will.suffe |
8d860 | 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 4c 44 | r..Use.this.command.to.enable.LD |
8d880 | 50 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 | P.on.the.interface.you.define..U |
8d8a0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 4d 50 4c 53 20 70 | se.this.command.to.enable.MPLS.p |
8d8c0 | 72 6f 63 65 73 73 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 | rocessing.on.the.interface.you.d |
8d8e0 | 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c | efine..Use.this.command.to.enabl |
8d900 | 65 20 50 49 4d 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 | e.PIM.in.the.selected.interface. |
8d920 | 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 | so.that.it.can.communicate.with. |
8d940 | 50 49 4d 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | PIM.neighbors..Use.this.command. |
8d960 | 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 76 36 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 | to.enable.PIMv6.in.the.selected. |
8d980 | 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 | interface.so.that.it.can.communi |
8d9a0 | 63 61 74 65 20 77 69 74 68 20 50 49 4d 76 36 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 | cate.with.PIMv6.neighbors..This. |
8d9c0 | 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 65 6e 61 62 6c 65 73 20 4d 4c 44 20 72 65 70 6f 72 74 73 | command.also.enables.MLD.reports |
8d9e0 | 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 6e 6c 65 | .and.query.on.the.interface.unle |
8da00 | 73 73 20 3a 63 66 67 63 6d 64 3a 60 6d 6c 64 20 64 69 73 61 62 6c 65 60 20 69 73 20 63 6f 6e 66 | ss.:cfgcmd:`mld.disable`.is.conf |
8da20 | 69 67 75 72 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 | igured..Use.this.command.to.enab |
8da40 | 6c 65 20 61 63 71 75 69 73 69 74 69 6f 6e 20 6f 66 20 49 50 76 36 20 61 64 64 72 65 73 73 20 75 | le.acquisition.of.IPv6.address.u |
8da60 | 73 69 6e 67 20 73 74 61 74 65 6c 65 73 73 20 61 75 74 6f 63 6f 6e 66 69 67 20 28 53 4c 41 41 43 | sing.stateless.autoconfig.(SLAAC |
8da80 | 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 62 61 | )..Use.this.command.to.enable.ba |
8daa0 | 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2e 00 55 73 65 20 | ndwidth.shaping.via.RADIUS..Use. |
8dac0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 70 72 6f 78 79 20 41 64 64 | this.command.to.enable.proxy.Add |
8dae0 | 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 41 52 50 29 20 6f | ress.Resolution.Protocol.(ARP).o |
8db00 | 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 50 72 6f 78 79 20 41 52 50 20 61 6c 6c 6f | n.this.interface..Proxy.ARP.allo |
8db20 | 77 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 65 73 70 | ws.an.Ethernet.interface.to.resp |
8db40 | 6f 6e 64 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 | ond.with.its.own.:abbr:`MAC.(Med |
8db60 | 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 73 73 20 74 6f 20 41 | ia.Access.Control)`.address.to.A |
8db80 | 52 50 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 | RP.requests.for.destination.IP.a |
8dba0 | 64 64 72 65 73 73 65 73 20 6f 6e 20 73 75 62 6e 65 74 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 | ddresses.on.subnets.attached.to. |
8dbc0 | 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 | other.interfaces.on.the.system.. |
8dbe0 | 53 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 74 6f 20 74 68 6f 73 65 | Subsequent.packets.sent.to.those |
8dc00 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 66 6f | .destination.IP.addresses.are.fo |
8dc20 | 72 77 61 72 64 65 64 20 61 70 70 72 6f 70 72 69 61 74 65 6c 79 20 62 79 20 74 68 65 20 73 79 73 | rwarded.appropriately.by.the.sys |
8dc40 | 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 | tem..Use.this.command.to.enable. |
8dc60 | 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 74 68 65 20 6c 6f 63 | targeted.LDP.sessions.to.the.loc |
8dc80 | 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 74 68 65 6e 20 | al.router..The.router.will.then. |
8dca0 | 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 79 20 73 65 73 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 | respond.to.any.sessions.that.are |
8dcc0 | 20 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 69 74 20 74 68 61 74 20 61 72 | .trying.to.connect.to.it.that.ar |
8dce0 | 65 20 6e 6f 74 20 61 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 74 79 70 65 20 6f 66 20 54 43 50 20 63 | e.not.a.link.local.type.of.TCP.c |
8dd00 | 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 | onnection..Use.this.command.to.e |
8dd20 | 6e 61 62 6c 65 20 74 68 65 20 64 65 6c 61 79 20 6f 66 20 50 41 44 4f 20 28 50 50 50 6f 45 20 41 | nable.the.delay.of.PADO.(PPPoE.A |
8dd40 | 63 74 69 76 65 20 44 69 73 63 6f 76 65 72 79 20 4f 66 66 65 72 29 20 70 61 63 6b 65 74 73 2c 20 | ctive.Discovery.Offer).packets,. |
8dd60 | 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 20 73 65 73 73 69 6f 6e 20 62 | which.can.be.used.as.a.session.b |
8dd80 | 61 6c 61 6e 63 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 77 69 74 68 20 6f 74 68 65 72 20 50 50 | alancing.mechanism.with.other.PP |
8dda0 | 50 6f 45 20 73 65 72 76 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | PoE.servers..Use.this.command.to |
8ddc0 | 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 74 72 79 20 | .enable.the.local.router.to.try. |
8dde0 | 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 61 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 | and.connect.with.a.targeted.LDP. |
8de00 | 73 65 73 73 69 6f 6e 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 55 73 65 20 74 | session.to.another.router..Use.t |
8de20 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e | his.command.to.enable.the.loggin |
8de40 | 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 63 75 73 74 6f | g.of.the.default.action.on.custo |
8de60 | 6d 20 63 68 61 69 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e | m.chains..Use.this.command.to.en |
8de80 | 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 | able.the.logging.of.the.default. |
8dea0 | 61 63 74 69 6f 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 63 68 61 69 6e 2e 00 55 | action.on.the.specified.chain..U |
8dec0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f | se.this.command.to.enable.the.lo |
8dee0 | 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 55 73 65 | gging.of.the.default.action..Use |
8df00 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 2c 20 64 69 73 61 62 6c 65 | .this.command.to.enable,.disable |
8df20 | 2c 20 6f 72 20 73 70 65 63 69 66 79 20 68 6f 70 20 63 6f 75 6e 74 20 66 6f 72 20 54 54 4c 20 73 | ,.or.specify.hop.count.for.TTL.s |
8df40 | 65 63 75 72 69 74 79 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 42 79 20 64 65 66 61 75 6c | ecurity.for.LDP.peers..By.defaul |
8df60 | 74 20 74 68 65 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 32 35 35 20 28 6f 72 20 6d 61 | t.the.value.is.set.to.255.(or.ma |
8df80 | 78 20 54 54 4c 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 66 6c 75 73 | x.TTL)..Use.this.command.to.flus |
8dfa0 | 68 20 74 68 65 20 6b 65 72 6e 65 6c 20 49 50 76 36 20 72 6f 75 74 65 20 63 61 63 68 65 2e 20 41 | h.the.kernel.IPv6.route.cache..A |
8dfc0 | 6e 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 74 6f 20 66 6c 75 73 68 20 | n.address.can.be.added.to.flush. |
8dfe0 | 69 74 20 6f 6e 6c 79 20 66 6f 72 20 74 68 61 74 20 72 6f 75 74 65 2e 00 55 73 65 20 74 68 69 73 | it.only.for.that.route..Use.this |
8e000 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 | .command.to.get.an.overview.of.a |
8e020 | 20 7a 6f 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 | .zone..Use.this.command.to.get.i |
8e040 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4f 53 50 46 76 33 2e 00 55 73 65 20 74 68 69 | nformation.about.OSPFv3..Use.thi |
8e060 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f | s.command.to.get.information.abo |
8e080 | 75 74 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 | ut.the.RIPNG.protocol.Use.this.c |
8e0a0 | 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 72 75 63 74 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f | ommand.to.instruct.the.system.to |
8e0c0 | 20 65 73 74 61 62 6c 69 73 68 20 61 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 75 | .establish.a.PPPoE.connection.au |
8e0e0 | 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 | tomatically.once.traffic.passes. |
8e100 | 74 68 72 6f 75 67 68 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 64 69 73 61 62 6c 65 | through.the.interface..A.disable |
8e120 | 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c | d.on-demand.connection.is.establ |
8e140 | 69 73 68 65 64 20 61 74 20 62 6f 6f 74 20 74 69 6d 65 20 61 6e 64 20 72 65 6d 61 69 6e 73 20 75 | ished.at.boot.time.and.remains.u |
8e160 | 70 2e 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 | p..If.the.link.fails.for.any.rea |
8e180 | 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 | son,.the.link.is.brought.back.up |
8e1a0 | 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .immediately..Use.this.command.t |
8e1c0 | 6f 20 6c 69 6e 6b 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 | o.link.the.PPPoE.connection.to.a |
8e1e0 | 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 50 50 50 6f 45 20 | .physical.interface..Each.PPPoE. |
8e200 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f | connection.must.be.established.o |
8e220 | 76 65 72 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 6e 74 65 72 66 | ver.a.physical.interface..Interf |
8e240 | 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 67 75 6c 61 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 | aces.can.be.regular.Ethernet.int |
8e260 | 65 72 66 61 63 65 73 2c 20 56 49 46 73 20 6f 72 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 | erfaces,.VIFs.or.bonding.interfa |
8e280 | 63 65 73 2f 56 49 46 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f | ces/VIFs..Use.this.command.to.lo |
8e2a0 | 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 | cally.check.the.active.sessions. |
8e2c0 | 69 6e 20 74 68 65 20 49 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | in.the.IPoE.server..Use.this.com |
8e2e0 | 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 | mand.to.locally.check.the.active |
8e300 | 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 2e 00 55 | .sessions.in.the.PPPoE.server..U |
8e320 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b | se.this.command.to.locally.check |
8e340 | 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 54 50 | .the.active.sessions.in.the.PPTP |
8e360 | 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 | .server..Use.this.command.to.loc |
8e380 | 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 | ally.check.the.active.sessions.i |
8e3a0 | 6e 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | n.the.SSTP.server..Use.this.comm |
8e3c0 | 61 6e 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 65 6e 64 | and.to.manually.configure.a.Rend |
8e3e0 | 65 7a 76 6f 75 73 20 50 6f 69 6e 74 20 66 6f 72 20 50 49 4d 20 73 6f 20 74 68 61 74 20 6a 6f 69 | ezvous.Point.for.PIM.so.that.joi |
8e400 | 6e 20 6d 65 73 73 61 67 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 74 68 65 72 65 2e 20 53 65 | n.messages.can.be.sent.there..Se |
8e420 | 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 61 64 64 72 65 73 73 20 61 6e | t.the.Rendevouz.Point.address.an |
8e440 | 64 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 | d.the.matching.prefix.of.group.r |
8e460 | 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 20 54 68 65 73 65 20 76 61 6c 75 65 73 20 6d 75 73 74 | anges.covered..These.values.must |
8e480 | 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 70 61 72 | .be.shared.with.every.router.par |
8e4a0 | 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 6b 2e 00 55 | ticipating.in.the.PIM.network..U |
8e4c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 | se.this.command.to.not.install.a |
8e4e0 | 64 76 65 72 74 69 73 65 64 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 69 6e 74 6f 20 74 | dvertised.DNS.nameservers.into.t |
8e500 | 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | he.local.system..Use.this.comman |
8e520 | 64 20 74 6f 20 70 72 65 66 65 72 20 49 50 76 34 20 66 6f 72 20 54 43 50 20 70 65 65 72 20 74 72 | d.to.prefer.IPv4.for.TCP.peer.tr |
8e540 | 61 6e 73 70 6f 72 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 77 68 65 6e 20 | ansport.connection.for.LDP.when. |
8e560 | 62 6f 74 68 20 61 6e 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 4c 44 50 20 61 64 64 72 65 73 | both.an.IPv4.and.IPv6.LDP.addres |
8e580 | 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 | s.are.configured.on.the.same.int |
8e5a0 | 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 | erface..Use.this.command.to.rese |
8e5c0 | 74 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 | t.IPv6.Neighbor.Discovery.Protoc |
8e5e0 | 6f 6c 20 63 61 63 68 65 20 66 6f 72 20 61 6e 20 61 64 64 72 65 73 73 20 6f 72 20 69 6e 74 65 72 | ol.cache.for.an.address.or.inter |
8e600 | 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 | face..Use.this.command.to.reset. |
8e620 | 61 6e 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 2f 54 43 50 20 73 65 73 73 69 6f 6e 20 74 68 61 74 | an.LDP.neighbor/TCP.session.that |
8e640 | 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .is.established.Use.this.command |
8e660 | 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 70 72 6f 63 65 73 73 20 6f 6e | .to.reset.the.OpenVPN.process.on |
8e680 | 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 | .a.specific.interface..Use.this. |
8e6a0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 4f | command.to.reset.the.specified.O |
8e6c0 | 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | penVPN.client..Use.this.command. |
8e6e0 | 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 6f 6e | to.restrict.the.PPPoE.session.on |
8e700 | 20 61 20 67 69 76 65 6e 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 20 4e 6f | .a.given.access.concentrator..No |
8e720 | 72 6d 61 6c 6c 79 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 50 50 50 6f 45 20 69 6e 69 | rmally,.a.host.sends.a.PPPoE.ini |
8e740 | 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 50 50 50 6f | tiation.packet.to.start.the.PPPo |
8e760 | 45 20 64 69 73 63 6f 76 65 72 79 20 70 72 6f 63 65 73 73 2c 20 61 20 6e 75 6d 62 65 72 20 6f 66 | E.discovery.process,.a.number.of |
8e780 | 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 72 65 73 70 6f 6e 64 20 77 69 | .access.concentrators.respond.wi |
8e7a0 | 74 68 20 6f 66 66 65 72 20 70 61 63 6b 65 74 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 73 65 | th.offer.packets.and.the.host.se |
8e7c0 | 6c 65 63 74 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 63 63 65 | lects.one.of.the.responding.acce |
8e7e0 | 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 73 65 72 76 65 20 74 68 69 73 20 73 | ss.concentrators.to.serve.this.s |
8e800 | 65 73 73 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 | ession..Use.this.command.to.see. |
8e820 | 4c 44 50 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 | LDP.interface.information.Use.th |
8e840 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 | is.command.to.see.LDP.neighbor.i |
8e860 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | nformation.Use.this.command.to.s |
8e880 | 65 65 20 64 65 74 61 69 6c 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 | ee.detailed.LDP.neighbor.informa |
8e8a0 | 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 64 69 73 | tion.Use.this.command.to.see.dis |
8e8c0 | 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 | covery.hello.information.Use.thi |
8e8e0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 74 68 65 20 4c 61 62 65 6c 20 49 6e 66 6f 72 | s.command.to.see.the.Label.Infor |
8e900 | 6d 61 74 69 6f 6e 20 42 61 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | mation.Base..Use.this.command.to |
8e920 | 20 73 65 74 20 61 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 50 50 50 6f 45 2d 73 65 72 76 65 | .set.a.name.for.this.PPPoE-serve |
8e940 | 72 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 00 55 73 65 20 74 68 69 73 20 | r.access.concentrator..Use.this. |
8e960 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 72 65 2d 64 69 61 6c 20 64 65 6c 61 79 20 74 69 6d | command.to.set.re-dial.delay.tim |
8e980 | 65 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 70 65 72 73 69 73 74 20 50 50 50 6f 45 20 | e.to.be.used.with.persist.PPPoE. |
8e9a0 | 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e | sessions..When.the.PPPoE.session |
8e9c0 | 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 62 79 20 70 65 65 72 2c 20 61 6e 64 20 6f 6e 2d 64 | .is.terminated.by.peer,.and.on-d |
8e9e0 | 65 6d 61 6e 64 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 72 6f 75 | emand.option.is.not.set,.the.rou |
8ea00 | 74 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 65 73 74 61 62 6c 69 73 68 | ter.will.attempt.to.re-establish |
8ea20 | 20 74 68 65 20 50 50 50 6f 45 20 6c 69 6e 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | .the.PPPoE.link..Use.this.comman |
8ea40 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c | d.to.set.the.IP.address.of.the.l |
8ea60 | 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e | ocal.endpoint.of.a.PPPoE.session |
8ea80 | 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 | ..If.it.is.not.set.it.will.be.ne |
8eaa0 | 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 | gotiated..Use.this.command.to.se |
8eac0 | 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 65 | t.the.IP.address.of.the.remote.e |
8eae0 | 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 | ndpoint.of.a.PPPoE.session..If.i |
8eb00 | 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 | t.is.not.set.it.will.be.negotiat |
8eb20 | 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 | ed..Use.this.command.to.set.the. |
8eb40 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 65 76 65 72 79 20 44 6f | IPv4.or.IPv6.address.of.every.Do |
8eb60 | 6d 61 6e 20 4e 61 6d 65 20 53 65 72 76 65 72 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 | man.Name.Server.you.want.to.conf |
8eb80 | 69 67 75 72 65 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 70 72 6f 70 61 67 61 74 65 64 20 74 | igure..They.will.be.propagated.t |
8eba0 | 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | o.PPPoE.clients..Use.this.comman |
8ebc0 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 74 72 61 6e 73 70 | d.to.set.the.IPv4.or.IPv6.transp |
8ebe0 | 6f 72 74 2d 61 64 64 72 65 73 73 20 75 73 65 64 20 62 79 20 4c 44 50 2e 00 55 73 65 20 74 68 69 | ort-address.used.by.LDP..Use.thi |
8ec00 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 | s.command.to.set.the.idle.timeou |
8ec20 | 74 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6f 6e 2d 64 65 | t.interval.to.be.used.with.on-de |
8ec40 | 6d 61 6e 64 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 61 6e 20 6f 6e 2d | mand.PPPoE.sessions..When.an.on- |
8ec60 | 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 | demand.connection.is.established |
8ec80 | 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 75 70 20 6f 6e 6c 79 20 77 68 | ,.the.link.is.brought.up.only.wh |
8eca0 | 65 6e 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 61 6e 64 20 69 73 20 64 69 73 61 62 6c | en.traffic.is.sent.and.is.disabl |
8ecc0 | 65 64 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 69 64 6c 65 20 66 6f 72 20 74 68 65 | ed.when.the.link.is.idle.for.the |
8ece0 | 20 69 6e 74 65 72 76 61 6c 20 73 70 65 63 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f | .interval.specified..Use.this.co |
8ed00 | 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 61 75 | mmand.to.set.the.password.for.au |
8ed20 | 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 | thenticating.with.a.remote.PPPoE |
8ed40 | 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 | .endpoint..Authentication.is.opt |
8ed60 | 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 | ional.from.the.system's.point.of |
8ed80 | 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 | .view.but.most.service.providers |
8eda0 | 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .require.it..Use.this.command.to |
8edc0 | 20 73 65 74 20 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 41 63 74 69 6f 6e 20 71 | .set.the.target.to.use..Action.q |
8ede0 | 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 | ueue.must.be.defined.to.use.this |
8ee00 | 20 73 65 74 74 69 6e 67 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 | .setting.Use.this.command.to.set |
8ee20 | 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 | .the.username.for.authenticating |
8ee40 | 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 | .with.a.remote.PPPoE.endpoint..A |
8ee60 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 | uthentication.is.optional.from.t |
8ee80 | 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f | he.system's.point.of.view.but.mo |
8eea0 | 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e | st.service.providers.require.it. |
8eec0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 42 | .Use.this.command.to.show.IPv6.B |
8eee0 | 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 | order.Gateway.Protocol.informati |
8ef00 | 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 | on..Use.this.command.to.show.IPv |
8ef20 | 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e | 6.Neighbor.Discovery.Protocol.in |
8ef40 | 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | formation..Use.this.command.to.s |
8ef60 | 68 6f 77 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 75 73 2e 00 55 73 65 20 | how.IPv6.forwarding.status..Use. |
8ef80 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 6d 75 6c 74 69 63 | this.command.to.show.IPv6.multic |
8efa0 | 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 2e 00 55 73 65 20 74 68 69 73 20 63 | ast.group.membership..Use.this.c |
8efc0 | 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 72 6f 75 74 65 73 2e 00 55 73 65 20 | ommand.to.show.IPv6.routes..Use. |
8efe0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 61 63 | this.command.to.show.all.IPv6.ac |
8f000 | 63 65 73 73 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | cess.lists.Use.this.command.to.s |
8f020 | 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 70 72 65 66 69 78 20 6c 69 73 74 73 00 55 73 65 20 74 68 | how.all.IPv6.prefix.lists.Use.th |
8f040 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 | is.command.to.show.the.status.of |
8f060 | 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d | .the.RIPNG.protocol.Use.this.com |
8f080 | 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 66 6f 72 | mand.to.specify.a.DNS.server.for |
8f0a0 | 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 4e 53 20 6c | .the.system.to.be.used.for.DNS.l |
8f0c0 | 6f 6f 6b 75 70 73 2e 20 4d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 44 4e 53 20 73 65 72 76 65 72 | ookups..More.than.one.DNS.server |
8f0e0 | 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 6e 65 20 61 | .can.be.added,.configuring.one.a |
8f100 | 74 20 61 20 74 69 6d 65 2e 20 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 | t.a.time..Both.IPv4.and.IPv6.add |
8f120 | 72 65 73 73 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 | resses.are.supported..Use.this.c |
8f140 | 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 | ommand.to.specify.a.domain.name. |
8f160 | 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 77 | to.be.appended.to.domain-names.w |
8f180 | 69 74 68 69 6e 20 55 52 4c 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 61 | ithin.URLs.that.do.not.include.a |
8f1a0 | 20 64 6f 74 20 60 60 2e 60 60 20 74 68 65 20 64 6f 6d 61 69 6e 20 69 73 20 61 70 70 65 6e 64 65 | .dot.``.``.the.domain.is.appende |
8f1c0 | 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 | d..Use.this.command.to.specify.a |
8f1e0 | 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 62 79 20 77 68 69 63 68 20 74 68 65 20 6c 6f 63 61 6c | .service.name.by.which.the.local |
8f200 | 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 73 65 6c 65 63 74 20 61 63 63 65 | .PPPoE.interface.can.select.acce |
8f220 | 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 | ss.concentrators.to.connect.with |
8f240 | 2e 20 49 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 6e 79 20 61 63 63 65 73 73 20 | ..It.will.connect.to.any.access. |
8f260 | 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 66 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 74 68 69 | concentrator.if.not.set..Use.thi |
8f280 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 4c 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 | s.command.to.use.Layer.4.informa |
8f2a0 | 74 69 6f 6e 20 66 6f 72 20 49 50 76 34 20 45 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 | tion.for.IPv4.ECMP.hashing..Use. |
8f2c0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 63 6f 20 6e 6f 6e 2d | this.command.to.use.a.Cisco.non- |
8f2e0 | 63 6f 6d 70 6c 69 61 6e 74 20 66 6f 72 6d 61 74 20 74 6f 20 73 65 6e 64 20 61 6e 64 20 69 6e 74 | compliant.format.to.send.and.int |
8f300 | 65 72 70 72 65 74 20 74 68 65 20 44 75 61 6c 2d 53 74 61 63 6b 20 63 61 70 61 62 69 6c 69 74 79 | erpret.the.Dual-Stack.capability |
8f320 | 20 54 4c 56 20 66 6f 72 20 49 50 76 36 20 4c 44 50 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 | .TLV.for.IPv6.LDP.communications |
8f340 | 2e 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 37 35 35 32 60 | ..This.is.related.to.:rfc:`7552` |
8f360 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 6f 72 64 65 72 65 | ..Use.this.command.to.use.ordere |
8f380 | 64 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 | d.label.distribution.control.mod |
8f3a0 | 65 2e 20 46 52 52 20 62 79 20 64 65 66 61 75 6c 74 20 75 73 65 73 20 69 6e 64 65 70 65 6e 64 65 | e..FRR.by.default.uses.independe |
8f3c0 | 6e 74 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f | nt.label.distribution.control.mo |
8f3e0 | 64 65 20 66 6f 72 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 20 54 68 69 73 | de.for.label.distribution...This |
8f400 | 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 55 73 65 20 | .is.related.to.:rfc:`5036`..Use. |
8f420 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 72 20 4c 61 79 65 72 20 34 20 69 6e 66 | this.command.to.user.Layer.4.inf |
8f440 | 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 45 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 | ormation.for.ECMP.hashing..Use.t |
8f460 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 | his.command.to.view.operational. |
8f480 | 73 74 61 74 75 73 20 61 6e 64 20 64 65 74 61 69 6c 73 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 | status.and.details.wireless-spec |
8f4a0 | 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c | ific.information.about.all.wirel |
8f4c0 | 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | ess.interfaces..Use.this.command |
8f4e0 | 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 | .to.view.operational.status.and. |
8f500 | 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 | wireless-specific.information.ab |
8f520 | 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 | out.all.wireless.interfaces..Use |
8f540 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 77 69 72 65 6c 65 73 73 20 69 | .this.command.to.view.wireless.i |
8f560 | 6e 74 65 72 66 61 63 65 20 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 | nterface.queue.information..The. |
8f580 | 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 | wireless.interface.identifier.ca |
8f5a0 | 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 55 | n.range.from.wlan0.to.wlan999..U |
8f5c0 | 73 65 64 20 66 6f 72 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 2e 00 55 73 65 64 20 74 6f | sed.for.troubleshooting..Used.to |
8f5e0 | 20 62 6c 6f 63 6b 20 61 20 73 70 65 63 69 66 69 63 20 6d 69 6d 65 2d 74 79 70 65 2e 00 55 73 65 | .block.a.specific.mime-type..Use |
8f600 | 64 20 74 6f 20 62 6c 6f 63 6b 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 73 20 62 79 20 74 | d.to.block.specific.domains.by.t |
8f620 | 68 65 20 50 72 6f 78 79 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 | he.Proxy..Specifying."vyos.net". |
8f640 | 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 | will.block.all.access.to.vyos.ne |
8f660 | 74 2c 20 61 6e 64 20 73 70 65 63 69 66 79 69 6e 67 20 22 2e 78 78 78 22 20 77 69 6c 6c 20 62 6c | t,.and.specifying.".xxx".will.bl |
8f680 | 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 55 52 4c 73 20 68 61 76 69 6e 67 20 61 6e | ock.all.access.to.URLs.having.an |
8f6a0 | 20 55 52 4c 20 65 6e 64 69 6e 67 20 6f 6e 20 2e 78 78 78 2e 00 55 73 65 72 20 69 6e 74 65 72 66 | .URL.ending.on..xxx..User.interf |
8f6c0 | 61 63 65 20 63 61 6e 20 62 65 20 70 75 74 20 74 6f 20 56 52 46 20 63 6f 6e 74 65 78 74 20 76 69 | ace.can.be.put.to.VRF.context.vi |
8f6e0 | 61 20 52 41 44 49 55 53 20 41 63 63 65 73 73 2d 41 63 63 65 70 74 20 70 61 63 6b 65 74 2c 20 6f | a.RADIUS.Access-Accept.packet,.o |
8f700 | 72 20 63 68 61 6e 67 65 20 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 6f 41 2e 20 60 60 41 63 | r.change.it.via.RADIUS.CoA..``Ac |
8f720 | 63 65 6c 2d 56 52 46 2d 4e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 72 6f 6d 20 74 68 65 73 | cel-VRF-Name``.is.used.from.thes |
8f740 | 65 20 70 75 72 70 6f 73 65 73 2e 20 49 74 20 69 73 20 63 75 73 74 6f 6d 20 60 41 43 43 45 4c 2d | e.purposes..It.is.custom.`ACCEL- |
8f760 | 50 50 50 20 61 74 74 72 69 62 75 74 65 60 5f 2e 20 44 65 66 69 6e 65 20 69 74 20 69 6e 20 79 6f | PPP.attribute`_..Define.it.in.yo |
8f780 | 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 72 2d 6c 65 76 65 6c 20 6d 65 73 | ur.RADIUS.server..User-level.mes |
8f7a0 | 73 61 67 65 73 00 55 73 69 6e 67 20 27 73 6f 66 74 2d 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f | sages.Using.'soft-reconfiguratio |
8f7c0 | 6e 27 20 77 65 20 67 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 75 70 64 61 74 65 20 77 69 74 68 | n'.we.get.the.policy.update.with |
8f7e0 | 6f 75 74 20 62 6f 75 6e 63 69 6e 67 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 55 73 69 6e 67 | out.bouncing.the.neighbor..Using |
8f800 | 20 2a 2a 6f 70 65 6e 76 70 6e 2d 6f 70 74 69 6f 6e 20 2d 72 65 6e 65 67 2d 73 65 63 2a 2a 20 63 | .**openvpn-option.-reneg-sec**.c |
8f820 | 61 6e 20 62 65 20 74 72 69 63 6b 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 | an.be.tricky..This.option.is.use |
8f840 | 64 20 74 6f 20 72 65 6e 65 67 6f 74 69 61 74 65 20 64 61 74 61 20 63 68 61 6e 6e 65 6c 20 61 66 | d.to.renegotiate.data.channel.af |
8f860 | 74 65 72 20 6e 20 73 65 63 6f 6e 64 73 2e 20 57 68 65 6e 20 75 73 65 64 20 61 74 20 62 6f 74 68 | ter.n.seconds..When.used.at.both |
8f880 | 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 74 68 65 20 6c 6f 77 65 72 20 76 61 | .server.and.client,.the.lower.va |
8f8a0 | 6c 75 65 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 | lue.will.trigger.the.renegotiati |
8f8c0 | 6f 6e 2e 20 49 66 20 79 6f 75 20 73 65 74 20 69 74 20 74 6f 20 30 20 6f 6e 20 6f 6e 65 20 73 69 | on..If.you.set.it.to.0.on.one.si |
8f8e0 | 64 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 74 6f 20 64 69 73 61 62 6c 65 | de.of.the.connection.(to.disable |
8f900 | 20 69 74 29 2c 20 74 68 65 20 63 68 6f 73 65 6e 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 6f 74 | .it),.the.chosen.value.on.the.ot |
8f920 | 68 65 72 20 73 69 64 65 20 77 69 6c 6c 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 74 68 65 | her.side.will.determine.when.the |
8f940 | 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 2e 00 55 73 69 6e 67 | .renegotiation.will.occur..Using |
8f960 | 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 00 55 73 69 6e 67 20 42 47 50 20 72 6f 75 | .BGP.confederation.Using.BGP.rou |
8f980 | 74 65 2d 72 65 66 6c 65 63 74 6f 72 73 00 55 73 69 6e 67 20 56 4c 41 4e 20 61 77 61 72 65 20 42 | te-reflectors.Using.VLAN.aware.B |
8f9a0 | 72 69 64 67 65 00 55 73 69 6e 67 20 6f 75 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 63 68 | ridge.Using.our.documentation.ch |
8f9c0 | 61 70 74 65 72 20 2d 20 3a 72 65 66 3a 60 70 6b 69 60 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 | apter.-.:ref:`pki`.generate.and. |
8f9e0 | 69 6e 73 74 61 6c 6c 20 43 41 20 61 6e 64 20 53 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 | install.CA.and.Server.certificat |
8fa00 | 65 00 55 73 69 6e 67 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 | e.Using.the.operation.mode.comma |
8fa20 | 6e 64 20 74 6f 20 76 69 65 77 20 42 72 69 64 67 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 | nd.to.view.Bridge.Information.Us |
8fa40 | 69 6e 67 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 77 69 6c 6c 20 63 72 65 61 74 | ing.this.command,.you.will.creat |
8fa60 | 65 20 61 20 6e 65 77 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 | e.a.new.client.configuration.whi |
8fa80 | 63 68 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 | ch.can.connect.to.``interface``. |
8faa0 | 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 54 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 | on.this.router..The.public.key.f |
8fac0 | 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 | rom.the.specified.interface.is.a |
8fae0 | 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 78 74 72 61 63 74 65 64 20 61 6e 64 20 65 6d 62 65 64 | utomatically.extracted.and.embed |
8fb00 | 64 65 64 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 55 73 75 61 | ded.into.the.configuration..Usua |
8fb20 | 6c 6c 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 | lly.this.configuration.is.used.i |
8fb40 | 6e 20 50 45 73 20 28 50 72 6f 76 69 64 65 72 20 45 64 67 65 29 20 74 6f 20 72 65 70 6c 61 63 65 | n.PEs.(Provider.Edge).to.replace |
8fb60 | 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 63 75 73 74 6f 6d 65 72 20 41 53 20 6e 75 6d 62 65 72 | .the.incoming.customer.AS.number |
8fb80 | 20 73 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 43 45 20 28 20 43 75 73 74 6f 6d 65 72 20 | .so.the.connected.CE.(.Customer. |
8fba0 | 45 64 67 65 29 20 63 61 6e 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 | Edge).can.use.the.same.AS.number |
8fbc0 | 20 61 73 20 74 68 65 20 6f 74 68 65 72 20 63 75 73 74 6f 6d 65 72 20 73 69 74 65 73 2e 20 54 68 | .as.the.other.customer.sites..Th |
8fbe0 | 69 73 20 61 6c 6c 6f 77 73 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 74 68 65 20 70 72 6f 76 69 | is.allows.customers.of.the.provi |
8fc00 | 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e | der.network.to.use.the.same.AS.n |
8fc20 | 75 6d 62 65 72 20 61 63 72 6f 73 73 20 74 68 65 69 72 20 73 69 74 65 73 2e 00 56 48 54 20 28 56 | umber.across.their.sites..VHT.(V |
8fc40 | 65 72 79 20 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 | ery.High.Throughput).capabilitie |
8fc60 | 73 20 28 38 30 32 2e 31 31 61 63 29 00 56 48 54 20 6c 69 6e 6b 20 61 64 61 70 74 61 74 69 6f 6e | s.(802.11ac).VHT.link.adaptation |
8fc80 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 56 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e | .capabilities.VHT.operating.chan |
8fca0 | 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 | nel.center.frequency.-.center.fr |
8fcc0 | 65 71 20 31 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 38 30 2c 20 38 30 2b 38 30 20 61 6e 64 | eq.1.(for.use.with.80,.80+80.and |
8fce0 | 20 31 36 30 20 6d 6f 64 65 73 29 00 56 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 | .160.modes).VHT.operating.channe |
8fd00 | 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 | l.center.frequency.-.center.freq |
8fd20 | 20 32 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 74 68 65 20 38 30 2b 38 30 20 6d 6f 64 65 29 | .2.(for.use.with.the.80+80.mode) |
8fd40 | 00 56 4c 41 4e 00 56 4c 41 4e 20 31 30 20 6f 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 | .VLAN.VLAN.10.on.member.interfac |
8fd60 | 65 20 60 65 74 68 32 60 20 28 41 43 43 45 53 53 20 6d 6f 64 65 29 00 56 4c 41 4e 20 45 78 61 6d | e.`eth2`.(ACCESS.mode).VLAN.Exam |
8fd80 | 70 6c 65 00 56 4c 41 4e 20 4f 70 74 69 6f 6e 73 00 56 4c 41 4e 20 6d 6f 6e 69 74 6f 72 20 66 6f | ple.VLAN.Options.VLAN.monitor.fo |
8fda0 | 72 20 61 75 74 6f 6d 61 74 69 63 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 56 4c 41 4e 20 69 6e 74 | r.automatic.creation.of.VLAN.int |
8fdc0 | 65 72 66 61 63 65 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 75 73 65 72 20 6f 6e 20 73 70 65 | erfaces.for.specific.user.on.spe |
8fde0 | 63 69 66 69 63 20 3c 69 6e 74 65 72 66 61 63 65 3e 00 56 4c 41 4e 20 6e 61 6d 65 00 56 4c 41 4e | cific.<interface>.VLAN.name.VLAN |
8fe00 | 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f | 's.can.be.created.by.Accel-ppp.o |
8fe20 | 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 | n.the.fly.via.the.use.of.a.Kerne |
8fe40 | 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 60 76 6c 61 6e 5f 6d 6f 6e 60 60 2c 20 77 68 69 | l.module.named.``vlan_mon``,.whi |
8fe60 | 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 | ch.is.monitoring.incoming.vlans. |
8fe80 | 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 | and.creates.the.necessary.VLAN.i |
8fea0 | 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 | f.required.and.allowed..VyOS.sup |
8fec0 | 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 | ports.the.use.of.either.VLAN.ID' |
8fee0 | 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 | s.or.entire.ranges,.both.values. |
8ff00 | 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 | can.be.defined.at.the.same.time. |
8ff20 | 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 | for.an.interface..VLAN's.can.be. |
8ff40 | 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 | created.by.Accel-ppp.on.the.fly. |
8ff60 | 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e | via.the.use.of.a.Kernel.module.n |
8ff80 | 61 6d 65 64 20 60 76 6c 61 6e 5f 6d 6f 6e 60 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f | amed.`vlan_mon`,.which.is.monito |
8ffa0 | 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 | ring.incoming.vlans.and.creates. |
8ffc0 | 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 | the.necessary.VLAN.if.required.a |
8ffe0 | 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 | nd.allowed..VyOS.supports.the.us |
90000 | 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 | e.of.either.VLAN.ID's.or.entire. |
90020 | 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e | ranges,.both.values.can.be.defin |
90040 | 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 | ed.at.the.same.time.for.an.inter |
90060 | 66 61 63 65 2e 00 56 4d 77 61 72 65 20 75 73 65 72 73 20 73 68 6f 75 6c 64 20 65 6e 73 75 72 65 | face..VMware.users.should.ensure |
90080 | 20 74 68 61 74 20 61 20 56 4d 58 4e 45 54 33 20 61 64 61 70 74 65 72 20 69 73 20 75 73 65 64 2e | .that.a.VMXNET3.adapter.is.used. |
900a0 | 20 45 31 30 30 30 20 61 64 61 70 74 65 72 73 20 68 61 76 65 20 6b 6e 6f 77 6e 20 69 73 73 75 65 | .E1000.adapters.have.known.issue |
900c0 | 73 20 77 69 74 68 20 47 52 45 20 70 72 6f 63 65 73 73 69 6e 67 2e 00 56 50 4e 00 56 50 4e 2d 63 | s.with.GRE.processing..VPN.VPN-c |
900e0 | 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 71 75 65 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | lients.will.request.configuratio |
90100 | 6e 20 70 61 72 61 6d 65 74 65 72 73 2c 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 63 61 6e | n.parameters,.optionally.you.can |
90120 | 20 44 4e 53 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 56 52 | .DNS.parameter.to.the.client..VR |
90140 | 46 00 56 52 46 20 52 6f 75 74 65 20 4c 65 61 6b 69 6e 67 00 56 52 46 20 61 6e 64 20 4e 41 54 00 | F.VRF.Route.Leaking.VRF.and.NAT. |
90160 | 56 52 46 20 62 6c 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 64 65 66 61 75 | VRF.blue.routing.table.VRF.defau |
90180 | 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 65 64 20 72 6f 75 74 69 6e 67 | lt.routing.table.VRF.red.routing |
901a0 | 20 74 61 62 6c 65 00 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 00 56 52 46 20 74 6f 70 | .table.VRF.route.leaking.VRF.top |
901c0 | 6f 6c 6f 67 79 20 65 78 61 6d 70 6c 65 00 56 52 52 50 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 | ology.example.VRRP.(Virtual.Rout |
901e0 | 65 72 20 52 65 64 75 6e 64 61 6e 63 79 20 50 72 6f 74 6f 63 6f 6c 29 20 70 72 6f 76 69 64 65 73 | er.Redundancy.Protocol).provides |
90200 | 20 61 63 74 69 76 65 2f 62 61 63 6b 75 70 20 72 65 64 75 6e 64 61 6e 63 79 20 66 6f 72 20 72 6f | .active/backup.redundancy.for.ro |
90220 | 75 74 65 72 73 2e 20 45 76 65 72 79 20 56 52 52 50 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 70 | uters..Every.VRRP.router.has.a.p |
90240 | 68 79 73 69 63 61 6c 20 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 61 20 76 | hysical.IP/IPv6.address,.and.a.v |
90260 | 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 20 4f 6e 20 73 74 61 72 74 75 70 2c 20 72 6f 75 74 | irtual.address..On.startup,.rout |
90280 | 65 72 73 20 65 6c 65 63 74 20 74 68 65 20 6d 61 73 74 65 72 2c 20 61 6e 64 20 74 68 65 20 72 6f | ers.elect.the.master,.and.the.ro |
902a0 | 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 | uter.with.the.highest.priority.b |
902c0 | 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 20 61 6e 64 20 61 73 73 69 67 6e 73 20 74 68 | ecomes.the.master.and.assigns.th |
902e0 | 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 69 6e 74 65 72 66 61 | e.virtual.address.to.its.interfa |
90300 | 63 65 2e 20 41 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 | ce..All.routers.with.lower.prior |
90320 | 69 74 69 65 73 20 62 65 63 6f 6d 65 20 62 61 63 6b 75 70 20 72 6f 75 74 65 72 73 2e 20 54 68 65 | ities.become.backup.routers..The |
90340 | 20 6d 61 73 74 65 72 20 74 68 65 6e 20 73 74 61 72 74 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 | .master.then.starts.sending.keep |
90360 | 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 74 6f 20 6e 6f 74 69 66 79 20 6f 74 68 65 72 20 72 6f | alive.packets.to.notify.other.ro |
90380 | 75 74 65 72 73 20 74 68 61 74 20 69 74 27 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 49 66 20 74 68 | uters.that.it's.available..If.th |
903a0 | 65 20 6d 61 73 74 65 72 20 66 61 69 6c 73 20 61 6e 64 20 73 74 6f 70 73 20 73 65 6e 64 69 6e 67 | e.master.fails.and.stops.sending |
903c0 | 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 | .keepalive.packets,.the.router.w |
903e0 | 69 74 68 20 74 68 65 20 6e 65 78 74 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 | ith.the.next.highest.priority.be |
90400 | 63 6f 6d 65 73 20 74 68 65 20 6e 65 77 20 6d 61 73 74 65 72 20 61 6e 64 20 74 61 6b 65 73 20 6f | comes.the.new.master.and.takes.o |
90420 | 76 65 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 63 61 | ver.the.virtual.address..VRRP.ca |
90440 | 6e 20 75 73 65 20 74 77 6f 20 6d 6f 64 65 73 3a 20 70 72 65 65 6d 70 74 69 76 65 20 61 6e 64 20 | n.use.two.modes:.preemptive.and. |
90460 | 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 2e 20 49 6e 20 74 68 65 20 70 72 65 65 6d 70 74 69 76 | non-preemptive..In.the.preemptiv |
90480 | 65 20 6d 6f 64 65 2c 20 69 66 20 61 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 20 68 69 67 68 65 | e.mode,.if.a.router.with.a.highe |
904a0 | 72 20 70 72 69 6f 72 69 74 79 20 66 61 69 6c 73 20 61 6e 64 20 74 68 65 6e 20 63 6f 6d 65 73 20 | r.priority.fails.and.then.comes. |
904c0 | 62 61 63 6b 2c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 | back,.routers.with.lower.priorit |
904e0 | 79 20 77 69 6c 6c 20 67 69 76 65 20 75 70 20 74 68 65 69 72 20 6d 61 73 74 65 72 20 73 74 61 74 | y.will.give.up.their.master.stat |
90500 | 75 73 2e 20 49 6e 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 74 68 65 20 | us..In.non-preemptive.mode,.the. |
90520 | 6e 65 77 6c 79 20 65 6c 65 63 74 65 64 20 6d 61 73 74 65 72 20 77 69 6c 6c 20 6b 65 65 70 20 74 | newly.elected.master.will.keep.t |
90540 | 68 65 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c | he.master.status.and.the.virtual |
90560 | 20 61 64 64 72 65 73 73 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 00 56 52 52 50 20 66 75 6e 63 | .address.indefinitely..VRRP.func |
90580 | 74 69 6f 6e 61 6c 69 74 79 20 63 61 6e 20 62 65 20 65 78 74 65 6e 64 65 64 20 77 69 74 68 20 73 | tionality.can.be.extended.with.s |
905a0 | 63 72 69 70 74 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 77 6f 20 6b 69 6e 64 73 20 | cripts..VyOS.supports.two.kinds. |
905c0 | 6f 66 20 73 63 72 69 70 74 73 3a 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 | of.scripts:.health.check.scripts |
905e0 | 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 2e 20 48 65 61 6c 74 68 20 | .and.transition.scripts..Health. |
90600 | 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 65 78 65 63 75 74 65 20 63 75 73 74 6f 6d 20 63 68 65 | check.scripts.execute.custom.che |
90620 | 63 6b 73 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 6d 61 73 74 65 72 20 72 6f | cks.in.addition.to.the.master.ro |
90640 | 75 74 65 72 20 72 65 61 63 68 61 62 69 6c 69 74 79 2e 20 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 | uter.reachability..Transition.sc |
90660 | 72 69 70 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 56 52 52 50 20 73 74 61 | ripts.are.executed.when.VRRP.sta |
90680 | 74 65 20 63 68 61 6e 67 65 73 20 66 72 6f 6d 20 6d 61 73 74 65 72 20 74 6f 20 62 61 63 6b 75 70 | te.changes.from.master.to.backup |
906a0 | 20 6f 72 20 66 61 75 6c 74 20 61 6e 64 20 76 69 63 65 20 76 65 72 73 61 20 61 6e 64 20 63 61 6e | .or.fault.and.vice.versa.and.can |
906c0 | 20 62 65 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 63 65 | .be.used.to.enable.or.disable.ce |
906e0 | 72 74 61 69 6e 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 00 56 52 52 | rtain.services,.for.example..VRR |
90700 | 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 77 69 74 68 20 74 68 65 20 60 60 | P.groups.are.created.with.the.`` |
90720 | 73 65 74 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 72 72 70 20 67 72 6f 75 70 | set.high-availability.vrrp.group |
90740 | 20 24 47 52 4f 55 50 5f 4e 41 4d 45 60 60 20 63 6f 6d 6d 61 6e 64 73 2e 20 54 68 65 20 72 65 71 | .$GROUP_NAME``.commands..The.req |
90760 | 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 69 6e 74 65 72 66 61 63 65 2c 20 | uired.parameters.are.interface,. |
90780 | 76 72 69 64 2c 20 61 6e 64 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 6b 65 65 70 61 6c 69 76 | vrid,.and.address..VRRP.keepaliv |
907a0 | 65 20 70 61 63 6b 65 74 73 20 75 73 65 20 6d 75 6c 74 69 63 61 73 74 2c 20 61 6e 64 20 56 52 52 | e.packets.use.multicast,.and.VRR |
907c0 | 50 20 73 65 74 75 70 73 20 61 72 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 61 20 73 69 6e 67 6c 65 | P.setups.are.limited.to.a.single |
907e0 | 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 2e 20 59 6f 75 20 63 61 6e | .datalink.layer.segment..You.can |
90800 | 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 56 52 52 50 20 67 72 6f 75 70 73 20 28 61 6c 73 | .setup.multiple.VRRP.groups.(als |
90820 | 6f 20 63 61 6c 6c 65 64 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 29 2e 20 56 69 72 74 75 | o.called.virtual.routers)..Virtu |
90840 | 61 6c 20 72 6f 75 74 65 72 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 56 | al.routers.are.identified.by.a.V |
90860 | 52 49 44 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 49 44 65 6e 74 69 66 69 65 72 29 2e | RID.(Virtual.Router.IDentifier). |
90880 | 20 49 66 20 79 6f 75 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 6f 6e | .If.you.setup.multiple.groups.on |
908a0 | 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 69 72 20 56 52 49 44 73 | .the.same.interface,.their.VRIDs |
908c0 | 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 69 66 20 74 68 65 79 20 75 73 65 20 74 68 65 20 | .must.be.unique.if.they.use.the. |
908e0 | 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2c 20 62 75 74 20 69 74 27 73 20 70 6f | same.address.family,.but.it's.po |
90900 | 73 73 69 62 6c 65 20 28 65 76 65 6e 20 69 66 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 | ssible.(even.if.not.recommended. |
90920 | 66 6f 72 20 72 65 61 64 61 62 69 6c 69 74 79 20 72 65 61 73 6f 6e 73 29 20 74 6f 20 75 73 65 20 | for.readability.reasons).to.use. |
90940 | 64 75 70 6c 69 63 61 74 65 20 56 52 49 44 73 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 | duplicate.VRIDs.on.different.int |
90960 | 65 72 66 61 63 65 73 2e 00 56 52 52 50 20 70 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 73 65 | erfaces..VRRP.priority.can.be.se |
90980 | 74 20 77 69 74 68 20 60 60 70 72 69 6f 72 69 74 79 60 60 20 6f 70 74 69 6f 6e 3a 00 56 54 49 20 | t.with.``priority``.option:.VTI. |
909a0 | 2d 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 00 56 58 4c 41 4e | -.Virtual.Tunnel.Interface.VXLAN |
909c0 | 00 56 58 4c 41 4e 20 69 73 20 61 6e 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 65 66 66 6f 72 74 | .VXLAN.is.an.evolution.of.effort |
909e0 | 73 20 74 6f 20 73 74 61 6e 64 61 72 64 69 7a 65 20 61 6e 20 6f 76 65 72 6c 61 79 20 65 6e 63 61 | s.to.standardize.an.overlay.enca |
90a00 | 70 73 75 6c 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 74 20 69 6e 63 72 65 61 73 65 73 | psulation.protocol..It.increases |
90a20 | 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 75 70 20 74 6f 20 31 36 20 6d 69 6c 6c 69 6f | .the.scalability.up.to.16.millio |
90a40 | 6e 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f | n.logical.networks.and.allows.fo |
90a60 | 72 20 6c 61 79 65 72 20 32 20 61 64 6a 61 63 65 6e 63 79 20 61 63 72 6f 73 73 20 49 50 20 6e 65 | r.layer.2.adjacency.across.IP.ne |
90a80 | 74 77 6f 72 6b 73 2e 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 77 69 74 | tworks..Multicast.or.unicast.wit |
90aa0 | 68 20 68 65 61 64 2d 65 6e 64 20 72 65 70 6c 69 63 61 74 69 6f 6e 20 28 48 45 52 29 20 69 73 20 | h.head-end.replication.(HER).is. |
90ac0 | 75 73 65 64 20 74 6f 20 66 6c 6f 6f 64 20 62 72 6f 61 64 63 61 73 74 2c 20 75 6e 6b 6e 6f 77 6e | used.to.flood.broadcast,.unknown |
90ae0 | 20 75 6e 69 63 61 73 74 2c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 28 42 55 4d 29 20 74 72 | .unicast,.and.multicast.(BUM).tr |
90b00 | 61 66 66 69 63 2e 00 56 58 4c 41 4e 20 73 70 65 63 69 66 69 63 20 6f 70 74 69 6f 6e 73 00 56 58 | affic..VXLAN.specific.options.VX |
90b20 | 4c 41 4e 20 77 61 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 | LAN.was.officially.documented.by |
90b40 | 20 74 68 65 20 49 45 54 46 20 69 6e 20 3a 72 66 63 3a 60 37 33 34 38 60 2e 00 56 61 6c 69 64 20 | .the.IETF.in.:rfc:`7348`..Valid. |
90b60 | 76 61 6c 75 65 73 20 61 72 65 20 30 2e 2e 32 35 35 2e 00 56 61 6c 75 65 00 56 61 6c 75 65 20 74 | values.are.0..255..Value.Value.t |
90b80 | 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 | o.send.to.RADIUS.server.in.NAS-I |
90ba0 | 50 2d 41 64 64 72 65 73 73 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 | P-Address.attribute.and.to.be.ma |
90bc0 | 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 2e 20 41 6c 73 6f 20 44 | tched.in.DM/CoA.requests..Also.D |
90be0 | 4d 2f 43 6f 41 20 73 65 72 76 65 72 20 77 69 6c 6c 20 62 69 6e 64 20 74 6f 20 74 68 61 74 20 61 | M/CoA.server.will.bind.to.that.a |
90c00 | 64 64 72 65 73 73 2e 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 | ddress..Value.to.send.to.RADIUS. |
90c20 | 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 69 62 75 | server.in.NAS-Identifier.attribu |
90c40 | 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 | te.and.to.be.matched.in.DM/CoA.r |
90c60 | 65 71 75 65 73 74 73 2e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 00 56 65 72 69 66 69 63 61 74 69 | equests..Verification.Verificati |
90c80 | 6f 6e 3a 00 56 65 72 69 66 79 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 | on:.Verify.that.connections.are. |
90ca0 | 68 69 74 74 69 6e 67 20 74 68 65 20 72 75 6c 65 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 3a 00 | hitting.the.rule.on.both.sides:. |
90cc0 | 56 65 72 73 69 6f 6e 00 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 00 56 69 72 74 75 61 6c | Version.Virtual.Ethernet.Virtual |
90ce0 | 20 53 65 72 76 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 4c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 74 | .Server.allows.to.Load-balance.t |
90d00 | 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 76 69 72 74 75 61 6c 2d 61 64 64 72 65 | raffic.destination.virtual-addre |
90d20 | 73 73 3a 70 6f 72 74 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 72 65 61 6c 20 73 65 72 | ss:port.between.several.real.ser |
90d40 | 76 65 72 73 2e 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 00 56 69 72 74 75 61 6c 2d 73 65 72 | vers..Virtual-server.Virtual-ser |
90d60 | 76 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 56 52 52 50 20 | ver.can.be.configured.with.VRRP. |
90d80 | 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 6f 72 20 77 69 74 68 6f 75 74 20 56 52 52 50 2e | virtual.address.or.without.VRRP. |
90da0 | 00 56 6f 6c 75 6d 65 20 69 73 20 65 69 74 68 65 72 20 6d 6f 75 6e 74 65 64 20 61 73 20 72 77 20 | .Volume.is.either.mounted.as.rw. |
90dc0 | 28 72 65 61 64 2d 77 72 69 74 65 20 2d 20 64 65 66 61 75 6c 74 29 20 6f 72 20 72 6f 20 28 72 65 | (read-write.-.default).or.ro.(re |
90de0 | 61 64 2d 6f 6e 6c 79 29 00 56 79 4f 53 20 31 2e 31 20 73 75 70 70 6f 72 74 65 64 20 6c 6f 67 69 | ad-only).VyOS.1.1.supported.logi |
90e00 | 6e 20 61 73 20 75 73 65 72 20 60 60 72 6f 6f 74 60 60 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 | n.as.user.``root``..This.has.bee |
90e20 | 6e 20 72 65 6d 6f 76 65 64 20 64 75 65 20 74 6f 20 74 69 67 68 74 65 72 20 73 65 63 75 72 69 74 | n.removed.due.to.tighter.securit |
90e40 | 79 20 69 6e 20 56 79 4f 53 20 31 2e 32 2e 00 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 | y.in.VyOS.1.2..VyOS.1.3.(equuleu |
90e60 | 73 29 20 73 75 70 70 6f 72 74 73 20 44 48 43 50 76 36 2d 50 44 20 28 3a 72 66 63 3a 60 33 36 33 | s).supports.DHCPv6-PD.(:rfc:`363 |
90e80 | 33 60 29 2e 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 69 73 | 3`)..DHCPv6.Prefix.Delegation.is |
90ea0 | 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 6d 6f 73 74 20 49 53 50 73 20 77 68 6f 20 70 72 6f 76 | .supported.by.most.ISPs.who.prov |
90ec0 | 69 64 65 20 6e 61 74 69 76 65 20 49 50 76 36 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 20 6f 6e | ide.native.IPv6.for.consumers.on |
90ee0 | 20 66 69 78 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 56 79 4f 53 20 31 2e 34 20 28 73 61 67 69 74 | .fixed.networks..VyOS.1.4.(sagit |
90f00 | 74 61 29 20 69 6e 74 72 6f 64 75 63 65 64 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 73 | ta).introduced.dynamic.routing.s |
90f20 | 75 70 70 6f 72 74 20 66 6f 72 20 56 52 46 73 2e 00 56 79 4f 53 20 31 2e 34 20 63 68 61 6e 67 65 | upport.for.VRFs..VyOS.1.4.change |
90f40 | 64 20 74 68 65 20 77 61 79 20 69 6e 20 68 6f 77 20 65 6e 63 72 79 74 69 6f 6e 20 6b 65 79 73 20 | d.the.way.in.how.encrytion.keys. |
90f60 | 6f 72 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 | or.certificates.are.stored.on.th |
90f80 | 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 65 20 70 72 65 20 56 79 4f 53 20 31 2e 34 20 65 72 | e.system..In.the.pre.VyOS.1.4.er |
90fa0 | 61 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 67 6f 74 20 73 74 6f 72 65 64 20 75 6e 64 65 72 | a,.certificates.got.stored.under |
90fc0 | 20 2f 63 6f 6e 66 69 67 20 61 6e 64 20 65 76 65 72 79 20 73 65 72 76 69 63 65 20 72 65 66 65 72 | ./config.and.every.service.refer |
90fe0 | 65 6e 63 65 64 20 61 20 66 69 6c 65 2e 20 54 68 61 74 20 6d 61 64 65 20 63 6f 70 79 69 6e 67 20 | enced.a.file..That.made.copying. |
91000 | 61 20 72 75 6e 6e 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 73 79 73 | a.running.configuration.from.sys |
91020 | 74 65 6d 20 41 20 74 6f 20 73 79 73 74 65 6d 20 42 20 61 20 62 69 74 20 68 61 72 64 65 72 2c 20 | tem.A.to.system.B.a.bit.harder,. |
91040 | 61 73 20 79 6f 75 20 68 61 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 66 69 6c 65 73 20 61 6e 64 | as.you.had.to.copy.the.files.and |
91060 | 20 74 68 65 69 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 62 79 20 68 61 6e 64 2e 00 56 79 4f 53 | .their.permissions.by.hand..VyOS |
91080 | 20 31 2e 34 20 75 73 65 73 20 63 68 72 6f 6e 79 20 69 6e 73 74 65 61 64 20 6f 66 20 6e 74 70 64 | .1.4.uses.chrony.instead.of.ntpd |
910a0 | 20 28 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 33 30 30 38 60 29 20 77 68 69 63 68 20 77 69 6c | .(see.:vytask:`T3008`).which.wil |
910c0 | 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 65 70 74 20 61 6e 6f 6e 79 6d 6f 75 73 20 4e 54 50 | l.no.longer.accept.anonymous.NTP |
910e0 | 20 72 65 71 75 65 73 74 73 20 61 73 20 69 6e 20 56 79 4f 53 20 31 2e 33 2e 20 41 6c 6c 20 63 6f | .requests.as.in.VyOS.1.3..All.co |
91100 | 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 20 74 6f | nfigurations.will.be.migrated.to |
91120 | 20 6b 65 65 70 20 74 68 65 20 61 6e 6f 6e 79 6d 6f 75 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 | .keep.the.anonymous.functionalit |
91140 | 79 2e 20 46 6f 72 20 6e 65 77 20 73 65 74 75 70 73 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6c | y..For.new.setups.if.you.have.cl |
91160 | 69 65 6e 74 73 20 75 73 69 6e 67 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 | ients.using.your.VyOS.installati |
91180 | 6f 6e 20 61 73 20 4e 54 50 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 | on.as.NTP.server,.you.must.speci |
911a0 | 66 79 20 74 68 65 20 60 61 6c 6c 6f 77 2d 63 6c 69 65 6e 74 60 20 64 69 72 65 63 74 69 76 65 2e | fy.the.`allow-client`.directive. |
911c0 | 00 56 79 4f 53 20 41 72 69 73 74 61 20 45 4f 53 20 73 65 74 75 70 00 56 79 4f 53 20 45 53 50 20 | .VyOS.Arista.EOS.setup.VyOS.ESP. |
911e0 | 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 | group.has.the.next.options:.VyOS |
91200 | 20 46 69 65 6c 64 00 56 79 4f 53 20 49 4b 45 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 | .Field.VyOS.IKE.group.has.the.ne |
91220 | 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 4d 49 42 73 00 56 79 4f 53 20 4e 41 54 36 36 | xt.options:.VyOS.MIBs.VyOS.NAT66 |
91240 | 20 44 48 43 50 76 36 20 75 73 69 6e 67 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 | .DHCPv6.using.a.dummy.interface. |
91260 | 56 79 4f 53 20 4e 41 54 36 36 20 53 69 6d 70 6c 65 20 43 6f 6e 66 69 67 75 72 65 00 56 79 4f 53 | VyOS.NAT66.Simple.Configure.VyOS |
91280 | 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 65 6d 75 6c 61 74 65 | .Network.Emulator.policy.emulate |
912a0 | 73 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 79 6f 75 20 63 61 6e 20 73 75 66 66 65 72 20 | s.the.conditions.you.can.suffer. |
912c0 | 69 6e 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 | in.a.real.network..You.will.be.a |
912e0 | 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 72 61 74 | ble.to.configure.things.like.rat |
91300 | 65 2c 20 62 75 72 73 74 2c 20 64 65 6c 61 79 2c 20 70 61 63 6b 65 74 20 6c 6f 73 73 2c 20 70 61 | e,.burst,.delay,.packet.loss,.pa |
91320 | 63 6b 65 74 20 63 6f 72 72 75 70 74 69 6f 6e 20 6f 72 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 | cket.corruption.or.packet.reorde |
91340 | 72 69 6e 67 2e 00 56 79 4f 53 20 4f 70 74 69 6f 6e 00 56 79 4f 53 20 50 6f 6c 69 63 79 2d 42 61 | ring..VyOS.Option.VyOS.Policy-Ba |
91360 | 73 65 64 20 52 6f 75 74 69 6e 67 20 28 50 42 52 29 20 77 6f 72 6b 73 20 62 79 20 6d 61 74 63 68 | sed.Routing.(PBR).works.by.match |
91380 | 69 6e 67 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 6e 64 | ing.source.IP.address.ranges.and |
913a0 | 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 75 73 69 6e 67 20 64 69 | .forwarding.the.traffic.using.di |
913c0 | 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 00 56 79 4f 53 20 53 4e 4d | fferent.routing.tables..VyOS.SNM |
913e0 | 50 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 56 | P.supports.both.IPv4.and.IPv6..V |
91400 | 79 4f 53 20 61 6c 73 6f 20 63 6f 6d 65 73 20 77 69 74 68 20 61 20 62 75 69 6c 64 20 69 6e 20 53 | yOS.also.comes.with.a.build.in.S |
91420 | 53 54 50 20 73 65 72 76 65 72 2c 20 73 65 65 20 3a 72 65 66 3a 60 73 73 74 70 60 2e 00 56 79 4f | STP.server,.see.:ref:`sstp`..VyO |
91440 | 53 20 61 6c 73 6f 20 70 72 6f 76 69 64 65 73 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 66 75 | S.also.provides.DHCPv6.server.fu |
91460 | 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 | nctionality.which.is.described.i |
91480 | 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 | n.this.section..VyOS.also.suppor |
914a0 | 74 73 20 28 63 75 72 72 65 6e 74 6c 79 29 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 | ts.(currently).two.different.mod |
914c0 | 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 | es.of.authentication,.local.and. |
914e0 | 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 | RADIUS..To.create.a.new.local.us |
91500 | 65 72 20 6e 61 6d 65 64 20 60 60 76 79 6f 73 60 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 | er.named.``vyos``.with.password. |
91520 | 60 60 76 79 6f 73 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 | ``vyos``.use.the.following.comma |
91540 | 6e 64 73 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 74 77 6f 20 64 69 66 66 | nds..VyOS.also.supports.two.diff |
91560 | 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c | erent.modes.of.authentication,.l |
91580 | 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 | ocal.and.RADIUS..To.create.a.new |
915a0 | 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 20 61 20 | .local.user.named."vyos".with.a. |
915c0 | 70 61 73 73 77 6f 72 64 20 6f 66 20 22 76 79 6f 73 22 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f | password.of."vyos".use.the.follo |
915e0 | 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 63 61 6e 20 61 6c 73 6f 20 72 75 6e | wing.commands..VyOS.can.also.run |
91600 | 20 69 6e 20 44 4d 56 50 4e 20 73 70 6f 6b 65 20 6d 6f 64 65 2e 00 56 79 4f 53 20 63 61 6e 20 62 | .in.DMVPN.spoke.mode..VyOS.can.b |
91620 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 72 61 63 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e | e.configured.to.track.connection |
91640 | 73 20 75 73 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 | s.using.the.connection.tracking. |
91660 | 73 75 62 73 79 73 74 65 6d 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 62 | subsystem..Connection.tracking.b |
91680 | 65 63 6f 6d 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6f 6e 63 65 20 65 69 74 68 65 72 20 73 | ecomes.operational.once.either.s |
916a0 | 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 69 73 20 63 6f 6e 66 69 | tateful.firewall.or.NAT.is.confi |
916c0 | 67 75 72 65 64 2e 00 56 79 4f 53 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 61 63 74 20 61 73 20 | gured..VyOS.can.not.only.act.as. |
916e0 | 61 6e 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6f 72 20 73 65 72 76 65 | an.OpenVPN.site-to-site.or.serve |
91700 | 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 63 61 6e 20 | r.for.multiple.clients..You.can. |
91720 | 69 6e 64 65 65 64 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 79 20 56 79 4f 53 20 4f | indeed.also.configure.any.VyOS.O |
91740 | 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 63 | penVPN.interface.as.an.OpenVPN.c |
91760 | 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 56 79 4f 53 20 4f 70 65 6e 56 | lient.connecting.to.a.VyOS.OpenV |
91780 | 50 4e 20 73 65 72 76 65 72 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 4f 70 65 6e 56 50 4e 20 73 | PN.server.or.any.other.OpenVPN.s |
917a0 | 65 72 76 65 72 2e 00 56 79 4f 53 20 64 65 66 61 75 6c 74 20 77 69 6c 6c 20 62 65 20 60 61 75 74 | erver..VyOS.default.will.be.`aut |
917c0 | 6f 60 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c | o`..VyOS.does.not.have.a.special |
917e0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 | .command.to.start.the.Babel.proc |
91800 | 65 73 73 2e 20 54 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 | ess..The.Babel.process.starts.wh |
91820 | 65 6e 20 74 68 65 20 66 69 72 73 74 20 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 | en.the.first.Babel.enabled.inter |
91840 | 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f | face.is.configured..VyOS.does.no |
91860 | 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 | t.have.a.special.command.to.star |
91880 | 74 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 20 70 72 6f | t.the.OSPF.process..The.OSPF.pro |
918a0 | 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 | cess.starts.when.the.first.ospf. |
918c0 | 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e | enabled.interface.is.configured. |
918e0 | 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f | .VyOS.does.not.have.a.special.co |
91900 | 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 | mmand.to.start.the.OSPFv3.proces |
91920 | 73 2e 20 54 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 | s..The.OSPFv3.process.starts.whe |
91940 | 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 | n.the.first.ospf.enabled.interfa |
91960 | 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 | ce.is.configured..VyOS.facilitat |
91980 | 65 73 20 49 50 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a | es.IP.Multicast.by.supporting.** |
919a0 | 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 2a 2a 2c 20 2a 2a 49 47 4d 50 2a 2a 20 61 6e 64 20 | PIM.Sparse.Mode**,.**IGMP**.and. |
919c0 | 2a 2a 49 47 4d 50 2d 50 72 6f 78 79 2a 2a 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 | **IGMP-Proxy**..VyOS.facilitates |
919e0 | 20 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a | .IPv6.Multicast.by.supporting.** |
91a00 | 50 49 4d 76 36 2a 2a 20 61 6e 64 20 2a 2a 4d 4c 44 2a 2a 2e 00 56 79 4f 53 20 69 6e 63 6c 75 64 | PIMv6**.and.**MLD**..VyOS.includ |
91a20 | 65 73 20 74 68 65 20 46 61 73 74 4e 65 74 4d 6f 6e 20 43 6f 6d 6d 75 6e 69 74 79 20 45 64 69 74 | es.the.FastNetMon.Community.Edit |
91a40 | 69 6f 6e 2e 00 56 79 4f 53 20 69 73 20 61 62 6c 65 20 74 6f 20 75 70 64 61 74 65 20 61 20 72 65 | ion..VyOS.is.able.to.update.a.re |
91a60 | 6d 6f 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 | mote.DNS.record.when.an.interfac |
91a80 | 65 20 67 65 74 73 20 61 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 49 6e 20 6f 72 64 65 | e.gets.a.new.IP.address..In.orde |
91aa0 | 72 20 74 6f 20 64 6f 20 73 6f 2c 20 56 79 4f 53 20 69 6e 63 6c 75 64 65 73 20 64 64 63 6c 69 65 | r.to.do.so,.VyOS.includes.ddclie |
91ac0 | 6e 74 5f 2c 20 61 20 50 65 72 6c 20 73 63 72 69 70 74 20 77 72 69 74 74 65 6e 20 66 6f 72 20 74 | nt_,.a.Perl.script.written.for.t |
91ae0 | 68 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 75 72 70 6f 73 65 2e 00 56 79 4f 53 20 69 73 20 61 6c | his.only.one.purpose..VyOS.is.al |
91b00 | 73 6f 20 61 62 6c 65 20 74 6f 20 75 73 65 20 61 6e 79 20 73 65 72 76 69 63 65 20 72 65 6c 79 69 | so.able.to.use.any.service.relyi |
91b20 | 6e 67 20 6f 6e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 64 63 | ng.on.protocols.supported.by.ddc |
91b40 | 6c 69 65 6e 74 2e 00 56 79 4f 53 20 69 74 73 65 6c 66 20 73 75 70 70 6f 72 74 73 20 53 4e 4d 50 | lient..VyOS.itself.supports.SNMP |
91b60 | 76 32 5f 20 28 76 65 72 73 69 6f 6e 20 32 29 20 61 6e 64 20 53 4e 4d 50 76 33 5f 20 28 76 65 72 | v2_.(version.2).and.SNMPv3_.(ver |
91b80 | 73 69 6f 6e 20 33 29 20 77 68 65 72 65 20 74 68 65 20 6c 61 74 65 72 20 69 73 20 72 65 63 6f 6d | sion.3).where.the.later.is.recom |
91ba0 | 6d 65 6e 64 65 64 20 62 65 63 61 75 73 65 20 6f 66 20 69 6d 70 72 6f 76 65 64 20 73 65 63 75 72 | mended.because.of.improved.secur |
91bc0 | 69 74 79 20 28 6f 70 74 69 6f 6e 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 | ity.(optional.authentication.and |
91be0 | 20 65 6e 63 72 79 70 74 69 6f 6e 29 2e 00 56 79 4f 53 20 6c 65 74 73 20 79 6f 75 20 63 6f 6e 74 | .encryption)..VyOS.lets.you.cont |
91c00 | 72 6f 6c 20 74 72 61 66 66 69 63 20 69 6e 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 77 61 | rol.traffic.in.many.different.wa |
91c20 | 79 73 2c 20 68 65 72 65 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 65 76 65 72 79 20 70 6f 73 | ys,.here.we.will.cover.every.pos |
91c40 | 73 69 62 69 6c 69 74 79 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 73 20 6d | sibility..You.can.configure.as.m |
91c60 | 61 6e 79 20 70 6f 6c 69 63 69 65 73 20 61 73 20 79 6f 75 20 77 61 6e 74 2c 20 62 75 74 20 79 6f | any.policies.as.you.want,.but.yo |
91c80 | 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 6f 6e 65 | u.will.only.be.able.to.apply.one |
91ca0 | 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 | .policy.per.interface.and.direct |
91cc0 | 69 6f 6e 20 28 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 29 2e 00 56 79 4f 53 20 | ion.(inbound.or.outbound)..VyOS. |
91ce0 | 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 3a 61 62 62 72 3a 60 46 52 52 20 28 46 72 65 65 20 52 61 | makes.use.of.:abbr:`FRR.(Free.Ra |
91d00 | 6e 67 65 20 52 6f 75 74 69 6e 67 29 60 20 61 6e 64 20 77 65 20 77 6f 75 6c 64 20 6c 69 6b 65 20 | nge.Routing)`.and.we.would.like. |
91d20 | 74 6f 20 74 68 61 6e 6b 20 74 68 65 6d 20 66 6f 72 20 74 68 65 69 72 20 65 66 66 6f 72 74 21 00 | to.thank.them.for.their.effort!. |
91d40 | 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 4c 69 6e 75 78 20 60 6e 65 74 66 69 6c 74 | VyOS.makes.use.of.Linux.`netfilt |
91d60 | 65 72 20 3c 68 74 74 70 73 3a 2f 2f 6e 65 74 66 69 6c 74 65 72 2e 6f 72 67 2f 3e 60 5f 20 66 6f | er.<https://netfilter.org/>`_.fo |
91d80 | 72 20 70 61 63 6b 65 74 20 66 69 6c 74 65 72 69 6e 67 2e 00 56 79 4f 53 20 6e 6f 74 20 6f 6e 6c | r.packet.filtering..VyOS.not.onl |
91da0 | 79 20 63 61 6e 20 6e 6f 77 20 6d 61 6e 61 67 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 73 | y.can.now.manage.certificates.is |
91dc0 | 73 75 65 64 20 62 79 20 33 72 64 20 70 61 72 74 79 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 | sued.by.3rd.party.Certificate.Au |
91de0 | 74 68 6f 72 69 74 69 65 73 2c 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 61 63 74 20 61 73 20 61 20 | thorities,.it.can.also.act.as.a. |
91e00 | 43 41 20 6f 6e 20 69 74 73 20 6f 77 6e 2e 20 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 79 6f | CA.on.its.own..You.can.create.yo |
91e20 | 75 72 20 6f 77 6e 20 72 6f 6f 74 20 43 41 20 61 6e 64 20 73 69 67 6e 20 6b 65 79 73 20 77 69 74 | ur.own.root.CA.and.sign.keys.wit |
91e40 | 68 20 69 74 20 62 79 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 73 6f 6d 65 20 73 69 6d 70 6c | h.it.by.making.use.of.some.simpl |
91e60 | 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 6e 6f 77 20 61 6c 73 | e.op-mode.commands..VyOS.now.als |
91e80 | 6f 20 68 61 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 43 41 73 2c | o.has.the.ability.to.create.CAs, |
91ea0 | 20 6b 65 79 73 2c 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 61 6e 64 20 6f 74 68 65 72 20 | .keys,.Diffie-Hellman.and.other. |
91ec0 | 6b 65 79 70 61 69 72 73 20 66 72 6f 6d 20 61 6e 20 65 61 73 79 20 74 6f 20 61 63 63 65 73 73 20 | keypairs.from.an.easy.to.access. |
91ee0 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 2e 00 56 79 4f 53 20 | operational.level.command..VyOS. |
91f00 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 6e 6f | operational.mode.commands.are.no |
91f20 | 74 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 | t.only.available.for.generating. |
91f40 | 6b 65 79 73 20 62 75 74 20 61 6c 73 6f 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 6d 2e 00 56 | keys.but.also.to.display.them..V |
91f60 | 79 4f 53 20 70 72 6f 76 69 64 65 20 61 6e 20 48 54 54 50 20 41 50 49 2e 20 59 6f 75 20 63 61 6e | yOS.provide.an.HTTP.API..You.can |
91f80 | 20 75 73 65 20 69 74 20 74 6f 20 65 78 65 63 75 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 | .use.it.to.execute.op-mode.comma |
91fa0 | 6e 64 73 2c 20 75 70 64 61 74 65 20 56 79 4f 53 2c 20 73 65 74 20 6f 72 20 64 65 6c 65 74 65 20 | nds,.update.VyOS,.set.or.delete. |
91fc0 | 63 6f 6e 66 69 67 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 44 4e 53 20 69 6e 66 72 61 73 | config..VyOS.provides.DNS.infras |
91fe0 | 74 72 75 63 74 75 72 65 20 66 6f 72 20 73 6d 61 6c 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 | tructure.for.small.networks..It. |
92000 | 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 6c 69 67 68 74 77 65 69 67 68 74 20 61 6e | is.designed.to.be.lightweight.an |
92020 | 64 20 68 61 76 65 20 61 20 73 6d 61 6c 6c 20 66 6f 6f 74 70 72 69 6e 74 2c 20 73 75 69 74 61 62 | d.have.a.small.footprint,.suitab |
92040 | 6c 65 20 66 6f 72 20 72 65 73 6f 75 72 63 65 20 63 6f 6e 73 74 72 61 69 6e 65 64 20 72 6f 75 74 | le.for.resource.constrained.rout |
92060 | 65 72 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 73 2e 20 46 6f 72 20 74 68 69 73 20 77 65 20 75 | ers.and.firewalls..For.this.we.u |
92080 | 74 69 6c 69 7a 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 2e 00 56 79 4f 53 20 70 | tilize.PowerDNS.recursor..VyOS.p |
920a0 | 72 6f 76 69 64 65 73 20 61 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 | rovides.a.command.to.generate.a. |
920c0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f | connection.profile.used.by.Windo |
920e0 | 77 73 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 | ws.clients.that.will.connect.to. |
92100 | 74 68 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 | the."rw".connection.on.our.VyOS. |
92120 | 73 65 72 76 65 72 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 | server..VyOS.provides.policies.c |
92140 | 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 | ommands.exclusively.for.BGP.traf |
92160 | 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 | fic.filtering.and.manipulation:. |
92180 | 2a 2a 61 73 2d 70 61 74 68 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e | **as-path-list**.is.one.of.them. |
921a0 | 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 | .VyOS.provides.policies.commands |
921c0 | 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c | .exclusively.for.BGP.traffic.fil |
921e0 | 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 63 6f 6d 6d 75 | tering.and.manipulation:.**commu |
92200 | 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 | nity-list**.is.one.of.them..VyOS |
92220 | 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c | .provides.policies.commands.excl |
92240 | 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e | usively.for.BGP.traffic.filterin |
92260 | 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 65 78 74 63 6f 6d 6d 75 6e 69 | g.and.manipulation:.**extcommuni |
92280 | 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 | ty-list**.is.one.of.them..VyOS.p |
922a0 | 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 | rovides.policies.commands.exclus |
922c0 | 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 | ively.for.BGP.traffic.filtering. |
922e0 | 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e | and.manipulation:.**large-commun |
92300 | 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 | ity-list**.is.one.of.them..VyOS. |
92320 | 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e | provides.some.operational.comman |
92340 | 64 73 20 6f 6e 20 4f 70 65 6e 56 50 4e 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 75 70 | ds.on.OpenVPN..VyOS.provides.sup |
92360 | 70 6f 72 74 20 66 6f 72 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 2e 20 44 48 43 50 20 66 61 69 | port.for.DHCP.failover..DHCP.fai |
92380 | 6c 6f 76 65 72 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 | lover.must.be.configured.explici |
923a0 | 74 6c 79 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 2e | tly.by.the.following.statements. |
923c0 | 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 74 68 69 73 20 75 74 69 6c 69 74 79 20 74 6f 20 69 | .VyOS.provides.this.utility.to.i |
923e0 | 6d 70 6f 72 74 20 65 78 69 73 74 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 73 2f 6b 65 79 20 | mport.existing.certificates/key. |
92400 | 66 69 6c 65 73 20 64 69 72 65 63 74 6c 79 20 69 6e 74 6f 20 50 4b 49 20 66 72 6f 6d 20 6f 70 2d | files.directly.into.PKI.from.op- |
92420 | 6d 6f 64 65 2e 20 50 72 65 76 69 6f 75 73 20 74 6f 20 56 79 4f 53 20 31 2e 34 2c 20 63 65 72 74 | mode..Previous.to.VyOS.1.4,.cert |
92440 | 69 66 69 63 61 74 65 73 20 77 65 72 65 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 2f | ificates.were.stored.under.the./ |
92460 | 63 6f 6e 66 69 67 20 66 6f 6c 64 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 61 6e 64 20 77 69 | config.folder.permanently.and.wi |
92480 | 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 20 70 6f 73 74 20 75 70 67 72 61 64 65 2e 00 56 79 4f | ll.be.retained.post.upgrade..VyO |
924a0 | 53 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 69 73 20 62 61 6c 61 6e 63 65 72 20 61 6e 64 20 | S.reverse-proxy.is.balancer.and. |
924c0 | 70 72 6f 78 79 20 73 65 72 76 65 72 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 68 69 67 68 2d | proxy.server.that.provides.high- |
924e0 | 61 76 61 69 6c 61 62 69 6c 69 74 79 2c 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 | availability,.load.balancing.and |
92500 | 20 70 72 6f 78 79 69 6e 67 20 66 6f 72 20 54 43 50 20 28 6c 65 76 65 6c 20 34 29 20 61 6e 64 20 | .proxying.for.TCP.(level.4).and. |
92520 | 48 54 54 50 2d 62 61 73 65 64 20 28 6c 65 76 65 6c 20 37 29 20 61 70 70 6c 69 63 61 74 69 6f 6e | HTTP-based.(level.7).application |
92540 | 73 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 3a 61 62 62 72 3a 60 50 49 4d 2d 53 4d 20 28 | s..VyOS.supports.:abbr:`PIM-SM.( |
92560 | 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 29 60 20 61 73 20 77 65 6c 6c 20 61 73 20 3a 61 62 | PIM.Sparse.Mode)`.as.well.as.:ab |
92580 | 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d | br:`IGMP.(Internet.Group.Managem |
925a0 | 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 76 32 20 61 6e 64 20 76 33 00 56 79 4f 53 20 73 75 | ent.Protocol)`.v2.and.v3.VyOS.su |
925c0 | 70 70 6f 72 74 73 20 62 6f 74 68 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 61 6e 64 20 76 | pports.both.IGMP.version.2.and.v |
925e0 | 65 72 73 69 6f 6e 20 33 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 | ersion.3.(which.allows.source-sp |
92600 | 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 | ecific.multicast)..VyOS.supports |
92620 | 20 62 6f 74 68 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 31 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 | .both.MLD.version.1.and.version. |
92640 | 32 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 | 2.(which.allows.source-specific. |
92660 | 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 66 6c 6f 77 2d 61 | multicast)..VyOS.supports.flow-a |
92680 | 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 | ccounting.for.both.IPv4.and.IPv6 |
926a0 | 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 | .traffic..The.system.acts.as.a.f |
926c0 | 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 | low.exporter,.and.you.are.free.t |
926e0 | 6f 20 75 73 65 20 69 74 20 77 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c | o.use.it.with.any.compatible.col |
92700 | 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 49 | lector..VyOS.supports.multiple.I |
92720 | 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 | KEv2.remote-access.connections.. |
92740 | 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 61 6e 20 68 61 76 65 20 69 74 73 20 64 65 | Every.connection.can.have.its.de |
92760 | 64 69 63 61 74 65 64 20 49 4b 45 2f 45 53 50 20 63 69 70 68 65 72 73 2c 20 63 65 72 74 69 66 69 | dicated.IKE/ESP.ciphers,.certifi |
92780 | 63 61 74 65 73 20 6f 72 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 66 6f | cates.or.local.listen.address.fo |
927a0 | 72 20 65 2e 67 2e 20 69 6e 62 6f 75 6e 64 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 00 56 | r.e.g..inbound.load.balancing..V |
927c0 | 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6f 6e 6c 69 6e 65 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 | yOS.supports.online.checking.for |
927e0 | 20 75 70 64 61 74 65 73 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 46 6c 6f 77 20 61 63 63 | .updates.VyOS.supports.sFlow.acc |
92800 | 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 | ounting.for.both.IPv4.and.IPv6.t |
92820 | 72 61 66 66 69 63 2e 20 54 68 65 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f | raffic..The.system.acts.as.a.flo |
92840 | 77 20 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 | w.exporter,.and.you.are.free.to. |
92860 | 75 73 65 20 69 74 20 77 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 | use.it.with.any.compatible.colle |
92880 | 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 74 69 6d 65 | ctor..VyOS.supports.setting.time |
928a0 | 6f 75 74 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 63 63 6f 72 64 69 6e 67 20 74 | outs.for.connections.according.t |
928c0 | 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 73 | o.the.connection.type..You.can.s |
928e0 | 65 74 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 66 6f 72 20 67 65 6e 65 72 69 63 20 63 6f | et.timeout.values.for.generic.co |
92900 | 6e 6e 65 63 74 69 6f 6e 73 2c 20 66 6f 72 20 49 43 4d 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c | nnections,.for.ICMP.connections, |
92920 | 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 6f 72 20 66 6f 72 20 54 43 50 20 63 6f 6e | .UDP.connections,.or.for.TCP.con |
92940 | 6e 65 63 74 69 6f 6e 73 20 69 6e 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e | nections.in.a.number.of.differen |
92960 | 74 20 73 74 61 74 65 73 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 | t.states..VyOS.supports.setting. |
92980 | 75 70 20 50 50 50 6f 45 20 69 6e 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 20 74 | up.PPPoE.in.two.different.ways.t |
929a0 | 6f 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 | o.a.PPPoE.internet.connection..T |
929c0 | 68 69 73 20 69 73 20 62 65 63 61 75 73 65 20 6d 6f 73 74 20 49 53 50 73 20 70 72 6f 76 69 64 65 | his.is.because.most.ISPs.provide |
929e0 | 20 61 20 6d 6f 64 65 6d 20 74 68 61 74 20 69 73 20 61 6c 73 6f 20 61 20 77 69 72 65 6c 65 73 73 | .a.modem.that.is.also.a.wireless |
92a00 | 20 72 6f 75 74 65 72 2e 00 56 79 4f 53 20 75 73 65 73 20 49 53 43 20 44 48 43 50 20 73 65 72 76 | .router..VyOS.uses.ISC.DHCP.serv |
92a20 | 65 72 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 | er.for.both.IPv4.and.IPv6.addres |
92a40 | 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 4b 65 61 20 44 48 43 50 | s.assignment..VyOS.uses.Kea.DHCP |
92a60 | 20 73 65 72 76 65 72 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 | .server.for.both.IPv4.and.IPv6.a |
92a80 | 64 64 72 65 73 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 5b 46 52 | ddress.assignment..VyOS.uses.[FR |
92aa0 | 52 6f 75 74 69 6e 67 5d 28 68 74 74 70 73 3a 2f 2f 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 29 | Routing](https://frrouting.org/) |
92ac0 | 20 61 73 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 66 6f 72 20 64 79 6e 61 6d 69 | .as.the.control.plane.for.dynami |
92ae0 | 63 20 61 6e 64 20 73 74 61 74 69 63 20 72 6f 75 74 69 6e 67 2e 20 54 68 65 20 72 6f 75 74 69 6e | c.and.static.routing..The.routin |
92b00 | 67 20 64 61 65 6d 6f 6e 20 62 65 68 61 76 69 6f 72 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 | g.daemon.behavior.can.be.adjuste |
92b20 | 64 20 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 62 75 74 20 72 65 71 75 69 72 65 20 65 69 | d.during.runtime,.but.require.ei |
92b40 | 74 68 65 72 20 61 20 72 65 73 74 61 72 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 61 | ther.a.restart.of.the.routing.da |
92b60 | 65 6d 6f 6e 2c 20 6f 72 20 61 20 72 65 62 6f 6f 74 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 2e | emon,.or.a.reboot.of.the.system. |
92b80 | 00 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 60 69 6e 74 65 72 66 61 63 65 73 20 77 77 61 6e 60 | .VyOS.uses.the.`interfaces.wwan` |
92ba0 | 20 73 75 62 73 79 73 74 65 6d 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 56 79 | .subsystem.for.configuration..Vy |
92bc0 | 4f 53 20 75 73 65 73 20 74 68 65 20 60 6d 69 72 72 6f 72 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 | OS.uses.the.`mirror`.option.to.c |
92be0 | 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 2e 20 54 68 65 20 63 6f 6e | onfigure.port.mirroring..The.con |
92c00 | 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 64 69 76 69 64 65 64 20 69 6e 74 6f 20 32 20 64 69 66 | figuration.is.divided.into.2.dif |
92c20 | 66 65 72 65 6e 74 20 64 69 72 65 63 74 69 6f 6e 73 2e 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 70 | ferent.directions..Destination.p |
92c40 | 6f 72 74 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 64 69 | orts.should.be.configured.for.di |
92c60 | 66 66 65 72 65 6e 74 20 74 72 61 66 66 69 63 20 64 69 72 65 63 74 69 6f 6e 73 2e 00 56 79 4f 53 | fferent.traffic.directions..VyOS |
92c80 | 20 75 74 69 6c 69 7a 65 73 20 60 61 63 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 | .utilizes.`accel-ppp`_.to.provid |
92ca0 | 65 20 3a 61 62 62 72 3a 60 49 50 6f 45 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c | e.:abbr:`IPoE.(Internet.Protocol |
92cc0 | 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e | .over.Ethernet)`.server.function |
92ce0 | 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c | ality..It.can.be.used.with.local |
92d00 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 20 6f 72 | .authentication.(mac-address).or |
92d20 | 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 | .a.connected.RADIUS.server..VyOS |
92d40 | 20 75 74 69 6c 69 7a 65 73 20 60 61 63 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 | .utilizes.`accel-ppp`_.to.provid |
92d60 | 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 | e.PPPoE.server.functionality..It |
92d80 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 | .can.be.used.with.local.authenti |
92da0 | 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 | cation.or.a.connected.RADIUS.ser |
92dc0 | 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f | ver..VyOS.utilizes.accel-ppp_.to |
92de0 | 20 70 72 6f 76 69 64 65 20 4c 32 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 | .provide.L2TP.server.functionali |
92e00 | 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 | ty..It.can.be.used.with.local.au |
92e20 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 | thentication.or.a.connected.RADI |
92e40 | 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 | US.server..VyOS.utilizes.accel-p |
92e60 | 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 53 53 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 | pp_.to.provide.SSTP.server.funct |
92e80 | 69 6f 6e 61 6c 69 74 79 2e 20 57 65 20 73 75 70 70 6f 72 74 20 62 6f 74 68 20 6c 6f 63 61 6c 20 | ionality..We.support.both.local. |
92ea0 | 61 6e 64 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 57 41 4e 20 4c | and.RADIUS.authentication..WAN.L |
92ec0 | 6f 61 64 20 42 61 6c 61 63 69 6e 67 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 | oad.Balacing.should.not.be.used. |
92ee0 | 77 68 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 73 | when.dynamic.routing.protocol.is |
92f00 | 20 75 73 65 64 2f 6e 65 65 64 65 64 2e 20 54 68 69 73 20 66 65 61 74 75 72 65 20 63 72 65 61 74 | .used/needed..This.feature.creat |
92f20 | 65 73 20 63 75 73 74 6f 6d 69 7a 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 | es.customized.routing.tables.and |
92f40 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 74 68 61 74 20 6d 61 6b 65 73 20 69 74 20 69 | .firewall.rules,.that.makes.it.i |
92f60 | 6e 63 6f 6d 70 61 74 69 62 6c 65 20 74 6f 20 75 73 65 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 | ncompatible.to.use.with.routing. |
92f80 | 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 | protocols..WAN.interface.on.`eth |
92fa0 | 31 60 00 57 41 4e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 00 57 4c 41 4e 2f 57 49 46 49 20 | 1`.WAN.load.balancing.WLAN/WIFI. |
92fc0 | 2d 20 57 69 72 65 6c 65 73 73 20 4c 41 4e 00 57 4d 4d 2d 50 53 20 55 6e 73 63 68 65 64 75 6c 65 | -.Wireless.LAN.WMM-PS.Unschedule |
92fe0 | 64 20 41 75 74 6f 6d 61 74 69 63 20 50 6f 77 65 72 20 53 61 76 65 20 44 65 6c 69 76 65 72 79 20 | d.Automatic.Power.Save.Delivery. |
93000 | 5b 55 2d 41 50 53 44 5d 00 57 50 41 20 70 61 73 73 70 68 72 61 73 65 20 60 60 31 32 33 34 35 36 | [U-APSD].WPA.passphrase.``123456 |
93020 | 37 38 60 60 00 57 57 41 4e 20 2d 20 57 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e | 78``.WWAN.-.Wireless.Wide-Area-N |
93040 | 65 74 77 6f 72 6b 00 57 61 72 6e 69 6e 67 00 57 61 72 6e 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e | etwork.Warning.Warning.condition |
93060 | 73 00 57 65 20 61 73 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 | s.We.assume.that.the.LEFT.router |
93080 | 20 68 61 73 20 73 74 61 74 69 63 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 6f | .has.static.192.0.2.10.address.o |
930a0 | 6e 20 65 74 68 30 2c 20 61 6e 64 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 68 61 73 | n.eth0,.and.the.RIGHT.router.has |
930c0 | 20 61 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2e 00 57 65 20 63 | .a.dynamic.address.on.eth0..We.c |
930e0 | 61 6e 20 61 6c 73 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 | an.also.create.the.certificates. |
93100 | 75 73 69 6e 67 20 43 65 72 62 6f 72 74 20 77 68 69 63 68 20 69 73 20 61 6e 20 65 61 73 79 2d 74 | using.Cerbort.which.is.an.easy-t |
93120 | 6f 2d 75 73 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 66 65 74 63 68 65 73 20 61 20 63 65 72 74 | o-use.client.that.fetches.a.cert |
93140 | 69 66 69 63 61 74 65 20 66 72 6f 6d 20 4c 65 74 27 73 20 45 6e 63 72 79 70 74 20 61 6e 20 6f 70 | ificate.from.Let's.Encrypt.an.op |
93160 | 65 6e 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 6c 61 75 6e 63 68 65 | en.certificate.authority.launche |
93180 | 64 20 62 79 20 74 68 65 20 45 46 46 2c 20 4d 6f 7a 69 6c 6c 61 2c 20 61 6e 64 20 6f 74 68 65 72 | d.by.the.EFF,.Mozilla,.and.other |
931a0 | 73 20 61 6e 64 20 64 65 70 6c 6f 79 73 20 69 74 20 74 6f 20 61 20 77 65 62 20 73 65 72 76 65 72 | s.and.deploys.it.to.a.web.server |
931c0 | 2e 00 57 65 20 63 61 6e 20 62 75 69 6c 64 20 72 6f 75 74 65 2d 6d 61 70 73 20 66 6f 72 20 69 6d | ..We.can.build.route-maps.for.im |
931e0 | 70 6f 72 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 73 65 20 73 74 61 74 65 73 2e 20 48 65 72 65 | port.based.on.these.states..Here |
93200 | 20 69 73 20 61 20 73 69 6d 70 6c 65 20 52 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c | .is.a.simple.RPKI.configuration, |
93220 | 20 77 68 65 72 65 20 60 72 6f 75 74 69 6e 61 74 6f 72 60 20 69 73 20 74 68 65 20 52 50 4b 49 2d | .where.`routinator`.is.the.RPKI- |
93240 | 76 61 6c 69 64 61 74 69 6e 67 20 22 63 61 63 68 65 22 20 73 65 72 76 65 72 20 77 69 74 68 20 69 | validating."cache".server.with.i |
93260 | 70 20 60 31 39 32 2e 30 2e 32 2e 31 60 3a 00 57 65 20 63 61 6e 27 74 20 73 75 70 70 6f 72 74 20 | p.`192.0.2.1`:.We.can't.support. |
93280 | 61 6c 6c 20 64 69 73 70 6c 61 79 73 20 66 72 6f 6d 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 2e | all.displays.from.the.beginning. |
932a0 | 20 49 66 20 79 6f 75 72 20 64 69 73 70 6c 61 79 20 74 79 70 65 20 69 73 20 6d 69 73 73 69 6e 67 | .If.your.display.type.is.missing |
932c0 | 2c 20 70 6c 65 61 73 65 20 63 72 65 61 74 65 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 | ,.please.create.a.feature.reques |
932e0 | 74 20 76 69 61 20 50 68 61 62 72 69 63 61 74 6f 72 5f 2e 00 57 65 20 63 6f 6e 66 69 67 75 72 65 | t.via.Phabricator_..We.configure |
93300 | 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6e 61 6d 65 64 20 60 60 72 77 60 60 20 66 | .a.new.connection.named.``rw``.f |
93320 | 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 2c 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 73 | or.road-warrior,.that.identifies |
93340 | 20 69 74 73 65 6c 66 20 61 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 74 6f 20 74 68 65 20 | .itself.as.``192.0.2.1``.to.the. |
93360 | 63 6c 69 65 6e 74 73 20 61 6e 64 20 75 73 65 73 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 63 65 | clients.and.uses.the.``vyos``.ce |
93380 | 72 74 69 66 69 63 61 74 65 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 60 43 41 63 65 72 74 5f | rtificate.signed.by.the.`CAcert_ |
933a0 | 43 6c 61 73 73 33 5f 52 6f 6f 74 60 60 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 2e 20 57 | Class3_Root``.intermediate.CA..W |
933c0 | 65 20 73 65 6c 65 63 74 20 6f 75 72 20 70 72 65 76 69 6f 75 73 6c 79 20 73 70 65 63 69 66 69 65 | e.select.our.previously.specifie |
933e0 | 64 20 49 4b 45 2f 45 53 50 20 67 72 6f 75 70 73 20 61 6e 64 20 61 6c 73 6f 20 6c 69 6e 6b 20 74 | d.IKE/ESP.groups.and.also.link.t |
93400 | 68 65 20 49 50 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 74 6f 20 64 72 61 77 20 61 64 64 72 65 | he.IP.address.pool.to.draw.addre |
93420 | 73 73 65 73 20 66 72 6f 6d 2e 00 57 65 20 63 6f 75 6c 64 20 65 78 70 61 6e 64 20 6f 6e 20 74 68 | sses.from..We.could.expand.on.th |
93440 | 69 73 20 61 6e 64 20 61 6c 73 6f 20 64 65 6e 79 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 61 6e 64 20 | is.and.also.deny.link.local.and. |
93460 | 6d 75 6c 74 69 63 61 73 74 20 69 6e 20 74 68 65 20 72 75 6c 65 20 32 30 20 61 63 74 69 6f 6e 20 | multicast.in.the.rule.20.action. |
93480 | 64 65 6e 79 2e 00 57 65 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 43 4c 49 20 6e 6f 64 65 73 20 66 | deny..We.do.not.have.CLI.nodes.f |
934a0 | 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 2e 20 | or.every.single.OpenVPN.option.. |
934c0 | 49 66 20 61 6e 20 6f 70 74 69 6f 6e 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 61 20 66 65 61 74 75 | If.an.option.is.missing,.a.featu |
934e0 | 72 65 20 72 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 6f 70 65 6e 65 64 20 61 74 20 50 | re.request.should.be.opened.at.P |
93500 | 68 61 62 72 69 63 61 74 6f 72 5f 20 73 6f 20 61 6c 6c 20 75 73 65 72 73 20 63 61 6e 20 62 65 6e | habricator_.so.all.users.can.ben |
93520 | 65 66 69 74 20 66 72 6f 6d 20 69 74 20 28 73 65 65 20 3a 72 65 66 3a 60 69 73 73 75 65 73 5f 66 | efit.from.it.(see.:ref:`issues_f |
93540 | 65 61 74 75 72 65 73 60 29 2e 00 57 65 20 64 6f 6e 27 74 20 72 65 63 6f 6d 65 6e 64 20 74 6f 20 | eatures`)..We.don't.recomend.to. |
93560 | 75 73 65 20 61 72 67 75 6d 65 6e 74 73 2e 20 55 73 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | use.arguments..Using.environment |
93580 | 73 20 69 73 20 6d 6f 72 65 20 70 72 65 66 66 65 72 65 62 6c 65 2e 00 57 65 20 67 65 6e 65 72 61 | s.is.more.preffereble..We.genera |
935a0 | 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 | te.a.connection.profile.used.by. |
935c0 | 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 | Windows.clients.that.will.connec |
935e0 | 74 20 74 6f 20 74 68 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 | t.to.the."rw".connection.on.our. |
93600 | 56 79 4f 53 20 73 65 72 76 65 72 20 6f 6e 20 74 68 65 20 56 50 4e 20 73 65 72 76 65 72 73 20 49 | VyOS.server.on.the.VPN.servers.I |
93620 | 50 20 61 64 64 72 65 73 73 2f 66 71 64 6e 20 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 2e 00 57 | P.address/fqdn.`vpn.vyos.net`..W |
93640 | 65 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 74 20 35 31 38 32 30 00 57 65 20 6e 65 65 64 20 74 | e.listen.on.port.51820.We.need.t |
93660 | 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 77 68 69 63 68 | o.generate.the.certificate.which |
93680 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 75 73 65 72 73 20 77 68 6f 20 61 74 74 65 6d 70 74 | .authenticates.users.who.attempt |
936a0 | 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 20 | .to.access.the.network.resource. |
936c0 | 74 68 72 6f 75 67 68 20 74 68 65 20 53 53 4c 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 20 54 68 65 | through.the.SSL.VPN.tunnels..The |
936e0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 63 72 65 61 74 65 20 | .following.commands.will.create. |
93700 | 61 20 73 65 6c 66 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 77 | a.self.signed.certificates.and.w |
93720 | 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 | ill.be.stored.in.configuration:. |
93740 | 57 65 20 6e 6f 77 20 75 74 69 6c 69 7a 65 20 60 74 75 6e 65 64 60 20 66 6f 72 20 64 79 6e 61 6d | We.now.utilize.`tuned`.for.dynam |
93760 | 69 63 20 72 65 73 6f 75 72 63 65 20 62 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 70 | ic.resource.balancing.based.on.p |
93780 | 72 6f 66 69 6c 65 73 2e 00 57 65 20 6f 6e 6c 79 20 61 6c 6c 6f 77 20 74 68 65 20 31 39 32 2e 31 | rofiles..We.only.allow.the.192.1 |
937a0 | 36 38 2e 32 2e 30 2f 32 34 20 73 75 62 6e 65 74 20 74 6f 20 74 72 61 76 65 6c 20 6f 76 65 72 20 | 68.2.0/24.subnet.to.travel.over. |
937c0 | 74 68 65 20 74 75 6e 6e 65 6c 00 57 65 20 6f 6e 6c 79 20 6e 65 65 64 20 61 20 73 69 6e 67 6c 65 | the.tunnel.We.only.need.a.single |
937e0 | 20 73 74 65 70 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 57 65 20 72 6f 75 | .step.for.this.interface:.We.rou |
93800 | 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 | te.all.traffic.for.the.192.168.2 |
93820 | 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 | .0/24.network.to.interface.`wg01 |
93840 | 60 00 57 65 20 75 73 65 20 61 20 76 6f 6e 74 61 69 6e 65 72 20 70 72 6f 76 69 64 69 6e 67 20 74 | `.We.use.a.vontainer.providing.t |
93860 | 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 20 72 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 | he.TACACS.serve.rin.this.example |
93880 | 2e 00 57 65 20 77 69 6c 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 74 72 61 66 66 69 63 20 63 6f | ..We.will.only.accept.traffic.co |
938a0 | 6d 6d 69 6e 67 20 66 72 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 70 72 6f 74 6f | mming.from.interface.eth0,.proto |
938c0 | 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 | col.tcp.and.destination.port.112 |
938e0 | 32 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 74 72 61 73 70 61 73 73 69 6e 67 | 2..All.other.traffic.traspassing |
93900 | 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 57 | .the.router.should.be.blocked..W |
93920 | 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 4f 70 65 6e 56 50 4e 20 75 73 69 6e 67 20 73 65 6c | e'll.configure.OpenVPN.using.sel |
93940 | 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 2c 20 61 6e 64 20 74 68 65 6e 20 | f-signed.certificates,.and.then. |
93960 | 64 69 73 63 75 73 73 20 74 68 65 20 6c 65 67 61 63 79 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 | discuss.the.legacy.pre-shared.ke |
93980 | 79 20 6d 6f 64 65 2e 00 57 65 27 6c 6c 20 75 73 65 20 74 68 65 20 49 4b 45 20 61 6e 64 20 45 53 | y.mode..We'll.use.the.IKE.and.ES |
939a0 | 50 20 67 72 6f 75 70 73 20 63 72 65 61 74 65 64 20 61 62 6f 76 65 20 66 6f 72 20 74 68 69 73 20 | P.groups.created.above.for.this. |
939c0 | 56 50 4e 2e 20 42 65 63 61 75 73 65 20 77 65 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 32 | VPN..Because.we.need.access.to.2 |
939e0 | 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 6e 65 74 73 20 6f 6e 20 74 68 65 20 66 61 72 20 73 69 | .different.subnets.on.the.far.si |
93a00 | 64 65 2c 20 77 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 74 | de,.we.will.need.two.different.t |
93a20 | 75 6e 6e 65 6c 73 2e 20 49 66 20 79 6f 75 20 63 68 61 6e 67 65 64 20 74 68 65 20 6e 61 6d 65 73 | unnels..If.you.changed.the.names |
93a40 | 20 6f 66 20 74 68 65 20 45 53 50 20 67 72 6f 75 70 20 61 6e 64 20 49 4b 45 20 67 72 6f 75 70 20 | .of.the.ESP.group.and.IKE.group. |
93a60 | 69 6e 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 73 74 65 70 2c 20 6d 61 6b 65 20 73 75 72 65 20 | in.the.previous.step,.make.sure. |
93a80 | 79 6f 75 20 75 73 65 20 74 68 65 20 63 6f 72 72 65 63 74 20 6e 61 6d 65 73 20 68 65 72 65 20 74 | you.use.the.correct.names.here.t |
93aa0 | 6f 6f 2e 00 57 65 62 20 50 72 6f 78 79 20 41 75 74 6f 64 69 73 63 6f 76 65 72 79 20 28 57 50 41 | oo..Web.Proxy.Autodiscovery.(WPA |
93ac0 | 44 29 20 55 52 4c 00 57 65 62 70 72 6f 78 79 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 | D).URL.Webproxy.Webserver.should |
93ae0 | 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 6f 72 74 2e 00 57 65 62 73 65 | .listen.on.specified.port..Webse |
93b00 | 72 76 65 72 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 | rver.should.only.listen.on.speci |
93b20 | 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 00 57 68 65 6e 20 4c 44 50 20 69 73 20 77 6f 72 6b | fied.IP.address.When.LDP.is.work |
93b40 | 69 6e 67 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 73 65 65 20 6c 61 62 | ing,.you.will.be.able.to.see.lab |
93b60 | 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 | el.information.in.the.outcome.of |
93b80 | 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 60 60 2e 20 42 65 73 69 64 65 73 20 74 68 61 74 | .``show.ip.route``..Besides.that |
93ba0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 73 70 65 | .information,.there.are.also.spe |
93bc0 | 63 69 66 69 63 20 2a 73 68 6f 77 2a 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 4c 44 50 3a 00 57 | cific.*show*.commands.for.LDP:.W |
93be0 | 68 65 6e 20 50 49 4d 20 72 65 63 65 69 76 65 73 20 61 20 72 65 67 69 73 74 65 72 20 70 61 63 6b | hen.PIM.receives.a.register.pack |
93c00 | 65 74 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c | et.the.source.of.the.packet.will |
93c20 | 20 62 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 | .be.compared.to.the.prefix-list. |
93c40 | 73 70 65 63 69 66 69 65 64 2c 20 61 6e 64 20 69 66 20 61 20 70 65 72 6d 69 74 20 69 73 20 72 65 | specified,.and.if.a.permit.is.re |
93c60 | 63 65 69 76 65 64 20 6e 6f 72 6d 61 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 63 6f 6e 74 69 6e 75 | ceived.normal.processing.continu |
93c80 | 65 73 2e 20 49 66 20 61 20 64 65 6e 79 20 69 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 74 68 | es..If.a.deny.is.returned.for.th |
93ca0 | 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 67 69 73 74 65 72 | e.source.address.of.the.register |
93cc0 | 20 70 61 63 6b 65 74 20 61 20 72 65 67 69 73 74 65 72 20 73 74 6f 70 20 6d 65 73 73 61 67 65 20 | .packet.a.register.stop.message. |
93ce0 | 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 2e 00 57 68 65 6e 20 56 52 46 73 | is.sent.to.the.source..When.VRFs |
93d00 | 20 61 72 65 20 75 73 65 64 20 69 74 20 69 73 20 6e 6f 74 20 6f 6e 6c 79 20 6d 61 6e 64 61 74 6f | .are.used.it.is.not.only.mandato |
93d20 | 72 79 20 74 6f 20 63 72 65 61 74 65 20 61 20 56 52 46 20 62 75 74 20 61 6c 73 6f 20 74 68 65 20 | ry.to.create.a.VRF.but.also.the. |
93d40 | 56 52 46 20 69 74 73 65 6c 66 20 6e 65 65 64 73 20 74 6f 20 62 65 20 61 73 73 69 67 6e 65 64 20 | VRF.itself.needs.to.be.assigned. |
93d60 | 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d | to.an.interface..When.a.``custom |
93d80 | 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 60 | ``.DynDNS.provider.is.used.the.` |
93da0 | 3c 73 65 72 76 65 72 3e 60 20 77 68 65 72 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 73 20 | <server>`.where.update.requests. |
93dc0 | 61 72 65 20 62 65 69 6e 67 20 73 65 6e 74 20 74 6f 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 | are.being.sent.to.must.be.specif |
93de0 | 69 65 64 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 | ied..When.a.``custom``.DynDNS.pr |
93e00 | 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 | ovider.is.used.the.protocol.used |
93e20 | 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 | .for.communicating.to.the.provid |
93e40 | 65 72 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f | er.must.be.specified.under.`<pro |
93e60 | 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 | tocol>`..See.the.embedded.comple |
93e80 | 74 69 6f 6e 20 68 65 6c 70 65 72 20 66 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 | tion.helper.for.available.protoc |
93ea0 | 6f 6c 73 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 | ols..When.a.``custom``.DynDNS.pr |
93ec0 | 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 | ovider.is.used,.the.protocol.use |
93ee0 | 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 | d.for.communicating.to.the.provi |
93f00 | 64 65 72 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 | der.must.be.specified.under.`<pr |
93f20 | 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c | otocol>`..See.the.embedded.compl |
93f40 | 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 61 62 6f 76 65 | etion.helper.when.entering.above |
93f60 | 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 | .command.for.available.protocols |
93f80 | 2e 00 57 68 65 6e 20 61 20 66 61 69 6c 6f 76 65 72 20 6f 63 63 75 72 73 20 69 6e 20 61 63 74 69 | ..When.a.failover.occurs.in.acti |
93fa0 | 76 65 2d 62 61 63 6b 75 70 20 6d 6f 64 65 2c 20 62 6f 6e 64 69 6e 67 20 77 69 6c 6c 20 69 73 73 | ve-backup.mode,.bonding.will.iss |
93fc0 | 75 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 6f | ue.one.or.more.gratuitous.ARPs.o |
93fe0 | 6e 20 74 68 65 20 6e 65 77 6c 79 20 61 63 74 69 76 65 20 73 6c 61 76 65 2e 20 4f 6e 65 20 67 72 | n.the.newly.active.slave..One.gr |
94000 | 61 74 75 69 74 6f 75 73 20 41 52 50 20 69 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 62 | atuitous.ARP.is.issued.for.the.b |
94020 | 6f 6e 64 69 6e 67 20 6d 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 65 61 63 68 | onding.master.interface.and.each |
94040 | 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 62 6f 76 | .VLAN.interfaces.configured.abov |
94060 | 65 20 69 74 2c 20 70 72 6f 76 69 64 65 64 20 74 68 61 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 | e.it,.provided.that.the.interfac |
94080 | 65 20 68 61 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 63 6f | e.has.at.least.one.IP.address.co |
940a0 | 6e 66 69 67 75 72 65 64 2e 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 69 73 73 75 65 64 | nfigured..Gratuitous.ARPs.issued |
940c0 | 20 66 6f 72 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 61 67 67 65 64 20 | .for.VLAN.interfaces.are.tagged. |
940e0 | 77 69 74 68 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 56 4c 41 4e 20 69 64 2e 00 57 68 | with.the.appropriate.VLAN.id..Wh |
94100 | 65 6e 20 61 20 6c 69 6e 6b 20 69 73 20 72 65 63 6f 6e 6e 65 63 74 65 64 20 6f 72 20 61 20 6e 65 | en.a.link.is.reconnected.or.a.ne |
94120 | 77 20 73 6c 61 76 65 20 6a 6f 69 6e 73 20 74 68 65 20 62 6f 6e 64 20 74 68 65 20 72 65 63 65 69 | w.slave.joins.the.bond.the.recei |
94140 | 76 65 20 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 61 6d 6f 6e | ve.traffic.is.redistributed.amon |
94160 | 67 20 61 6c 6c 20 61 63 74 69 76 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 | g.all.active.slaves.in.the.bond. |
94180 | 62 79 20 69 6e 69 74 69 61 74 69 6e 67 20 41 52 50 20 52 65 70 6c 69 65 73 20 77 69 74 68 20 74 | by.initiating.ARP.Replies.with.t |
941a0 | 68 65 20 73 65 6c 65 63 74 65 64 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 | he.selected.MAC.address.to.each. |
941c0 | 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 73 2e 20 54 68 65 20 75 70 64 65 6c 61 79 20 70 61 72 61 | of.the.clients..The.updelay.para |
941e0 | 6d 65 74 65 72 20 28 64 65 74 61 69 6c 65 64 20 62 65 6c 6f 77 29 20 6d 75 73 74 20 62 65 20 73 | meter.(detailed.below).must.be.s |
94200 | 65 74 20 74 6f 20 61 20 76 61 6c 75 65 20 65 71 75 61 6c 20 6f 72 20 67 72 65 61 74 65 72 20 74 | et.to.a.value.equal.or.greater.t |
94220 | 68 61 6e 20 74 68 65 20 73 77 69 74 63 68 27 73 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 | han.the.switch's.forwarding.dela |
94240 | 79 20 73 6f 20 74 68 61 74 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 74 | y.so.that.the.ARP.Replies.sent.t |
94260 | 6f 20 74 68 65 20 70 65 65 72 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 62 6c 6f 63 6b 65 64 20 | o.the.peers.will.not.be.blocked. |
94280 | 62 79 20 74 68 65 20 73 77 69 74 63 68 2e 00 57 68 65 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 | by.the.switch..When.a.packet.is. |
942a0 | 74 6f 20 62 65 20 73 65 6e 74 2c 20 69 74 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 67 6f 20 74 | to.be.sent,.it.will.have.to.go.t |
942c0 | 68 72 6f 75 67 68 20 74 68 61 74 20 71 75 65 75 65 2c 20 73 6f 20 74 68 65 20 70 61 63 6b 65 74 | hrough.that.queue,.so.the.packet |
942e0 | 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 20 6f 66 20 69 | .will.be.placed.at.the.tail.of.i |
94300 | 74 2e 20 57 68 65 6e 20 74 68 65 20 70 61 63 6b 65 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 67 6f | t..When.the.packet.completely.go |
94320 | 65 73 20 74 68 72 6f 75 67 68 20 69 74 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 64 65 71 75 65 75 | es.through.it,.it.will.be.dequeu |
94340 | 65 64 20 65 6d 70 74 79 69 6e 67 20 69 74 73 20 70 6c 61 63 65 20 69 6e 20 74 68 65 20 71 75 65 | ed.emptying.its.place.in.the.que |
94360 | 75 65 20 61 6e 64 20 62 65 69 6e 67 20 65 76 65 6e 74 75 61 6c 6c 79 20 68 61 6e 64 65 64 20 74 | ue.and.being.eventually.handed.t |
94380 | 6f 20 74 68 65 20 4e 49 43 20 74 6f 20 62 65 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 20 6f 75 | o.the.NIC.to.be.actually.sent.ou |
943a0 | 74 2e 00 57 68 65 6e 20 61 20 70 65 65 72 20 72 65 63 65 69 76 65 73 20 61 20 6d 61 72 74 69 61 | t..When.a.peer.receives.a.martia |
943c0 | 6e 20 6e 65 78 74 68 6f 70 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4e 4c 52 49 20 66 6f | n.nexthop.as.part.of.the.NLRI.fo |
943e0 | 72 20 61 20 72 6f 75 74 65 20 70 65 72 6d 69 74 20 74 68 65 20 6e 65 78 74 68 6f 70 20 74 6f 20 | r.a.route.permit.the.nexthop.to. |
94400 | 62 65 20 75 73 65 64 20 61 73 20 73 75 63 68 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 72 65 6a 65 | be.used.as.such,.instead.of.reje |
94420 | 63 74 69 6e 67 20 61 6e 64 20 72 65 73 65 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | cting.and.resetting.the.connecti |
94440 | 6f 6e 2e 00 57 68 65 6e 20 61 20 72 6f 75 74 65 20 66 61 69 6c 73 2c 20 61 20 72 6f 75 74 69 6e | on..When.a.route.fails,.a.routin |
94460 | 67 20 75 70 64 61 74 65 20 69 73 20 73 65 6e 74 20 74 6f 20 77 69 74 68 64 72 61 77 20 74 68 65 | g.update.is.sent.to.withdraw.the |
94480 | 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 27 73 20 72 6f 75 74 69 6e | .route.from.the.network's.routin |
944a0 | 67 20 74 61 62 6c 65 73 2e 20 57 68 65 6e 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 65 | g.tables..When.the.route.is.re-e |
944c0 | 6e 61 62 6c 65 64 2c 20 74 68 65 20 63 68 61 6e 67 65 20 69 6e 20 61 76 61 69 6c 61 62 69 6c 69 | nabled,.the.change.in.availabili |
944e0 | 74 79 20 69 73 20 61 6c 73 6f 20 61 64 76 65 72 74 69 73 65 64 2e 20 41 20 72 6f 75 74 65 20 74 | ty.is.also.advertised..A.route.t |
94500 | 68 61 74 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e | hat.continually.fails.and.return |
94520 | 73 20 72 65 71 75 69 72 65 73 20 61 20 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 6e 65 74 77 6f | s.requires.a.great.deal.of.netwo |
94540 | 72 6b 20 74 72 61 66 66 69 63 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 6e 65 74 77 6f 72 6b | rk.traffic.to.update.the.network |
94560 | 20 61 62 6f 75 74 20 74 68 65 20 72 6f 75 74 65 27 73 20 73 74 61 74 75 73 2e 00 57 68 65 6e 20 | .about.the.route's.status..When. |
94580 | 61 64 64 69 6e 67 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | adding.IPv6.routing.information. |
945a0 | 65 78 63 68 61 6e 67 65 20 66 65 61 74 75 72 65 20 74 6f 20 42 47 50 2e 20 54 68 65 72 65 20 77 | exchange.feature.to.BGP..There.w |
945c0 | 65 72 65 20 73 6f 6d 65 20 70 72 6f 70 6f 73 61 6c 73 2e 20 3a 61 62 62 72 3a 60 49 45 54 46 20 | ere.some.proposals..:abbr:`IETF. |
945e0 | 28 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 | (Internet.Engineering.Task.Force |
94600 | 29 60 20 3a 61 62 62 72 3a 60 49 44 52 20 28 49 6e 74 65 72 20 44 6f 6d 61 69 6e 20 52 6f 75 74 | )`.:abbr:`IDR.(Inter.Domain.Rout |
94620 | 69 6e 67 29 60 20 61 64 6f 70 74 65 64 20 61 20 70 72 6f 70 6f 73 61 6c 20 63 61 6c 6c 65 64 20 | ing)`.adopted.a.proposal.called. |
94640 | 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e | Multiprotocol.Extension.for.BGP. |
94660 | 20 54 68 65 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 69 73 20 64 65 73 63 72 69 62 65 64 20 | .The.specification.is.described. |
94680 | 69 6e 20 3a 72 66 63 3a 60 32 32 38 33 60 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 64 6f 65 | in.:rfc:`2283`..The.protocol.doe |
946a0 | 73 20 6e 6f 74 20 64 65 66 69 6e 65 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 49 74 20 64 | s.not.define.new.protocols..It.d |
946c0 | 65 66 69 6e 65 73 20 6e 65 77 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 65 78 69 73 74 69 6e | efines.new.attributes.to.existin |
946e0 | 67 20 42 47 50 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 65 78 63 68 61 6e 67 69 6e | g.BGP..When.it.is.used.exchangin |
94700 | 67 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 | g.IPv6.routing.information.it.is |
94720 | 20 63 61 6c 6c 65 64 20 42 47 50 2d 34 2b 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 | .called.BGP-4+..When.it.is.used. |
94740 | 66 6f 72 20 65 78 63 68 61 6e 67 69 6e 67 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 | for.exchanging.multicast.routing |
94760 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 4d 42 47 50 2e 00 | .information.it.is.called.MBGP.. |
94780 | 57 68 65 6e 20 61 6e 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 64 6f 65 | When.an.authoritative.server.doe |
947a0 | 73 20 6e 6f 74 20 61 6e 73 77 65 72 20 61 20 71 75 65 72 79 20 6f 72 20 73 65 6e 64 73 20 61 20 | s.not.answer.a.query.or.sends.a. |
947c0 | 72 65 70 6c 79 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 64 6f 65 73 20 6e 6f 74 20 6c 69 6b 65 | reply.the.recursor.does.not.like |
947e0 | 2c 20 69 74 20 69 73 20 74 68 72 6f 74 74 6c 65 64 2e 20 41 6e 79 20 73 65 72 76 65 72 73 20 6d | ,.it.is.throttled..Any.servers.m |
94800 | 61 74 63 68 69 6e 67 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6e 65 74 6d 61 73 6b 73 20 77 69 | atching.the.supplied.netmasks.wi |
94820 | 6c 6c 20 6e 65 76 65 72 20 62 65 20 74 68 72 6f 74 74 6c 65 64 2e 00 57 68 65 6e 20 63 6f 6e 66 | ll.never.be.throttled..When.conf |
94840 | 69 67 75 72 65 64 2c 20 50 50 50 6f 45 20 77 69 6c 6c 20 63 72 65 61 74 65 20 74 68 65 20 6e 65 | igured,.PPPoE.will.create.the.ne |
94860 | 63 65 73 73 61 72 79 20 56 4c 41 4e 73 20 77 68 65 6e 20 72 65 71 75 69 72 65 64 2e 20 4f 6e 63 | cessary.VLANs.when.required..Onc |
94880 | 65 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 63 61 6e 63 | e.the.user.session.has.been.canc |
948a0 | 65 6c 6c 65 64 20 61 6e 64 20 74 68 65 20 56 4c 41 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 | elled.and.the.VLAN.is.not.needed |
948c0 | 20 61 6e 79 6d 6f 72 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 69 74 20 61 67 | .anymore,.VyOS.will.remove.it.ag |
948e0 | 61 69 6e 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 52 61 6e 64 6f 6d 2d 44 | ain..When.configuring.a.Random-D |
94900 | 65 74 65 63 74 20 70 6f 6c 69 63 79 3a 20 2a 2a 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 | etect.policy:.**the.higher.the.p |
94920 | 72 65 63 65 64 65 6e 63 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 | recedence.number,.the.higher.the |
94940 | 20 70 72 69 6f 72 69 74 79 2a 2a 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f | .priority**..When.configuring.yo |
94960 | 75 72 20 66 69 6c 74 65 72 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 60 60 54 61 62 | ur.filter,.you.can.use.the.``Tab |
94980 | 60 60 20 6b 65 79 20 74 6f 20 73 65 65 20 74 68 65 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 | ``.key.to.see.the.many.different |
949a0 | 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 2e 00 57 | .parameters.you.can.configure..W |
949c0 | 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 70 6f 6c | hen.configuring.your.traffic.pol |
949e0 | 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 64 61 74 61 20 72 | icy,.you.will.have.to.set.data.r |
94a00 | 61 74 65 20 76 61 6c 75 65 73 2c 20 77 61 74 63 68 20 6f 75 74 20 74 68 65 20 75 6e 69 74 73 20 | ate.values,.watch.out.the.units. |
94a20 | 79 6f 75 20 61 72 65 20 6d 61 6e 61 67 69 6e 67 2c 20 69 74 20 69 73 20 65 61 73 79 20 74 6f 20 | you.are.managing,.it.is.easy.to. |
94a40 | 67 65 74 20 63 6f 6e 66 75 73 65 64 20 77 69 74 68 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 | get.confused.with.the.different. |
94a60 | 70 72 65 66 69 78 65 73 20 61 6e 64 20 73 75 66 66 69 78 65 73 20 79 6f 75 20 63 61 6e 20 75 73 | prefixes.and.suffixes.you.can.us |
94a80 | 65 2e 20 56 79 4f 53 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 73 68 6f 77 20 79 6f 75 20 74 68 65 | e..VyOS.will.always.show.you.the |
94aa0 | 20 64 69 66 66 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 00 57 68 | .different.units.you.can.use..Wh |
94ac0 | 65 6e 20 64 65 66 69 6e 69 6e 67 20 61 20 72 75 6c 65 2c 20 69 74 20 69 73 20 65 6e 61 62 6c 65 | en.defining.a.rule,.it.is.enable |
94ae0 | 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 69 74 20 69 | .by.default..In.some.cases,.it.i |
94b00 | 73 20 75 73 65 66 75 6c 20 74 6f 20 6a 75 73 74 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 75 6c | s.useful.to.just.disable.the.rul |
94b20 | 65 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 72 65 6d 6f 76 69 6e 67 20 69 74 2e 00 57 68 65 6e | e,.rather.than.removing.it..When |
94b40 | 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 | .defining.the.translated.address |
94b60 | 2c 20 63 61 6c 6c 65 64 20 60 60 62 61 63 6b 65 6e 64 73 60 60 2c 20 61 20 60 60 77 65 69 67 68 | ,.called.``backends``,.a.``weigh |
94b80 | 74 60 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 6c 65 74 | t``.must.be.configured..This.let |
94ba0 | 73 20 74 68 65 20 75 73 65 72 20 64 65 66 69 6e 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 20 64 | s.the.user.define.load.balance.d |
94bc0 | 69 73 74 72 69 62 75 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e | istribution.according.to.their.n |
94be0 | 65 65 64 73 2e 20 54 68 65 6d 20 73 75 6d 20 6f 66 20 61 6c 6c 20 74 68 65 20 77 65 69 67 68 74 | eeds..Them.sum.of.all.the.weight |
94c00 | 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 73 20 73 68 6f 75 6c | s.defined.for.the.backends.shoul |
94c20 | 64 20 62 65 20 65 71 75 61 6c 20 74 6f 20 31 30 30 2e 20 49 6e 20 6f 64 65 72 20 77 6f 72 64 73 | d.be.equal.to.100..In.oder.words |
94c40 | 2c 20 74 68 65 20 77 65 69 67 68 74 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 | ,.the.weight.defined.for.the.bac |
94c60 | 6b 65 6e 64 20 69 73 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 74 68 65 20 63 6f | kend.is.the.percentage.of.the.co |
94c80 | 6e 6e 65 63 74 69 6f 6e 73 20 74 68 61 74 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 73 75 63 68 | nnections.that.will.receive.such |
94ca0 | 20 62 61 63 6b 65 6e 64 2e 00 57 68 65 6e 20 64 65 71 75 65 75 69 6e 67 2c 20 65 61 63 68 20 68 | .backend..When.dequeuing,.each.h |
94cc0 | 61 73 68 2d 62 75 63 6b 65 74 20 77 69 74 68 20 64 61 74 61 20 69 73 20 71 75 65 72 69 65 64 20 | ash-bucket.with.data.is.queried. |
94ce0 | 69 6e 20 61 20 72 6f 75 6e 64 20 72 6f 62 69 6e 20 66 61 73 68 69 6f 6e 2e 20 59 6f 75 20 63 61 | in.a.round.robin.fashion..You.ca |
94d00 | 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 | n.configure.the.length.of.the.qu |
94d20 | 65 75 65 2e 00 57 68 65 6e 20 64 65 73 69 67 6e 69 6e 67 20 79 6f 75 72 20 4e 41 54 20 72 75 6c | eue..When.designing.your.NAT.rul |
94d40 | 65 73 65 74 20 6c 65 61 76 65 20 73 6f 6d 65 20 73 70 61 63 65 20 62 65 74 77 65 65 6e 20 63 6f | eset.leave.some.space.between.co |
94d60 | 6e 73 65 63 75 74 69 76 65 20 72 75 6c 65 73 20 66 6f 72 20 6c 61 74 65 72 20 65 78 74 65 6e 73 | nsecutive.rules.for.later.extens |
94d80 | 69 6f 6e 2e 20 59 6f 75 72 20 72 75 6c 65 73 65 74 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 69 | ion..Your.ruleset.could.start.wi |
94da0 | 74 68 20 6e 75 6d 62 65 72 73 20 31 30 2c 20 32 30 2c 20 33 30 2e 20 59 6f 75 20 74 68 75 73 20 | th.numbers.10,.20,.30..You.thus. |
94dc0 | 63 61 6e 20 6c 61 74 65 72 20 65 78 74 65 6e 64 20 74 68 65 20 72 75 6c 65 73 65 74 20 61 6e 64 | can.later.extend.the.ruleset.and |
94de0 | 20 70 6c 61 63 65 20 6e 65 77 20 72 75 6c 65 73 20 62 65 74 77 65 65 6e 20 65 78 69 73 74 69 6e | .place.new.rules.between.existin |
94e00 | 67 20 6f 6e 65 73 2e 00 57 68 65 6e 20 64 6f 69 6e 67 20 66 61 75 6c 74 20 69 73 6f 6c 61 74 69 | g.ones..When.doing.fault.isolati |
94e20 | 6f 6e 20 77 69 74 68 20 70 69 6e 67 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 66 69 72 73 74 20 72 | on.with.ping,.you.should.first.r |
94e40 | 75 6e 20 69 74 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 2c 20 74 6f 20 76 65 72 69 | un.it.on.the.local.host,.to.veri |
94e60 | 66 79 20 74 68 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 | fy.that.the.local.network.interf |
94e80 | 61 63 65 20 69 73 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 20 54 68 65 6e 2c 20 63 6f 6e | ace.is.up.and.running..Then,.con |
94ea0 | 74 69 6e 75 65 20 77 69 74 68 20 68 6f 73 74 73 20 61 6e 64 20 67 61 74 65 77 61 79 73 20 66 75 | tinue.with.hosts.and.gateways.fu |
94ec0 | 72 74 68 65 72 20 64 6f 77 6e 20 74 68 65 20 72 6f 61 64 20 74 6f 77 61 72 64 73 20 79 6f 75 72 | rther.down.the.road.towards.your |
94ee0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 52 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 61 6e | .destination..Round-trip.time.an |
94f00 | 64 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 73 74 61 74 69 73 74 69 63 73 20 61 72 65 20 63 6f 6d | d.packet.loss.statistics.are.com |
94f20 | 70 75 74 65 64 2e 00 57 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 | puted..When.first.connecting.to. |
94f40 | 74 68 65 20 6e 65 77 20 56 50 4e 20 74 68 65 20 75 73 65 72 20 69 73 20 70 72 6f 6d 70 74 65 64 | the.new.VPN.the.user.is.prompted |
94f60 | 20 74 6f 20 65 6e 74 65 72 20 70 72 6f 70 65 72 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 00 57 68 | .to.enter.proper.credentials..Wh |
94f80 | 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e | en.loading.the.certificate.you.n |
94fa0 | 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d | eed.to.manually.strip.the.``---- |
94fc0 | 2d 42 45 47 49 4e 20 43 45 52 54 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 | -BEGIN.CERTIFICATE-----``.and.`` |
94fe0 | 2d 2d 2d 2d 2d 45 4e 44 20 43 45 52 54 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 | -----END.CERTIFICATE-----``.tags |
95000 | 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 | ..Also,.the.certificate/key.need |
95020 | 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 | s.to.be.presented.in.a.single.li |
95040 | 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c | ne.without.line.breaks.(``\n``), |
95060 | 20 74 68 69 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c | .this.can.be.done.using.the.foll |
95080 | 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6c 6f 61 64 69 6e | owing.shell.command:.When.loadin |
950a0 | 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 | g.the.certificate.you.need.to.ma |
950c0 | 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 | nually.strip.the.``-----BEGIN.KE |
950e0 | 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d | Y-----``.and.``-----END.KEY----- |
95100 | 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b | ``.tags..Also,.the.certificate/k |
95120 | 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 | ey.needs.to.be.presented.in.a.si |
95140 | 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 | ngle.line.without.line.breaks.(` |
95160 | 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 | `\n``),.this.can.be.done.using.t |
95180 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e | he.following.shell.command:.When |
951a0 | 20 6d 61 74 68 63 69 6e 67 20 61 6c 6c 20 70 61 74 74 65 72 6e 73 20 64 65 66 69 6e 65 64 20 69 | .mathcing.all.patterns.defined.i |
951c0 | 6e 20 61 20 72 75 6c 65 2c 20 74 68 65 6e 20 64 69 66 66 65 72 65 6e 74 20 61 63 74 69 6f 6e 73 | n.a.rule,.then.different.actions |
951e0 | 20 63 61 6e 20 62 65 20 6d 61 64 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 64 72 6f 70 | .can.be.made..This.includes.drop |
95200 | 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 2c 20 6d 6f 64 69 66 79 69 6e 67 20 63 65 72 74 61 69 | ing.the.packet,.modifying.certai |
95220 | 6e 20 64 61 74 61 2c 20 6f 72 20 73 65 74 74 69 6e 67 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 | n.data,.or.setting.a.different.r |
95240 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 57 68 65 6e 20 6e 6f 20 6f 70 74 69 6f 6e 73 2f 70 61 | outing.table..When.no.options/pa |
95260 | 72 61 6d 65 74 65 72 73 20 61 72 65 20 75 73 65 64 2c 20 74 68 65 20 63 6f 6e 74 65 6e 74 73 20 | rameters.are.used,.the.contents. |
95280 | 6f 66 20 74 68 65 20 6d 61 69 6e 20 73 79 73 6c 6f 67 20 66 69 6c 65 20 61 72 65 20 64 69 73 70 | of.the.main.syslog.file.are.disp |
952a0 | 6c 61 79 65 64 2e 00 57 68 65 6e 20 6e 6f 2d 72 65 6c 65 61 73 65 20 69 73 20 73 70 65 63 69 66 | layed..When.no-release.is.specif |
952c0 | 69 65 64 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 73 65 6e 64 20 61 20 72 65 6c 65 61 73 65 20 | ied,.dhcp6c.will.send.a.release. |
952e0 | 6d 65 73 73 61 67 65 20 6f 6e 20 63 6c 69 65 6e 74 20 65 78 69 74 20 74 6f 20 70 72 65 76 65 6e | message.on.client.exit.to.preven |
95300 | 74 20 6c 6f 73 69 6e 67 20 61 6e 20 61 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 | t.losing.an.assigned.address.or. |
95320 | 70 72 65 66 69 78 2e 00 57 68 65 6e 20 70 72 6f 63 65 73 73 69 6e 67 20 70 61 63 6b 65 74 73 20 | prefix..When.processing.packets. |
95340 | 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 20 70 72 6f 63 65 73 73 20 74 68 65 20 6e 75 6d 62 | from.a.neighbor.process.the.numb |
95360 | 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 63 6f 6d 69 6e 67 20 61 74 20 6f 6e 65 20 74 69 | er.of.packets.incoming.at.one.ti |
95380 | 6d 65 20 62 65 66 6f 72 65 20 6d 6f 76 69 6e 67 20 6f 6e 20 74 6f 20 74 68 65 20 6e 65 78 74 20 | me.before.moving.on.to.the.next. |
953a0 | 74 61 73 6b 2e 00 57 68 65 6e 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 20 69 73 20 73 70 65 63 69 | task..When.rapid-commit.is.speci |
953c0 | 66 69 65 64 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 69 6e 63 6c 75 64 65 20 61 20 72 61 70 69 | fied,.dhcp6c.will.include.a.rapi |
953e0 | 64 2d 63 6f 6d 6d 69 74 20 6f 70 74 69 6f 6e 20 69 6e 20 73 6f 6c 69 63 69 74 20 6d 65 73 73 61 | d-commit.option.in.solicit.messa |
95400 | 67 65 73 20 61 6e 64 20 77 61 69 74 20 66 6f 72 20 61 6e 20 69 6d 6d 65 64 69 61 74 65 20 72 65 | ges.and.wait.for.an.immediate.re |
95420 | 70 6c 79 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 2e 00 57 | ply.instead.of.advertisements..W |
95440 | 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 63 61 | hen.remote.peer.does.not.have.ca |
95460 | 70 61 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 65 61 74 75 72 65 2c 20 72 65 | pability.negotiation.feature,.re |
95480 | 6d 6f 74 65 20 70 65 65 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 63 61 70 61 | mote.peer.will.not.send.any.capa |
954a0 | 62 69 6c 69 74 69 65 73 20 61 74 20 61 6c 6c 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 2c 20 62 | bilities.at.all..In.that.case,.b |
954c0 | 67 70 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 63 6f 6e 66 | gp.configures.the.peer.with.conf |
954e0 | 69 67 75 72 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 57 68 65 6e 20 72 75 6e 6e 69 6e | igured.capabilities..When.runnin |
95500 | 67 20 69 74 20 61 74 20 31 47 62 69 74 20 61 6e 64 20 6c 6f 77 65 72 2c 20 79 6f 75 20 6d 61 79 | g.it.at.1Gbit.and.lower,.you.may |
95520 | 20 77 61 6e 74 20 74 6f 20 72 65 64 75 63 65 20 74 68 65 20 60 71 75 65 75 65 2d 6c 69 6d 69 74 | .want.to.reduce.the.`queue-limit |
95540 | 60 20 74 6f 20 31 30 30 30 20 70 61 63 6b 65 74 73 20 6f 72 20 6c 65 73 73 2e 20 49 6e 20 72 61 | `.to.1000.packets.or.less..In.ra |
95560 | 74 65 73 20 6c 69 6b 65 20 31 30 4d 62 69 74 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f | tes.like.10Mbit,.you.may.want.to |
95580 | 20 73 65 74 20 69 74 20 74 6f 20 36 30 30 20 70 61 63 6b 65 74 73 2e 00 57 68 65 6e 20 73 65 6e | .set.it.to.600.packets..When.sen |
955a0 | 64 69 6e 67 20 50 49 4d 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 74 65 6c 6c 20 50 49 4d 20 | ding.PIM.hello.packets.tell.PIM. |
955c0 | 74 6f 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 76 36 20 73 65 63 6f 6e 64 61 72 79 20 61 64 64 | to.not.send.any.v6.secondary.add |
955e0 | 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 6e | resses.on.the.interface..This.in |
95600 | 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 61 6c 6c 6f 77 20 50 49 4d 20 74 | formation.is.used.to.allow.PIM.t |
95620 | 6f 20 75 73 65 20 76 36 20 6e 65 78 74 68 6f 70 73 20 69 6e 20 69 74 27 73 20 64 65 63 69 73 69 | o.use.v6.nexthops.in.it's.decisi |
95640 | 6f 6e 20 66 6f 72 20 3a 61 62 62 72 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 | on.for.:abbr:`RPF.(Reverse.Path. |
95660 | 46 6f 72 77 61 72 64 69 6e 67 29 60 20 6c 6f 6f 6b 75 70 20 69 66 20 74 68 69 73 20 6f 70 74 69 | Forwarding)`.lookup.if.this.opti |
95680 | 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 6c 74 29 2e 00 57 68 65 6e 20 73 65 | on.is.not.set.(default)..When.se |
956a0 | 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 22 | t.the.interface.is.enabled.for." |
956c0 | 64 69 61 6c 2d 6f 6e 2d 64 65 6d 61 6e 64 22 2e 00 57 68 65 6e 20 73 70 65 63 69 66 69 65 64 2c | dial-on-demand"..When.specified, |
956e0 | 20 74 68 69 73 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 6f 6e 6c 79 20 6b 65 79 77 6f 72 64 | .this.should.be.the.only.keyword |
95700 | 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 57 68 65 6e 20 73 74 61 72 74 69 6e | .for.the.interface..When.startin |
95720 | 67 20 61 20 56 79 4f 53 20 6c 69 76 65 20 73 79 73 74 65 6d 20 28 74 68 65 20 69 6e 73 74 61 6c | g.a.VyOS.live.system.(the.instal |
95740 | 6c 61 74 69 6f 6e 20 43 44 29 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6b 65 79 62 6f 61 | lation.CD).the.configured.keyboa |
95760 | 72 64 20 6c 61 79 6f 75 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 53 2e 20 41 73 20 74 68 69 | rd.layout.defaults.to.US..As.thi |
95780 | 73 20 6d 69 67 68 74 20 6e 6f 74 20 73 75 69 74 65 20 65 76 65 72 79 6f 6e 65 73 20 75 73 65 20 | s.might.not.suite.everyones.use. |
957a0 | 63 61 73 65 20 79 6f 75 20 63 61 6e 20 61 64 6a 75 73 74 20 74 68 65 20 75 73 65 64 20 6b 65 79 | case.you.can.adjust.the.used.key |
957c0 | 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f | board.layout.on.the.system.conso |
957e0 | 6c 65 2e 00 57 68 65 6e 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 63 6f 6e 73 | le..When.the.DHCP.server.is.cons |
95800 | 69 64 65 72 69 6e 67 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 6c 6c 6f 63 61 74 69 6e 67 20 61 | idering.dynamically.allocating.a |
95820 | 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 63 6c 69 65 6e 74 2c 20 69 74 20 66 69 72 | n.IP.address.to.a.client,.it.fir |
95840 | 73 74 20 73 65 6e 64 73 20 61 6e 20 49 43 4d 50 20 45 63 68 6f 20 72 65 71 75 65 73 74 20 28 61 | st.sends.an.ICMP.Echo.request.(a |
95860 | 20 70 69 6e 67 29 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 20 62 65 69 6e 67 20 61 73 73 69 | .ping).to.the.address.being.assi |
95880 | 67 6e 65 64 2e 20 49 74 20 77 61 69 74 73 20 66 6f 72 20 61 20 73 65 63 6f 6e 64 2c 20 61 6e 64 | gned..It.waits.for.a.second,.and |
958a0 | 20 69 66 20 6e 6f 20 49 43 4d 50 20 45 63 68 6f 20 72 65 73 70 6f 6e 73 65 20 68 61 73 20 62 65 | .if.no.ICMP.Echo.response.has.be |
958c0 | 65 6e 20 68 65 61 72 64 2c 20 69 74 20 61 73 73 69 67 6e 73 20 74 68 65 20 61 64 64 72 65 73 73 | en.heard,.it.assigns.the.address |
958e0 | 2e 00 57 68 65 6e 20 74 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 | ..When.the.close-action.option.i |
95900 | 73 20 73 65 74 20 6f 6e 20 74 68 65 20 70 65 65 72 73 2c 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | s.set.on.the.peers,.the.connecti |
95920 | 6f 6e 2d 74 79 70 65 20 6f 66 20 65 61 63 68 20 70 65 65 72 20 68 61 73 20 74 6f 20 63 6f 6e 73 | on-type.of.each.peer.has.to.cons |
95940 | 69 64 65 72 65 64 20 63 61 72 65 66 75 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 | idered.carefully..For.example,.i |
95960 | 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e 20 62 6f 74 68 20 70 65 65 72 | f.the.option.is.set.on.both.peer |
95980 | 73 2c 20 74 68 65 6e 20 62 6f 74 68 20 77 6f 75 6c 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 6e | s,.then.both.would.attempt.to.in |
959a0 | 69 74 69 61 74 65 20 61 6e 64 20 68 6f 6c 64 20 6f 70 65 6e 20 6d 75 6c 74 69 70 6c 65 20 63 6f | itiate.and.hold.open.multiple.co |
959c0 | 70 69 65 73 20 6f 66 20 65 61 63 68 20 63 68 69 6c 64 20 53 41 2e 20 54 68 69 73 20 6d 69 67 68 | pies.of.each.child.SA..This.migh |
959e0 | 74 20 6c 65 61 64 20 74 6f 20 69 6e 73 74 61 62 69 6c 69 74 79 20 6f 66 20 74 68 65 20 64 65 76 | t.lead.to.instability.of.the.dev |
95a00 | 69 63 65 20 6f 72 20 63 70 75 2f 6d 65 6d 6f 72 79 20 75 74 69 6c 69 7a 61 74 69 6f 6e 2e 00 57 | ice.or.cpu/memory.utilization..W |
95a20 | 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 | hen.the.command.above.is.set,.Vy |
95a40 | 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 65 76 65 72 79 20 49 43 4d 50 20 65 63 68 6f 20 72 | OS.will.answer.every.ICMP.echo.r |
95a60 | 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 64 20 74 6f 20 69 74 73 65 6c 66 2c 20 62 75 74 20 | equest.addressed.to.itself,.but. |
95a80 | 74 68 61 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 68 61 70 70 65 6e 20 69 66 20 6e 6f 20 6f 74 68 65 | that.will.only.happen.if.no.othe |
95aa0 | 72 20 72 75 6c 65 20 69 73 20 61 70 70 6c 69 65 64 20 64 72 6f 70 70 69 6e 67 20 6f 72 20 72 65 | r.rule.is.applied.dropping.or.re |
95ac0 | 6a 65 63 74 69 6e 67 20 6c 6f 63 61 6c 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 49 6e 20 | jecting.local.echo.requests..In. |
95ae0 | 63 61 73 65 20 6f 66 20 63 6f 6e 66 6c 69 63 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 | case.of.conflict,.VyOS.will.not. |
95b00 | 61 6e 73 77 65 72 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 00 57 68 65 6e 20 | answer.ICMP.echo.requests..When. |
95b20 | 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 | the.command.above.is.set,.VyOS.w |
95b40 | 69 6c 6c 20 61 6e 73 77 65 72 20 6e 6f 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 | ill.answer.no.ICMP.echo.request. |
95b60 | 61 64 64 72 65 73 73 65 64 20 74 6f 20 69 74 73 65 6c 66 20 61 74 20 61 6c 6c 2c 20 6e 6f 20 6d | addressed.to.itself.at.all,.no.m |
95b80 | 61 74 74 65 72 20 77 68 65 72 65 20 69 74 20 63 6f 6d 65 73 20 66 72 6f 6d 20 6f 72 20 77 68 65 | atter.where.it.comes.from.or.whe |
95ba0 | 74 68 65 72 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 72 75 6c 65 73 20 61 72 65 20 62 65 69 | ther.more.specific.rules.are.bei |
95bc0 | 6e 67 20 61 70 70 6c 69 65 64 20 74 6f 20 61 63 63 65 70 74 20 74 68 65 6d 2e 00 57 68 65 6e 20 | ng.applied.to.accept.them..When. |
95be0 | 74 68 65 20 76 72 72 70 20 67 72 6f 75 70 20 69 73 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 | the.vrrp.group.is.a.member.of.th |
95c00 | 65 20 73 79 6e 63 20 67 72 6f 75 70 20 77 69 6c 6c 20 75 73 65 20 6f 6e 6c 79 20 74 68 65 20 73 | e.sync.group.will.use.only.the.s |
95c20 | 79 6e 63 20 67 72 6f 75 70 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 2e 20 54 | ync.group.health.check.script..T |
95c40 | 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 | his.example.shows.how.to.configu |
95c60 | 72 65 20 69 74 20 66 6f 72 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 3a 00 57 68 65 6e 20 75 | re.it.for.the.sync.group:.When.u |
95c80 | 73 69 6e 67 20 44 48 43 50 20 74 6f 20 72 65 74 72 69 65 76 65 20 49 50 76 34 20 61 64 64 72 65 | sing.DHCP.to.retrieve.IPv4.addre |
95ca0 | 73 73 20 61 6e 64 20 69 66 20 6c 6f 63 61 6c 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 20 61 | ss.and.if.local.customizations.a |
95cc0 | 72 65 20 6e 65 65 64 65 64 2c 20 74 68 65 79 20 73 68 6f 75 6c 64 20 62 65 20 70 6f 73 73 69 62 | re.needed,.they.should.be.possib |
95ce0 | 6c 65 20 75 73 69 6e 67 20 74 68 65 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 68 6f 6f 6b | le.using.the.enter.and.exit.hook |
95d00 | 73 20 70 72 6f 76 69 64 65 64 2e 20 54 68 65 20 68 6f 6f 6b 20 64 69 72 73 20 61 72 65 3a 00 57 | s.provided..The.hook.dirs.are:.W |
95d20 | 68 65 6e 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 20 74 6f 20 6c 61 62 20 74 68 69 73 20 65 6e 76 | hen.using.EVE-NG.to.lab.this.env |
95d40 | 69 72 6f 6e 6d 65 6e 74 20 65 6e 73 75 72 65 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 65 31 | ironment.ensure.you.are.using.e1 |
95d60 | 30 30 30 20 61 73 20 74 68 65 20 64 65 73 69 72 65 64 20 64 72 69 76 65 72 20 66 6f 72 20 79 6f | 000.as.the.desired.driver.for.yo |
95d80 | 75 72 20 56 79 4f 53 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 68 65 6e | ur.VyOS.network.interfaces..When |
95da0 | 20 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 76 69 72 74 69 6f 20 6e 65 74 77 6f 72 | .using.the.regular.virtio.networ |
95dc0 | 6b 20 64 72 69 76 65 72 20 6e 6f 20 4c 41 43 50 20 50 44 55 73 20 77 69 6c 6c 20 62 65 20 73 65 | k.driver.no.LACP.PDUs.will.be.se |
95de0 | 6e 74 20 62 79 20 56 79 4f 53 20 74 68 75 73 20 74 68 65 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c | nt.by.VyOS.thus.the.port-channel |
95e00 | 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 63 6f 6d 65 20 61 63 74 69 76 65 21 00 57 68 65 6e 20 | .will.never.become.active!.When. |
95e20 | 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 | using.NAT.for.a.large.number.of. |
95e40 | 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 | host.systems.it.recommended.that |
95e60 | 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 | .a.minimum.of.1.IP.address.is.us |
95e80 | 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 20 32 35 36 20 68 6f 73 74 20 73 79 73 74 65 6d 73 | ed.to.NAT.every.256.host.systems |
95ea0 | 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 | ..This.is.due.to.the.limit.of.65 |
95ec0 | 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 | ,000.port.numbers.available.for. |
95ee0 | 75 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 | unique.translations.and.a.reserv |
95f00 | 69 6e 67 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f | ing.an.average.of.200-300.sessio |
95f20 | 6e 73 20 70 65 72 20 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 4e | ns.per.host.system..When.using.N |
95f40 | 41 54 20 66 6f 72 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 | AT.for.a.large.number.of.host.sy |
95f60 | 73 74 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 | stems.it.recommended.that.a.mini |
95f80 | 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e | mum.of.1.IP.address.is.used.to.N |
95fa0 | 41 54 20 65 76 65 72 79 20 32 35 36 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 73 79 73 74 65 6d | AT.every.256.private.host.system |
95fc0 | 73 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 | s..This.is.due.to.the.limit.of.6 |
95fe0 | 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | 5,000.port.numbers.available.for |
96000 | 20 75 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 | .unique.translations.and.a.reser |
96020 | 76 69 6e 67 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 | ving.an.average.of.200-300.sessi |
96040 | 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 | ons.per.host.system..When.using. |
96060 | 53 53 48 2c 20 6b 6e 6f 77 6e 2d 68 6f 73 74 73 2d 66 69 6c 65 2c 20 70 72 69 76 61 74 65 2d 6b | SSH,.known-hosts-file,.private-k |
96080 | 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 | ey-file.and.public-key-file.are. |
960a0 | 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 | mandatory.options..When.using.SS |
960c0 | 48 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b | H,.private-key-file.and.public-k |
960e0 | 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 | ey-file.are.mandatory.options..W |
96100 | 68 65 6e 20 75 73 69 6e 67 20 54 69 6d 65 2d 62 61 73 65 64 20 6f 6e 65 2d 74 69 6d 65 20 70 61 | hen.using.Time-based.one-time.pa |
96120 | 73 73 77 6f 72 64 20 28 54 4f 54 50 29 20 28 4f 54 50 20 48 4f 54 50 2d 74 69 6d 65 29 2c 20 62 | ssword.(TOTP).(OTP.HOTP-time),.b |
96140 | 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 74 69 6d 65 20 6f 6e 20 74 68 65 20 73 65 72 76 | e.sure.that.the.time.on.the.serv |
96160 | 65 72 20 61 6e 64 20 74 68 65 20 4f 54 50 20 74 6f 6b 65 6e 20 67 65 6e 65 72 61 74 6f 72 20 61 | er.and.the.OTP.token.generator.a |
96180 | 72 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 20 62 79 20 4e 54 50 00 57 68 65 6e 20 75 73 69 6e | re.synchronized.by.NTP.When.usin |
961a0 | 67 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 49 50 73 65 63 20 77 69 74 68 20 56 54 49 20 69 6e | g.site-to-site.IPsec.with.VTI.in |
961c0 | 74 65 72 66 61 63 65 73 2c 20 62 65 20 73 75 72 65 20 74 6f 20 64 69 73 61 62 6c 65 20 72 6f 75 | terfaces,.be.sure.to.disable.rou |
961e0 | 74 65 20 61 75 74 6f 69 6e 73 74 61 6c 6c 00 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 | te.autoinstall.When.using.the.IP |
96200 | 76 36 20 70 72 6f 74 6f 63 6f 6c 2c 20 4d 52 55 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 | v6.protocol,.MRU.must.be.at.leas |
96220 | 74 20 31 32 38 30 20 62 79 74 65 73 2e 00 57 68 65 6e 20 75 74 69 6c 69 7a 69 6e 67 20 56 79 4f | t.1280.bytes..When.utilizing.VyO |
96240 | 53 20 69 6e 20 61 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 77 69 74 68 20 41 72 69 73 74 61 20 | S.in.an.environment.with.Arista. |
96260 | 67 65 61 72 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 62 6c 75 65 20 70 72 69 6e 74 | gear.you.can.use.this.blue.print |
96280 | 20 61 73 20 61 6e 20 69 6e 69 74 69 61 6c 20 73 65 74 75 70 20 74 6f 20 67 65 74 20 61 6e 20 4c | .as.an.initial.setup.to.get.an.L |
962a0 | 41 43 50 20 62 6f 6e 64 20 2f 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 6f 70 65 72 61 74 69 6f | ACP.bond./.port-channel.operatio |
962c0 | 6e 61 6c 20 62 65 74 77 65 65 6e 20 74 68 6f 73 65 20 74 77 6f 20 64 65 76 69 63 65 73 2e 00 57 | nal.between.those.two.devices..W |
962e0 | 68 65 72 65 20 62 6f 74 68 20 72 6f 75 74 65 73 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 | here.both.routes.were.received.f |
96300 | 72 6f 6d 20 65 42 47 50 20 70 65 65 72 73 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 68 65 20 | rom.eBGP.peers,.then.prefer.the. |
96320 | 72 6f 75 74 65 20 77 68 69 63 68 20 69 73 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 2e | route.which.is.already.selected. |
96340 | 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 68 65 63 6b 20 69 73 20 6e 6f 74 20 61 70 70 | .Note.that.this.check.is.not.app |
96360 | 6c 69 65 64 20 69 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 63 6f | lied.if.:cfgcmd:`bgp.bestpath.co |
96380 | 6d 70 61 72 65 2d 72 6f 75 74 65 72 69 64 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 | mpare-routerid`.is.configured..T |
963a0 | 68 69 73 20 63 68 65 63 6b 20 63 61 6e 20 70 72 65 76 65 6e 74 20 73 6f 6d 65 20 63 61 73 65 73 | his.check.can.prevent.some.cases |
963c0 | 20 6f 66 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 | .of.oscillation..Where.firewall. |
963e0 | 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c | base.chain.to.configure.firewall |
96400 | 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 | .filtering.rules.for.transit.tra |
96420 | 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 | ffic.is.``set.firewall.ipv4.forw |
96440 | 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 | ard.filter....``,.which.happens. |
96460 | 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 | in.stage.5,.highlightened.with.r |
96480 | 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 | ed.color..Where.firewall.base.ch |
964a0 | 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 | ain.to.configure.firewall.filter |
964c0 | 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 | ing.rules.for.transit.traffic.is |
964e0 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c | .``set.firewall.ipv6.forward.fil |
96500 | 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 | ter....``,.which.happens.in.stag |
96520 | 65 20 35 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f | e.5,.highlightened.with.red.colo |
96540 | 72 2e 00 57 68 65 72 65 20 72 6f 75 74 65 73 20 77 69 74 68 20 61 20 4d 45 44 20 77 65 72 65 20 | r..Where.routes.with.a.MED.were. |
96560 | 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 41 53 2c 20 70 72 65 66 65 | received.from.the.same.AS,.prefe |
96580 | 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 4d 45 44 2e | r.the.route.with.the.lowest.MED. |
965a0 | 00 57 68 65 72 65 2c 20 6d 61 69 6e 20 6b 65 79 20 77 6f 72 64 73 20 61 6e 64 20 63 6f 6e 66 69 | .Where,.main.key.words.and.confi |
965c0 | 67 75 72 61 74 69 6f 6e 20 70 61 74 68 73 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | guration.paths.that.needs.to.be. |
965e0 | 75 6e 64 65 72 73 74 6f 6f 64 3a 00 57 68 65 74 68 65 72 20 74 6f 20 61 63 63 65 70 74 20 44 41 | understood:.Whether.to.accept.DA |
96600 | 44 20 28 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 29 2e | D.(Duplicate.Address.Detection). |
96620 | 00 57 68 69 63 68 20 67 65 6e 65 72 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | .Which.generates.the.following.c |
96640 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 68 69 63 68 20 72 65 73 75 6c 74 73 20 69 6e 20 61 | onfiguration:.Which.results.in.a |
96660 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 3a 00 57 68 69 63 68 20 77 6f 75 6c 64 20 67 | .configuration.of:.Which.would.g |
96680 | 65 6e 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 4e 41 54 20 64 65 73 74 69 6e | enerate.the.following.NAT.destin |
966a0 | 61 74 69 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 68 69 6c 65 20 2a 2a 6e 65 74 | ation.configuration:.While.**net |
966c0 | 77 6f 72 6b 20 67 72 6f 75 70 73 2a 2a 20 61 63 63 65 70 74 20 49 50 20 6e 65 74 77 6f 72 6b 73 | work.groups**.accept.IP.networks |
966e0 | 20 69 6e 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2c 20 73 70 65 63 69 66 69 63 20 49 50 20 61 | .in.CIDR.notation,.specific.IP.a |
96700 | 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 61 73 20 61 20 33 32 2d 62 69 | ddresses.can.be.added.as.a.32-bi |
96720 | 74 20 70 72 65 66 69 78 2e 20 49 66 20 79 6f 75 20 66 6f 72 65 73 65 65 20 74 68 65 20 6e 65 65 | t.prefix..If.you.foresee.the.nee |
96740 | 64 20 74 6f 20 61 64 64 20 61 20 6d 69 78 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 | d.to.add.a.mix.of.addresses.and. |
96760 | 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 69 73 20 72 | networks,.the.network.group.is.r |
96780 | 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 57 68 69 6c 65 20 6d 61 6e 79 20 61 72 65 20 61 77 61 72 65 | ecommended..While.many.are.aware |
967a0 | 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 73 20 61 20 43 6c 69 65 6e 74 20 56 50 4e 20 73 6f 6c 75 | .of.OpenVPN.as.a.Client.VPN.solu |
967c0 | 74 69 6f 6e 2c 20 69 74 20 69 73 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 61 73 20 | tion,.it.is.often.overlooked.as. |
967e0 | 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 20 64 75 65 20 | a.site-to-site.VPN.solution.due. |
96800 | 74 6f 20 6c 61 63 6b 20 6f 66 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 69 73 20 6d 6f 64 65 | to.lack.of.support.for.this.mode |
96820 | 20 69 6e 20 6d 61 6e 79 20 72 6f 75 74 65 72 20 70 6c 61 74 66 6f 72 6d 73 2e 00 57 68 69 6c 65 | .in.many.router.platforms..While |
96840 | 20 6e 6f 72 6d 61 6c 20 47 52 45 20 69 73 20 66 6f 72 20 6c 61 79 65 72 20 33 2c 20 47 52 45 54 | .normal.GRE.is.for.layer.3,.GRET |
96860 | 41 50 20 69 73 20 66 6f 72 20 6c 61 79 65 72 20 32 2e 20 47 52 45 54 41 50 20 63 61 6e 20 65 6e | AP.is.for.layer.2..GRETAP.can.en |
96880 | 63 61 70 73 75 6c 61 74 65 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 74 68 75 73 20 | capsulate.Ethernet.frames,.thus. |
968a0 | 69 74 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 20 77 69 74 68 20 6f 74 68 65 72 20 69 6e 74 | it.can.be.bridged.with.other.int |
968c0 | 65 72 66 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 | erfaces.to.create.datalink.layer |
968e0 | 20 73 65 67 6d 65 6e 74 73 20 74 68 61 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 72 65 6d | .segments.that.span.multiple.rem |
96900 | 6f 74 65 20 73 69 74 65 73 2e 00 57 68 69 74 65 6c 69 73 74 20 6f 66 20 61 64 64 72 65 73 73 65 | ote.sites..Whitelist.of.addresse |
96920 | 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2e 20 41 6c 77 61 79 73 20 61 6c 6c 6f 77 20 69 6e 62 | s.and.networks..Always.allow.inb |
96940 | 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 73 65 20 73 79 73 74 | ound.connections.from.these.syst |
96960 | 65 6d 73 2e 00 57 69 6c 6c 20 61 64 64 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 79 60 60 | ems..Will.add.``persistent-key`` |
96980 | 20 61 74 20 74 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 | .at.the.end.of.the.generated.Ope |
969a0 | 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 74 | nVPN.configuration..Please.use.t |
969c0 | 68 69 73 20 6f 6e 6c 79 20 61 73 20 6c 61 73 74 20 72 65 73 6f 72 74 20 2d 20 74 68 69 6e 67 73 | his.only.as.last.resort.-.things |
969e0 | 20 6d 69 67 68 74 20 62 72 65 61 6b 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 77 6f 6e 27 74 20 73 | .might.break.and.OpenVPN.won't.s |
96a00 | 74 61 72 74 20 69 66 20 79 6f 75 20 70 61 73 73 20 69 6e 76 61 6c 69 64 20 6f 70 74 69 6f 6e 73 | tart.if.you.pass.invalid.options |
96a20 | 2f 73 79 6e 74 61 78 2e 00 57 69 6c 6c 20 61 64 64 20 60 60 70 75 73 68 20 22 6b 65 65 70 61 6c | /syntax..Will.add.``push."keepal |
96a40 | 69 76 65 20 31 20 31 30 22 60 60 20 74 6f 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 | ive.1.10"``.to.the.generated.Ope |
96a60 | 6e 56 50 4e 20 63 6f 6e 66 69 67 20 66 69 6c 65 2e 00 57 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 | nVPN.config.file..Will.be.record |
96a80 | 65 64 20 6f 6e 6c 79 20 70 61 63 6b 65 74 73 2f 66 6c 6f 77 73 20 6f 6e 20 2a 2a 69 6e 63 6f 6d | ed.only.packets/flows.on.**incom |
96aa0 | 69 6e 67 2a 2a 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | ing**.direction.in.configured.in |
96ac0 | 74 65 72 66 61 63 65 73 20 62 79 20 64 65 66 61 75 6c 74 2e 00 57 69 6c 6c 20 64 72 6f 70 20 60 | terfaces.by.default..Will.drop.` |
96ae0 | 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 60 20 66 72 6f 6d 20 63 6c 69 | <shared-network-name>_`.from.cli |
96b00 | 65 6e 74 20 44 4e 53 20 72 65 63 6f 72 64 2c 20 75 73 69 6e 67 20 6f 6e 6c 79 20 74 68 65 20 68 | ent.DNS.record,.using.only.the.h |
96b20 | 6f 73 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 6e 61 6d 65 20 61 6e 64 20 64 6f 6d 61 69 6e 3a | ost.declaration.name.and.domain: |
96b40 | 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 57 69 6e 64 | .`<hostname>.<domain-name>`.Wind |
96b60 | 6f 77 73 20 31 30 20 64 6f 65 73 20 6e 6f 74 20 61 6c 6c 6f 77 20 61 20 75 73 65 72 20 74 6f 20 | ows.10.does.not.allow.a.user.to. |
96b80 | 63 68 6f 6f 73 65 20 74 68 65 20 69 6e 74 65 67 72 69 74 79 20 61 6e 64 20 65 6e 63 72 79 70 74 | choose.the.integrity.and.encrypt |
96ba0 | 69 6f 6e 20 63 69 70 68 65 72 73 20 75 73 69 6e 67 20 74 68 65 20 47 55 49 20 61 6e 64 20 69 74 | ion.ciphers.using.the.GUI.and.it |
96bc0 | 20 75 73 65 73 20 73 6f 6d 65 20 6f 6c 64 65 72 20 70 72 6f 70 6f 73 61 6c 73 20 62 79 20 64 65 | .uses.some.older.proposals.by.de |
96be0 | 66 61 75 6c 74 2e 20 41 20 75 73 65 72 20 63 61 6e 20 6f 6e 6c 79 20 63 68 61 6e 67 65 20 74 68 | fault..A.user.can.only.change.th |
96c00 | 65 20 70 72 6f 70 6f 73 61 6c 73 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 62 | e.proposals.on.the.client.side.b |
96c20 | 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 | y.configuring.the.IPSec.connecti |
96c40 | 6f 6e 20 70 72 6f 66 69 6c 65 20 76 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 00 57 69 6e 64 6f | on.profile.via.PowerShell..Windo |
96c60 | 77 73 20 49 6e 74 65 72 6e 65 74 20 4e 61 6d 65 20 53 65 72 76 69 63 65 20 28 57 49 4e 53 29 20 | ws.Internet.Name.Service.(WINS). |
96c80 | 73 65 72 76 65 72 73 20 70 72 6f 70 61 67 61 74 65 64 20 74 6f 20 63 6c 69 65 6e 74 00 57 69 6e | servers.propagated.to.client.Win |
96ca0 | 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 | dows.expects.the.server.name.to. |
96cc0 | 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 | be.also.used.in.the.server's.cer |
96ce0 | 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 | tificate.common.name,.so.it's.be |
96d00 | 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 | st.to.use.this.DNS.name.for.your |
96d20 | 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 00 57 69 72 65 47 | .VPN.connection..WireGuard.WireG |
96d40 | 75 61 72 64 20 43 6c 69 65 6e 74 20 51 52 20 63 6f 64 65 00 57 69 72 65 47 75 61 72 64 20 69 6e | uard.Client.QR.code.WireGuard.in |
96d60 | 74 65 72 66 61 63 65 20 69 74 73 65 6c 66 20 75 73 65 73 20 61 64 64 72 65 73 73 20 31 30 2e 31 | terface.itself.uses.address.10.1 |
96d80 | 2e 30 2e 31 2f 33 30 00 57 69 72 65 47 75 61 72 64 20 69 73 20 61 6e 20 65 78 74 72 65 6d 65 6c | .0.1/30.WireGuard.is.an.extremel |
96da0 | 79 20 73 69 6d 70 6c 65 20 79 65 74 20 66 61 73 74 20 61 6e 64 20 6d 6f 64 65 72 6e 20 56 50 4e | y.simple.yet.fast.and.modern.VPN |
96dc0 | 20 74 68 61 74 20 75 74 69 6c 69 7a 65 73 20 73 74 61 74 65 2d 6f 66 2d 74 68 65 2d 61 72 74 20 | .that.utilizes.state-of-the-art. |
96de0 | 63 72 79 70 74 6f 67 72 61 70 68 79 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 | cryptography..See.https://www.wi |
96e00 | 72 65 67 75 61 72 64 2e 63 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | reguard.com.for.more.information |
96e20 | 2e 00 57 69 72 65 47 75 61 72 64 20 72 65 71 75 69 72 65 73 20 74 68 65 20 67 65 6e 65 72 61 74 | ..WireGuard.requires.the.generat |
96e40 | 69 6f 6e 20 6f 66 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 | ion.of.a.keypair,.which.includes |
96e60 | 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 64 65 63 72 79 70 74 20 69 6e 63 6f 6d 69 | .a.private.key.to.decrypt.incomi |
96e80 | 6e 67 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 | ng.traffic,.and.a.public.key.for |
96ea0 | 20 70 65 65 72 28 73 29 20 74 6f 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2e 00 57 69 72 | .peer(s).to.encrypt.traffic..Wir |
96ec0 | 65 6c 65 73 73 20 63 68 61 6e 6e 65 6c 20 60 60 31 60 60 00 57 69 72 65 6c 65 73 73 20 64 65 76 | eless.channel.``1``.Wireless.dev |
96ee0 | 69 63 65 20 74 79 70 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 00 57 69 72 65 | ice.type.for.this.interface.Wire |
96f00 | 6c 65 73 73 20 68 61 72 64 77 61 72 65 20 64 65 76 69 63 65 20 75 73 65 64 20 61 73 20 75 6e 64 | less.hardware.device.used.as.und |
96f20 | 65 72 6c 61 79 20 72 61 64 69 6f 2e 00 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 00 57 69 | erlay.radio..Wireless.options.Wi |
96f40 | 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 20 28 53 74 61 74 69 6f 6e 2f 43 6c 69 65 6e 74 29 00 | reless.options.(Station/Client). |
96f60 | 57 69 72 65 6c 65 73 73 4d 6f 64 65 6d 20 28 57 57 41 4e 29 20 6f 70 74 69 6f 6e 73 00 57 69 74 | WirelessModem.(WWAN).options.Wit |
96f80 | 68 20 56 79 4f 53 20 62 65 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 69 6e | h.VyOS.being.based.on.top.of.Lin |
96fa0 | 75 78 20 61 6e 64 20 69 74 73 20 6b 65 72 6e 65 6c 2c 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 | ux.and.its.kernel,.the.Netfilter |
96fc0 | 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 74 68 65 20 69 70 74 61 62 6c 65 73 20 61 6e | .project.created.the.iptables.an |
96fe0 | 64 20 6e 6f 77 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 | d.now.the.successor.nftables.for |
97000 | 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 | .the.Linux.kernel.to.work.direct |
97020 | 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 | ly.on.the.data.flows..This.now.e |
97040 | 78 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 | xtends.the.concept.of.zone-based |
97060 | 20 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 | .security.to.allow.for.manipulat |
97080 | 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 | ing.the.data.at.multiple.stages. |
970a0 | 6f 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 | once.accepted.by.the.network.int |
970c0 | 65 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 | erface.and.the.driver.before.bei |
970e0 | 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | ng.handed.off.to.the.destination |
97100 | 20 28 65 2e 67 2e 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 | .(e.g..a.web.server.OR.another.d |
97120 | 65 76 69 63 65 29 2e 00 57 69 74 68 20 57 69 72 65 47 75 61 72 64 2c 20 61 20 52 6f 61 64 20 57 | evice)..With.WireGuard,.a.Road.W |
97140 | 61 72 72 69 6f 72 20 56 50 4e 20 63 6f 6e 66 69 67 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 | arrior.VPN.config.is.similar.to. |
97160 | 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 20 49 74 20 6a 75 73 74 20 6c 61 63 6b | a.site-to-site.VPN..It.just.lack |
97180 | 73 20 74 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 61 6e 64 20 60 60 70 6f 72 74 60 60 20 73 | s.the.``address``.and.``port``.s |
971a0 | 74 61 74 65 6d 65 6e 74 73 2e 00 57 69 74 68 20 74 68 65 20 60 60 6e 61 6d 65 2d 73 65 72 76 65 | tatements..With.the.``name-serve |
971c0 | 72 60 60 20 6f 70 74 69 6f 6e 20 73 65 74 20 74 6f 20 60 60 6e 6f 6e 65 60 60 2c 20 56 79 4f 53 | r``.option.set.to.``none``,.VyOS |
971e0 | 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 79 6f 75 | .will.ignore.the.nameservers.you |
97200 | 72 20 49 53 50 20 73 65 6e 64 73 20 79 6f 75 20 61 6e 64 20 74 68 75 73 20 79 6f 75 20 63 61 6e | r.ISP.sends.you.and.thus.you.can |
97220 | 20 66 75 6c 6c 79 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 6f 6e 65 73 20 79 6f 75 20 68 61 76 65 | .fully.rely.on.the.ones.you.have |
97240 | 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 57 69 74 68 20 74 68 65 | .configured.statically..With.the |
97260 | 20 66 69 72 65 77 61 6c 6c 20 79 6f 75 20 63 61 6e 20 73 65 74 20 72 75 6c 65 73 20 74 6f 20 61 | .firewall.you.can.set.rules.to.a |
97280 | 63 63 65 70 74 2c 20 64 72 6f 70 20 6f 72 20 72 65 6a 65 63 74 20 49 43 4d 50 20 69 6e 2c 20 6f | ccept,.drop.or.reject.ICMP.in,.o |
972a0 | 75 74 20 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 | ut.or.local.traffic..You.can.als |
972c0 | 6f 20 75 73 65 20 74 68 65 20 67 65 6e 65 72 61 6c 20 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c | o.use.the.general.**firewall.all |
972e0 | 2d 70 69 6e 67 2a 2a 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 66 | -ping**.command..This.command.af |
97300 | 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 28 70 61 63 6b 65 74 73 20 64 65 73 | fects.only.to.LOCAL.(packets.des |
97320 | 74 69 6e 65 64 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 6d 29 2c 20 6e 6f 74 | tined.for.your.VyOS.system),.not |
97340 | 20 74 6f 20 49 4e 20 6f 72 20 4f 55 54 20 74 72 61 66 66 69 63 2e 00 57 69 74 68 20 74 68 69 73 | .to.IN.or.OUT.traffic..With.this |
97360 | 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 6f 77 20 74 68 | .command,.you.can.specify.how.th |
97380 | 65 20 55 52 4c 20 70 61 74 68 20 73 68 6f 75 6c 64 20 62 65 20 6d 61 74 63 68 65 64 20 61 67 61 | e.URL.path.should.be.matched.aga |
973a0 | 69 6e 73 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 73 74 73 2e 00 57 69 74 68 20 7a 6f 6e | inst.incoming.requests..With.zon |
973c0 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 | e-based.firewalls.a.new.concept. |
973e0 | 77 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 64 64 74 69 6f 6e 20 74 6f 20 74 | was.implemented,.in.addtion.to.t |
97400 | 68 65 20 73 74 61 6e 64 61 72 64 20 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 | he.standard.in.and.out.traffic.f |
97420 | 6c 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 | lows,.a.local.flow.was.added..Th |
97440 | 69 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 | is.local.was.for.traffic.origina |
97460 | 74 69 6e 67 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 | ting.and.destined.to.the.router. |
97480 | 69 74 73 65 6c 66 2e 20 57 68 69 63 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 | itself..Which.means.additional.r |
974a0 | 75 6c 65 73 20 77 65 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 | ules.were.required.to.secure.the |
974c0 | 20 66 69 72 65 77 61 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 | .firewall.itself.from.the.networ |
974e0 | 6b 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 | k,.in.addition.to.the.existing.i |
97500 | 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 | nbound.and.outbound.rules.from.t |
97520 | 68 65 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 59 00 | he.traditional.concept.above..Y. |
97540 | 59 6f 75 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 61 6c 77 61 79 73 20 74 6f 20 61 | You.apply.a.rule-set.always.to.a |
97560 | 20 7a 6f 6e 65 20 66 72 6f 6d 20 61 6e 20 6f 74 68 65 72 20 7a 6f 6e 65 2c 20 69 74 20 69 73 20 | .zone.from.an.other.zone,.it.is. |
97580 | 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 63 72 65 61 74 65 20 6f 6e 65 20 72 75 6c 65 2d 73 | recommended.to.create.one.rule-s |
975a0 | 65 74 20 66 6f 72 20 65 61 63 68 20 7a 6f 6e 65 20 70 61 69 72 2e 00 59 6f 75 20 61 72 65 20 61 | et.for.each.zone.pair..You.are.a |
975c0 | 62 6c 65 20 74 6f 20 73 65 74 20 70 6f 73 74 2d 6c 6f 67 69 6e 20 6f 72 20 70 72 65 2d 6c 6f 67 | ble.to.set.post-login.or.pre-log |
975e0 | 69 6e 20 62 61 6e 6e 65 72 20 6d 65 73 73 61 67 65 73 20 74 6f 20 64 69 73 70 6c 61 79 20 63 65 | in.banner.messages.to.display.ce |
97600 | 72 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 79 73 74 65 | rtain.information.for.this.syste |
97620 | 6d 2e 00 59 6f 75 20 61 72 65 20 62 65 20 61 62 6c 65 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 | m..You.are.be.able.to.download.t |
97640 | 68 65 20 66 69 6c 65 73 20 75 73 69 6e 67 20 53 43 50 2c 20 6f 6e 63 65 20 74 68 65 20 53 53 48 | he.files.using.SCP,.once.the.SSH |
97660 | 20 73 65 72 76 69 63 65 20 68 61 73 20 62 65 65 6e 20 61 63 74 69 76 61 74 65 64 20 6c 69 6b 65 | .service.has.been.activated.like |
97680 | 20 73 6f 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 | .so.You.can.also.configure.the.t |
976a0 | 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 70 72 65 65 6d 70 74 69 6f 6e 20 77 69 74 68 | ime.interval.for.preemption.with |
976c0 | 20 74 68 65 20 22 70 72 65 65 6d 70 74 2d 64 65 6c 61 79 22 20 6f 70 74 69 6f 6e 2e 20 46 6f 72 | .the."preempt-delay".option..For |
976e0 | 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 73 65 74 20 74 68 65 20 68 69 67 68 65 72 20 70 72 69 6f | .example,.to.set.the.higher.prio |
97700 | 72 69 74 79 20 72 6f 75 74 65 72 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 69 6e 20 31 38 30 20 | rity.router.to.take.over.in.180. |
97720 | 73 65 63 6f 6e 64 73 2c 20 75 73 65 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 66 69 6e | seconds,.use:.You.can.also.defin |
97740 | 65 20 63 75 73 74 6f 6d 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 74 6f 20 61 70 70 6c 79 | e.custom.timeout.values.to.apply |
97760 | 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 73 75 62 73 65 74 20 6f 66 20 63 6f 6e 6e 65 63 74 | .to.a.specific.subset.of.connect |
97780 | 69 6f 6e 73 2c 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 | ions,.based.on.a.packet.and.flow |
977a0 | 20 73 65 6c 65 63 74 6f 72 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 79 6f 75 20 6e 65 65 64 20 | .selector..To.do.this,.you.need. |
977c0 | 74 6f 20 63 72 65 61 74 65 20 61 20 72 75 6c 65 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 70 61 | to.create.a.rule.defining.the.pa |
977e0 | 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 59 6f 75 20 63 61 6e 20 | cket.and.flow.selector..You.can. |
97800 | 61 6c 73 6f 20 6b 65 65 70 20 64 69 66 66 65 72 65 6e 74 20 44 4e 53 20 7a 6f 6e 65 20 75 70 64 | also.keep.different.DNS.zone.upd |
97820 | 61 74 65 64 2e 20 4a 75 73 74 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6f 6e 66 69 67 20 6e | ated..Just.create.a.new.config.n |
97840 | 6f 64 65 3a 20 60 60 73 65 74 20 73 65 72 76 69 63 65 20 64 6e 73 20 64 79 6e 61 6d 69 63 20 69 | ode:.``set.service.dns.dynamic.i |
97860 | 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 72 66 63 32 31 33 36 20 3c 6f 74 | nterface.<interface>.rfc2136.<ot |
97880 | 68 65 72 2d 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 60 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f | her-service-name>``.You.can.also |
978a0 | 20 6f 70 74 20 66 6f 72 20 75 73 69 6e 67 20 60 3a 3a 2f 36 34 60 20 61 73 20 70 72 65 66 69 78 | .opt.for.using.`::/64`.as.prefix |
978c0 | 20 66 6f 72 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 41 64 76 | .for.your.:abbr:`RAs.(Router.Adv |
978e0 | 65 72 74 69 73 65 6d 65 6e 74 73 29 60 2e 20 54 68 69 73 20 77 69 6c 6c 20 74 61 6b 65 20 74 68 | ertisements)`..This.will.take.th |
97900 | 65 20 49 50 76 36 20 47 55 41 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 | e.IPv6.GUA.prefix.assigned.to.th |
97920 | 65 20 69 6e 74 65 72 66 61 63 65 2c 20 77 68 69 63 68 20 63 6f 6d 65 73 20 69 6e 20 68 61 6e 64 | e.interface,.which.comes.in.hand |
97940 | 79 20 77 68 65 6e 20 75 73 69 6e 67 20 44 48 43 50 76 36 2d 50 44 2e 00 59 6f 75 20 63 61 6e 20 | y.when.using.DHCPv6-PD..You.can. |
97960 | 61 6c 73 6f 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c | also.specify.which.IPv6.access-l |
97980 | 69 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 | ist.should.be.shown:.You.can.als |
979a0 | 6f 20 74 75 6e 65 20 6d 75 6c 74 69 63 61 73 74 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 | o.tune.multicast.with.the.follow |
979c0 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 61 | ing.commands..You.can.also.use.a |
979e0 | 6e 6f 74 68 65 72 20 61 74 74 72 69 62 75 74 65 73 20 66 6f 72 20 69 64 65 6e 74 69 66 79 20 63 | nother.attributes.for.identify.c |
97a00 | 6c 69 65 6e 74 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2c 20 6c 69 6b 65 20 46 72 61 6d 65 | lient.for.disconnect,.like.Frame |
97a20 | 64 2d 49 50 2d 41 64 64 72 65 73 73 2c 20 41 63 63 74 2d 53 65 73 73 69 6f 6e 2d 49 64 2c 20 65 | d-IP-Address,.Acct-Session-Id,.e |
97a40 | 74 63 2e 20 52 65 73 75 6c 74 20 63 6f 6d 6d 61 6e 64 73 20 61 70 70 65 61 72 73 20 69 6e 20 6c | tc..Result.commands.appears.in.l |
97a60 | 6f 67 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 77 72 69 74 65 20 61 20 64 65 73 63 72 69 70 | og..You.can.also.write.a.descrip |
97a80 | 74 69 6f 6e 20 66 6f 72 20 61 20 66 69 6c 74 65 72 3a 00 59 6f 75 20 63 61 6e 20 61 73 73 69 67 | tion.for.a.filter:.You.can.assig |
97aa0 | 6e 20 6d 75 6c 74 69 70 6c 65 20 6b 65 79 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 75 73 65 72 | n.multiple.keys.to.the.same.user |
97ac0 | 20 62 79 20 75 73 69 6e 67 20 61 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 70 65 | .by.using.a.unique.identifier.pe |
97ae0 | 72 20 53 53 48 20 6b 65 79 2e 00 59 6f 75 20 63 61 6e 20 61 76 6f 69 64 20 74 68 65 20 22 6c 65 | r.SSH.key..You.can.avoid.the."le |
97b00 | 61 6b 79 22 20 62 65 68 61 76 69 6f 72 20 62 79 20 75 73 69 6e 67 20 61 20 66 69 72 65 77 61 6c | aky".behavior.by.using.a.firewal |
97b20 | 6c 20 70 6f 6c 69 63 79 20 74 68 61 74 20 64 72 6f 70 73 20 22 69 6e 76 61 6c 69 64 22 20 73 74 | l.policy.that.drops."invalid".st |
97b40 | 61 74 65 20 70 61 63 6b 65 74 73 2e 00 59 6f 75 20 63 61 6e 20 63 68 65 63 6b 20 79 6f 75 72 20 | ate.packets..You.can.check.your. |
97b60 | 4e 49 43 20 64 72 69 76 65 72 20 62 79 20 69 73 73 75 69 6e 67 20 3a 6f 70 63 6d 64 3a 60 73 68 | NIC.driver.by.issuing.:opcmd:`sh |
97b80 | 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 65 72 6e 65 74 20 65 74 68 30 20 70 68 79 73 | ow.interfaces.ethernet.eth0.phys |
97ba0 | 69 63 61 6c 20 7c 20 67 72 65 70 20 2d 69 20 64 72 69 76 65 72 60 00 59 6f 75 20 63 61 6e 20 63 | ical.|.grep.-i.driver`.You.can.c |
97bc0 | 6f 6e 66 69 67 75 72 65 20 61 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 | onfigure.a.policy.into.a.class.t |
97be0 | 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e | hrough.the.``queue-type``.settin |
97c00 | 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 63 6c 61 73 73 65 73 20 28 75 70 | g..You.can.configure.classes.(up |
97c20 | 20 74 6f 20 34 30 39 30 29 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 74 69 6e 67 | .to.4090).with.different.setting |
97c40 | 73 20 61 6e 64 20 61 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 77 68 69 63 68 20 77 69 6c | s.and.a.default.policy.which.wil |
97c60 | 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 79 20 74 72 61 66 66 69 63 20 6e 6f 74 20 | l.be.applied.to.any.traffic.not. |
97c80 | 6d 61 74 63 68 69 6e 67 20 61 6e 79 20 6f 66 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 63 | matching.any.of.the.configured.c |
97ca0 | 6c 61 73 73 65 73 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 | lasses..You.can.configure.multip |
97cc0 | 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 | le.interfaces.which.whould.parti |
97ce0 | 63 69 70 61 74 65 20 69 6e 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 | cipate.in.flow.accounting..You.c |
97d00 | 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 | an.configure.multiple.interfaces |
97d20 | 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 73 66 6c | .which.whould.participate.in.sfl |
97d40 | 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 6d 75 | ow.accounting..You.can.create.mu |
97d60 | 6c 74 69 70 6c 65 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 61 20 70 68 79 73 | ltiple.VLAN.interfaces.on.a.phys |
97d80 | 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 56 4c 41 4e 20 49 44 20 72 61 6e 67 | ical.interface..The.VLAN.ID.rang |
97da0 | 65 20 69 73 20 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 34 2e 00 59 6f 75 20 63 61 6e 20 64 69 73 | e.is.from.0.to.4094..You.can.dis |
97dc0 | 61 62 6c 65 20 61 20 56 52 52 50 20 67 72 6f 75 70 20 77 69 74 68 20 60 60 64 69 73 61 62 6c 65 | able.a.VRRP.group.with.``disable |
97de0 | 60 60 20 6f 70 74 69 6f 6e 3a 00 59 6f 75 20 63 61 6e 20 67 65 74 20 6d 6f 72 65 20 73 70 65 63 | ``.option:.You.can.get.more.spec |
97e00 | 69 66 69 63 20 4f 53 50 46 76 33 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 79 20 75 73 69 6e 67 | ific.OSPFv3.information.by.using |
97e20 | 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 59 6f 75 | .the.parameters.shown.below:.You |
97e40 | 20 63 61 6e 20 6e 6f 74 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 61 6c 6c 6f 77 65 64 | .can.not.assign.the.same.allowed |
97e60 | 2d 69 70 73 20 73 74 61 74 65 6d 65 6e 74 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 57 69 72 65 47 | -ips.statement.to.multiple.WireG |
97e80 | 75 61 72 64 20 70 65 65 72 73 2e 20 54 68 69 73 20 61 20 64 65 73 69 67 6e 20 64 65 63 69 73 69 | uard.peers..This.a.design.decisi |
97ea0 | 6f 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 | on..For.more.information.please. |
97ec0 | 63 68 65 63 6b 20 74 68 65 20 60 57 69 72 65 47 75 61 72 64 20 6d 61 69 6c 69 6e 67 20 6c 69 73 | check.the.`WireGuard.mailing.lis |
97ee0 | 74 60 5f 2e 00 59 6f 75 20 63 61 6e 20 6e 6f 74 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 56 | t`_..You.can.not.run.this.in.a.V |
97f00 | 52 52 50 20 73 65 74 75 70 2c 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 6d 44 4e 53 20 72 65 70 65 | RRP.setup,.if.multiple.mDNS.repe |
97f20 | 61 74 65 72 73 20 61 72 65 20 6c 61 75 6e 63 68 65 64 20 69 6e 20 61 20 73 75 62 6e 65 74 20 79 | aters.are.launched.in.a.subnet.y |
97f40 | 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 61 63 6b | ou.will.experience.the.mDNS.pack |
97f60 | 65 74 20 73 74 6f 72 6d 20 64 65 61 74 68 21 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 22 64 69 61 | et.storm.death!.You.can.now."dia |
97f80 | 6c 22 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 77 6f 69 6e 67 20 63 | l".the.peer.with.the.follwoing.c |
97fa0 | 6f 6d 6d 61 6e 64 3a 20 60 60 73 73 74 70 63 20 2d 2d 6c 6f 67 2d 6c 65 76 65 6c 20 34 20 2d 2d | ommand:.``sstpc.--log-level.4.-- |
97fc0 | 6c 6f 67 2d 73 74 64 65 72 72 20 2d 2d 75 73 65 72 20 76 79 6f 73 20 2d 2d 70 61 73 73 77 6f 72 | log-stderr.--user.vyos.--passwor |
97fe0 | 64 20 76 79 6f 73 20 76 70 6e 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 2d 2d 20 63 61 6c 6c 20 76 | d.vyos.vpn.example.com.--.call.v |
98000 | 79 6f 73 60 60 2e 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 53 53 48 20 69 6e 74 6f 20 79 6f 75 72 | yos``..You.can.now.SSH.into.your |
98020 | 20 73 79 73 74 65 6d 20 75 73 69 6e 67 20 61 64 6d 69 6e 2f 61 64 6d 69 6e 20 61 73 20 61 20 64 | .system.using.admin/admin.as.a.d |
98040 | 65 66 61 75 6c 74 20 75 73 65 72 20 73 75 70 70 6c 69 65 64 20 66 72 6f 6d 20 74 68 65 20 60 60 | efault.user.supplied.from.the.`` |
98060 | 6c 66 6b 65 69 74 65 6c 2f 74 61 63 61 63 73 5f 70 6c 75 73 3a 6c 61 74 65 73 74 60 60 20 63 6f | lfkeitel/tacacs_plus:latest``.co |
98080 | 6e 74 61 69 6e 65 72 2e 00 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 61 70 70 6c 79 20 6f 6e 65 20 | ntainer..You.can.only.apply.one. |
980a0 | 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 | policy.per.interface.and.directi |
980c0 | 6f 6e 2c 20 62 75 74 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 75 73 65 20 61 20 70 6f 6c 69 63 79 | on,.but.you.could.reuse.a.policy |
980e0 | 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 64 69 72 | .on.different.interfaces.and.dir |
98100 | 65 63 74 69 6f 6e 73 3a 00 59 6f 75 20 63 61 6e 20 72 75 6e 20 74 68 65 20 55 44 50 20 62 72 6f | ections:.You.can.run.the.UDP.bro |
98120 | 61 64 63 61 73 74 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 20 6f 6e 20 6d 75 6c 74 69 70 6c 65 | adcast.relay.service.on.multiple |
98140 | 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 73 75 62 6e 65 74 2e 20 | .routers.connected.to.a.subnet.. |
98160 | 54 68 65 72 65 20 69 73 20 2a 2a 4e 4f 2a 2a 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 | There.is.**NO**.UDP.broadcast.re |
98180 | 6c 61 79 20 70 61 63 6b 65 74 20 73 74 6f 72 6d 21 00 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 | lay.packet.storm!.You.can.specif |
981a0 | 79 20 61 20 73 74 61 74 69 63 20 44 48 43 50 20 61 73 73 69 67 6e 6d 65 6e 74 20 6f 6e 20 61 20 | y.a.static.DHCP.assignment.on.a. |
981c0 | 70 65 72 20 68 6f 73 74 20 62 61 73 69 73 2e 20 59 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 68 | per.host.basis..You.will.need.th |
981e0 | 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 74 61 74 69 6f 6e 20 61 6e 64 | e.MAC.address.of.the.station.and |
98200 | 20 79 6f 75 72 20 64 65 73 69 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 61 64 | .your.desired.IP.address..The.ad |
98220 | 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 73 75 62 6e 65 74 20 | dress.must.be.inside.the.subnet. |
98240 | 64 65 66 69 6e 69 74 69 6f 6e 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 | definition.but.can.be.outside.of |
98260 | 20 74 68 65 20 72 61 6e 67 65 20 73 74 61 74 65 6d 65 6e 74 2e 00 59 6f 75 20 63 61 6e 20 74 65 | .the.range.statement..You.can.te |
98280 | 73 74 20 74 68 65 20 53 4e 4d 50 76 33 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 66 72 6f 6d | st.the.SNMPv3.functionality.from |
982a0 | 20 61 6e 79 20 6c 69 6e 75 78 20 62 61 73 65 64 20 73 79 73 74 65 6d 2c 20 6a 75 73 74 20 72 75 | .any.linux.based.system,.just.ru |
982c0 | 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 6e 6d 70 77 | n.the.following.command:.``snmpw |
982e0 | 61 6c 6b 20 2d 76 20 33 20 2d 75 20 76 79 6f 73 20 2d 61 20 53 48 41 20 2d 41 20 76 79 6f 73 31 | alk.-v.3.-u.vyos.-a.SHA.-A.vyos1 |
98300 | 32 33 34 35 36 37 38 20 2d 78 20 41 45 53 20 2d 58 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d | 2345678.-x.AES.-X.vyos12345678.- |
98320 | 6c 20 61 75 74 68 50 72 69 76 20 31 39 32 2e 30 2e 32 2e 31 20 2e 31 60 60 00 59 6f 75 20 63 61 | l.authPriv.192.0.2.1..1``.You.ca |
98340 | 6e 20 75 73 65 20 77 69 6c 64 63 61 72 64 20 60 60 2a 60 60 20 74 6f 20 6d 61 74 63 68 20 61 20 | n.use.wildcard.``*``.to.match.a. |
98360 | 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 59 6f 75 20 63 61 6e 20 76 65 72 | group.of.interfaces..You.can.ver |
98380 | 69 66 79 20 79 6f 75 72 20 56 52 52 50 20 67 72 6f 75 70 20 73 74 61 74 75 73 20 77 69 74 68 20 | ify.your.VRRP.group.status.with. |
983a0 | 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 60 60 72 75 6e 20 73 68 6f 77 20 | the.operational.mode.``run.show. |
983c0 | 76 72 72 70 60 60 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 20 76 69 65 77 20 74 68 61 | vrrp``.command:.You.can.view.tha |
983e0 | 74 20 74 68 65 20 70 6f 6c 69 63 79 20 69 73 20 62 65 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 | t.the.policy.is.being.correctly. |
98400 | 28 6f 72 20 69 6e 63 6f 72 72 65 63 74 6c 79 29 20 75 74 69 6c 69 73 65 64 20 77 69 74 68 20 74 | (or.incorrectly).utilised.with.t |
98420 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 6e 6f 74 | he.following.command:.You.cannot |
98440 | 20 65 61 73 69 6c 79 20 72 65 64 69 73 74 72 69 62 75 74 65 20 49 50 76 36 20 72 6f 75 74 65 73 | .easily.redistribute.IPv6.routes |
98460 | 20 76 69 61 20 4f 53 50 46 76 33 20 6f 6e 20 61 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 | .via.OSPFv3.on.a.WireGuard.inter |
98480 | 66 61 63 65 20 6c 69 6e 6b 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 | face.link..This.requires.you.to. |
984a0 | 63 6f 6e 66 69 67 75 72 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 6d | configure.link-local.addresses.m |
984c0 | 61 6e 75 61 6c 6c 79 20 6f 6e 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 | anually.on.the.WireGuard.interfa |
984e0 | 63 65 73 2c 20 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 31 34 38 33 60 2e 00 59 6f 75 20 64 6f | ces,.see.:vytask:`T1483`..You.do |
98500 | 20 2a 2a 6e 6f 74 2a 2a 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 63 65 72 74 69 66 | .**not**.need.to.copy.the.certif |
98520 | 69 63 61 74 65 20 74 6f 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 20 49 6e 73 74 65 | icate.to.the.other.router..Inste |
98540 | 61 64 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 74 73 20 53 48 41 | ad,.you.need.to.retrieve.its.SHA |
98560 | 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 2e 20 4f 70 65 6e 56 50 4e 20 6f 6e 6c 79 20 73 | -256.fingerprint..OpenVPN.only.s |
98580 | 75 70 70 6f 72 74 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 73 20 61 74 20 | upports.SHA-256.fingerprints.at. |
985a0 | 74 68 65 20 6d 6f 6d 65 6e 74 2c 20 73 6f 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 | the.moment,.so.you.need.to.use.t |
985c0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 6d 61 79 20 61 6c | he.following.command:.You.may.al |
985e0 | 73 6f 20 61 64 64 69 74 69 6f 6e 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 69 6d 65 6f 75 | so.additionally.configure.timeou |
98600 | 74 73 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 63 6f 6e 6e 65 63 | ts.for.different.types.of.connec |
98620 | 74 69 6f 6e 73 2e 00 59 6f 75 20 6d 61 79 20 70 72 65 66 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f | tions..You.may.prefer.locally.co |
98640 | 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 74 68 61 6e 20 | nfigured.capabilities.more.than. |
98660 | 74 68 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 65 76 65 6e | the.negotiated.capabilities.even |
98680 | 20 74 68 6f 75 67 68 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 65 6e 64 73 20 63 61 70 61 62 69 | .though.remote.peer.sends.capabi |
986a0 | 6c 69 74 69 65 73 2e 20 49 66 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | lities..If.the.peer.is.configure |
986c0 | 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 6f 76 65 72 72 69 64 65 2d 63 61 70 61 62 69 6c 69 74 | d.by.:cfgcmd:`override-capabilit |
986e0 | 79 60 2c 20 56 79 4f 53 20 69 67 6e 6f 72 65 73 20 72 65 63 65 69 76 65 64 20 63 61 70 61 62 69 | y`,.VyOS.ignores.received.capabi |
98700 | 6c 69 74 69 65 73 20 74 68 65 6e 20 6f 76 65 72 72 69 64 65 20 6e 65 67 6f 74 69 61 74 65 64 20 | lities.then.override.negotiated. |
98720 | 63 61 70 61 62 69 6c 69 74 69 65 73 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 76 61 6c | capabilities.with.configured.val |
98740 | 75 65 73 2e 00 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 73 65 6e | ues..You.may.want.to.disable.sen |
98760 | 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 4f 50 45 4e | ding.Capability.Negotiation.OPEN |
98780 | 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 | .message.optional.parameter.to.t |
987a0 | 68 65 20 70 65 65 72 20 77 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f | he.peer.when.remote.peer.does.no |
987c0 | 74 20 69 6d 70 6c 65 6d 65 6e 74 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 | t.implement.Capability.Negotiati |
987e0 | 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 61 62 6c 65 2d | on..Please.use.:cfgcmd:`disable- |
98800 | 63 61 70 61 62 69 6c 69 74 79 2d 6e 65 67 6f 74 69 61 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 | capability-negotiation`.command. |
98820 | 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 66 65 61 74 75 72 65 2e 00 59 6f 75 20 6e 65 65 64 | to.disable.the.feature..You.need |
98840 | 20 32 20 73 65 70 61 72 61 74 65 20 66 69 72 65 77 61 6c 6c 73 20 74 6f 20 64 65 66 69 6e 65 20 | .2.separate.firewalls.to.define. |
98860 | 74 72 61 66 66 69 63 3a 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 69 72 65 63 74 69 6f 6e 2e | traffic:.one.for.each.direction. |
98880 | 00 59 6f 75 20 6e 65 65 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 69 6e 2d 6d 65 6d 6f | .You.need.to.disable.the.in-memo |
988a0 | 72 79 20 74 61 62 6c 65 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 65 6e 76 69 72 6f 6e 6d 65 | ry.table.in.production.environme |
988c0 | 6e 74 73 21 20 55 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 4d 54 20 28 49 6e 2d 4d 65 6d 6f 72 79 | nts!.Using.:abbr:`IMT.(In-Memory |
988e0 | 20 54 61 62 6c 65 29 60 20 6d 61 79 20 6c 65 61 64 20 74 6f 20 68 65 61 76 79 20 43 50 55 20 6f | .Table)`.may.lead.to.heavy.CPU.o |
98900 | 76 65 72 6c 6f 61 64 69 6e 67 20 61 6e 64 20 75 6e 73 74 61 62 6c 65 20 66 6c 6f 77 2d 61 63 63 | verloading.and.unstable.flow-acc |
98920 | 6f 75 6e 74 69 6e 67 20 62 65 68 61 76 69 6f 72 2e 00 59 6f 75 20 6e 65 65 64 20 79 6f 75 72 20 | ounting.behavior..You.need.your. |
98940 | 50 50 50 6f 45 20 63 72 65 64 65 6e 74 69 61 6c 73 20 66 72 6f 6d 20 79 6f 75 72 20 44 53 4c 20 | PPPoE.credentials.from.your.DSL. |
98960 | 49 53 50 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 2e 20 | ISP.in.order.to.configure.this.. |
98980 | 54 68 65 20 75 73 75 61 6c 20 75 73 65 72 6e 61 6d 65 20 69 73 20 69 6e 20 74 68 65 20 66 6f 72 | The.usual.username.is.in.the.for |
989a0 | 6d 20 6f 66 20 6e 61 6d 65 40 68 6f 73 74 2e 6e 65 74 20 62 75 74 20 6d 61 79 20 76 61 72 79 20 | m.of.name@host.net.but.may.vary. |
989c0 | 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 49 53 50 2e 00 59 6f 75 20 6e 6f 77 20 73 65 65 20 74 68 | depending.on.ISP..You.now.see.th |
989e0 | 65 20 6c 6f 6e 67 65 72 20 41 53 20 70 61 74 68 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 64 64 | e.longer.AS.path..You.should.add |
98a00 | 20 61 20 66 69 72 65 77 61 6c 6c 20 74 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .a.firewall.to.your.configuratio |
98a20 | 6e 20 61 62 6f 76 65 20 61 73 20 77 65 6c 6c 20 62 79 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 | n.above.as.well.by.assigning.it. |
98a40 | 74 6f 20 74 68 65 20 70 70 70 6f 65 30 20 69 74 73 65 6c 66 20 61 73 20 73 68 6f 77 6e 20 68 65 | to.the.pppoe0.itself.as.shown.he |
98a60 | 72 65 3a 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 | re:.You.should.also.ensure.that. |
98a80 | 74 68 65 20 4f 55 54 49 53 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 | the.OUTISDE_LOCAL.firewall.group |
98aa0 | 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 | .is.applied.to.the.WAN.interface |
98ac0 | 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 73 68 | .and.a.direction.(local)..You.sh |
98ae0 | 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 53 49 44 | ould.also.ensure.that.the.OUTSID |
98b00 | 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 | E_LOCAL.firewall.group.is.applie |
98b20 | 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 | d.to.the.WAN.interface.and.a.dir |
98b40 | 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 6e 65 | ection.(local)..You.will.also.ne |
98b60 | 65 64 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 70 65 65 72 20 61 | ed.the.public.key.of.your.peer.a |
98b80 | 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 28 73 29 20 79 6f 75 20 77 61 6e | s.well.as.the.network(s).you.wan |
98ba0 | 74 20 74 6f 20 74 75 6e 6e 65 6c 20 28 61 6c 6c 6f 77 65 64 2d 69 70 73 29 20 74 6f 20 63 6f 6e | t.to.tunnel.(allowed-ips).to.con |
98bc0 | 66 69 67 75 72 65 20 61 20 57 69 72 65 47 75 61 72 64 20 74 75 6e 6e 65 6c 2e 20 54 68 65 20 70 | figure.a.WireGuard.tunnel..The.p |
98be0 | 75 62 6c 69 63 20 6b 65 79 20 62 65 6c 6f 77 20 69 73 20 61 6c 77 61 79 73 20 74 68 65 20 70 75 | ublic.key.below.is.always.the.pu |
98c00 | 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 79 6f 75 72 20 70 65 65 72 2c 20 6e 6f 74 20 79 6f 75 | blic.key.from.your.peer,.not.you |
98c20 | 72 20 6c 6f 63 61 6c 20 6f 6e 65 2e 00 59 6f 75 72 20 49 53 50 73 20 6d 6f 64 65 6d 20 69 73 20 | r.local.one..Your.ISPs.modem.is. |
98c40 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 70 6f 72 74 20 60 60 65 74 68 30 60 60 20 6f 66 20 79 6f | connected.to.port.``eth0``.of.yo |
98c60 | 75 72 20 56 79 4f 53 20 62 6f 78 2e 00 59 6f 75 72 20 4c 41 4e 20 63 6f 6e 6e 65 63 74 65 64 20 | ur.VyOS.box..Your.LAN.connected. |
98c80 | 6f 6e 20 65 74 68 30 20 75 73 65 73 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 62 | on.eth0.uses.prefix.``2001:db8:b |
98ca0 | 65 65 66 3a 32 3a 3a 2f 36 34 60 60 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 65 | eef:2::/64``.with.the.router.bee |
98cc0 | 69 6e 67 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a 3a 31 60 60 00 5a 65 62 72 61 | ing.``2001:db8:beef:2::1``.Zebra |
98ce0 | 20 73 75 70 70 6f 72 74 73 20 70 72 65 66 69 78 2d 6c 69 73 74 73 20 61 6e 64 20 52 6f 75 74 65 | .supports.prefix-lists.and.Route |
98d00 | 20 4d 61 70 73 73 20 74 6f 20 6d 61 74 63 68 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 | .Mapss.to.match.routes.received. |
98d20 | 66 72 6f 6d 20 6f 74 68 65 72 20 46 52 52 20 63 6f 6d 70 6f 6e 65 6e 74 73 2e 20 54 68 65 20 70 | from.other.FRR.components..The.p |
98d40 | 65 72 6d 69 74 2f 64 65 6e 79 20 66 61 63 69 6c 69 74 69 65 73 20 70 72 6f 76 69 64 65 64 20 62 | ermit/deny.facilities.provided.b |
98d60 | 79 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 | y.these.commands.can.be.used.to. |
98d80 | 66 69 6c 74 65 72 20 77 68 69 63 68 20 72 6f 75 74 65 73 20 7a 65 62 72 61 20 77 69 6c 6c 20 69 | filter.which.routes.zebra.will.i |
98da0 | 6e 73 74 61 6c 6c 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 5a 65 62 72 61 2f 4b 65 72 6e | nstall.in.the.kernel..Zebra/Kern |
98dc0 | 65 6c 20 72 6f 75 74 65 20 66 69 6c 74 65 72 69 6e 67 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 | el.route.filtering.Zone.Based.Fi |
98de0 | 72 65 77 61 6c 6c 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c 20 28 44 65 70 72 | rewall.Zone.Based.Firewall.(Depr |
98e00 | 65 63 61 74 65 64 29 00 5a 6f 6e 65 2d 50 6f 6c 69 63 79 20 4f 76 65 72 76 69 65 77 00 5a 6f 6e | ecated).Zone-Policy.Overview.Zon |
98e20 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 00 5b 41 2e 42 2e 43 2e 44 5d 20 e2 80 93 20 6c | e-based.firewall.[A.B.C.D].....l |
98e40 | 69 6e 6b 2d 73 74 61 74 65 2d 69 64 2e 20 57 69 74 68 20 74 68 69 73 20 73 70 65 63 69 66 69 65 | ink-state-id..With.this.specifie |
98e60 | 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 70 6f 72 74 69 6f 6e 20 6f | d.the.command.displays.portion.o |
98e80 | 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 74 68 61 74 20 69 | f.the.network.environment.that.i |
98ea0 | 73 20 62 65 69 6e 67 20 64 65 73 63 72 69 62 65 64 20 62 79 20 74 68 65 20 61 64 76 65 72 74 69 | s.being.described.by.the.adverti |
98ec0 | 73 65 6d 65 6e 74 2e 20 54 68 65 20 76 61 6c 75 65 20 65 6e 74 65 72 65 64 20 64 65 70 65 6e 64 | sement..The.value.entered.depend |
98ee0 | 73 20 6f 6e 20 74 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 e2 80 99 73 20 4c 53 20 74 79 | s.on.the.advertisement...s.LS.ty |
98f00 | 70 65 2e 20 49 74 20 6d 75 73 74 20 62 65 20 65 6e 74 65 72 65 64 20 69 6e 20 74 68 65 20 66 6f | pe..It.must.be.entered.in.the.fo |
98f20 | 72 6d 20 6f 66 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 60 31 2e 20 43 72 65 61 74 65 20 | rm.of.an.IP.address..`1..Create. |
98f40 | 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 60 5f 00 60 32 2e 20 41 64 64 20 72 65 67 65 78 | an.event.handler`_.`2..Add.regex |
98f60 | 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 | .to.the.script`_.`3..Add.a.full. |
98f80 | 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 34 2e 20 41 64 64 20 6f 70 74 | path.to.the.script`_.`4..Add.opt |
98fa0 | 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 60 5f 00 60 3c 6e 61 6d 65 3e 60 20 6d 75 73 74 | ional.parameters`_.`<name>`.must |
98fc0 | 20 62 65 20 69 64 65 6e 74 69 63 61 6c 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 21 00 60 60 24 | .be.identical.on.both.sides!.``$ |
98fe0 | 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 | .tail.-n.+2.ca.key.|.head.-n.-1. |
99000 | 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 | |.tr.-d.'\n'``.``$.tail.-n.+2.ca |
99020 | 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 | .pem.|.head.-n.-1.|.tr.-d.'\n'`` |
99040 | 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 6b 65 79 20 7c 20 68 65 61 64 20 | .``$.tail.-n.+2.cert.key.|.head. |
99060 | 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e | -n.-1.|.tr.-d.'\n'``.``$.tail.-n |
99080 | 20 2b 32 20 63 65 72 74 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d | .+2.cert.pem.|.head.-n.-1.|.tr.- |
990a0 | 64 20 27 5c 6e 27 60 60 00 60 60 2b 60 60 20 73 75 63 63 65 73 73 66 75 6c 00 60 60 2d 60 60 20 | d.'\n'``.``+``.successful.``-``. |
990c0 | 66 61 69 6c 65 64 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c | failed.``/config/scripts/dhcp-cl |
990e0 | 69 65 6e 74 2f 70 6f 73 74 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 2f 63 6f 6e 66 69 67 2f 73 | ient/post-hooks.d/``.``/config/s |
99100 | 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 72 65 2d 68 6f 6f 6b 73 2e 64 2f 60 | cripts/dhcp-client/pre-hooks.d/` |
99120 | 60 00 60 60 30 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 30 60 60 20 2d 20 32 30 20 | `.``0.pool.ntp.org``.``0``.-.20. |
99140 | 6f 72 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 28 64 65 66 61 75 6c 74 | or.40.MHz.channel.width.(default |
99160 | 29 00 60 60 30 60 60 3a 20 4e 6f 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 2c 20 73 74 72 69 63 | ).``0``:.No.replay.window,.stric |
99180 | 74 20 63 68 65 63 6b 00 60 60 31 2d 34 32 39 34 39 36 37 32 39 35 60 60 3a 20 4e 75 6d 62 65 72 | t.check.``1-4294967295``:.Number |
991a0 | 20 6f 66 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 63 6f 75 6c 64 20 62 65 20 6d 69 73 6f 72 64 | .of.packets.that.could.be.misord |
991c0 | 65 72 65 64 00 60 60 31 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 31 31 35 32 30 30 | ered.``1.pool.ntp.org``.``115200 |
991e0 | 60 60 20 2d 20 31 31 35 2c 32 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 73 65 | ``.-.115,200.bps.(default.for.se |
99200 | 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 29 00 60 60 31 32 30 30 60 60 20 2d 20 31 32 30 30 20 62 70 | rial.console).``1200``.-.1200.bp |
99220 | 73 00 60 60 31 39 32 2e 31 36 38 2e 32 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 | s.``192.168.2.254``.IP.addreess. |
99240 | 6f 6e 20 56 79 4f 53 20 65 74 68 32 20 66 72 6f 6d 20 49 53 50 32 00 60 60 31 39 32 30 30 60 60 | on.VyOS.eth2.from.ISP2.``19200`` |
99260 | 20 2d 20 31 39 2c 32 30 30 20 62 70 73 00 60 60 31 60 60 20 2d 20 38 30 20 4d 48 7a 20 63 68 61 | .-.19,200.bps.``1``.-.80.MHz.cha |
99280 | 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 32 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 | nnel.width.``2.pool.ntp.org``.`` |
992a0 | 32 30 33 2e 30 2e 31 31 33 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 | 203.0.113.254``.IP.addreess.on.V |
992c0 | 79 4f 53 20 65 74 68 31 20 66 72 6f 6d 20 49 53 50 31 00 60 60 32 34 30 30 60 60 20 2d 20 32 34 | yOS.eth1.from.ISP1.``2400``.-.24 |
992e0 | 30 30 20 62 70 73 00 60 60 32 60 60 20 2d 20 31 36 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 | 00.bps.``2``.-.160.MHz.channel.w |
99300 | 69 64 74 68 00 60 60 33 38 34 30 30 60 60 20 2d 20 33 38 2c 34 30 30 20 62 70 73 20 28 64 65 66 | idth.``38400``.-.38,400.bps.(def |
99320 | 61 75 6c 74 20 66 6f 72 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 29 00 60 60 33 60 60 20 2d 20 38 30 | ault.for.Xen.console).``3``.-.80 |
99340 | 2b 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 34 38 30 30 60 60 20 2d | +80.MHz.channel.width.``4800``.- |
99360 | 20 34 38 30 30 20 62 70 73 00 60 60 35 37 36 30 30 60 60 20 2d 20 35 37 2c 36 30 30 20 62 70 73 | .4800.bps.``57600``.-.57,600.bps |
99380 | 00 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 60 20 69 73 20 74 68 65 20 77 65 6c 6c 2d 6b 6e | .``64:ff9b::/96``.is.the.well-kn |
993a0 | 6f 77 6e 20 70 72 65 66 69 78 20 66 6f 72 20 49 50 76 34 2d 65 6d 62 65 64 64 65 64 20 49 50 76 | own.prefix.for.IPv4-embedded.IPv |
993c0 | 36 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 65 20 70 72 65 66 69 78 20 69 73 20 75 73 65 64 20 | 6.addresses..The.prefix.is.used. |
993e0 | 74 6f 20 72 65 70 72 65 73 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 61 | to.represent.IPv4.addresses.in.a |
99400 | 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 6d 61 74 2e 20 54 68 65 20 49 50 76 34 20 | n.IPv6.address.format..The.IPv4. |
99420 | 61 64 64 72 65 73 73 20 69 73 20 65 6e 63 6f 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 77 2d 6f 72 | address.is.encoded.in.the.low-or |
99440 | 64 65 72 20 33 32 20 62 69 74 73 20 6f 66 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 2e | der.32.bits.of.the.IPv6.address. |
99460 | 20 54 68 65 20 68 69 67 68 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 61 72 65 20 73 65 74 20 | .The.high-order.32.bits.are.set. |
99480 | 74 6f 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 36 34 3a 66 66 39 62 | to.the.well-known.prefix.64:ff9b |
994a0 | 3a 3a 2f 39 36 2e 00 60 60 38 30 32 2e 33 61 64 60 60 20 2d 20 49 45 45 45 20 38 30 32 2e 33 61 | ::/96..``802.3ad``.-.IEEE.802.3a |
994c0 | 64 20 44 79 6e 61 6d 69 63 20 6c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 20 43 72 65 61 | d.Dynamic.link.aggregation..Crea |
994e0 | 74 65 73 20 61 67 67 72 65 67 61 74 69 6f 6e 20 67 72 6f 75 70 73 20 74 68 61 74 20 73 68 61 72 | tes.aggregation.groups.that.shar |
99500 | 65 20 74 68 65 20 73 61 6d 65 20 73 70 65 65 64 20 61 6e 64 20 64 75 70 6c 65 78 20 73 65 74 74 | e.the.same.speed.and.duplex.sett |
99520 | 69 6e 67 73 2e 20 55 74 69 6c 69 7a 65 73 20 61 6c 6c 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 | ings..Utilizes.all.slaves.in.the |
99540 | 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 | .active.aggregator.according.to. |
99560 | 74 68 65 20 38 30 32 2e 33 61 64 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 60 60 39 36 30 | the.802.3ad.specification..``960 |
99580 | 30 60 60 20 2d 20 39 36 30 30 20 62 70 73 00 60 60 3c 20 64 68 2d 67 72 6f 75 70 20 3e 60 60 20 | 0``.-.9600.bps.``<.dh-group.>``. |
995a0 | 64 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 | defines.a.Diffie-Hellman.group.f |
995c0 | 6f 72 20 50 46 53 3b 00 60 60 4b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 3a 60 60 00 60 | or.PFS;.``Known.limitations:``.` |
995e0 | 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 20 61 6e | `Stateful-IPv6-Address-Pool``.an |
99600 | 64 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 | d.``Delegated-IPv6-Prefix-Pool`` |
99620 | 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 36 39 31 31 2e 20 49 66 20 74 68 65 79 | .are.defined.in.RFC6911..If.they |
99640 | 20 61 72 65 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 | .are.not.defined.in.your.RADIUS. |
99660 | 73 65 72 76 65 72 2c 20 61 64 64 20 6e 65 77 20 64 69 63 74 69 6f 6e 61 72 79 5f 2e 00 60 60 57 | server,.add.new.dictionary_..``W |
99680 | 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 4e 41 4d 45 3d 5b 69 6e 74 65 72 66 61 63 65 6e 61 6d 65 | LB_INTERFACE_NAME=[interfacename |
996a0 | 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 6d 6f 6e 69 74 6f 72 65 64 00 60 | ]``:.Interface.to.be.monitored.` |
996c0 | 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 53 54 41 54 45 3d 5b 41 43 54 49 56 45 7c 46 41 49 | `WLB_INTERFACE_STATE=[ACTIVE|FAI |
996e0 | 4c 45 44 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 00 60 60 61 60 60 20 2d 20 | LED]``:.Interface.state.``a``.-. |
99700 | 38 30 32 2e 31 31 61 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 60 60 20 2d 20 | 802.11a.-.54.Mbits/sec.``ac``.-. |
99720 | 38 30 32 2e 31 31 61 63 20 2d 20 31 33 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 63 65 | 802.11ac.-.1300.Mbits/sec.``acce |
99740 | 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 57 65 6c | pt-own-nexthop``.-...........Wel |
99760 | 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 61 63 63 65 70 74 | l-known.communities.value.accept |
99780 | 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 20 30 78 46 46 46 46 30 30 30 38 00 60 60 61 63 63 65 70 74 | -own-nexthop.0xFFFF0008.``accept |
997a0 | 2d 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d | -own``.-...................Well- |
997c0 | 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 41 43 43 45 50 54 5f 4f | known.communities.value.ACCEPT_O |
997e0 | 57 4e 20 30 78 46 46 46 46 30 30 30 31 00 60 60 61 63 63 65 70 74 60 60 3a 20 61 63 63 65 70 74 | WN.0xFFFF0001.``accept``:.accept |
99800 | 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 61 63 63 65 73 73 2d 70 6f 69 6e 74 60 60 20 2d 20 | .the.packet..``access-point``.-. |
99820 | 41 63 63 65 73 73 2d 70 6f 69 6e 74 20 66 6f 72 77 61 72 64 73 20 70 61 63 6b 65 74 73 20 62 65 | Access-point.forwards.packets.be |
99840 | 74 77 65 65 6e 20 6f 74 68 65 72 20 6e 6f 64 65 73 00 60 60 61 63 74 69 6f 6e 60 60 20 6b 65 65 | tween.other.nodes.``action``.kee |
99860 | 70 2d 61 6c 69 76 65 20 66 61 69 6c 75 72 65 20 61 63 74 69 6f 6e 3a 00 60 60 61 63 74 69 76 65 | p-alive.failure.action:.``active |
99880 | 2d 62 61 63 6b 75 70 60 60 20 2d 20 41 63 74 69 76 65 2d 62 61 63 6b 75 70 20 70 6f 6c 69 63 79 | -backup``.-.Active-backup.policy |
998a0 | 3a 20 4f 6e 6c 79 20 6f 6e 65 20 73 6c 61 76 65 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 69 73 20 | :.Only.one.slave.in.the.bond.is. |
998c0 | 61 63 74 69 76 65 2e 20 41 20 64 69 66 66 65 72 65 6e 74 20 73 6c 61 76 65 20 62 65 63 6f 6d 65 | active..A.different.slave.become |
998e0 | 73 20 61 63 74 69 76 65 20 69 66 2c 20 61 6e 64 20 6f 6e 6c 79 20 69 66 2c 20 74 68 65 20 61 63 | s.active.if,.and.only.if,.the.ac |
99900 | 74 69 76 65 20 73 6c 61 76 65 20 66 61 69 6c 73 2e 20 54 68 65 20 62 6f 6e 64 27 73 20 4d 41 43 | tive.slave.fails..The.bond's.MAC |
99920 | 20 61 64 64 72 65 73 73 20 69 73 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 69 73 69 62 6c 65 20 6f | .address.is.externally.visible.o |
99940 | 6e 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 72 74 20 28 6e 65 74 77 6f 72 6b 20 61 64 61 70 74 65 72 | n.only.one.port.(network.adapter |
99960 | 29 20 74 6f 20 61 76 6f 69 64 20 63 6f 6e 66 75 73 69 6e 67 20 74 68 65 20 73 77 69 74 63 68 2e | ).to.avoid.confusing.the.switch. |
99980 | 00 60 60 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 | .``adaptive-load-balance``.-.Ada |
999a0 | 70 74 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 69 6e 63 6c 75 64 65 73 20 74 | ptive.load.balancing:.includes.t |
999c0 | 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 70 6c 75 73 20 72 65 63 65 69 76 | ransmit-load-balance.plus.receiv |
999e0 | 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 66 6f 72 20 49 50 56 34 20 74 72 61 66 66 69 | e.load.balancing.for.IPV4.traffi |
99a00 | 63 2c 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 | c,.and.does.not.require.any.spec |
99a20 | 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 | ial.switch.support..The.receive. |
99a40 | 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 41 52 | load.balancing.is.achieved.by.AR |
99a60 | 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 54 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 | P.negotiation..The.bonding.drive |
99a80 | 72 20 69 6e 74 65 72 63 65 70 74 73 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e | r.intercepts.the.ARP.Replies.sen |
99aa0 | 74 20 62 79 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 6f 6e 20 74 68 65 69 72 20 77 | t.by.the.local.system.on.their.w |
99ac0 | 61 79 20 6f 75 74 20 61 6e 64 20 6f 76 65 72 77 72 69 74 65 73 20 74 68 65 20 73 6f 75 72 63 65 | ay.out.and.overwrites.the.source |
99ae0 | 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 74 68 65 20 75 6e 69 71 75 | .hardware.address.with.the.uniqu |
99b00 | 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 6f 6e 65 20 6f 66 20 74 68 65 | e.hardware.address.of.one.of.the |
99b20 | 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 73 75 63 68 20 74 68 61 74 20 64 69 | .slaves.in.the.bond.such.that.di |
99b40 | 66 66 65 72 65 6e 74 20 70 65 65 72 73 20 75 73 65 20 64 69 66 66 65 72 65 6e 74 20 68 61 72 64 | fferent.peers.use.different.hard |
99b60 | 77 61 72 65 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 2e 00 60 | ware.addresses.for.the.server..` |
99b80 | 60 61 67 67 72 65 73 73 69 76 65 60 60 20 75 73 65 20 41 67 67 72 65 73 73 69 76 65 20 6d 6f 64 | `aggressive``.use.Aggressive.mod |
99ba0 | 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 | e.for.Key.Exchanges.in.the.IKEv1 |
99bc0 | 20 70 72 6f 74 6f 63 6f 6c 20 61 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 69 73 20 6d 75 63 | .protocol.aggressive.mode.is.muc |
99be0 | 68 20 6d 6f 72 65 20 69 6e 73 65 63 75 72 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 4d 61 69 6e | h.more.insecure.compared.to.Main |
99c00 | 20 6d 6f 64 65 3b 00 60 60 61 6c 6c 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6c 6c 20 63 68 65 | .mode;.``all-available``.all.che |
99c20 | 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 | cking.target.addresses.must.be.a |
99c40 | 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 6e | vailable.to.pass.this.check.``an |
99c60 | 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6e 79 20 6f 66 20 74 68 65 20 63 68 65 63 6b 69 6e | y-available``.any.of.the.checkin |
99c80 | 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c | g.target.addresses.must.be.avail |
99ca0 | 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 75 74 68 65 6e | able.to.pass.this.check.``authen |
99cc0 | 74 69 63 61 74 69 6f 6e 20 6c 6f 63 61 6c 2d 69 64 2f 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 | tication.local-id/remote-id``.-. |
99ce0 | 49 4b 45 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 76 | IKE.identification.is.used.for.v |
99d00 | 61 6c 69 64 61 74 69 6f 6e 20 6f 66 20 56 50 4e 20 70 65 65 72 20 64 65 76 69 63 65 73 20 64 75 | alidation.of.VPN.peer.devices.du |
99d20 | 72 69 6e 67 20 49 4b 45 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 64 6f 20 | ring.IKE.negotiation..If.you.do. |
99d40 | 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 2d 69 64 65 6e 74 | not.configure.local/remote-ident |
99d60 | 69 74 79 2c 20 74 68 65 20 64 65 76 69 63 65 20 75 73 65 73 20 74 68 65 20 49 50 76 34 20 6f 72 | ity,.the.device.uses.the.IPv4.or |
99d80 | 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 68 61 74 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 | .IPv6.address.that.corresponds.t |
99da0 | 6f 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 70 65 65 72 20 62 79 20 64 65 66 61 75 | o.the.local/remote.peer.by.defau |
99dc0 | 6c 74 2e 20 49 6e 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 73 65 74 75 70 73 20 28 6c | lt..In.certain.network.setups.(l |
99de0 | 69 6b 65 20 69 70 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 79 6e 61 6d 69 63 | ike.ipsec.interface.with.dynamic |
99e00 | 20 61 64 64 72 65 73 73 2c 20 6f 72 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 29 2c 20 74 | .address,.or.behind.the.NAT.),.t |
99e20 | 68 65 20 49 4b 45 20 49 44 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 | he.IKE.ID.received.from.the.peer |
99e40 | 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 49 4b 45 20 67 61 74 65 77 61 79 20 | .does.not.match.the.IKE.gateway. |
99e60 | 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 63 | configured.on.the.device..This.c |
99e80 | 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 50 68 61 73 65 20 31 20 76 61 6c 69 64 61 74 69 6f 6e 20 | an.lead.to.a.Phase.1.validation. |
99ea0 | 66 61 69 6c 75 72 65 2e 20 53 6f 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 63 6f 6e 66 69 67 | failure..So,.make.sure.to.config |
99ec0 | 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 69 64 20 65 78 70 6c 69 63 69 74 | ure.the.local/remote.id.explicit |
99ee0 | 6c 79 20 61 6e 64 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 49 4b 45 20 49 44 20 69 73 | ly.and.ensure.that.the.IKE.ID.is |
99f00 | 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 | .the.same.as.the.remote-identity |
99f20 | 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 70 65 65 72 20 64 65 76 69 63 65 2e 00 | .configured.on.the.peer.device.. |
99f40 | 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 | ``authentication``.-.configure.a |
99f60 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 | uthentication.between.VyOS.and.a |
99f80 | 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 66 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 | .remote.peer..If.pre-shared-secr |
99fa0 | 65 74 20 6d 6f 64 65 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 73 65 63 72 65 74 20 6b 65 79 20 | et.mode.is.used,.the.secret.key. |
99fc0 | 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 | must.be.defined.in.``set.vpn.ips |
99fe0 | 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 61 6e 64 20 73 75 62 6f 70 74 69 6f | ec.authentication``.and.suboptio |
9a000 | 6e 73 3a 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 | ns:.``authentication``.-.configu |
9a020 | 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 | re.authentication.between.VyOS.a |
9a040 | 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 53 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 | nd.a.remote.peer..Suboptions:.`` |
9a060 | 62 60 60 20 2d 20 38 30 32 2e 31 31 62 20 2d 20 31 31 20 4d 62 69 74 73 2f 73 65 63 00 60 60 62 | b``.-.802.11b.-.11.Mbits/sec.``b |
9a080 | 61 62 65 6c 60 60 20 2d 20 42 61 62 65 6c 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 | abel``.-.Babel.routing.protocol. |
9a0a0 | 28 42 61 62 65 6c 29 00 60 60 62 65 67 69 6e 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 62 65 | (Babel).``begin``.Matches.the.be |
9a0c0 | 67 69 6e 6e 69 6e 67 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 60 62 67 70 60 60 20 | ginning.of.the.URL.path.``bgp``. |
9a0e0 | 2d 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 00 | -.Border.Gateway.Protocol.(BGP). |
9a100 | 60 60 62 69 6e 64 60 60 20 2d 20 73 65 6c 65 63 74 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 | ``bind``.-.select.a.VTI.interfac |
9a120 | 65 20 74 6f 20 62 69 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 62 6c 61 63 6b 68 | e.to.bind.to.this.peer;.``blackh |
9a140 | 6f 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d | ole``.-....................Well- |
9a160 | 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 42 4c 41 43 4b 48 4f 4c | known.communities.value.BLACKHOL |
9a180 | 45 20 30 78 46 46 46 46 30 32 39 41 00 60 60 62 72 6f 61 64 63 61 73 74 60 60 20 2d 20 42 72 6f | E.0xFFFF029A.``broadcast``.-.Bro |
9a1a0 | 61 64 63 61 73 74 20 70 6f 6c 69 63 79 3a 20 74 72 61 6e 73 6d 69 74 73 20 65 76 65 72 79 74 68 | adcast.policy:.transmits.everyth |
9a1c0 | 69 6e 67 20 6f 6e 20 61 6c 6c 20 73 6c 61 76 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 60 60 62 | ing.on.all.slave.interfaces..``b |
9a1e0 | 75 72 73 74 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 | urst``:.Number.of.packets.allowe |
9a200 | 64 20 74 6f 20 6f 76 65 72 73 68 6f 6f 74 20 74 68 65 20 6c 69 6d 69 74 20 77 69 74 68 69 6e 20 | d.to.overshoot.the.limit.within. |
9a220 | 60 60 70 65 72 69 6f 64 60 60 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 63 61 2d 63 65 72 74 | ``period``..Default.5..``ca-cert |
9a240 | 2d 66 69 6c 65 60 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2e 20 55 | -file``.-.CA.certificate.file..U |
9a260 | 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 | sing.for.authenticating.remote.p |
9a280 | 65 65 72 3b 00 60 60 63 61 2d 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 43 41 20 63 65 72 | eer;.``ca-certificate``.-.CA.cer |
9a2a0 | 74 69 66 69 63 61 74 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 55 | tificate.in.PKI.configuration..U |
9a2c0 | 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 | sing.for.authenticating.remote.p |
9a2e0 | 65 65 72 3b 00 60 60 63 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 43 44 50 20 66 6f | eer;.``cdp``.-.Listen.for.CDP.fo |
9a300 | 72 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 63 65 72 74 2d | r.Cisco.routers/switches.``cert- |
9a320 | 66 69 6c 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2c 20 77 68 69 63 68 | file``.-.certificate.file,.which |
9a340 | 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 | .will.be.used.for.authenticating |
9a360 | 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 | .local.router.on.remote.peer;.`` |
9a380 | 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 | certificate``.-.certificate.file |
9a3a0 | 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 77 69 6c | .in.PKI.configuration,.which.wil |
9a3c0 | 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 | l.be.used.for.authenticating.loc |
9a3e0 | 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 6c 65 61 | al.router.on.remote.peer;.``clea |
9a400 | 72 60 60 20 63 6c 6f 73 65 73 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 61 6e 64 20 64 6f 65 73 | r``.closes.the.CHILD_SA.and.does |
9a420 | 20 6e 6f 74 20 74 61 6b 65 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 20 28 64 65 66 61 75 6c | .not.take.further.action.(defaul |
9a440 | 74 29 3b 00 60 60 63 6c 65 61 72 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 63 6c 65 61 | t);.``clear``.set.action.to.clea |
9a460 | 72 3b 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 | r;.``close-action.=.none.|.clear |
9a480 | 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 | .|.hold.|.restart``.-.defines.th |
9a4a0 | 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 | e.action.to.take.if.the.remote.p |
9a4c0 | 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f | eer.unexpectedly.closes.a.CHILD_ |
9a4e0 | 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c | SA.(see.above.for.meaning.of.val |
9a500 | 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 | ues)..A.closeaction.should.not.b |
9a520 | 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e | e.used.if.the.peer.uses.reauthen |
9a540 | 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 | tication.or.uniqueids..``close-a |
9a560 | 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 73 74 | ction.=.none.|.clear.|.trap.|.st |
9a580 | 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 | art``.-.defines.the.action.to.ta |
9a5a0 | 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 | ke.if.the.remote.peer.unexpected |
9a5c0 | 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 | ly.closes.a.CHILD_SA.(see.above. |
9a5e0 | 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 | for.meaning.of.values)..A.closea |
9a600 | 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 | ction.should.not.be.used.if.the. |
9a620 | 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e | peer.uses.reauthentication.or.un |
9a640 | 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 60 60 20 64 65 66 69 6e 65 | iqueids..``close-action``.define |
9a660 | 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f | s.the.action.to.take.if.the.remo |
9a680 | 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 | te.peer.unexpectedly.closes.a.CH |
9a6a0 | 49 4c 44 5f 53 41 3a 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 20 45 6e 61 62 6c 65 73 | ILD_SA:.``compression``..Enables |
9a6c0 | 20 74 68 65 20 20 49 50 43 6f 6d 70 28 49 50 20 50 61 79 6c 6f 61 64 20 43 6f 6d 70 72 65 73 73 | .the..IPComp(IP.Payload.Compress |
9a6e0 | 69 6f 6e 29 20 70 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 63 6f 6d 70 72 | ion).protocol.which.allows.compr |
9a700 | 65 73 73 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 49 50 20 70 61 63 6b 65 74 73 | essing.the.content.of.IP.packets |
9a720 | 2e 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 77 68 65 74 68 65 72 20 49 50 43 6f 6d 70 | ..``compression``.whether.IPComp |
9a740 | 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 6f 66 20 63 6f 6e 74 65 6e 74 20 69 73 20 70 72 6f 70 6f | .compression.of.content.is.propo |
9a760 | 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 63 6f 6e 6e 65 63 74 | sed.on.the.connection:.``connect |
9a780 | 65 64 60 60 20 2d 20 43 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 28 64 69 72 65 63 74 6c | ed``.-.Connected.routes.(directl |
9a7a0 | 79 20 61 74 74 61 63 68 65 64 20 73 75 62 6e 65 74 20 6f 72 20 68 6f 73 74 29 00 60 60 63 6f 6e | y.attached.subnet.or.host).``con |
9a7c0 | 6e 65 63 74 69 6f 6e 2d 74 79 70 65 60 60 20 2d 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 74 | nection-type``.-.how.to.handle.t |
9a7e0 | 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 20 50 6f 73 73 69 62 6c 65 | his.connection.process..Possible |
9a800 | 20 76 61 72 69 61 6e 74 73 3a 00 60 60 63 6f 6e 74 69 6e 75 65 60 60 3a 20 63 6f 6e 74 69 6e 75 | .variants:.``continue``:.continu |
9a820 | 65 20 70 61 72 73 69 6e 67 20 6e 65 78 74 20 72 75 6c 65 2e 00 60 60 63 72 6c 2d 66 69 6c 65 60 | e.parsing.next.rule..``crl-file` |
9a840 | 60 20 2d 20 66 69 6c 65 20 77 69 74 68 20 74 68 65 20 43 65 72 74 69 66 69 63 61 74 65 20 52 65 | `.-.file.with.the.Certificate.Re |
9a860 | 76 6f 63 61 74 69 6f 6e 20 4c 69 73 74 2e 20 55 73 69 6e 67 20 74 6f 20 63 68 65 63 6b 20 69 66 | vocation.List..Using.to.check.if |
9a880 | 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 | .a.certificate.for.the.remote.pe |
9a8a0 | 65 72 20 69 73 20 76 61 6c 69 64 20 6f 72 20 72 65 76 6f 6b 65 64 3b 00 60 60 64 60 60 20 2d 20 | er.is.valid.or.revoked;.``d``.-. |
9a8c0 | 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 64 61 79 73 00 60 60 64 65 61 | Execution.interval.in.days.``dea |
9a8e0 | 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 | d-peer-detection.action.=.clear. |
9a900 | 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e | |.hold.|.restart``.-.R_U_THERE.n |
9a920 | 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 20 65 | otification.messages(IKEv1).or.e |
9a940 | 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 | mpty.INFORMATIONAL.messages.(IKE |
9a960 | 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 | v2).are.periodically.sent.in.ord |
9a980 | 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 | er.to.check.the.liveliness.of.th |
9a9a0 | 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 | e.IPsec.peer..The.values.clear,. |
9a9c0 | 68 6f 6c 64 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 20 44 | hold,.and.restart.all.activate.D |
9a9e0 | 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 | PD.and.determine.the.action.to.p |
9aa00 | 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c 65 61 | erform.on.a.timeout..With.``clea |
9aa20 | 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 69 74 | r``.the.connection.is.closed.wit |
9aa40 | 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 68 6f | h.no.further.actions.taken..``ho |
9aa60 | 6c 64 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 | ld``.installs.a.trap.policy,.whi |
9aa80 | 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 | ch.will.catch.matching.traffic.a |
9aaa0 | 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e | nd.tries.to.re-negotiate.the.con |
9aac0 | 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 20 77 | nection.on.demand..``restart``.w |
9aae0 | 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 65 6d | ill.immediately.trigger.an.attem |
9ab00 | 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | pt.to.re-negotiate.the.connectio |
9ab20 | 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 | n..``dead-peer-detection.action. |
9ab40 | 3d 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 | =.clear.|.trap.|.restart``.-.R_U |
9ab60 | 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 | _THERE.notification.messages(IKE |
9ab80 | 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 | v1).or.empty.INFORMATIONAL.messa |
9aba0 | 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e | ges.(IKEv2).are.periodically.sen |
9abc0 | 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 | t.in.order.to.check.the.liveline |
9abe0 | 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 | ss.of.the.IPsec.peer..The.values |
9ac00 | 20 63 6c 65 61 72 2c 20 74 72 61 70 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 | .clear,.trap,.and.restart.all.ac |
9ac20 | 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 | tivate.DPD.and.determine.the.act |
9ac40 | 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 | ion.to.perform.on.a.timeout..Wit |
9ac60 | 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c | h.``clear``.the.connection.is.cl |
9ac80 | 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b | osed.with.no.further.actions.tak |
9aca0 | 65 6e 2e 20 60 60 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c | en..``trap``.installs.a.trap.pol |
9acc0 | 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 | icy,.which.will.catch.matching.t |
9ace0 | 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 | raffic.and.tries.to.re-negotiate |
9ad00 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 | .the.connection.on.demand..``res |
9ad20 | 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 | tart``.will.immediately.trigger. |
9ad40 | 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 | an.attempt.to.re-negotiate.the.c |
9ad60 | 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e | onnection..``dead-peer-detection |
9ad80 | 60 60 20 63 6f 6e 74 72 6f 6c 73 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 44 65 61 64 20 | ``.controls.the.use.of.the.Dead. |
9ada0 | 50 65 65 72 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 44 50 44 2c 20 52 46 | Peer.Detection.protocol.(DPD,.RF |
9adc0 | 43 20 33 37 30 36 29 20 77 68 65 72 65 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 | C.3706).where.R_U_THERE.notifica |
9ade0 | 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 | tion.messages.(IKEv1).or.empty.I |
9ae00 | 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 | NFORMATIONAL.messages.(IKEv2).ar |
9ae20 | 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 | e.periodically.sent.in.order.to. |
9ae40 | 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 | check.the.liveliness.of.the.IPse |
9ae60 | 63 20 70 65 65 72 3a 00 60 60 64 65 66 61 75 6c 74 2d 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 | c.peer:.``default-esp-group``.-. |
9ae80 | 45 53 50 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 | ESP.group.to.use.by.default.for. |
9aea0 | 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 4d 69 67 68 74 20 62 65 20 6f 76 65 | traffic.encryption..Might.be.ove |
9aec0 | 72 77 72 69 74 74 65 6e 20 62 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 65 74 74 69 6e 67 73 20 | rwritten.by.individual.settings. |
9aee0 | 66 6f 72 20 74 75 6e 6e 65 6c 20 6f 72 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 62 69 6e 64 | for.tunnel.or.VTI.interface.bind |
9af00 | 69 6e 67 3b 00 60 60 64 65 73 63 72 69 70 74 69 6f 6e 60 60 20 2d 20 64 65 73 63 72 69 70 74 69 | ing;.``description``.-.descripti |
9af20 | 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 64 68 2d 67 72 6f 75 70 60 60 20 64 | on.for.this.peer;.``dh-group``.d |
9af40 | 68 2d 67 72 6f 75 70 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 49 44 | h-group;.``dhcp-interface``.-.ID |
9af60 | 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 66 72 | .for.authentication.generated.fr |
9af80 | 6f 6d 20 44 48 43 50 20 61 64 64 72 65 73 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 3b 00 60 60 64 | om.DHCP.address.dynamically;.``d |
9afa0 | 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 75 73 65 20 61 6e 20 49 50 20 61 64 64 72 | hcp-interface``.-.use.an.IP.addr |
9afc0 | 65 73 73 2c 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 44 48 43 50 20 66 6f 72 20 49 50 53 65 | ess,.received.from.DHCP.for.IPSe |
9afe0 | 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 2c 20 69 6e 73 | c.connection.with.this.peer,.ins |
9b000 | 74 65 61 64 20 6f 66 20 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 3b 00 60 60 64 69 73 | tead.of.``local-address``;.``dis |
9b020 | 61 62 6c 65 2d 6d 6f 62 69 6b 65 60 60 20 64 69 73 61 62 6c 65 73 20 4d 4f 42 49 4b 45 20 53 75 | able-mobike``.disables.MOBIKE.Su |
9b040 | 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 | pport..MOBIKE.is.only.available. |
9b060 | 66 6f 72 20 49 4b 45 76 32 20 61 6e 64 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 | for.IKEv2.and.enabled.by.default |
9b080 | 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 | ..``disable-route-autoinstall``. |
9b0a0 | 2d 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 | -.This.option.when.configured.di |
9b0c0 | 73 61 62 6c 65 73 20 74 68 65 20 72 6f 75 74 65 73 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 20 74 | sables.the.routes.installed.in.t |
9b0e0 | 68 65 20 64 65 66 61 75 6c 74 20 74 61 62 6c 65 20 32 32 30 20 66 6f 72 20 73 69 74 65 2d 74 6f | he.default.table.220.for.site-to |
9b100 | 2d 73 69 74 65 20 69 70 73 65 63 2e 20 49 74 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 77 | -site.ipsec..It.is.mostly.used.w |
9b120 | 69 74 68 20 56 54 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 64 69 73 61 62 6c 65 | ith.VTI.configuration..``disable |
9b140 | 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 44 6f 20 6e 6f 74 20 61 75 74 6f | -route-autoinstall``.Do.not.auto |
9b160 | 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 20 72 6f 75 74 65 73 20 74 6f 20 72 65 6d 6f | matically.install.routes.to.remo |
9b180 | 74 65 20 6e 65 74 77 6f 72 6b 73 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 2d 20 64 69 73 61 62 | te.networks;.``disable``.-.disab |
9b1a0 | 6c 65 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 44 69 73 61 | le.this.tunnel;.``disable``.Disa |
9b1c0 | 62 6c 65 20 50 46 53 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 49 50 43 | ble.PFS;.``disable``.disable.IPC |
9b1e0 | 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 64 69 73 | omp.compression.(default);.``dis |
9b200 | 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 4d 4f 42 49 4b 45 3b 00 60 60 64 72 6f 70 60 60 3a | able``.disable.MOBIKE;.``drop``: |
9b220 | 20 64 72 6f 70 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e | .drop.the.packet..``ecdsa-sha2-n |
9b240 | 69 73 74 70 32 35 36 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 | istp256``.``ecdsa-sha2-nistp384` |
9b260 | 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 00 60 60 65 64 70 60 | `.``ecdsa-sha2-nistp521``.``edp` |
9b280 | 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 45 44 50 20 66 6f 72 20 45 78 74 72 65 6d 65 20 72 | `.-.Listen.for.EDP.for.Extreme.r |
9b2a0 | 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 65 6e 61 62 6c 65 60 60 20 49 6e 68 65 72 | outers/switches.``enable``.Inher |
9b2c0 | 69 74 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 72 6f 6d 20 49 4b 45 | it.Diffie-Hellman.group.from.IKE |
9b2e0 | 20 67 72 6f 75 70 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 | .group.(default);.``enable``.ena |
9b300 | 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 3b 00 60 60 65 6e 61 62 6c 65 | ble.IPComp.compression;.``enable |
9b320 | 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 49 4b | ``.enable.MOBIKE.(default.for.IK |
9b340 | 45 76 32 29 3b 00 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 | Ev2);.``encryption``.encryption. |
9b360 | 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 31 32 38 20 62 69 74 20 41 45 53 2d 43 | algorithm.(default.128.bit.AES-C |
9b380 | 42 43 29 3b 00 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 | BC);.``encryption``.encryption.a |
9b3a0 | 6c 67 6f 72 69 74 68 6d 3b 00 60 60 65 6e 64 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 65 6e | lgorithm;.``end``.Matches.the.en |
9b3c0 | 64 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 2e 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 | d.of.the.URL.path..``esp-group`` |
9b3e0 | 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 | .-.define.ESP.group.for.encrypt. |
9b400 | 74 72 61 66 66 69 63 2c 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b | traffic,.defined.by.this.tunnel; |
9b420 | 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 | .``esp-group``.-.define.ESP.grou |
9b440 | 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 70 61 73 73 65 64 20 74 68 | p.for.encrypt.traffic,.passed.th |
9b460 | 69 73 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 2e 00 60 60 65 78 61 63 74 60 60 20 52 65 71 75 | is.VTI.interface..``exact``.Requ |
9b480 | 69 72 65 73 20 61 6e 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 55 52 4c | ires.an.exactly.match.of.the.URL |
9b4a0 | 20 70 61 74 68 00 60 60 66 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 46 44 50 20 66 | .path.``fdp``.-.Listen.for.FDP.f |
9b4c0 | 6f 72 20 46 6f 75 6e 64 72 79 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 66 69 | or.Foundry.routers/switches.``fi |
9b4e0 | 6c 65 60 60 20 2d 20 70 61 74 68 20 74 6f 20 74 68 65 20 6b 65 79 20 66 69 6c 65 3b 00 60 60 66 | le``.-.path.to.the.key.file;.``f |
9b500 | 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 | lexvpn``.Allow.FlexVPN.vendor.ID |
9b520 | 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 | .payload.(IKEv2.only)..Send.the. |
9b540 | 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 | Cisco.FlexVPN.vendor.ID.payload. |
9b560 | 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 | (IKEv2.only),.which.is.required. |
9b580 | 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 | in.order.to.make.Cisco.brand.dev |
9b5a0 | 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 | ices.allow.negotiating.a.local.t |
9b5c0 | 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e | raffic.selector.(from.strongSwan |
9b5e0 | 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 | 's.point.of.view).that.is.not.th |
9b600 | 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 | e.assigned.virtual.IP.address.if |
9b620 | 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 | .such.an.address.is.requested.by |
9b640 | 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 | .strongSwan..Sending.the.Cisco.F |
9b660 | 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 | lexVPN.vendor.ID.prevents.the.pe |
9b680 | 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 | er.from.narrowing.the.initiator' |
9b6a0 | 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c | s.local.traffic.selector.and.all |
9b6c0 | 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 | ows.it.to.e.g..negotiate.a.TS.of |
9b6e0 | 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e | .0.0.0.0/0.==.0.0.0.0/0.instead. |
9b700 | 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 | .This.has.been.tested.with.a."tu |
9b720 | 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 | nnel.mode.ipsec.ipv4".Cisco.temp |
9b740 | 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 | late.but.should.also.work.for.GR |
9b760 | 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c | E.encapsulation;.``flexvpn``.All |
9b780 | 6f 77 73 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 | ows.FlexVPN.vendor.ID.payload.(I |
9b7a0 | 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 | KEv2.only)..Send.the.Cisco.FlexV |
9b7c0 | 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 | PN.vendor.ID.payload.(IKEv2.only |
9b7e0 | 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f | ),.which.is.required.in.order.to |
9b800 | 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 | .make.Cisco.brand.devices.allow. |
9b820 | 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 | negotiating.a.local.traffic.sele |
9b840 | 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 | ctor.(from.strongSwan's.point.of |
9b860 | 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 | .view).that.is.not.the.assigned. |
9b880 | 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 | virtual.IP.address.if.such.an.ad |
9b8a0 | 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e | dress.is.requested.by.strongSwan |
9b8c0 | 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 | ..Sending.the.Cisco.FlexVPN.vend |
9b8e0 | 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 | or.ID.prevents.the.peer.from.nar |
9b900 | 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 | rowing.the.initiator's.local.tra |
9b920 | 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 | ffic.selector.and.allows.it.to.e |
9b940 | 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 | .g..negotiate.a.TS.of.0.0.0.0/0. |
9b960 | 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 | ==.0.0.0.0/0.instead..This.has.b |
9b980 | 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 | een.tested.with.a."tunnel.mode.i |
9b9a0 | 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 | psec.ipv4".Cisco.template.but.sh |
9b9c0 | 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 | ould.also.work.for.GRE.encapsula |
9b9e0 | 74 69 6f 6e 3b 00 60 60 66 6f 72 63 65 2d 75 64 70 2d 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 60 | tion;.``force-udp-encapsulation` |
9ba00 | 60 20 2d 20 66 6f 72 63 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 45 53 50 20 69 | `.-.force.encapsulation.of.ESP.i |
9ba20 | 6e 74 6f 20 55 44 50 20 64 61 74 61 67 72 61 6d 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 | nto.UDP.datagrams..Useful.in.cas |
9ba40 | 65 20 69 66 20 62 65 74 77 65 65 6e 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 | e.if.between.local.and.remote.si |
9ba60 | 64 65 20 69 73 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 2c 20 77 68 69 63 68 20 6e 6f 74 | de.is.firewall.or.NAT,.which.not |
9ba80 | 20 61 6c 6c 6f 77 73 20 70 61 73 73 69 6e 67 20 70 6c 61 69 6e 20 45 53 50 20 70 61 63 6b 65 74 | .allows.passing.plain.ESP.packet |
9baa0 | 73 20 62 65 74 77 65 65 6e 20 74 68 65 6d 3b 00 60 60 67 60 60 20 2d 20 38 30 32 2e 31 31 67 20 | s.between.them;.``g``.-.802.11g. |
9bac0 | 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 20 28 64 65 66 61 75 6c 74 29 00 60 60 67 72 61 63 65 | -.54.Mbits/sec.(default).``grace |
9bae0 | 66 75 6c 2d 73 68 75 74 64 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c | ful-shutdown``.-............Well |
9bb00 | 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 47 52 41 43 45 46 55 | -known.communities.value.GRACEFU |
9bb20 | 4c 5f 53 48 55 54 44 4f 57 4e 20 30 78 46 46 46 46 30 30 30 30 00 60 60 68 60 60 20 2d 20 45 78 | L_SHUTDOWN.0xFFFF0000.``h``.-.Ex |
9bb40 | 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 68 6f 75 72 73 00 60 60 68 61 73 68 | ecution.interval.in.hours.``hash |
9bb60 | 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 73 68 61 31 29 | ``.hash.algorithm.(default.sha1) |
9bb80 | 2e 00 60 60 68 61 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 68 6f 6c | ..``hash``.hash.algorithm..``hol |
9bba0 | 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 20 28 64 65 66 61 75 6c 74 29 | d``.set.action.to.hold.(default) |
9bbc0 | 00 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 3b 00 60 60 | .``hold``.set.action.to.hold;.`` |
9bbe0 | 68 74 34 30 2b 60 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a | ht40+``.-.Both.20.MHz.and.40.MHz |
9bc00 | 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 61 62 6f 76 65 20 74 68 | .with.secondary.channel.above.th |
9bc20 | 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 74 34 30 2d 60 60 20 2d 20 42 6f | e.primary.channel.``ht40-``.-.Bo |
9bc40 | 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 | th.20.MHz.and.40.MHz.with.second |
9bc60 | 61 72 79 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 | ary.channel.below.the.primary.ch |
9bc80 | 61 6e 6e 65 6c 00 60 60 68 76 63 30 60 60 20 2d 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 00 60 60 69 | annel.``hvc0``.-.Xen.console.``i |
9bca0 | 64 60 60 20 2d 20 73 74 61 74 69 63 20 49 44 27 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 | d``.-.static.ID's.for.authentica |
9bcc0 | 74 69 6f 6e 2e 20 49 6e 20 67 65 6e 65 72 61 6c 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 | tion..In.general.local.and.remot |
9bce0 | 65 20 61 64 64 72 65 73 73 20 60 60 3c 78 2e 78 2e 78 2e 78 3e 60 60 2c 20 60 60 3c 68 3a 68 3a | e.address.``<x.x.x.x>``,.``<h:h: |
9bd00 | 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 60 60 20 6f 72 20 60 60 25 61 6e 79 60 60 3b 00 60 60 69 6b | h:h:h:h:h:h>``.or.``%any``;.``ik |
9bd20 | 65 2d 67 72 6f 75 70 60 60 20 2d 20 49 4b 45 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 | e-group``.-.IKE.group.to.use.for |
9bd40 | 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 3b 00 60 60 69 6b 65 76 31 60 60 20 75 73 65 20 49 4b | .key.exchanges;.``ikev1``.use.IK |
9bd60 | 45 76 31 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6b 65 76 32 2d 72 65 | Ev1.for.Key.Exchange;.``ikev2-re |
9bd80 | 61 75 74 68 60 60 20 2d 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 72 65 6d 6f 74 65 20 70 | auth``.-.reauthenticate.remote.p |
9bda0 | 65 65 72 20 64 75 72 69 6e 67 20 74 68 65 20 72 65 6b 65 79 69 6e 67 20 70 72 6f 63 65 73 73 2e | eer.during.the.rekeying.process. |
9bdc0 | 20 43 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 69 74 68 20 49 4b 45 76 32 2e 20 43 72 | .Can.be.used.only.with.IKEv2..Cr |
9bde0 | 65 61 74 65 20 61 20 6e 65 77 20 49 4b 45 5f 53 41 20 66 72 6f 6d 20 74 68 65 20 73 63 72 61 74 | eate.a.new.IKE_SA.from.the.scrat |
9be00 | 63 68 20 61 6e 64 20 74 72 79 20 74 6f 20 72 65 63 72 65 61 74 65 20 61 6c 6c 20 49 50 73 65 63 | ch.and.try.to.recreate.all.IPsec |
9be20 | 20 53 41 73 3b 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 | .SAs;.``ikev2-reauth``.whether.r |
9be40 | 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f | ekeying.of.an.IKE_SA.should.also |
9be60 | 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 | .reauthenticate.the.peer..In.IKE |
9be80 | 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 | v1,.reauthentication.is.always.d |
9bea0 | 6f 6e 65 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 65 6e 61 62 | one..Setting.this.parameter.enab |
9bec0 | 6c 65 73 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f | les.remote.host.re-authenticatio |
9bee0 | 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 2e 00 60 60 69 6b 65 76 32 2d 72 | n.during.an.IKE.rekey..``ikev2-r |
9bf00 | 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 | eauth``.whether.rekeying.of.an.I |
9bf20 | 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 | KE_SA.should.also.reauthenticate |
9bf40 | 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 | .the.peer..In.IKEv1,.reauthentic |
9bf60 | 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 3a 00 60 60 69 6b 65 76 32 60 60 20 | ation.is.always.done:.``ikev2``. |
9bf80 | 75 73 65 20 49 4b 45 76 32 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6e | use.IKEv2.for.Key.Exchange;.``in |
9bfa0 | 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 | ``:.Ruleset.for.forwarded.packet |
9bfc0 | 73 20 6f 6e 20 61 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 69 6e 69 74 | s.on.an.inbound.interface.``init |
9bfe0 | 69 61 74 65 60 60 20 2d 20 64 6f 65 73 20 69 6e 69 74 69 61 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e | iate``.-.does.initial.connection |
9c000 | 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 61 66 74 65 | .to.remote.peer.immediately.afte |
9c020 | 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 61 66 74 65 72 20 62 6f 6f 74 2e 20 49 6e | r.configuring.and.after.boot..In |
9c040 | 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e | .this.mode.the.connection.will.n |
9c060 | 6f 74 20 62 65 20 72 65 73 74 61 72 74 65 64 20 69 6e 20 63 61 73 65 20 6f 66 20 64 69 73 63 6f | ot.be.restarted.in.case.of.disco |
9c080 | 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 72 65 66 6f 72 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 | nnection,.therefore.should.be.us |
9c0a0 | 65 64 20 6f 6e 6c 79 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 44 50 44 20 6f 72 20 61 6e 6f | ed.only.together.with.DPD.or.ano |
9c0c0 | 74 68 65 72 20 73 65 73 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 6d 65 74 68 6f 64 73 3b 00 60 | ther.session.tracking.methods;.` |
9c0e0 | 60 69 6e 74 65 6c 5f 69 64 6c 65 2e 6d 61 78 5f 63 73 74 61 74 65 3d 30 60 60 20 44 69 73 61 62 | `intel_idle.max_cstate=0``.Disab |
9c100 | 6c 65 20 69 6e 74 65 6c 5f 69 64 6c 65 20 61 6e 64 20 66 61 6c 6c 20 62 61 63 6b 20 6f 6e 20 61 | le.intel_idle.and.fall.back.on.a |
9c120 | 63 70 69 5f 69 64 6c 65 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 49 6e 74 65 72 66 61 63 65 | cpi_idle.``interface``.Interface |
9c140 | 20 4e 61 6d 65 20 74 6f 20 75 73 65 2e 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 69 6e | .Name.to.use..The.name.of.the.in |
9c160 | 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 | terface.on.which.virtual.IP.addr |
9c180 | 65 73 73 65 73 20 73 68 6f 75 6c 64 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 2e 20 49 66 20 6e 6f | esses.should.be.installed..If.no |
9c1a0 | 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 | t.specified.the.addresses.will.b |
9c1c0 | 65 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 | e.installed.on.the.outbound.inte |
9c1e0 | 72 66 61 63 65 3b 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 | rface;.``interface``.is.used.for |
9c200 | 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 | .the.VyOS.CLI.command.to.identif |
9c220 | 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 | y.the.WireGuard.interface.where. |
9c240 | 74 68 69 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 | this.private.key.is.to.be.used.. |
9c260 | 60 60 69 6e 74 65 72 6e 65 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | ``internet``.-.................. |
9c280 | 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 | ...Well-known.communities.value. |
9c2a0 | 30 00 60 60 69 6e 74 65 72 76 61 6c 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 69 6e 74 65 72 76 | 0.``interval``.keep-alive.interv |
9c2c0 | 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 | al.in.seconds.<2-86400>.(default |
9c2e0 | 20 33 30 29 3b 00 60 60 69 73 69 73 60 60 20 2d 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 | .30);.``isis``.-.Intermediate.Sy |
9c300 | 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 2d | stem.to.Intermediate.System.(IS- |
9c320 | 49 53 29 00 60 60 6a 75 6d 70 60 60 3a 20 6a 75 6d 70 20 74 6f 20 61 6e 6f 74 68 65 72 20 63 75 | IS).``jump``:.jump.to.another.cu |
9c340 | 73 74 6f 6d 20 63 68 61 69 6e 2e 00 60 60 6b 65 72 6e 65 6c 60 60 20 2d 20 4b 65 72 6e 65 6c 20 | stom.chain..``kernel``.-.Kernel. |
9c360 | 72 6f 75 74 65 73 00 60 60 6b 65 79 2d 65 78 63 68 61 6e 67 65 60 60 20 77 68 69 63 68 20 70 72 | routes.``key-exchange``.which.pr |
9c380 | 6f 74 6f 63 6f 6c 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 74 6f 20 69 6e 69 74 69 61 6c | otocol.should.be.used.to.initial |
9c3a0 | 69 7a 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 49 66 20 6e 6f 74 20 73 65 74 20 62 6f | ize.the.connection.If.not.set.bo |
9c3c0 | 74 68 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 61 6e 64 20 63 6f 6e | th.protocols.are.handled.and.con |
9c3e0 | 6e 65 63 74 69 6f 6e 73 20 77 69 6c 6c 20 75 73 65 20 49 4b 45 76 32 20 77 68 65 6e 20 69 6e 69 | nections.will.use.IKEv2.when.ini |
9c400 | 74 69 61 74 69 6e 67 2c 20 62 75 74 20 61 63 63 65 70 74 20 61 6e 79 20 70 72 6f 74 6f 63 6f 6c | tiating,.but.accept.any.protocol |
9c420 | 20 76 65 72 73 69 6f 6e 20 77 68 65 6e 20 72 65 73 70 6f 6e 64 69 6e 67 3a 00 60 60 6b 65 79 60 | .version.when.responding:.``key` |
9c440 | 60 20 2d 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 | `.-.a.private.key,.which.will.be |
9c460 | 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 | .used.for.authenticating.local.r |
9c480 | 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6c 61 74 65 6e 63 79 60 | outer.on.remote.peer:.``latency` |
9c4a0 | 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 6c | `:.A.server.profile.focused.on.l |
9c4c0 | 6f 77 65 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 54 68 69 73 20 70 72 | owering.network.latency..This.pr |
9c4e0 | 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f | ofile.favors.performance.over.po |
9c500 | 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 | wer.savings.by.setting.``intel_p |
9c520 | 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 69 6e 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 60 60 | state``.and.``min_perf_pct=100`` |
9c540 | 2e 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 | ..``least-connection``.Distribut |
9c560 | 65 73 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 | es.requests.to.the.server.with.t |
9c580 | 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c | he.fewest.active.connections.``l |
9c5a0 | 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 | east-connection``.Distributes.re |
9c5c0 | 71 75 65 73 74 73 20 74 70 20 74 6a 65 20 73 65 72 76 65 72 20 77 6f 74 6a 20 74 68 65 20 66 65 | quests.tp.tje.server.wotj.the.fe |
9c5e0 | 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c 69 66 65 2d 62 | west.active.connections.``life-b |
9c600 | 79 74 65 73 60 60 20 45 53 50 20 6c 69 66 65 20 69 6e 20 62 79 74 65 73 20 3c 31 30 32 34 2d 32 | ytes``.ESP.life.in.bytes.<1024-2 |
9c620 | 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 | 6843545600000>..Number.of.bytes. |
9c640 | 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 | transmitted.over.an.IPsec.SA.bef |
9c660 | 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 2d 70 61 63 6b 65 74 73 60 60 | ore.it.expires;.``life-packets`` |
9c680 | 20 45 53 50 20 6c 69 66 65 20 69 6e 20 70 61 63 6b 65 74 73 20 3c 31 30 30 30 2d 32 36 38 34 33 | .ESP.life.in.packets.<1000-26843 |
9c6a0 | 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 72 | 545600000>..Number.of.packets.tr |
9c6c0 | 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 | ansmitted.over.an.IPsec.SA.befor |
9c6e0 | 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 45 53 50 20 6c | e.it.expires;.``lifetime``.ESP.l |
9c700 | 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 | ifetime.in.seconds.<30-86400>.(d |
9c720 | 65 66 61 75 6c 74 20 33 36 30 30 29 2e 20 48 6f 77 20 6c 6f 6e 67 20 61 20 70 61 72 74 69 63 75 | efault.3600)..How.long.a.particu |
9c740 | 6c 61 72 20 69 6e 73 74 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 20 | lar.instance.of.a.connection.(a. |
9c760 | 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | set.of.encryption/authentication |
9c780 | 20 6b 65 79 73 20 66 6f 72 20 75 73 65 72 20 70 61 63 6b 65 74 73 29 20 73 68 6f 75 6c 64 20 6c | .keys.for.user.packets).should.l |
9c7a0 | 61 73 74 2c 20 66 72 6f 6d 20 73 75 63 63 65 73 73 66 75 6c 20 6e 65 67 6f 74 69 61 74 69 6f 6e | ast,.from.successful.negotiation |
9c7c0 | 20 74 6f 20 65 78 70 69 72 79 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 | .to.expiry;.``lifetime``.IKE.lif |
9c7e0 | 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 | etime.in.seconds.<0-86400>.(defa |
9c800 | 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 | ult.28800);.``lifetime``.IKE.lif |
9c820 | 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 | etime.in.seconds.<30-86400>.(def |
9c840 | 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c 6c 67 72 2d 73 74 61 6c 65 60 60 20 2d 20 20 20 | ault.28800);.``llgr-stale``.-... |
9c860 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 | ................Well-known.commu |
9c880 | 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4c 4c 47 52 5f 53 54 41 4c 45 20 30 78 46 46 46 46 30 30 | nities.value.LLGR_STALE.0xFFFF00 |
9c8a0 | 30 36 00 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 6c 6f 63 61 6c 20 49 50 20 | 06.``local-address``.-.local.IP. |
9c8c0 | 61 64 64 72 65 73 73 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 | address.for.IPSec.connection.wit |
9c8e0 | 68 20 74 68 69 73 20 70 65 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 20 60 60 61 6e 79 60 60 2c | h.this.peer..If.defined.``any``, |
9c900 | 20 74 68 65 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 63 6f 6e 66 69 67 | .then.an.IP.address.which.config |
9c920 | 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 72 | ured.on.interface.with.default.r |
9c940 | 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 75 73 65 64 3b 00 60 60 6c 6f 63 61 6c 2d 61 73 60 60 20 | oute.will.be.used;.``local-as``. |
9c960 | 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e | -.....................Well-known |
9c980 | 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 5f 53 55 42 | .communities.value.NO_EXPORT_SUB |
9c9a0 | 43 4f 4e 46 45 44 20 30 78 46 46 46 46 46 46 30 33 00 60 60 6c 6f 63 61 6c 2d 69 64 60 60 20 2d | CONFED.0xFFFFFF03.``local-id``.- |
9c9c0 | 20 49 44 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 49 | .ID.for.the.local.VyOS.router..I |
9c9e0 | 66 20 64 65 66 69 6e 65 64 2c 20 64 75 72 69 6e 67 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 | f.defined,.during.the.authentica |
9ca00 | 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 72 65 6d 6f 74 65 20 70 | tion.it.will.be.send.to.remote.p |
9ca20 | 65 65 72 3b 00 60 60 6c 6f 63 61 6c 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 | eer;.``local-key``.-.name.of.PKI |
9ca40 | 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 | .key-pair.with.local.private.key |
9ca60 | 00 60 60 6c 6f 63 61 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 73 6f 75 72 | .``local``.-.define.a.local.sour |
9ca80 | 63 65 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 | ce.for.match.traffic,.which.shou |
9caa0 | 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 | ld.be.encrypted.and.send.to.this |
9cac0 | 20 70 65 65 72 3a 00 60 60 6c 6f 63 61 6c 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 70 61 | .peer:.``local``:.Ruleset.for.pa |
9cae0 | 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 72 00 60 | ckets.destined.for.this.router.` |
9cb00 | 60 6d 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e | `m``.-.Execution.interval.in.min |
9cb20 | 75 74 65 73 00 60 60 6d 61 69 6e 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 | utes.``main``.Routing.table.used |
9cb40 | 20 62 79 20 56 79 4f 53 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6e 6f | .by.VyOS.and.other.interfaces.no |
9cb60 | 74 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 50 42 52 00 60 60 6d 61 69 6e 60 60 20 | t.participating.in.PBR.``main``. |
9cb80 | 75 73 65 20 4d 61 69 6e 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 | use.Main.mode.for.Key.Exchanges. |
9cba0 | 69 6e 20 74 68 65 20 49 4b 45 76 31 20 50 72 6f 74 6f 63 6f 6c 20 28 52 65 63 6f 6d 6d 65 6e 64 | in.the.IKEv1.Protocol.(Recommend |
9cbc0 | 65 64 20 44 65 66 61 75 6c 74 29 3b 00 60 60 6d 65 73 73 61 67 65 60 60 3a 20 46 75 6c 6c 20 6d | ed.Default);.``message``:.Full.m |
9cbe0 | 65 73 73 61 67 65 20 74 68 61 74 20 68 61 73 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 63 | essage.that.has.triggered.the.sc |
9cc00 | 72 69 70 74 2e 00 60 60 6d 69 74 69 67 61 74 69 6f 6e 73 3d 6f 66 66 60 60 00 60 60 6d 6f 62 69 | ript..``mitigations=off``.``mobi |
9cc20 | 6b 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 | ke``.enable.MOBIKE.Support..MOBI |
9cc40 | 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 3a 00 | KE.is.only.available.for.IKEv2:. |
9cc60 | 60 60 6d 6f 64 65 60 60 20 2d 20 6d 6f 64 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | ``mode``.-.mode.for.authenticati |
9cc80 | 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 6d 6f 74 65 20 70 65 65 72 3a | on.between.VyOS.and.remote.peer: |
9cca0 | 00 60 60 6d 6f 64 65 60 60 20 49 4b 45 76 31 20 50 68 61 73 65 20 31 20 4d 6f 64 65 20 53 65 6c | .``mode``.IKEv1.Phase.1.Mode.Sel |
9ccc0 | 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 64 65 60 60 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 | ection:.``mode``.the.type.of.the |
9cce0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 6e 69 74 6f 72 60 60 20 2d 20 50 61 73 73 69 | .connection:.``monitor``.-.Passi |
9cd00 | 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 20 61 6c 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 | vely.monitor.all.packets.on.the. |
9cd20 | 66 72 65 71 75 65 6e 63 79 2f 63 68 61 6e 6e 65 6c 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 | frequency/channel.``multi-user-b |
9cd40 | 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 | eamformee``.-.Support.for.operat |
9cd60 | 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 | ion.as.single.user.beamformer.`` |
9cd80 | 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 | multi-user-beamformer``.-.Suppor |
9cda0 | 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 | t.for.operation.as.single.user.b |
9cdc0 | 65 61 6d 66 6f 72 6d 65 72 00 60 60 6e 60 60 20 2d 20 38 30 32 2e 31 31 6e 20 2d 20 36 30 30 20 | eamformer.``n``.-.802.11n.-.600. |
9cde0 | 4d 62 69 74 73 2f 73 65 63 00 60 60 6e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 | Mbits/sec.``name``.is.used.for.t |
9ce00 | 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 | he.VyOS.CLI.command.to.identify. |
9ce20 | 74 68 69 73 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 60 60 6e 61 6d 65 60 60 20 69 73 20 74 | this.key..This.key.``name``.is.t |
9ce40 | 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | hen.used.in.the.CLI.configuratio |
9ce60 | 6e 20 74 6f 20 72 65 66 65 72 65 6e 63 65 20 74 68 65 20 6b 65 79 20 69 6e 73 74 61 6e 63 65 2e | n.to.reference.the.key.instance. |
9ce80 | 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 | .``net.ipv4.conf.all.accept_redi |
9cea0 | 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 | rects``.``net.ipv4.conf.all.acce |
9cec0 | 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e | pt_source_route``.``net.ipv4.con |
9cee0 | 66 2e 61 6c 6c 2e 6c 6f 67 5f 6d 61 72 74 69 61 6e 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e | f.all.log_martians``.``net.ipv4. |
9cf00 | 63 6f 6e 66 2e 61 6c 6c 2e 72 70 5f 66 69 6c 74 65 72 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e | conf.all.rp_filter``.``net.ipv4. |
9cf20 | 63 6f 6e 66 2e 61 6c 6c 2e 73 65 6e 64 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e | conf.all.send_redirects``.``net. |
9cf40 | 69 70 76 34 2e 69 63 6d 70 5f 65 63 68 6f 5f 69 67 6e 6f 72 65 5f 62 72 6f 61 64 63 61 73 74 73 | ipv4.icmp_echo_ignore_broadcasts |
9cf60 | 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 63 70 5f 72 66 63 31 33 33 37 60 60 00 60 60 6e 65 | ``.``net.ipv4.tcp_rfc1337``.``ne |
9cf80 | 74 2e 69 70 76 34 2e 74 63 70 5f 73 79 6e 63 6f 6f 6b 69 65 73 60 60 00 60 60 6e 65 74 2e 69 70 | t.ipv4.tcp_syncookies``.``net.ip |
9cfa0 | 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 | v6.conf.all.accept_redirects``.` |
9cfc0 | 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 | `net.ipv6.conf.all.accept_source |
9cfe0 | 5f 72 6f 75 74 65 60 60 00 60 60 6e 6f 2d 61 64 76 65 72 74 69 73 65 60 60 20 2d 20 20 20 20 20 | _route``.``no-advertise``.-..... |
9d000 | 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 | ............Well-known.communiti |
9d020 | 65 73 20 76 61 6c 75 65 20 4e 4f 5f 41 44 56 45 52 54 49 53 45 20 30 78 46 46 46 46 46 46 30 32 | es.value.NO_ADVERTISE.0xFFFFFF02 |
9d040 | 00 60 60 6e 6f 2d 65 78 70 6f 72 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | .``no-export``.-................ |
9d060 | 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 | ....Well-known.communities.value |
9d080 | 20 4e 4f 5f 45 58 50 4f 52 54 20 30 78 46 46 46 46 46 46 30 31 00 60 60 6e 6f 2d 6c 6c 67 72 60 | .NO_EXPORT.0xFFFFFF01.``no-llgr` |
9d0a0 | 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e | `.-......................Well-kn |
9d0c0 | 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 4c 4c 47 52 20 30 78 | own.communities.value.NO_LLGR.0x |
9d0e0 | 46 46 46 46 30 30 30 37 00 60 60 6e 6f 2d 70 65 65 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 | FFFF0007.``no-peer``.-.......... |
9d100 | 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 | ............Well-known.communiti |
9d120 | 65 73 20 76 61 6c 75 65 20 4e 4f 50 45 45 52 20 30 78 46 46 46 46 46 46 30 34 00 60 60 6e 6f 60 | es.value.NOPEER.0xFFFFFF04.``no` |
9d140 | 60 20 64 69 73 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 | `.disable.remote.host.re-authent |
9d160 | 69 63 61 74 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 60 6e 6f | icaton.during.an.IKE.rekey;.``no |
9d180 | 6e 65 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e | ne``.-.Execution.interval.in.min |
9d1a0 | 75 74 65 73 00 60 60 6e 6f 6e 65 60 60 20 2d 20 6c 6f 61 64 73 20 74 68 65 20 63 6f 6e 6e 65 63 | utes.``none``.-.loads.the.connec |
9d1c0 | 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 68 69 63 68 20 74 68 65 6e 20 63 61 6e 20 62 65 20 6d 61 6e | tion.only,.which.then.can.be.man |
9d1e0 | 75 61 6c 6c 79 20 69 6e 69 74 69 61 74 65 64 20 6f 72 20 75 73 65 64 20 61 73 20 61 20 72 65 73 | ually.initiated.or.used.as.a.res |
9d200 | 70 6f 6e 64 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 6e 6f 6e 65 60 60 20 73 | ponder.configuration..``none``.s |
9d220 | 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 6e 6f 6e 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 6e | et.action.to.none.(default);.``n |
9d240 | 6f 73 65 6c 65 63 74 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 75 6e | oselect``.marks.the.server.as.un |
9d260 | 75 73 65 64 2c 20 65 78 63 65 70 74 20 66 6f 72 20 64 69 73 70 6c 61 79 20 70 75 72 70 6f 73 65 | used,.except.for.display.purpose |
9d280 | 73 2e 20 54 68 65 20 73 65 72 76 65 72 20 69 73 20 64 69 73 63 61 72 64 65 64 20 62 79 20 74 68 | s..The.server.is.discarded.by.th |
9d2a0 | 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 6e 74 73 60 60 20 65 | e.selection.algorithm..``nts``.e |
9d2c0 | 6e 61 62 6c 65 73 20 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 53 65 63 75 72 69 74 79 20 28 4e 54 | nables.Network.Time.Security.(NT |
9d2e0 | 53 29 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 | S).for.the.server.as.specified.i |
9d300 | 6e 20 3a 72 66 63 3a 60 38 39 31 35 60 00 60 60 6f 70 74 69 6f 6e 73 60 60 00 60 60 6f 73 70 66 | n.:rfc:`8915`.``options``.``ospf |
9d320 | 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 4f | ``.-.Open.Shortest.Path.First.(O |
9d340 | 53 50 46 76 32 29 00 60 60 6f 73 70 66 76 33 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 | SPFv2).``ospfv3``.-.Open.Shortes |
9d360 | 74 20 50 61 74 68 20 46 69 72 73 74 20 28 49 50 76 36 29 20 28 4f 53 50 46 76 33 29 00 60 60 6f | t.Path.First.(IPv6).(OSPFv3).``o |
9d380 | 75 74 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b | ut``:.Ruleset.for.forwarded.pack |
9d3a0 | 65 74 73 20 6f 6e 20 61 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 70 | ets.on.an.outbound.interface.``p |
9d3c0 | 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 20 | assphrase``.-.local.private.key. |
9d3e0 | 70 61 73 73 70 68 72 61 73 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 70 72 69 76 | passphrase.``passphrase``.-.priv |
9d400 | 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 72 61 73 65 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 | ate.key.passphrase,.if.needed..` |
9d420 | 60 70 61 73 73 77 6f 72 64 60 60 20 2d 20 70 61 73 73 70 68 72 61 73 65 20 70 72 69 76 61 74 65 | `password``.-.passphrase.private |
9d440 | 20 6b 65 79 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 65 65 72 60 60 20 69 73 20 75 73 65 | .key,.if.needed..``peer``.is.use |
9d460 | 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 | d.for.the.VyOS.CLI.command.to.id |
9d480 | 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 20 77 68 65 72 65 20 | entify.the.WireGuard.peer.where. |
9d4a0 | 74 68 69 73 20 73 65 63 72 65 64 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 70 65 72 | this.secred.is.to.be.used..``per |
9d4c0 | 69 6f 64 60 60 3a 20 54 69 6d 65 20 77 69 6e 64 6f 77 20 66 6f 72 20 72 61 74 65 20 63 61 6c 63 | iod``:.Time.window.for.rate.calc |
9d4e0 | 75 6c 61 74 69 6f 6e 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 3a 20 60 60 73 65 63 6f | ulation..Possible.values:.``seco |
9d500 | 6e 64 60 60 20 28 6f 6e 65 20 73 65 63 6f 6e 64 29 2c 20 60 60 6d 69 6e 75 74 65 60 60 20 28 6f | nd``.(one.second),.``minute``.(o |
9d520 | 6e 65 20 6d 69 6e 75 74 65 29 2c 20 60 60 68 6f 75 72 60 60 20 28 6f 6e 65 20 68 6f 75 72 29 2e | ne.minute),.``hour``.(one.hour). |
9d540 | 20 44 65 66 61 75 6c 74 20 69 73 20 60 60 73 65 63 6f 6e 64 60 60 2e 00 60 60 70 66 73 60 60 20 | .Default.is.``second``..``pfs``. |
9d560 | 77 68 65 74 68 65 72 20 50 65 72 66 65 63 74 20 46 6f 72 77 61 72 64 20 53 65 63 72 65 63 79 20 | whether.Perfect.Forward.Secrecy. |
9d580 | 6f 66 20 6b 65 79 73 20 69 73 20 64 65 73 69 72 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 | of.keys.is.desired.on.the.connec |
9d5a0 | 74 69 6f 6e 27 73 20 6b 65 79 69 6e 67 20 63 68 61 6e 6e 65 6c 20 61 6e 64 20 64 65 66 69 6e 65 | tion's.keying.channel.and.define |
9d5c0 | 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 | s.a.Diffie-Hellman.group.for.PFS |
9d5e0 | 3a 00 60 60 70 6f 6f 6c 60 60 20 6d 6f 62 69 6c 69 7a 65 73 20 70 65 72 73 69 73 74 65 6e 74 20 | :.``pool``.mobilizes.persistent. |
9d600 | 63 6c 69 65 6e 74 20 6d 6f 64 65 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 77 69 74 68 20 61 20 6e | client.mode.association.with.a.n |
9d620 | 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 73 2e 00 60 60 70 6f 72 74 60 | umber.of.remote.servers..``port` |
9d640 | 60 20 2d 20 64 65 66 69 6e 65 20 70 6f 72 74 2e 20 48 61 76 65 20 65 66 66 65 63 74 20 6f 6e 6c | `.-.define.port..Have.effect.onl |
9d660 | 79 20 77 68 65 6e 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 60 60 70 72 65 66 | y.when.used.together.with.``pref |
9d680 | 69 78 60 60 3b 00 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 20 2d 20 75 73 | ix``;.``pre-shared-secret``.-.us |
9d6a0 | 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 | e.predefined.shared.secret.phras |
9d6c0 | 65 3b 00 60 60 70 72 65 66 65 72 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 | e;.``prefer``.marks.the.server.a |
9d6e0 | 73 20 70 72 65 66 65 72 72 65 64 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 68 69 6e 67 73 20 62 65 | s.preferred..All.other.things.be |
9d700 | 69 6e 67 20 65 71 75 61 6c 2c 20 74 68 69 73 20 68 6f 73 74 20 77 69 6c 6c 20 62 65 20 63 68 6f | ing.equal,.this.host.will.be.cho |
9d720 | 73 65 6e 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 6d 6f 6e 67 20 61 20 | sen.for.synchronization.among.a. |
9d740 | 73 65 74 20 6f 66 20 63 6f 72 72 65 63 74 6c 79 20 6f 70 65 72 61 74 69 6e 67 20 68 6f 73 74 73 | set.of.correctly.operating.hosts |
9d760 | 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 6c 6f 63 | ..``prefix``.-.IP.network.at.loc |
9d780 | 61 6c 20 73 69 64 65 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b | al.side..``prefix``.-.IP.network |
9d7a0 | 20 61 74 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 70 72 66 60 60 20 70 73 65 75 64 6f 2d | .at.remote.side..``prf``.pseudo- |
9d7c0 | 72 61 6e 64 6f 6d 20 66 75 6e 63 74 69 6f 6e 2e 00 60 60 70 72 69 6f 72 69 74 79 60 60 20 2d 20 | random.function..``priority``.-. |
9d7e0 | 41 64 64 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 70 6f 6c 69 63 79 2d 62 61 73 65 64 20 49 50 | Add.priority.for.policy-based.IP |
9d800 | 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 28 6c 6f 77 65 73 74 20 76 61 6c 75 65 20 6d 6f 72 | Sec.VPN.tunnels(lowest.value.mor |
9d820 | 65 20 70 72 65 66 65 72 61 62 6c 65 29 00 60 60 70 72 6f 63 65 73 73 6f 72 2e 6d 61 78 5f 63 73 | e.preferable).``processor.max_cs |
9d840 | 74 61 74 65 3d 31 60 60 20 4c 69 6d 69 74 20 70 72 6f 63 65 73 73 6f 72 20 74 6f 20 6d 61 78 69 | tate=1``.Limit.processor.to.maxi |
9d860 | 6d 75 6d 20 43 2d 73 74 61 74 65 20 31 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 45 53 50 2d 67 | mum.C-state.1.``proposal``.ESP-g |
9d880 | 72 6f 75 70 20 70 72 6f 70 6f 73 61 6c 20 77 69 74 68 20 6e 75 6d 62 65 72 20 3c 31 2d 36 35 35 | roup.proposal.with.number.<1-655 |
9d8a0 | 33 35 3e 3a 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 74 68 65 20 6c 69 73 74 20 6f 66 20 70 72 | 35>:.``proposal``.the.list.of.pr |
9d8c0 | 6f 70 6f 73 61 6c 73 20 61 6e 64 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 73 3a 00 60 60 | oposals.and.their.parameters:.`` |
9d8e0 | 70 72 6f 74 6f 63 6f 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c | protocol``.-.define.the.protocol |
9d900 | 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 | .for.match.traffic,.which.should |
9d920 | 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 | .be.encrypted.and.send.to.this.p |
9d940 | 65 65 72 3b 00 60 60 70 73 6b 60 60 20 2d 20 50 72 65 73 68 61 72 65 64 20 73 65 63 72 65 74 20 | eer;.``psk``.-.Preshared.secret. |
9d960 | 6b 65 79 20 6e 61 6d 65 3a 00 60 60 71 75 65 75 65 60 60 3a 20 45 6e 71 75 65 75 65 20 70 61 63 | key.name:.``queue``:.Enqueue.pac |
9d980 | 6b 65 74 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 00 60 60 72 61 74 65 60 60 3a 20 4e 75 6d 62 | ket.to.userspace..``rate``:.Numb |
9d9a0 | 65 72 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 72 65 6a 65 | er.of.packets..Default.5..``reje |
9d9c0 | 63 74 60 60 3a 20 72 65 6a 65 63 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 72 65 6d 6f 74 | ct``:.reject.the.packet..``remot |
9d9e0 | 65 2d 61 64 64 72 65 73 73 60 60 20 2d 20 72 65 6d 6f 74 65 20 49 50 20 61 64 64 72 65 73 73 20 | e-address``.-.remote.IP.address. |
9da00 | 6f 72 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e | or.hostname.for.IPSec.connection |
9da20 | 2e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 77 | ..IPv4.or.IPv6.address.is.used.w |
9da40 | 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 73 74 61 74 69 63 20 49 | hen.a.peer.has.a.public.static.I |
9da60 | 50 20 61 64 64 72 65 73 73 2e 20 48 6f 73 74 6e 61 6d 65 20 69 73 20 61 20 44 4e 53 20 6e 61 6d | P.address..Hostname.is.a.DNS.nam |
9da80 | 65 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 | e.which.could.be.used.when.a.pee |
9daa0 | 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 44 4e | r.has.a.public.IP.address.and.DN |
9dac0 | 53 20 6e 61 6d 65 2c 20 62 75 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 75 6c 64 20 | S.name,.but.an.IP.address.could. |
9dae0 | 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d 65 2e 00 60 60 | be.changed.from.time.to.time..`` |
9db00 | 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 64 65 66 69 6e 65 20 61 6e 20 49 44 20 66 6f 72 20 72 | remote-id``.-.define.an.ID.for.r |
9db20 | 65 6d 6f 74 65 20 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 75 73 69 6e 67 20 70 65 65 | emote.peer,.instead.of.using.pee |
9db40 | 72 20 6e 61 6d 65 20 6f 72 20 61 64 64 72 65 73 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 | r.name.or.address..Useful.in.cas |
9db60 | 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 62 65 68 69 6e 64 20 4e | e.if.the.remote.peer.is.behind.N |
9db80 | 41 54 20 6f 72 20 69 66 20 60 60 6d 6f 64 65 20 78 35 30 39 60 60 20 69 73 20 75 73 65 64 3b 00 | AT.or.if.``mode.x509``.is.used;. |
9dba0 | 60 60 72 65 6d 6f 74 65 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 | ``remote-key``.-.name.of.PKI.key |
9dbc0 | 2d 70 61 69 72 20 77 69 74 68 20 72 65 6d 6f 74 65 20 70 75 62 6c 69 63 20 6b 65 79 00 60 60 72 | -pair.with.remote.public.key.``r |
9dbe0 | 65 6d 6f 74 65 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 72 65 6d 6f 74 65 20 64 65 73 74 | emote``.-.define.the.remote.dest |
9dc00 | 69 6e 61 74 69 6f 6e 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 | ination.for.match.traffic,.which |
9dc20 | 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f | .should.be.encrypted.and.send.to |
9dc40 | 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 72 65 70 6c 61 79 2d 77 69 6e 64 6f 77 60 60 20 2d 20 | .this.peer:.``replay-window``.-. |
9dc60 | 49 50 73 65 63 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | IPsec.replay.window.to.configure |
9dc80 | 20 66 6f 72 20 74 68 69 73 20 43 48 49 4c 44 5f 53 41 20 28 64 65 66 61 75 6c 74 3a 20 33 32 29 | .for.this.CHILD_SA.(default:.32) |
9dca0 | 2c 20 61 20 76 61 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 49 50 73 65 63 20 72 65 | ,.a.value.of.0.disables.IPsec.re |
9dcc0 | 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 60 60 72 65 71 2d 73 73 6c 2d 73 6e 69 60 60 20 | play.protection.``req-ssl-sni``. |
9dce0 | 53 53 4c 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 | SSL.Server.Name.Indication.(SNI) |
9dd00 | 20 72 65 71 75 65 73 74 20 6d 61 74 63 68 00 60 60 72 65 73 70 2d 74 69 6d 65 60 60 3a 20 74 68 | .request.match.``resp-time``:.th |
9dd20 | 65 20 6d 61 78 69 6d 75 6d 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 20 66 6f 72 20 70 69 6e 67 | e.maximum.response.time.for.ping |
9dd40 | 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 52 61 6e 67 65 20 31 2e 2e 2e 33 30 2c 20 64 65 66 61 75 | .in.seconds..Range.1...30,.defau |
9dd60 | 6c 74 20 35 00 60 60 72 65 73 70 6f 6e 64 60 60 20 2d 20 64 6f 65 73 20 6e 6f 74 20 74 72 79 20 | lt.5.``respond``.-.does.not.try. |
9dd80 | 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 72 65 | to.initiate.a.connection.to.a.re |
9dda0 | 6d 6f 74 65 20 70 65 65 72 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 49 50 53 | mote.peer..In.this.mode,.the.IPS |
9ddc0 | 65 63 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f | ec.session.will.be.established.o |
9dde0 | 6e 6c 79 20 61 66 74 65 72 20 69 6e 69 74 69 61 74 69 6f 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f | nly.after.initiation.from.a.remo |
9de00 | 74 65 20 70 65 65 72 2e 20 43 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 | te.peer..Could.be.useful.when.th |
9de20 | 65 72 65 20 69 73 20 6e 6f 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 74 6f | ere.is.no.direct.connectivity.to |
9de40 | 20 74 68 65 20 70 65 65 72 20 64 75 65 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 | .the.peer.due.to.firewall.or.NAT |
9de60 | 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 | .in.the.middle.of.the.local.and. |
9de80 | 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 72 65 73 74 61 72 74 60 60 20 69 6d 6d 65 64 69 61 | remote.side..``restart``.immedia |
9dea0 | 74 65 6c 79 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 43 | tely.tries.to.re-negotiate.the.C |
9dec0 | 48 49 4c 44 5f 53 41 20 75 6e 64 65 72 20 61 20 66 72 65 73 68 20 49 4b 45 5f 53 41 3b 00 60 60 | HILD_SA.under.a.fresh.IKE_SA;.`` |
9dee0 | 72 65 73 74 61 72 74 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 72 65 73 74 61 72 74 3b | restart``.set.action.to.restart; |
9df00 | 00 60 60 72 65 74 75 72 6e 60 60 3a 20 52 65 74 75 72 6e 20 66 72 6f 6d 20 74 68 65 20 63 75 72 | .``return``:.Return.from.the.cur |
9df20 | 72 65 6e 74 20 63 68 61 69 6e 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 20 61 74 20 74 68 65 20 6e | rent.chain.and.continue.at.the.n |
9df40 | 65 78 74 20 72 75 6c 65 20 6f 66 20 74 68 65 20 6c 61 73 74 20 63 68 61 69 6e 2e 00 60 60 72 69 | ext.rule.of.the.last.chain..``ri |
9df60 | 70 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 | p``.-.Routing.Information.Protoc |
9df80 | 6f 6c 20 28 52 49 50 29 00 60 60 72 69 70 6e 67 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 | ol.(RIP).``ripng``.-.Routing.Inf |
9dfa0 | 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 6e 65 78 74 2d 67 65 6e 65 72 61 74 69 6f | ormation.Protocol.next-generatio |
9dfc0 | 6e 20 28 49 50 76 36 29 20 28 52 49 50 6e 67 29 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 | n.(IPv6).(RIPng).``round-robin`` |
9dfe0 | 20 2d 20 52 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 | .-.Round-robin.policy:.Transmit. |
9e000 | 70 61 63 6b 65 74 73 20 69 6e 20 73 65 71 75 65 6e 74 69 61 6c 20 6f 72 64 65 72 20 66 72 6f 6d | packets.in.sequential.order.from |
9e020 | 20 74 68 65 20 66 69 72 73 74 20 61 76 61 69 6c 61 62 6c 65 20 73 6c 61 76 65 20 74 68 72 6f 75 | .the.first.available.slave.throu |
9e040 | 67 68 20 74 68 65 20 6c 61 73 74 2e 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 44 69 73 | gh.the.last..``round-robin``.Dis |
9e060 | 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 69 6e 20 61 20 63 69 72 63 75 6c 61 72 20 | tributes.requests.in.a.circular. |
9e080 | 6d 61 6e 6e 65 72 2c 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 73 65 6e 64 69 6e 67 20 65 61 63 | manner,.sequentially.sending.eac |
9e0a0 | 68 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 6e 65 78 74 20 73 65 72 76 65 72 20 69 6e 20 | h.request.to.the.next.server.in. |
9e0c0 | 6c 69 6e 65 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 | line.``route-filter-translated-v |
9e0e0 | 34 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 | 4``.-...Well-known.communities.v |
9e100 | 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 34 20 | alue.ROUTE_FILTER_TRANSLATED_v4. |
9e120 | 30 78 46 46 46 46 30 30 30 32 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c | 0xFFFF0002.``route-filter-transl |
9e140 | 61 74 65 64 2d 76 36 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 | ated-v6``.-...Well-known.communi |
9e160 | 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 | ties.value.ROUTE_FILTER_TRANSLAT |
9e180 | 45 44 5f 76 36 20 30 78 46 46 46 46 30 30 30 34 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d | ED_v6.0xFFFF0004.``route-filter- |
9e1a0 | 76 34 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 | v4``.-..............Well-known.c |
9e1c0 | 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 34 | ommunities.value.ROUTE_FILTER_v4 |
9e1e0 | 20 30 78 46 46 46 46 30 30 30 33 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 36 60 60 20 | .0xFFFF0003.``route-filter-v6``. |
9e200 | 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e | -..............Well-known.commun |
9e220 | 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 36 20 30 78 46 46 | ities.value.ROUTE_FILTER_v6.0xFF |
9e240 | 46 46 30 30 30 35 00 60 60 72 73 61 2d 6b 65 79 2d 6e 61 6d 65 60 60 20 2d 20 73 68 61 72 65 64 | FF0005.``rsa-key-name``.-.shared |
9e260 | 20 52 53 41 20 6b 65 79 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 | .RSA.key.for.authentication..The |
9e280 | 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 | .key.must.be.defined.in.the.``se |
9e2a0 | 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 72 73 61 60 | t.vpn.rsa-keys``.section;.``rsa` |
9e2c0 | 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 52 53 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 | `.-.options.for.RSA.authenticati |
9e2e0 | 6f 6e 20 6d 6f 64 65 3a 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 | on.mode:.``rsa``.-.use.simple.sh |
9e300 | 61 72 65 64 20 52 53 41 20 6b 65 79 2e 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 | ared.RSA.key..``rsa``.-.use.simp |
9e320 | 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 | le.shared.RSA.key..The.key.must. |
9e340 | 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d | be.defined.in.the.``set.vpn.rsa- |
9e360 | 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 73 65 63 72 65 74 60 60 20 2d 20 70 72 65 | keys``.section;.``secret``.-.pre |
9e380 | 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 55 73 65 64 20 69 66 20 63 | defined.shared.secret..Used.if.c |
9e3a0 | 6f 6e 66 69 67 75 72 65 64 20 6d 6f 64 65 20 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 | onfigured.mode.``pre-shared-secr |
9e3c0 | 65 74 60 60 3b 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 | et``;.``set.firewall.bridge.forw |
9e3e0 | 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | ard.filter....``..``set.firewall |
9e400 | 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 | .ipv4.forward.filter....``..``se |
9e420 | 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e | t.firewall.ipv4.input.filter.... |
9e440 | 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 | ``..``set.firewall.ipv4.output.f |
9e460 | 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 | ilter....``..``set.firewall.ipv6 |
9e480 | 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 | .forward.filter....``..``set.fir |
9e4a0 | 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 | ewall.ipv6.input.filter....``..` |
9e4c0 | 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 | `set.firewall.ipv6.output.filter |
9e4e0 | 20 2e 2e 2e 60 60 2e 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 | ....``..``single-user-beamformee |
9e500 | 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 | ``.-.Support.for.operation.as.si |
9e520 | 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 65 00 60 60 73 69 6e 67 6c 65 2d 75 73 | ngle.user.beamformee.``single-us |
9e540 | 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 | er-beamformer``.-.Support.for.op |
9e560 | 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 | eration.as.single.user.beamforme |
9e580 | 72 00 60 60 73 6f 6e 6d 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 53 4f 4e 4d 50 20 66 | r.``sonmp``.-.Listen.for.SONMP.f |
9e5a0 | 6f 72 20 4e 6f 72 74 65 6c 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 73 6f 75 | or.Nortel.routers/switches.``sou |
9e5c0 | 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 | rce-address``.Distributes.reques |
9e5e0 | 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 | ts.based.on.the.source.IP.addres |
9e600 | 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 00 60 60 73 73 68 2d 64 73 73 60 60 00 60 60 73 73 | s.of.the.client.``ssh-dss``.``ss |
9e620 | 68 2d 65 64 32 35 35 31 39 60 60 00 60 60 73 73 68 2d 72 73 61 20 41 41 41 41 42 33 4e 7a 61 43 | h-ed25519``.``ssh-rsa.AAAAB3NzaC |
9e640 | 31 79 63 32 45 41 41 41 41 42 41 41 2e 2e 2e 56 42 44 35 6c 4b 77 45 57 42 20 75 73 65 72 6e 61 | 1yc2EAAAABAA...VBD5lKwEWB.userna |
9e660 | 6d 65 40 68 6f 73 74 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 00 60 60 73 73 68 2d 72 73 61 60 | me@host.example.com``.``ssh-rsa` |
9e680 | 60 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 2d 65 6e 64 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e | `.``ssl-fc-sni-end``.SSL.fronten |
9e6a0 | 64 20 6d 61 74 63 68 20 65 6e 64 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 | d.match.end.of.connection.Server |
9e6c0 | 20 4e 61 6d 65 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e | .Name.``ssl-fc-sni``.SSL.fronten |
9e6e0 | 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 | d.connection.Server.Name.Indicat |
9e700 | 69 6f 6e 20 6d 61 74 63 68 00 60 60 73 74 61 72 74 60 60 20 74 72 69 65 73 20 74 6f 20 69 6d 6d | ion.match.``start``.tries.to.imm |
9e720 | 65 64 69 61 74 65 6c 79 20 72 65 2d 63 72 65 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b | ediately.re-create.the.CHILD_SA; |
9e740 | 00 60 60 73 74 61 74 69 63 60 60 20 2d 20 53 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 | .``static``.-.Statically.configu |
9e760 | 72 65 64 20 72 6f 75 74 65 73 00 60 60 73 74 61 74 69 6f 6e 60 60 20 2d 20 43 6f 6e 6e 65 63 74 | red.routes.``station``.-.Connect |
9e780 | 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 61 63 63 65 73 73 20 70 6f 69 6e 74 00 60 60 73 79 6e 70 | s.to.another.access.point.``synp |
9e7a0 | 72 6f 78 79 60 60 3a 20 73 79 6e 70 72 6f 78 79 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 73 | roxy``:.synproxy.the.packet..``s |
9e7c0 | 79 73 63 74 6c 60 60 20 69 73 20 75 73 65 64 20 74 6f 20 6d 6f 64 69 66 79 20 6b 65 72 6e 65 6c | ysctl``.is.used.to.modify.kernel |
9e7e0 | 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 20 20 54 68 65 20 70 61 72 | .parameters.at.runtime...The.par |
9e800 | 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 74 68 6f 73 65 20 6c 69 73 74 | ameters.available.are.those.list |
9e820 | 65 64 20 75 6e 64 65 72 20 2f 70 72 6f 63 2f 73 79 73 2f 2e 00 60 60 74 61 62 6c 65 20 31 30 60 | ed.under./proc/sys/..``table.10` |
9e840 | 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 50 31 00 60 60 | `.Routing.table.used.for.ISP1.`` |
9e860 | 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f | table.10``.Routing.table.used.fo |
9e880 | 72 20 56 4c 41 4e 20 31 30 20 28 31 39 32 2e 31 36 38 2e 31 38 38 2e 30 2f 32 34 29 00 60 60 74 | r.VLAN.10.(192.168.188.0/24).``t |
9e8a0 | 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 | able.11``.Routing.table.used.for |
9e8c0 | 20 49 53 50 32 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 | .ISP2.``table.11``.Routing.table |
9e8e0 | 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 31 20 28 31 39 32 2e 31 36 38 2e 31 38 39 2e 30 | .used.for.VLAN.11.(192.168.189.0 |
9e900 | 2f 32 34 29 00 60 60 74 61 62 6c 65 60 60 20 2d 20 4e 6f 6e 2d 6d 61 69 6e 20 4b 65 72 6e 65 6c | /24).``table``.-.Non-main.Kernel |
9e920 | 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 00 60 60 74 61 72 67 65 74 60 60 3a 20 74 68 65 20 74 | .Routing.Table.``target``:.the.t |
9e940 | 61 72 67 65 74 20 74 6f 20 62 65 20 73 65 6e 74 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 74 6f | arget.to.be.sent.ICMP.packets.to |
9e960 | 2c 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 | ,.address.can.be.an.IPv4.address |
9e980 | 20 6f 72 20 68 6f 73 74 6e 61 6d 65 00 60 60 74 65 73 74 2d 73 63 72 69 70 74 60 60 3a 20 41 20 | .or.hostname.``test-script``:.A. |
9e9a0 | 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 20 6d 75 73 74 20 72 65 74 75 72 6e 20 | user.defined.script.must.return. |
9e9c0 | 30 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 73 75 63 63 65 73 73 66 75 6c 20 61 6e | 0.to.be.considered.successful.an |
9e9e0 | 64 20 6e 6f 6e 2d 7a 65 72 6f 20 74 6f 20 66 61 69 6c 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 | d.non-zero.to.fail..Scripts.are. |
9ea00 | 6c 6f 63 61 74 65 64 20 69 6e 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 | located.in./config/scripts,.for. |
9ea20 | 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 73 20 74 68 65 20 66 75 6c 6c 20 70 61 74 | different.locations.the.full.pat |
9ea40 | 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 6f 76 69 64 65 64 00 60 60 74 68 72 65 73 68 6f | h.needs.to.be.provided.``thresho |
9ea60 | 6c 64 60 60 3a 20 60 60 62 65 6c 6f 77 60 60 20 6f 72 20 60 60 61 62 6f 76 65 60 60 20 74 68 65 | ld``:.``below``.or.``above``.the |
9ea80 | 20 73 70 65 63 69 66 69 65 64 20 72 61 74 65 20 6c 69 6d 69 74 2e 00 60 60 74 68 72 6f 75 67 68 | .specified.rate.limit..``through |
9eaa0 | 70 75 74 60 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 | put``:.A.server.profile.focused. |
9eac0 | 6f 6e 20 69 6d 70 72 6f 76 69 6e 67 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 70 75 74 2e | on.improving.network.throughput. |
9eae0 | 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 | .This.profile.favors.performance |
9eb00 | 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 | .over.power.savings.by.setting.` |
9eb20 | 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 61 78 5f 70 65 72 66 5f 70 | `intel_pstate``.and.``max_perf_p |
9eb40 | 63 74 3d 31 30 30 60 60 20 61 6e 64 20 69 6e 63 72 65 61 73 69 6e 67 20 6b 65 72 6e 65 6c 20 6e | ct=100``.and.increasing.kernel.n |
9eb60 | 65 74 77 6f 72 6b 20 62 75 66 66 65 72 20 73 69 7a 65 73 2e 00 60 60 74 69 6d 65 6f 75 74 60 60 | etwork.buffer.sizes..``timeout`` |
9eb80 | 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c | .keep-alive.timeout.in.seconds.< |
9eba0 | 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 31 32 30 29 20 49 4b 45 76 31 20 6f 6e 6c | 2-86400>.(default.120).IKEv1.onl |
9ebc0 | 79 00 60 60 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 | y.``transmit-load-balance``.-.Ad |
9ebe0 | 61 70 74 69 76 65 20 74 72 61 6e 73 6d 69 74 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 | aptive.transmit.load.balancing:. |
9ec00 | 63 68 61 6e 6e 65 6c 20 62 6f 6e 64 69 6e 67 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 | channel.bonding.that.does.not.re |
9ec20 | 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 | quire.any.special.switch.support |
9ec40 | 2e 00 60 60 74 72 61 6e 73 70 6f 72 74 60 60 20 74 72 61 6e 73 70 6f 72 74 20 6d 6f 64 65 3b 00 | ..``transport``.transport.mode;. |
9ec60 | 60 60 74 72 61 70 60 60 20 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 | ``trap``..installs.a.trap.policy |
9ec80 | 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 | ,.which.will.catch.matching.traf |
9eca0 | 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 | fic.and.tries.to.re-negotiate.th |
9ecc0 | 65 20 74 75 6e 6e 65 6c 20 6f 6e 2d 64 65 6d 61 6e 64 3b 00 60 60 74 72 61 70 60 60 20 69 6e 73 | e.tunnel.on-demand;.``trap``.ins |
9ece0 | 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 20 66 6f 72 20 74 68 65 20 43 48 49 4c | talls.a.trap.policy.for.the.CHIL |
9ed00 | 44 5f 53 41 3b 00 60 60 74 74 6c 2d 6c 69 6d 69 74 60 60 3a 20 46 6f 72 20 74 68 65 20 55 44 50 | D_SA;.``ttl-limit``:.For.the.UDP |
9ed20 | 20 54 54 4c 20 6c 69 6d 69 74 20 74 65 73 74 20 74 68 65 20 68 6f 70 20 63 6f 75 6e 74 20 6c 69 | .TTL.limit.test.the.hop.count.li |
9ed40 | 6d 69 74 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 6c 69 6d 69 74 | mit.must.be.specified..The.limit |
9ed60 | 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 74 68 20 6c | .must.be.shorter.than.the.path.l |
9ed80 | 65 6e 67 74 68 2c 20 61 6e 20 49 43 4d 50 20 74 69 6d 65 20 65 78 70 69 72 65 64 20 6d 65 73 73 | ength,.an.ICMP.time.expired.mess |
9eda0 | 61 67 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 62 65 20 72 65 74 75 72 6e 65 64 20 66 6f 72 | age.is.needed.to.be.returned.for |
9edc0 | 20 61 20 73 75 63 63 65 73 73 66 75 6c 20 74 65 73 74 2e 20 64 65 66 61 75 6c 74 20 31 00 60 60 | .a.successful.test..default.1.`` |
9ede0 | 74 74 79 53 4e 60 60 20 2d 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 | ttySN``.-.Serial.device.name.``t |
9ee00 | 74 79 55 53 42 58 60 60 20 2d 20 55 53 42 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d | tyUSBX``.-.USB.Serial.device.nam |
9ee20 | 65 00 60 60 74 75 6e 6e 65 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 63 72 69 74 65 72 69 61 20 66 | e.``tunnel``.-.define.criteria.f |
9ee40 | 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 66 6f 72 20 65 6e 63 | or.traffic.to.be.matched.for.enc |
9ee60 | 72 79 70 74 69 6e 67 20 61 6e 64 20 73 65 6e 64 20 69 74 20 74 6f 20 61 20 70 65 65 72 3a 00 60 | rypting.and.send.it.to.a.peer:.` |
9ee80 | 60 74 75 6e 6e 65 6c 60 60 20 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 28 64 65 66 61 75 6c 74 29 3b | `tunnel``.tunnel.mode.(default); |
9eea0 | 00 60 60 74 79 70 65 60 60 3a 20 53 70 65 63 69 66 79 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 | .``type``:.Specify.the.type.of.t |
9eec0 | 65 73 74 2e 20 74 79 70 65 20 63 61 6e 20 62 65 20 70 69 6e 67 2c 20 74 74 6c 20 6f 72 20 61 20 | est..type.can.be.ping,.ttl.or.a. |
9eee0 | 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 00 60 60 75 73 65 2d 78 35 30 39 2d 69 | user.defined.script.``use-x509-i |
9ef00 | 64 60 60 20 2d 20 75 73 65 20 6c 6f 63 61 6c 20 49 44 20 66 72 6f 6d 20 78 35 30 39 20 63 65 72 | d``.-.use.local.ID.from.x509.cer |
9ef20 | 74 69 66 69 63 61 74 65 2e 20 43 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 60 60 | tificate..Cannot.be.used.when.`` |
9ef40 | 69 64 60 60 20 69 73 20 64 65 66 69 6e 65 64 3b 00 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 | id``.is.defined;.``virtual-addre |
9ef60 | 73 73 60 60 20 2d 20 44 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 | ss``.-.Defines.a.virtual.IP.addr |
9ef80 | 65 73 73 20 77 68 69 63 68 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 69 6e | ess.which.is.requested.by.the.in |
9efa0 | 69 74 69 61 74 6f 72 20 61 6e 64 20 6f 6e 65 20 6f 72 20 73 65 76 65 72 61 6c 20 49 50 76 34 20 | itiator.and.one.or.several.IPv4. |
9efc0 | 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 61 73 73 69 67 6e | and/or.IPv6.addresses.are.assign |
9efe0 | 65 64 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 70 6f 6f 6c 73 20 62 79 20 74 68 65 20 72 65 | ed.from.multiple.pools.by.the.re |
9f000 | 73 70 6f 6e 64 65 72 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 20 69 6e | sponder..``virtual-ip``.Allow.in |
9f020 | 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d | stall.virtual-ip.addresses..Comm |
9f040 | 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 | a.separated.list.of.virtual.IPs. |
9f060 | 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | to.request.in.IKEv2.configuratio |
9f080 | 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e | n.payloads.or.IKEv1.Mode.Config. |
9f0a0 | 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 | .The.wildcard.addresses.0.0.0.0. |
9f0c0 | 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 64 64 72 | and.::.request.an.arbitrary.addr |
9f0e0 | 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 | ess,.specific.addresses.may.be.d |
9f100 | 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e | efined..The.responder.may.return |
9f120 | 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 | .a.different.address,.though,.or |
9f140 | 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c | .none.at.all..``virtual-ip``.All |
9f160 | 6f 77 73 20 74 6f 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 | ows.to.install.virtual-ip.addres |
9f180 | 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 | ses..Comma.separated.list.of.vir |
9f1a0 | 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e | tual.IPs.to.request.in.IKEv2.con |
9f1c0 | 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 | figuration.payloads.or.IKEv1.Mod |
9f1e0 | 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 | e.Config..The.wildcard.addresses |
9f200 | 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 | .0.0.0.0.and.::.request.an.arbit |
9f220 | 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 | rary.address,.specific.addresses |
9f240 | 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d | .may.be.defined..The.responder.m |
9f260 | 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 | ay.return.a.different.address,.t |
9f280 | 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 20 44 65 66 69 6e 65 20 74 68 | hough,.or.none.at.all..Define.th |
9f2a0 | 65 20 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 6f 70 74 69 6f 6e 20 74 6f 20 | e.``virtual-address``.option.to. |
9f2c0 | 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 73 69 74 65 | configure.the.IP.address.in.site |
9f2e0 | 2d 74 6f 2d 73 69 74 65 20 68 69 65 72 61 72 63 68 79 2e 00 60 60 76 6e 63 60 60 20 2d 20 56 69 | -to-site.hierarchy..``vnc``.-.Vi |
9f300 | 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 20 28 56 4e 43 29 00 60 60 76 74 | rtual.Network.Control.(VNC).``vt |
9f320 | 69 60 60 20 2d 20 75 73 65 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 72 | i``.-.use.a.VTI.interface.for.tr |
9f340 | 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 41 6e 79 20 74 72 61 66 66 69 63 2c 20 77 | affic.encryption..Any.traffic,.w |
9f360 | 68 69 63 68 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 56 54 49 20 69 6e 74 65 72 66 61 | hich.will.be.send.to.VTI.interfa |
9f380 | 63 65 20 77 69 6c 6c 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f | ce.will.be.encrypted.and.send.to |
9f3a0 | 20 74 68 69 73 20 70 65 65 72 2e 20 55 73 69 6e 67 20 56 54 49 20 6d 61 6b 65 73 20 49 50 53 65 | .this.peer..Using.VTI.makes.IPSe |
9f3c0 | 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 63 68 20 66 6c 65 78 69 62 6c 65 20 61 6e | c.configuration.much.flexible.an |
9f3e0 | 64 20 65 61 73 69 65 72 20 69 6e 20 63 6f 6d 70 6c 65 78 20 73 69 74 75 61 74 69 6f 6e 2c 20 61 | d.easier.in.complex.situation,.a |
9f400 | 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 64 64 2f 64 65 6c | nd.allows.to.dynamically.add/del |
9f420 | 65 74 65 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 72 65 61 63 68 61 62 6c 65 20 76 | ete.remote.networks,.reachable.v |
9f440 | 69 61 20 61 20 70 65 65 72 2c 20 61 73 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 20 72 6f 75 74 65 | ia.a.peer,.as.in.this.mode.route |
9f460 | 72 20 64 6f 6e 27 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 64 64 69 74 69 6f 6e 61 | r.don't.need.to.create.additiona |
9f480 | 6c 20 53 41 2f 70 6f 6c 69 63 79 20 66 6f 72 20 65 61 63 68 20 72 65 6d 6f 74 65 20 6e 65 74 77 | l.SA/policy.for.each.remote.netw |
9f4a0 | 6f 72 6b 3a 00 60 60 78 35 30 39 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 78 35 30 39 | ork:.``x509``.-.options.for.x509 |
9f4c0 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 78 35 30 39 60 60 20 2d | .authentication.mode:.``x509``.- |
9f4e0 | 20 75 73 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 | .use.certificates.infrastructure |
9f500 | 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 60 60 78 6f 72 2d 68 61 73 68 60 | .for.authentication..``xor-hash` |
9f520 | 60 20 2d 20 58 4f 52 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 62 61 73 65 64 20 6f | `.-.XOR.policy:.Transmit.based.o |
9f540 | 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c | n.the.selected.transmit.hash.pol |
9f560 | 69 63 79 2e 20 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 69 73 20 61 20 73 69 | icy...The.default.policy.is.a.si |
9f580 | 6d 70 6c 65 20 5b 28 73 6f 75 72 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 27 64 20 | mple.[(source.MAC.address.XOR'd. |
9f5a0 | 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 | with.destination.MAC.address.XOR |
9f5c0 | 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 29 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 6f | .packet.type.ID).modulo.slave.co |
9f5e0 | 75 6e 74 5d 2e 20 41 6c 74 65 72 6e 61 74 65 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 | unt]..Alternate.transmit.policie |
9f600 | 73 20 6d 61 79 20 62 65 20 73 65 6c 65 63 74 65 64 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d | s.may.be.selected.via.the.:cfgcm |
9f620 | 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 65 73 63 72 69 62 65 | d:`hash-policy`.option,.describe |
9f640 | 64 20 62 65 6c 6f 77 2e 00 60 60 79 65 73 60 60 20 65 6e 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 | d.below..``yes``.enable.remote.h |
9f660 | 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 | ost.re-authentication.during.an. |
9f680 | 49 4b 45 20 72 65 6b 65 79 3b 00 60 69 67 6e 6f 72 65 60 3a 20 4e 6f 20 63 6f 72 72 65 63 74 69 | IKE.rekey;.`ignore`:.No.correcti |
9f6a0 | 6f 6e 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6c 6f 63 6b 20 66 6f 72 20 74 | on.is.applied.to.the.clock.for.t |
9f6c0 | 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 2e 20 54 68 65 20 63 6c 6f 63 6b 20 77 69 6c 6c 20 62 | he.leap.second..The.clock.will.b |
9f6e0 | 65 20 63 6f 72 72 65 63 74 65 64 20 6c 61 74 65 72 20 69 6e 20 6e 6f 72 6d 61 6c 20 6f 70 65 72 | e.corrected.later.in.normal.oper |
9f700 | 61 74 69 6f 6e 20 77 68 65 6e 20 6e 65 77 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 61 72 65 20 | ation.when.new.measurements.are. |
9f720 | 6d 61 64 65 20 61 6e 64 20 74 68 65 20 65 73 74 69 6d 61 74 65 64 20 6f 66 66 73 65 74 20 69 6e | made.and.the.estimated.offset.in |
9f740 | 63 6c 75 64 65 73 20 74 68 65 20 6f 6e 65 20 73 65 63 6f 6e 64 20 65 72 72 6f 72 2e 00 60 73 6d | cludes.the.one.second.error..`sm |
9f760 | 65 61 72 60 3a 20 57 68 65 6e 20 73 6d 65 61 72 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e | ear`:.When.smearing.a.leap.secon |
9f780 | 64 2c 20 74 68 65 20 6c 65 61 70 20 73 74 61 74 75 73 20 69 73 20 73 75 70 70 72 65 73 73 65 64 | d,.the.leap.status.is.suppressed |
9f7a0 | 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 64 20 74 69 | .on.the.server.and.the.served.ti |
9f7c0 | 6d 65 20 69 73 20 63 6f 72 72 65 63 74 65 64 20 73 6c 6f 77 6c 79 20 62 79 20 73 6c 65 77 69 6e | me.is.corrected.slowly.by.slewin |
9f7e0 | 67 20 69 6e 73 74 65 61 64 20 6f 66 20 73 74 65 70 70 69 6e 67 2e 20 54 68 65 20 63 6c 69 65 6e | g.instead.of.stepping..The.clien |
9f800 | 74 73 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 61 6e 79 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 | ts.do.not.need.any.special.confi |
9f820 | 67 75 72 61 74 69 6f 6e 20 61 73 20 74 68 65 79 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 | guration.as.they.do.not.know.the |
9f840 | 72 65 20 69 73 20 61 6e 79 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 6e 64 20 74 68 65 79 20 66 | re.is.any.leap.second.and.they.f |
9f860 | 6f 6c 6c 6f 77 20 74 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 20 77 68 69 63 68 20 65 76 65 6e | ollow.the.server.time.which.even |
9f880 | 74 75 61 6c 6c 79 20 62 72 69 6e 67 73 20 74 68 65 6d 20 62 61 63 6b 20 74 6f 20 55 54 43 2e 20 | tually.brings.them.back.to.UTC.. |
9f8a0 | 43 61 72 65 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 65 | Care.must.be.taken.to.ensure.the |
9f8c0 | 79 20 75 73 65 20 6f 6e 6c 79 20 4e 54 50 20 73 65 72 76 65 72 73 20 77 68 69 63 68 20 73 6d 65 | y.use.only.NTP.servers.which.sme |
9f8e0 | 61 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 69 6e 20 65 78 61 63 74 6c 79 20 74 68 | ar.the.leap.second.in.exactly.th |
9f900 | 65 20 73 61 6d 65 20 77 61 79 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 00 | e.same.way.for.synchronisation.. |
9f920 | 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 20 61 6e 64 20 60 73 6f 75 72 63 65 2d 69 6e 74 | `source-address`.and.`source-int |
9f940 | 65 72 66 61 63 65 60 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 61 74 20 74 68 65 20 73 | erface`.can.not.be.used.at.the.s |
9f960 | 61 6d 65 20 74 69 6d 65 2e 00 60 73 79 73 74 65 6d 60 3a 20 57 68 65 6e 20 69 6e 73 65 72 74 69 | ame.time..`system`:.When.inserti |
9f980 | 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 20 6b 65 72 6e 65 6c 20 73 74 65 | ng.a.leap.second,.the.kernel.ste |
9f9a0 | 70 73 20 74 68 65 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 20 62 61 63 6b 77 61 72 64 73 20 62 79 | ps.the.system.clock.backwards.by |
9f9c0 | 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 | .one.second.when.the.clock.gets. |
9f9e0 | 74 6f 20 30 30 3a 30 30 3a 30 30 20 55 54 43 2e 20 57 68 65 6e 20 64 65 6c 65 74 69 6e 67 20 61 | to.00:00:00.UTC..When.deleting.a |
9fa00 | 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 69 74 20 73 74 65 70 73 20 66 6f 72 77 61 72 64 20 62 | .leap.second,.it.steps.forward.b |
9fa20 | 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 | y.one.second.when.the.clock.gets |
9fa40 | 20 74 6f 20 32 33 3a 35 39 3a 35 39 20 55 54 43 2e 00 60 74 69 6d 65 7a 6f 6e 65 60 3a 20 54 68 | .to.23:59:59.UTC..`timezone`:.Th |
9fa60 | 69 73 20 64 69 72 65 63 74 69 76 65 20 73 70 65 63 69 66 69 65 73 20 61 20 74 69 6d 65 7a 6f 6e | is.directive.specifies.a.timezon |
9fa80 | 65 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 20 74 69 6d 65 7a 6f 6e 65 20 64 61 74 61 62 61 73 | e.in.the.system.timezone.databas |
9faa0 | 65 20 77 68 69 63 68 20 63 68 72 6f 6e 79 64 20 63 61 6e 20 75 73 65 20 74 6f 20 64 65 74 65 72 | e.which.chronyd.can.use.to.deter |
9fac0 | 6d 69 6e 65 20 77 68 65 6e 20 77 69 6c 6c 20 74 68 65 20 6e 65 78 74 20 6c 65 61 70 20 73 65 63 | mine.when.will.the.next.leap.sec |
9fae0 | 6f 6e 64 20 6f 63 63 75 72 20 61 6e 64 20 77 68 61 74 20 69 73 20 74 68 65 20 63 75 72 72 65 6e | ond.occur.and.what.is.the.curren |
9fb00 | 74 20 6f 66 66 73 65 74 20 62 65 74 77 65 65 6e 20 54 41 49 20 61 6e 64 20 55 54 43 2e 20 49 74 | t.offset.between.TAI.and.UTC..It |
9fb20 | 20 77 69 6c 6c 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 20 69 66 20 32 33 3a 35 | .will.periodically.check.if.23:5 |
9fb40 | 39 3a 35 39 20 61 6e 64 20 32 33 3a 35 39 3a 36 30 20 61 72 65 20 76 61 6c 69 64 20 74 69 6d 65 | 9:59.and.23:59:60.are.valid.time |
9fb60 | 73 20 69 6e 20 74 68 65 20 74 69 6d 65 7a 6f 6e 65 2e 20 54 68 69 73 20 6e 6f 72 6d 61 6c 6c 79 | s.in.the.timezone..This.normally |
9fb80 | 20 77 6f 72 6b 73 20 77 69 74 68 20 74 68 65 20 72 69 67 68 74 2f 55 54 43 20 74 69 6d 65 7a 6f | .works.with.the.right/UTC.timezo |
9fba0 | 6e 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 00 60 74 77 65 65 74 20 62 | ne.which.is.the.default.`tweet.b |
9fbc0 | 79 20 45 76 69 6c 4d 6f 67 60 5f 2c 20 32 30 32 30 2d 30 32 2d 32 31 00 61 20 62 61 6e 64 77 69 | y.EvilMog`_,.2020-02-21.a.bandwi |
9fbe0 | 64 74 68 20 74 65 73 74 20 6f 76 65 72 20 74 68 65 20 56 50 4e 20 67 6f 74 20 74 68 65 73 65 20 | dth.test.over.the.VPN.got.these. |
9fc00 | 72 65 73 75 6c 74 73 3a 00 61 20 62 6c 61 6e 6b 20 69 6e 64 69 63 61 74 65 73 20 74 68 61 74 20 | results:.a.blank.indicates.that. |
9fc20 | 6e 6f 20 74 65 73 74 20 68 61 73 20 62 65 65 6e 20 63 61 72 72 69 65 64 20 6f 75 74 00 61 65 73 | no.test.has.been.carried.out.aes |
9fc40 | 32 35 36 20 45 6e 63 72 79 70 74 69 6f 6e 00 61 6c 65 72 74 00 61 6c 6c 00 61 6e 20 52 44 20 2f | 256.Encryption.alert.all.an.RD./ |
9fc60 | 20 52 54 4c 49 53 54 00 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 20 6e 65 78 74 | .RTLIST.an.interface.with.a.next |
9fc80 | 68 6f 70 00 61 6e 79 3a 20 61 6e 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 | hop.any:.any.IP.address.to.match |
9fca0 | 2e 00 61 6e 79 3a 20 61 6e 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 | ..any:.any.IPv6.address.to.match |
9fcc0 | 2e 00 61 75 74 68 00 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 00 61 75 74 6f 20 2d 20 69 6e 74 65 | ..auth.authorization.auto.-.inte |
9fce0 | 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 20 69 73 20 61 75 74 6f 2d 6e 65 67 | rface.duplex.setting.is.auto-neg |
9fd00 | 6f 74 69 61 74 65 64 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 69 | otiated.auto.-.interface.speed.i |
9fd20 | 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 62 67 70 64 00 62 6f 6e 64 69 6e 67 00 62 | s.auto-negotiated.bgpd.bonding.b |
9fd40 | 6f 6f 74 2d 73 69 7a 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d | oot-size.bootfile-name.bootfile- |
9fd60 | 6e 61 6d 65 2c 20 66 69 6c 65 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 73 65 72 76 65 72 00 62 | name,.filename.bootfile-server.b |
9fd80 | 6f 6f 74 66 69 6c 65 2d 73 69 7a 65 00 62 72 69 64 67 65 00 63 6c 69 65 6e 74 20 65 78 61 6d 70 | ootfile-size.bridge.client.examp |
9fda0 | 6c 65 20 28 64 65 62 69 61 6e 20 39 29 00 63 6c 69 65 6e 74 2d 70 72 65 66 69 78 2d 6c 65 6e 67 | le.(debian.9).client-prefix-leng |
9fdc0 | 74 68 00 63 6c 6f 63 6b 00 63 6c 6f 63 6b 20 64 61 65 6d 6f 6e 20 28 6e 6f 74 65 20 32 29 00 63 | th.clock.clock.daemon.(note.2).c |
9fde0 | 72 69 74 00 63 72 6f 6e 00 64 61 65 6d 6f 6e 00 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e | rit.cron.daemon.ddclient_.has.an |
9fe00 | 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 | other.way.to.determine.the.WAN.I |
9fe20 | 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 | P.address..This.is.controlled.by |
9fe40 | 3a 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 | :.ddclient_.uses.two.methods.to. |
9fe60 | 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f | update.a.DNS.record..The.first.o |
9fe80 | 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f | ne.will.send.updates.directly.to |
9fea0 | 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 | .the.DNS.daemon,.in.compliance.w |
9fec0 | 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 | ith.:rfc:`2136`..The.second.one. |
9fee0 | 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 | involves.a.third.party.service,. |
9ff00 | 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 69 6d | like.DynDNS.com.or.any.other.sim |
9ff20 | 69 6c 61 72 20 77 65 62 73 69 74 65 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 | ilar.website..This.method.uses.H |
9ff40 | 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 | TTP.requests.to.transmit.the.new |
9ff60 | 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 | .IP.address..You.can.configure.b |
9ff80 | 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 | oth.in.VyOS..ddclient_.uses.two. |
9ffa0 | 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 | methods.to.update.a.DNS.record.. |
9ffc0 | 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 | The.first.one.will.send.updates. |
9ffe0 | 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 | directly.to.the.DNS.daemon,.in.c |
a0000 | 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 | ompliance.with.:rfc:`2136`..The. |
a0020 | 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 | second.one.involves.a.third.part |
a0040 | 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e | y.service,.like.DynDNS.com.or.an |
a0060 | 79 20 6f 74 68 65 72 20 73 75 63 68 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 2e 20 54 | y.other.such.service.provider..T |
a0080 | 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f | his.method.uses.HTTP.requests.to |
a00a0 | 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f | .transmit.the.new.IP.address..Yo |
a00c0 | 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 | u.can.configure.both.in.VyOS..dd |
a00e0 | 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 73 6b 69 70 20 61 6e 79 20 61 64 64 72 65 73 73 20 6c 6f | client_.will.skip.any.address.lo |
a0100 | 63 61 74 65 64 20 62 65 66 6f 72 65 20 74 68 65 20 73 74 72 69 6e 67 20 73 65 74 20 69 6e 20 60 | cated.before.the.string.set.in.` |
a0120 | 3c 70 61 74 74 65 72 6e 3e 60 2e 00 64 65 62 75 67 00 64 65 63 72 65 6d 65 6e 74 2d 6c 69 66 65 | <pattern>`..debug.decrement-life |
a0140 | 74 69 6d 65 00 64 65 66 61 75 6c 74 20 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 00 64 65 66 61 75 | time.default.min-threshold.defau |
a0160 | 6c 74 2d 6c 65 61 73 65 2d 74 69 6d 65 2c 20 6d 61 78 2d 6c 65 61 73 65 2d 74 69 6d 65 00 64 65 | lt-lease-time,.max-lease-time.de |
a0180 | 66 61 75 6c 74 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 2d 70 72 65 66 65 72 65 6e 63 | fault-lifetime.default-preferenc |
a01a0 | 65 00 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 72 00 64 65 70 72 65 63 61 74 65 2d 70 72 65 66 69 | e.default-router.deprecate-prefi |
a01c0 | 78 00 64 65 73 74 69 6e 61 74 69 6f 6e 2d 68 61 73 68 69 6e 67 00 64 68 63 70 2d 73 65 72 76 65 | x.destination-hashing.dhcp-serve |
a01e0 | 72 2d 69 64 65 6e 74 69 66 69 65 72 00 64 69 72 65 63 74 00 64 69 72 65 63 74 6f 72 79 00 64 69 | r-identifier.direct.directory.di |
a0200 | 73 61 62 6c 65 3a 20 4e 6f 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 00 64 6e 73 73 | sable:.No.source.validation.dnss |
a0220 | 6c 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2d 73 65 72 76 65 72 | l.domain-name.domain-name-server |
a0240 | 73 00 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 00 65 6d 65 72 67 00 65 6e 61 62 6c 65 20 6f 72 20 | s.domain-search.emerg.enable.or. |
a0260 | 64 69 73 61 62 6c 65 20 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 | disable..ICMPv4.redirect.message |
a0280 | 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 | s.send.by.VyOS.The.following.sys |
a02a0 | 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 | tem.parameter.will.be.altered:.e |
a02c0 | 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 | nable.or.disable.ICMPv4.redirect |
a02e0 | 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f | .messages.send.by.VyOS.The.follo |
a0300 | 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c | wing.system.parameter.will.be.al |
a0320 | 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6f 66 20 49 43 4d 50 | tered:.enable.or.disable.of.ICMP |
a0340 | 76 34 20 6f 72 20 49 43 4d 50 76 36 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 61 | v4.or.ICMPv6.redirect.messages.a |
a0360 | 63 63 65 70 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 | ccepted.by.VyOS..The.following.s |
a0380 | 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a | ystem.parameter.will.be.altered: |
a03a0 | 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f | .enable.or.disable.the.logging.o |
a03c0 | 66 20 6d 61 72 74 69 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 66 6f 6c 6c | f.martian.IPv4.packets..The.foll |
a03e0 | 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 | owing.system.parameter.will.be.a |
a0400 | 6c 74 65 72 65 64 3a 00 65 72 72 00 65 74 68 65 72 6e 65 74 00 65 78 61 63 74 2d 6d 61 74 63 68 | ltered:.err.ethernet.exact-match |
a0420 | 3a 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 | :.exact.match.of.the.network.pre |
a0440 | 66 69 78 65 73 2e 00 65 78 63 6c 75 64 65 00 66 61 69 6c 6f 76 65 72 00 66 61 73 74 3a 20 52 65 | fixes..exclude.failover.fast:.Re |
a0460 | 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 | quest.partner.to.transmit.LACPDU |
a0480 | 73 20 65 76 65 72 79 20 31 20 73 65 63 6f 6e 64 00 66 69 6c 65 20 3c 66 69 6c 65 20 6e 61 6d 65 | s.every.1.second.file.<file.name |
a04a0 | 3e 00 66 69 6c 74 65 72 2d 6c 69 73 74 00 66 74 70 00 66 75 6c 6c 20 2d 20 61 6c 77 61 79 73 20 | >.filter-list.ftp.full.-.always. |
a04c0 | 75 73 65 20 66 75 6c 6c 2d 64 75 70 6c 65 78 00 67 65 6e 65 76 65 00 68 61 6c 66 20 2d 20 61 6c | use.full-duplex.geneve.half.-.al |
a04e0 | 77 61 79 73 20 75 73 65 20 68 61 6c 66 2d 64 75 70 6c 65 78 00 68 6f 70 2d 6c 69 6d 69 74 00 68 | ways.use.half-duplex.hop-limit.h |
a0500 | 6f 73 74 3a 20 73 69 6e 67 6c 65 20 68 6f 73 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d | ost:.single.host.IP.address.to.m |
a0520 | 61 74 63 68 2e 00 68 74 74 70 73 3a 2f 2f 61 63 63 65 73 73 2e 72 65 64 68 61 74 2e 63 6f 6d 2f | atch..https://access.redhat.com/ |
a0540 | 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f | sites/default/files/attachments/ |
a0560 | 32 30 31 35 30 31 2d 70 65 72 66 2d 62 72 69 65 66 2d 6c 6f 77 2d 6c 61 74 65 6e 63 79 2d 74 75 | 201501-perf-brief-low-latency-tu |
a0580 | 6e 69 6e 67 2d 72 68 65 6c 37 2d 76 32 2e 31 2e 70 64 66 00 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d | ning-rhel7-v2.1.pdf.https://comm |
a05a0 | 75 6e 69 74 79 2e 6f 70 65 6e 76 70 6e 2e 6e 65 74 2f 6f 70 65 6e 76 70 6e 2f 77 69 6b 69 2f 44 | unity.openvpn.net/openvpn/wiki/D |
a05c0 | 61 74 61 43 68 61 6e 6e 65 6c 4f 66 66 6c 6f 61 64 2f 46 65 61 74 75 72 65 73 00 69 66 20 74 68 | ataChannelOffload/Features.if.th |
a05e0 | 65 72 65 20 69 73 20 61 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 2c 20 65 6e 61 62 6c | ere.is.a.supported.device,.enabl |
a0600 | 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 00 69 66 20 74 68 65 72 65 20 69 73 20 6e 6f 6e 20 64 65 | e.Intel...QAT.if.there.is.non.de |
a0620 | 76 69 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 73 68 6f 77 20 60 60 60 4e 6f | vice.the.command.will.show.```No |
a0640 | 20 51 41 54 20 64 65 76 69 63 65 20 66 6f 75 6e 64 60 60 60 00 69 6e 66 6f 00 69 6e 74 65 72 76 | .QAT.device.found```.info.interv |
a0660 | 61 6c 00 69 6e 76 61 6c 69 64 00 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 3a 20 6e 65 74 77 6f 72 | al.invalid.inverse-match:.networ |
a0680 | 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 6e 65 74 | k/netmask.to.match.(requires.net |
a06a0 | 77 6f 72 6b 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 69 70 2d 66 6f 72 77 61 72 64 69 6e 67 00 | work.be.defined)..ip-forwarding. |
a06c0 | 69 73 69 73 64 00 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 61 6e 79 20 4e 49 | isisd.it.can.be.used.with.any.NI |
a06e0 | 43 2c 00 69 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 72 65 61 73 65 20 68 61 72 64 77 61 72 65 | C,.it.does.not.increase.hardware |
a0700 | 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 20 72 61 74 65 20 28 61 6c 74 68 6f 75 67 68 | .device.interrupt.rate.(although |
a0720 | 20 69 74 20 64 6f 65 73 20 69 6e 74 72 6f 64 75 63 65 20 69 6e 74 65 72 2d 70 72 6f 63 65 73 73 | .it.does.introduce.inter-process |
a0740 | 6f 72 20 69 6e 74 65 72 72 75 70 74 73 20 28 49 50 49 73 29 29 2e 00 6b 65 72 6e 00 6c 32 74 70 | or.interrupts.(IPIs))..kern.l2tp |
a0760 | 76 33 00 6c 64 70 64 00 6c 65 61 73 65 00 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c | v3.ldpd.lease.least-connection.l |
a0780 | 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 20 23 20 56 50 4e | eft.local_ip:.192.168.0.10.#.VPN |
a07a0 | 20 47 61 74 65 77 61 79 2c 20 62 65 68 69 6e 64 20 4e 41 54 20 64 65 76 69 63 65 00 6c 65 66 74 | .Gateway,.behind.NAT.device.left |
a07c0 | 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 31 39 38 2e 35 31 2e 31 30 30 2e 33 60 20 23 20 73 65 72 76 | .local_ip:.`198.51.100.3`.#.serv |
a07e0 | 65 72 20 73 69 64 65 20 57 41 4e 20 49 50 00 6c 65 66 74 20 70 75 62 6c 69 63 5f 69 70 3a 31 37 | er.side.WAN.IP.left.public_ip:17 |
a0800 | 32 2e 31 38 2e 32 30 31 2e 31 30 00 6c 65 66 74 20 73 75 62 6e 65 74 3a 20 60 31 39 32 2e 31 36 | 2.18.201.10.left.subnet:.`192.16 |
a0820 | 38 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 31 2c 20 73 65 72 76 65 72 20 73 69 64 65 20 28 69 2e | 8.0.0/24`.site1,.server.side.(i. |
a0840 | 65 2e 20 6c 6f 63 61 6c 69 74 79 2c 20 61 63 74 75 61 6c 6c 79 20 74 68 65 72 65 20 69 73 20 6e | e..locality,.actually.there.is.n |
a0860 | 6f 20 63 6c 69 65 6e 74 20 6f 72 20 73 65 72 76 65 72 20 72 6f 6c 65 73 29 00 6c 69 6e 6b 2d 6d | o.client.or.server.roles).link-m |
a0880 | 74 75 00 6c 6f 63 61 6c 20 75 73 65 20 30 20 28 6c 6f 63 61 6c 30 29 00 6c 6f 63 61 6c 20 75 73 | tu.local.use.0.(local0).local.us |
a08a0 | 65 20 31 20 28 6c 6f 63 61 6c 31 29 00 6c 6f 63 61 6c 20 75 73 65 20 32 20 28 6c 6f 63 61 6c 32 | e.1.(local1).local.use.2.(local2 |
a08c0 | 29 00 6c 6f 63 61 6c 20 75 73 65 20 33 20 28 6c 6f 63 61 6c 33 29 00 6c 6f 63 61 6c 20 75 73 65 | ).local.use.3.(local3).local.use |
a08e0 | 20 34 20 28 6c 6f 63 61 6c 34 29 00 6c 6f 63 61 6c 20 75 73 65 20 35 20 28 6c 6f 63 61 6c 35 29 | .4.(local4).local.use.5.(local5) |
a0900 | 00 6c 6f 63 61 6c 20 75 73 65 20 37 20 28 6c 6f 63 61 6c 37 29 00 6c 6f 63 61 6c 30 00 6c 6f 63 | .local.use.7.(local7).local0.loc |
a0920 | 61 6c 31 00 6c 6f 63 61 6c 32 00 6c 6f 63 61 6c 33 00 6c 6f 63 61 6c 34 00 6c 6f 63 61 6c 35 00 | al1.local2.local3.local4.local5. |
a0940 | 6c 6f 63 61 6c 36 00 6c 6f 63 61 6c 37 00 6c 6f 63 61 6c 69 74 79 2d 62 61 73 65 64 2d 6c 65 61 | local6.local7.locality-based-lea |
a0960 | 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 6f 67 61 6c 65 72 74 00 6c 6f 67 61 75 64 69 74 00 | st-connection.logalert.logaudit. |
a0980 | 6c 6f 6f 73 65 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 27 73 20 73 6f | loose:.Each.incoming.packet's.so |
a09a0 | 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 61 6c 73 6f 20 74 65 73 74 65 64 20 61 67 61 69 | urce.address.is.also.tested.agai |
a09c0 | 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | nst.the.FIB.and.if.the.source.ad |
a09e0 | 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 61 6e 79 20 69 | dress.is.not.reachable.via.any.i |
a0a00 | 6e 74 65 72 66 61 63 65 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 | nterface.the.packet.check.will.f |
a0a20 | 61 69 6c 2e 00 6c 70 72 00 6d 44 4e 53 20 52 65 70 65 61 74 65 72 00 6d 44 4e 53 20 72 65 70 65 | ail..lpr.mDNS.Repeater.mDNS.repe |
a0a40 | 61 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 2d 62 72 6f | ater.can.be.configured.to.re-bro |
a0a60 | 61 64 63 61 73 74 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2e 20 42 | adcast.only.specific.services..B |
a0a80 | 79 20 64 65 66 61 75 6c 74 2c 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 61 72 65 20 72 65 2d 62 | y.default,.all.services.are.re-b |
a0aa0 | 72 6f 61 64 63 61 73 74 65 64 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 | roadcasted..mDNS.repeater.can.be |
a0ac0 | 20 65 6e 61 62 6c 65 64 20 65 69 74 68 65 72 20 6f 6e 20 49 50 76 34 20 73 6f 63 6b 65 74 20 6f | .enabled.either.on.IPv4.socket.o |
a0ae0 | 72 20 6f 6e 20 49 50 76 36 20 73 6f 63 6b 65 74 20 6f 72 20 62 6f 74 68 20 74 6f 20 72 65 2d 62 | r.on.IPv6.socket.or.both.to.re-b |
a0b00 | 72 6f 61 64 63 61 73 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 6d 44 4e 53 20 72 65 70 65 61 | roadcast..By.default,.mDNS.repea |
a0b20 | 74 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 | ter.will.listen.on.both.IPv4.and |
a0b40 | 20 49 50 76 36 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 74 65 6d 70 | .IPv6..mDNS.repeater.can.be.temp |
a0b60 | 6f 72 61 72 69 6c 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e | orarily.disabled.without.deletin |
a0b80 | 67 20 74 68 65 20 73 65 72 76 69 63 65 20 75 73 69 6e 67 00 6d 61 69 6c 00 6d 61 6e 61 67 65 64 | g.the.service.using.mail.managed |
a0ba0 | 2d 66 6c 61 67 00 6d 61 74 63 68 2d 66 72 61 67 3a 20 53 65 63 6f 6e 64 20 61 6e 64 20 66 75 72 | -flag.match-frag:.Second.and.fur |
a0bc0 | 74 68 65 72 20 66 72 61 67 6d 65 6e 74 73 20 6f 66 20 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 | ther.fragments.of.fragmented.pac |
a0be0 | 6b 65 74 73 2e 00 6d 61 74 63 68 2d 69 70 73 65 63 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 | kets..match-ipsec:.match.inbound |
a0c00 | 20 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 2d 66 72 61 67 3a 20 | .IPsec.packets..match-non-frag:. |
a0c20 | 48 65 61 64 20 66 72 61 67 6d 65 6e 74 73 20 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 | Head.fragments.or.unfragmented.p |
a0c40 | 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 65 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e | ackets..match-none:.match.inboun |
a0c60 | 64 20 6e 6f 6e 2d 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 69 6e 69 6d 61 6c 20 63 6f 6e | d.non-IPsec.packets..minimal.con |
a0c80 | 66 69 67 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 | fig.more.information.related.IGP |
a0ca0 | 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 00 6d 6f 72 65 20 69 6e 66 | ..-.:ref:`routing-isis`.more.inf |
a0cc0 | 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f | ormation.related.IGP..-.:ref:`ro |
a0ce0 | 75 74 69 6e 67 2d 6f 73 70 66 60 00 6e 61 6d 65 2d 73 65 72 76 65 72 00 6e 65 74 62 69 6f 73 2d | uting-ospf`.name-server.netbios- |
a0d00 | 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 | name-servers.network:.network/ne |
a0d20 | 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 | tmask.to.match.(requires.inverse |
a0d40 | 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 20 42 55 47 2c 20 4e 4f 20 69 6e 76 65 72 | -match.be.defined).BUG,.NO.inver |
a0d60 | 74 2d 6d 61 74 63 68 20 6f 70 74 69 6f 6e 20 69 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 36 00 6e | t-match.option.in.access-list6.n |
a0d80 | 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 | etwork:.network/netmask.to.match |
a0da0 | 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 | .(requires.inverse-match.be.defi |
a0dc0 | 6e 65 64 29 2e 00 6e 65 77 73 00 6e 65 78 74 2d 73 65 72 76 65 72 00 6e 6f 2d 61 75 74 6f 6e 6f | ned)..news.next-server.no-autono |
a0de0 | 6d 6f 75 73 2d 66 6c 61 67 00 6e 6f 2d 6f 6e 2d 6c 69 6e 6b 2d 66 6c 61 67 00 6e 6f 74 66 6f 75 | mous-flag.no-on-link-flag.notfou |
a0e00 | 6e 64 00 6e 6f 74 69 63 65 00 6e 74 70 00 6e 74 70 2d 73 65 72 76 65 72 00 6e 74 70 2d 73 65 72 | nd.notice.ntp.ntp-server.ntp-ser |
a0e20 | 76 65 72 73 00 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 61 20 4c 41 4e 20 28 69 6e 62 6f 75 6e | vers.one.rule.with.a.LAN.(inboun |
a0e40 | 64 2d 69 6e 74 65 72 66 61 63 65 29 20 61 6e 64 20 74 68 65 20 57 41 4e 20 28 69 6e 74 65 72 66 | d-interface).and.the.WAN.(interf |
a0e60 | 61 63 65 29 2e 00 6f 70 65 6e 76 70 6e 00 6f 73 70 66 36 64 00 6f 73 70 66 64 00 6f 73 70 66 64 | ace)..openvpn.ospf6d.ospfd.ospfd |
a0e80 | 20 73 75 70 70 6f 72 74 73 20 4f 70 61 71 75 65 20 4c 53 41 20 3a 72 66 63 3a 60 32 33 37 30 60 | .supports.Opaque.LSA.:rfc:`2370` |
a0ea0 | 20 61 73 20 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 54 72 61 | .as.partial.support.for.MPLS.Tra |
a0ec0 | 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 4c 53 41 73 2e 20 54 68 65 20 6f 70 61 71 75 | ffic.Engineering.LSAs..The.opaqu |
a0ee0 | 65 2d 6c 73 61 20 63 61 70 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 | e-lsa.capability.must.be.enabled |
a0f00 | 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 6f 74 68 65 72 2d 63 6f 6e | .in.the.configuration..other-con |
a0f20 | 66 69 67 2d 66 6c 61 67 00 70 61 67 65 73 20 74 6f 20 73 6f 72 74 00 70 6f 6c 69 63 79 20 61 73 | fig-flag.pages.to.sort.policy.as |
a0f40 | 2d 70 61 74 68 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 | -path-list.policy.community-list |
a0f60 | 00 70 6f 6c 69 63 79 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 | .policy.extcommunity-list.policy |
a0f80 | 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 70 2d 73 65 72 76 65 72 | .large-community-list.pop-server |
a0fa0 | 00 70 72 65 66 65 72 72 65 64 2d 6c 69 66 65 74 69 6d 65 00 70 72 65 66 69 78 2d 6c 69 73 74 2c | .preferred-lifetime.prefix-list, |
a0fc0 | 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 00 70 73 65 75 64 6f 2d 65 74 68 65 72 6e 65 74 | .distribute-list.pseudo-ethernet |
a0fe0 | 00 72 61 6e 67 65 00 72 65 61 63 68 61 62 6c 65 2d 74 69 6d 65 00 72 65 73 65 74 20 63 6f 6d 6d | .range.reachable-time.reset.comm |
a1000 | 61 6e 64 73 00 72 65 74 72 61 6e 73 2d 74 69 6d 65 72 00 72 66 63 33 34 34 32 2d 73 74 61 74 69 | ands.retrans-timer.rfc3442-stati |
a1020 | 63 2d 72 6f 75 74 65 2c 20 77 69 6e 64 6f 77 73 2d 73 74 61 74 69 63 2d 72 6f 75 74 65 00 72 66 | c-route,.windows-static-route.rf |
a1040 | 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f | c3768-compatibility.right.local_ |
a1060 | 69 70 3a 20 31 37 32 2e 31 38 2e 32 30 32 2e 31 30 20 23 20 72 69 67 68 74 20 73 69 64 65 20 57 | ip:.172.18.202.10.#.right.side.W |
a1080 | 41 4e 20 49 50 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 32 30 33 2e 30 2e 31 31 33 | AN.IP.right.local_ip:.`203.0.113 |
a10a0 | 2e 32 60 20 23 20 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 20 57 41 4e 20 49 50 00 | .2`.#.remote.office.side.WAN.IP. |
a10c0 | 72 69 67 68 74 20 73 75 62 6e 65 74 3a 20 60 31 30 2e 30 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 | right.subnet:.`10.0.0.0/24`.site |
a10e0 | 32 2c 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 00 72 69 70 64 00 72 6f 75 6e 64 2d | 2,remote.office.side.ripd.round- |
a1100 | 72 6f 62 69 6e 00 72 6f 75 74 65 2d 6d 61 70 00 72 6f 75 74 65 72 73 00 73 46 6c 6f 77 00 73 46 | robin.route-map.routers.sFlow.sF |
a1120 | 6c 6f 77 20 69 73 20 61 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 65 6e 61 62 6c 65 73 | low.is.a.technology.that.enables |
a1140 | 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 62 | .monitoring.of.network.traffic.b |
a1160 | 79 20 73 65 6e 64 69 6e 67 20 73 61 6d 70 6c 65 64 20 70 61 63 6b 65 74 73 20 74 6f 20 61 20 63 | y.sending.sampled.packets.to.a.c |
a1180 | 6f 6c 6c 65 63 74 6f 72 20 64 65 76 69 63 65 2e 00 73 65 63 75 72 69 74 79 00 73 65 72 76 65 72 | ollector.device..security.server |
a11a0 | 20 65 78 61 6d 70 6c 65 00 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 73 65 74 20 61 | .example.server-identifier.set.a |
a11c0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 | .destination.and/or.source.addre |
a11e0 | 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 73 68 61 32 35 36 20 48 61 73 68 65 | ss..Accepted.input:.sha256.Hashe |
a1200 | 73 00 73 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 00 73 69 61 64 64 72 00 73 6c 6f 77 3a 20 52 65 71 | s.show.commands.siaddr.slow:.Req |
a1220 | 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 | uest.partner.to.transmit.LACPDUs |
a1240 | 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e 64 73 00 73 6d 74 70 2d 73 65 72 76 65 72 00 73 6f | .every.30.seconds.smtp-server.so |
a1260 | 66 74 77 61 72 65 20 66 69 6c 74 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 62 65 20 61 64 64 | ftware.filters.can.easily.be.add |
a1280 | 65 64 20 74 6f 20 68 61 73 68 20 6f 76 65 72 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2c 00 73 | ed.to.hash.over.new.protocols,.s |
a12a0 | 6f 75 72 63 65 2d 68 61 73 68 69 6e 67 00 73 70 6f 6b 65 30 31 2d 73 70 6f 6b 65 30 34 00 73 70 | ource-hashing.spoke01-spoke04.sp |
a12c0 | 6f 6b 65 30 35 00 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 00 73 74 61 74 69 63 2d 72 6f 75 74 | oke05.static-mapping.static-rout |
a12e0 | 65 00 73 74 72 69 63 74 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 20 69 | e.strict:.Each.incoming.packet.i |
a1300 | 73 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 | s.tested.against.the.FIB.and.if. |
a1320 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f 74 20 74 68 65 20 62 65 73 74 20 72 65 | the.interface.is.not.the.best.re |
a1340 | 76 65 72 73 65 20 70 61 74 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c | verse.path.the.packet.check.will |
a1360 | 20 66 61 69 6c 2e 20 42 79 20 64 65 66 61 75 6c 74 20 66 61 69 6c 65 64 20 70 61 63 6b 65 74 73 | .fail..By.default.failed.packets |
a1380 | 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e 00 73 75 62 6e 65 74 2d 6d 61 73 6b 00 73 79 73 6c | .are.discarded..subnet-mask.sysl |
a13a0 | 6f 67 00 74 61 69 6c 00 74 63 5f 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 74 6f 6f 6c 20 66 | og.tail.tc_.is.a.powerful.tool.f |
a13c0 | 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 66 6f 75 6e 64 20 61 74 20 74 68 65 20 | or.Traffic.Control.found.at.the. |
a13e0 | 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 73 20 63 6f 6e 66 69 | Linux.kernel..However,.its.confi |
a1400 | 67 75 72 61 74 69 6f 6e 20 69 73 20 6f 66 74 65 6e 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 | guration.is.often.considered.a.c |
a1420 | 75 6d 62 65 72 73 6f 6d 65 20 74 61 73 6b 2e 20 46 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f | umbersome.task..Fortunately,.VyO |
a1440 | 53 20 65 61 73 65 73 20 74 68 65 20 6a 6f 62 20 74 68 72 6f 75 67 68 20 69 74 73 20 43 4c 49 2c | S.eases.the.job.through.its.CLI, |
a1460 | 20 77 68 69 6c 65 20 75 73 69 6e 67 20 60 60 74 63 60 60 20 61 73 20 62 61 63 6b 65 6e 64 2e 00 | .while.using.``tc``.as.backend.. |
a1480 | 74 66 74 70 2d 73 65 72 76 65 72 2d 6e 61 6d 65 00 74 68 69 73 20 6f 70 74 69 6f 6e 20 61 6c 6c | tftp-server-name.this.option.all |
a14a0 | 6f 77 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 70 72 65 66 69 78 2d 73 69 64 20 6f 6e 20 53 | ows.to.configure.prefix-sid.on.S |
a14c0 | 52 2e 20 54 68 65 20 e2 80 98 6e 6f 2d 70 68 70 2d 66 6c 61 67 e2 80 99 20 6d 65 61 6e 73 20 4e | R..The....no-php-flag....means.N |
a14e0 | 4f 20 50 65 6e 75 6c 74 69 6d 61 74 65 20 48 6f 70 20 50 6f 70 70 69 6e 67 20 74 68 61 74 20 61 | O.Penultimate.Hop.Popping.that.a |
a1500 | 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 | llows.SR.node.to.request.to.its. |
a1520 | 6e 65 69 67 68 62 6f 72 20 74 6f 20 6e 6f 74 20 70 6f 70 20 74 68 65 20 6c 61 62 65 6c 2e 20 54 | neighbor.to.not.pop.the.label..T |
a1540 | 68 65 20 e2 80 98 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c e2 80 99 20 66 6c 61 67 20 61 6c 6c 6f | he....explicit-null....flag.allo |
a1560 | 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 | ws.SR.node.to.request.to.its.nei |
a1580 | 67 68 62 6f 72 20 74 6f 20 73 65 6e 64 20 49 50 20 70 61 63 6b 65 74 20 77 69 74 68 20 74 68 65 | ghbor.to.send.IP.packet.with.the |
a15a0 | 20 45 58 50 4c 49 43 49 54 2d 4e 55 4c 4c 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 6e 2d 66 | .EXPLICIT-NULL.label..The....n-f |
a15c0 | 6c 61 67 2d 63 6c 65 61 72 e2 80 99 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 | lag-clear....option.can.be.used. |
a15e0 | 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6c 65 61 72 20 74 68 65 20 4e 6f 64 65 20 66 6c 61 | to.explicitly.clear.the.Node.fla |
a1600 | 67 20 74 68 61 74 20 69 73 20 73 65 74 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 50 72 65 | g.that.is.set.by.default.for.Pre |
a1620 | 66 69 78 2d 53 49 44 73 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 20 | fix-SIDs.associated.to.loopback. |
a1640 | 61 64 64 72 65 73 73 65 73 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 65 63 65 73 73 | addresses..This.option.is.necess |
a1660 | 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 41 6e 79 63 61 73 74 2d 53 49 44 73 2e 00 74 | ary.to.configure.Anycast-SIDs..t |
a1680 | 69 6d 65 2d 6f 66 66 73 65 74 00 74 69 6d 65 2d 73 65 72 76 65 72 00 74 69 6d 65 2d 73 65 72 76 | ime-offset.time-server.time-serv |
a16a0 | 65 72 73 00 74 75 6e 6e 65 6c 00 75 73 65 20 36 20 28 6c 6f 63 61 6c 36 29 00 75 73 65 20 74 68 | ers.tunnel.use.6.(local6).use.th |
a16c0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 72 65 20 69 73 20 | is.command.to.check.if.there.is. |
a16e0 | 61 6e 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 73 75 70 70 6f 72 74 65 64 20 50 72 6f 63 65 73 73 | an.Intel...QAT.supported.Process |
a1700 | 6f 72 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 75 73 65 72 00 75 75 63 70 00 76 61 6c | or.in.your.system..user.uucp.val |
a1720 | 69 64 00 76 61 6c 69 64 2d 6c 69 66 65 74 69 6d 65 00 76 65 74 68 20 69 6e 74 65 72 66 61 63 65 | id.valid-lifetime.veth.interface |
a1740 | 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 20 69 6e 20 70 61 69 72 73 20 2d 20 | s.need.to.be.created.in.pairs.-. |
a1760 | 69 74 27 73 20 63 61 6c 6c 65 64 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 00 76 78 6c 61 6e 00 | it's.called.the.peer.name.vxlan. |
a1780 | 77 61 72 6e 69 6e 67 00 77 65 20 64 65 73 63 72 69 62 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 | warning.we.described.the.configu |
a17a0 | 72 61 74 69 6f 6e 20 53 52 20 49 53 49 53 20 2f 20 53 52 20 4f 53 50 46 20 75 73 69 6e 67 20 32 | ration.SR.ISIS./.SR.OSPF.using.2 |
a17c0 | 20 63 6f 6e 6e 65 63 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 6c 61 | .connected.with.them.to.share.la |
a17e0 | 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 77 65 69 67 68 74 65 64 2d 6c 65 61 73 74 2d | bel.information..weighted-least- |
a1800 | 63 6f 6e 6e 65 63 74 69 6f 6e 00 77 65 69 67 68 74 65 64 2d 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 | connection.weighted-round-robin. |
a1820 | 77 68 69 6c 65 20 61 20 2a 62 79 74 65 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 61 20 73 | while.a.*byte*.is.written.as.a.s |
a1840 | 69 6e 67 6c 65 20 2a 2a 62 2a 2a 2e 00 77 69 6e 73 2d 73 65 72 76 65 72 00 77 69 72 65 67 75 61 | ingle.**b**..wins-server.wiregua |
a1860 | 72 64 00 77 69 72 65 6c 65 73 73 00 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 | rd.wireless.with.:cfgcmd:`set.sy |
a1880 | 73 74 65 6d 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 71 61 74 60 20 6f 6e 20 62 6f 74 68 20 73 | stem.acceleration.qat`.on.both.s |
a18a0 | 79 73 74 65 6d 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 69 6e 63 72 65 61 73 65 73 2e 00 | ystems.the.bandwidth.increases.. |
a18c0 | 77 70 61 64 2d 75 72 6c 00 77 70 61 64 2d 75 72 6c 2c 20 77 70 61 64 2d 75 72 6c 20 63 6f 64 65 | wpad-url.wpad-url,.wpad-url.code |
a18e0 | 20 32 35 32 20 3d 20 74 65 78 74 00 77 77 61 6e 00 7a 65 62 72 61 00 4d 49 4d 45 2d 56 65 72 73 | .252.=.text.wwan.zebra.MIME-Vers |
a1900 | 69 6f 6e 3a 20 31 2e 30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 | ion:.1.0.Content-Type:.text/plai |
a1920 | 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66 65 | n;.charset=UTF-8.Content-Transfe |
a1940 | 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 38 62 69 74 0a 58 2d 47 65 6e 65 72 61 74 6f 72 3a 20 4c 6f | r-Encoding:.8bit.X-Generator:.Lo |
a1960 | 63 61 6c 61 7a 79 20 28 68 74 74 70 73 3a 2f 2f 6c 6f 63 61 6c 61 7a 79 2e 63 6f 6d 29 0a 50 72 | calazy.(https://localazy.com).Pr |
a1980 | 6f 6a 65 63 74 2d 49 64 2d 56 65 72 73 69 6f 6e 3a 20 0a 4c 61 6e 67 75 61 67 65 3a 20 70 74 0a | oject-Id-Version:..Language:.pt. |
a19a0 | 50 6c 75 72 61 6c 2d 46 6f 72 6d 73 3a 20 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c | Plural-Forms:.nplurals=2;.plural |
a19c0 | 3d 28 6e 3e 3d 30 20 26 26 20 6e 3c 3d 31 29 20 3f 20 30 20 3a 20 31 3b 0a 00 21 3c 68 3a 68 3a | =(n>=0.&&.n<=1).?.0.:.1;..!<h:h: |
a19e0 | 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 | h:h:h:h:h:h/x>:.Match.everything |
a1a00 | 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 21 3c | .except.the.specified.prefix..!< |
a1a20 | 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a | h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h: |
a1a40 | 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 | h>:.Match.everything.except.the. |
a1a60 | 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 | specified.range..!<h:h:h:h:h:h:h |
a1a80 | 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 | :h>:.Match.everything.except.the |
a1aa0 | 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 21 3c 78 2e 78 2e 78 2e 78 2f 78 3e | .specified.address..!<x.x.x.x/x> |
a1ac0 | 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 | :.Match.everything.except.the.sp |
a1ae0 | 65 63 69 66 69 65 64 20 73 75 62 6e 65 74 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e | ecified.subnet..!<x.x.x.x>-<x.x. |
a1b00 | 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 | x.x>:.Match.everything.except.th |
a1b20 | 65 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d | e.specified.range..!<x.x.x.x>:.M |
a1b40 | 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 | atch.everything.except.the.speci |
a1b60 | 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 22 4d 61 6e 61 67 65 64 20 61 64 64 72 65 73 73 20 63 | fied.address.."Managed.address.c |
a1b80 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 22 4f 74 68 65 72 20 63 6f 6e 66 69 67 | onfiguration".flag."Other.config |
a1ba0 | 75 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | uration".flag.################## |
a1bc0 | 23 c3 a4 23 23 23 23 23 23 23 23 23 23 23 23 23 20 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 | #..#############.Flowtables.Fire |
a1be0 | 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 23 23 23 23 23 23 23 23 23 23 23 23 23 | wall.Configuration.############# |
a1c00 | 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 00 28 54 68 69 73 20 63 61 6e 20 62 | ####################.(This.can.b |
a1c20 | 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 63 61 6c 6c 65 64 20 73 65 72 76 69 63 65 20 68 | e.useful.when.a.called.service.h |
a1c40 | 61 73 20 6d 61 6e 79 20 61 6e 64 2f 6f 72 20 6f 66 74 65 6e 20 63 68 61 6e 67 69 6e 67 20 64 65 | as.many.and/or.often.changing.de |
a1c60 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 2d 20 65 2e 67 2e 20 4e 65 74 66 6c | stination.addresses.-.e.g..Netfl |
a1c80 | 69 78 2e 29 00 2a 2a 31 2d 32 35 34 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 | ix.).**1-254**.....interfaces.wi |
a1ca0 | 74 68 20 61 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 69 6e 74 65 72 66 65 72 65 20 77 69 | th.a.channel.number.interfere.wi |
a1cc0 | 74 68 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 69 6e | th.interfering.interfaces.and.in |
a1ce0 | 74 65 72 66 61 63 65 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 63 68 61 6e 6e 65 6c 20 6e | terfaces.with.the.same.channel.n |
a1d00 | 75 6d 62 65 72 2e 20 2a 2a 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 80 93 20 69 6e 74 65 72 | umber..**interfering**.....inter |
a1d20 | 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f | fering.interfaces.are.assumed.to |
a1d40 | 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 61 6c 6c 20 6f 74 68 65 72 20 63 68 61 6e 6e 65 | .interfere.with.all.other.channe |
a1d60 | 6c 73 20 65 78 63 65 70 74 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 20 63 68 61 6e 6e 65 6c | ls.except.noninterfering.channel |
a1d80 | 73 2e 20 2a 2a 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 80 93 20 6e 6f 6e 69 6e 74 | s..**noninterfering**.....nonint |
a1da0 | 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 | erfering.interfaces.are.assumed. |
a1dc0 | 74 6f 20 6f 6e 6c 79 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 74 68 65 6d 73 65 6c 76 65 | to.only.interfere.with.themselve |
a1de0 | 73 2e 00 2a 2a 31 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 | s..**1..Confirm.IP.connectivity. |
a1e00 | 62 65 74 77 65 65 6e 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 61 6e | between.tunnel.source-address.an |
a1e20 | 64 20 72 65 6d 6f 74 65 3a 2a 2a 00 2a 2a 31 30 2a 2a 20 2d 20 3a 61 62 62 72 3a 60 49 50 46 49 | d.remote:**.**10**.-.:abbr:`IPFI |
a1e40 | 58 20 28 49 50 20 46 6c 6f 77 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 45 78 70 6f 72 74 29 60 20 | X.(IP.Flow.Information.Export)`. |
a1e60 | 61 73 20 70 65 72 20 3a 72 66 63 3a 60 33 39 31 37 60 00 2a 2a 32 2e 20 43 6f 6e 66 69 72 6d 20 | as.per.:rfc:`3917`.**2..Confirm. |
a1e80 | 74 68 65 20 6c 69 6e 6b 20 74 79 70 65 20 68 61 73 20 62 65 65 6e 20 73 65 74 20 74 6f 20 47 52 | the.link.type.has.been.set.to.GR |
a1ea0 | 45 3a 2a 2a 00 2a 2a 33 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 | E:**.**3..Confirm.IP.connectivit |
a1ec0 | 79 20 61 63 72 6f 73 73 20 74 68 65 20 74 75 6e 6e 65 6c 3a 2a 2a 00 2a 2a 35 2a 2a 20 2d 20 4d | y.across.the.tunnel:**.**5**.-.M |
a1ee0 | 6f 73 74 20 63 6f 6d 6d 6f 6e 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 73 74 72 69 63 74 | ost.common.version,.but.restrict |
a1f00 | 65 64 20 74 6f 20 49 50 76 34 20 66 6c 6f 77 73 20 6f 6e 6c 79 00 2a 2a 39 2a 2a 20 2d 20 4e 65 | ed.to.IPv4.flows.only.**9**.-.Ne |
a1f20 | 74 46 6c 6f 77 20 76 65 72 73 69 6f 6e 20 39 20 28 64 65 66 61 75 6c 74 29 00 2a 2a 41 53 20 70 | tFlow.version.9.(default).**AS.p |
a1f40 | 61 74 68 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 6c 72 65 61 64 79 2d 73 65 6c | ath.length.check**.**Already-sel |
a1f60 | 65 63 74 65 64 20 65 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 70 70 6c 69 65 73 | ected.external.check**.**Applies |
a1f80 | 20 74 6f 3a 2a 2a 20 49 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 | .to:**.Inbound.traffic..**Applie |
a1fa0 | 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 54 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c | s.to:**.Outbound.Traffic..**Appl |
a1fc0 | 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 | ies.to:**.Outbound.traffic..**Ap |
a1fe0 | 70 6c 79 20 74 68 65 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 | ply.the.traffic.policy.to.an.int |
a2000 | 65 72 66 61 63 65 20 69 6e 67 72 65 73 73 20 6f 72 20 65 67 72 65 73 73 2a 2a 2e 00 2a 2a 42 72 | erface.ingress.or.egress**..**Br |
a2020 | 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 | idge.Port?**:.choose.appropiate. |
a2040 | 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 69 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 | path.based.on.if.interface.were. |
a2060 | 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 | the.packet.was.received.is.part. |
a2080 | 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f | of.a.bridge,.or.not..**Bridge.Po |
a20a0 | 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 | rt?**:.choose.appropriate.path.b |
a20c0 | 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 | ased.on.whether.interface.where. |
a20e0 | 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 | the.packet.was.received.is.part. |
a2100 | 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 2a 2a 43 69 73 63 6f 20 49 4f 53 | of.a.bridge,.or.not..**Cisco.IOS |
a2120 | 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 76 | .Router:**.**Client.IP.address.v |
a2140 | 69 61 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 69 65 6e | ia.IP.range.definition**.**Clien |
a2160 | 74 20 49 50 20 73 75 62 6e 65 74 73 20 76 69 61 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2a 2a | t.IP.subnets.via.CIDR.notation** |
a2180 | 00 2a 2a 43 6c 75 73 74 65 72 2d 4c 69 73 74 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a | .**Cluster-List.length.check**.* |
a21a0 | 2a 43 6f 6e 6e 74 72 61 63 6b 20 49 67 6e 6f 72 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e | *Conntrack.Ignore**:.rules.defin |
a21c0 | 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 | ed.under.``set.system.conntrack. |
a21e0 | 69 67 6e 6f 72 65 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 43 72 | ignore.[ipv4.|.ipv6]....``..**Cr |
a2200 | 65 61 74 65 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2a 2a 2e 00 2a 2a 44 48 43 50 28 | eate.a.traffic.policy**..**DHCP( |
a2220 | 76 36 29 2a 2a 00 2a 2a 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e | v6)**.**DHCPv6.Prefix.Delegation |
a2240 | 20 28 50 44 29 2a 2a 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2a 2a 3a 20 72 75 6c | .(PD)**.**Destination.NAT**:.rul |
a2260 | 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 | es.defined.under.``set.[nat.|.na |
a2280 | 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 2e 00 2a 2a 44 65 73 74 69 6e 61 | t66].destination...``..**Destina |
a22a0 | 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 | tion.is.the.router?**:.choose.ap |
a22c0 | 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 | propiate.path.based.on.destinati |
a22e0 | 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 | on.IP.address..Transit.forward.c |
a2300 | 6f 6e 74 69 6e 75 6e 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 | ontinunes.to.**forward**,.while. |
a2320 | 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 | traffic.that.destination.IP.addr |
a2340 | 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 | ess.is.configured.on.the.router. |
a2360 | 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a 2a 2e 00 2a 2a 44 65 73 74 69 6e | continues.to.**input**..**Destin |
a2380 | 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 | ation.is.the.router?**:.choose.a |
a23a0 | 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 | ppropriate.path.based.on.destina |
a23c0 | 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 | tion.IP.address..Transit.forward |
a23e0 | 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 | .continues.to.**forward**,.while |
a2400 | 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 | .traffic.that.destination.IP.add |
a2420 | 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 | ress.is.configured.on.the.router |
a2440 | 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a 2a 2e 00 2a 2a 44 6f 63 75 6d | .continues.to.**input**..**Docum |
a2460 | 65 6e 74 61 74 69 6f 6e 20 75 6e 64 65 72 20 64 65 76 65 6c 6f 70 6d 65 6e 74 2a 2a 00 2a 2a 45 | entation.under.development**.**E |
a2480 | 74 68 65 72 6e 65 74 20 28 70 72 6f 74 6f 63 6f 6c 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | thernet.(protocol,.destination.a |
a24a0 | 64 64 72 65 73 73 20 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 29 2a 2a 00 2a 2a 45 78 | ddress.or.source.address)**.**Ex |
a24c0 | 61 6d 70 6c 65 3a 2a 2a 00 2a 2a 45 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 46 69 | ample:**.**External.check**.**Fi |
a24e0 | 72 65 77 61 6c 6c 20 6d 61 72 6b 2a 2a 00 2a 2a 46 6c 6f 77 74 61 62 6c 65 20 52 65 66 65 72 65 | rewall.mark**.**Flowtable.Refere |
a2500 | 6e 63 65 3a 2a 2a 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 6b 65 72 6e 65 6c 2e 6f 72 67 2f 6e | nce:**.https://docs.kernel.org/n |
a2520 | 65 74 77 6f 72 6b 69 6e 67 2f 6e 66 5f 66 6c 6f 77 74 61 62 6c 65 2e 68 74 6d 6c 00 2a 2a 46 6f | etworking/nf_flowtable.html.**Fo |
a2540 | 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2a 2a 20 6f 66 20 4e 65 74 66 69 6c 74 65 | r.more.information**.of.Netfilte |
a2560 | 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 | r.hooks.and.Linux.networking.pac |
a2580 | 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 | ket.flows.can.be.found.in.`Netfi |
a25a0 | 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 | lter-Hooks.<https://wiki.nftable |
a25c0 | 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 | s.org/wiki-nftables/index.php/Ne |
a25e0 | 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 | tfilter_hooks>`_.**Forward.(Brid |
a2600 | 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 | ge)**:.stage.where.traffic.that. |
a2620 | 69 73 20 74 72 61 73 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 | is.trasspasing.through.the.bridg |
a2640 | 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a | e.is.filtered.and.controlled:.** |
a2660 | 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 | Forward.(Bridge)**:.stage.where. |
a2680 | 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 65 73 70 61 73 69 6e 67 20 74 68 72 6f 75 | traffic.that.is.trespasing.throu |
a26a0 | 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f | gh.the.bridge.is.filtered.and.co |
a26c0 | 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 | ntrolled:.**Forward**:.stage.whe |
a26e0 | 72 65 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 | re.transit.traffic.can.be.filter |
a2700 | 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 | ed.and.controlled..This.includes |
a2720 | 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 | .ipv4.and.ipv6.filtering.rules,. |
a2740 | 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 48 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 3a 2a | defined.in:.**Hardware.offload:* |
a2760 | 2a 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 4e 49 43 | *.should.be.supported.by.the.NIC |
a2780 | 73 20 75 73 65 64 2e 00 2a 2a 49 47 50 20 63 6f 73 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 49 50 76 | s.used..**IGP.cost.check**.**IPv |
a27a0 | 34 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 20 6c 65 | 4.(DSCP.value,.maximum.packet.le |
a27c0 | 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a | ngth,.protocol,.source.address,* |
a27e0 | 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 | *.**destination.address,.source. |
a2800 | 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c | port,.destination.port.or.TCP.fl |
a2820 | 61 67 73 29 2a 2a 00 2a 2a 49 50 76 36 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d | ags)**.**IPv6.(DSCP.value,.maxim |
a2840 | 75 6d 20 70 61 79 6c 6f 61 64 20 6c 65 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 | um.payload.length,.protocol,.sou |
a2860 | 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 | rce.address,**.**destination.add |
a2880 | 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 | ress,.source.port,.destination.p |
a28a0 | 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a 2a 49 66 20 79 6f 75 20 61 72 65 | ort.or.TCP.flags)**.**If.you.are |
a28c0 | 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 20 70 6f 6c 69 63 79 20 66 6f 72 20 79 6f 75 72 20 6f | .looking.for.a.policy.for.your.o |
a28e0 | 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2a 2a 20 62 75 74 20 79 6f 75 20 64 6f 6e 27 74 20 | utbound.traffic**.but.you.don't. |
a2900 | 6b 6e 6f 77 20 77 68 69 63 68 20 6f 6e 65 20 79 6f 75 20 6e 65 65 64 20 61 6e 64 20 79 6f 75 20 | know.which.one.you.need.and.you. |
a2920 | 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 65 76 65 72 79 20 70 | don't.want.to.go.through.every.p |
a2940 | 6f 73 73 69 62 6c 65 20 70 6f 6c 69 63 79 20 73 68 6f 77 6e 20 68 65 72 65 2c 20 2a 2a 6f 75 72 | ossible.policy.shown.here,.**our |
a2960 | 20 62 65 74 20 69 73 20 74 68 61 74 20 68 69 67 68 6c 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 61 | .bet.is.that.highly.likely.you.a |
a2980 | 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 2a 2a 20 53 68 61 70 65 72 5f 20 2a 2a 70 6f 6c | re.looking.for.a**.Shaper_.**pol |
a29a0 | 69 63 79 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 2a 2a 20 3a 72 65 66 3a 60 73 65 74 20 | icy.and.you.want.to**.:ref:`set. |
a29c0 | 69 74 73 20 71 75 65 75 65 73 20 3c 65 6d 62 65 64 3e 60 20 2a 2a 61 73 20 46 51 2d 43 6f 44 65 | its.queues.<embed>`.**as.FQ-CoDe |
a29e0 | 6c 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 | l**..**Important.note.about.defa |
a2a00 | 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e | ult-actions:**.If.default.action |
a2a20 | 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e | .for.any.base.chain.is.not.defin |
a2a40 | 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 | ed,.then.the.default.action.is.s |
a2a60 | 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e | et.to.**accept**.for.that.chain. |
a2a80 | 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 | .For.custom.chains,.if.default.a |
a2aa0 | 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 | ction.is.not.defined,.then.the.d |
a2ac0 | 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a | efault-action.is.set.to.**drop** |
a2ae0 | 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d | .**Important.note.about.default- |
a2b00 | 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 | actions:**.If.default.action.for |
a2b20 | 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 | .any.base.chain.is.not.defined,. |
a2b40 | 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 | then.the.default.action.is.set.t |
a2b60 | 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 | o.**accept**.for.that.chain..For |
a2b80 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f | .custom.chains,.if.default.actio |
a2ba0 | 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 | n.is.not.defined,.then.the.defau |
a2bc0 | 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a | lt-action.is.set.to.**drop**..** |
a2be0 | 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 | Important.note.about.default-act |
a2c00 | 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e | ions:**.If.default.action.for.an |
a2c20 | 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 | y.chain.is.not.defined,.then.the |
a2c40 | 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 | .default.action.is.set.to.**acce |
a2c60 | 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 4f 6e 6c 79 20 66 6f 72 20 63 75 | pt**.for.that.chain..Only.for.cu |
a2c80 | 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 | stom.chains,.the.default.action. |
a2ca0 | 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 | is.set.to.**drop**..**Important. |
a2cc0 | 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 | note.about.default-actions:**.If |
a2ce0 | 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 | .default.action.for.any.chain.is |
a2d00 | 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 | .not.defined,.then.the.default.a |
a2d20 | 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 20 66 6f 72 20 74 68 61 | ction.is.set.to.**drop**.for.tha |
a2d40 | 74 20 63 68 61 69 6e 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 | t.chain..**Important.note.on.usa |
a2d60 | 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 | ge.of.terms:**.The.firewall.make |
a2d80 | 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 | s.use.of.the.terms.`forward`,.`i |
a2da0 | 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c | nput`,.and.`output`.for.firewall |
a2dc0 | 20 70 6f 6c 69 63 79 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 4e 65 74 | .policy..More.information.of.Net |
a2de0 | 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e | filter.hooks.and.Linux.networkin |
a2e00 | 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 | g.packet.flows.can.be.found.in.` |
a2e20 | 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 | Netfilter-Hooks.<https://wiki.nf |
a2e40 | 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 | tables.org/wiki-nftables/index.p |
a2e60 | 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 49 6d 70 6f 72 74 61 6e | hp/Netfilter_hooks>`_.**Importan |
a2e80 | 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 | t.note.on.usage.of.terms:**.The. |
a2ea0 | 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 | firewall.makes.use.of.the.terms. |
a2ec0 | 60 69 6e 60 2c 20 60 6f 75 74 60 2c 20 61 6e 64 20 60 6c 6f 63 61 6c 60 20 66 6f 72 20 66 69 72 | `in`,.`out`,.and.`local`.for.fir |
a2ee0 | 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 55 73 65 72 73 20 65 78 70 65 72 69 65 6e 63 65 64 20 | ewall.policy..Users.experienced. |
a2f00 | 77 69 74 68 20 6e 65 74 66 69 6c 74 65 72 20 6f 66 74 65 6e 20 63 6f 6e 66 75 73 65 20 60 69 6e | with.netfilter.often.confuse.`in |
a2f20 | 60 20 74 6f 20 62 65 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 60 49 4e 50 55 | `.to.be.a.reference.to.the.`INPU |
a2f40 | 54 60 20 63 68 61 69 6e 2c 20 61 6e 64 20 60 6f 75 74 60 20 74 68 65 20 60 4f 55 54 50 55 54 60 | T`.chain,.and.`out`.the.`OUTPUT` |
a2f60 | 20 63 68 61 69 6e 20 66 72 6f 6d 20 6e 65 74 66 69 6c 74 65 72 2e 20 54 68 69 73 20 69 73 20 6e | .chain.from.netfilter..This.is.n |
a2f80 | 6f 74 20 74 68 65 20 63 61 73 65 2e 20 54 68 65 73 65 20 69 6e 73 74 65 61 64 20 69 6e 64 69 63 | ot.the.case..These.instead.indic |
a2fa0 | 61 74 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 60 46 4f 52 57 41 52 44 60 20 63 68 61 | ate.the.use.of.the.`FORWARD`.cha |
a2fc0 | 69 6e 20 61 6e 64 20 65 69 74 68 65 72 20 74 68 65 20 69 6e 70 75 74 20 6f 72 20 6f 75 74 70 75 | in.and.either.the.input.or.outpu |
a2fe0 | 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 | t.interface..The.`INPUT`.chain,. |
a3000 | 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 | which.is.used.for.local.traffic. |
a3020 | 74 6f 20 74 68 65 20 4f 53 2c 20 69 73 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 61 73 20 | to.the.OS,.is.a.reference.to.as. |
a3040 | 60 6c 6f 63 61 6c 60 20 77 69 74 68 20 72 65 73 70 65 63 74 20 74 6f 20 69 74 73 20 69 6e 70 75 | `local`.with.respect.to.its.inpu |
a3060 | 74 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a | t.interface..**Important.note:** |
a3080 | 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c | .This.documentation.is.valid.onl |
a30a0 | 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d | y.for.VyOS.Sagitta.prior.to.1.4- |
a30c0 | 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 | rolling-202308040557.**Important |
a30e0 | 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 | .note:**.This.documentation.is.v |
a3100 | 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 | alid.only.for.VyOS.Sagitta.prior |
a3120 | 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 59 59 59 59 4d 4d 44 44 48 48 6d 6d 00 2a 2a 49 | .to.1.4-rolling-YYYYMMDDHHmm.**I |
a3140 | 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 | nput**:.stage.where.traffic.dest |
a3160 | 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 | inated.to.the.router.itself.can. |
a3180 | 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 | be.filtered.and.controlled..This |
a31a0 | 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 | .is.where.all.rules.for.securing |
a31c0 | 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 | .the.router.should.take.place..T |
a31e0 | 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 | his.includes.ipv4.and.ipv6.filte |
a3200 | 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 6e 70 75 74 2a | ring.rules,.defined.in:.**Input* |
a3220 | 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 | *:.stage.where.traffic.destined. |
a3240 | 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c | for.the.router.itself.can.be.fil |
a3260 | 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 | tered.and.controlled..This.is.wh |
a3280 | 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 | ere.all.rules.for.securing.the.r |
a32a0 | 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e | outer.should.take.place..This.in |
a32c0 | 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 | cludes.ipv4.and.ipv6.filtering.r |
a32e0 | 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 6e 74 65 72 66 61 63 65 20 6e 61 | ules,.defined.in:.**Interface.na |
a3300 | 6d 65 2a 2a 00 2a 2a 4c 45 46 54 2a 2a 00 2a 2a 4c 45 46 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e | me**.**LEFT**.**LEFT:**.*.WAN.in |
a3320 | 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 31 60 20 2a 20 60 65 74 68 30 2e 32 30 | terface.on.`eth0.201`.*.`eth0.20 |
a3340 | 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 2f | 1`.interface.IP:.`172.18.201.10/ |
a3360 | 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e | 24`.*.`vti10`.interface.IP:.`10. |
a3380 | 30 2e 30 2e 32 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a | 0.0.2/31`.*.`dum0`.interface.IP: |
a33a0 | 20 60 31 30 2e 30 2e 31 31 2e 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 | .`10.0.11.1/24`.(for.testing.pur |
a33c0 | 70 6f 73 65 73 29 00 2a 2a 4c 61 79 65 72 20 33 20 62 72 69 64 67 65 2a 2a 3a 20 57 68 65 6e 20 | poses).**Layer.3.bridge**:.When. |
a33e0 | 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 | an.IP.address.is.assigned.to.the |
a3400 | 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 69 66 20 74 72 61 66 66 69 | .bridge.interface,.and.if.traffi |
a3420 | 63 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 74 68 69 73 20 | c.is.sent.to.the.router.to.this. |
a3440 | 49 50 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 75 73 69 6e 67 20 73 75 63 68 20 49 50 20 61 73 | IP.(for.example.using.such.IP.as |
a3460 | 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 29 2c 20 74 68 65 6e 20 72 75 6c 65 73 20 64 65 | .default.gateway),.then.rules.de |
a3480 | 66 69 6e 65 64 20 66 6f 72 20 2a 2a 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 2a 2a 20 77 6f | fined.for.**bridge.firewall**.wo |
a34a0 | 6e 27 74 20 6d 61 74 63 68 2c 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 61 6e 61 6c 79 73 69 73 | n't.match,.and.firewall.analysis |
a34c0 | 20 63 6f 6e 74 69 6e 75 65 73 20 61 74 20 2a 2a 49 50 20 6c 61 79 65 72 2a 2a 2e 00 2a 2a 4c 65 | .continues.at.**IP.layer**..**Le |
a34e0 | 61 66 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 65 61 66 33 20 63 6f 6e | af2.configuration:**.**Leaf3.con |
a3500 | 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 69 6e 75 78 20 73 79 73 74 65 6d 64 2d 6e 65 | figuration:**.**Linux.systemd-ne |
a3520 | 74 77 6f 72 6b 64 3a 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 63 68 65 | tworkd:**.**Local.preference.che |
a3540 | 63 6b 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 72 6f 75 74 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 45 44 | ck**.**Local.route.check**.**MED |
a3560 | 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 75 6c 74 69 2d 70 61 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a | .check**.**Multi-path.check**.** |
a3580 | 4e 6f 64 65 20 31 2a 2a 00 2a 2a 4e 6f 64 65 20 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 20 32 2a 2a 00 | Node.1**.**Node.1:**.**Node.2**. |
a35a0 | 2a 2a 4e 6f 64 65 20 32 3a 2a 2a 00 2a 2a 4e 6f 64 65 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 32 3a 2a | **Node.2:**.**Node1:**.**Node2:* |
a35c0 | 2a 00 2a 2a 4f 50 54 49 4f 4e 41 4c 3a 2a 2a 20 45 78 63 6c 75 64 65 20 49 6e 74 65 72 2d 56 4c | *.**OPTIONAL:**.Exclude.Inter-VL |
a35e0 | 41 4e 20 74 72 61 66 66 69 63 20 28 62 65 74 77 65 65 6e 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 | AN.traffic.(between.VLAN10.and.V |
a3600 | 4c 41 4e 31 31 29 20 66 72 6f 6d 20 50 42 52 00 2a 2a 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 72 | LAN11).from.PBR.**OSPF.network.r |
a3620 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 | outing.table**.....includes.a.li |
a3640 | 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 66 6f 72 20 61 6c 6c 20 61 63 | st.of.acquired.routes.for.all.ac |
a3660 | 63 65 73 73 69 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 28 6f 72 20 61 67 67 72 65 67 61 74 65 64 | cessible.networks.(or.aggregated |
a3680 | 20 61 72 65 61 20 72 61 6e 67 65 73 29 20 6f 66 20 4f 53 50 46 20 73 79 73 74 65 6d 2e 20 22 49 | .area.ranges).of.OSPF.system.."I |
a36a0 | 41 22 20 66 6c 61 67 20 6d 65 61 6e 73 20 74 68 61 74 20 72 6f 75 74 65 20 64 65 73 74 69 6e 61 | A".flag.means.that.route.destina |
a36c0 | 74 69 6f 6e 20 69 73 20 69 6e 20 74 68 65 20 61 72 65 61 20 74 6f 20 77 68 69 63 68 20 74 68 65 | tion.is.in.the.area.to.which.the |
a36e0 | 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 69 | .router.is.not.connected,.i.e..i |
a3700 | 74 e2 80 99 73 20 61 6e 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 2e 20 49 6e 20 73 71 75 | t...s.an.inter-area.path..In.squ |
a3720 | 61 72 65 20 62 72 61 63 6b 65 74 73 20 61 20 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 66 6f | are.brackets.a.summary.metric.fo |
a3740 | 72 20 61 6c 6c 20 6c 69 6e 6b 73 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 70 61 74 68 | r.all.links.through.which.a.path |
a3760 | 20 6c 69 65 73 20 74 6f 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 73 70 65 63 69 66 69 | .lies.to.this.network.is.specifi |
a3780 | 65 64 2e 20 22 76 69 61 22 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 73 20 61 20 72 6f 75 74 65 | ed.."via".prefix.defines.a.route |
a37a0 | 72 2d 67 61 74 65 77 61 79 2c 20 69 2e 65 2e 20 74 68 65 20 66 69 72 73 74 20 72 6f 75 74 65 72 | r-gateway,.i.e..the.first.router |
a37c0 | 20 6f 6e 20 74 68 65 20 77 61 79 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 | .on.the.way.to.the.destination.( |
a37e0 | 6e 65 78 74 20 68 6f 70 29 2e 20 2a 2a 4f 53 50 46 20 72 6f 75 74 65 72 20 72 6f 75 74 69 6e 67 | next.hop)..**OSPF.router.routing |
a3800 | 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 | .table**.....includes.a.list.of. |
a3820 | 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 6f 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c | acquired.routes.to.all.accessibl |
a3840 | 65 20 41 42 52 73 20 61 6e 64 20 41 53 42 52 73 2e 20 2a 2a 4f 53 50 46 20 65 78 74 65 72 6e 61 | e.ABRs.and.ASBRs..**OSPF.externa |
a3860 | 6c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 | l.routing.table**.....includes.a |
a3880 | 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 | .list.of.acquired.routes.that.ar |
a38a0 | 65 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 | e.external.to.the.OSPF.process.. |
a38c0 | 22 45 22 20 66 6c 61 67 20 70 6f 69 6e 74 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 | "E".flag.points.to.the.external. |
a38e0 | 6c 69 6e 6b 20 6d 65 74 72 69 63 20 74 79 70 65 20 28 45 31 20 e2 80 93 20 6d 65 74 72 69 63 20 | link.metric.type.(E1.....metric. |
a3900 | 74 79 70 65 20 31 2c 20 45 32 20 e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 29 2e 20 45 | type.1,.E2.....metric.type.2)..E |
a3920 | 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 69 73 20 70 72 69 6e 74 65 64 20 69 | xternal.link.metric.is.printed.i |
a3940 | 6e 20 74 68 65 20 22 3c 6d 65 74 72 69 63 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 | n.the."<metric.of.the.router.whi |
a3960 | 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 65 20 6c 69 6e 6b 3e 2f 3c 6c 69 6e 6b 20 6d 65 | ch.advertised.the.link>/<link.me |
a3980 | 74 72 69 63 3e 22 20 66 6f 72 6d 61 74 2e 00 2a 2a 4f 6e 65 20 67 61 74 65 77 61 79 3a 2a 2a 00 | tric>".format..**One.gateway:**. |
a39a0 | 2a 2a 4f 72 69 67 69 6e 20 63 68 65 63 6b 2a 2a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 | **Origin.check**.**Output**:.sta |
a39c0 | 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 6f 72 69 67 69 6e 61 | ge.where.traffic.that.is.origina |
a39e0 | 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 | ted.by.the.router.itself.can.be. |
a3a00 | 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 61 72 65 20 69 6e | filtered.and.controlled..Bare.in |
a3a20 | 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 | .mind.that.this.traffic.can.be.a |
a3a40 | 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 74 65 64 20 62 79 20 61 20 69 | .new.connection.originted.by.a.i |
a3a60 | 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 | nternal.process.running.on.VyOS. |
a3a80 | 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 63 61 6e 20 62 65 20 61 | router,.such.as.NTP,.or.can.be.a |
a3aa0 | 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 | .response.to.traffic.received.ex |
a3ac0 | 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 | ternaly.through.**inputt**.(for. |
a3ae0 | 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e | example.response.to.an.ssh.login |
a3b00 | 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e | .attempt.to.the.router)..This.in |
a3b20 | 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 | cludes.ipv4.and.ipv6.filtering.r |
a3b40 | 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 | ules,.defined.in:.**Output**:.st |
a3b60 | 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 | age.where.traffic.that.originate |
a3b80 | 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 | s.from.the.router.itself.can.be. |
a3ba0 | 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e | filtered.and.controlled..Bear.in |
a3bc0 | 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 | .mind.that.this.traffic.can.be.a |
a3be0 | 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 | .new.connection.originated.by.a. |
a3c00 | 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 | internal.process.running.on.VyOS |
a3c20 | 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f | .router,.such.as.NTP,.or.a.respo |
a3c40 | 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c | nse.to.traffic.received.external |
a3c60 | 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 | y.through.**input**.(for.example |
a3c80 | 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 | .response.to.an.ssh.login.attemp |
a3ca0 | 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 | t.to.the.router)..This.includes. |
a3cc0 | 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 | ipv4.and.ipv6.filtering.rules,.d |
a3ce0 | 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 | efined.in:.**Output**:.stage.whe |
a3d00 | 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 | re.traffic.that.originates.from. |
a3d20 | 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 | the.router.itself.can.be.filtere |
a3d40 | 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 | d.and.controlled..Bear.in.mind.t |
a3d60 | 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f | hat.this.traffic.can.be.a.new.co |
a3d80 | 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 | nnection.originated.by.a.interna |
a3da0 | 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 | l.process.running.on.VyOS.router |
a3dc0 | 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 | ,.such.as.NTP,.or.a.response.to. |
a3de0 | 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 | traffic.received.externaly.throu |
a3e00 | 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f | gh.**inputt**.(for.example.respo |
a3e20 | 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 | nse.to.an.ssh.login.attempt.to.t |
a3e40 | 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 | he.router)..This.includes.ipv4.a |
a3e60 | 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 | nd.ipv6.filtering.rules,.defined |
a3e80 | 20 69 6e 3a 00 2a 2a 50 65 65 72 20 61 64 64 72 65 73 73 2a 2a 00 2a 2a 50 6f 6c 69 63 79 20 52 | .in:.**Peer.address**.**Policy.R |
a3ea0 | 6f 75 74 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 | oute**:.rules.defined.under.``se |
a3ec0 | 74 20 70 6f 6c 69 63 79 20 5b 72 6f 75 74 65 20 7c 20 72 6f 75 74 65 36 5d 20 2e 2e 2e 60 60 2e | t.policy.[route.|.route6]....``. |
a3ee0 | 00 2a 2a 50 6f 6c 69 63 79 20 64 65 66 69 6e 69 74 69 6f 6e 3a 2a 2a 00 2a 2a 50 6f 73 74 72 6f | .**Policy.definition:**.**Postro |
a3f00 | 75 74 69 6e 67 2a 2a 3a 20 61 73 20 69 6e 20 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 2c 20 73 | uting**:.as.in.**Prerouting**,.s |
a3f20 | 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 | everal.actions.defined.in.differ |
a3f40 | 65 6e 74 20 70 61 72 74 73 20 6f 66 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ent.parts.of.VyOS.configuration. |
a3f60 | 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2e 20 54 68 69 | are.performed.in.this.stage..Thi |
a3f80 | 73 20 69 6e 63 6c 75 64 65 73 3a 00 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 | s.includes:.**Prerouting**:.seve |
a3fa0 | 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 | ral.actions.can.be.done.in.this. |
a3fc0 | 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f | stage,.and.currently.these.actio |
a3fe0 | 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 | ns.are.defined.in.different.part |
a4000 | 73 20 69 6e 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 | s.in.VyOS.configuration..Order.i |
a4020 | 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f | s.important,.and.all.these.actio |
a4040 | 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 | ns.are.performed.before.any.acti |
a4060 | 6f 6e 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 | ons.defined.under.``firewall``.s |
a4080 | 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 | ection..Relevant.configuration.t |
a40a0 | 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 | hat.acts.in.this.stage.are:.**Pr |
a40c0 | 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 | erouting**:.several.actions.can. |
a40e0 | 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 | be.done.in.this.stage,.and.curre |
a4100 | 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 | ntly.these.actions.are.defined.i |
a4120 | 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 76 79 6f 73 20 63 6f 6e 66 69 67 | n.different.parts.in.vyos.config |
a4140 | 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 | uration..Order.is.important,.and |
a4160 | 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 | .all.these.actions.are.performed |
a4180 | 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 20 75 6e 64 65 72 | .before.any.actions.define.under |
a41a0 | 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 | .``firewall``.section..Relevant. |
a41c0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 | configuration.that.acts.in.this. |
a41e0 | 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 69 6d 61 72 79 2a 2a 00 2a 2a 51 75 65 75 65 69 6e | stage.are:.**Primary**.**Queuein |
a4200 | 67 20 64 69 73 63 69 70 6c 69 6e 65 2a 2a 20 46 61 69 72 2f 46 6c 6f 77 20 51 75 65 75 65 20 43 | g.discipline**.Fair/Flow.Queue.C |
a4220 | 6f 44 65 6c 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 44 | oDel..**Queueing.discipline:**.D |
a4240 | 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 | eficit.Round.Robin..**Queueing.d |
a4260 | 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 | iscipline:**.Generalized.Random. |
a4280 | 45 61 72 6c 79 20 44 72 6f 70 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e | Early.Drop..**Queueing.disciplin |
a42a0 | 65 3a 2a 2a 20 48 69 65 72 61 72 63 68 69 63 61 6c 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 2e 00 | e:**.Hierarchical.Token.Bucket.. |
a42c0 | 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 49 6e 67 72 65 73 73 | **Queueing.discipline:**.Ingress |
a42e0 | 20 70 6f 6c 69 63 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a | .policer..**Queueing.discipline: |
a4300 | 2a 2a 20 50 46 49 46 4f 20 28 50 61 63 6b 65 74 20 46 69 72 73 74 20 49 6e 20 46 69 72 73 74 20 | **.PFIFO.(Packet.First.In.First. |
a4320 | 4f 75 74 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 | Out)..**Queueing.discipline:**.P |
a4340 | 52 49 4f 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 53 46 | RIO..**Queueing.discipline:**.SF |
a4360 | 51 20 28 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 69 6e 67 29 2e | Q.(Stochastic.Fairness.Queuing). |
a4380 | 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 54 6f 63 6b 65 6e | .**Queueing.discipline:**.Tocken |
a43a0 | 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 | .Bucket.Filter..**Queueing.disci |
a43c0 | 70 6c 69 6e 65 3a 2a 2a 20 6e 65 74 65 6d 20 28 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 | pline:**.netem.(Network.Emulator |
a43e0 | 29 20 2b 20 54 42 46 20 28 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 29 2e 00 2a | ).+.TBF.(Token.Bucket.Filter)..* |
a4400 | 2a 52 31 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 31 2a 2a 00 2a 2a 52 32 20 53 74 61 | *R1.Static.Key**.**R1**.**R2.Sta |
a4420 | 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 32 2a 2a 00 2a 2a 52 41 44 49 55 53 20 62 61 73 65 64 20 | tic.Key**.**R2**.**RADIUS.based. |
a4440 | 49 50 20 70 6f 6f 6c 73 20 28 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 29 2a 2a 00 2a | IP.pools.(Framed-IP-Address)**.* |
a4460 | 2a 52 41 44 49 55 53 20 73 65 73 73 69 6f 6e 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 44 4d 2f 43 | *RADIUS.sessions.management.DM/C |
a4480 | 6f 41 2a 2a 00 2a 2a 52 49 47 48 54 2a 2a 00 2a 2a 52 49 47 48 54 3a 2a 2a 20 2a 20 57 41 4e 20 | oA**.**RIGHT**.**RIGHT:**.*.WAN. |
a44a0 | 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 32 60 20 2a 20 60 65 74 68 30 2e | interface.on.`eth0.202`.*.`eth0. |
a44c0 | 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 32 2e 31 | 201`.interface.IP:.`172.18.202.1 |
a44e0 | 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 | 0/24`.*.`vti10`.interface.IP:.`1 |
a4500 | 30 2e 30 2e 30 2e 33 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 | 0.0.0.3/31`.*.`dum0`.interface.I |
a4520 | 50 3a 20 60 31 30 2e 30 2e 31 32 2e 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 | P:.`10.0.12.1/24`.(for.testing.p |
a4540 | 75 72 70 6f 73 65 73 29 00 2a 2a 52 6f 75 74 65 72 20 31 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 32 | urposes).**Router.1**.**Router.2 |
a4560 | 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 33 2a 2a 00 2a 2a 52 6f 75 74 65 72 2d 49 44 20 63 68 65 63 | **.**Router.3**.**Router-ID.chec |
a4580 | 6b 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 66 74 65 72 20 72 6f 75 74 69 | k**.**Routes.learned.after.routi |
a45a0 | 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 | ng.policy.applied:**.**Routes.le |
a45c0 | 61 72 6e 65 64 20 62 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c | arned.before.routing.policy.appl |
a45e0 | 69 65 64 3a 2a 2a 00 2a 2a 53 57 31 2a 2a 00 2a 2a 53 57 32 2a 2a 00 2a 2a 53 65 63 6f 6e 64 61 | ied:**.**SW1**.**SW2**.**Seconda |
a4600 | 72 79 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 65 63 2a 2a 00 2a 2a 53 65 74 74 | ry**.**Setting.up.IPSec**.**Sett |
a4620 | 69 6e 67 20 75 70 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2a 2a 00 2a 2a 53 6f 75 72 63 65 | ing.up.the.GRE.tunnel**.**Source |
a4640 | 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 | .NAT**:.rules.defined.under.``se |
a4660 | 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 | t.[nat.|.nat66].destination...`` |
a4680 | 2e 00 2a 2a 53 70 69 6e 65 31 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 53 74 | ..**Spine1.Configuration:**.**St |
a46a0 | 61 74 75 73 2a 2a 00 2a 2a 54 6f 20 73 65 65 20 74 68 65 20 72 65 64 69 73 74 72 69 62 75 74 65 | atus**.**To.see.the.redistribute |
a46c0 | 64 20 72 6f 75 74 65 73 3a 2a 2a 00 2a 2a 54 77 6f 20 67 61 74 65 77 61 79 73 20 61 6e 64 20 64 | d.routes:**.**Two.gateways.and.d |
a46e0 | 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 73 3a 2a 2a 00 2a 2a 56 4c 41 4e 20 49 44 2a 2a 00 | ifferent.metrics:**.**VLAN.ID**. |
a4700 | 2a 2a 56 79 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 57 65 69 67 68 74 20 63 68 65 63 6b 2a | **VyOS.Router:**.**Weight.check* |
a4720 | 2a 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d | *.**address**.can.be.specified.m |
a4740 | 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 61 73 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 | ultiple.times.as.IPv4.and/or.IPv |
a4760 | 36 20 61 64 64 72 65 73 73 2c 20 65 2e 67 2e 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 | 6.address,.e.g..192.0.2.1/24.and |
a4780 | 2f 6f 72 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 | /or.2001:db8::1/64.**address**.c |
a47a0 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2c 20 | an.be.specified.multiple.times,. |
a47c0 | 65 2e 67 2e 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 31 20 61 6e 64 2f 6f 72 20 31 39 32 2e 31 36 | e.g..192.168.100.1.and/or.192.16 |
a47e0 | 38 2e 31 30 30 2e 30 2f 32 34 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 | 8.100.0/24.**allow**.-.Negotiate |
a4800 | 20 49 50 76 34 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 28 44 | .IPv4.only.if.client.requests.(D |
a4820 | 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 | efault.value).**allow**.-.Negoti |
a4840 | 61 74 65 20 49 50 76 36 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 | ate.IPv6.only.if.client.requests |
a4860 | 00 2a 2a 61 6c 6c 6f 77 2d 68 6f 73 74 2d 6e 65 74 77 6f 72 6b 73 2a 2a 20 63 61 6e 6e 6f 74 20 | .**allow-host-networks**.cannot. |
a4880 | 62 65 20 75 73 65 64 20 77 69 74 68 20 2a 2a 6e 65 74 77 6f 72 6b 2a 2a 00 2a 2a 61 6c 77 61 79 | be.used.with.**network**.**alway |
a48a0 | 73 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 | s**:.Restart.containers.when.the |
a48c0 | 79 20 65 78 69 74 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 73 74 61 74 75 73 2c 20 72 65 | y.exit,.regardless.of.status,.re |
a48e0 | 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 00 2a 2a 61 70 70 65 6e 64 3a 2a 2a 20 | trying.indefinitely.**append:**. |
a4900 | 54 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 70 | The.relay.agent.is.allowed.to.ap |
a4920 | 70 65 6e 64 20 69 74 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 | pend.its.own.relay.information.t |
a4940 | 6f 20 61 20 72 65 63 65 69 76 65 64 20 44 48 43 50 20 70 61 63 6b 65 74 2c 20 64 69 73 72 65 67 | o.a.received.DHCP.packet,.disreg |
a4960 | 61 72 64 69 6e 67 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 | arding.relay.information.already |
a4980 | 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 2e 00 2a 2a 61 70 70 6c 69 63 | .present.in.the.packet..**applic |
a49a0 | 61 74 69 6f 6e 2a 2a 3a 20 61 6e 61 6c 79 7a 65 73 20 72 65 63 65 69 76 65 64 20 66 6c 6f 77 20 | ation**:.analyzes.received.flow. |
a49c0 | 64 61 74 61 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 69 6e 74 72 75 73 69 6f 6e | data.in.the.context.of.intrusion |
a49e0 | 20 64 65 74 65 63 74 69 6f 6e 20 6f 72 20 74 72 61 66 66 69 63 20 70 72 6f 66 69 6c 69 6e 67 2c | .detection.or.traffic.profiling, |
a4a00 | 20 66 6f 72 20 65 78 61 6d 70 6c 65 00 2a 2a 61 75 74 6f 2a 2a 20 e2 80 93 20 61 75 74 6f 6d 61 | .for.example.**auto**.....automa |
a4a20 | 74 69 63 61 6c 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | tically.determines.the.interface |
a4a40 | 20 74 79 70 65 2e 20 2a 2a 77 69 72 65 64 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 73 20 6f 70 74 | .type..**wired**.....enables.opt |
a4a60 | 69 6d 69 73 61 74 69 6f 6e 73 20 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e | imisations.for.wired.interfaces. |
a4a80 | 20 2a 2a 77 69 72 65 6c 65 73 73 2a 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 73 20 61 20 6e 75 6d | .**wireless**.....disables.a.num |
a4aa0 | 62 65 72 20 6f 66 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6f 6e | ber.of.optimisations.that.are.on |
a4ac0 | 6c 79 20 63 6f 72 72 65 63 74 20 6f 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | ly.correct.on.wired.interfaces.. |
a4ae0 | 53 70 65 63 69 66 79 69 6e 67 20 77 69 72 65 6c 65 73 73 20 69 73 20 61 6c 77 61 79 73 20 63 6f | Specifying.wireless.is.always.co |
a4b00 | 72 72 65 63 74 2c 20 62 75 74 20 6d 61 79 20 63 61 75 73 65 20 73 6c 6f 77 65 72 20 63 6f 6e 76 | rrect,.but.may.cause.slower.conv |
a4b20 | 65 72 67 65 6e 63 65 20 61 6e 64 20 65 78 74 72 61 20 72 6f 75 74 69 6e 67 20 74 72 61 66 66 69 | ergence.and.extra.routing.traffi |
a4b40 | 63 2e 00 2a 2a 62 61 6e 2d 74 69 6d 65 2a 2a 20 61 6e 64 20 2a 2a 74 68 72 65 73 68 6f 6c 64 2a | c..**ban-time**.and.**threshold* |
a4b60 | 2a 3a 20 74 68 65 73 65 20 76 61 6c 75 65 73 20 61 72 65 20 6b 65 70 74 20 76 65 72 79 20 6c 6f | *:.these.values.are.kept.very.lo |
a4b80 | 77 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 61 73 69 6c 79 20 69 64 65 6e 74 69 66 79 20 61 6e | w.in.order.to.easily.identify.an |
a4ba0 | 64 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 61 74 74 61 63 6b 2e 00 2a 2a 62 72 6f 61 64 63 61 | d.generate.and.attack..**broadca |
a4bc0 | 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | st**.....broadcast.IP.addresses. |
a4be0 | 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 6e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 2a 2a 20 | distribution..**non-broadcast**. |
a4c00 | e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 4e 42 4d 41 | ....address.distribution.in.NBMA |
a4c20 | 20 6e 65 74 77 6f 72 6b 73 20 74 6f 70 6f 6c 6f 67 79 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 6d | .networks.topology..**point-to-m |
a4c40 | 75 6c 74 69 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 | ultipoint**.....address.distribu |
a4c60 | 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 6e 65 74 77 | tion.in.point-to-multipoint.netw |
a4c80 | 6f 72 6b 73 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 | orks..**point-to-point**.....add |
a4ca0 | 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f | ress.distribution.in.point-to-po |
a4cc0 | 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 | int.networks..**broadcast**..... |
a4ce0 | 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 | broadcast.IP.addresses.distribut |
a4d00 | 69 6f 6e 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 | ion..**point-to-point**.....addr |
a4d20 | 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 | ess.distribution.in.point-to-poi |
a4d40 | 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 63 61 6c 6c 69 6e 67 2d 73 69 64 2a 2a 20 2d 20 43 | nt.networks..**calling-sid**.-.C |
a4d60 | 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 | alculate.interface.identifier.fr |
a4d80 | 6f 6d 20 63 61 6c 6c 69 6e 67 2d 73 74 61 74 69 6f 6e 2d 69 64 2e 00 2a 2a 63 69 73 63 6f 2a 2a | om.calling-station-id..**cisco** |
a4da0 | 20 e2 80 93 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 | .....a.router.will.be.considered |
a4dc0 | 20 61 73 20 41 42 52 20 69 66 20 69 74 20 68 61 73 20 73 65 76 65 72 61 6c 20 63 6f 6e 66 69 67 | .as.ABR.if.it.has.several.config |
a4de0 | 75 72 65 64 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 64 69 | ured.links.to.the.networks.in.di |
a4e00 | 66 66 65 72 65 6e 74 20 61 72 65 61 73 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 69 73 20 61 20 | fferent.areas.one.of.which.is.a. |
a4e20 | 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 74 68 65 20 6c 69 6e | backbone.area..Moreover,.the.lin |
a4e40 | 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 73 68 6f 75 6c 64 20 62 65 | k.to.the.backbone.area.should.be |
a4e60 | 20 61 63 74 69 76 65 20 28 77 6f 72 6b 69 6e 67 29 2e 20 2a 2a 69 62 6d 2a 2a 20 e2 80 93 20 69 | .active.(working)..**ibm**.....i |
a4e80 | 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 63 69 73 63 6f 22 20 6d 6f 64 65 6c 20 62 75 74 20 69 6e | dentical.to."cisco".model.but.in |
a4ea0 | 20 74 68 69 73 20 63 61 73 65 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6c 69 6e 6b 20 | .this.case.a.backbone.area.link. |
a4ec0 | 6d 61 79 20 6e 6f 74 20 62 65 20 61 63 74 69 76 65 2e 20 2a 2a 73 74 61 6e 64 61 72 64 2a 2a 20 | may.not.be.active..**standard**. |
a4ee0 | e2 80 93 20 72 6f 75 74 65 72 20 68 61 73 20 73 65 76 65 72 61 6c 20 61 63 74 69 76 65 20 6c 69 | ....router.has.several.active.li |
a4f00 | 6e 6b 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 73 2e 20 2a 2a 73 68 6f 72 74 63 | nks.to.different.areas..**shortc |
a4f20 | 75 74 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 73 74 61 6e 64 61 72 64 22 | ut**.....identical.to."standard" |
a4f40 | 20 62 75 74 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 6c 20 61 20 72 6f 75 74 65 72 20 69 73 20 61 | .but.in.this.model.a.router.is.a |
a4f60 | 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 61 72 65 61 73 20 | llowed.to.use.a.connected.areas. |
a4f80 | 74 6f 70 6f 6c 6f 67 79 20 77 69 74 68 6f 75 74 20 69 6e 76 6f 6c 76 69 6e 67 20 61 20 62 61 63 | topology.without.involving.a.bac |
a4fa0 | 6b 62 6f 6e 65 20 61 72 65 61 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 20 63 6f 6e 6e 65 63 | kbone.area.for.inter-area.connec |
a4fc0 | 74 69 6f 6e 73 2e 00 2a 2a 63 6f 6c 6c 65 63 74 6f 72 2a 2a 3a 20 72 65 73 70 6f 6e 73 69 62 6c | tions..**collector**:.responsibl |
a4fe0 | 65 20 66 6f 72 20 72 65 63 65 70 74 69 6f 6e 2c 20 73 74 6f 72 61 67 65 20 61 6e 64 20 70 72 65 | e.for.reception,.storage.and.pre |
a5000 | 2d 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 66 6c 6f 77 20 64 61 74 61 20 72 65 63 65 69 76 65 | -processing.of.flow.data.receive |
a5020 | 64 20 66 72 6f 6d 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 00 2a 2a 64 65 66 61 75 6c 74 | d.from.a.flow.exporter.**default |
a5040 | 2a 2a 20 e2 80 93 20 20 74 68 69 73 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 | **......this.area.will.be.used.f |
a5060 | 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 6f 6e 6c 79 20 69 66 20 41 42 52 20 64 6f 65 73 | or.shortcutting.only.if.ABR.does |
a5080 | 20 6e 6f 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 | .not.have.a.link.to.the.backbone |
a50a0 | 20 61 72 65 61 20 6f 72 20 74 68 69 73 20 6c 69 6e 6b 20 77 61 73 20 6c 6f 73 74 2e 20 2a 2a 65 | .area.or.this.link.was.lost..**e |
a50c0 | 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 65 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 | nable**.....the.area.will.be.use |
a50e0 | 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 | d.for.shortcutting.every.time.th |
a5100 | 65 20 72 6f 75 74 65 20 74 68 61 74 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 20 69 73 20 | e.route.that.goes.through.it.is. |
a5120 | 63 68 65 61 70 65 72 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 69 73 20 61 72 | cheaper..**disable**.....this.ar |
a5140 | 65 61 20 69 73 20 6e 65 76 65 72 20 75 73 65 64 20 62 79 20 41 42 52 20 66 6f 72 20 72 6f 75 74 | ea.is.never.used.by.ABR.for.rout |
a5160 | 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 2e 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 | es.shortcutting..**default**.... |
a5180 | 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 64 20 69 | .enable.split-horizon.on.wired.i |
a51a0 | 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 | nterfaces,.and.disable.split-hor |
a51c0 | 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 65 | izon.on.wireless.interfaces..**e |
a51e0 | 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e | nable**.....enable.split-horizon |
a5200 | 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a | .on.this.interfaces..**disable** |
a5220 | 20 e2 80 93 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 | .....disable.split-horizon.on.th |
a5240 | 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 | is.interfaces..**deny**.-.Do.not |
a5260 | 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 34 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f | .negotiate.IPv4.**deny**.-.Do.no |
a5280 | 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 28 64 65 66 61 75 6c 74 20 76 61 6c 75 65 29 | t.negotiate.IPv6.(default.value) |
a52a0 | 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 64 65 6e 79 20 6d 70 70 65 00 2a 2a 64 65 6e 79 2a 2a 3a 20 | .**deny**.-.deny.mppe.**deny**:. |
a52c0 | 44 65 6e 79 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 61 75 74 68 6f 72 69 7a 61 74 69 6f | Deny.second.session.authorizatio |
a52e0 | 6e 2e 00 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 | n..**destination**.-.specify.whi |
a5300 | 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 77 69 6c 6c 20 | ch.packets.the.translation.will. |
a5320 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 2c 20 6f 6e 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | be.applied.to,.only.based.on.the |
a5340 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 70 6f 72 74 | .destination.address.and/or.port |
a5360 | 20 6e 75 6d 62 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a 2a 64 68 63 70 2a 2a 20 69 6e 74 | .number.configured..**dhcp**.int |
a5380 | 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 | erface.address.is.received.by.DH |
a53a0 | 43 50 20 66 72 6f 6d 20 61 20 44 48 43 50 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 | CP.from.a.DHCP.server.on.this.se |
a53c0 | 67 6d 65 6e 74 2e 00 2a 2a 64 68 63 70 76 36 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 | gment..**dhcpv6**.interface.addr |
a53e0 | 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 43 50 76 36 20 66 72 6f 6d 20 61 | ess.is.received.by.DHCPv6.from.a |
a5400 | 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 | .DHCPv6.server.on.this.segment.. |
a5420 | 2a 2a 64 69 73 61 62 6c 65 2a 2a 3a 20 44 69 73 61 62 6c 65 73 20 73 65 73 73 69 6f 6e 20 63 6f | **disable**:.Disables.session.co |
a5440 | 6e 74 72 6f 6c 2e 00 2a 2a 64 69 73 63 61 72 64 3a 2a 2a 20 52 65 63 65 69 76 65 64 20 70 61 63 | ntrol..**discard:**.Received.pac |
a5460 | 6b 65 74 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 20 72 65 6c 61 79 | kets.which.already.contain.relay |
a5480 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 69 73 63 61 72 64 65 64 2e 00 | .information.will.be.discarded.. |
a54a0 | 2a 2a 64 6f 77 6e 73 74 72 65 61 6d 3a 2a 2a 20 44 6f 77 6e 73 74 72 65 61 6d 20 6e 65 74 77 6f | **downstream:**.Downstream.netwo |
a54c0 | 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 | rk.interfaces.are.the.distributi |
a54e0 | 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | on.interfaces.to.the.destination |
a5500 | 20 6e 65 74 77 6f 72 6b 73 2c 20 77 68 65 72 65 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 6e | .networks,.where.multicast.clien |
a5520 | 74 73 20 63 61 6e 20 6a 6f 69 6e 20 67 72 6f 75 70 73 20 61 6e 64 20 72 65 63 65 69 76 65 20 6d | ts.can.join.groups.and.receive.m |
a5540 | 75 6c 74 69 63 61 73 74 20 64 61 74 61 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 | ulticast.data..One.or.more.downs |
a5560 | 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 | tream.interfaces.must.be.configu |
a5580 | 72 65 64 2e 00 2a 2a 65 78 70 6f 72 74 65 72 2a 2a 3a 20 61 67 67 72 65 67 61 74 65 73 20 70 61 | red..**exporter**:.aggregates.pa |
a55a0 | 63 6b 65 74 73 20 69 6e 74 6f 20 66 6c 6f 77 73 20 61 6e 64 20 65 78 70 6f 72 74 73 20 66 6c 6f | ckets.into.flows.and.exports.flo |
a55c0 | 77 20 72 65 63 6f 72 64 73 20 74 6f 77 61 72 64 73 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 66 6c | w.records.towards.one.or.more.fl |
a55e0 | 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 00 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e | ow.collectors.**firewall.all-pin |
a5600 | 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 | g**.affects.only.to.LOCAL.and.it |
a5620 | 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 | .always.behaves.in.the.most.rest |
a5640 | 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 69 72 65 77 61 6c 6c 20 67 6c 6f 62 61 6c 2d 6f 70 | rictive.way.**firewall.global-op |
a5660 | 74 69 6f 6e 73 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f | tions.all-ping**.affects.only.to |
a5680 | 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 | .LOCAL.and.it.always.behaves.in. |
a56a0 | 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 6f 72 77 61 | the.most.restrictive.way.**forwa |
a56c0 | 72 64 3a 2a 2a 20 41 6c 6c 20 70 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2c | rd:**.All.packets.are.forwarded, |
a56e0 | 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 | .relay.information.already.prese |
a5700 | 6e 74 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e | nt.will.be.ignored..**inbound-in |
a5720 | 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a | terface**.-.applicable.only.to.: |
a5740 | 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 | ref:`destination-nat`..It.config |
a5760 | 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 | ures.the.interface.which.is.used |
a5780 | 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e | .for.the.inside.traffic.the.tran |
a57a0 | 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 69 6e 62 6f 75 | slation.rule.applies.to..**inbou |
a57c0 | 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 | nd-interface**.-.applicable.only |
a57e0 | 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 | .to.:ref:`destination-nat`..It.c |
a5800 | 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 | onfigures.the.interface.which.is |
a5820 | 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 | .used.for.the.inside.traffic.the |
a5840 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e | .translation.rule.applies.to..In |
a5860 | 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 | terface.groups,.inverted.selecti |
a5880 | 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 | on.and.wildcard,.are.also.suppor |
a58a0 | 74 65 64 2e 00 2a 2a 69 70 76 34 2d 61 64 64 72 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 | ted..**ipv4-addr**.-.Calculate.i |
a58c0 | 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 49 50 76 34 20 61 64 | nterface.identifier.from.IPv4.ad |
a58e0 | 64 72 65 73 73 2e 00 2a 2a 6c 32 2a 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 | dress..**l2**:.It.means.that.cli |
a5900 | 65 6e 74 73 20 61 72 65 20 6f 6e 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 77 68 65 72 65 20 69 | ents.are.on.same.network.where.i |
a5920 | 6e 74 65 72 66 61 63 65 20 69 73 2e 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 6c 61 79 65 | nterface.is.**(default)**.**laye |
a5940 | 72 32 2a 2a 20 2d 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 | r2**.-.Uses.XOR.of.hardware.MAC. |
a5960 | 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 20 66 69 65 | addresses.and.packet.type.ID.fie |
a5980 | 6c 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 | ld.to.generate.the.hash..The.for |
a59a0 | 6d 75 6c 61 20 69 73 00 2a 2a 6c 61 79 65 72 32 2b 33 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 | mula.is.**layer2+3**.-.This.poli |
a59c0 | 63 79 20 75 73 65 73 20 61 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 6f 66 20 6c 61 79 65 72 32 20 | cy.uses.a.combination.of.layer2. |
a59e0 | 61 6e 64 20 6c 61 79 65 72 33 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | and.layer3.protocol.information. |
a5a00 | 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 55 73 65 73 20 58 4f 52 20 6f | to.generate.the.hash..Uses.XOR.o |
a5a20 | 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 | f.hardware.MAC.addresses.and.IP. |
a5a40 | 61 64 64 72 65 73 73 65 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 | addresses.to.generate.the.hash.. |
a5a60 | 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 3a 00 2a 2a 6c 61 79 65 72 33 2b 34 2a 2a 20 2d 20 54 | The.formula.is:.**layer3+4**.-.T |
a5a80 | 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 75 70 70 65 72 20 6c 61 79 65 72 20 70 72 6f 74 | his.policy.uses.upper.layer.prot |
a5aa0 | 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 | ocol.information,.when.available |
a5ac0 | 2c 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 69 73 20 61 6c 6c | ,.to.generate.the.hash..This.all |
a5ae0 | 6f 77 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 | ows.for.traffic.to.a.particular. |
a5b00 | 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 74 6f 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c | network.peer.to.span.multiple.sl |
a5b20 | 61 76 65 73 2c 20 61 6c 74 68 6f 75 67 68 20 61 20 73 69 6e 67 6c 65 20 63 6f 6e 6e 65 63 74 69 | aves,.although.a.single.connecti |
a5b40 | 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 | on.will.not.span.multiple.slaves |
a5b60 | 2e 00 2a 2a 6c 65 66 74 2a 2a 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 41 63 74 20 61 73 20 | ..**left**.**level-1**.-.Act.as. |
a5b80 | 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e | a.station.(Level.1).router.only. |
a5ba0 | 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 20 6f 6e 6c 79 20 61 64 6a 61 | .**level-1**.-.Level-1.only.adja |
a5bc0 | 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a | cencies.are.formed..**level-1-2* |
a5be0 | 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 | *.-.Act.as.a.station.(Level.1).r |
a5c00 | 6f 75 74 65 72 20 61 6e 64 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 2e | outer.and.area.(Level.2).router. |
a5c20 | 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 2d 32 20 61 64 6a 61 63 | .**level-1-2**.-.Level-1-2.adjac |
a5c40 | 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 | encies.are.formed.**level-2-only |
a5c60 | 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 6e 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f | **.-.Act.as.an.area.(Level.2).ro |
a5c80 | 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 4c 65 | uter.only..**level-2-only**.-.Le |
a5ca0 | 76 65 6c 2d 32 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 | vel-2.only.adjacencies.are.forme |
a5cc0 | 64 00 2a 2a 6c 6f 63 61 6c 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 6c 6f | d.**local.side.-.commands**.**lo |
a5ce0 | 63 61 6c 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 | cal**:.All.authentication.querie |
a5d00 | 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 2a 2a 6c 6f 63 61 6c 2a 2a | s.are.handled.locally..**local** |
a5d20 | 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 65 6e 74 20 61 72 65 20 62 65 68 69 6e | :.It.means.that.client.are.behin |
a5d40 | 64 20 73 6f 6d 65 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 6f 67 2d 66 61 69 6c 2a 2a 20 49 6e 20 74 | d.some.router..**log-fail**.In.t |
a5d60 | 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 61 74 74 65 | his.mode,.the.recursor.will.atte |
a5d80 | 6d 70 74 20 74 6f 20 76 61 6c 69 64 61 74 65 20 61 6c 6c 20 64 61 74 61 20 69 74 20 72 65 74 72 | mpt.to.validate.all.data.it.retr |
a5da0 | 69 65 76 65 73 20 66 72 6f 6d 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 73 | ieves.from.authoritative.servers |
a5dc0 | 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 44 4e 53 | ,.regardless.of.the.client's.DNS |
a5de0 | 53 45 43 20 64 65 73 69 72 65 73 2c 20 61 6e 64 20 77 69 6c 6c 20 6c 6f 67 20 74 68 65 20 76 61 | SEC.desires,.and.will.log.the.va |
a5e00 | 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 20 54 68 69 73 20 6d 6f 64 65 20 63 61 6e 20 62 | lidation.result..This.mode.can.b |
a5e20 | 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 72 61 20 6c 6f | e.used.to.determine.the.extra.lo |
a5e40 | 61 64 20 61 6e 64 20 61 6d 6f 75 6e 74 20 6f 66 20 70 6f 73 73 69 62 6c 79 20 62 6f 67 75 73 20 | ad.and.amount.of.possibly.bogus. |
a5e60 | 61 6e 73 77 65 72 73 20 62 65 66 6f 72 65 20 74 75 72 6e 69 6e 67 20 6f 6e 20 66 75 6c 6c 2d 62 | answers.before.turning.on.full-b |
a5e80 | 6c 6f 77 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 52 65 73 70 6f 6e 73 65 73 20 74 6f 20 63 6c | lown.validation..Responses.to.cl |
a5ea0 | 69 65 6e 74 20 71 75 65 72 69 65 73 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 77 69 74 | ient.queries.are.the.same.as.wit |
a5ec0 | 68 20 70 72 6f 63 65 73 73 2e 00 2a 2a 6e 61 72 72 6f 77 2a 2a 20 2d 20 55 73 65 20 6f 6c 64 20 | h.process..**narrow**.-.Use.old. |
a5ee0 | 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 77 69 74 68 20 6e 61 72 72 6f 77 20 6d 65 74 72 69 63 | style.of.TLVs.with.narrow.metric |
a5f00 | 2e 00 2a 2a 6e 65 74 2d 61 64 6d 69 6e 2a 2a 3a 20 4e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 | ..**net-admin**:.Network.operati |
a5f20 | 6f 6e 73 20 28 69 6e 74 65 72 66 61 63 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 72 6f 75 74 69 6e | ons.(interface,.firewall,.routin |
a5f40 | 67 20 74 61 62 6c 65 73 29 00 2a 2a 6e 65 74 2d 62 69 6e 64 2d 73 65 72 76 69 63 65 2a 2a 3a 20 | g.tables).**net-bind-service**:. |
a5f60 | 42 69 6e 64 20 61 20 73 6f 63 6b 65 74 20 74 6f 20 70 72 69 76 69 6c 65 67 65 64 20 70 6f 72 74 | Bind.a.socket.to.privileged.port |
a5f80 | 73 20 28 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 6c 65 73 73 20 74 68 61 6e 20 31 30 32 34 29 00 | s.(port.numbers.less.than.1024). |
a5fa0 | 2a 2a 6e 65 74 2d 72 61 77 2a 2a 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 63 72 65 61 74 | **net-raw**:.Permission.to.creat |
a5fc0 | 65 20 72 61 77 20 6e 65 74 77 6f 72 6b 20 73 6f 63 6b 65 74 73 00 2a 2a 6e 6f 2a 2a 3a 20 44 6f | e.raw.network.sockets.**no**:.Do |
a5fe0 | 20 6e 6f 74 20 72 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 6f 6e 20 65 78 69 74 00 | .not.restart.containers.on.exit. |
a6000 | 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 | **noauth**:.Authentication.disab |
a6020 | 6c 65 64 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 | led.**noauth**:.Authentication.d |
a6040 | 69 73 61 62 6c 65 64 2e 00 2a 2a 6f 66 66 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e | isabled..**off**.In.this.mode,.n |
a6060 | 6f 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 20 74 61 6b 65 73 20 70 6c 61 63 65 2e | o.DNSSEC.processing.takes.place. |
a6080 | 20 54 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 74 20 74 68 65 20 44 | .The.recursor.will.not.set.the.D |
a60a0 | 4e 53 53 45 43 20 4f 4b 20 28 44 4f 29 20 62 69 74 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e | NSSEC.OK.(DO).bit.in.the.outgoin |
a60c0 | 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 44 4f | g.queries.and.will.ignore.the.DO |
a60e0 | 20 61 6e 64 20 41 44 20 62 69 74 73 20 69 6e 20 71 75 65 72 69 65 73 2e 00 2a 2a 6f 6e 2d 66 61 | .and.AD.bits.in.queries..**on-fa |
a6100 | 69 6c 75 72 65 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e | ilure**:.Restart.containers.when |
a6120 | 20 74 68 65 79 20 65 78 69 74 20 77 69 74 68 20 61 20 6e 6f 6e 2d 7a 65 72 6f 20 65 78 69 74 20 | .they.exit.with.a.non-zero.exit. |
a6140 | 63 6f 64 65 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 20 28 64 65 66 | code,.retrying.indefinitely.(def |
a6160 | 61 75 6c 74 29 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 | ault).**outbound-interface**.-.a |
a6180 | 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e | pplicable.only.to.:ref:`source-n |
a61a0 | 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | at`..It.configures.the.interface |
a61c0 | 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 | .which.is.used.for.the.outside.t |
a61e0 | 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c | raffic.that.this.translation.rul |
a6200 | 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 | e.applies.to..**outbound-interfa |
a6220 | 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 | ce**.-.applicable.only.to.:ref:` |
a6240 | 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 | source-nat`..It.configures.the.i |
a6260 | 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f | nterface.which.is.used.for.the.o |
a6280 | 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 | utside.traffic.that.this.transla |
a62a0 | 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 | tion.rule.applies.to..Interface. |
a62c0 | 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 | groups,.inverted.selection.and.w |
a62e0 | 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 70 | ildcard,.are.also.supported..**p |
a6300 | 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 34 20 6e 65 | refer**.-.Ask.client.for.IPv4.ne |
a6320 | 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a | gotiation,.do.not.fail.if.it.rej |
a6340 | 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 | ects.**prefer**.-.Ask.client.for |
a6360 | 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 | .IPv6.negotiation,.do.not.fail.i |
a6380 | 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c | f.it.rejects.**prefer**.-.ask.cl |
a63a0 | 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e | ient.for.mppe,.if.it.rejects.don |
a63c0 | 27 74 20 66 61 69 6c 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 | 't.fail.**prefer**.-.ask.client. |
a63e0 | 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 | for.mppe,.if.it.rejects.don't.fa |
a6400 | 69 6c 2e 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 70 72 6f 63 65 73 73 2a 2a 20 | il..(Default.value).**process**. |
a6420 | 57 68 65 6e 20 64 6e 73 73 65 63 20 69 73 20 73 65 74 20 74 6f 20 70 72 6f 63 65 73 73 20 74 68 | When.dnssec.is.set.to.process.th |
a6440 | 65 20 62 65 68 61 76 69 6f 72 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 70 72 6f 63 65 73 73 | e.behavior.is.similar.to.process |
a6460 | 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 65 63 75 72 | -no-validate..However,.the.recur |
a6480 | 73 6f 72 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 64 61 74 | sor.will.try.to.validate.the.dat |
a64a0 | 61 20 69 66 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6f 66 20 74 68 65 20 44 4f 20 6f 72 20 41 | a.if.at.least.one.of.the.DO.or.A |
a64c0 | 44 20 62 69 74 73 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 3b 20 69 6e 20 74 | D.bits.is.set.in.the.query;.in.t |
a64e0 | 68 61 74 20 63 61 73 65 2c 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 41 44 2d 62 69 74 | hat.case,.it.will.set.the.AD-bit |
a6500 | 20 69 6e 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 77 68 65 6e 20 74 68 65 20 64 61 74 61 20 69 | .in.the.response.when.the.data.i |
a6520 | 73 20 76 61 6c 69 64 61 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 2c 20 6f 72 20 73 65 6e | s.validated.successfully,.or.sen |
a6540 | 64 20 53 45 52 56 46 41 49 4c 20 77 68 65 6e 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 63 | d.SERVFAIL.when.the.validation.c |
a6560 | 6f 6d 65 73 20 75 70 20 62 6f 67 75 73 2e 00 2a 2a 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 | omes.up.bogus..**process-no-vali |
a6580 | 64 61 74 65 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 72 65 63 75 72 73 6f 72 | date**.In.this.mode.the.recursor |
a65a0 | 20 61 63 74 73 20 61 73 20 61 20 22 73 65 63 75 72 69 74 79 20 61 77 61 72 65 2c 20 6e 6f 6e 2d | .acts.as.a."security.aware,.non- |
a65c0 | 76 61 6c 69 64 61 74 69 6e 67 22 20 6e 61 6d 65 73 65 72 76 65 72 2c 20 6d 65 61 6e 69 6e 67 20 | validating".nameserver,.meaning. |
a65e0 | 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 44 4f 2d 62 69 74 20 6f 6e 20 6f 75 74 67 6f 69 | it.will.set.the.DO-bit.on.outgoi |
a6600 | 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 44 4e 53 53 | ng.queries.and.will.provide.DNSS |
a6620 | 45 43 20 72 65 6c 61 74 65 64 20 52 52 73 65 74 73 20 28 4e 53 45 43 2c 20 52 52 53 49 47 29 20 | EC.related.RRsets.(NSEC,.RRSIG). |
a6640 | 74 6f 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 61 73 6b 20 66 6f 72 20 74 68 65 6d 20 28 62 79 | to.clients.that.ask.for.them.(by |
a6660 | 20 6d 65 61 6e 73 20 6f 66 20 61 20 44 4f 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 29 | .means.of.a.DO-bit.in.the.query) |
a6680 | 2c 20 65 78 63 65 70 74 20 66 6f 72 20 7a 6f 6e 65 73 20 70 72 6f 76 69 64 65 64 20 74 68 72 6f | ,.except.for.zones.provided.thro |
a66a0 | 75 67 68 20 74 68 65 20 61 75 74 68 2d 7a 6f 6e 65 73 20 73 65 74 74 69 6e 67 2e 20 49 74 20 77 | ugh.the.auth-zones.setting..It.w |
a66c0 | 69 6c 6c 20 6e 6f 74 20 64 6f 20 61 6e 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 69 6e 20 74 68 69 | ill.not.do.any.validation.in.thi |
a66e0 | 73 20 6d 6f 64 65 2c 20 6e 6f 74 20 65 76 65 6e 20 77 68 65 6e 20 72 65 71 75 65 73 74 65 64 20 | s.mode,.not.even.when.requested. |
a6700 | 62 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 2a 2a 70 72 6f 74 6f 63 6f 6c 2a 2a 20 2d 20 73 70 | by.the.client..**protocol**.-.sp |
a6720 | 65 63 69 66 79 20 77 68 69 63 68 20 74 79 70 65 73 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 73 20 74 | ecify.which.types.of.protocols.t |
a6740 | 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e | his.translation.rule.applies.to. |
a6760 | 20 4f 6e 6c 79 20 70 61 63 6b 65 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 73 70 65 63 69 | .Only.packets.matching.the.speci |
a6780 | 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 20 61 72 65 20 4e 41 54 65 64 2e 20 42 79 20 64 65 66 61 | fied.protocol.are.NATed..By.defa |
a67a0 | 75 6c 74 20 74 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 20 60 61 6c 6c 60 20 70 72 6f 74 6f 63 | ult.this.applies.to.`all`.protoc |
a67c0 | 6f 6c 73 2e 00 2a 2a 72 61 64 69 75 73 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 | ols..**radius**:.All.authenticat |
a67e0 | 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 62 79 20 61 20 63 6f 6e | ion.queries.are.handled.by.a.con |
a6800 | 66 69 67 75 72 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 2a 2a 72 61 6e 64 6f 6d 2a | figured.RADIUS.server..**random* |
a6820 | 2a 20 2d 20 52 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 | *.-.Random.interface.identifier. |
a6840 | 66 6f 72 20 49 50 76 36 00 2a 2a 72 65 6d 6f 74 65 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 | for.IPv6.**remote.side.-.command |
a6860 | 73 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 2a 2a 3a 20 54 65 72 6d 69 6e 61 74 65 20 66 69 72 73 74 | s**.**replace**:.Terminate.first |
a6880 | 20 73 65 73 73 69 6f 6e 20 77 68 65 6e 20 73 65 63 6f 6e 64 20 69 73 20 61 75 74 68 6f 72 69 7a | .session.when.second.is.authoriz |
a68a0 | 65 64 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 3a 2a 2a 20 52 65 | ed.**(default)**.**replace:**.Re |
a68c0 | 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 | lay.information.already.present. |
a68e0 | 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 73 74 72 69 70 70 65 64 20 61 6e 64 20 72 65 70 6c | in.a.packet.is.stripped.and.repl |
a6900 | 61 63 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 27 73 20 6f 77 6e 20 72 65 6c 61 79 | aced.with.the.router's.own.relay |
a6920 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 65 74 2e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 | .information.set..**require**.-. |
a6940 | 52 65 71 75 69 72 65 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 | Require.IPv4.negotiation.**requi |
a6960 | 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 | re**.-.Require.IPv6.negotiation. |
a6980 | 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 | **require**.-.ask.client.for.mpp |
a69a0 | 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 72 6f 70 20 63 6f 6e 6e 65 63 74 69 6f 6e | e,.if.it.rejects.drop.connection |
a69c0 | 00 2a 2a 72 69 67 68 74 2a 2a 00 2a 2a 73 65 74 70 63 61 70 2a 2a 3a 20 43 61 70 61 62 69 6c 69 | .**right**.**setpcap**:.Capabili |
a69e0 | 74 79 20 73 65 74 73 20 28 66 72 6f 6d 20 62 6f 75 6e 64 65 64 20 6f 72 20 69 6e 68 65 72 69 74 | ty.sets.(from.bounded.or.inherit |
a6a00 | 65 64 20 73 65 74 29 00 2a 2a 73 68 61 72 65 64 2a 2a 3a 20 4d 75 6c 74 69 70 6c 65 20 63 6c 69 | ed.set).**shared**:.Multiple.cli |
a6a20 | 65 6e 74 73 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 2e 20 2a 2a 28 | ents.share.the.same.network..**( |
a6a40 | 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 73 6f 75 72 63 65 2a 2a 20 2d 20 73 70 65 63 69 66 69 65 | default)**.**source**.-.specifie |
a6a60 | 73 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 4e 41 54 20 74 72 61 6e 73 6c 61 74 | s.which.packets.the.NAT.translat |
a6a80 | 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | ion.rule.applies.to.based.on.the |
a6aa0 | 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f | .packets.source.IP.address.and/o |
a6ac0 | 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 4f 6e 6c 79 20 6d 61 74 63 68 69 6e 67 20 70 61 63 | r.source.port..Only.matching.pac |
a6ae0 | 6b 65 74 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 66 6f 72 20 4e 41 54 2e 00 2a 2a 73 | kets.are.considered.for.NAT..**s |
a6b00 | 79 73 2d 61 64 6d 69 6e 2a 2a 3a 20 41 64 6d 69 6e 69 73 74 61 74 69 6f 6e 20 6f 70 65 72 61 74 | ys-admin**:.Administation.operat |
a6b20 | 69 6f 6e 73 20 28 71 75 6f 74 61 63 74 6c 2c 20 6d 6f 75 6e 74 2c 20 73 65 74 68 6f 73 74 6e 61 | ions.(quotactl,.mount,.sethostna |
a6b40 | 6d 65 2c 20 73 65 74 64 6f 6d 61 69 6e 61 6d 65 29 00 2a 2a 73 79 73 2d 74 69 6d 65 2a 2a 3a 20 | me,.setdomainame).**sys-time**:. |
a6b60 | 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 73 65 74 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 00 2a | Permission.to.set.system.clock.* |
a6b80 | 2a 74 72 61 6e 73 69 74 69 6f 6e 2a 2a 20 2d 20 53 65 6e 64 20 61 6e 64 20 61 63 63 65 70 74 20 | *transition**.-.Send.and.accept. |
a6ba0 | 62 6f 74 68 20 73 74 79 6c 65 73 20 6f 66 20 54 4c 56 73 20 64 75 72 69 6e 67 20 74 72 61 6e 73 | both.styles.of.TLVs.during.trans |
a6bc0 | 69 74 69 6f 6e 2e 00 2a 2a 75 70 73 74 72 65 61 6d 3a 2a 2a 20 54 68 65 20 75 70 73 74 72 65 61 | ition..**upstream:**.The.upstrea |
a6be0 | 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 74 68 65 20 6f 75 74 67 6f | m.network.interface.is.the.outgo |
a6c00 | 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 72 65 73 70 6f 6e 73 69 62 | ing.interface.which.is.responsib |
a6c20 | 6c 65 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 61 76 61 69 6c 61 62 6c | le.for.communicating.to.availabl |
a6c40 | 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 20 73 6f 75 72 63 65 73 2e 20 54 68 65 72 65 20 | e.multicast.data.sources..There. |
a6c60 | 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 | can.only.be.one.upstream.interfa |
a6c80 | 63 65 2e 00 2a 2a 76 61 6c 69 64 61 74 65 2a 2a 20 54 68 65 20 68 69 67 68 65 73 74 20 6d 6f 64 | ce..**validate**.The.highest.mod |
a6ca0 | 65 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 49 6e 20 74 68 69 73 20 | e.of.DNSSEC.processing..In.this. |
a6cc0 | 6d 6f 64 65 2c 20 61 6c 6c 20 71 75 65 72 69 65 73 20 77 69 6c 6c 20 62 65 20 76 61 6c 69 64 61 | mode,.all.queries.will.be.valida |
a6ce0 | 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 6e 73 77 65 72 65 64 20 77 69 74 68 20 61 20 | ted.and.will.be.answered.with.a. |
a6d00 | 53 45 52 56 46 41 49 4c 20 69 6e 20 63 61 73 65 20 6f 66 20 62 6f 67 75 73 20 64 61 74 61 2c 20 | SERVFAIL.in.case.of.bogus.data,. |
a6d20 | 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 72 65 71 75 65 | regardless.of.the.client's.reque |
a6d40 | 73 74 2e 00 2a 2a 76 6c 61 6e 2a 2a 3a 20 4f 6e 65 20 56 4c 41 4e 20 70 65 72 20 63 6c 69 65 6e | st..**vlan**:.One.VLAN.per.clien |
a6d60 | 74 2e 00 2a 2a 77 69 64 65 2a 2a 20 2d 20 55 73 65 20 6e 65 77 20 73 74 79 6c 65 20 6f 66 20 54 | t..**wide**.-.Use.new.style.of.T |
a6d80 | 4c 56 73 20 74 6f 20 63 61 72 72 79 20 77 69 64 65 72 20 6d 65 74 72 69 63 2e 00 2a 2a 78 3a 78 | LVs.to.carry.wider.metric..**x:x |
a6da0 | 3a 78 3a 78 2a 2a 20 2d 20 53 70 65 63 69 66 79 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 | :x:x**.-.Specify.interface.ident |
a6dc0 | 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 62 67 70 64 2a 20 73 75 70 70 6f 72 74 73 20 4d | ifier.for.IPv6.*bgpd*.supports.M |
a6de0 | 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 | ultiprotocol.Extension.for.BGP.. |
a6e00 | 53 6f 20 69 66 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 75 70 70 6f 72 74 73 20 74 68 65 | So.if.a.remote.peer.supports.the |
a6e20 | 20 70 72 6f 74 6f 63 6f 6c 2c 20 2a 62 67 70 64 2a 20 63 61 6e 20 65 78 63 68 61 6e 67 65 20 49 | .protocol,.*bgpd*.can.exchange.I |
a6e40 | 50 76 36 20 61 6e 64 2f 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 | Pv6.and/or.multicast.routing.inf |
a6e60 | 6f 72 6d 61 74 69 6f 6e 2e 00 30 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 77 68 | ormation..0.0.if.not.defined,.wh |
a6e80 | 69 63 68 20 6d 65 61 6e 73 20 6e 6f 20 72 65 66 72 65 73 68 69 6e 67 2e 00 30 20 69 66 20 6e 6f | ich.means.no.refreshing..0.if.no |
a6ea0 | 74 20 64 65 66 69 6e 65 64 2e 00 30 30 30 30 30 30 00 30 30 31 30 31 30 00 30 30 31 31 30 30 00 | t.defined..000000.001010.001100. |
a6ec0 | 30 30 31 31 31 30 00 30 31 30 30 31 30 00 30 31 30 31 30 30 00 30 31 30 31 31 30 00 30 31 31 30 | 001110.010010.010100.010110.0110 |
a6ee0 | 31 30 00 30 31 31 31 30 30 00 30 31 31 31 31 30 00 30 3a 20 44 69 73 61 62 6c 65 20 44 41 44 00 | 10.011100.011110.0:.Disable.DAD. |
a6f00 | 31 00 31 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 31 2d 74 6f 2d 31 20 4e 41 54 00 31 | 1.1.if.not.defined..1-to-1.NAT.1 |
a6f20 | 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 00 31 2e 20 46 69 72 | ..Create.an.event.handler.1..Fir |
a6f40 | 73 74 20 70 61 63 6b 65 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 65 68 74 30 2c 20 77 | st.packet.is.received.on.eht0,.w |
a6f60 | 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e | ith.destination.address.192.0.2. |
a6f80 | 31 30 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f | 100,.protocol.tcp.and.destinatio |
a6fa0 | 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 73 73 75 6d 65 20 73 75 63 68 20 64 65 73 74 69 6e 61 | n.port.1122..Assume.such.destina |
a6fc0 | 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 | tion.address.is.reachable.throug |
a6fe0 | 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 31 2e 00 31 30 00 31 30 20 2d 20 31 30 20 4d 42 69 | h.interface.eth1..10.10.-.10.MBi |
a7000 | 74 2f 73 00 31 30 2e 30 2e 30 2e 30 20 74 6f 20 31 30 2e 32 35 35 2e 32 35 35 2e 32 35 35 20 28 | t/s.10.0.0.0.to.10.255.255.255.( |
a7020 | 43 49 44 52 3a 20 31 30 2e 30 2e 30 2e 30 2f 38 29 00 31 30 30 20 2d 20 31 30 30 20 4d 42 69 74 | CIDR:.10.0.0.0/8).100.-.100.MBit |
a7040 | 2f 73 00 31 30 30 30 20 2d 20 31 20 47 42 69 74 2f 73 00 31 30 30 30 30 20 2d 20 31 30 20 47 42 | /s.1000.-.1.GBit/s.10000.-.10.GB |
a7060 | 69 74 2f 73 00 31 30 30 30 30 30 20 2d 20 31 30 30 20 47 42 69 74 2f 73 00 31 30 30 30 31 30 00 | it/s.100000.-.100.GBit/s.100010. |
a7080 | 31 30 30 31 30 30 00 31 30 30 31 31 30 00 31 30 31 31 31 30 00 31 31 00 31 31 39 00 31 32 00 31 | 100100.100110.101110.11.119.12.1 |
a70a0 | 32 31 2c 20 32 34 39 00 31 33 00 31 34 00 31 35 00 31 36 00 31 37 00 31 37 32 2e 31 36 2e 30 2e | 21,.249.13.14.15.16.17.172.16.0. |
a70c0 | 30 20 74 6f 20 31 37 32 2e 33 31 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 37 32 2e 31 | 0.to.172.31.255.255.(CIDR:.172.1 |
a70e0 | 36 2e 30 2e 30 2f 31 32 29 00 31 38 00 31 39 00 31 39 32 2e 31 36 38 2e 30 2e 30 20 74 6f 20 31 | 6.0.0/12).18.19.192.168.0.0.to.1 |
a7100 | 39 32 2e 31 36 38 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 39 32 2e 31 36 38 2e 30 2e | 92.168.255.255.(CIDR:.192.168.0. |
a7120 | 30 2f 31 36 29 00 31 3a 20 45 6e 61 62 6c 65 20 44 41 44 20 28 64 65 66 61 75 6c 74 29 00 32 00 | 0/16).1:.Enable.DAD.(default).2. |
a7140 | 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 32 2e 20 53 69 | 2..Add.regex.to.the.script.2..Si |
a7160 | 6e 63 65 20 74 68 69 73 20 69 73 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b 65 74 2c 20 63 6f | nce.this.is.the.first.packet,.co |
a7180 | 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 20 6f 66 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 | nnection.status.of.this.connecti |
a71a0 | 6f 6e 2c 20 73 6f 20 66 61 72 20 69 73 20 2a 2a 6e 65 77 2a 2a 2e 20 53 6f 20 6e 65 69 74 68 65 | on,.so.far.is.**new**..So.neithe |
a71c0 | 72 20 72 75 6c 65 20 31 30 20 6e 6f 72 20 32 30 20 61 72 65 20 76 61 6c 69 64 2e 00 32 30 00 32 | r.rule.10.nor.20.are.valid..20.2 |
a71e0 | 31 00 32 32 00 32 33 00 32 35 30 30 20 2d 20 32 2e 35 20 47 42 69 74 2f 73 00 32 35 30 30 30 20 | 1.22.23.2500.-.2.5.GBit/s.25000. |
a7200 | 2d 20 32 35 20 47 42 69 74 2f 73 00 32 35 32 00 32 36 00 32 38 00 32 3a 20 45 6e 61 62 6c 65 20 | -.25.GBit/s.252.26.28.2:.Enable. |
a7220 | 44 41 44 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 | DAD,.and.disable.IPv6.operation. |
a7240 | 69 66 20 4d 41 43 2d 62 61 73 65 64 20 64 75 70 6c 69 63 61 74 65 20 6c 69 6e 6b 2d 6c 6f 63 61 | if.MAC-based.duplicate.link-loca |
a7260 | 6c 20 61 64 64 72 65 73 73 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2e 00 32 46 41 20 4f 54 | l.address.has.been.found..2FA.OT |
a7280 | 50 20 73 75 70 70 6f 72 74 00 33 00 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 | P.support.3.3..Add.a.full.path.t |
a72a0 | 6f 20 74 68 65 20 73 63 72 69 70 74 00 33 30 00 33 34 00 33 36 00 33 38 00 34 00 34 2e 20 41 64 | o.the.script.30.34.36.38.4.4..Ad |
a72c0 | 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 34 2e 20 4f 6e 63 65 20 61 6e | d.optional.parameters.4..Once.an |
a72e0 | 73 77 65 72 20 66 72 6f 6d 20 73 65 72 76 65 72 20 31 39 32 2e 30 2e 32 2e 31 30 30 20 69 73 20 | swer.from.server.192.0.2.100.is. |
a7300 | 73 65 65 6e 20 69 6e 20 6f 70 70 6f 73 69 74 65 20 64 69 72 65 63 74 69 6f 6e 2c 20 63 6f 6e 6e | seen.in.opposite.direction,.conn |
a7320 | 65 63 74 69 6f 6e 20 73 74 61 74 65 20 77 69 6c 6c 20 62 65 20 74 72 69 67 67 65 72 65 64 20 74 | ection.state.will.be.triggered.t |
a7340 | 6f 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 73 6f 20 74 68 69 73 20 72 65 70 6c 79 | o.**established**,.so.this.reply |
a7360 | 20 69 73 20 61 63 63 65 70 74 65 64 20 69 6e 20 72 75 6c 65 20 31 30 2e 00 34 30 20 4d 48 7a 20 | .is.accepted.in.rule.10..40.MHz. |
a7380 | 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 73 77 69 74 63 68 20 74 68 65 69 72 20 70 72 69 6d 61 72 | channels.may.switch.their.primar |
a73a0 | 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 73 20 69 66 20 6e 65 65 64 | y.and.secondary.channels.if.need |
a73c0 | 65 64 20 6f 72 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c | ed.or.creation.of.40.MHz.channel |
a73e0 | 20 6d 61 79 62 65 20 72 65 6a 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 6f 76 65 72 6c 61 70 | .maybe.rejected.based.on.overlap |
a7400 | 70 69 6e 67 20 42 53 53 65 73 2e 20 54 68 65 73 65 20 63 68 61 6e 67 65 73 20 61 72 65 20 64 6f | ping.BSSes..These.changes.are.do |
a7420 | 6e 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 68 6f 73 74 61 70 64 20 69 73 | ne.automatically.when.hostapd.is |
a7440 | 20 73 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 2e 00 | .setting.up.the.40.MHz.channel.. |
a7460 | 34 30 30 30 30 20 2d 20 34 30 20 47 42 69 74 2f 73 00 34 32 00 34 34 00 34 36 00 35 00 35 20 69 | 40000.-.40.GBit/s.42.44.46.5.5.i |
a7480 | 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 35 2e 20 53 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 | f.not.defined..5..Second.packet. |
a74a0 | 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 72 65 63 65 69 76 65 64 20 | for.this.connection.is.received. |
a74c0 | 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 53 69 6e 63 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | by.the.router..Since.connection. |
a74e0 | 73 74 61 74 65 20 69 73 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 74 68 65 6e 20 72 | state.is.**established**,.then.r |
a7500 | 75 6c 65 20 31 30 20 69 73 20 68 69 74 2c 20 61 6e 64 20 61 20 6e 65 77 20 65 6e 74 72 79 20 69 | ule.10.is.hit,.and.a.new.entry.i |
a7520 | 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 46 54 30 31 20 69 73 20 61 64 64 65 64 20 66 6f | n.the.flowtable.FT01.is.added.fo |
a7540 | 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 35 30 30 30 20 2d 20 35 20 47 42 69 74 | r.this.connection..5000.-.5.GBit |
a7560 | 2f 73 00 35 30 30 30 30 20 2d 20 35 30 20 47 42 69 74 2f 73 00 35 34 00 36 00 36 2e 20 41 6c 6c | /s.50000.-.50.GBit/s.54.6.6..All |
a7580 | 20 73 75 62 73 65 63 75 65 6e 74 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 6b 69 70 20 74 72 | .subsecuent.packets.will.skip.tr |
a75a0 | 61 64 69 74 69 6f 6e 61 6c 20 70 61 74 68 2c 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 6f 66 66 6c | aditional.path,.and.will.be.offl |
a75c0 | 6f 61 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 2a 2a 46 61 73 74 20 50 61 | oaded.and.will.use.the.**Fast.Pa |
a75e0 | 74 68 2a 2a 2e 00 36 36 00 36 36 25 20 6f 66 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 | th**..66.66%.of.traffic.is.route |
a7600 | 64 20 74 6f 20 65 74 68 30 2c 20 65 74 68 31 20 67 65 74 73 20 33 33 25 20 6f 66 20 74 72 61 66 | d.to.eth0,.eth1.gets.33%.of.traf |
a7620 | 66 69 63 2e 00 36 37 00 36 39 00 36 69 6e 34 20 28 53 49 54 29 00 36 69 6e 34 20 75 73 65 73 20 | fic..67.69.6in4.(SIT).6in4.uses. |
a7640 | 74 75 6e 6e 65 6c 69 6e 67 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 49 50 76 36 20 74 72 | tunneling.to.encapsulate.IPv6.tr |
a7660 | 61 66 66 69 63 20 6f 76 65 72 20 49 50 76 34 20 6c 69 6e 6b 73 20 61 73 20 64 65 66 69 6e 65 64 | affic.over.IPv4.links.as.defined |
a7680 | 20 69 6e 20 3a 72 66 63 3a 60 34 32 31 33 60 2e 20 54 68 65 20 36 69 6e 34 20 74 72 61 66 66 69 | .in.:rfc:`4213`..The.6in4.traffi |
a76a0 | 63 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 49 50 76 34 20 69 6e 73 69 64 65 20 49 50 76 34 20 | c.is.sent.over.IPv4.inside.IPv4. |
a76c0 | 70 61 63 6b 65 74 73 20 77 68 6f 73 65 20 49 50 20 68 65 61 64 65 72 73 20 68 61 76 65 20 74 68 | packets.whose.IP.headers.have.th |
a76e0 | 65 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 73 65 74 20 74 6f 20 34 31 2e 20 | e.IP.protocol.number.set.to.41.. |
a7700 | 54 68 69 73 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 69 73 20 73 70 65 63 69 66 69 63 | This.protocol.number.is.specific |
a7720 | 61 6c 6c 79 20 64 65 73 69 67 6e 61 74 65 64 20 66 6f 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 | ally.designated.for.IPv6.encapsu |
a7740 | 6c 61 74 69 6f 6e 2c 20 74 68 65 20 49 50 76 34 20 70 61 63 6b 65 74 20 68 65 61 64 65 72 20 69 | lation,.the.IPv4.packet.header.i |
a7760 | 73 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 49 50 | s.immediately.followed.by.the.IP |
a7780 | 76 36 20 70 61 63 6b 65 74 20 62 65 69 6e 67 20 63 61 72 72 69 65 64 2e 20 54 68 65 20 65 6e 63 | v6.packet.being.carried..The.enc |
a77a0 | 61 70 73 75 6c 61 74 69 6f 6e 20 6f 76 65 72 68 65 61 64 20 69 73 20 74 68 65 20 73 69 7a 65 20 | apsulation.overhead.is.the.size. |
a77c0 | 6f 66 20 74 68 65 20 49 50 76 34 20 68 65 61 64 65 72 20 6f 66 20 32 30 20 62 79 74 65 73 2c 20 | of.the.IPv4.header.of.20.bytes,. |
a77e0 | 74 68 65 72 65 66 6f 72 65 20 77 69 74 68 20 61 6e 20 4d 54 55 20 6f 66 20 31 35 30 30 20 62 79 | therefore.with.an.MTU.of.1500.by |
a7800 | 74 65 73 2c 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 6f 66 20 31 34 38 30 20 62 79 74 65 73 20 | tes,.IPv6.packets.of.1480.bytes. |
a7820 | 63 61 6e 20 62 65 20 73 65 6e 74 20 77 69 74 68 6f 75 74 20 66 72 61 67 6d 65 6e 74 61 74 69 6f | can.be.sent.without.fragmentatio |
a7840 | 6e 2e 20 54 68 69 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 66 | n..This.tunneling.technique.is.f |
a7860 | 72 65 71 75 65 6e 74 6c 79 20 75 73 65 64 20 62 79 20 49 50 76 36 20 74 75 6e 6e 65 6c 20 62 72 | requently.used.by.IPv6.tunnel.br |
a7880 | 6f 6b 65 72 73 20 6c 69 6b 65 20 60 48 75 72 72 69 63 61 6e 65 20 45 6c 65 63 74 72 69 63 60 5f | okers.like.`Hurricane.Electric`_ |
a78a0 | 2e 00 37 00 37 30 00 38 00 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 | ..7.70.8.802.1q.VLAN.interfaces. |
a78c0 | 61 72 65 20 72 65 70 72 65 73 65 6e 74 65 64 20 61 73 20 76 69 72 74 75 61 6c 20 73 75 62 2d 69 | are.represented.as.virtual.sub-i |
a78e0 | 6e 74 65 72 66 61 63 65 73 20 69 6e 20 56 79 4f 53 2e 20 54 68 65 20 74 65 72 6d 20 75 73 65 64 | nterfaces.in.VyOS..The.term.used |
a7900 | 20 66 6f 72 20 74 68 69 73 20 69 73 20 60 60 76 69 66 60 60 2e 00 39 00 3a 61 62 62 72 3a 60 41 | .for.this.is.``vif``..9.:abbr:`A |
a7920 | 46 49 20 28 41 64 64 72 65 73 73 20 66 61 6d 69 6c 79 20 61 75 74 68 6f 72 69 74 79 20 69 64 65 | FI.(Address.family.authority.ide |
a7940 | 6e 74 69 66 69 65 72 29 60 20 2d 20 60 60 34 39 60 60 20 54 68 65 20 41 46 49 20 76 61 6c 75 65 | ntifier)`.-.``49``.The.AFI.value |
a7960 | 20 34 39 20 69 73 20 77 68 61 74 20 49 53 2d 49 53 20 75 73 65 73 20 66 6f 72 20 70 72 69 76 61 | .49.is.what.IS-IS.uses.for.priva |
a7980 | 74 65 20 61 64 64 72 65 73 73 69 6e 67 2e 00 3a 61 62 62 72 3a 60 41 52 50 20 28 41 64 64 72 65 | te.addressing..:abbr:`ARP.(Addre |
a79a0 | 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 63 6f | ss.Resolution.Protocol)`.is.a.co |
a79c0 | 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 64 69 | mmunication.protocol.used.for.di |
a79e0 | 73 63 6f 76 65 72 69 6e 67 20 74 68 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 | scovering.the.link.layer.address |
a7a00 | 2c 20 73 75 63 68 20 61 73 20 61 20 4d 41 43 20 61 64 64 72 65 73 73 2c 20 61 73 73 6f 63 69 61 | ,.such.as.a.MAC.address,.associa |
a7a20 | 74 65 64 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 6e 65 74 20 6c 61 79 65 72 20 | ted.with.a.given.internet.layer. |
a7a40 | 61 64 64 72 65 73 73 2c 20 74 79 70 69 63 61 6c 6c 79 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 | address,.typically.an.IPv4.addre |
a7a60 | 73 73 2e 20 54 68 69 73 20 6d 61 70 70 69 6e 67 20 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 66 | ss..This.mapping.is.a.critical.f |
a7a80 | 75 6e 63 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c | unction.in.the.Internet.protocol |
a7aa0 | 20 73 75 69 74 65 2e 20 41 52 50 20 77 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 31 39 38 32 20 | .suite..ARP.was.defined.in.1982. |
a7ac0 | 62 79 20 3a 72 66 63 3a 60 38 32 36 60 20 77 68 69 63 68 20 69 73 20 49 6e 74 65 72 6e 65 74 20 | by.:rfc:`826`.which.is.Internet. |
a7ae0 | 53 74 61 6e 64 61 72 64 20 53 54 44 20 33 37 2e 00 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 | Standard.STD.37..:abbr:`BFD.(Bid |
a7b00 | 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 | irectional.Forwarding.Detection) |
a7b20 | 60 20 69 73 20 64 65 73 63 72 69 62 65 64 20 61 6e 64 20 65 78 74 65 6e 64 65 64 20 62 79 20 74 | `.is.described.and.extended.by.t |
a7b40 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 52 46 43 73 3a 20 3a 72 66 63 3a 60 35 38 38 30 60 2c 20 | he.following.RFCs:.:rfc:`5880`,. |
a7b60 | 3a 72 66 63 3a 60 35 38 38 31 60 20 61 6e 64 20 3a 72 66 63 3a 60 35 38 38 33 60 2e 00 3a 61 62 | :rfc:`5881`.and.:rfc:`5883`..:ab |
a7b80 | 62 72 3a 60 42 47 50 20 28 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c | br:`BGP.(Border.Gateway.Protocol |
a7ba0 | 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 45 78 74 65 72 69 6f 72 20 47 61 74 65 77 61 | )`.is.one.of.the.Exterior.Gatewa |
a7bc0 | 79 20 50 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 74 68 65 20 64 65 20 66 61 63 74 6f 20 73 74 61 | y.Protocols.and.the.de.facto.sta |
a7be0 | 6e 64 61 72 64 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | ndard.interdomain.routing.protoc |
a7c00 | 6f 6c 2e 20 54 68 65 20 6c 61 74 65 73 74 20 42 47 50 20 76 65 72 73 69 6f 6e 20 69 73 20 34 2e | ol..The.latest.BGP.version.is.4. |
a7c20 | 20 42 47 50 2d 34 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 37 37 | .BGP-4.is.described.in.:rfc:`177 |
a7c40 | 31 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 34 32 37 31 60 2e 20 3a | 1`.and.updated.by.:rfc:`4271`..: |
a7c60 | 72 66 63 3a 60 32 38 35 38 60 20 61 64 64 73 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 73 75 | rfc:`2858`.adds.multiprotocol.su |
a7c80 | 70 70 6f 72 74 20 74 6f 20 42 47 50 2e 00 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 | pport.to.BGP..:abbr:`CKN.(MACsec |
a7ca0 | 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 | .connectivity.association.name)` |
a7cc0 | 20 6b 65 79 00 3a 61 62 62 72 3a 60 44 4d 56 50 4e 20 28 44 79 6e 61 6d 69 63 20 4d 75 6c 74 69 | .key.:abbr:`DMVPN.(Dynamic.Multi |
a7ce0 | 70 6f 69 6e 74 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 | point.Virtual.Private.Network)`. |
a7d00 | 69 73 20 61 20 64 79 6e 61 6d 69 63 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c | is.a.dynamic.:abbr:`VPN.(Virtual |
a7d20 | 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 65 63 68 6e 6f 6c 6f 67 79 20 6f 72 | .Private.Network)`.technology.or |
a7d40 | 69 67 69 6e 61 6c 6c 79 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 43 69 73 63 6f 2e 20 57 68 69 | iginally.developed.by.Cisco..Whi |
a7d60 | 6c 65 20 74 68 65 69 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 77 61 73 20 73 6f 6d 65 | le.their.implementation.was.some |
a7d80 | 77 68 61 74 20 70 72 6f 70 72 69 65 74 61 72 79 2c 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 | what.proprietary,.the.underlying |
a7da0 | 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 61 63 74 75 61 6c 6c 79 20 73 74 61 6e 64 | .technologies.are.actually.stand |
a7dc0 | 61 72 64 73 20 62 61 73 65 64 2e 20 54 68 65 20 74 68 72 65 65 20 74 65 63 68 6e 6f 6c 6f 67 69 | ards.based..The.three.technologi |
a7de0 | 65 73 20 61 72 65 3a 00 3a 61 62 62 72 3a 60 44 4e 41 54 20 28 44 65 73 74 69 6e 61 74 69 6f 6e | es.are:.:abbr:`DNAT.(Destination |
a7e00 | 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 63 | .Network.Address.Translation)`.c |
a7e20 | 68 61 6e 67 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f | hanges.the.destination.address.o |
a7e40 | 66 20 70 61 63 6b 65 74 73 20 70 61 73 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f | f.packets.passing.through.the.ro |
a7e60 | 75 74 65 72 2c 20 77 68 69 6c 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 63 68 | uter,.while.:ref:`source-nat`.ch |
a7e80 | 61 6e 67 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b | anges.the.source.address.of.pack |
a7ea0 | 65 74 73 2e 20 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 77 68 65 6e | ets..DNAT.is.typically.used.when |
a7ec0 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 28 70 75 62 6c 69 63 29 20 68 6f 73 74 20 6e 65 65 64 73 | .an.external.(public).host.needs |
a7ee0 | 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 73 65 73 73 69 6f 6e 20 77 69 74 68 20 61 6e 20 69 | .to.initiate.a.session.with.an.i |
a7f00 | 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 20 41 20 63 75 73 74 6f 6d | nternal.(private).host..A.custom |
a7f20 | 65 72 20 6e 65 65 64 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 70 72 69 76 61 74 65 20 73 65 72 | er.needs.to.access.a.private.ser |
a7f40 | 76 69 63 65 20 62 65 68 69 6e 64 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 | vice.behind.the.routers.public.I |
a7f60 | 50 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 | P..A.connection.is.established.w |
a7f80 | 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 | ith.the.routers.public.IP.addres |
a7fa0 | 73 20 6f 6e 20 61 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 70 6f 72 74 20 61 6e 64 20 74 68 75 73 20 | s.on.a.well.known.port.and.thus. |
a7fc0 | 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 69 73 20 70 6f 72 74 20 69 73 20 72 65 77 | all.traffic.for.this.port.is.rew |
a7fe0 | 72 69 74 74 65 6e 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 | ritten.to.address.the.internal.( |
a8000 | 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 00 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e | private).host..:abbr:`EAP.(Exten |
a8020 | 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 | sible.Authentication.Protocol)`. |
a8040 | 6f 76 65 72 20 4c 41 4e 20 28 45 41 50 6f 4c 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 6f | over.LAN.(EAPoL).is.a.network.po |
a8060 | 72 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 | rt.authentication.protocol.used. |
a8080 | 69 6e 20 49 45 45 45 20 38 30 32 2e 31 58 20 28 50 6f 72 74 20 42 61 73 65 64 20 4e 65 74 77 6f | in.IEEE.802.1X.(Port.Based.Netwo |
a80a0 | 72 6b 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 20 64 65 76 65 6c 6f 70 65 64 20 74 6f 20 | rk.Access.Control).developed.to. |
a80c0 | 67 69 76 65 20 61 20 67 65 6e 65 72 69 63 20 6e 65 74 77 6f 72 6b 20 73 69 67 6e 2d 6f 6e 20 74 | give.a.generic.network.sign-on.t |
a80e0 | 6f 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2e 00 3a 61 62 62 | o.access.network.resources..:abb |
a8100 | 72 3a 60 45 55 49 2d 36 34 20 28 36 34 2d 42 69 74 20 45 78 74 65 6e 64 65 64 20 55 6e 69 71 75 | r:`EUI-64.(64-Bit.Extended.Uniqu |
a8120 | 65 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a | e.Identifier)`.as.specified.in.: |
a8140 | 72 66 63 3a 60 34 32 39 31 60 20 61 6c 6c 6f 77 73 20 61 20 68 6f 73 74 20 74 6f 20 61 73 73 69 | rfc:`4291`.allows.a.host.to.assi |
a8160 | 67 6e 20 69 74 65 73 6c 66 20 61 20 75 6e 69 71 75 65 20 36 34 2d 42 69 74 20 49 50 76 36 20 61 | gn.iteslf.a.unique.64-Bit.IPv6.a |
a8180 | 64 64 72 65 73 73 2e 00 3a 61 62 62 72 3a 60 47 45 4e 45 56 45 20 28 47 65 6e 65 72 69 63 20 4e | ddress..:abbr:`GENEVE.(Generic.N |
a81a0 | 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 45 6e 63 61 70 73 75 6c 61 74 | etwork.Virtualization.Encapsulat |
a81c0 | 69 6f 6e 29 60 20 73 75 70 70 6f 72 74 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 63 61 70 61 62 69 | ion)`.supports.all.of.the.capabi |
a81e0 | 6c 69 74 69 65 73 20 6f 66 20 3a 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 | lities.of.:abbr:`VXLAN.(Virtual. |
a8200 | 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 2c 20 3a 61 62 62 72 3a 60 4e 56 47 52 45 20 28 | Extensible.LAN)`,.:abbr:`NVGRE.( |
a8220 | 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 69 6e 67 20 47 65 6e | Network.Virtualization.using.Gen |
a8240 | 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 61 6e | eric.Routing.Encapsulation)`,.an |
a8260 | 64 20 3a 61 62 62 72 3a 60 53 54 54 20 28 53 74 61 74 65 6c 65 73 73 20 54 72 61 6e 73 70 6f 72 | d.:abbr:`STT.(Stateless.Transpor |
a8280 | 74 20 54 75 6e 6e 65 6c 69 6e 67 29 60 20 61 6e 64 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 74 | t.Tunneling)`.and.was.designed.t |
a82a0 | 6f 20 6f 76 65 72 63 6f 6d 65 20 74 68 65 69 72 20 70 65 72 63 65 69 76 65 64 20 6c 69 6d 69 74 | o.overcome.their.perceived.limit |
a82c0 | 61 74 69 6f 6e 73 2e 20 4d 61 6e 79 20 62 65 6c 69 65 76 65 20 47 45 4e 45 56 45 20 63 6f 75 6c | ations..Many.believe.GENEVE.coul |
a82e0 | 64 20 65 76 65 6e 74 75 61 6c 6c 79 20 72 65 70 6c 61 63 65 20 74 68 65 73 65 20 65 61 72 6c 69 | d.eventually.replace.these.earli |
a8300 | 65 72 20 66 6f 72 6d 61 74 73 20 65 6e 74 69 72 65 6c 79 2e 00 3a 61 62 62 72 3a 60 47 52 45 20 | er.formats.entirely..:abbr:`GRE. |
a8320 | 28 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 | (Generic.Routing.Encapsulation)` |
a8340 | 2c 20 47 52 45 2f 49 50 73 65 63 20 28 6f 72 20 49 50 49 50 2f 49 50 73 65 63 2c 20 53 49 54 2f | ,.GRE/IPsec.(or.IPIP/IPsec,.SIT/ |
a8360 | 49 50 73 65 63 2c 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 74 61 74 65 6c 65 73 73 20 74 75 | IPsec,.or.any.other.stateless.tu |
a8380 | 6e 6e 65 6c 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 49 50 73 65 63 29 20 69 73 20 74 68 65 | nnel.protocol.over.IPsec).is.the |
a83a0 | 20 75 73 75 61 6c 20 77 61 79 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 66 69 | .usual.way.to.protect.the.traffi |
a83c0 | 63 20 69 6e 73 69 64 65 20 61 20 74 75 6e 6e 65 6c 2e 00 3a 61 62 62 72 3a 60 47 52 4f 20 28 47 | c.inside.a.tunnel..:abbr:`GRO.(G |
a83e0 | 65 6e 65 72 69 63 20 72 65 63 65 69 76 65 20 6f 66 66 6c 6f 61 64 29 60 20 69 73 20 74 68 65 20 | eneric.receive.offload)`.is.the. |
a8400 | 63 6f 6d 70 6c 65 6d 65 6e 74 20 74 6f 20 47 53 4f 2e 20 49 64 65 61 6c 6c 79 20 61 6e 79 20 66 | complement.to.GSO..Ideally.any.f |
a8420 | 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 62 79 20 47 52 4f 20 73 68 6f 75 6c 64 20 62 65 20 | rame.assembled.by.GRO.should.be. |
a8440 | 73 65 67 6d 65 6e 74 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 69 64 65 6e 74 69 63 61 6c | segmented.to.create.an.identical |
a8460 | 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 75 73 69 6e 67 20 47 53 4f 2c 20 61 | .sequence.of.frames.using.GSO,.a |
a8480 | 6e 64 20 61 6e 79 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 73 65 67 6d 65 6e | nd.any.sequence.of.frames.segmen |
a84a0 | 74 65 64 20 62 79 20 47 53 4f 20 73 68 6f 75 6c 64 20 62 65 20 61 62 6c 65 20 74 6f 20 62 65 20 | ted.by.GSO.should.be.able.to.be. |
a84c0 | 72 65 61 73 73 65 6d 62 6c 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c | reassembled.back.to.the.original |
a84e0 | 20 62 79 20 47 52 4f 2e 20 54 68 65 20 6f 6e 6c 79 20 65 78 63 65 70 74 69 6f 6e 20 74 6f 20 74 | .by.GRO..The.only.exception.to.t |
a8500 | 68 69 73 20 69 73 20 49 50 76 34 20 49 44 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 61 74 20 | his.is.IPv4.ID.in.the.case.that. |
a8520 | 74 68 65 20 44 46 20 62 69 74 20 69 73 20 73 65 74 20 66 6f 72 20 61 20 67 69 76 65 6e 20 49 50 | the.DF.bit.is.set.for.a.given.IP |
a8540 | 20 68 65 61 64 65 72 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 49 50 76 | .header..If.the.value.of.the.IPv |
a8560 | 34 20 49 44 20 69 73 20 6e 6f 74 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 69 6e 63 72 65 6d 65 | 4.ID.is.not.sequentially.increme |
a8580 | 6e 74 69 6e 67 20 69 74 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 20 73 6f 20 74 68 61 74 | nting.it.will.be.altered.so.that |
a85a0 | 20 69 74 20 69 73 20 77 68 65 6e 20 61 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 76 69 | .it.is.when.a.frame.assembled.vi |
a85c0 | 61 20 47 52 4f 20 69 73 20 73 65 67 6d 65 6e 74 65 64 20 76 69 61 20 47 53 4f 2e 00 3a 61 62 62 | a.GRO.is.segmented.via.GSO..:abb |
a85e0 | 72 3a 60 47 53 4f 20 28 47 65 6e 65 72 69 63 20 53 65 67 6d 65 6e 74 61 74 69 6f 6e 20 4f 66 66 | r:`GSO.(Generic.Segmentation.Off |
a8600 | 6c 6f 61 64 29 60 20 69 73 20 61 20 70 75 72 65 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 | load)`.is.a.pure.software.offloa |
a8620 | 64 20 74 68 61 74 20 69 73 20 6d 65 61 6e 74 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 63 61 73 | d.that.is.meant.to.deal.with.cas |
a8640 | 65 73 20 77 68 65 72 65 20 64 65 76 69 63 65 20 64 72 69 76 65 72 73 20 63 61 6e 6e 6f 74 20 70 | es.where.device.drivers.cannot.p |
a8660 | 65 72 66 6f 72 6d 20 74 68 65 20 6f 66 66 6c 6f 61 64 73 20 64 65 73 63 72 69 62 65 64 20 61 62 | erform.the.offloads.described.ab |
a8680 | 6f 76 65 2e 20 57 68 61 74 20 6f 63 63 75 72 73 20 69 6e 20 47 53 4f 20 69 73 20 74 68 61 74 20 | ove..What.occurs.in.GSO.is.that. |
a86a0 | 61 20 67 69 76 65 6e 20 73 6b 62 75 66 66 20 77 69 6c 6c 20 68 61 76 65 20 69 74 73 20 64 61 74 | a.given.skbuff.will.have.its.dat |
a86c0 | 61 20 62 72 6f 6b 65 6e 20 6f 75 74 20 6f 76 65 72 20 6d 75 6c 74 69 70 6c 65 20 73 6b 62 75 66 | a.broken.out.over.multiple.skbuf |
a86e0 | 66 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 73 69 7a 65 64 20 74 6f 20 6d 61 74 | fs.that.have.been.resized.to.mat |
a8700 | 63 68 20 74 68 65 20 4d 53 53 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 73 6b 62 5f 73 68 69 6e | ch.the.MSS.provided.via.skb_shin |
a8720 | 66 6f 28 29 2d 3e 67 73 6f 5f 73 69 7a 65 2e 00 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 | fo()->gso_size..:abbr:`IGMP.(Int |
a8740 | 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 | ernet.Group.Management.Protocol) |
a8760 | 60 20 70 72 6f 78 79 20 73 65 6e 64 73 20 49 47 4d 50 20 68 6f 73 74 20 6d 65 73 73 61 67 65 73 | `.proxy.sends.IGMP.host.messages |
a8780 | 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 | .on.behalf.of.a.connected.client |
a87a0 | 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 64 65 66 69 6e 65 20 | ..The.configuration.must.define. |
a87c0 | 6f 6e 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 | one,.and.only.one.upstream.inter |
a87e0 | 66 61 63 65 2c 20 61 6e 64 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d | face,.and.one.or.more.downstream |
a8800 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 3a 61 62 62 72 3a 60 49 50 53 65 63 20 28 49 50 20 53 65 | .interfaces..:abbr:`IPSec.(IP.Se |
a8820 | 63 75 72 69 74 79 29 60 20 2d 20 74 6f 6f 20 6d 61 6e 79 20 52 46 43 73 20 74 6f 20 6c 69 73 74 | curity)`.-.too.many.RFCs.to.list |
a8840 | 2c 20 62 75 74 20 73 74 61 72 74 20 77 69 74 68 20 3a 72 66 63 3a 60 34 33 30 31 60 00 3a 61 62 | ,.but.start.with.:rfc:`4301`.:ab |
a8860 | 62 72 3a 60 49 53 2d 49 53 20 28 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 | br:`IS-IS.(Intermediate.System.t |
a8880 | 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 69 73 20 61 20 6c 69 6e | o.Intermediate.System)`.is.a.lin |
a88a0 | 6b 2d 73 74 61 74 65 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f | k-state.interior.gateway.protoco |
a88c0 | 6c 20 28 49 47 50 29 20 77 68 69 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 49 53 | l.(IGP).which.is.described.in.IS |
a88e0 | 4f 31 30 35 38 39 2c 20 3a 72 66 63 3a 60 31 31 39 35 60 2c 20 3a 72 66 63 3a 60 35 33 30 38 60 | O10589,.:rfc:`1195`,.:rfc:`5308` |
a8900 | 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 74 68 65 20 44 69 6a 6b 73 74 72 61 20 73 68 6f 72 74 65 | ..IS-IS.runs.the.Dijkstra.shorte |
a8920 | 73 74 2d 70 61 74 68 20 66 69 72 73 74 20 28 53 50 46 29 20 61 6c 67 6f 72 69 74 68 6d 20 74 6f | st-path.first.(SPF).algorithm.to |
a8940 | 20 63 72 65 61 74 65 20 61 20 64 61 74 61 62 61 73 65 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 | .create.a.database.of.the.networ |
a8960 | 6b e2 80 99 73 20 74 6f 70 6f 6c 6f 67 79 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 61 74 20 64 61 | k...s.topology,.and.from.that.da |
a8980 | 74 61 62 61 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 62 65 73 74 20 28 74 68 | tabase.to.determine.the.best.(th |
a89a0 | 61 74 20 69 73 2c 20 6c 6f 77 65 73 74 20 63 6f 73 74 29 20 70 61 74 68 20 74 6f 20 61 20 64 65 | at.is,.lowest.cost).path.to.a.de |
a89c0 | 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 73 79 73 74 | stination..The.intermediate.syst |
a89e0 | 65 6d 73 20 28 74 68 65 20 6e 61 6d 65 20 66 6f 72 20 72 6f 75 74 65 72 73 29 20 65 78 63 68 61 | ems.(the.name.for.routers).excha |
a8a00 | 6e 67 65 20 74 6f 70 6f 6c 6f 67 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 | nge.topology.information.with.th |
a8a20 | 65 69 72 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 65 6e 63 74 65 64 20 6e 65 69 67 68 62 6f 72 73 | eir.directly.conencted.neighbors |
a8a40 | 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 | ..IS-IS.runs.directly.on.the.dat |
a8a60 | 61 20 6c 69 6e 6b 20 6c 61 79 65 72 20 28 4c 61 79 65 72 20 32 29 2e 20 49 53 2d 49 53 20 61 64 | a.link.layer.(Layer.2)..IS-IS.ad |
a8a80 | 64 72 65 73 73 65 73 20 61 72 65 20 63 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 4e 45 54 73 20 28 | dresses.are.called.:abbr:`NETs.( |
a8aa0 | 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 73 29 60 20 61 6e 64 20 63 61 6e 20 | Network.Entity.Titles)`.and.can. |
a8ac0 | 62 65 20 38 20 74 6f 20 32 30 20 62 79 74 65 73 20 6c 6f 6e 67 2c 20 62 75 74 20 61 72 65 20 67 | be.8.to.20.bytes.long,.but.are.g |
a8ae0 | 65 6e 65 72 61 6c 6c 79 20 31 30 20 62 79 74 65 73 20 6c 6f 6e 67 2e 20 54 68 65 20 74 72 65 65 | enerally.10.bytes.long..The.tree |
a8b00 | 20 64 61 74 61 62 61 73 65 20 74 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 49 | .database.that.is.created.with.I |
a8b20 | 53 2d 49 53 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 | S-IS.is.similar.to.the.one.that. |
a8b40 | 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 4f 53 50 46 20 69 6e 20 74 68 61 74 20 74 68 65 | is.created.with.OSPF.in.that.the |
a8b60 | 20 70 61 74 68 73 20 63 68 6f 73 65 6e 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 2e | .paths.chosen.should.be.similar. |
a8b80 | 20 43 6f 6d 70 61 72 69 73 6f 6e 73 20 74 6f 20 4f 53 50 46 20 61 72 65 20 69 6e 65 76 69 74 61 | .Comparisons.to.OSPF.are.inevita |
a8ba0 | 62 6c 65 20 61 6e 64 20 6f 66 74 65 6e 20 61 72 65 20 72 65 61 73 6f 6e 61 62 6c 65 20 6f 6e 65 | ble.and.often.are.reasonable.one |
a8bc0 | 73 20 74 6f 20 6d 61 6b 65 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 77 61 79 20 | s.to.make.in.regards.to.the.way. |
a8be0 | 61 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 65 69 74 68 | a.network.will.respond.with.eith |
a8c00 | 65 72 20 49 47 50 2e 00 3a 61 62 62 72 3a 60 4c 33 56 50 4e 20 56 52 46 73 20 28 20 4c 61 79 65 | er.IGP..:abbr:`L3VPN.VRFs.(.Laye |
a8c20 | 72 20 33 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 73 20 29 60 20 | r.3.Virtual.Private.Networks.)`. |
a8c40 | 62 67 70 64 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 49 50 76 34 20 52 46 43 20 34 33 36 34 20 | bgpd.supports.for.IPv4.RFC.4364. |
a8c60 | 61 6e 64 20 49 50 76 36 20 52 46 43 20 34 36 35 39 2e 20 4c 33 56 50 4e 20 72 6f 75 74 65 73 2c | and.IPv6.RFC.4659..L3VPN.routes, |
a8c80 | 20 61 6e 64 20 74 68 65 69 72 20 61 73 73 6f 63 69 61 74 65 64 20 56 52 46 20 4d 50 4c 53 20 6c | .and.their.associated.VRF.MPLS.l |
a8ca0 | 61 62 65 6c 73 2c 20 63 61 6e 20 62 65 20 64 69 73 74 72 69 62 75 74 65 64 20 74 6f 20 56 50 4e | abels,.can.be.distributed.to.VPN |
a8cc0 | 20 53 41 46 49 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2c 20 | .SAFI.neighbors.in.the.default,. |
a8ce0 | 69 2e 65 2e 2c 20 6e 6f 6e 20 56 52 46 2c 20 42 47 50 20 69 6e 73 74 61 6e 63 65 2e 20 56 52 46 | i.e.,.non.VRF,.BGP.instance..VRF |
a8d00 | 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 72 65 61 63 68 65 64 20 75 73 69 6e 67 20 63 | .MPLS.labels.are.reached.using.c |
a8d20 | 6f 72 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 77 68 69 63 68 20 61 72 65 20 64 69 73 74 72 69 | ore.MPLS.labels.which.are.distri |
a8d40 | 62 75 74 65 64 20 75 73 69 6e 67 20 4c 44 50 20 6f 72 20 42 47 50 20 6c 61 62 65 6c 65 64 20 75 | buted.using.LDP.or.BGP.labeled.u |
a8d60 | 6e 69 63 61 73 74 2e 20 62 67 70 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 69 6e 74 65 72 | nicast..bgpd.also.supports.inter |
a8d80 | 2d 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 2e 00 3a 61 62 62 72 3a 60 4c 44 50 20 28 | -VRF.route.leaking..:abbr:`LDP.( |
a8da0 | 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 | Label.Distribution.Protocol)`.is |
a8dc0 | 20 61 20 54 43 50 20 62 61 73 65 64 20 4d 50 4c 53 20 73 69 67 6e 61 6c 69 6e 67 20 70 72 6f 74 | .a.TCP.based.MPLS.signaling.prot |
a8de0 | 6f 63 6f 6c 20 74 68 61 74 20 64 69 73 74 72 69 62 75 74 65 73 20 6c 61 62 65 6c 73 20 63 72 65 | ocol.that.distributes.labels.cre |
a8e00 | 61 74 69 6e 67 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 63 68 65 64 20 70 61 74 68 73 20 | ating.MPLS.label.switched.paths. |
a8e20 | 69 6e 20 61 20 64 79 6e 61 6d 69 63 20 6d 61 6e 6e 65 72 2e 20 4c 44 50 20 69 73 20 6e 6f 74 20 | in.a.dynamic.manner..LDP.is.not. |
a8e40 | 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 73 20 69 74 20 72 65 6c 69 65 73 | a.routing.protocol,.as.it.relies |
a8e60 | 20 6f 6e 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 | .on.other.routing.protocols.for. |
a8e80 | 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 2e 20 4c 44 50 20 63 61 6e 6e 6f 74 | forwarding.decisions..LDP.cannot |
a8ea0 | 20 62 6f 6f 74 73 74 72 61 70 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 | .bootstrap.itself,.and.therefore |
a8ec0 | 20 72 65 6c 69 65 73 20 6f 6e 20 73 61 69 64 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | .relies.on.said.routing.protocol |
a8ee0 | 73 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 77 69 74 68 20 6f 74 68 65 72 20 72 | s.for.communication.with.other.r |
a8f00 | 6f 75 74 65 72 73 20 74 68 61 74 20 75 73 65 20 4c 44 50 2e 00 3a 61 62 62 72 3a 60 4c 4c 44 50 | outers.that.use.LDP..:abbr:`LLDP |
a8f20 | 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 | .(Link.Layer.Discovery.Protocol) |
a8f40 | 60 20 69 73 20 61 20 76 65 6e 64 6f 72 2d 6e 65 75 74 72 61 6c 20 6c 69 6e 6b 20 6c 61 79 65 72 | `.is.a.vendor-neutral.link.layer |
a8f60 | 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 | .protocol.in.the.Internet.Protoc |
a8f80 | 6f 6c 20 53 75 69 74 65 20 75 73 65 64 20 62 79 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 | ol.Suite.used.by.network.devices |
a8fa0 | 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 69 72 20 69 64 65 6e 74 69 74 79 2c | .for.advertising.their.identity, |
a8fc0 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 6e 65 69 67 68 62 6f 72 73 20 6f 6e 20 | .capabilities,.and.neighbors.on. |
a8fe0 | 61 6e 20 49 45 45 45 20 38 30 32 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2c 20 | an.IEEE.802.local.area.network,. |
a9000 | 70 72 69 6e 63 69 70 61 6c 6c 79 20 77 69 72 65 64 20 45 74 68 65 72 6e 65 74 2e 20 54 68 65 20 | principally.wired.Ethernet..The. |
a9020 | 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 6d 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f | protocol.is.formally.referred.to |
a9040 | 20 62 79 20 74 68 65 20 49 45 45 45 20 61 73 20 53 74 61 74 69 6f 6e 20 61 6e 64 20 4d 65 64 69 | .by.the.IEEE.as.Station.and.Medi |
a9060 | 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 43 6f 6e 6e 65 63 74 69 76 69 74 79 20 44 69 | a.Access.Control.Connectivity.Di |
a9080 | 73 63 6f 76 65 72 79 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 41 | scovery.specified.in.IEEE.802.1A |
a90a0 | 42 20 61 6e 64 20 49 45 45 45 20 38 30 32 2e 33 2d 32 30 31 32 20 73 65 63 74 69 6f 6e 20 36 20 | B.and.IEEE.802.3-2012.section.6. |
a90c0 | 63 6c 61 75 73 65 20 37 39 2e 00 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 | clause.79..:abbr:`MKA.(MACsec.Ke |
a90e0 | 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 75 73 65 64 20 74 | y.Agreement.protocol)`.is.used.t |
a9100 | 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 6b 65 79 73 20 62 65 74 77 65 65 6e 20 69 6e 64 69 76 | o.synchronize.keys.between.indiv |
a9120 | 69 64 75 61 6c 20 70 65 65 72 73 2e 00 3a 61 62 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d | idual.peers..:abbr:`MPLS.(Multi- |
a9140 | 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 63 68 69 6e 67 29 60 20 69 73 20 61 20 | Protocol.Label.Switching)`.is.a. |
a9160 | 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 72 61 64 69 67 6d 20 77 68 69 63 68 | packet.forwarding.paradigm.which |
a9180 | 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 72 65 67 75 6c 61 72 20 49 50 20 66 6f 72 77 61 72 64 | .differs.from.regular.IP.forward |
a91a0 | 69 6e 67 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 65 69 | ing..Instead.of.IP.addresses.bei |
a91c0 | 6e 67 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 63 69 73 69 6f 6e 20 6f 6e 20 | ng.used.to.make.the.decision.on. |
a91e0 | 66 69 6e 64 69 6e 67 20 74 68 65 20 65 78 69 74 20 69 6e 74 65 72 66 61 63 65 2c 20 61 20 72 6f | finding.the.exit.interface,.a.ro |
a9200 | 75 74 65 72 20 77 69 6c 6c 20 69 6e 73 74 65 61 64 20 75 73 65 20 61 6e 20 65 78 61 63 74 20 6d | uter.will.instead.use.an.exact.m |
a9220 | 61 74 63 68 20 6f 6e 20 61 20 33 32 20 62 69 74 2f 34 20 62 79 74 65 20 68 65 61 64 65 72 20 63 | atch.on.a.32.bit/4.byte.header.c |
a9240 | 61 6c 6c 65 64 20 74 68 65 20 4d 50 4c 53 20 6c 61 62 65 6c 2e 20 54 68 69 73 20 6c 61 62 65 6c | alled.the.MPLS.label..This.label |
a9260 | 20 69 73 20 69 6e 73 65 72 74 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 65 74 68 65 72 6e 65 | .is.inserted.between.the.etherne |
a9280 | 74 20 28 6c 61 79 65 72 20 32 29 20 68 65 61 64 65 72 20 61 6e 64 20 74 68 65 20 49 50 20 28 6c | t.(layer.2).header.and.the.IP.(l |
a92a0 | 61 79 65 72 20 33 29 20 68 65 61 64 65 72 2e 20 4f 6e 65 20 63 61 6e 20 73 74 61 74 69 63 61 6c | ayer.3).header..One.can.statical |
a92c0 | 6c 79 20 6f 72 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 6c 61 62 65 6c 20 61 | ly.or.dynamically.assign.label.a |
a92e0 | 6c 6c 6f 63 61 74 69 6f 6e 73 2c 20 62 75 74 20 77 65 20 77 69 6c 6c 20 66 6f 63 75 73 20 6f 6e | llocations,.but.we.will.focus.on |
a9300 | 20 64 79 6e 61 6d 69 63 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 6c 61 62 65 6c 73 20 75 73 | .dynamic.allocation.of.labels.us |
a9320 | 69 6e 67 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 | ing.some.sort.of.label.distribut |
a9340 | 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 73 75 63 68 20 61 73 20 74 68 65 20 61 70 74 6c 79 20 | ion.protocol.(such.as.the.aptly. |
a9360 | 6e 61 6d 65 64 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f | named.Label.Distribution.Protoco |
a9380 | 6c 20 2f 20 4c 44 50 2c 20 52 65 73 6f 75 72 63 65 20 52 65 73 65 72 76 61 74 69 6f 6e 20 50 72 | l./.LDP,.Resource.Reservation.Pr |
a93a0 | 6f 74 6f 63 6f 6c 20 2f 20 52 53 56 50 2c 20 6f 72 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e | otocol./.RSVP,.or.Segment.Routin |
a93c0 | 67 20 74 68 72 6f 75 67 68 20 4f 53 50 46 2f 49 53 49 53 29 2e 20 54 68 65 73 65 20 70 72 6f 74 | g.through.OSPF/ISIS)..These.prot |
a93e0 | 6f 63 6f 6c 73 20 61 6c 6c 6f 77 20 66 6f 72 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 | ocols.allow.for.the.creation.of. |
a9400 | 61 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 2f 75 6e 69 63 61 73 74 20 70 61 74 68 20 63 61 | a.unidirectional/unicast.path.ca |
a9420 | 6c 6c 65 64 20 61 20 6c 61 62 65 6c 65 64 20 73 77 69 74 63 68 65 64 20 70 61 74 68 20 28 69 6e | lled.a.labeled.switched.path.(in |
a9440 | 69 74 69 61 6c 69 7a 65 64 20 61 73 20 4c 53 50 29 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 | itialized.as.LSP).throughout.the |
a9460 | 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 6f 70 65 72 61 74 65 73 20 76 65 72 79 20 6d 75 63 68 | .network.that.operates.very.much |
a9480 | 20 6c 69 6b 65 20 61 20 74 75 6e 6e 65 6c 20 74 68 72 6f 75 67 68 20 74 68 65 20 6e 65 74 77 6f | .like.a.tunnel.through.the.netwo |
a94a0 | 72 6b 2e 20 41 6e 20 65 61 73 79 20 77 61 79 20 6f 66 20 74 68 69 6e 6b 69 6e 67 20 61 62 6f 75 | rk..An.easy.way.of.thinking.abou |
a94c0 | 74 20 68 6f 77 20 61 6e 20 4d 50 4c 53 20 4c 53 50 20 61 63 74 75 61 6c 6c 79 20 66 6f 72 77 61 | t.how.an.MPLS.LSP.actually.forwa |
a94e0 | 72 64 73 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 6f 75 74 20 61 20 6e 65 74 77 6f 72 6b | rds.traffic.throughout.a.network |
a9500 | 20 69 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 2e 20 54 68 | .is.to.think.of.a.GRE.tunnel..Th |
a9520 | 65 79 20 61 72 65 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 | ey.are.not.the.same.in.how.they. |
a9540 | 6f 70 65 72 61 74 65 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 69 | operate,.but.they.are.the.same.i |
a9560 | 6e 20 68 6f 77 20 74 68 65 79 20 68 61 6e 64 6c 65 20 74 68 65 20 74 75 6e 6e 65 6c 65 64 20 70 | n.how.they.handle.the.tunneled.p |
a9580 | 61 63 6b 65 74 2e 20 49 74 20 77 6f 75 6c 64 20 62 65 20 67 6f 6f 64 20 74 6f 20 74 68 69 6e 6b | acket..It.would.be.good.to.think |
a95a0 | 20 6f 66 20 4d 50 4c 53 20 61 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 68 6e 6f 6c 6f | .of.MPLS.as.a.tunneling.technolo |
a95c0 | 67 79 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 | gy.that.can.be.used.to.transport |
a95e0 | 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 70 61 63 6b 65 74 73 | .many.different.types.of.packets |
a9600 | 2c 20 74 6f 20 61 69 64 20 69 6e 20 74 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 | ,.to.aid.in.traffic.engineering. |
a9620 | 62 79 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 65 20 74 6f 20 73 70 65 63 69 66 79 20 70 61 74 68 73 | by.allowing.one.to.specify.paths |
a9640 | 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 28 75 73 69 6e 67 20 52 | .throughout.the.network.(using.R |
a9660 | 53 56 50 20 6f 72 20 53 52 29 2c 20 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 6c 6c 79 20 61 6c 6c | SVP.or.SR),.and.to.generally.all |
a9680 | 6f 77 20 66 6f 72 20 65 61 73 69 65 72 20 69 6e 74 72 61 2f 69 6e 74 65 72 20 6e 65 74 77 6f 72 | ow.for.easier.intra/inter.networ |
a96a0 | 6b 20 74 72 61 6e 73 70 6f 72 74 20 6f 66 20 64 61 74 61 20 70 61 63 6b 65 74 73 2e 00 3a 61 62 | k.transport.of.data.packets..:ab |
a96c0 | 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 | br:`NAT.(Network.Address.Transla |
a96e0 | 74 69 6f 6e 29 60 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 6d 65 74 68 6f 64 20 6f 66 20 72 65 6d | tion)`.is.a.common.method.of.rem |
a9700 | 61 70 70 69 6e 67 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e 74 6f | apping.one.IP.address.space.into |
a9720 | 20 61 6e 6f 74 68 65 72 20 62 79 20 6d 6f 64 69 66 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 61 64 | .another.by.modifying.network.ad |
a9740 | 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 50 20 68 65 61 64 | dress.information.in.the.IP.head |
a9760 | 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 77 68 69 6c 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 | er.of.packets.while.they.are.in. |
a9780 | 74 72 61 6e 73 69 74 20 61 63 72 6f 73 73 20 61 20 74 72 61 66 66 69 63 20 72 6f 75 74 69 6e 67 | transit.across.a.traffic.routing |
a97a0 | 20 64 65 76 69 63 65 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 20 77 61 73 20 6f 72 69 67 69 | .device..The.technique.was.origi |
a97c0 | 6e 61 6c 6c 79 20 75 73 65 64 20 61 73 20 61 20 73 68 6f 72 74 63 75 74 20 74 6f 20 61 76 6f 69 | nally.used.as.a.shortcut.to.avoi |
a97e0 | 64 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 61 64 64 72 65 73 73 20 65 76 65 72 79 20 68 6f | d.the.need.to.readdress.every.ho |
a9800 | 73 74 20 77 68 65 6e 20 61 20 6e 65 74 77 6f 72 6b 20 77 61 73 20 6d 6f 76 65 64 2e 20 49 74 20 | st.when.a.network.was.moved..It. |
a9820 | 68 61 73 20 62 65 63 6f 6d 65 20 61 20 70 6f 70 75 6c 61 72 20 61 6e 64 20 65 73 73 65 6e 74 69 | has.become.a.popular.and.essenti |
a9840 | 61 6c 20 74 6f 6f 6c 20 69 6e 20 63 6f 6e 73 65 72 76 69 6e 67 20 67 6c 6f 62 61 6c 20 61 64 64 | al.tool.in.conserving.global.add |
a9860 | 72 65 73 73 20 73 70 61 63 65 20 69 6e 20 74 68 65 20 66 61 63 65 20 6f 66 20 49 50 76 34 20 61 | ress.space.in.the.face.of.IPv4.a |
a9880 | 64 64 72 65 73 73 20 65 78 68 61 75 73 74 69 6f 6e 2e 20 4f 6e 65 20 49 6e 74 65 72 6e 65 74 2d | ddress.exhaustion..One.Internet- |
a98a0 | 72 6f 75 74 61 62 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 4e 41 54 20 67 61 74 | routable.IP.address.of.a.NAT.gat |
a98c0 | 65 77 61 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 6e 20 65 6e 74 69 72 65 20 70 | eway.can.be.used.for.an.entire.p |
a98e0 | 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 2e 00 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 | rivate.network..:abbr:`NAT.(Netw |
a9900 | 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e | ork.Address.Translation)`.is.con |
a9920 | 66 69 67 75 72 65 64 20 65 6e 74 69 72 65 6c 79 20 6f 6e 20 61 20 73 65 72 69 65 73 20 6f 66 20 | figured.entirely.on.a.series.of. |
a9940 | 73 6f 20 63 61 6c 6c 65 64 20 60 72 75 6c 65 73 60 2e 20 52 75 6c 65 73 20 61 72 65 20 6e 75 6d | so.called.`rules`..Rules.are.num |
a9960 | 62 65 72 65 64 20 61 6e 64 20 65 76 61 6c 75 61 74 65 64 20 62 79 20 74 68 65 20 75 6e 64 65 72 | bered.and.evaluated.by.the.under |
a9980 | 6c 79 69 6e 67 20 4f 53 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c 20 6f 72 64 65 72 21 20 54 68 65 | lying.OS.in.numerical.order!.The |
a99a0 | 20 72 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 73 20 62 79 20 | .rule.numbers.can.be.changes.by. |
a99c0 | 75 74 69 6c 69 7a 69 6e 67 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 6e 61 6d 65 60 20 61 | utilizing.the.:cfgcmd:`rename`.a |
a99e0 | 6e 64 20 3a 63 66 67 63 6d 64 3a 60 63 6f 70 79 60 20 63 6f 6d 6d 61 6e 64 73 2e 00 3a 61 62 62 | nd.:cfgcmd:`copy`.commands..:abb |
a9a00 | 72 3a 60 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 34 20 50 72 65 66 69 78 20 54 72 | r:`NAT64.(IPv6-to-IPv4.Prefix.Tr |
a9a20 | 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 63 6f 6d 70 6f 6e | anslation)`.is.a.critical.compon |
a9a40 | 65 6e 74 20 69 6e 20 6d 6f 64 65 72 6e 20 6e 65 74 77 6f 72 6b 69 6e 67 2c 20 66 61 63 69 6c 69 | ent.in.modern.networking,.facili |
a9a60 | 74 61 74 69 6e 67 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 49 50 76 | tating.communication.between.IPv |
a9a80 | 36 20 61 6e 64 20 49 50 76 34 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 69 73 20 64 6f 63 75 6d 65 | 6.and.IPv4.networks..This.docume |
a9aa0 | 6e 74 61 74 69 6f 6e 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 20 73 65 74 75 70 2c 20 63 6f 6e 66 | ntation.outlines.the.setup,.conf |
a9ac0 | 69 67 75 72 61 74 69 6f 6e 2c 20 61 6e 64 20 75 73 61 67 65 20 6f 66 20 74 68 65 20 4e 41 54 36 | iguration,.and.usage.of.the.NAT6 |
a9ae0 | 34 20 66 65 61 74 75 72 65 20 69 6e 20 79 6f 75 72 20 70 72 6f 6a 65 63 74 2e 20 57 68 65 74 68 | 4.feature.in.your.project..Wheth |
a9b00 | 65 72 20 79 6f 75 20 61 72 65 20 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 20 74 6f 20 49 50 76 36 | er.you.are.transitioning.to.IPv6 |
a9b20 | 20 6f 72 20 6e 65 65 64 20 74 6f 20 73 65 61 6d 6c 65 73 73 6c 79 20 63 6f 6e 6e 65 63 74 20 49 | .or.need.to.seamlessly.connect.I |
a9b40 | 50 76 34 20 61 6e 64 20 49 50 76 36 20 64 65 76 69 63 65 73 2e 20 4e 41 54 36 34 20 69 73 20 61 | Pv4.and.IPv6.devices..NAT64.is.a |
a9b60 | 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 | .stateful.translation.mechanism. |
a9b80 | 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 | that.translates.IPv6.addresses.t |
a9ba0 | 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 76 34 20 61 64 64 72 65 73 | o.IPv4.addresses.and.IPv4.addres |
a9bc0 | 73 65 73 20 74 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 4e 41 54 36 34 20 69 73 20 | ses.to.IPv6.addresses..NAT64.is. |
a9be0 | 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 49 50 76 36 2d 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 | used.to.enable.IPv6-only.clients |
a9c00 | 20 74 6f 20 63 6f 6e 74 61 63 74 20 49 50 76 34 20 73 65 72 76 65 72 73 20 75 73 69 6e 67 20 75 | .to.contact.IPv4.servers.using.u |
a9c20 | 6e 69 63 61 73 74 20 55 44 50 2c 20 54 43 50 2c 20 6f 72 20 49 43 4d 50 2e 00 3a 61 62 62 72 3a | nicast.UDP,.TCP,.or.ICMP..:abbr: |
a9c40 | 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 73 65 6c | `NET.(Network.Entity.Title)`.sel |
a9c60 | 65 63 74 6f 72 3a 20 60 60 30 30 60 60 20 4d 75 73 74 20 61 6c 77 61 79 73 20 62 65 20 30 30 2e | ector:.``00``.Must.always.be.00. |
a9c80 | 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 6e 64 69 63 61 74 65 73 20 22 74 68 69 73 20 73 79 | .This.setting.indicates."this.sy |
a9ca0 | 73 74 65 6d 22 20 6f 72 20 22 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 22 00 3a 61 62 62 72 3a 60 | stem".or."local.system.".:abbr:` |
a9cc0 | 4e 48 52 50 20 28 4e 65 78 74 20 48 6f 70 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 | NHRP.(Next.Hop.Resolution.Protoc |
a9ce0 | 6f 6c 29 60 20 3a 72 66 63 3a 60 32 33 33 32 60 00 3a 61 62 62 72 3a 60 4e 50 54 76 36 20 28 49 | ol)`.:rfc:`2332`.:abbr:`NPTv6.(I |
a9d00 | 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 | Pv6-to-IPv6.Network.Prefix.Trans |
a9d20 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 | lation)`.is.an.address.translati |
a9d40 | 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 6e 65 74 77 | on.technology.based.on.IPv6.netw |
a9d60 | 6f 72 6b 73 2c 20 75 73 65 64 20 74 6f 20 63 6f 6e 76 65 72 74 20 61 6e 20 49 50 76 36 20 61 64 | orks,.used.to.convert.an.IPv6.ad |
a9d80 | 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 61 6e 20 49 50 76 36 20 6d 65 73 73 61 67 65 20 | dress.prefix.in.an.IPv6.message. |
a9da0 | 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 | into.another.IPv6.address.prefix |
a9dc0 | 2e 20 57 65 20 63 61 6c 6c 20 74 68 69 73 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 | ..We.call.this.address.translati |
a9de0 | 6f 6e 20 6d 65 74 68 6f 64 20 4e 41 54 36 36 2e 20 44 65 76 69 63 65 73 20 74 68 61 74 20 73 75 | on.method.NAT66..Devices.that.su |
a9e00 | 70 70 6f 72 74 20 74 68 65 20 4e 41 54 36 36 20 66 75 6e 63 74 69 6f 6e 20 61 72 65 20 63 61 6c | pport.the.NAT66.function.are.cal |
a9e20 | 6c 65 64 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 77 68 69 63 68 20 63 61 6e 20 70 72 6f | led.NAT66.devices,.which.can.pro |
a9e40 | 76 69 64 65 20 4e 41 54 36 36 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f | vide.NAT66.source.and.destinatio |
a9e60 | 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 73 2e | n.address.translation.functions. |
a9e80 | 00 3a 61 62 62 72 3a 60 4e 54 50 20 28 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 50 72 6f 74 6f 63 | .:abbr:`NTP.(Network.Time.Protoc |
a9ea0 | 6f 6c 60 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f | ol`).is.a.networking.protocol.fo |
a9ec0 | 72 20 63 6c 6f 63 6b 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 | r.clock.synchronization.between. |
a9ee0 | 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 6f 76 65 72 20 70 61 63 6b 65 74 2d 73 77 69 | computer.systems.over.packet-swi |
a9f00 | 74 63 68 65 64 2c 20 76 61 72 69 61 62 6c 65 2d 6c 61 74 65 6e 63 79 20 64 61 74 61 20 6e 65 74 | tched,.variable-latency.data.net |
a9f20 | 77 6f 72 6b 73 2e 20 49 6e 20 6f 70 65 72 61 74 69 6f 6e 20 73 69 6e 63 65 20 62 65 66 6f 72 65 | works..In.operation.since.before |
a9f40 | 20 31 39 38 35 2c 20 4e 54 50 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 6f 6c 64 65 73 74 20 | .1985,.NTP.is.one.of.the.oldest. |
a9f60 | 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 20 63 75 72 72 65 6e 74 20 75 73 | Internet.protocols.in.current.us |
a9f80 | 65 2e 00 3a 61 62 62 72 3a 60 4f 53 50 46 20 28 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 | e..:abbr:`OSPF.(Open.Shortest.Pa |
a9fa0 | 74 68 20 46 69 72 73 74 29 60 20 69 73 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | th.First)`.is.a.routing.protocol |
a9fc0 | 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 28 49 50 29 20 6e 65 74 77 | .for.Internet.Protocol.(IP).netw |
a9fe0 | 6f 72 6b 73 2e 20 49 74 20 75 73 65 73 20 61 20 6c 69 6e 6b 20 73 74 61 74 65 20 72 6f 75 74 69 | orks..It.uses.a.link.state.routi |
aa000 | 6e 67 20 28 4c 53 52 29 20 61 6c 67 6f 72 69 74 68 6d 20 61 6e 64 20 66 61 6c 6c 73 20 69 6e 74 | ng.(LSR).algorithm.and.falls.int |
aa020 | 6f 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 | o.the.group.of.interior.gateway. |
aa040 | 70 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 2c 20 6f 70 65 72 61 74 69 6e 67 20 77 69 74 68 | protocols.(IGPs),.operating.with |
aa060 | 69 6e 20 61 20 73 69 6e 67 6c 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 28 41 | in.a.single.autonomous.system.(A |
aa080 | 53 29 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f | S)..It.is.defined.as.OSPF.Versio |
aa0a0 | 6e 20 32 20 69 6e 20 3a 72 66 63 3a 60 32 33 32 38 60 20 28 31 39 39 38 29 20 66 6f 72 20 49 50 | n.2.in.:rfc:`2328`.(1998).for.IP |
aa0c0 | 76 34 2e 20 55 70 64 61 74 65 73 20 66 6f 72 20 49 50 76 36 20 61 72 65 20 73 70 65 63 69 66 69 | v4..Updates.for.IPv6.are.specifi |
aa0e0 | 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 33 20 69 6e 20 3a 72 66 63 3a 60 35 33 | ed.as.OSPF.Version.3.in.:rfc:`53 |
aa100 | 34 30 60 20 28 32 30 30 38 29 2e 20 4f 53 50 46 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 3a 61 | 40`.(2008)..OSPF.supports.the.:a |
aa120 | 62 62 72 3a 60 43 49 44 52 20 28 43 6c 61 73 73 6c 65 73 73 20 49 6e 74 65 72 2d 44 6f 6d 61 69 | bbr:`CIDR.(Classless.Inter-Domai |
aa140 | 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 64 72 65 73 73 69 6e 67 20 6d 6f 64 65 6c 2e 00 3a 61 | n.Routing)`.addressing.model..:a |
aa160 | 62 62 72 3a 60 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d | bbr:`PIM.(Protocol.Independent.M |
aa180 | 75 6c 74 69 63 61 73 74 29 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | ulticast)`.must.be.configured.in |
aa1a0 | 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 | .every.interface.of.every.partic |
aa1c0 | 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 | ipating.router..Every.router.mus |
aa1e0 | 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 | t.also.have.the.location.of.the. |
aa200 | 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 | Rendevouz.Point.manually.configu |
aa220 | 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 | red..Then,.unidirectional.shared |
aa240 | 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 | .trees.rooted.at.the.Rendevouz.P |
aa260 | 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 | oint.will.automatically.be.built |
aa280 | 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 3a 61 62 | .for.multicast.distribution..:ab |
aa2a0 | 62 72 3a 60 50 50 50 6f 45 20 28 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 50 72 6f 74 6f 63 | br:`PPPoE.(Point-to-Point.Protoc |
aa2c0 | 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 | ol.over.Ethernet)`.is.a.network. |
aa2e0 | 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 50 50 50 20 66 | protocol.for.encapsulating.PPP.f |
aa300 | 72 61 6d 65 73 20 69 6e 73 69 64 65 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2e 20 49 74 | rames.inside.Ethernet.frames..It |
aa320 | 20 61 70 70 65 61 72 65 64 20 69 6e 20 31 39 39 39 2c 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 | .appeared.in.1999,.in.the.contex |
aa340 | 74 20 6f 66 20 74 68 65 20 62 6f 6f 6d 20 6f 66 20 44 53 4c 20 61 73 20 74 68 65 20 73 6f 6c 75 | t.of.the.boom.of.DSL.as.the.solu |
aa360 | 74 69 6f 6e 20 66 6f 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 61 63 6b 65 74 73 20 6f 76 65 72 20 | tion.for.tunneling.packets.over. |
aa380 | 74 68 65 20 44 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a | the.DSL.connection.to.the.:abbr: |
aa3a0 | 60 49 53 50 73 20 28 49 6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 | `ISPs.(Internet.Service.Provider |
aa3c0 | 73 29 60 20 49 50 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 65 72 65 20 74 | s)`.IP.network,.and.from.there.t |
aa3e0 | 6f 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 20 41 20 32 30 | o.the.rest.of.the.Internet..A.20 |
aa400 | 30 35 20 6e 65 74 77 6f 72 6b 69 6e 67 20 62 6f 6f 6b 20 6e 6f 74 65 64 20 74 68 61 74 20 22 4d | 05.networking.book.noted.that."M |
aa420 | 6f 73 74 20 44 53 4c 20 70 72 6f 76 69 64 65 72 73 20 75 73 65 20 50 50 50 6f 45 2c 20 77 68 69 | ost.DSL.providers.use.PPPoE,.whi |
aa440 | 63 68 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 65 6e 63 72 | ch.provides.authentication,.encr |
aa460 | 79 70 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6d 70 72 65 73 73 69 6f 6e 2e 22 20 54 79 70 69 63 61 | yption,.and.compression.".Typica |
aa480 | 6c 20 75 73 65 20 6f 66 20 50 50 50 6f 45 20 69 6e 76 6f 6c 76 65 73 20 6c 65 76 65 72 61 67 69 | l.use.of.PPPoE.involves.leveragi |
aa4a0 | 6e 67 20 74 68 65 20 50 50 50 20 66 61 63 69 6c 69 74 69 65 73 20 66 6f 72 20 61 75 74 68 65 6e | ng.the.PPP.facilities.for.authen |
aa4c0 | 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 74 68 20 61 20 75 73 65 72 6e 61 6d | ticating.the.user.with.a.usernam |
aa4e0 | 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2c 20 70 72 65 64 6f 6d 69 6e 61 74 65 6c 79 20 76 69 | e.and.password,.predominately.vi |
aa500 | 61 20 74 68 65 20 50 41 50 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6c 65 73 73 20 6f 66 74 65 | a.the.PAP.protocol.and.less.ofte |
aa520 | 6e 20 76 69 61 20 43 48 41 50 2e 00 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 61 | n.via.CHAP..:abbr:`RAs.(Router.a |
aa540 | 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 61 72 65 20 64 65 73 63 72 69 62 65 64 20 69 6e | dvertisements)`.are.described.in |
aa560 | 20 3a 72 66 63 3a 60 34 38 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 36 2e 32 60 2e 20 54 68 65 79 | .:rfc:`4861#section-4.6.2`..They |
aa580 | 20 61 72 65 20 70 61 72 74 20 6f 66 20 77 68 61 74 20 69 73 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 | .are.part.of.what.is.known.as.:a |
aa5a0 | 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 | bbr:`SLAAC.(Stateless.Address.Au |
aa5c0 | 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 2e 00 3a 61 62 62 72 3a 60 52 49 50 20 28 52 | toconfiguration)`..:abbr:`RIP.(R |
aa5e0 | 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 | outing.Information.Protocol)`.is |
aa600 | 20 61 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 | .a.widely.deployed.interior.gate |
aa620 | 77 61 79 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 | way.protocol..RIP.was.developed. |
aa640 | 69 6e 20 74 68 65 20 31 39 37 30 73 20 61 74 20 58 65 72 6f 78 20 4c 61 62 73 20 61 73 20 70 61 | in.the.1970s.at.Xerox.Labs.as.pa |
aa660 | 72 74 20 6f 66 20 74 68 65 20 58 4e 53 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 | rt.of.the.XNS.routing.protocol.. |
aa680 | 52 49 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f | RIP.is.a.distance-vector.protoco |
aa6a0 | 6c 20 61 6e 64 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 42 65 6c 6c 6d 61 6e 2d 46 6f | l.and.is.based.on.the.Bellman-Fo |
aa6c0 | 72 64 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 41 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 | rd.algorithms..As.a.distance-vec |
aa6e0 | 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 52 49 50 20 72 6f 75 74 65 72 20 73 65 6e 64 20 75 70 | tor.protocol,.RIP.router.send.up |
aa700 | 64 61 74 65 73 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 70 65 72 69 6f 64 69 63 61 | dates.to.its.neighbors.periodica |
aa720 | 6c 6c 79 2c 20 74 68 75 73 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 63 6f 6e 76 65 72 67 65 6e | lly,.thus.allowing.the.convergen |
aa740 | 63 65 20 74 6f 20 61 20 6b 6e 6f 77 6e 20 74 6f 70 6f 6c 6f 67 79 2e 20 49 6e 20 65 61 63 68 20 | ce.to.a.known.topology..In.each. |
aa760 | 75 70 64 61 74 65 2c 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 6e 79 20 67 69 76 65 | update,.the.distance.to.any.give |
aa780 | 6e 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 62 65 20 62 72 6f 61 64 63 61 73 74 20 74 6f 20 69 | n.network.will.be.broadcast.to.i |
aa7a0 | 74 73 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 72 6f 75 74 65 72 2e 00 3a 61 62 62 72 3a 60 52 50 | ts.neighboring.router..:abbr:`RP |
aa7c0 | 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 | KI.(Resource.Public.Key.Infrastr |
aa7e0 | 75 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 6d 65 77 6f 72 6b 20 3a 61 62 62 72 3a 60 50 | ucture)`.is.a.framework.:abbr:`P |
aa800 | 4b 49 20 28 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 | KI.(Public.Key.Infrastructure)`. |
aa820 | 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 | designed.to.secure.the.Internet. |
aa840 | 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2e 20 49 74 20 61 73 73 6f 63 | routing.infrastructure..It.assoc |
aa860 | 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 77 69 | iates.BGP.route.announcements.wi |
aa880 | 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 3a 61 62 62 72 | th.the.correct.originating.:abbr |
aa8a0 | 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 | :`ASN.(Autonomus.System.Number)` |
aa8c0 | 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 73 20 63 61 6e 20 74 68 65 6e 20 75 73 65 20 | .which.BGP.routers.can.then.use. |
aa8e0 | 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 | to.check.each.route.against.the. |
aa900 | 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 62 72 3a 60 52 4f 41 20 28 52 6f 75 74 65 20 | corresponding.:abbr:`ROA.(Route. |
aa920 | 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 69 6f 6e 29 60 20 66 6f 72 20 76 61 6c 69 64 | Origin.Authorisation)`.for.valid |
aa940 | 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 | ity..RPKI.is.described.in.:rfc:` |
aa960 | 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 53 20 28 52 65 63 65 69 76 65 20 50 61 63 6b 65 | 6480`..:abbr:`RPS.(Receive.Packe |
aa980 | 74 20 53 74 65 65 72 69 6e 67 29 60 20 69 73 20 6c 6f 67 69 63 61 6c 6c 79 20 61 20 73 6f 66 74 | t.Steering)`.is.logically.a.soft |
aa9a0 | 77 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 3a 61 62 62 72 3a 60 52 53 | ware.implementation.of.:abbr:`RS |
aa9c0 | 53 20 28 52 65 63 65 69 76 65 20 53 69 64 65 20 53 63 61 6c 69 6e 67 29 60 2e 20 42 65 69 6e 67 | S.(Receive.Side.Scaling)`..Being |
aa9e0 | 20 69 6e 20 73 6f 66 74 77 61 72 65 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 69 6c 79 20 | .in.software,.it.is.necessarily. |
aaa00 | 63 61 6c 6c 65 64 20 6c 61 74 65 72 20 69 6e 20 74 68 65 20 64 61 74 61 70 61 74 68 2e 20 57 68 | called.later.in.the.datapath..Wh |
aaa20 | 65 72 65 61 73 20 52 53 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 | ereas.RSS.selects.the.queue.and. |
aaa40 | 68 65 6e 63 65 20 43 50 55 20 74 68 61 74 20 77 69 6c 6c 20 72 75 6e 20 74 68 65 20 68 61 72 64 | hence.CPU.that.will.run.the.hard |
aaa60 | 77 61 72 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2c 20 52 50 53 20 73 65 6c 65 | ware.interrupt.handler,.RPS.sele |
aaa80 | 63 74 73 20 74 68 65 20 43 50 55 20 74 6f 20 70 65 72 66 6f 72 6d 20 70 72 6f 74 6f 63 6f 6c 20 | cts.the.CPU.to.perform.protocol. |
aaaa0 | 70 72 6f 63 65 73 73 69 6e 67 20 61 62 6f 76 65 20 74 68 65 20 69 6e 74 65 72 72 75 70 74 20 68 | processing.above.the.interrupt.h |
aaac0 | 61 6e 64 6c 65 72 2e 20 54 68 69 73 20 69 73 20 61 63 63 6f 6d 70 6c 69 73 68 65 64 20 62 79 20 | andler..This.is.accomplished.by. |
aaae0 | 70 6c 61 63 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 6f 6e 20 74 68 65 20 64 65 73 69 72 65 | placing.the.packet.on.the.desire |
aab00 | 64 20 43 50 55 27 73 20 62 61 63 6b 6c 6f 67 20 71 75 65 75 65 20 61 6e 64 20 77 61 6b 69 6e 67 | d.CPU's.backlog.queue.and.waking |
aab20 | 20 75 70 20 74 68 65 20 43 50 55 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 52 50 53 20 | .up.the.CPU.for.processing..RPS. |
aab40 | 68 61 73 20 73 6f 6d 65 20 61 64 76 61 6e 74 61 67 65 73 20 6f 76 65 72 20 52 53 53 3a 00 3a 61 | has.some.advantages.over.RSS:.:a |
aab60 | 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 | bbr:`SLAAC.(Stateless.Address.Au |
aab80 | 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 20 3a 72 66 63 3a 60 34 38 36 32 60 2e 20 49 | toconfiguration)`.:rfc:`4862`..I |
aaba0 | 50 76 36 20 68 6f 73 74 73 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 73 65 6c 76 | Pv6.hosts.can.configure.themselv |
aabc0 | 65 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 65 64 20 | es.automatically.when.connected. |
aabe0 | 74 6f 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 74 68 65 20 4e 65 69 | to.an.IPv6.network.using.the.Nei |
aac00 | 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 76 69 61 20 3a 61 62 | ghbor.Discovery.Protocol.via.:ab |
aac20 | 62 72 3a 60 49 43 4d 50 76 36 20 28 49 6e 74 65 72 6e 65 74 20 43 6f 6e 74 72 6f 6c 20 4d 65 73 | br:`ICMPv6.(Internet.Control.Mes |
aac40 | 73 61 67 65 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 36 29 60 20 72 6f 75 74 65 72 | sage.Protocol.version.6)`.router |
aac60 | 20 64 69 73 63 6f 76 65 72 79 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e 20 66 69 72 73 74 20 | .discovery.messages..When.first. |
aac80 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 2c 20 61 20 68 6f 73 74 20 73 | connected.to.a.network,.a.host.s |
aaca0 | 65 6e 64 73 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 73 6f 6c 69 63 69 74 | ends.a.link-local.router.solicit |
aacc0 | 61 74 69 6f 6e 20 6d 75 6c 74 69 63 61 73 74 20 72 65 71 75 65 73 74 20 66 6f 72 20 69 74 73 20 | ation.multicast.request.for.its. |
aace0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 3b 20 72 6f 75 74 65 72 | configuration.parameters;.router |
aad00 | 73 20 72 65 73 70 6f 6e 64 20 74 6f 20 73 75 63 68 20 61 20 72 65 71 75 65 73 74 20 77 69 74 68 | s.respond.to.such.a.request.with |
aad20 | 20 61 20 72 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 70 61 63 6b 65 74 20 74 | .a.router.advertisement.packet.t |
aad40 | 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 49 6e 74 65 72 6e 65 74 20 4c 61 79 65 72 20 63 6f 6e 66 | hat.contains.Internet.Layer.conf |
aad60 | 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 4e 41 | iguration.parameters..:abbr:`SNA |
aad80 | 54 20 28 53 6f 75 72 63 65 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c | T.(Source.Network.Address.Transl |
aada0 | 61 74 69 6f 6e 29 60 20 69 73 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 66 6f 72 6d 20 | ation)`.is.the.most.common.form. |
aadc0 | 6f 66 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 | of.:abbr:`NAT.(Network.Address.T |
aade0 | 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 61 6e 64 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 | ranslation)`.and.is.typically.re |
aae00 | 66 65 72 72 65 64 20 74 6f 20 73 69 6d 70 6c 79 20 61 73 20 4e 41 54 2e 20 54 6f 20 62 65 20 6d | ferred.to.simply.as.NAT..To.be.m |
aae20 | 6f 72 65 20 63 6f 72 72 65 63 74 2c 20 77 68 61 74 20 6d 6f 73 74 20 70 65 6f 70 6c 65 20 72 65 | ore.correct,.what.most.people.re |
aae40 | 66 65 72 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 | fer.to.as.:abbr:`NAT.(Network.Ad |
aae60 | 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 63 74 75 61 6c 6c 79 20 | dress.Translation)`.is.actually. |
aae80 | 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 3a 61 62 62 72 3a 60 50 41 54 20 28 50 6f 72 74 20 | the.process.of.:abbr:`PAT.(Port. |
aaea0 | 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 2c 20 6f 72 20 4e 41 54 20 6f 76 | Address.Translation)`,.or.NAT.ov |
aaec0 | 65 72 6c 6f 61 64 2e 20 53 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 62 | erload..SNAT.is.typically.used.b |
aaee0 | 79 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 73 2f 70 72 69 76 61 74 65 20 68 6f 73 74 73 20 74 | y.internal.users/private.hosts.t |
aaf00 | 6f 20 61 63 63 65 73 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 2d 20 74 68 65 20 73 6f 75 72 | o.access.the.Internet.-.the.sour |
aaf20 | 63 65 20 61 64 64 72 65 73 73 20 69 73 20 74 72 61 6e 73 6c 61 74 65 64 20 61 6e 64 20 74 68 75 | ce.address.is.translated.and.thu |
aaf40 | 73 20 6b 65 70 74 20 70 72 69 76 61 74 65 2e 00 3a 61 62 62 72 3a 60 53 4e 41 54 36 34 20 28 49 | s.kept.private..:abbr:`SNAT64.(I |
aaf60 | 50 76 36 2d 74 6f 2d 49 50 76 34 20 53 6f 75 72 63 65 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 | Pv6-to-IPv4.Source.Address.Trans |
aaf80 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 | lation)`.is.a.stateful.translati |
aafa0 | 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 | on.mechanism.that.translates.IPv |
aafc0 | 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 2e 00 3a | 6.addresses.to.IPv4.addresses..: |
aafe0 | 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 | abbr:`SNMP.(Simple.Network.Manag |
ab000 | 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 6e 20 49 6e 74 65 72 6e 65 74 20 | ement.Protocol)`.is.an.Internet. |
ab020 | 53 74 61 6e 64 61 72 64 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 63 6f 6c 6c 65 63 74 69 6e 67 | Standard.protocol.for.collecting |
ab040 | 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | .and.organizing.information.abou |
ab060 | 74 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 6f 6e 20 49 50 20 6e 65 74 77 6f 72 6b 73 | t.managed.devices.on.IP.networks |
ab080 | 20 61 6e 64 20 66 6f 72 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 | .and.for.modifying.that.informat |
ab0a0 | 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 64 65 76 69 63 65 20 62 65 68 61 76 69 6f 72 2e 20 44 | ion.to.change.device.behavior..D |
ab0c0 | 65 76 69 63 65 73 20 74 68 61 74 20 74 79 70 69 63 61 6c 6c 79 20 73 75 70 70 6f 72 74 20 53 4e | evices.that.typically.support.SN |
ab0e0 | 4d 50 20 69 6e 63 6c 75 64 65 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c 20 72 6f 75 74 65 72 73 | MP.include.cable.modems,.routers |
ab100 | 2c 20 73 77 69 74 63 68 65 73 2c 20 73 65 72 76 65 72 73 2c 20 77 6f 72 6b 73 74 61 74 69 6f 6e | ,.switches,.servers,.workstation |
ab120 | 73 2c 20 70 72 69 6e 74 65 72 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 00 3a 61 62 62 72 3a 60 53 4e | s,.printers,.and.more..:abbr:`SN |
ab140 | 50 54 76 36 20 28 53 6f 75 72 63 65 20 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 | PTv6.(Source.IPv6-to-IPv6.Networ |
ab160 | 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 54 68 65 20 63 6f 6e 76 65 | k.Prefix.Translation)`.The.conve |
ab180 | 72 73 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6d 61 69 6e 6c 79 20 75 73 65 64 20 69 6e | rsion.function.is.mainly.used.in |
ab1a0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 63 65 6e 61 72 69 6f 73 3a 00 3a 61 62 62 72 3a | .the.following.scenarios:.:abbr: |
ab1c0 | 60 53 53 48 20 28 53 65 63 75 72 65 20 53 68 65 6c 6c 29 60 20 69 73 20 61 20 63 72 79 70 74 6f | `SSH.(Secure.Shell)`.is.a.crypto |
ab1e0 | 67 72 61 70 68 69 63 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6f 70 65 | graphic.network.protocol.for.ope |
ab200 | 72 61 74 69 6e 67 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 69 63 65 73 20 73 65 63 75 72 65 6c 79 | rating.network.services.securely |
ab220 | 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 | .over.an.unsecured.network..The. |
ab240 | 73 74 61 6e 64 61 72 64 20 54 43 50 20 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 73 20 32 32 2e | standard.TCP.port.for.SSH.is.22. |
ab260 | 20 54 68 65 20 62 65 73 74 20 6b 6e 6f 77 6e 20 65 78 61 6d 70 6c 65 20 61 70 70 6c 69 63 61 74 | .The.best.known.example.applicat |
ab280 | 69 6f 6e 20 69 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 6c 6f 67 69 6e 20 74 6f 20 63 6f 6d 70 75 | ion.is.for.remote.login.to.compu |
ab2a0 | 74 65 72 20 73 79 73 74 65 6d 73 20 62 79 20 75 73 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 | ter.systems.by.users..:abbr:`SST |
ab2c0 | 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f | P.(Secure.Socket.Tunneling.Proto |
ab2e0 | 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 | col)`.is.a.form.of.:abbr:`VPN.(V |
ab300 | 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 | irtual.Private.Network)`.tunnel. |
ab320 | 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 | that.provides.a.mechanism.to.tra |
ab340 | 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 | nsport.PPP.traffic.through.an.SS |
ab360 | 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 | L/TLS.channel..SSL/TLS.provides. |
ab380 | 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 | transport-level.security.with.ke |
ab3a0 | 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 | y.negotiation,.encryption.and.tr |
ab3c0 | 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 | affic.integrity.checking..The.us |
ab3e0 | 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 61 | e.of.SSL/TLS.over.TCP.port.443.a |
ab400 | 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 | llows.SSTP.to.pass.through.virtu |
ab420 | 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 | ally.all.firewalls.and.proxy.ser |
ab440 | 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 | vers.except.for.authenticated.we |
ab460 | 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 | b.proxies..:abbr:`SSTP.(Secure.S |
ab480 | 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 | ocket.Tunneling.Protocol)`.is.a. |
ab4a0 | 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 54 50 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 | form.of.:abbr:`VTP.(Virtual.Priv |
ab4c0 | 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 | ate.Network)`.tunnel.that.provid |
ab4e0 | 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 | es.a.mechanism.to.transport.PPP. |
ab500 | 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e | traffic.through.an.SSL/TLS.chann |
ab520 | 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c | el..SSL/TLS.provides.transport-l |
ab540 | 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 | evel.security.with.key.negotiati |
ab560 | 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 | on,.encryption.and.traffic.integ |
ab580 | 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c | rity.checking..The.use.of.SSL/TL |
ab5a0 | 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 28 62 79 20 64 65 66 61 75 6c 74 2c | S.over.TCP.port.443.(by.default, |
ab5c0 | 20 70 6f 72 74 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 29 20 61 6c 6c 6f 77 73 20 53 53 54 | .port.can.be.changed).allows.SST |
ab5e0 | 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 | P.to.pass.through.virtually.all. |
ab600 | 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 | firewalls.and.proxy.servers.exce |
ab620 | 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 | pt.for.authenticated.web.proxies |
ab640 | 2e 00 3a 61 62 62 72 3a 60 53 54 50 20 28 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 | ..:abbr:`STP.(Spanning.Tree.Prot |
ab660 | 6f 63 6f 6c 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 | ocol)`.is.a.network.protocol.tha |
ab680 | 74 20 62 75 69 6c 64 73 20 61 20 6c 6f 6f 70 2d 66 72 65 65 20 6c 6f 67 69 63 61 6c 20 74 6f 70 | t.builds.a.loop-free.logical.top |
ab6a0 | 6f 6c 6f 67 79 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 | ology.for.Ethernet.networks..The |
ab6c0 | 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 53 54 50 20 69 73 20 74 6f 20 70 72 65 | .basic.function.of.STP.is.to.pre |
ab6e0 | 76 65 6e 74 20 62 72 69 64 67 65 20 6c 6f 6f 70 73 20 61 6e 64 20 74 68 65 20 62 72 6f 61 64 63 | vent.bridge.loops.and.the.broadc |
ab700 | 61 73 74 20 72 61 64 69 61 74 69 6f 6e 20 74 68 61 74 20 72 65 73 75 6c 74 73 20 66 72 6f 6d 20 | ast.radiation.that.results.from. |
ab720 | 74 68 65 6d 2e 20 53 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 61 6c 73 6f 20 61 6c 6c 6f 77 73 20 | them..Spanning.tree.also.allows. |
ab740 | 61 20 6e 65 74 77 6f 72 6b 20 64 65 73 69 67 6e 20 74 6f 20 69 6e 63 6c 75 64 65 20 62 61 63 6b | a.network.design.to.include.back |
ab760 | 75 70 20 6c 69 6e 6b 73 20 70 72 6f 76 69 64 69 6e 67 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e | up.links.providing.fault.toleran |
ab780 | 63 65 20 69 66 20 61 6e 20 61 63 74 69 76 65 20 6c 69 6e 6b 20 66 61 69 6c 73 2e 00 3a 61 62 62 | ce.if.an.active.link.fails..:abb |
ab7a0 | 72 3a 60 54 46 54 50 20 28 54 72 69 76 69 61 6c 20 46 69 6c 65 20 54 72 61 6e 73 66 65 72 20 50 | r:`TFTP.(Trivial.File.Transfer.P |
ab7c0 | 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 73 69 6d 70 6c 65 2c 20 6c 6f 63 6b 73 74 65 70 20 | rotocol)`.is.a.simple,.lockstep. |
ab7e0 | 66 69 6c 65 20 74 72 61 6e 73 66 65 72 20 70 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c | file.transfer.protocol.which.all |
ab800 | 6f 77 73 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 20 66 69 6c 65 20 66 72 6f 6d 20 | ows.a.client.to.get.a.file.from. |
ab820 | 6f 72 20 70 75 74 20 61 20 66 69 6c 65 20 6f 6e 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 | or.put.a.file.onto.a.remote.host |
ab840 | 2e 20 4f 6e 65 20 6f 66 20 69 74 73 20 70 72 69 6d 61 72 79 20 75 73 65 73 20 69 73 20 69 6e 20 | ..One.of.its.primary.uses.is.in. |
ab860 | 74 68 65 20 65 61 72 6c 79 20 73 74 61 67 65 73 20 6f 66 20 6e 6f 64 65 73 20 62 6f 6f 74 69 6e | the.early.stages.of.nodes.bootin |
ab880 | 67 20 66 72 6f 6d 20 61 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2e 20 54 46 54 | g.from.a.local.area.network..TFT |
ab8a0 | 50 20 68 61 73 20 62 65 65 6e 20 75 73 65 64 20 66 6f 72 20 74 68 69 73 20 61 70 70 6c 69 63 61 | P.has.been.used.for.this.applica |
ab8c0 | 74 69 6f 6e 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 20 74 | tion.because.it.is.very.simple.t |
ab8e0 | 6f 20 69 6d 70 6c 65 6d 65 6e 74 2e 00 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 69 72 74 75 61 6c | o.implement..:abbr:`VNI.(Virtual |
ab900 | 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 69 73 20 61 6e 20 69 64 65 6e | .Network.Identifier)`.is.an.iden |
ab920 | 74 69 66 69 65 72 20 66 6f 72 20 61 20 75 6e 69 71 75 65 20 65 6c 65 6d 65 6e 74 20 6f 66 20 61 | tifier.for.a.unique.element.of.a |
ab940 | 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 20 49 6e 20 6d 61 6e 79 20 73 69 74 75 61 | .virtual.network...In.many.situa |
ab960 | 74 69 6f 6e 73 20 74 68 69 73 20 6d 61 79 20 72 65 70 72 65 73 65 6e 74 20 61 6e 20 4c 32 20 73 | tions.this.may.represent.an.L2.s |
ab980 | 65 67 6d 65 6e 74 2c 20 68 6f 77 65 76 65 72 2c 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 | egment,.however,.the.control.pla |
ab9a0 | 6e 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 73 65 6d 61 6e 74 | ne.defines.the.forwarding.semant |
ab9c0 | 69 63 73 20 6f 66 20 64 65 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 | ics.of.decapsulated.packets..The |
ab9e0 | 20 56 4e 49 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 70 61 72 74 20 6f 66 20 45 43 4d 50 | .VNI.MAY.be.used.as.part.of.ECMP |
aba00 | 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 20 6f 72 20 4d 41 59 20 62 65 20 | .forwarding.decisions.or.MAY.be. |
aba20 | 75 73 65 64 20 61 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 64 69 73 74 69 6e 67 75 69 | used.as.a.mechanism.to.distingui |
aba40 | 73 68 20 62 65 74 77 65 65 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 61 64 64 72 65 73 73 20 73 | sh.between.overlapping.address.s |
aba60 | 70 61 63 65 73 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 | paces.contained.in.the.encapsula |
aba80 | 74 65 64 20 70 61 63 6b 65 74 20 77 68 65 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 | ted.packet.when.load.balancing.a |
abaa0 | 63 72 6f 73 73 20 43 50 55 73 2e 00 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 | cross.CPUs..:abbr:`VRF.(Virtual. |
abac0 | 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 64 65 76 69 63 65 73 | Routing.and.Forwarding)`.devices |
abae0 | 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 69 70 20 72 75 6c 65 73 20 70 72 6f 76 69 64 65 73 | .combined.with.ip.rules.provides |
abb00 | 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 76 69 72 74 75 61 6c 20 72 | .the.ability.to.create.virtual.r |
abb20 | 6f 75 74 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 64 6f 6d 61 69 6e 73 20 28 61 | outing.and.forwarding.domains.(a |
abb40 | 6b 61 20 56 52 46 73 2c 20 56 52 46 2d 6c 69 74 65 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 63 | ka.VRFs,.VRF-lite.to.be.specific |
abb60 | 29 20 69 6e 20 74 68 65 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 2e 20 4f 6e | ).in.the.Linux.network.stack..On |
abb80 | 65 20 75 73 65 20 63 61 73 65 20 69 73 20 74 68 65 20 6d 75 6c 74 69 2d 74 65 6e 61 6e 63 79 20 | e.use.case.is.the.multi-tenancy. |
abba0 | 70 72 6f 62 6c 65 6d 20 77 68 65 72 65 20 65 61 63 68 20 74 65 6e 61 6e 74 20 68 61 73 20 74 68 | problem.where.each.tenant.has.th |
abbc0 | 65 69 72 20 6f 77 6e 20 75 6e 69 71 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e | eir.own.unique.routing.tables.an |
abbe0 | 64 20 69 6e 20 74 68 65 20 76 65 72 79 20 6c 65 61 73 74 20 6e 65 65 64 20 64 69 66 66 65 72 65 | d.in.the.very.least.need.differe |
abc00 | 6e 74 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 73 2e 00 3a 61 62 62 72 3a 60 56 58 4c 41 | nt.default.gateways..:abbr:`VXLA |
abc20 | 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 20 69 73 20 61 | N.(Virtual.Extensible.LAN)`.is.a |
abc40 | 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f | .network.virtualization.technolo |
abc60 | 67 79 20 74 68 61 74 20 61 74 74 65 6d 70 74 73 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 | gy.that.attempts.to.address.the. |
abc80 | 73 63 61 6c 61 62 69 6c 69 74 79 20 70 72 6f 62 6c 65 6d 73 20 61 73 73 6f 63 69 61 74 65 64 20 | scalability.problems.associated. |
abca0 | 77 69 74 68 20 6c 61 72 67 65 20 63 6c 6f 75 64 20 63 6f 6d 70 75 74 69 6e 67 20 64 65 70 6c 6f | with.large.cloud.computing.deplo |
abcc0 | 79 6d 65 6e 74 73 2e 20 49 74 20 75 73 65 73 20 61 20 56 4c 41 4e 2d 6c 69 6b 65 20 65 6e 63 61 | yments..It.uses.a.VLAN-like.enca |
abce0 | 70 73 75 6c 61 74 69 6f 6e 20 74 65 63 68 6e 69 71 75 65 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 | psulation.technique.to.encapsula |
abd00 | 74 65 20 4f 53 49 20 6c 61 79 65 72 20 32 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 77 | te.OSI.layer.2.Ethernet.frames.w |
abd20 | 69 74 68 69 6e 20 6c 61 79 65 72 20 34 20 55 44 50 20 64 61 74 61 67 72 61 6d 73 2c 20 75 73 69 | ithin.layer.4.UDP.datagrams,.usi |
abd40 | 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 | ng.4789.as.the.default.IANA-assi |
abd60 | 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 | gned.destination.UDP.port.number |
abd80 | 2e 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 73 2c 20 77 68 69 63 68 20 74 65 72 6d 69 6e 61 | ..VXLAN.endpoints,.which.termina |
abda0 | 74 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 6d 61 79 20 62 65 20 65 69 74 68 | te.VXLAN.tunnels.and.may.be.eith |
abdc0 | 65 72 20 76 69 72 74 75 61 6c 20 6f 72 20 70 68 79 73 69 63 61 6c 20 73 77 69 74 63 68 20 70 6f | er.virtual.or.physical.switch.po |
abde0 | 72 74 73 2c 20 61 72 65 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 72 3a 60 56 54 45 50 73 20 28 | rts,.are.known.as.:abbr:`VTEPs.( |
abe00 | 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 29 60 2e 00 3a 61 62 62 72 3a | VXLAN.tunnel.endpoints)`..:abbr: |
abe20 | 60 57 41 50 20 28 57 69 72 65 6c 65 73 73 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 29 60 20 70 72 | `WAP.(Wireless.Access-Point)`.pr |
abe40 | 6f 76 69 64 65 73 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 20 74 6f 20 63 6f 6e 6e 65 63 74 | ovides.network.access.to.connect |
abe60 | 69 6e 67 20 73 74 61 74 69 6f 6e 73 20 69 66 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 68 61 72 | ing.stations.if.the.physical.har |
abe80 | 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 61 63 74 69 6e 67 20 61 73 20 61 20 57 41 50 00 3a | dware.supports.acting.as.a.WAP.: |
abea0 | 61 62 62 72 3a 60 57 4c 41 4e 20 28 57 69 72 65 6c 65 73 73 20 4c 41 4e 29 60 20 69 6e 74 65 72 | abbr:`WLAN.(Wireless.LAN)`.inter |
abec0 | 66 61 63 65 20 70 72 6f 76 69 64 65 20 38 30 32 2e 31 31 20 28 61 2f 62 2f 67 2f 6e 2f 61 63 29 | face.provide.802.11.(a/b/g/n/ac) |
abee0 | 20 77 69 72 65 6c 65 73 73 20 73 75 70 70 6f 72 74 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 | .wireless.support.(commonly.refe |
abf00 | 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 29 20 62 79 20 6d 65 61 6e 73 20 6f 66 20 63 6f | rred.to.as.Wi-Fi).by.means.of.co |
abf20 | 6d 70 61 74 69 62 6c 65 20 68 61 72 64 77 61 72 65 2e 20 49 66 20 79 6f 75 72 20 68 61 72 64 77 | mpatible.hardware..If.your.hardw |
abf40 | 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2c 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d | are.supports.it,.VyOS.supports.m |
abf60 | 75 6c 74 69 70 6c 65 20 6c 6f 67 69 63 61 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 | ultiple.logical.wireless.interfa |
abf80 | 63 65 73 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 2e 00 3a 61 62 62 72 3a 60 | ces.per.physical.device..:abbr:` |
abfa0 | 57 50 41 20 28 57 69 2d 46 69 20 50 72 6f 74 65 63 74 65 64 20 41 63 63 65 73 73 29 60 20 61 6e | WPA.(Wi-Fi.Protected.Access)`.an |
abfc0 | 64 20 57 50 41 32 20 45 6e 74 65 72 70 72 69 73 65 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e | d.WPA2.Enterprise.in.combination |
abfe0 | 20 77 69 74 68 20 38 30 32 2e 31 78 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | .with.802.1x.based.authenticatio |
ac000 | 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 | n.can.be.used.to.authenticate.us |
ac020 | 65 72 73 20 6f 72 20 63 6f 6d 70 75 74 65 72 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e 2e 00 3a 61 | ers.or.computers.in.a.domain..:a |
ac040 | 62 62 72 3a 60 6d 47 52 45 20 28 4d 75 6c 74 69 70 6f 69 6e 74 20 47 65 6e 65 72 69 63 20 52 6f | bbr:`mGRE.(Multipoint.Generic.Ro |
ac060 | 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 3a 72 66 63 3a 60 31 37 30 32 | uting.Encapsulation)`.:rfc:`1702 |
ac080 | 60 00 3a 63 66 67 63 6d 64 3a 60 61 64 76 2d 72 6f 75 74 65 72 20 3c 41 2e 42 2e 43 2e 44 3e 60 | `.:cfgcmd:`adv-router.<A.B.C.D>` |
ac0a0 | 20 e2 80 93 20 72 6f 75 74 65 72 20 69 64 2c 20 77 68 69 63 68 20 6c 69 6e 6b 20 61 64 76 65 72 | .....router.id,.which.link.adver |
ac0c0 | 74 69 73 65 6d 65 6e 74 73 20 6e 65 65 64 20 74 6f 20 62 65 20 72 65 76 69 65 77 65 64 2e 00 3a | tisements.need.to.be.reviewed..: |
ac0e0 | 63 66 67 63 6d 64 3a 60 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 60 20 64 69 73 70 6c 61 79 73 | cfgcmd:`self-originate`.displays |
ac100 | 20 6f 6e 6c 79 20 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 64 20 4c 53 41 73 20 66 72 6f 6d 20 | .only.self-originated.LSAs.from. |
ac120 | 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 00 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 | the.local.router..:cfgcmd:`set.s |
ac140 | 65 72 76 69 63 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 69 6e 74 65 72 66 61 63 65 20 | ervice.conntrack-sync.interface. |
ac160 | 65 74 68 30 20 70 65 65 72 20 31 39 32 2e 31 36 38 2e 30 2e 32 35 30 60 00 3a 63 6f 64 65 3a 60 | eth0.peer.192.168.0.250`.:code:` |
ac180 | 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 | set.service.webproxy.url-filteri |
ac1a0 | 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 61 75 74 6f 2d 75 70 64 61 74 65 20 75 70 64 61 74 65 | ng.squidguard.auto-update.update |
ac1c0 | 2d 68 6f 75 72 20 32 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 | -hour.23`.:code:`set.service.web |
ac1e0 | 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 | proxy.url-filtering.squidguard.b |
ac200 | 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 61 64 73 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 | lock-category.ads`.:code:`set.se |
ac220 | 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 | rvice.webproxy.url-filtering.squ |
ac240 | 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 6d 61 6c 77 61 72 65 60 00 | idguard.block-category.malware`. |
ac260 | 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 | :code:`set.service.webproxy.whit |
ac280 | 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e | elist.destination-address.192.0. |
ac2a0 | 32 2e 30 2f 32 34 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 | 2.0/24`.:code:`set.service.webpr |
ac2c0 | 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 | oxy.whitelist.destination-addres |
ac2e0 | 73 20 31 39 38 2e 35 31 2e 31 30 30 2e 33 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 | s.198.51.100.33`.:code:`set.serv |
ac300 | 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d 61 64 | ice.webproxy.whitelist.source-ad |
ac320 | 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 32 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 | dress.192.168.1.2`.:code:`set.se |
ac340 | 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d | rvice.webproxy.whitelist.source- |
ac360 | 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 60 00 3a 6c 61 73 74 70 72 6f | address.192.168.2.0/24`.:lastpro |
ac380 | 6f 66 72 65 61 64 3a 32 30 32 31 2d 30 37 2d 31 32 00 3a 6f 70 63 6d 64 3a 60 67 65 6e 65 72 61 | ofread:2021-07-12.:opcmd:`genera |
ac3a0 | 74 65 20 70 6b 69 20 77 69 72 65 67 75 61 72 64 20 6b 65 79 2d 70 61 69 72 60 2e 00 3a 72 65 66 | te.pki.wireguard.key-pair`..:ref |
ac3c0 | 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 | :`routing-bgp`.:ref:`routing-bgp |
ac3e0 | 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f | `:.``set.vrf.name.<name>.protoco |
ac400 | 6c 73 20 62 67 70 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 | ls.bgp....``.:ref:`routing-isis` |
ac420 | 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 3a 20 60 60 73 65 74 20 76 72 66 20 | .:ref:`routing-isis`:.``set.vrf. |
ac440 | 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 69 73 20 2e 2e 2e 60 60 | name.<name>.protocols.isis....`` |
ac460 | 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 | .:ref:`routing-ospf`.:ref:`routi |
ac480 | 6e 67 2d 6f 73 70 66 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 | ng-ospf`:.``set.vrf.name.<name>. |
ac4a0 | 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 | protocols.ospf....``.:ref:`routi |
ac4c0 | 6e 67 2d 6f 73 70 66 76 33 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 | ng-ospfv3`.:ref:`routing-ospfv3` |
ac4e0 | 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c | :.``set.vrf.name.<name>.protocol |
ac500 | 73 20 6f 73 70 66 76 33 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 | s.ospfv3....``.:ref:`routing-sta |
ac520 | 74 69 63 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 3a 20 60 60 73 65 | tic`.:ref:`routing-static`:.``se |
ac540 | 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 74 61 74 | t.vrf.name.<name>.protocols.stat |
ac560 | 69 63 20 2e 2e 2e 60 60 00 3a 72 66 63 3a 60 32 31 33 31 60 20 73 74 61 74 65 73 3a 20 54 68 65 | ic....``.:rfc:`2131`.states:.The |
ac580 | 20 63 6c 69 65 6e 74 20 4d 41 59 20 63 68 6f 6f 73 65 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 | .client.MAY.choose.to.explicitly |
ac5a0 | 20 70 72 6f 76 69 64 65 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 | .provide.the.identifier.through. |
ac5c0 | 74 68 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 6f 70 74 69 6f 6e 2e 20 | the.'client.identifier'.option.. |
ac5e0 | 49 66 20 74 68 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6c 69 65 73 20 61 20 27 63 6c 69 65 6e 74 | If.the.client.supplies.a.'client |
ac600 | 20 69 64 65 6e 74 69 66 69 65 72 27 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 4d 55 53 54 20 75 73 | .identifier',.the.client.MUST.us |
ac620 | 65 20 74 68 65 20 73 61 6d 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 69 | e.the.same.'client.identifier'.i |
ac640 | 6e 20 61 6c 6c 20 73 75 62 73 65 71 75 65 6e 74 20 6d 65 73 73 61 67 65 73 2c 20 61 6e 64 20 74 | n.all.subsequent.messages,.and.t |
ac660 | 68 65 20 73 65 72 76 65 72 20 4d 55 53 54 20 75 73 65 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 | he.server.MUST.use.that.identifi |
ac680 | 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 3a 72 66 63 3a | er.to.identify.the.client..:rfc: |
ac6a0 | 60 32 31 33 36 60 20 42 61 73 65 64 00 3a 72 66 63 3a 60 32 33 32 38 60 2c 20 74 68 65 20 73 75 | `2136`.Based.:rfc:`2328`,.the.su |
ac6c0 | 63 63 65 73 73 6f 72 20 74 6f 20 3a 72 66 63 3a 60 31 35 38 33 60 2c 20 73 75 67 67 65 73 74 73 | ccessor.to.:rfc:`1583`,.suggests |
ac6e0 | 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 73 65 63 74 69 6f 6e 20 47 2e 32 20 28 63 68 61 6e 67 | .according.to.section.G.2.(chang |
ac700 | 65 73 29 20 69 6e 20 73 65 63 74 69 6f 6e 20 31 36 2e 34 2e 31 20 61 20 63 68 61 6e 67 65 20 74 | es).in.section.16.4.1.a.change.t |
ac720 | 6f 20 74 68 65 20 70 61 74 68 20 70 72 65 66 65 72 65 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 20 | o.the.path.preference.algorithm. |
ac740 | 74 68 61 74 20 70 72 65 76 65 6e 74 73 20 70 6f 73 73 69 62 6c 65 20 72 6f 75 74 69 6e 67 20 6c | that.prevents.possible.routing.l |
ac760 | 6f 6f 70 73 20 74 68 61 74 20 77 65 72 65 20 70 6f 73 73 69 62 6c 65 20 69 6e 20 74 68 65 20 6f | oops.that.were.possible.in.the.o |
ac780 | 6c 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4f 53 50 46 76 32 2e 20 4d 6f 72 65 20 73 70 65 63 69 | ld.version.of.OSPFv2..More.speci |
ac7a0 | 66 69 63 61 6c 6c 79 20 69 74 20 64 65 6d 61 6e 64 73 20 74 68 61 74 20 69 6e 74 65 72 2d 61 72 | fically.it.demands.that.inter-ar |
ac7c0 | 65 61 20 70 61 74 68 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 62 61 63 6b 62 6f 6e 65 | ea.paths.and.intra-area.backbone |
ac7e0 | 20 70 61 74 68 20 61 72 65 20 6e 6f 77 20 6f 66 20 65 71 75 61 6c 20 70 72 65 66 65 72 65 6e 63 | .path.are.now.of.equal.preferenc |
ac800 | 65 20 62 75 74 20 73 74 69 6c 6c 20 62 6f 74 68 20 70 72 65 66 65 72 72 65 64 20 74 6f 20 65 78 | e.but.still.both.preferred.to.ex |
ac820 | 74 65 72 6e 61 6c 20 70 61 74 68 73 2e 00 3a 76 79 74 61 73 6b 3a 60 54 33 36 34 32 60 20 64 65 | ternal.paths..:vytask:`T3642`.de |
ac840 | 73 63 72 69 62 65 73 20 61 20 6e 65 77 20 43 4c 49 20 73 75 62 73 79 73 74 65 6d 20 74 68 61 74 | scribes.a.new.CLI.subsystem.that |
ac860 | 20 73 65 72 76 65 73 20 61 73 20 61 20 22 63 65 72 74 73 74 6f 72 65 22 20 74 6f 20 61 6c 6c 20 | .serves.as.a."certstore".to.all. |
ac880 | 73 65 72 76 69 63 65 73 20 72 65 71 75 69 72 69 6e 67 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 65 | services.requiring.any.kind.of.e |
ac8a0 | 6e 63 72 79 70 74 69 6f 6e 20 6b 65 79 28 73 29 2e 20 49 6e 20 73 68 6f 72 74 2c 20 70 75 62 6c | ncryption.key(s)..In.short,.publ |
ac8c0 | 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 | ic.and.private.certificates.are. |
ac8e0 | 6e 6f 77 20 73 74 6f 72 65 64 20 69 6e 20 50 4b 43 53 23 38 20 66 6f 72 6d 61 74 20 69 6e 20 74 | now.stored.in.PKCS#8.format.in.t |
ac900 | 68 65 20 72 65 67 75 6c 61 72 20 56 79 4f 53 20 43 4c 49 2e 20 4b 65 79 73 20 63 61 6e 20 6e 6f | he.regular.VyOS.CLI..Keys.can.no |
ac920 | 77 20 62 65 20 61 64 64 65 64 2c 20 65 64 69 74 65 64 2c 20 61 6e 64 20 64 65 6c 65 74 65 64 20 | w.be.added,.edited,.and.deleted. |
ac940 | 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 73 65 74 2f 65 64 69 74 2f 64 65 6c 65 74 | using.the.regular.set/edit/delet |
ac960 | 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 2e 00 3c 31 2d 36 35 35 33 35 3e 3a 20 4e 75 6d 62 65 | e.CLI.commands..<1-65535>:.Numbe |
ac980 | 72 65 64 20 70 6f 72 74 2e 00 3c 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 45 78 74 65 6e 64 65 64 20 63 | red.port..<aa:nn:nn>:.Extended.c |
ac9a0 | 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e | ommunity.list.regular.expression |
ac9c0 | 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 49 50 76 36 20 70 72 65 66 | ..<h:h:h:h:h:h:h:h/x>:.IPv6.pref |
ac9e0 | 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c | ix.to.match..<h:h:h:h:h:h:h:h>-< |
aca00 | 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 72 61 6e 67 65 20 74 6f 20 | h:h:h:h:h:h:h:h>:.IPv6.range.to. |
aca20 | 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 61 | match..<h:h:h:h:h:h:h:h>:.IPv6.a |
aca40 | 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 3c 6c 69 6e 65 73 3e 00 3c 6e 75 6d 62 65 72 | ddress.to.match..<lines>.<number |
aca60 | 3e 20 6d 75 73 74 20 62 65 20 66 72 6f 6d 20 33 34 20 2d 20 31 37 33 2e 20 46 6f 72 20 38 30 20 | >.must.be.from.34.-.173..For.80. |
aca80 | 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 69 74 20 73 68 6f 75 6c 64 20 62 65 20 63 68 61 6e 6e 65 | MHz.channels.it.should.be.channe |
acaa0 | 6c 20 2b 20 36 2e 00 3c 6e 75 6d 62 65 72 3e 20 e2 80 93 20 61 72 65 61 20 69 64 65 6e 74 69 66 | l.+.6..<number>.....area.identif |
acac0 | 69 65 72 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b | ier.through.which.a.virtual.link |
acae0 | 20 67 6f 65 73 2e 20 3c 41 2e 42 2e 43 2e 44 3e 20 e2 80 93 20 41 42 52 20 72 6f 75 74 65 72 2d | .goes..<A.B.C.D>.....ABR.router- |
acb00 | 69 64 20 77 69 74 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 | id.with.which.a.virtual.link.is. |
acb20 | 65 73 74 61 62 6c 69 73 68 65 64 2e 20 56 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6d 75 73 74 20 62 | established..Virtual.link.must.b |
acb40 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 2e 00 3c 70 | e.configured.on.both.routers..<p |
acb60 | 6f 72 74 20 6e 61 6d 65 3e 3a 20 4e 61 6d 65 64 20 70 6f 72 74 20 28 61 6e 79 20 6e 61 6d 65 20 | ort.name>:.Named.port.(any.name. |
acb80 | 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2c 20 65 2e 67 2e 2c 20 68 74 74 70 29 2e 00 3c | in./etc/services,.e.g.,.http)..< |
acba0 | 72 74 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 52 6f 75 74 65 20 54 61 72 67 65 74 20 72 65 67 75 6c | rt.aa:nn:nn>:.Route.Target.regul |
acbc0 | 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 6f 6f 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 53 | ar.expression..<soo.aa:nn:nn>:.S |
acbe0 | 69 74 65 20 6f 66 20 4f 72 69 67 69 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e | ite.of.Origin.regular.expression |
acc00 | 2e 00 3c 73 74 61 72 74 3e 2d 3c 65 6e 64 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 20 72 | ..<start>-<end>:.Numbered.port.r |
acc20 | 61 6e 67 65 20 28 65 2e 67 2e 2c 20 31 30 30 31 2d 31 30 30 35 29 2e 00 3c 78 2e 78 2e 78 2e 78 | ange.(e.g.,.1001-1005)..<x.x.x.x |
acc40 | 2f 78 3e 3a 20 53 75 62 6e 65 74 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 2d | /x>:.Subnet.to.match..<x.x.x.x>- |
acc60 | 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 | <x.x.x.x>:.IP.range.to.match..<x |
acc80 | 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 41 20 | .x.x.x>:.IP.address.to.match..A. |
acca0 | 2a 2a 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f | **domain.group**.represents.a.co |
accc0 | 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 64 6f 6d 61 69 6e 73 2e 00 41 20 2a 2a 6d 61 63 20 67 72 6f | llection.of.domains..A.**mac.gro |
acce0 | 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 | up**.represents.a.collection.of. |
acd00 | 6d 61 63 20 61 64 64 72 65 73 73 65 73 2e 00 41 20 2a 2a 70 6f 72 74 20 67 72 6f 75 70 2a 2a 20 | mac.addresses..A.**port.group**. |
acd20 | 72 65 70 72 65 73 65 6e 74 73 20 6f 6e 6c 79 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 6e 6f | represents.only.port.numbers,.no |
acd40 | 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 50 6f 72 74 20 67 72 6f 75 70 73 20 63 61 6e 20 | t.the.protocol..Port.groups.can. |
acd60 | 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 | be.referenced.for.either.TCP.or. |
acd80 | 55 44 50 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 54 43 50 20 | UDP..It.is.recommended.that.TCP. |
acda0 | 61 6e 64 20 55 44 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 73 65 70 61 72 | and.UDP.groups.are.created.separ |
acdc0 | 61 74 65 6c 79 20 74 6f 20 61 76 6f 69 64 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 66 69 6c 74 | ately.to.avoid.accidentally.filt |
acde0 | 65 72 69 6e 67 20 75 6e 6e 65 63 65 73 73 61 72 79 20 70 6f 72 74 73 2e 20 52 61 6e 67 65 73 20 | ering.unnecessary.ports..Ranges. |
ace00 | 6f 66 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 | of.ports.can.be.specified.by.usi |
ace20 | 6e 67 20 60 2d 60 2e 00 41 20 2a 62 69 74 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 2a 2a | ng.`-`..A.*bit*.is.written.as.** |
ace40 | 62 69 74 2a 2a 2c 00 41 20 3a 61 62 62 72 3a 60 4e 49 53 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 | bit**,.A.:abbr:`NIS.(Network.Inf |
ace60 | 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 29 60 20 64 6f 6d 61 69 6e 20 63 61 6e 20 62 65 | ormation.Service)`.domain.can.be |
ace80 | 20 73 65 74 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e | .set.to.be.used.for.DHCPv6.clien |
acea0 | 74 73 2e 00 41 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 64 69 76 69 64 65 73 20 | ts..A.BGP.confederation.divides. |
acec0 | 6f 75 72 20 41 53 20 69 6e 74 6f 20 73 75 62 2d 41 53 65 73 20 74 6f 20 72 65 64 75 63 65 20 74 | our.AS.into.sub-ASes.to.reduce.t |
acee0 | 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 71 75 69 72 65 64 20 49 42 47 50 20 70 65 65 72 69 | he.number.of.required.IBGP.peeri |
acf00 | 6e 67 73 2e 20 57 69 74 68 69 6e 20 61 20 73 75 62 2d 41 53 20 77 65 20 73 74 69 6c 6c 20 72 65 | ngs..Within.a.sub-AS.we.still.re |
acf20 | 71 75 69 72 65 20 66 75 6c 6c 2d 6d 65 73 68 20 49 42 47 50 20 62 75 74 20 62 65 74 77 65 65 6e | quire.full-mesh.IBGP.but.between |
acf40 | 20 74 68 65 73 65 20 73 75 62 2d 41 53 65 73 20 77 65 20 75 73 65 20 73 6f 6d 65 74 68 69 6e 67 | .these.sub-ASes.we.use.something |
acf60 | 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 45 42 47 50 20 62 75 74 20 62 65 68 61 76 65 | .that.looks.like.EBGP.but.behave |
acf80 | 73 20 6c 69 6b 65 20 49 42 47 50 20 28 63 61 6c 6c 65 64 20 63 6f 6e 66 65 64 65 72 61 74 69 6f | s.like.IBGP.(called.confederatio |
acfa0 | 6e 20 42 47 50 29 2e 20 43 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 | n.BGP)..Confederation.mechanism. |
acfc0 | 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 30 36 35 60 00 41 20 42 47 | is.described.in.:rfc:`5065`.A.BG |
acfe0 | 50 2d 73 70 65 61 6b 69 6e 67 20 72 6f 75 74 65 72 20 6c 69 6b 65 20 56 79 4f 53 20 63 61 6e 20 | P-speaking.router.like.VyOS.can. |
ad000 | 72 65 74 72 69 65 76 65 20 52 4f 41 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 52 50 | retrieve.ROA.information.from.RP |
ad020 | 4b 49 20 22 52 65 6c 79 69 6e 67 20 50 61 72 74 79 20 73 6f 66 74 77 61 72 65 22 20 28 6f 66 74 | KI."Relying.Party.software".(oft |
ad040 | 65 6e 20 6a 75 73 74 20 63 61 6c 6c 65 64 20 61 6e 20 22 52 50 4b 49 20 73 65 72 76 65 72 22 20 | en.just.called.an."RPKI.server". |
ad060 | 6f 72 20 22 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 22 29 20 62 79 20 75 73 69 6e 67 20 3a 61 | or."RPKI.validator").by.using.:a |
ad080 | 62 62 72 3a 60 52 54 52 20 28 52 50 4b 49 20 74 6f 20 52 6f 75 74 65 72 29 60 20 70 72 6f 74 6f | bbr:`RTR.(RPKI.to.Router)`.proto |
ad0a0 | 63 6f 6c 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 6f 70 65 6e 20 73 6f 75 72 | col..There.are.several.open.sour |
ad0c0 | 63 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 74 6f 20 63 68 6f 6f 73 65 20 66 72 6f | ce.implementations.to.choose.fro |
ad0e0 | 6d 2c 20 73 75 63 68 20 61 73 20 4e 4c 4e 65 74 4c 61 62 73 27 20 52 6f 75 74 69 6e 61 74 6f 72 | m,.such.as.NLNetLabs'.Routinator |
ad100 | 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 52 75 73 74 29 2c 20 43 6c 6f 75 64 66 6c 61 72 65 27 | _.(written.in.Rust),.Cloudflare' |
ad120 | 73 20 47 6f 52 54 52 5f 20 61 6e 64 20 4f 63 74 6f 52 50 4b 49 5f 20 28 77 72 69 74 74 65 6e 20 | s.GoRTR_.and.OctoRPKI_.(written. |
ad140 | 69 6e 20 47 6f 29 2c 20 61 6e 64 20 52 49 50 45 20 4e 43 43 27 73 20 52 50 4b 49 20 56 61 6c 69 | in.Go),.and.RIPE.NCC's.RPKI.Vali |
ad160 | 64 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 4a 61 76 61 29 2e 20 54 68 65 20 52 54 | dator_.(written.in.Java)..The.RT |
ad180 | 52 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a | R.protocol.is.described.in.:rfc: |
ad1a0 | 60 38 32 31 30 60 2e 00 41 20 42 72 69 64 67 65 20 69 73 20 61 20 77 61 79 20 74 6f 20 63 6f 6e | `8210`..A.Bridge.is.a.way.to.con |
ad1c0 | 6e 65 63 74 20 74 77 6f 20 45 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 73 20 74 6f 67 65 74 | nect.two.Ethernet.segments.toget |
ad1e0 | 68 65 72 20 69 6e 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 77 61 | her.in.a.protocol.independent.wa |
ad200 | 79 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 62 61 73 65 64 20 6f | y..Packets.are.forwarded.based.o |
ad220 | 6e 20 45 74 68 65 72 6e 65 74 20 61 64 64 72 65 73 73 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 | n.Ethernet.address,.rather.than. |
ad240 | 49 50 20 61 64 64 72 65 73 73 20 28 6c 69 6b 65 20 61 20 72 6f 75 74 65 72 29 2e 20 53 69 6e 63 | IP.address.(like.a.router)..Sinc |
ad260 | 65 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 64 6f 6e 65 20 61 74 20 4c 61 79 65 72 20 32 2c | e.forwarding.is.done.at.Layer.2, |
ad280 | 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 67 6f 20 74 72 61 6e 73 70 61 72 65 6e | .all.protocols.can.go.transparen |
ad2a0 | 74 6c 79 20 74 68 72 6f 75 67 68 20 61 20 62 72 69 64 67 65 2e 20 54 68 65 20 4c 69 6e 75 78 20 | tly.through.a.bridge..The.Linux. |
ad2c0 | 62 72 69 64 67 65 20 63 6f 64 65 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 20 73 75 62 73 65 74 20 | bridge.code.implements.a.subset. |
ad2e0 | 6f 66 20 74 68 65 20 41 4e 53 49 2f 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 | of.the.ANSI/IEEE.802.1d.standard |
ad300 | 2e 00 41 20 47 52 45 20 74 75 6e 6e 65 6c 20 6f 70 65 72 61 74 65 73 20 61 74 20 6c 61 79 65 72 | ..A.GRE.tunnel.operates.at.layer |
ad320 | 20 33 20 6f 66 20 74 68 65 20 4f 53 49 20 6d 6f 64 65 6c 20 61 6e 64 20 69 73 20 72 65 70 72 65 | .3.of.the.OSI.model.and.is.repre |
ad340 | 73 65 6e 74 65 64 20 62 79 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 2e 20 54 68 65 20 6d 61 | sented.by.IP.protocol.47..The.ma |
ad360 | 69 6e 20 62 65 6e 65 66 69 74 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 20 69 73 20 74 68 | in.benefit.of.a.GRE.tunnel.is.th |
ad380 | 61 74 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 61 72 72 79 20 6d 75 6c 74 69 70 6c | at.you.are.able.to.carry.multipl |
ad3a0 | 65 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 74 75 6e 6e | e.protocols.inside.the.same.tunn |
ad3c0 | 65 6c 2e 20 47 52 45 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 63 61 73 74 20 | el..GRE.also.supports.multicast. |
ad3e0 | 74 72 61 66 66 69 63 20 61 6e 64 20 73 75 70 70 6f 72 74 73 20 72 6f 75 74 69 6e 67 20 70 72 6f | traffic.and.supports.routing.pro |
ad400 | 74 6f 63 6f 6c 73 20 74 68 61 74 20 6c 65 76 65 72 61 67 65 20 6d 75 6c 74 69 63 61 73 74 20 74 | tocols.that.leverage.multicast.t |
ad420 | 6f 20 66 6f 72 6d 20 6e 65 69 67 68 62 6f 72 20 61 64 6a 61 63 65 6e 63 69 65 73 2e 00 41 20 52 | o.form.neighbor.adjacencies..A.R |
ad440 | 75 6c 65 2d 53 65 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 76 65 72 79 20 | ule-Set.can.be.applied.to.every. |
ad460 | 69 6e 74 65 72 66 61 63 65 3a 00 41 20 53 4e 54 50 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 | interface:.A.SNTP.server.address |
ad480 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 | .can.be.specified.for.DHCPv6.cli |
ad4a0 | 65 6e 74 73 2e 00 41 20 56 52 46 20 64 65 76 69 63 65 20 69 73 20 63 72 65 61 74 65 64 20 77 69 | ents..A.VRF.device.is.created.wi |
ad4c0 | 74 68 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 72 6f 75 74 65 20 74 61 62 6c 65 2e 20 4e 65 | th.an.associated.route.table..Ne |
ad4e0 | 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 6e 20 65 6e 73 6c 61 76 | twork.interfaces.are.then.enslav |
ad500 | 65 64 20 74 6f 20 61 20 56 52 46 20 64 65 76 69 63 65 2e 00 41 20 56 79 4f 53 20 47 52 45 20 74 | ed.to.a.VRF.device..A.VyOS.GRE.t |
ad520 | 75 6e 6e 65 6c 20 63 61 6e 20 63 61 72 72 79 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 | unnel.can.carry.both.IPv4.and.IP |
ad540 | 76 36 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 63 72 65 61 74 | v6.traffic.and.can.also.be.creat |
ad560 | 65 64 20 6f 76 65 72 20 65 69 74 68 65 72 20 49 50 76 34 20 28 67 72 65 29 20 6f 72 20 49 50 76 | ed.over.either.IPv4.(gre).or.IPv |
ad580 | 36 20 28 69 70 36 67 72 65 29 2e 00 41 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 | 6.(ip6gre)..A.VyOS.router.with.t |
ad5a0 | 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 2d 20 65 74 68 30 20 28 57 41 4e 29 20 61 6e 64 20 65 | wo.interfaces.-.eth0.(WAN).and.e |
ad5c0 | 74 68 31 20 28 4c 41 4e 29 20 2d 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 69 6d 70 6c 65 | th1.(LAN).-.is.required.to.imple |
ad5e0 | 6d 65 6e 74 20 61 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 44 4e 53 20 63 6f 6e 66 69 67 75 | ment.a.split-horizon.DNS.configu |
ad600 | 72 61 74 69 6f 6e 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 2e 00 41 20 62 61 73 69 63 20 | ration.for.example.com..A.basic. |
ad620 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 20 74 75 6e 6e 65 6c 20 | configuration.requires.a.tunnel. |
ad640 | 73 6f 75 72 63 65 20 28 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 29 2c 20 61 20 74 75 6e 6e 65 | source.(source-address),.a.tunne |
ad660 | 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 72 65 6d 6f 74 65 29 2c 20 61 6e 20 65 6e 63 61 70 | l.destination.(remote),.an.encap |
ad680 | 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 28 67 72 65 29 2c 20 61 6e 64 20 61 6e 20 61 64 64 72 | sulation.type.(gre),.and.an.addr |
ad6a0 | 65 73 73 20 28 69 70 76 34 2f 69 70 76 36 29 2e 20 42 65 6c 6f 77 20 69 73 20 61 20 62 61 73 69 | ess.(ipv4/ipv6)..Below.is.a.basi |
ad6c0 | 63 20 49 50 76 34 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c | c.IPv4.only.configuration.exampl |
ad6e0 | 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 20 61 | e.taken.from.a.VyOS.router.and.a |
ad700 | 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6d 61 69 6e 20 64 69 66 66 | .Cisco.IOS.router..The.main.diff |
ad720 | 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 74 77 6f 20 63 6f 6e 66 69 67 75 | erence.between.these.two.configu |
ad740 | 72 61 74 69 6f 6e 73 20 69 73 20 74 68 61 74 20 56 79 4f 53 20 72 65 71 75 69 72 65 73 20 79 6f | rations.is.that.VyOS.requires.yo |
ad760 | 75 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 65 6e 63 61 70 | u.explicitly.configure.the.encap |
ad780 | 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 2e 20 54 68 65 20 43 69 73 63 6f 20 72 6f 75 74 65 72 20 | sulation.type..The.Cisco.router. |
ad7a0 | 64 65 66 61 75 6c 74 73 20 74 6f 20 47 52 45 20 49 50 20 6f 74 68 65 72 77 69 73 65 20 69 74 20 | defaults.to.GRE.IP.otherwise.it. |
ad7c0 | 77 6f 75 6c 64 20 68 61 76 65 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 77 | would.have.to.be.configured.as.w |
ad7e0 | 65 6c 6c 2e 00 41 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e | ell..A.basic.introduction.to.zon |
ad800 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 | e-based.firewalls.can.be.found.` |
ad820 | 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e | here.<https://support.vyos.io/en |
ad840 | 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 | /kb/articles/a-primer-to-zone-ba |
ad860 | 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 | sed-firewall>`_,.and.an.example. |
ad880 | 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 | at.:ref:`examples-zone-policy`.. |
ad8a0 | 41 20 62 72 69 64 67 65 20 6e 61 6d 65 64 20 60 62 72 31 30 30 60 00 41 20 62 72 69 65 66 20 64 | A.bridge.named.`br100`.A.brief.d |
ad8c0 | 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 | escription.what.this.network.is. |
ad8e0 | 61 6c 6c 20 61 62 6f 75 74 2e 00 41 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 | all.about..A.class.can.have.mult |
ad900 | 69 70 6c 65 20 6d 61 74 63 68 20 66 69 6c 74 65 72 73 3a 00 41 20 63 6f 6d 6d 6f 6e 20 65 78 61 | iple.match.filters:.A.common.exa |
ad920 | 6d 70 6c 65 20 69 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 | mple.is.the.case.of.some.policie |
ad940 | 73 20 77 68 69 63 68 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 65 66 66 65 63 74 69 76 | s.which,.in.order.to.be.effectiv |
ad960 | 65 2c 20 74 68 65 79 20 6e 65 65 64 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e | e,.they.need.to.be.applied.to.an |
ad980 | 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e | .interface.that.is.directly.conn |
ad9a0 | 65 63 74 65 64 20 77 68 65 72 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 73 2e 20 49 | ected.where.the.bottleneck.is..I |
ad9c0 | 66 20 79 6f 75 72 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f | f.your.router.is.not.directly.co |
ad9e0 | 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 2c 20 62 75 74 20 73 | nnected.to.the.bottleneck,.but.s |
ada00 | 6f 6d 65 20 68 6f 70 20 62 65 66 6f 72 65 20 69 74 2c 20 79 6f 75 20 63 61 6e 20 65 6d 75 6c 61 | ome.hop.before.it,.you.can.emula |
ada20 | 74 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 62 79 20 65 6d 62 65 64 64 69 6e 67 20 79 | te.the.bottleneck.by.embedding.y |
ada40 | 6f 75 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c | our.non-shaping.policy.into.a.cl |
ada60 | 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 6f 6e 65 20 73 6f 20 74 68 61 74 20 69 74 20 74 61 | assful.shaping.one.so.that.it.ta |
ada80 | 6b 65 73 20 65 66 66 65 63 74 2e 00 41 20 63 6f 6d 70 6c 65 74 65 20 4c 44 41 50 20 61 75 74 68 | kes.effect..A.complete.LDAP.auth |
adaa0 | 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 75 6c 64 20 6c 6f 6f | .OpenVPN.configuration.could.loo |
adac0 | 6b 20 6c 69 6b 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 41 20 | k.like.the.following.example:.A. |
adae0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 63 61 6e 20 62 65 20 66 6f 75 | configuration.example.can.be.fou |
adb00 | 6e 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 49 6e 20 74 68 69 73 20 73 69 6d 70 | nd.in.this.section..In.this.simp |
adb20 | 6c 69 66 69 65 64 20 73 63 65 6e 61 72 69 6f 2c 20 6d 61 69 6e 20 74 68 69 6e 67 73 20 74 6f 20 | lified.scenario,.main.things.to. |
adb40 | 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 72 65 3a 00 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | be.considered.are:.A.connection. |
adb60 | 61 74 74 65 6d 70 74 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 61 73 3a 00 41 20 64 65 66 61 | attempt.will.be.shown.as:.A.defa |
adb80 | 75 6c 74 20 72 6f 75 74 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 | ult.route.is.automatically.insta |
adba0 | 6c 6c 65 64 20 6f 6e 63 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 2e 20 54 | lled.once.the.interface.is.up..T |
adbc0 | 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 62 65 68 61 76 69 6f 72 20 75 73 65 20 74 68 65 20 60 | o.change.this.behavior.use.the.` |
adbe0 | 60 6e 6f 2d 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 | `no-default-route``.CLI.option.. |
adc00 | 41 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 66 6f 72 20 65 | A.description.can.be.added.for.e |
adc20 | 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 75 6e 69 71 75 65 20 72 65 6c 61 79 20 49 44 2e 20 54 | ach.and.every.unique.relay.ID..T |
adc40 | 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 | his.is.useful.to.distinguish.bet |
adc60 | 77 65 65 6e 20 6d 75 6c 74 69 70 6c 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 73 2f 61 70 | ween.multiple.different.ports/ap |
adc80 | 70 6c 69 61 63 74 69 6f 6e 73 2e 00 41 20 64 69 73 61 62 6c 65 64 20 67 72 6f 75 70 20 77 69 6c | pliactions..A.disabled.group.wil |
adca0 | 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 | l.be.removed.from.the.VRRP.proce |
adcc0 | 73 73 20 61 6e 64 20 79 6f 75 72 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 70 61 72 74 | ss.and.your.router.will.not.part |
adce0 | 69 63 69 70 61 74 65 20 69 6e 20 56 52 52 50 20 66 6f 72 20 74 68 61 74 20 56 52 49 44 2e 20 49 | icipate.in.VRRP.for.that.VRID..I |
add00 | 74 20 77 69 6c 6c 20 64 69 73 61 70 70 65 61 72 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6f 6e 61 | t.will.disappear.from.operationa |
add20 | 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 6f 75 74 70 75 74 2c 20 72 61 74 68 65 72 20 74 | l.mode.commands.output,.rather.t |
add40 | 68 61 6e 20 65 6e 74 65 72 20 74 68 65 20 62 61 63 6b 75 70 20 73 74 61 74 65 2e 00 41 20 64 6f | han.enter.the.backup.state..A.do |
add60 | 6d 61 69 6e 20 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 | main.name.is.the.label.(name).as |
add80 | 73 69 67 6e 65 64 20 74 6f 20 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 61 6e 64 | signed.to.a.computer.network.and |
adda0 | 20 69 73 20 74 68 75 73 20 75 6e 69 71 75 65 2e 20 56 79 4f 53 20 61 70 70 65 6e 64 73 20 74 68 | .is.thus.unique..VyOS.appends.th |
addc0 | 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 61 20 73 75 66 66 69 78 20 74 6f 20 61 6e 79 | e.domain.name.as.a.suffix.to.any |
adde0 | 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 | .unqualified.name..For.example,. |
ade00 | 69 66 20 79 6f 75 20 73 65 74 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 65 78 61 6d | if.you.set.the.domain.name.`exam |
ade20 | 70 6c 65 2e 63 6f 6d 60 2c 20 61 6e 64 20 79 6f 75 20 77 6f 75 6c 64 20 70 69 6e 67 20 74 68 65 | ple.com`,.and.you.would.ping.the |
ade40 | 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 20 6f 66 20 60 63 72 75 78 60 2c 20 74 68 65 | .unqualified.name.of.`crux`,.the |
ade60 | 6e 20 56 79 4f 53 20 71 75 61 6c 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 74 6f 20 60 63 72 | n.VyOS.qualifies.the.name.to.`cr |
ade80 | 75 78 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2e 00 41 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 | ux.example.com`..A.dummy.interfa |
adea0 | 63 65 20 66 6f 72 20 74 68 65 20 70 72 6f 76 69 64 65 72 2d 61 73 73 69 67 6e 65 64 20 49 50 3b | ce.for.the.provider-assigned.IP; |
adec0 | 00 41 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 60 60 66 77 6d 61 72 6b 60 60 20 61 6c 6c 6f | .A.firewall.mark.``fwmark``.allo |
adee0 | 77 73 20 75 73 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 66 6f 72 20 68 69 67 68 | ws.using.multiple.ports.for.high |
adf00 | 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 2e 20 49 74 | -availability.virtual-server..It |
adf20 | 20 75 73 65 73 20 66 77 6d 61 72 6b 20 76 61 6c 75 65 2e 00 41 20 66 75 6c 6c 20 65 78 61 6d 70 | .uses.fwmark.value..A.full.examp |
adf40 | 6c 65 20 6f 66 20 61 20 54 75 6e 6e 65 6c 62 72 6f 6b 65 72 2e 6e 65 74 20 63 6f 6e 66 69 67 20 | le.of.a.Tunnelbroker.net.config. |
adf60 | 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 3a 72 65 66 3a 60 68 65 72 65 20 3c 65 78 61 6d | can.be.found.at.:ref:`here.<exam |
adf80 | 70 6c 65 73 2d 74 75 6e 6e 65 6c 62 72 6f 6b 65 72 2d 69 70 76 36 3e 60 2e 00 41 20 67 65 6e 65 | ples-tunnelbroker-ipv6>`..A.gene |
adfa0 | 72 69 63 20 60 3c 6e 61 6d 65 3e 60 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 69 73 20 73 79 | ric.`<name>`.referencing.this.sy |
adfc0 | 6e 63 20 73 65 72 76 69 63 65 2e 00 41 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 | nc.service..A.hostname.is.the.la |
adfe0 | 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b | bel.(name).assigned.to.a.network |
ae000 | 20 64 65 76 69 63 65 20 28 61 20 68 6f 73 74 29 20 6f 6e 20 61 20 6e 65 74 77 6f 72 6b 20 61 6e | .device.(a.host).on.a.network.an |
ae020 | 64 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 6f 6e 65 20 64 65 76 | d.is.used.to.distinguish.one.dev |
ae040 | 69 63 65 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 6e 65 74 | ice.from.another.on.specific.net |
ae060 | 77 6f 72 6b 73 20 6f 72 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 6e 65 74 2e 20 4f 6e 20 74 | works.or.over.the.internet..On.t |
ae080 | 68 65 20 6f 74 68 65 72 20 68 61 6e 64 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e | he.other.hand.this.will.be.the.n |
ae0a0 | 61 6d 65 20 77 68 69 63 68 20 61 70 70 65 61 72 73 20 6f 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 | ame.which.appears.on.the.command |
ae0c0 | 20 6c 69 6e 65 20 70 72 6f 6d 70 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 | .line.prompt..A.human.readable.d |
ae0e0 | 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 43 41 20 69 73 20 61 62 6f 75 74 | escription.what.this.CA.is.about |
ae100 | 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 | ..A.human.readable.description.w |
ae120 | 68 61 74 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 61 62 6f 75 74 2e 00 41 | hat.this.certificate.is.about..A |
ae140 | 20 6c 6f 6f 6b 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 75 70 | .lookback.interface.is.always.up |
ae160 | 2c 20 74 68 75 73 20 69 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 6d 61 6e 61 | ,.thus.it.could.be.used.for.mana |
ae180 | 67 65 6d 65 6e 74 20 74 72 61 66 66 69 63 20 6f 72 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 | gement.traffic.or.as.source/dest |
ae1a0 | 69 6e 61 74 69 6f 6e 20 66 6f 72 20 61 6e 64 20 3a 61 62 62 72 3a 60 49 47 50 20 28 49 6e 74 65 | ination.for.and.:abbr:`IGP.(Inte |
ae1c0 | 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6c 69 6b 65 20 3a 72 65 | rior.Gateway.Protocol)`.like.:re |
ae1e0 | 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 20 73 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c | f:`routing-bgp`.so.your.internal |
ae200 | 20 42 47 50 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 70 68 | .BGP.link.is.not.dependent.on.ph |
ae220 | 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 73 20 61 6e 64 20 6d 75 6c 74 69 70 6c 65 20 | ysical.link.states.and.multiple. |
ae240 | 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 68 6f 73 65 6e 20 74 6f 20 74 68 65 20 64 65 73 74 | routes.can.be.chosen.to.the.dest |
ae260 | 69 6e 61 74 69 6f 6e 2e 20 41 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 | ination..A.:ref:`dummy-interface |
ae280 | 60 20 49 6e 74 65 72 66 61 63 65 20 73 68 6f 75 6c 64 20 61 6c 77 61 79 73 20 62 65 20 70 72 65 | `.Interface.should.always.be.pre |
ae2a0 | 66 65 72 72 65 64 20 6f 76 65 72 20 61 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 | ferred.over.a.:ref:`loopback-int |
ae2c0 | 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2e 00 41 20 6d 61 6e 61 67 65 64 20 64 65 76 | erface`.interface..A.managed.dev |
ae2e0 | 69 63 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 6e 6f 64 65 20 74 68 61 74 20 69 6d 70 6c 65 | ice.is.a.network.node.that.imple |
ae300 | 6d 65 6e 74 73 20 61 6e 20 53 4e 4d 50 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 61 6c 6c | ments.an.SNMP.interface.that.all |
ae320 | 6f 77 73 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 2d 6f 6e 6c 79 29 20 6f | ows.unidirectional.(read-only).o |
ae340 | 72 20 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 29 | r.bidirectional.(read.and.write) |
ae360 | 20 61 63 63 65 73 73 20 74 6f 20 6e 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 | .access.to.node-specific.informa |
ae380 | 74 69 6f 6e 2e 20 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 65 78 63 68 61 6e 67 65 20 6e | tion..Managed.devices.exchange.n |
ae3a0 | 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 | ode-specific.information.with.th |
ae3c0 | 65 20 4e 4d 53 73 2e 20 53 6f 6d 65 74 69 6d 65 73 20 63 61 6c 6c 65 64 20 6e 65 74 77 6f 72 6b | e.NMSs..Sometimes.called.network |
ae3e0 | 20 65 6c 65 6d 65 6e 74 73 2c 20 74 68 65 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 63 | .elements,.the.managed.devices.c |
ae400 | 61 6e 20 62 65 20 61 6e 79 20 74 79 70 65 20 6f 66 20 64 65 76 69 63 65 2c 20 69 6e 63 6c 75 64 | an.be.any.type.of.device,.includ |
ae420 | 69 6e 67 2c 20 62 75 74 20 6e 6f 74 20 6c 69 6d 69 74 65 64 20 74 6f 2c 20 72 6f 75 74 65 72 73 | ing,.but.not.limited.to,.routers |
ae440 | 2c 20 61 63 63 65 73 73 20 73 65 72 76 65 72 73 2c 20 73 77 69 74 63 68 65 73 2c 20 63 61 62 6c | ,.access.servers,.switches,.cabl |
ae460 | 65 20 6d 6f 64 65 6d 73 2c 20 62 72 69 64 67 65 73 2c 20 68 75 62 73 2c 20 49 50 20 74 65 6c 65 | e.modems,.bridges,.hubs,.IP.tele |
ae480 | 70 68 6f 6e 65 73 2c 20 49 50 20 76 69 64 65 6f 20 63 61 6d 65 72 61 73 2c 20 63 6f 6d 70 75 74 | phones,.IP.video.cameras,.comput |
ae4a0 | 65 72 20 68 6f 73 74 73 2c 20 61 6e 64 20 70 72 69 6e 74 65 72 73 2e 00 41 20 6d 61 74 63 68 20 | er.hosts,.and.printers..A.match. |
ae4c0 | 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 | filter.can.contain.multiple.crit |
ae4e0 | 65 72 69 61 20 61 6e 64 20 77 69 6c 6c 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 20 69 66 20 61 | eria.and.will.match.traffic.if.a |
ae500 | 6c 6c 20 74 68 6f 73 65 20 63 72 69 74 65 72 69 61 20 61 72 65 20 74 72 75 65 2e 00 41 20 6d 6f | ll.those.criteria.are.true..A.mo |
ae520 | 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 | nitored.static.route.conditions. |
ae540 | 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 52 49 42 20 6f 6e 20 74 | the.installation.to.the.RIB.on.t |
ae560 | 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 72 75 6e 6e 69 6e 67 20 73 74 61 74 65 3a 20 77 68 | he.BFD.session.running.state:.wh |
ae580 | 65 6e 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 75 70 20 74 68 65 20 72 6f 75 74 65 20 69 | en.BFD.session.is.up.the.route.i |
ae5a0 | 73 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 52 49 42 2c 20 62 75 74 20 77 68 65 6e 20 74 68 65 | s.installed.to.RIB,.but.when.the |
ae5c0 | 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 64 6f 77 6e 20 69 74 20 69 73 20 72 65 6d 6f 76 | .BFD.session.is.down.it.is.remov |
ae5e0 | 65 64 20 66 72 6f 6d 20 74 68 65 20 52 49 42 2e 00 41 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 | ed.from.the.RIB..A.network.manag |
ae600 | 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 65 78 65 63 75 74 65 73 20 61 70 70 6c 69 63 61 74 69 | ement.station.executes.applicati |
ae620 | 6f 6e 73 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 6d 61 6e | ons.that.monitor.and.control.man |
ae640 | 61 67 65 64 20 64 65 76 69 63 65 73 2e 20 4e 4d 53 73 20 70 72 6f 76 69 64 65 20 74 68 65 20 62 | aged.devices..NMSs.provide.the.b |
ae660 | 75 6c 6b 20 6f 66 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 61 6e 64 20 6d 65 6d 6f 72 79 | ulk.of.the.processing.and.memory |
ae680 | 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 | .resources.required.for.network. |
ae6a0 | 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 4e 4d 53 73 20 6d 61 79 | management..One.or.more.NMSs.may |
ae6c0 | 20 65 78 69 73 74 20 6f 6e 20 61 6e 79 20 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 2e 00 41 | .exist.on.any.managed.network..A |
ae6e0 | 20 6e 65 77 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 6f 6d 65 73 20 70 72 65 73 65 6e 74 20 60 | .new.interface.becomes.present.` |
ae700 | 60 50 6f 72 74 2d 63 68 61 6e 6e 65 6c 31 60 60 2c 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 | `Port-channel1``,.all.configurat |
ae720 | 69 6f 6e 20 6c 69 6b 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 | ion.like.allowed.VLAN.interfaces |
ae740 | 2c 20 53 54 50 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 68 65 72 65 2e 00 41 20 70 61 63 6b 65 74 | ,.STP.will.happen.here..A.packet |
ae760 | 20 72 61 74 65 20 6c 69 6d 69 74 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 61 20 72 75 6c | .rate.limit.can.be.set.for.a.rul |
ae780 | 65 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 72 75 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 | e.to.apply.the.rule.to.traffic.a |
ae7a0 | 62 6f 76 65 20 6f 72 20 62 65 6c 6f 77 20 61 20 73 70 65 63 69 66 69 65 64 20 74 68 72 65 73 68 | bove.or.below.a.specified.thresh |
ae7c0 | 6f 6c 64 2e 20 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 | old..To.configure.the.rate.limit |
ae7e0 | 69 6e 67 20 75 73 65 3a 00 41 20 70 61 63 6b 65 74 20 74 68 61 74 20 66 69 6e 64 73 20 61 20 6d | ing.use:.A.packet.that.finds.a.m |
ae800 | 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 | atching.entry.in.the.flowtable.( |
ae820 | 66 6c 6f 77 74 61 62 6c 65 20 68 69 74 29 20 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f | flowtable.hit).is.transmitted.to |
ae840 | 20 74 68 65 20 6f 75 74 70 75 74 20 6e 65 74 64 65 76 69 63 65 2c 20 68 65 6e 63 65 2c 20 70 61 | .the.output.netdevice,.hence,.pa |
ae860 | 63 6b 65 74 73 20 62 79 70 61 73 73 20 74 68 65 20 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 | ckets.bypass.the.classic.IP.forw |
ae880 | 61 72 64 69 6e 67 20 70 61 74 68 20 61 6e 64 20 75 73 65 73 20 74 68 65 20 2a 2a 46 61 73 74 20 | arding.path.and.uses.the.**Fast. |
ae8a0 | 50 61 74 68 2a 2a 20 28 6f 72 61 6e 67 65 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2e 20 54 68 | Path**.(orange.circles.path)..Th |
ae8c0 | 65 20 76 69 73 69 62 6c 65 20 65 66 66 65 63 74 20 69 73 20 74 68 61 74 20 79 6f 75 20 64 6f 20 | e.visible.effect.is.that.you.do. |
ae8e0 | 6e 6f 74 20 73 65 65 20 74 68 65 73 65 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 6f | not.see.these.packets.from.any.o |
ae900 | 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 63 6f 6d 69 6e 67 20 61 66 74 | f.the.Netfilter.hooks.coming.aft |
ae920 | 65 72 20 69 6e 67 72 65 73 73 2e 20 49 6e 20 63 61 73 65 20 74 68 61 74 20 74 68 65 72 65 20 69 | er.ingress..In.case.that.there.i |
ae940 | 73 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 | s.no.matching.entry.in.the.flowt |
ae960 | 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 6d 69 73 73 29 2c 20 74 68 65 20 70 61 63 6b 65 | able.(flowtable.miss),.the.packe |
ae980 | 74 20 66 6f 6c 6c 6f 77 73 20 74 68 65 20 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 | t.follows.the.classic.IP.forward |
ae9a0 | 69 6e 67 20 70 61 74 68 2e 00 41 20 70 65 6e 61 6c 74 79 20 6f 66 20 31 30 30 30 20 69 73 20 61 | ing.path..A.penalty.of.1000.is.a |
ae9c0 | 73 73 65 73 73 65 64 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c | ssessed.each.time.the.route.fail |
ae9e0 | 73 2e 20 57 68 65 6e 20 74 68 65 20 70 65 6e 61 6c 74 69 65 73 20 72 65 61 63 68 20 61 20 70 72 | s..When.the.penalties.reach.a.pr |
aea00 | 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 73 75 70 70 72 65 73 73 2d 76 61 6c | edefined.threshold.(suppress-val |
aea20 | 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 74 6f 70 73 20 61 64 76 65 72 74 69 73 69 6e | ue),.the.router.stops.advertisin |
aea40 | 67 20 74 68 65 20 72 6f 75 74 65 2e 00 41 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 | g.the.route..A.physical.interfac |
aea60 | 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 69 73 20 4d 41 | e.is.required.to.connect.this.MA |
aea80 | 43 73 65 63 20 69 6e 73 74 61 6e 63 65 20 74 6f 2e 20 54 72 61 66 66 69 63 20 6c 65 61 76 69 6e | Csec.instance.to..Traffic.leavin |
aeaa0 | 67 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 6e 6f 77 20 62 65 20 61 75 74 | g.this.interface.will.now.be.aut |
aeac0 | 68 65 6e 74 69 63 61 74 65 64 2f 65 6e 63 72 79 70 74 65 64 2e 00 41 20 70 6f 6f 6c 20 6f 66 20 | henticated/encrypted..A.pool.of. |
aeae0 | 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 62 79 20 75 73 69 6e | addresses.can.be.defined.by.usin |
aeb00 | 67 20 61 20 68 79 70 68 65 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 49 50 20 61 64 64 72 65 73 | g.a.hyphen.between.two.IP.addres |
aeb20 | 73 65 73 3a 00 41 20 70 6f 72 74 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 61 20 70 6f | ses:.A.port.can.be.set.with.a.po |
aeb40 | 72 74 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 | rt.number.or.a.name.which.is.her |
aeb60 | 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 73 65 72 76 69 63 65 73 60 60 2e 00 41 20 | e.defined:.``/etc/services``..A. |
aeb80 | 71 75 65 72 79 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 72 65 20 69 73 20 61 75 74 68 6f 72 69 | query.for.which.there.is.authori |
aeba0 | 74 61 74 69 76 65 6c 79 20 6e 6f 20 61 6e 73 77 65 72 20 69 73 20 63 61 63 68 65 64 20 74 6f 20 | tatively.no.answer.is.cached.to. |
aebc0 | 71 75 69 63 6b 6c 79 20 64 65 6e 79 20 61 20 72 65 63 6f 72 64 27 73 20 65 78 69 73 74 65 6e 63 | quickly.deny.a.record's.existenc |
aebe0 | 65 20 6c 61 74 65 72 20 6f 6e 2c 20 77 69 74 68 6f 75 74 20 70 75 74 74 69 6e 67 20 61 20 68 65 | e.later.on,.without.putting.a.he |
aec00 | 61 76 79 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 2e 20 49 | avy.load.on.the.remote.server..I |
aec20 | 6e 20 70 72 61 63 74 69 63 65 2c 20 63 61 63 68 65 73 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 61 | n.practice,.caches.can.become.sa |
aec40 | 74 75 72 61 74 65 64 20 77 69 74 68 20 68 75 6e 64 72 65 64 73 20 6f 66 20 74 68 6f 75 73 61 6e | turated.with.hundreds.of.thousan |
aec60 | 64 73 20 6f 66 20 68 6f 73 74 73 20 77 68 69 63 68 20 61 72 65 20 74 72 69 65 64 20 6f 6e 6c 79 | ds.of.hosts.which.are.tried.only |
aec80 | 20 6f 6e 63 65 2e 00 41 20 72 65 63 65 69 76 65 64 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 | .once..A.received.NHRP.Traffic.I |
aeca0 | 6e 64 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 73 6f 6c | ndication.will.trigger.the.resol |
aecc0 | 75 74 69 6f 6e 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 61 20 73 68 6f | ution.and.establishment.of.a.sho |
aece0 | 72 74 63 75 74 20 72 6f 75 74 65 2e 00 41 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 49 44 20 | rtcut.route..A.routing.table.ID. |
aed00 | 63 61 6e 20 6e 6f 74 20 62 65 20 6d 6f 64 69 66 69 65 64 20 6f 6e 63 65 20 69 74 20 69 73 20 61 | can.not.be.modified.once.it.is.a |
aed20 | 73 73 69 67 6e 65 64 2e 20 49 74 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 63 68 61 6e 67 65 64 20 | ssigned..It.can.only.be.changed. |
aed40 | 62 79 20 64 65 6c 65 74 69 6e 67 20 61 6e 64 20 72 65 2d 61 64 64 69 6e 67 20 74 68 65 20 56 52 | by.deleting.and.re-adding.the.VR |
aed60 | 46 20 69 6e 73 74 61 6e 63 65 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 | F.instance..A.rule-set.is.a.name |
aed80 | 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 | d.collection.of.firewall.rules.t |
aeda0 | 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 | hat.can.be.applied.to.an.interfa |
aedc0 | 63 65 20 6f 72 20 61 20 7a 6f 6e 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 | ce.or.a.zone..Each.rule.is.numbe |
aede0 | 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 | red,.has.an.action.to.apply.if.t |
aee00 | 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c | he.rule.is.matched,.and.the.abil |
aee20 | 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d | ity.to.specify.the.criteria.to.m |
aee40 | 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 | atch..Data.packets.go.through.th |
aee60 | 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 | e.rules.from.1.-.999999,.at.the. |
aee80 | 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 | first.match.the.action.of.the.ru |
aeea0 | 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 | le.will.be.executed..A.rule-set. |
aeec0 | 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 75 6c 65 73 20 74 | is.a.named.collection.of.rules.t |
aeee0 | 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 | hat.can.be.applied.to.an.interfa |
aef00 | 63 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 | ce..Each.rule.is.numbered,.has.a |
aef20 | 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 | n.action.to.apply.if.the.rule.is |
aef40 | 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 | .matched,.and.the.ability.to.spe |
aef60 | 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 | cify.the.criteria.to.match..Data |
aef80 | 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 | .packets.go.through.the.rules.fr |
aefa0 | 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 | om.1.-.999999,.at.the.first.matc |
aefc0 | 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 | h.the.action.of.the.rule.will.be |
aefe0 | 20 65 78 65 63 75 74 65 64 2e 00 41 20 73 63 72 69 70 74 20 63 61 6e 20 62 65 20 72 75 6e 20 77 | .executed..A.script.can.be.run.w |
af000 | 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 20 63 68 61 6e 67 65 20 6f 63 | hen.an.interface.state.change.oc |
af020 | 63 75 72 73 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 72 75 6e 20 66 72 6f 6d 20 2f 63 6f 6e 66 | curs..Scripts.are.run.from./conf |
af040 | 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 | ig/scripts,.for.a.different.loca |
af060 | 74 69 6f 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 3a 00 41 20 73 65 | tion.specify.the.full.path:.A.se |
af080 | 67 6d 65 6e 74 20 49 44 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 49 50 20 61 64 64 | gment.ID.that.contains.an.IP.add |
af0a0 | 72 65 73 73 20 70 72 65 66 69 78 20 63 61 6c 63 75 6c 61 74 65 64 20 62 79 20 61 6e 20 49 47 50 | ress.prefix.calculated.by.an.IGP |
af0c0 | 20 69 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 63 6f 72 65 20 6e 65 | .in.the.service.provider.core.ne |
af0e0 | 74 77 6f 72 6b 2e 20 50 72 65 66 69 78 20 53 49 44 73 20 61 72 65 20 67 6c 6f 62 61 6c 6c 79 20 | twork..Prefix.SIDs.are.globally. |
af100 | 75 6e 69 71 75 65 2c 20 74 68 69 73 20 76 61 6c 75 65 20 69 6e 64 65 6e 74 69 66 79 20 69 74 00 | unique,.this.value.indentify.it. |
af120 | 41 20 73 65 6e 64 69 6e 67 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d 70 75 74 65 72 20 6f 72 20 6e | A.sending.station.(computer.or.n |
af140 | 65 74 77 6f 72 6b 20 73 77 69 74 63 68 29 20 6d 61 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 69 | etwork.switch).may.be.transmitti |
af160 | 6e 67 20 64 61 74 61 20 66 61 73 74 65 72 20 74 68 61 6e 20 74 68 65 20 6f 74 68 65 72 20 65 6e | ng.data.faster.than.the.other.en |
af180 | 64 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e 20 61 63 63 65 70 74 20 69 74 2e 20 55 73 69 | d.of.the.link.can.accept.it..Usi |
af1a0 | 6e 67 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2c 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 73 | ng.flow.control,.the.receiving.s |
af1c0 | 74 61 74 69 6f 6e 20 63 61 6e 20 73 69 67 6e 61 6c 20 74 68 65 20 73 65 6e 64 65 72 20 72 65 71 | tation.can.signal.the.sender.req |
af1e0 | 75 65 73 74 69 6e 67 20 73 75 73 70 65 6e 73 69 6f 6e 20 6f 66 20 74 72 61 6e 73 6d 69 73 73 69 | uesting.suspension.of.transmissi |
af200 | 6f 6e 73 20 75 6e 74 69 6c 20 74 68 65 20 72 65 63 65 69 76 65 72 20 63 61 74 63 68 65 73 20 75 | ons.until.the.receiver.catches.u |
af220 | 70 2e 00 41 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 64 20 60 60 4e 45 54 31 | p..A.shared.network.named.``NET1 |
af240 | 60 60 20 73 65 72 76 65 73 20 73 75 62 6e 65 74 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 | ``.serves.subnet.``2001:db8::/64 |
af260 | 60 60 00 41 20 73 69 6d 70 6c 65 20 42 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 | ``.A.simple.BGP.configuration.vi |
af280 | 61 20 49 50 76 36 2e 00 41 20 73 69 6d 70 6c 65 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 | a.IPv6..A.simple.Random.Early.De |
af2a0 | 74 65 63 74 69 6f 6e 20 28 52 45 44 29 20 70 6f 6c 69 63 79 20 77 6f 75 6c 64 20 73 74 61 72 74 | tection.(RED).policy.would.start |
af2c0 | 20 72 61 6e 64 6f 6d 6c 79 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 | .randomly.dropping.packets.from. |
af2e0 | 61 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 72 65 61 63 68 65 73 20 69 74 73 20 71 75 | a.queue.before.it.reaches.its.qu |
af300 | 65 75 65 20 6c 69 6d 69 74 20 74 68 75 73 20 61 76 6f 69 64 69 6e 67 20 63 6f 6e 67 65 73 74 69 | eue.limit.thus.avoiding.congesti |
af320 | 6f 6e 2e 20 54 68 61 74 20 69 73 20 67 6f 6f 64 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 | on..That.is.good.for.TCP.connect |
af340 | 69 6f 6e 73 20 61 73 20 74 68 65 20 67 72 61 64 75 61 6c 20 64 72 6f 70 70 69 6e 67 20 6f 66 20 | ions.as.the.gradual.dropping.of. |
af360 | 70 61 63 6b 65 74 73 20 61 63 74 73 20 61 73 20 61 20 73 69 67 6e 61 6c 20 66 6f 72 20 74 68 65 | packets.acts.as.a.signal.for.the |
af380 | 20 73 65 6e 64 65 72 20 74 6f 20 64 65 63 72 65 61 73 65 20 69 74 73 20 74 72 61 6e 73 6d 69 73 | .sender.to.decrease.its.transmis |
af3a0 | 73 69 6f 6e 20 72 61 74 65 2e 00 41 20 73 69 6d 70 6c 65 20 65 42 47 50 20 63 6f 6e 66 69 67 75 | sion.rate..A.simple.eBGP.configu |
af3c0 | 72 61 74 69 6f 6e 3a 00 41 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 53 68 61 70 | ration:.A.simple.example.of.Shap |
af3e0 | 65 72 20 75 73 69 6e 67 20 70 72 69 6f 72 69 74 69 65 73 2e 00 41 20 73 69 6d 70 6c 65 20 65 78 | er.using.priorities..A.simple.ex |
af400 | 61 6d 70 6c 65 20 6f 66 20 61 6e 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 77 6f 72 6b | ample.of.an.FQ-CoDel.policy.work |
af420 | 69 6e 67 20 69 6e 73 69 64 65 20 61 20 53 68 61 70 65 72 20 6f 6e 65 2e 00 41 20 73 69 6d 70 6c | ing.inside.a.Shaper.one..A.simpl |
af440 | 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 2c 20 62 61 73 65 | ified.traffic.flow.diagram,.base |
af460 | 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 73 | d.on.Netfilter.packet.flow,.is.s |
af480 | 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 75 | hown.next,.in.order.to.have.a.fu |
af4a0 | 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f 77 | ll.view.and.understanding.of.how |
af4c0 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 74 | .packets.are.processed,.and.what |
af4e0 | 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 74 61 6b 65 | .possible.paths.traffic.can.take |
af500 | 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 2c 20 62 61 73 | ..A.simplified.traffic.flow,.bas |
af520 | 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 | ed.on.Netfilter.packet.flow,.is. |
af540 | 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 | shown.next,.in.order.to.have.a.f |
af560 | 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f | ull.view.and.understanding.of.ho |
af580 | 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 | w.packets.are.processed,.and.wha |
af5a0 | 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6e | t.possible.paths.can.take..A.sin |
af5c0 | 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 65 78 74 65 72 6e 61 | gle.internal.network.and.externa |
af5e0 | 6c 20 6e 65 74 77 6f 72 6b 2e 20 55 73 65 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 | l.network..Use.the.NAT66.device. |
af600 | 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 | to.connect.a.single.internal.net |
af620 | 77 6f 72 6b 20 61 6e 64 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 74 68 65 | work.and.public.network,.and.the |
af640 | 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 | .hosts.in.the.internal.network.u |
af660 | 73 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 65 73 20 74 68 61 74 20 6f 6e | se.IPv6.address.prefixes.that.on |
af680 | 6c 79 20 73 75 70 70 6f 72 74 20 72 6f 75 74 69 6e 67 20 77 69 74 68 69 6e 20 74 68 65 20 6c 6f | ly.support.routing.within.the.lo |
af6a0 | 63 61 6c 20 72 61 6e 67 65 2e 20 57 68 65 6e 20 61 20 68 6f 73 74 20 69 6e 20 74 68 65 20 69 6e | cal.range..When.a.host.in.the.in |
af6c0 | 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 65 73 20 74 68 65 20 65 78 74 65 | ternal.network.accesses.the.exte |
af6e0 | 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 76 36 20 61 64 | rnal.network,.the.source.IPv6.ad |
af700 | 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 6d 65 73 73 61 67 65 20 77 69 6c 6c | dress.prefix.in.the.message.will |
af720 | 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 69 6e 74 6f 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 | .be.converted.into.a.global.unic |
af740 | 61 73 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 62 79 20 74 68 65 20 4e | ast.IPv6.address.prefix.by.the.N |
af760 | 41 54 36 36 20 64 65 76 69 63 65 2e 00 41 20 73 74 61 74 69 6f 6e 20 61 63 74 73 20 61 73 20 61 | AT66.device..A.station.acts.as.a |
af780 | 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 20 61 63 63 65 73 73 69 6e 67 20 74 68 65 20 6e 65 74 77 | .Wi-Fi.client.accessing.the.netw |
af7a0 | 6f 72 6b 20 74 68 72 6f 75 67 68 20 61 6e 20 61 76 61 69 6c 61 62 6c 65 20 57 41 50 00 41 20 73 | ork.through.an.available.WAP.A.s |
af7c0 | 79 6e 63 20 67 72 6f 75 70 20 61 6c 6c 6f 77 73 20 56 52 52 50 20 67 72 6f 75 70 73 20 74 6f 20 | ync.group.allows.VRRP.groups.to. |
af7e0 | 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 67 65 74 68 65 72 2e 00 41 20 74 79 70 69 63 61 6c 20 63 | transition.together..A.typical.c |
af800 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 2e 00 41 20 74 79 | onfiguration.using.2.nodes..A.ty |
af820 | 70 69 63 61 6c 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 75 73 69 6e 67 20 4e 41 54 20 61 6e 64 | pical.problem.with.using.NAT.and |
af840 | 20 68 6f 73 74 69 6e 67 20 70 75 62 6c 69 63 20 73 65 72 76 65 72 73 20 69 73 20 74 68 65 20 61 | .hosting.public.servers.is.the.a |
af860 | 62 69 6c 69 74 79 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 74 6f 20 72 | bility.for.internal.systems.to.r |
af880 | 65 61 63 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 75 73 69 6e 67 20 69 74 | each.an.internal.server.using.it |
af8a0 | 27 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 73 6f 6c 75 | 's.external.IP.address..The.solu |
af8c0 | 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 74 68 65 20 75 73 65 20 | tion.to.this.is.usually.the.use. |
af8e0 | 6f 66 20 73 70 6c 69 74 2d 44 4e 53 20 74 6f 20 63 6f 72 72 65 63 74 6c 79 20 70 6f 69 6e 74 20 | of.split-DNS.to.correctly.point. |
af900 | 68 6f 73 74 20 73 79 73 74 65 6d 73 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 | host.systems.to.the.internal.add |
af920 | 72 65 73 73 20 77 68 65 6e 20 72 65 71 75 65 73 74 73 20 61 72 65 20 6d 61 64 65 20 69 6e 74 65 | ress.when.requests.are.made.inte |
af940 | 72 6e 61 6c 6c 79 2e 20 42 65 63 61 75 73 65 20 6d 61 6e 79 20 73 6d 61 6c 6c 65 72 20 6e 65 74 | rnally..Because.many.smaller.net |
af960 | 77 6f 72 6b 73 20 6c 61 63 6b 20 44 4e 53 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2c 20 61 | works.lack.DNS.infrastructure,.a |
af980 | 20 77 6f 72 6b 2d 61 72 6f 75 6e 64 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 64 65 70 6c 6f 79 65 | .work-around.is.commonly.deploye |
af9a0 | 64 20 74 6f 20 66 61 63 69 6c 69 74 61 74 65 20 74 68 65 20 74 72 61 66 66 69 63 20 62 79 20 4e | d.to.facilitate.the.traffic.by.N |
af9c0 | 41 54 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 20 66 72 6f 6d 20 69 6e 74 65 72 6e 61 6c 20 | ATing.the.request.from.internal. |
af9e0 | 68 6f 73 74 73 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 | hosts.to.the.source.address.of.t |
afa00 | 68 65 20 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 66 69 72 | he.internal.interface.on.the.fir |
afa20 | 65 77 61 6c 6c 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c 79 20 61 6c 69 61 73 20 66 6f 72 | ewall..A.user.friendly.alias.for |
afa40 | 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 43 61 6e 20 62 65 20 75 73 65 64 20 69 6e | .this.connection..Can.be.used.in |
afa60 | 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6e 61 6d 65 20 77 68 65 6e 20 63 6f | stead.of.the.device.name.when.co |
afa80 | 6e 6e 65 63 74 69 6e 67 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c 79 20 64 65 73 63 72 69 | nnecting..A.user.friendly.descri |
afaa0 | 70 74 69 6f 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 | ption.identifying.the.connected. |
afac0 | 70 65 72 69 70 68 65 72 61 6c 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 | peripheral..A.value.of.0.disable |
afae0 | 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | s.ARP.monitoring..The.default.va |
afb00 | 6c 75 65 20 69 73 20 30 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 32 39 36 20 77 6f 72 6b 73 20 77 | lue.is.0..A.value.of.296.works.w |
afb20 | 65 6c 6c 20 6f 6e 20 76 65 72 79 20 73 6c 6f 77 20 6c 69 6e 6b 73 20 28 34 30 20 62 79 74 65 73 | ell.on.very.slow.links.(40.bytes |
afb40 | 20 66 6f 72 20 54 43 50 2f 49 50 20 68 65 61 64 65 72 20 2b 20 32 35 36 20 62 79 74 65 73 20 6f | .for.TCP/IP.header.+.256.bytes.o |
afb60 | 66 20 64 61 74 61 29 2e 00 41 20 76 65 72 79 20 73 6d 61 6c 6c 20 62 75 66 66 65 72 20 77 69 6c | f.data)..A.very.small.buffer.wil |
afb80 | 6c 20 73 6f 6f 6e 20 73 74 61 72 74 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 41 | l.soon.start.dropping.packets..A |
afba0 | 20 7a 6f 6e 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 62 65 66 6f 72 65 20 | .zone.must.be.configured.before. |
afbc0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 74 20 61 | an.interface.is.assigned.to.it.a |
afbe0 | 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 | nd.an.interface.can.be.assigned. |
afc00 | 74 6f 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 7a 6f 6e 65 2e 00 41 43 4d 45 00 41 43 4d 45 | to.only.a.single.zone..ACME.ACME |
afc20 | 20 44 69 72 65 63 74 6f 72 79 20 52 65 73 6f 75 72 63 65 20 55 52 49 2e 00 41 50 49 00 41 52 50 | .Directory.Resource.URI..API.ARP |
afc40 | 00 41 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 60 31 30 2e 30 2e 30 2e | .Above.command.will.use.`10.0.0. |
afc60 | 33 60 20 61 73 20 73 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 61 6c | 3`.as.source.IPv4.address.for.al |
afc80 | 6c 20 52 41 44 49 55 53 20 71 75 65 72 69 65 73 20 6f 6e 20 74 68 69 73 20 4e 41 53 2e 00 41 62 | l.RADIUS.queries.on.this.NAS..Ab |
afca0 | 6f 76 65 2c 20 63 6f 6d 6d 61 6e 64 20 73 79 6e 74 61 78 20 69 73 6e 20 6e 6f 74 65 64 20 74 6f | ove,.command.syntax.isn.noted.to |
afcc0 | 20 63 6f 6e 66 69 67 75 72 65 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 6f 6e 20 61 20 73 70 65 63 | .configure.dynamic.dns.on.a.spec |
afce0 | 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 | ific.interface..It.is.possible.t |
afd00 | 6f 20 6f 76 65 72 6c 6f 6f 6b 20 74 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 64 64 72 65 73 | o.overlook.the.additional.addres |
afd20 | 73 20 6f 70 74 69 6f 6e 2c 20 77 65 62 2c 20 77 68 65 6e 20 63 6f 6d 70 6c 65 74 65 69 6e 67 20 | s.option,.web,.when.completeing. |
afd40 | 74 68 6f 73 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e | those.commands..ddclient_.has.an |
afd60 | 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 | other.way.to.determine.the.WAN.I |
afd80 | 50 20 61 64 64 72 65 73 73 2c 20 75 73 69 6e 67 20 61 20 77 65 62 2d 62 61 73 65 64 20 75 72 6c | P.address,.using.a.web-based.url |
afda0 | 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 45 | .to.determine.the.external.IP..E |
afdc0 | 61 63 68 20 6f 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 6e | ach.of.the.commands.above.will.n |
afde0 | 65 65 64 20 74 6f 20 62 65 20 6d 6f 64 69 66 69 65 64 20 74 6f 20 75 73 65 20 27 77 65 62 27 20 | eed.to.be.modified.to.use.'web'. |
afe00 | 61 73 20 74 68 65 20 27 69 6e 74 65 72 66 61 63 65 27 20 73 70 65 63 69 66 69 65 64 20 69 66 20 | as.the.'interface'.specified.if. |
afe20 | 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 74 6f 20 62 65 20 75 74 69 6c | this.functionality.is.to.be.util |
afe40 | 69 7a 65 64 2e 00 41 63 63 65 6c 65 72 61 74 69 6f 6e 00 41 63 63 65 70 74 20 53 53 48 20 63 6f | ized..Acceleration.Accept.SSH.co |
afe60 | 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 64 65 76 69 63 65 | nnections.for.the.given.`<device |
afe80 | 3e 60 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 2e 20 41 66 74 65 72 20 73 | >`.on.TCP.port.`<port>`..After.s |
afea0 | 75 63 63 65 73 73 66 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 68 65 20 75 73 | uccessfull.authentication.the.us |
afec0 | 65 72 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 65 64 20 74 6f 20 74 | er.will.be.directly.dropped.to.t |
afee0 | 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 73 65 72 69 61 6c 20 64 65 76 69 63 65 2e 00 41 63 63 65 | he.connected.serial.device..Acce |
aff00 | 70 74 20 6f 6e 6c 79 20 63 65 72 74 61 69 6e 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 59 6f 75 20 6d | pt.only.certain.protocols:.You.m |
aff20 | 61 79 20 77 61 6e 74 20 74 6f 20 72 65 70 6c 69 63 61 74 65 20 74 68 65 20 73 74 61 74 65 20 6f | ay.want.to.replicate.the.state.o |
aff40 | 66 20 66 6c 6f 77 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 6c 61 79 65 72 | f.flows.depending.on.their.layer |
aff60 | 20 34 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 63 63 65 70 74 20 70 65 65 72 20 69 6e 74 65 72 66 61 | .4.protocol..Accept.peer.interfa |
aff80 | 63 65 20 69 64 65 6e 74 69 66 69 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 | ce.identifier..By.default.is.not |
affa0 | 20 64 65 66 69 6e 65 64 2e 00 41 63 63 65 70 74 61 62 6c 65 20 72 61 74 65 20 6f 66 20 63 6f 6e | .defined..Acceptable.rate.of.con |
affc0 | 6e 65 63 74 69 6f 6e 73 20 28 65 2e 67 2e 20 31 2f 6d 69 6e 2c 20 36 30 2f 73 65 63 29 00 41 63 | nections.(e.g..1/min,.60/sec).Ac |
affe0 | 63 65 73 73 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 41 63 63 65 73 73 20 4c 69 73 74 73 00 41 63 | cess.List.Policy.Access.Lists.Ac |
b0000 | 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 2d | tion.must.be.taken.immediately.- |
b0020 | 20 41 20 63 6f 6e 64 69 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 72 72 | .A.condition.that.should.be.corr |
b0040 | 65 63 74 65 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 2c 20 73 75 63 68 20 61 73 20 61 20 63 6f 72 | ected.immediately,.such.as.a.cor |
b0060 | 72 75 70 74 65 64 20 73 79 73 74 65 6d 20 64 61 74 61 62 61 73 65 2e 00 41 63 74 69 6f 6e 20 77 | rupted.system.database..Action.w |
b0080 | 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 6f 6e 63 65 20 74 68 65 20 63 74 72 6c 2d 61 | hich.will.be.run.once.the.ctrl-a |
b00a0 | 6c 74 2d 64 65 6c 20 6b 65 79 73 74 72 6f 6b 65 20 69 73 20 72 65 63 65 69 76 65 64 2e 00 41 63 | lt-del.keystroke.is.received..Ac |
b00c0 | 74 69 6f 6e 73 00 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 00 41 63 74 69 76 65 20 68 65 | tions.Active.Directory.Active.he |
b00e0 | 61 6c 74 68 20 63 68 65 63 6b 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 00 41 64 64 20 4e 54 | alth.check.backend.server.Add.NT |
b0100 | 41 20 28 6e 65 67 61 74 69 76 65 20 74 72 75 73 74 20 61 6e 63 68 6f 72 29 20 66 6f 72 20 74 68 | A.(negative.trust.anchor).for.th |
b0120 | 69 73 20 64 6f 6d 61 69 6e 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 69 66 20 74 | is.domain..This.must.be.set.if.t |
b0140 | 68 65 20 64 6f 6d 61 69 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 44 4e 53 53 45 | he.domain.does.not.support.DNSSE |
b0160 | 43 2e 00 41 64 64 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 | C..Add.Power.Constraint.element. |
b0180 | 74 6f 20 42 65 61 63 6f 6e 20 61 6e 64 20 50 72 6f 62 65 20 52 65 73 70 6f 6e 73 65 20 66 72 61 | to.Beacon.and.Probe.Response.fra |
b01a0 | 6d 65 73 2e 00 41 64 64 20 61 20 66 6f 72 77 61 72 64 69 6e 67 20 72 75 6c 65 20 6d 61 74 63 68 | mes..Add.a.forwarding.rule.match |
b01c0 | 69 6e 67 20 55 44 50 20 70 6f 72 74 20 6f 6e 20 79 6f 75 72 20 69 6e 74 65 72 6e 65 74 20 72 6f | ing.UDP.port.on.your.internet.ro |
b01e0 | 75 74 65 72 2e 00 41 64 64 20 61 20 68 6f 73 74 20 64 65 76 69 63 65 20 74 6f 20 74 68 65 20 63 | uter..Add.a.host.device.to.the.c |
b0200 | 6f 6e 74 61 69 6e 65 72 2e 00 41 64 64 20 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 64 69 72 | ontainer..Add.access-control.dir |
b0220 | 65 63 74 69 76 65 20 74 6f 20 61 6c 6c 6f 77 20 6f 72 20 64 65 6e 79 20 75 73 65 72 73 20 61 6e | ective.to.allow.or.deny.users.an |
b0240 | 64 20 67 72 6f 75 70 73 2e 20 44 69 72 65 63 74 69 76 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 | d.groups..Directives.are.process |
b0260 | 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 72 20 6f 66 20 70 72 65 | ed.in.the.following.order.of.pre |
b0280 | 63 65 64 65 6e 63 65 3a 20 60 60 64 65 6e 79 2d 75 73 65 72 73 60 60 2c 20 60 60 61 6c 6c 6f 77 | cedence:.``deny-users``,.``allow |
b02a0 | 2d 75 73 65 72 73 60 60 2c 20 60 60 64 65 6e 79 2d 67 72 6f 75 70 73 60 60 20 61 6e 64 20 60 60 | -users``,.``deny-groups``.and.`` |
b02c0 | 61 6c 6c 6f 77 2d 67 72 6f 75 70 73 60 60 2e 00 41 64 64 20 63 75 73 74 6f 6d 20 65 6e 76 69 72 | allow-groups``..Add.custom.envir |
b02e0 | 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 65 6e 76 69 72 | onment.variables..Multiple.envir |
b0300 | 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 | onment.variables.are.allowed..Th |
b0320 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 | e.following.commands.translate.t |
b0340 | 6f 20 22 2d 65 20 6b 65 79 3d 76 61 6c 75 65 22 20 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 | o."-e.key=value".when.the.contai |
b0360 | 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 2e 00 41 64 64 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | ner.is.created..Add.default.rout |
b0380 | 65 73 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 60 60 74 61 62 6c 65 20 31 30 60 60 20 61 6e 64 20 | es.for.routing.``table.10``.and. |
b03a0 | 60 60 74 61 62 6c 65 20 31 31 60 60 00 41 64 64 20 6d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 | ``table.11``.Add.multiple.source |
b03c0 | 20 49 50 20 69 6e 20 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 73 61 6d 65 20 70 72 69 6f 72 69 | .IP.in.one.rule.with.same.priori |
b03e0 | 74 79 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c | ty.Add.new.port.to.SSL-ports.acl |
b0400 | 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 | ..Ports.included.by.default.in.S |
b0420 | 53 4c 2d 70 6f 72 74 73 20 61 63 6c 3a 20 34 34 33 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 | SL-ports.acl:.443.Add.new.port.t |
b0440 | 6f 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 | o.Safe-ports.acl..Ports.included |
b0460 | 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 3a 20 32 | .by.default.in.Safe-ports.acl:.2 |
b0480 | 31 2c 20 37 30 2c 20 38 30 2c 20 32 31 30 2c 20 32 38 30 2c 20 34 34 33 2c 20 34 38 38 2c 20 35 | 1,.70,.80,.210,.280,.443,.488,.5 |
b04a0 | 39 31 2c 20 37 37 37 2c 20 38 37 33 2c 20 31 30 32 35 2d 36 35 35 33 35 00 41 64 64 20 6f 72 20 | 91,.777,.873,.1025-65535.Add.or. |
b04c0 | 72 65 70 6c 61 63 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 | replace.BGP.community.attribute. |
b04e0 | 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 36 35 35 33 35 3e 60 60 20 | in.format.``<0-65535:0-65535>``. |
b0500 | 6f 72 20 66 72 6f 6d 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 | or.from.well-known.community.lis |
b0520 | 74 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 | t.Add.or.replace.BGP.large-commu |
b0540 | 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 34 32 | nity.attribute.in.format.``<0-42 |
b0560 | 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 | 94967295:0-4294967295:0-42949672 |
b0580 | 39 35 3e 60 60 00 41 64 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 6d 61 74 63 68 69 6e 67 20 | 95>``.Add.policy.route.matching. |
b05a0 | 56 4c 41 4e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 00 41 64 64 20 70 75 62 6c 69 63 | VLAN.source.addresses.Add.public |
b05c0 | 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 | .key.portion.for.the.certificate |
b05e0 | 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 | .named.`name`.to.the.VyOS.CLI..A |
b0600 | 64 64 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 74 68 65 20 56 79 | dd.the.CAs.private.key.to.the.Vy |
b0620 | 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 | OS.CLI..This.should.never.leave. |
b0640 | 74 68 65 20 73 79 73 74 65 6d 2c 20 61 6e 64 20 69 73 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 64 | the.system,.and.is.only.required |
b0660 | 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 | .if.you.use.VyOS.as.your.certifi |
b0680 | 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 62 6f 76 | cate.generator.as.mentioned.abov |
b06a0 | 65 2e 00 41 64 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 72 6f 6d 20 53 6e 69 70 70 65 74 | e..Add.the.commands.from.Snippet |
b06c0 | 20 69 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 73 69 64 65 20 76 69 61 20 50 6f 77 65 72 53 68 | .in.the.Windows.side.via.PowerSh |
b06e0 | 65 6c 6c 2e 20 41 6c 73 6f 20 69 6d 70 6f 72 74 20 74 68 65 20 72 6f 6f 74 20 43 41 20 63 65 72 | ell..Also.import.the.root.CA.cer |
b0700 | 74 20 74 6f 20 74 68 65 20 57 69 6e 64 6f 77 73 20 e2 80 9c 54 72 75 73 74 65 64 20 52 6f 6f 74 | t.to.the.Windows....Trusted.Root |
b0720 | 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f 72 69 74 69 65 73 e2 80 9d 20 61 6e | .Certification.Authorities....an |
b0740 | 64 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 64 64 20 | d.establish.the.connection..Add. |
b0760 | 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 69 73 20 | the.private.key.portion.of.this. |
b0780 | 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f | certificate.to.the.CLI..This.sho |
b07a0 | 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 | uld.never.leave.the.system.as.it |
b07c0 | 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 41 64 | .is.used.to.decrypt.the.data..Ad |
b07e0 | 64 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 | d.the.public.CA.certificate.for. |
b0800 | 74 68 65 20 43 41 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 | the.CA.named.`name`.to.the.VyOS. |
b0820 | 43 4c 49 2e 00 41 64 64 69 6e 67 20 61 20 32 46 41 20 77 69 74 68 20 61 6e 20 4f 54 50 2d 6b 65 | CLI..Adding.a.2FA.with.an.OTP-ke |
b0840 | 79 00 41 64 64 69 74 69 6f 6e 61 6c 20 67 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 | y.Additional.global.parameters.a |
b0860 | 72 65 20 73 65 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 | re.set,.including.the.maximum.nu |
b0880 | 6d 62 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 69 6d 69 74 20 6f 66 20 34 30 30 30 20 61 6e | mber.connection.limit.of.4000.an |
b08a0 | 64 20 61 20 6d 69 6e 69 6d 75 6d 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 6f 66 20 31 2e 33 2e 00 | d.a.minimum.TLS.version.of.1.3.. |
b08c0 | 41 64 64 69 74 69 6f 6e 61 6c 20 6f 70 74 69 6f 6e 20 74 6f 20 72 75 6e 20 54 46 54 50 20 73 65 | Additional.option.to.run.TFTP.se |
b08e0 | 72 76 65 72 20 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 | rver.in.the.:abbr:`VRF.(Virtual. |
b0900 | 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 63 6f 6e 74 65 78 74 | Routing.and.Forwarding)`.context |
b0920 | 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 73 68 6f 75 6c 64 20 6b 65 65 70 20 69 6e | .Additionally.you.should.keep.in |
b0940 | 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 75 6e 64 61 6d 65 6e | .mind.that.this.feature.fundamen |
b0960 | 74 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 75 73 | tally.disables.the.ability.to.us |
b0980 | 65 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 42 47 50 20 66 65 61 74 75 72 65 73 2e 20 | e.widely.deployed.BGP.features.. |
b09a0 | 42 47 50 20 75 6e 6e 75 6d 62 65 72 65 64 2c 20 68 6f 73 74 6e 61 6d 65 20 73 75 70 70 6f 72 74 | BGP.unnumbered,.hostname.support |
b09c0 | 2c 20 41 53 34 2c 20 41 64 64 70 61 74 68 2c 20 52 6f 75 74 65 20 52 65 66 72 65 73 68 2c 20 4f | ,.AS4,.Addpath,.Route.Refresh,.O |
b09e0 | 52 46 2c 20 44 79 6e 61 6d 69 63 20 43 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 67 72 | RF,.Dynamic.Capabilities,.and.gr |
b0a00 | 61 63 65 66 75 6c 20 72 65 73 74 61 72 74 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 65 61 | aceful.restart..Additionally,.ea |
b0a20 | 63 68 20 63 6c 69 65 6e 74 20 6e 65 65 64 73 20 61 20 63 6f 70 79 20 6f 66 20 63 61 20 63 65 72 | ch.client.needs.a.copy.of.ca.cer |
b0a40 | 74 20 61 6e 64 20 69 74 73 20 6f 77 6e 20 63 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 | t.and.its.own.client.key.and.cer |
b0a60 | 74 20 66 69 6c 65 73 2e 20 54 68 65 20 66 69 6c 65 73 20 61 72 65 20 70 6c 61 69 6e 74 65 78 74 | t.files..The.files.are.plaintext |
b0a80 | 20 73 6f 20 74 68 65 79 20 6d 61 79 20 62 65 20 63 6f 70 69 65 64 20 65 69 74 68 65 72 20 6d 61 | .so.they.may.be.copied.either.ma |
b0aa0 | 6e 75 61 6c 6c 79 20 66 72 6f 6d 20 74 68 65 20 43 4c 49 2e 20 43 6c 69 65 6e 74 20 6b 65 79 20 | nually.from.the.CLI..Client.key. |
b0ac0 | 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 69 67 6e 65 64 20 | and.cert.files.should.be.signed. |
b0ae0 | 77 69 74 68 20 74 68 65 20 70 72 6f 70 65 72 20 63 61 20 63 65 72 74 20 61 6e 64 20 67 65 6e 65 | with.the.proper.ca.cert.and.gene |
b0b00 | 72 61 74 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 2e 00 41 64 64 69 74 69 | rated.on.the.server.side..Additi |
b0b20 | 6f 6e 61 6c 6c 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 75 73 65 20 56 50 4e 73 20 6f 6e 6c 79 | onally,.we.want.to.use.VPNs.only |
b0b40 | 20 6f 6e 20 6f 75 72 20 65 74 68 31 20 69 6e 74 65 72 66 61 63 65 20 28 74 68 65 20 65 78 74 65 | .on.our.eth1.interface.(the.exte |
b0b60 | 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 61 62 6f 76 | rnal.interface.in.the.image.abov |
b0b80 | 65 29 00 41 64 64 72 65 73 73 00 41 64 64 72 65 73 73 20 43 6f 6e 76 65 72 73 69 6f 6e 00 41 64 | e).Address.Address.Conversion.Ad |
b0ba0 | 64 72 65 73 73 20 46 61 6d 69 6c 69 65 73 00 41 64 64 72 65 73 73 20 47 72 6f 75 70 73 00 41 64 | dress.Families.Address.Groups.Ad |
b0bc0 | 64 72 65 73 73 20 70 6f 6f 6c 20 73 68 61 6c 6c 20 62 65 20 60 60 32 30 30 31 3a 64 62 38 3a 3a | dress.pool.shall.be.``2001:db8:: |
b0be0 | 31 30 30 60 60 20 74 68 72 6f 75 67 68 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 39 39 60 60 2e | 100``.through.``2001:db8::199``. |
b0c00 | 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 73 00 41 64 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e | .Address.pools.Address.to.listen |
b0c20 | 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 00 41 64 64 73 20 72 65 67 69 73 74 72 | .for.HTTPS.requests.Adds.registr |
b0c40 | 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d | y.to.list.of.unqualified-search- |
b0c60 | 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 | registries..By.default,.for.any. |
b0c80 | 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 | image.that.does.not.include.the. |
b0ca0 | 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 4f 53 | registry.in.the.image.name,.VyOS |
b0cc0 | 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 6e 64 20 71 75 61 79 2e 69 6f 20 | .will.use.docker.io.and.quay.io. |
b0ce0 | 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e 00 41 64 64 73 20 | as.the.container.registry..Adds. |
b0d00 | 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d | registry.to.list.of.unqualified- |
b0d20 | 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 | search-registries..By.default,.f |
b0d40 | 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 | or.any.image.that.does.not.inclu |
b0d60 | 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d | de.the.registry.in.the.image.nam |
b0d80 | 65 2c 20 56 79 6f 73 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 73 20 74 68 | e,.Vyos.will.use.docker.io.as.th |
b0da0 | 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e 00 41 64 6d 69 6e 69 73 74 72 61 | e.container.registry..Administra |
b0dc0 | 74 69 76 65 20 44 69 73 74 61 6e 63 65 00 41 64 76 61 6e 63 65 64 20 49 6e 74 65 72 66 61 63 65 | tive.Distance.Advanced.Interface |
b0de0 | 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 | .Options.Advanced.Options.Advanc |
b0e00 | 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 | ed.configuration.can.be.used.in. |
b0e20 | 6f 72 64 65 72 20 74 6f 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 | order.to.apply.source.or.destina |
b0e40 | 74 69 6f 6e 20 4e 41 54 2c 20 61 6e 64 20 77 69 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 | tion.NAT,.and.within.a.single.ru |
b0e60 | 6c 65 2c 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 66 69 6e 65 20 6d 75 6c 74 69 70 6c 65 20 74 | le,.be.able.to.define.multiple.t |
b0e80 | 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 4e 41 54 20 62 61 6c 61 | ranslated.addresses,.so.NAT.bala |
b0ea0 | 6e 63 65 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6d 6f 6e 67 20 74 68 65 6d | nces.the.translations.among.them |
b0ec0 | 2e 00 41 64 76 61 6e 74 61 67 65 73 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 72 65 3a 00 41 64 76 | ..Advantages.of.OpenVPN.are:.Adv |
b0ee0 | 65 72 74 69 73 65 20 44 4e 53 20 73 65 72 76 65 72 20 70 65 72 20 68 74 74 70 73 3a 2f 2f 74 6f | ertise.DNS.server.per.https://to |
b0f00 | 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 36 31 30 36 00 41 64 76 65 72 74 | ols.ietf.org/html/rfc6106.Advert |
b0f20 | 69 73 69 6e 67 20 61 20 4e 41 54 36 34 20 50 72 65 66 69 78 00 41 64 76 65 72 74 69 73 69 6e 67 | ising.a.NAT64.Prefix.Advertising |
b0f40 | 20 61 20 50 72 65 66 69 78 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 20 74 68 65 20 70 6c 61 69 6e | .a.Prefix.After.commit.the.plain |
b0f60 | 74 65 78 74 20 70 61 73 73 77 6f 72 64 73 20 77 69 6c 6c 20 62 65 20 68 61 73 68 65 64 20 61 6e | text.passwords.will.be.hashed.an |
b0f80 | 64 20 73 74 6f 72 65 64 20 69 6e 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 | d.stored.in.your.configuration.. |
b0fa0 | 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 43 4c 49 20 63 6f 6e 66 69 67 20 77 69 6c 6c 20 6c 6f | The.resulting.CLI.config.will.lo |
b0fc0 | 6f 6b 20 6c 69 6b 65 3a 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f | ok.like:.After.committing.the.co |
b0fe0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 63 61 6e 20 76 65 72 69 66 79 20 61 6c 6c 20 6c 65 | nfiguration.we.can.verify.all.le |
b1000 | 61 6b 65 64 20 72 6f 75 74 65 73 20 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 2c 20 61 6e 64 20 74 | aked.routes.are.installed,.and.t |
b1020 | 72 79 20 74 6f 20 49 43 4d 50 20 70 69 6e 67 20 50 43 31 20 66 72 6f 6d 20 50 43 33 2e 00 41 66 | ry.to.ICMP.ping.PC1.from.PC3..Af |
b1040 | 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 | ter.the.PKI.certs.are.all.set.up |
b1060 | 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 | .we.can.start.configuring.our.IP |
b1080 | 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 | Sec/IKE.proposals.used.for.key-e |
b10a0 | 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 | xchange.end.data.encryption..The |
b10c0 | 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 | .used.encryption.ciphers.and.int |
b10e0 | 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 | egrity.algorithms.vary.from.oper |
b1100 | 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d | ating.system.to.operating.system |
b1120 | 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 | ..The.ones.used.in.this.example. |
b1140 | 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 57 69 6e 64 6f 77 73 | are.validated.to.work.on.Windows |
b1160 | 20 31 30 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c | .10..After.the.PKI.certs.are.all |
b1180 | 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 | .set.up.we.can.start.configuring |
b11a0 | 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f | .our.IPSec/IKE.proposals.used.fo |
b11c0 | 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 | r.key-exchange.end.data.encrypti |
b11e0 | 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 | on..The.used.encryption.ciphers. |
b1200 | 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 | and.integrity.algorithms.vary.fr |
b1220 | 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 | om.operating.system.to.operating |
b1240 | 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 70 | .system..The.ones.used.in.this.p |
b1260 | 6f 73 74 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 62 6f 74 | ost.are.validated.to.work.on.bot |
b1280 | 68 20 57 69 6e 64 6f 77 73 20 31 30 20 61 6e 64 20 69 4f 53 2f 69 50 61 64 4f 53 20 31 34 20 74 | h.Windows.10.and.iOS/iPadOS.14.t |
b12a0 | 6f 20 31 37 2e 00 41 66 74 65 72 20 77 65 20 68 61 76 65 20 69 6d 70 6f 72 74 65 64 20 74 68 65 | o.17..After.we.have.imported.the |
b12c0 | 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 28 73 29 20 77 65 20 63 61 6e 20 6e 6f 77 20 69 6d | .CA.certificate(s).we.can.now.im |
b12e0 | 70 6f 72 74 20 61 6e 64 20 61 64 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 65 64 20 62 | port.and.add.certificates.used.b |
b1300 | 79 20 73 65 72 76 69 63 65 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 00 41 66 74 65 72 | y.services.on.this.router..After |
b1320 | 20 79 6f 75 20 6f 62 74 61 69 6e 65 64 20 79 6f 75 72 20 73 65 72 76 65 72 20 63 65 72 74 69 66 | .you.obtained.your.server.certif |
b1340 | 69 63 61 74 65 20 79 6f 75 20 63 61 6e 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 61 20 66 | icate.you.can.import.it.from.a.f |
b1360 | 69 6c 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2c 20 6f 72 20 | ile.on.the.local.filesystem,.or. |
b1380 | 70 61 73 74 65 20 69 74 20 69 6e 74 6f 20 74 68 65 20 43 4c 49 2e 20 50 6c 65 61 73 65 20 6e 6f | paste.it.into.the.CLI..Please.no |
b13a0 | 74 65 20 74 68 61 74 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 | te.that.when.entering.the.certif |
b13c0 | 69 63 61 74 65 20 6d 61 6e 75 61 6c 6c 79 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 72 69 70 | icate.manually.you.need.to.strip |
b13e0 | 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 | .the.``-----BEGIN.KEY-----``.and |
b1400 | 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 | .``-----END.KEY-----``.tags..Als |
b1420 | 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 72 20 6b 65 79 20 6e 65 65 64 73 20 | o,.the.certificate.or.key.needs. |
b1440 | 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 | to.be.presented.in.a.single.line |
b1460 | 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2e 00 41 | .without.line.breaks.(``\n``)..A |
b1480 | 67 65 6e 74 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 6d 61 | gent.-.software.which.runs.on.ma |
b14a0 | 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 41 6c 65 72 74 00 41 6c 67 6f 72 69 74 68 6d 00 41 6c | naged.devices.Alert.Algorithm.Al |
b14c0 | 69 61 73 65 73 00 41 6c 6c 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 65 78 61 6d 70 | iases.All.DNS.requests.for.examp |
b14e0 | 6c 65 2e 63 6f 6d 20 6d 75 73 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 74 6f 20 61 20 44 4e | le.com.must.be.forwarded.to.a.DN |
b1500 | 53 20 73 65 72 76 65 72 20 61 74 20 31 39 32 2e 30 2e 32 2e 32 35 34 20 61 6e 64 20 32 30 30 31 | S.server.at.192.0.2.254.and.2001 |
b1520 | 3a 64 62 38 3a 63 61 66 65 3a 3a 31 00 41 6c 6c 20 53 4e 4d 50 20 4d 49 42 73 20 61 72 65 20 6c | :db8:cafe::1.All.SNMP.MIBs.are.l |
b1540 | 6f 63 61 74 65 64 20 69 6e 20 65 61 63 68 20 69 6d 61 67 65 20 6f 66 20 56 79 4f 53 20 68 65 72 | ocated.in.each.image.of.VyOS.her |
b1560 | 65 3a 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 73 6e 6d 70 2f 6d 69 62 73 2f 60 60 00 41 6c 6c | e:.``/usr/share/snmp/mibs/``.All |
b1580 | 20 61 76 61 69 6c 61 62 6c 65 20 57 57 41 4e 20 63 61 72 64 73 20 68 61 76 65 20 61 20 62 75 69 | .available.WWAN.cards.have.a.bui |
b15a0 | 6c 64 20 69 6e 2c 20 72 65 70 72 6f 67 72 61 6d 6d 61 62 6c 65 20 66 69 72 6d 77 61 72 65 2e 20 | ld.in,.reprogrammable.firmware.. |
b15c0 | 4d 6f 73 74 20 6f 66 20 74 68 65 20 76 65 6e 64 6f 72 73 20 70 72 6f 76 69 64 65 20 61 20 72 65 | Most.of.the.vendors.provide.a.re |
b15e0 | 67 75 6c 61 72 20 75 70 64 61 74 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 75 73 65 | gular.update.to.the.firmware.use |
b1600 | 64 20 69 6e 20 74 68 65 20 62 61 73 65 62 61 6e 64 20 63 68 69 70 2e 00 41 6c 6c 20 63 65 72 74 | d.in.the.baseband.chip..All.cert |
b1620 | 69 66 69 63 61 74 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 74 6f 72 65 64 20 6f 6e 20 56 79 4f | ificates.should.be.stored.on.VyO |
b1640 | 53 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 60 60 2e 20 49 66 20 63 65 72 | S.under.``/config/auth``..If.cer |
b1660 | 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 74 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 | tificates.are.not.stored.in.the. |
b1680 | 60 60 2f 63 6f 6e 66 69 67 60 60 20 64 69 72 65 63 74 6f 72 79 20 74 68 65 79 20 77 69 6c 6c 20 | ``/config``.directory.they.will. |
b16a0 | 6e 6f 74 20 62 65 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 20 73 6f 66 74 77 61 72 | not.be.migrated.during.a.softwar |
b16c0 | 65 20 75 70 64 61 74 65 2e 00 41 6c 6c 20 66 61 63 69 6c 69 74 69 65 73 00 41 6c 6c 20 69 6e 74 | e.update..All.facilities.All.int |
b16e0 | 65 72 66 61 63 65 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 | erfaces.used.for.the.DHCP.relay. |
b1700 | 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 | must.be.configured..This.include |
b1720 | 73 20 74 68 65 20 75 70 6c 69 6e 6b 20 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e | s.the.uplink.to.the.DHCP.server. |
b1740 | 00 41 6c 6c 20 69 74 65 6d 73 20 69 6e 20 61 20 73 79 6e 63 20 67 72 6f 75 70 20 73 68 6f 75 6c | .All.items.in.a.sync.group.shoul |
b1760 | 64 20 62 65 20 73 69 6d 69 6c 61 72 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 49 66 20 6f 6e | d.be.similarly.configured..If.on |
b1780 | 65 20 56 52 52 50 20 67 72 6f 75 70 20 69 73 20 73 65 74 20 74 6f 20 61 20 64 69 66 66 65 72 65 | e.VRRP.group.is.set.to.a.differe |
b17a0 | 6e 74 20 70 72 65 65 6d 70 74 69 6f 6e 20 64 65 6c 61 79 20 6f 72 20 70 72 69 6f 72 69 74 79 2c | nt.preemption.delay.or.priority, |
b17c0 | 20 69 74 20 77 6f 75 6c 64 20 72 65 73 75 6c 74 20 69 6e 20 61 6e 20 65 6e 64 6c 65 73 73 20 74 | .it.would.result.in.an.endless.t |
b17e0 | 72 61 6e 73 69 74 69 6f 6e 20 6c 6f 6f 70 2e 00 41 6c 6c 20 6f 74 68 65 72 20 44 4e 53 20 72 65 | ransition.loop..All.other.DNS.re |
b1800 | 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 74 6f 20 61 20 64 69 | quests.will.be.forwarded.to.a.di |
b1820 | 66 66 65 72 65 6e 74 20 73 65 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 73 20 61 74 20 31 39 | fferent.set.of.DNS.servers.at.19 |
b1840 | 32 2e 30 2e 32 2e 31 2c 20 31 39 32 2e 30 2e 32 2e 32 2c 20 32 30 30 31 3a 64 62 38 3a 3a 31 3a | 2.0.2.1,.192.0.2.2,.2001:db8::1: |
b1860 | 66 66 66 66 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 32 3a 66 66 66 66 00 41 6c 6c 20 72 65 | ffff.and.2001:db8::2:ffff.All.re |
b1880 | 70 6c 79 20 73 69 7a 65 73 20 61 72 65 20 61 63 63 65 70 74 65 64 20 62 79 20 64 65 66 61 75 6c | ply.sizes.are.accepted.by.defaul |
b18a0 | 74 2e 00 41 6c 6c 20 72 6f 75 74 65 72 73 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 | t..All.routers.in.the.PIM.networ |
b18c0 | 6b 20 6d 75 73 74 20 61 67 72 65 65 20 6f 6e 20 74 68 65 73 65 20 76 61 6c 75 65 73 2e 00 41 6c | k.must.agree.on.these.values..Al |
b18e0 | 6c 20 73 63 72 69 70 74 73 20 65 78 63 65 63 75 74 65 64 20 74 68 69 73 20 77 61 79 20 61 72 65 | l.scripts.excecuted.this.way.are |
b1900 | 20 65 78 65 63 75 74 65 64 20 61 73 20 72 6f 6f 74 20 75 73 65 72 20 2d 20 74 68 69 73 20 6d 61 | .executed.as.root.user.-.this.ma |
b1920 | 79 20 62 65 20 64 61 6e 67 65 72 6f 75 73 2e 20 54 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 | y.be.dangerous..Together.with.:r |
b1940 | 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 74 68 69 73 20 63 61 6e 20 | ef:`command-scripting`.this.can. |
b1960 | 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 6e 67 20 28 72 65 2d 29 63 6f 6e 66 | be.used.for.automating.(re-)conf |
b1980 | 69 67 75 72 61 74 69 6f 6e 2e 00 41 6c 6c 20 74 68 65 73 65 20 72 75 6c 65 73 20 77 69 74 68 20 | iguration..All.these.rules.with. |
b19a0 | 4f 54 43 20 77 69 6c 6c 20 68 65 6c 70 20 74 6f 20 64 65 74 65 63 74 20 61 6e 64 20 6d 69 74 69 | OTC.will.help.to.detect.and.miti |
b19c0 | 67 61 74 65 20 72 6f 75 74 65 20 6c 65 61 6b 73 20 61 6e 64 20 68 61 70 70 65 6e 20 61 75 74 6f | gate.route.leaks.and.happen.auto |
b19e0 | 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 73 65 74 2e 00 | matically.if.local-role.is.set.. |
b1a00 | 41 6c 6c 20 74 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 67 72 6f 75 70 65 64 20 | All.those.protocols.are.grouped. |
b1a20 | 75 6e 64 65 72 20 60 60 69 6e 74 65 72 66 61 63 65 73 20 74 75 6e 6e 65 6c 60 60 20 69 6e 20 56 | under.``interfaces.tunnel``.in.V |
b1a40 | 79 4f 53 2e 20 4c 65 74 27 73 20 74 61 6b 65 20 61 20 63 6c 6f 73 65 72 20 6c 6f 6f 6b 20 61 74 | yOS..Let's.take.a.closer.look.at |
b1a60 | 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 6f 70 74 69 6f 6e 73 20 63 75 72 72 65 | .the.protocols.and.options.curre |
b1a80 | 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f 53 2e 00 41 6c 6c 20 74 72 61 66 | ntly.supported.by.VyOS..All.traf |
b1aa0 | 66 69 63 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 73 20 69 73 20 61 66 66 65 63 74 65 64 20 62 79 | fic.between.zones.is.affected.by |
b1ac0 | 20 65 78 69 73 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 00 41 6c 6c 20 74 72 61 66 66 69 63 20 74 | .existing.policies.All.traffic.t |
b1ae0 | 6f 20 61 6e 64 20 66 72 6f 6d 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 69 6e 20 61 | o.and.from.an.interface.within.a |
b1b00 | 20 7a 6f 6e 65 20 69 73 20 70 65 72 6d 69 74 74 65 64 2e 00 41 6c 6c 20 74 75 6e 6e 65 6c 20 73 | .zone.is.permitted..All.tunnel.s |
b1b20 | 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 3a 00 41 6c 6c 6f | essions.can.be.checked.via:.Allo |
b1b40 | 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 73 20 69 70 20 61 64 64 72 65 73 73 65 73 20 62 79 20 52 | cation.clients.ip.addresses.by.R |
b1b60 | 41 44 49 55 53 00 41 6c 6c 6f 77 20 60 60 73 73 68 60 60 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 | ADIUS.Allow.``ssh``.dynamic-prot |
b1b80 | 65 63 74 69 6f 6e 2e 00 41 6c 6c 6f 77 20 61 63 63 65 73 73 20 74 6f 20 73 69 74 65 73 20 69 6e | ection..Allow.access.to.sites.in |
b1ba0 | 20 61 20 64 6f 6d 61 69 6e 20 77 69 74 68 6f 75 74 20 72 65 74 72 69 65 76 69 6e 67 20 74 68 65 | .a.domain.without.retrieving.the |
b1bc0 | 6d 20 66 72 6f 6d 20 74 68 65 20 50 72 6f 78 79 20 63 61 63 68 65 2e 20 53 70 65 63 69 66 79 69 | m.from.the.Proxy.cache..Specifyi |
b1be0 | 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 61 63 63 65 73 73 20 | ng."vyos.net".will.allow.access. |
b1c00 | 74 6f 20 76 79 6f 73 2e 6e 65 74 20 62 75 74 20 74 68 65 20 70 61 67 65 73 20 61 63 63 65 73 73 | to.vyos.net.but.the.pages.access |
b1c20 | 65 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 61 63 68 65 64 2e 20 49 74 20 75 73 65 66 75 6c | ed.will.not.be.cached..It.useful |
b1c40 | 20 66 6f 72 20 77 6f 72 6b 69 6e 67 20 61 72 6f 75 6e 64 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 | .for.working.around.problems.wit |
b1c60 | 68 20 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 22 20 63 68 65 63 6b 69 6e 67 20 61 | h."If-Modified-Since".checking.a |
b1c80 | 74 20 63 65 72 74 61 69 6e 20 73 69 74 65 73 2e 00 41 6c 6c 6f 77 20 62 67 70 20 74 6f 20 6e 65 | t.certain.sites..Allow.bgp.to.ne |
b1ca0 | 67 6f 74 69 61 74 65 20 74 68 65 20 65 78 74 65 6e 64 65 64 2d 6e 65 78 74 68 6f 70 20 63 61 70 | gotiate.the.extended-nexthop.cap |
b1cc0 | 61 62 69 6c 69 74 79 20 77 69 74 68 20 69 74 e2 80 99 73 20 70 65 65 72 2e 20 49 66 20 79 6f 75 | ability.with.it...s.peer..If.you |
b1ce0 | 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 50 76 36 20 4c 69 6e 6b 2d 4c 6f | .are.peering.over.a.IPv6.Link-Lo |
b1d00 | 63 61 6c 20 61 64 64 72 65 73 73 20 74 68 65 6e 20 74 68 69 73 20 63 61 70 61 62 69 6c 69 74 79 | cal.address.then.this.capability |
b1d20 | 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 20 49 66 20 | .is.turned.on.automatically..If. |
b1d40 | 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 50 76 36 20 47 6c 6f 62 | you.are.peering.over.a.IPv6.Glob |
b1d60 | 61 6c 20 41 64 64 72 65 73 73 20 74 68 65 6e 20 74 75 72 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 | al.Address.then.turning.on.this. |
b1d80 | 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 69 6e 73 74 61 6c | command.will.allow.BGP.to.instal |
b1da0 | 6c 20 49 50 76 34 20 72 6f 75 74 65 73 20 77 69 74 68 20 49 50 76 36 20 6e 65 78 74 68 6f 70 73 | l.IPv4.routes.with.IPv6.nexthops |
b1dc0 | 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 49 50 76 34 20 63 6f 6e 66 69 67 75 | .if.you.do.not.have.IPv4.configu |
b1de0 | 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6c 6c 6f 77 20 65 78 70 6c 69 63 69 | red.on.interfaces..Allow.explici |
b1e00 | 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | t.IPv6.address.for.the.interface |
b1e20 | 2e 00 41 6c 6c 6f 77 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 20 61 20 63 6f 6e | ..Allow.host.networking.in.a.con |
b1e40 | 74 61 69 6e 65 72 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 20 6f 66 20 74 68 65 | tainer..The.network.stack.of.the |
b1e60 | 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 6e 6f 74 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 | .container.is.not.isolated.from. |
b1e80 | 74 68 65 20 68 6f 73 74 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 6f 73 74 20 49 | the.host.and.will.use.the.host.I |
b1ea0 | 50 2e 00 41 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 74 | P..Allow.listing.additional.cust |
b1ec0 | 6f 6d 20 64 6f 6d 61 69 6e 73 20 74 6f 20 62 65 20 62 72 6f 77 73 65 64 20 28 69 6e 20 61 64 64 | om.domains.to.be.browsed.(in.add |
b1ee0 | 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 29 20 | ition.to.the.default.``local``). |
b1f00 | 73 6f 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 6c 65 63 74 65 64 2e 00 41 | so.that.they.can.be.reflected..A |
b1f20 | 6c 6c 6f 77 20 74 68 69 73 20 42 46 44 20 70 65 65 72 20 74 6f 20 6e 6f 74 20 62 65 20 64 69 72 | llow.this.BFD.peer.to.not.be.dir |
b1f40 | 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 | ectly.connected.Allowed.values.f |
b1f60 | 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 53 59 4e 60 60 2c 20 60 60 41 43 4b 60 60 2c 20 | pr.TCP.flags:.``SYN``,.``ACK``,. |
b1f80 | 60 60 46 49 4e 60 60 2c 20 60 60 52 53 54 60 60 2c 20 60 60 55 52 47 60 60 2c 20 60 60 50 53 48 | ``FIN``,.``RST``,.``URG``,.``PSH |
b1fa0 | 60 60 2c 20 60 60 41 4c 4c 60 60 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 | ``,.``ALL``.When.specifying.more |
b1fc0 | 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 | .than.one.flag,.flags.should.be. |
b1fe0 | 63 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 | comma.separated..The.``!``.negat |
b2000 | 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 6c 6c 6f 77 65 64 | e.the.selected.protocol..Allowed |
b2020 | 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 61 63 6b 60 60 2c 20 | .values.fpr.TCP.flags:.``ack``,. |
b2040 | 60 60 63 77 72 60 60 2c 20 60 60 65 63 6e 60 60 2c 20 60 60 66 69 6e 60 60 2c 20 60 60 70 73 68 | ``cwr``,.``ecn``,.``fin``,.``psh |
b2060 | 60 60 2c 20 60 60 72 73 74 60 60 2c 20 60 60 73 79 6e 60 60 20 61 6e 64 20 60 60 75 72 67 60 60 | ``,.``rst``,.``syn``.and.``urg`` |
b2080 | 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2c | ..Multiple.values.are.supported, |
b20a0 | 20 61 6e 64 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 75 73 65 20 | .and.for.inverted.selection.use. |
b20c0 | 60 60 6e 6f 74 60 60 2c 20 61 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 | ``not``,.as.shown.in.the.example |
b20e0 | 2e 00 41 6c 6c 6f 77 73 20 73 70 65 63 69 66 69 63 20 56 4c 41 4e 20 49 44 73 20 74 6f 20 70 61 | ..Allows.specific.VLAN.IDs.to.pa |
b2100 | 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 6d 65 6d 62 65 72 20 69 6e 74 | ss.through.the.bridge.member.int |
b2120 | 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 61 6e 20 65 69 74 68 65 72 20 62 65 20 61 6e 20 69 6e | erface..This.can.either.be.an.in |
b2140 | 64 69 76 69 64 75 61 6c 20 56 4c 41 4e 20 69 64 20 6f 72 20 61 20 72 61 6e 67 65 20 6f 66 20 56 | dividual.VLAN.id.or.a.range.of.V |
b2160 | 4c 41 4e 20 69 64 73 20 64 65 6c 69 6d 69 74 65 64 20 62 79 20 61 20 68 79 70 68 65 6e 2e 00 41 | LAN.ids.delimited.by.a.hyphen..A |
b2180 | 6c 6c 6f 77 73 20 74 6f 20 64 65 66 69 6e 65 20 55 52 4c 20 70 61 74 68 20 6d 61 74 63 68 69 6e | llows.to.define.URL.path.matchin |
b21a0 | 67 20 72 75 6c 65 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 2e 00 | g.rules.for.a.specific.service.. |
b21c0 | 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 | Allows.you.to.configure.the.next |
b21e0 | 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d | -hop.interface.for.an.interface- |
b2200 | 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 | based.IPv4.static.route..`<inter |
b2220 | 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 | face>`.will.be.the.next-hop.inte |
b2240 | 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f | rface.where.traffic.is.routed.fo |
b2260 | 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 6c 6f 77 73 20 79 | r.the.given.`<subnet>`..Allows.y |
b2280 | 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 | ou.to.configure.the.next-hop.int |
b22a0 | 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 | erface.for.an.interface-based.IP |
b22c0 | 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 | v6.static.route..`<interface>`.w |
b22e0 | 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 | ill.be.the.next-hop.interface.wh |
b2300 | 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 | ere.traffic.is.routed.for.the.gi |
b2320 | 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 72 65 61 64 79 20 6c 65 61 72 6e 65 64 20 | ven.`<subnet>`..Already.learned. |
b2340 | 6b 6e 6f 77 6e 5f 68 6f 73 74 73 20 66 69 6c 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 6e 65 65 | known_hosts.files.of.clients.nee |
b2360 | 64 20 61 6e 20 75 70 64 61 74 65 20 61 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 | d.an.update.as.the.public.key.wi |
b2380 | 6c 6c 20 63 68 61 6e 67 65 2e 00 41 6c 73 6f 2c 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f | ll.change..Also,.**default-actio |
b23a0 | 6e 2a 2a 20 69 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 70 6c 61 63 | n**.is.an.action.that.takes.plac |
b23c0 | 65 20 77 68 65 6e 65 76 65 72 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 | e.whenever.a.packet.does.not.mat |
b23e0 | 63 68 20 61 6e 79 20 72 75 6c 65 20 69 6e 20 69 74 27 73 20 63 68 61 69 6e 2e 20 46 6f 72 20 62 | ch.any.rule.in.it's.chain..For.b |
b2400 | 61 73 65 20 63 68 61 69 6e 73 2c 20 70 6f 73 73 69 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 | ase.chains,.possible.options.for |
b2420 | 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 61 72 65 20 2a 2a 61 63 63 65 70 74 | .**default-action**.are.**accept |
b2440 | 2a 2a 20 6f 72 20 2a 2a 64 72 6f 70 2a 2a 2e 00 41 6c 73 6f 2c 20 66 6f 72 20 62 61 63 6b 77 61 | **.or.**drop**..Also,.for.backwa |
b2460 | 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 | rds.compatibility.this.configura |
b2480 | 74 69 6f 6e 2c 20 77 68 69 63 68 20 75 73 65 73 20 67 65 6e 65 72 69 63 20 69 6e 74 65 72 66 61 | tion,.which.uses.generic.interfa |
b24a0 | 63 65 20 64 65 66 69 6e 69 74 69 6f 6e 2c 20 69 73 20 73 74 69 6c 6c 20 76 61 6c 69 64 3a 00 41 | ce.definition,.is.still.valid:.A |
b24c0 | 6c 73 6f 2c 20 66 6f 72 20 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 6e 27 74 20 75 70 64 61 74 | lso,.for.those.who.haven't.updat |
b24e0 | 65 64 20 74 6f 20 6e 65 77 65 72 20 76 65 72 73 69 6f 6e 2c 20 6c 65 67 61 63 79 20 64 6f 63 75 | ed.to.newer.version,.legacy.docu |
b2500 | 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 70 72 65 73 65 6e 74 20 61 6e 64 20 76 | mentation.is.still.present.and.v |
b2520 | 61 6c 69 64 20 66 6f 72 20 61 6c 6c 20 73 61 67 69 74 74 61 20 76 65 72 73 69 6f 6e 20 70 72 69 | alid.for.all.sagitta.version.pri |
b2540 | 6f 72 20 74 6f 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 | or.to.VyOS.1.4-rolling-202308040 |
b2560 | 35 35 37 3a 00 41 6c 73 6f 2c 20 69 6e 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d | 557:.Also,.in.:ref:`destination- |
b2580 | 6e 61 74 60 2c 20 72 65 64 69 72 65 63 74 69 6f 6e 20 74 6f 20 6c 6f 63 61 6c 68 6f 73 74 20 69 | nat`,.redirection.to.localhost.i |
b25a0 | 73 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 20 72 65 64 69 72 65 63 74 20 73 74 61 74 65 6d | s.supported..The.redirect.statem |
b25c0 | 65 6e 74 20 69 73 20 61 20 73 70 65 63 69 61 6c 20 66 6f 72 6d 20 6f 66 20 64 6e 61 74 20 77 68 | ent.is.a.special.form.of.dnat.wh |
b25e0 | 69 63 68 20 61 6c 77 61 79 73 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 65 20 64 65 73 74 69 6e | ich.always.translates.the.destin |
b2600 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 e2 | ation.address.to.the.local.host. |
b2620 | 80 99 73 20 6f 6e 65 2e 00 41 6c 74 65 72 6e 61 74 65 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 | ..s.one..Alternate.Routing.Table |
b2640 | 73 00 41 6c 74 65 72 6e 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 72 65 20 75 | s.Alternate.routing.tables.are.u |
b2660 | 73 65 64 20 77 69 74 68 20 70 6f 6c 69 63 79 20 62 61 73 65 64 20 72 6f 75 74 69 6e 67 20 62 79 | sed.with.policy.based.routing.by |
b2680 | 20 75 74 69 6c 69 7a 69 6e 67 20 3a 72 65 66 3a 60 76 72 66 60 2e 00 41 6c 74 65 72 6e 61 74 69 | .utilizing.:ref:`vrf`..Alternati |
b26a0 | 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 | ve.to.multicast,.the.remote.IPv4 |
b26c0 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 63 61 6e | .address.of.the.VXLAN.tunnel.can |
b26e0 | 20 62 65 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 20 4c 65 74 27 73 20 63 68 61 6e 67 65 20 74 | .be.set.directly..Let's.change.t |
b2700 | 68 65 20 4d 75 6c 74 69 63 61 73 74 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 3a | he.Multicast.example.from.above: |
b2720 | 00 41 6c 77 61 79 73 20 65 78 63 6c 75 64 65 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 72 6f | .Always.exclude.this.address.fro |
b2740 | 6d 20 61 6e 79 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 2e 20 54 68 69 73 20 61 64 64 72 65 73 | m.any.defined.range..This.addres |
b2760 | 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 | s.will.never.be.assigned.by.the. |
b2780 | 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6e 20 2a 2a 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 | DHCP.server..An.**interface.grou |
b27a0 | 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 69 | p**.represents.a.collection.of.i |
b27c0 | 6e 74 65 72 66 61 63 65 73 2e 00 41 6e 20 41 53 20 69 73 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 | nterfaces..An.AS.is.a.connected. |
b27e0 | 67 72 6f 75 70 20 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 49 50 20 70 72 65 66 69 78 65 73 | group.of.one.or.more.IP.prefixes |
b2800 | 20 72 75 6e 20 62 79 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 | .run.by.one.or.more.network.oper |
b2820 | 61 74 6f 72 73 20 77 68 69 63 68 20 68 61 73 20 61 20 53 49 4e 47 4c 45 20 61 6e 64 20 43 4c 45 | ators.which.has.a.SINGLE.and.CLE |
b2840 | 41 52 4c 59 20 44 45 46 49 4e 45 44 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 2e 00 41 6e 20 | ARLY.DEFINED.routing.policy..An. |
b2860 | 49 50 76 34 20 54 43 50 20 66 69 6c 74 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | IPv4.TCP.filter.will.only.match. |
b2880 | 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 6e 20 49 50 76 34 20 68 65 61 64 65 72 20 6c 65 6e 67 | packets.with.an.IPv4.header.leng |
b28a0 | 74 68 20 6f 66 20 32 30 20 62 79 74 65 73 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 6d 61 6a | th.of.20.bytes.(which.is.the.maj |
b28c0 | 6f 72 69 74 79 20 6f 66 20 49 50 76 34 20 70 61 63 6b 65 74 73 20 61 6e 79 77 61 79 29 2e 00 41 | ority.of.IPv4.packets.anyway)..A |
b28e0 | 6e 20 53 4e 4d 50 2d 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 73 69 73 74 73 20 | n.SNMP-managed.network.consists. |
b2900 | 6f 66 20 74 68 72 65 65 20 6b 65 79 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 41 6e 20 60 3c 69 6e | of.three.key.components:.An.`<in |
b2920 | 74 65 72 66 61 63 65 3e 60 20 73 70 65 63 69 66 79 69 6e 67 20 77 68 69 63 68 20 73 6c 61 76 65 | terface>`.specifying.which.slave |
b2940 | 20 69 73 20 74 68 65 20 70 72 69 6d 61 72 79 20 64 65 76 69 63 65 2e 20 54 68 65 20 73 70 65 63 | .is.the.primary.device..The.spec |
b2960 | 69 66 69 65 64 20 64 65 76 69 63 65 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 62 65 20 74 68 65 20 | ified.device.will.always.be.the. |
b2980 | 61 63 74 69 76 65 20 73 6c 61 76 65 20 77 68 69 6c 65 20 69 74 20 69 73 20 61 76 61 69 6c 61 62 | active.slave.while.it.is.availab |
b29a0 | 6c 65 2e 20 4f 6e 6c 79 20 77 68 65 6e 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 73 20 6f 66 66 | le..Only.when.the.primary.is.off |
b29c0 | 2d 6c 69 6e 65 20 77 69 6c 6c 20 61 6c 74 65 72 6e 61 74 65 20 64 65 76 69 63 65 73 20 62 65 20 | -line.will.alternate.devices.be. |
b29e0 | 75 73 65 64 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 6f 6e 65 20 73 6c | used..This.is.useful.when.one.sl |
b2a00 | 61 76 65 20 69 73 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2c 20 65 | ave.is.preferred.over.another,.e |
b2a20 | 2e 67 2e 2c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 68 61 73 20 68 69 67 68 65 72 20 74 | .g.,.when.one.slave.has.higher.t |
b2a40 | 68 72 6f 75 67 68 70 75 74 20 74 68 61 6e 20 61 6e 6f 74 68 65 72 2e 00 41 6e 20 61 64 64 69 74 | hroughput.than.another..An.addit |
b2a60 | 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 | ional.layer.of.symmetric-key.cry |
b2a80 | 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 | pto.can.be.used.on.top.of.the.as |
b2aa0 | 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c | ymmetric.crypto..An.additional.l |
b2ac0 | 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e | ayer.of.symmetric-key.crypto.can |
b2ae0 | 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 | .be.used.on.top.of.the.asymmetri |
b2b00 | 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 | c.crypto..This.command.automatic |
b2b20 | 61 6c 6c 79 20 63 72 65 61 74 65 73 20 66 6f 72 20 79 6f 75 20 74 68 65 20 72 65 71 75 69 72 65 | ally.creates.for.you.the.require |
b2b40 | 64 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 50 53 | d.CLI.command.to.install.this.PS |
b2b60 | 4b 20 66 6f 72 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 | K.for.a.given.peer..An.additiona |
b2b80 | 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 | l.layer.of.symmetric-key.crypto. |
b2ba0 | 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 | can.be.used.on.top.of.the.asymme |
b2bc0 | 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 41 | tric.crypto..This.is.optional..A |
b2be0 | 6e 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 73 63 68 65 6d 65 20 69 73 20 74 68 | n.advantage.of.this.scheme.is.th |
b2c00 | 61 74 20 79 6f 75 20 67 65 74 20 61 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 | at.you.get.a.real.interface.with |
b2c20 | 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 69 74 | .its.own.address,.which.makes.it |
b2c40 | 20 65 61 73 69 65 72 20 74 6f 20 73 65 74 75 70 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 6f | .easier.to.setup.static.routes.o |
b2c60 | 72 20 75 73 65 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 | r.use.dynamic.routing.protocols. |
b2c80 | 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 6d 6f 64 69 66 79 20 49 50 73 65 63 20 70 | without.having.to.modify.IPsec.p |
b2ca0 | 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 6f 74 68 65 72 20 61 64 76 61 6e 74 61 67 65 20 69 73 20 | olicies..The.other.advantage.is. |
b2cc0 | 74 68 61 74 20 69 74 20 67 72 65 61 74 6c 79 20 73 69 6d 70 6c 69 66 69 65 73 20 72 6f 75 74 65 | that.it.greatly.simplifies.route |
b2ce0 | 72 20 74 6f 20 72 6f 75 74 65 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 77 68 69 63 68 | r.to.router.communication,.which |
b2d00 | 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 20 77 69 74 68 20 70 6c 61 69 6e 20 49 50 73 65 63 20 | .can.be.tricky.with.plain.IPsec. |
b2d20 | 62 65 63 61 75 73 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6f 75 74 67 6f 69 6e 67 20 61 64 | because.the.external.outgoing.ad |
b2d40 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 75 73 75 61 6c 6c 79 20 64 6f 65 73 | dress.of.the.router.usually.does |
b2d60 | 6e 27 74 20 6d 61 74 63 68 20 74 68 65 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6f 66 20 74 79 | n't.match.the.IPsec.policy.of.ty |
b2d80 | 70 69 63 61 6c 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 73 65 74 75 70 20 61 6e 64 20 79 6f 75 | pical.site-to-site.setup.and.you |
b2da0 | 20 6e 65 65 64 20 74 6f 20 61 64 64 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | .need.to.add.special.configurati |
b2dc0 | 6f 6e 20 66 6f 72 20 69 74 2c 20 6f 72 20 61 64 6a 75 73 74 20 74 68 65 20 73 6f 75 72 63 65 20 | on.for.it,.or.adjust.the.source. |
b2de0 | 61 64 64 72 65 73 73 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 6f 66 20 | address.for.outgoing.traffic.of. |
b2e00 | 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 20 47 52 45 2f 49 50 73 65 63 20 68 61 73 | your.applications..GRE/IPsec.has |
b2e20 | 20 6e 6f 20 73 75 63 68 20 70 72 6f 62 6c 65 6d 20 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 | .no.such.problem.and.is.complete |
b2e40 | 6c 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 66 6f 72 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 | ly.transparent.for.the.applicati |
b2e60 | 6f 6e 73 2e 00 41 6e 20 61 67 65 6e 74 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 2d 6d 61 6e 61 67 | ons..An.agent.is.a.network-manag |
b2e80 | 65 6d 65 6e 74 20 73 6f 66 74 77 61 72 65 20 6d 6f 64 75 6c 65 20 74 68 61 74 20 72 65 73 69 64 | ement.software.module.that.resid |
b2ea0 | 65 73 20 6f 6e 20 61 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 2e 20 41 6e 20 61 67 65 6e 74 | es.on.a.managed.device..An.agent |
b2ec0 | 20 68 61 73 20 6c 6f 63 61 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 6d 61 6e 61 67 65 6d 65 | .has.local.knowledge.of.manageme |
b2ee0 | 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 | nt.information.and.translates.th |
b2f00 | 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 6f 72 20 66 72 6f 6d 20 61 6e 20 53 4e 4d | at.information.to.or.from.an.SNM |
b2f20 | 50 2d 73 70 65 63 69 66 69 63 20 66 6f 72 6d 2e 00 41 6e 20 61 6c 74 65 72 6e 61 74 65 20 63 6f | P-specific.form..An.alternate.co |
b2f40 | 6d 6d 61 6e 64 20 63 6f 75 6c 64 20 62 65 20 22 6d 70 6c 73 2d 74 65 20 6f 6e 22 20 28 54 72 61 | mmand.could.be."mpls-te.on".(Tra |
b2f60 | 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 29 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e | ffic.Engineering).An.arbitrary.n |
b2f80 | 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 | etmask.can.be.applied.to.mask.ad |
b2fa0 | 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 | dresses.to.only.match.against.a. |
b2fc0 | 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e | specific.portion..An.arbitrary.n |
b2fe0 | 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 | etmask.can.be.applied.to.mask.ad |
b3000 | 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 | dresses.to.only.match.against.a. |
b3020 | 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 | specific.portion..This.is.partic |
b3040 | 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f | ularly.useful.with.IPv6.and.a.zo |
b3060 | 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 | ne-based.firewall.as.rules.will. |
b3080 | 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 | remain.valid.if.the.IPv6.prefix. |
b30a0 | 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 | changes.and.the.host.portion.of. |
b30c0 | 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 | systems.IPv6.address.is.static.( |
b30e0 | 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 | for.example,.with.SLAAC.or.`toke |
b3100 | 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 | nised.IPv6.addresses.<https://da |
b3120 | 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d | tatracker.ietf.org/doc/id/draft- |
b3140 | 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 | chown-6man-tokenised-ipv6-identi |
b3160 | 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 | fiers-02.txt>`_).An.arbitrary.ne |
b3180 | 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 | tmask.can.be.applied.to.mask.add |
b31a0 | 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 | resses.to.only.match.against.a.s |
b31c0 | 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 | pecific.portion..This.is.particu |
b31e0 | 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f 6e | larly.useful.with.IPv6.and.a.zon |
b3200 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 | e-based.firewall.as.rules.will.r |
b3220 | 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 | emain.valid.if.the.IPv6.prefix.c |
b3240 | 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 | hanges.and.the.host.portion.of.s |
b3260 | 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 | ystems.IPv6.address.is.static.(f |
b3280 | 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e | or.example,.with.SLAAC.or.`token |
b32a0 | 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 | ised.IPv6.addresses.<https://dat |
b32c0 | 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 | atracker.ietf.org/doc/id/draft-c |
b32e0 | 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 | hown-6man-tokenised-ipv6-identif |
b3300 | 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 2e 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 | iers-02.txt>`_)..An.arbitrary.ne |
b3320 | 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 | tmask.can.be.applied.to.mask.add |
b3340 | 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 | resses.to.only.match.against.a.s |
b3360 | 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 | pecific.portion..This.is.particu |
b3380 | 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 73 20 72 75 6c 65 73 20 | larly.useful.with.IPv6.as.rules. |
b33a0 | 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 | will.remain.valid.if.the.IPv6.pr |
b33c0 | 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f | efix.changes.and.the.host.portio |
b33e0 | 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 | n.of.systems.IPv6.address.is.sta |
b3400 | 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 | tic.(for.example,.with.SLAAC.or. |
b3420 | 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 | `tokenised.IPv6.addresses.<https |
b3440 | 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 | ://datatracker.ietf.org/doc/id/d |
b3460 | 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 | raft-chown-6man-tokenised-ipv6-i |
b3480 | 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 62 61 73 69 63 20 69 | dentifiers-02.txt>`_).An.basic.i |
b34a0 | 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 | ntroduction.to.zone-based.firewa |
b34c0 | 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f | lls.can.be.found.`here.<https:// |
b34e0 | 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 | support.vyos.io/en/kb/articles/a |
b3500 | 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 | -primer-to-zone-based-firewall>` |
b3520 | 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 | _,.and.an.example.at.:ref:`examp |
b3540 | 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 | les-zone-policy`..An.example.of. |
b3560 | 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 73 65 6e 64 73 20 60 60 74 65 6c | a.configuration.that.sends.``tel |
b3580 | 65 67 72 61 66 60 60 20 6d 65 74 72 69 63 73 20 74 6f 20 72 65 6d 6f 74 65 20 60 60 49 6e 66 6c | egraf``.metrics.to.remote.``Infl |
b35a0 | 75 78 44 42 20 32 60 60 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 63 72 65 61 74 69 6e 67 20 | uxDB.2``.An.example.of.creating. |
b35c0 | 61 20 56 4c 41 4e 2d 61 77 61 72 65 20 62 72 69 64 67 65 20 69 73 20 61 73 20 66 6f 6c 6c 6f 77 | a.VLAN-aware.bridge.is.as.follow |
b35e0 | 73 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 3a | s:.An.example.of.key.generation: |
b3600 | 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 74 68 65 20 64 61 74 61 20 63 61 70 74 75 72 65 64 | .An.example.of.the.data.captured |
b3620 | 20 62 79 20 61 20 46 52 45 45 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 69 74 68 20 73 71 6c | .by.a.FREERADIUS.server.with.sql |
b3640 | 20 61 63 63 6f 75 6e 74 69 6e 67 3a 00 41 6e 20 65 78 61 6d 70 6c 65 3a 00 41 6e 20 6f 70 74 69 | .accounting:.An.example:.An.opti |
b3660 | 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 61 20 71 75 6f 74 65 64 20 73 74 72 69 6e 67 20 69 73 | on.that.takes.a.quoted.string.is |
b3680 | 20 73 65 74 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 | .set.by.replacing.all.quote.char |
b36a0 | 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 | acters.with.the.string.``"` |
b36c0 | 60 20 69 6e 73 69 64 65 20 74 68 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 2d 70 61 72 61 | `.inside.the.static-mapping-para |
b36e0 | 6d 65 74 65 72 73 20 76 61 6c 75 65 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 6c 69 6e 65 | meters.value..The.resulting.line |
b3700 | 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 77 69 6c 6c 20 62 65 20 60 60 6f 70 74 69 6f 6e 20 | .in.dhcpd.conf.will.be.``option. |
b3720 | 70 78 65 6c 69 6e 75 78 2e 63 6f 6e 66 69 67 66 69 6c 65 20 22 70 78 65 6c 69 6e 75 78 2e 63 66 | pxelinux.configfile."pxelinux.cf |
b3740 | 67 2f 30 31 2d 30 30 2d 31 35 2d 31 37 2d 34 34 2d 32 64 2d 61 61 22 3b 60 60 2e 00 41 6e 61 6c | g/01-00-15-17-44-2d-aa";``..Anal |
b3760 | 79 73 69 73 20 6f 6e 20 77 68 61 74 20 68 61 70 70 65 6e 73 20 66 6f 72 20 64 65 73 69 72 65 64 | ysis.on.what.happens.for.desired |
b3780 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 | .connection:.And.base.chain.for. |
b37a0 | 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 | traffic.generated.by.the.router. |
b37c0 | 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 | is.``set.firewall.ipv4.output.fi |
b37e0 | 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 74 72 | lter....``.And.base.chain.for.tr |
b3800 | 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 | affic.generated.by.the.router.is |
b3820 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 | .``set.firewall.ipv6.output.filt |
b3840 | 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 65 20 73 63 72 69 | er....``.And.content.of.the.scri |
b3860 | 70 74 3a 00 41 6e 64 20 66 6f 72 20 69 70 76 36 3a 00 41 6e 64 20 6e 65 78 74 2c 20 73 6f 6d 65 | pt:.And.for.ipv6:.And.next,.some |
b3880 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 77 68 65 72 65 20 67 72 6f | .configuration.example.where.gro |
b38a0 | 75 70 73 20 61 72 65 20 75 73 65 64 3a 00 41 6e 64 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e | ups.are.used:.And.op-mode.comman |
b38c0 | 64 73 3a 00 41 6e 64 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 49 50 76 34 20 2a 2a 72 65 73 | ds:.And.the.different.IPv4.**res |
b38e0 | 65 74 2a 2a 20 63 6f 6d 6d 61 6e 64 73 20 61 76 61 69 6c 61 62 6c 65 3a 00 41 6e 64 20 74 68 65 | et**.commands.available:.And.the |
b3900 | 6e 20 68 61 73 68 20 69 73 20 72 65 64 75 63 65 64 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 | n.hash.is.reduced.modulo.slave.c |
b3920 | 6f 75 6e 74 2e 00 41 6e 64 2c 20 74 6f 20 70 72 69 6e 74 20 6f 6e 6c 79 20 62 72 69 64 67 65 20 | ount..And,.to.print.only.bridge. |
b3940 | 66 69 72 65 77 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 41 6e 6f 74 68 65 72 20 74 65 | firewall.information:.Another.te |
b3960 | 72 6d 20 6f 66 74 65 6e 20 75 73 65 64 20 66 6f 72 20 44 4e 41 54 20 69 73 20 2a 2a 31 2d 74 6f | rm.often.used.for.DNAT.is.**1-to |
b3980 | 2d 31 20 4e 41 54 2a 2a 2e 20 46 6f 72 20 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 | -1.NAT**..For.a.1-to-1.NAT.confi |
b39a0 | 67 75 72 61 74 69 6f 6e 2c 20 62 6f 74 68 20 44 4e 41 54 20 61 6e 64 20 53 4e 41 54 20 61 72 65 | guration,.both.DNAT.and.SNAT.are |
b39c0 | 20 75 73 65 64 20 74 6f 20 4e 41 54 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 61 6e | .used.to.NAT.all.traffic.from.an |
b39e0 | 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 | .external.IP.address.to.an.inter |
b3a00 | 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 76 69 63 65 2d 76 65 72 73 61 2e 00 41 | nal.IP.address.and.vice-versa..A |
b3a20 | 6e 6f 74 68 65 72 20 74 68 69 6e 67 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 77 69 74 | nother.thing.to.keep.in.mind.wit |
b3a40 | 68 20 4c 44 50 20 69 73 20 74 68 61 74 20 6d 75 63 68 20 6c 69 6b 65 20 42 47 50 2c 20 69 74 20 | h.LDP.is.that.much.like.BGP,.it. |
b3a60 | 69 73 20 61 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 72 75 6e 73 20 6f 6e 20 74 6f 70 20 6f | is.a.protocol.that.runs.on.top.o |
b3a80 | 66 20 54 43 50 2e 20 49 74 20 68 6f 77 65 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 | f.TCP..It.however.does.not.have. |
b3aa0 | 61 6e 20 61 62 69 6c 69 74 79 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 | an.ability.to.do.something.like. |
b3ac0 | 61 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 20 6c 69 6b 65 20 42 47 50 73 20 72 | a.refresh.capability.like.BGPs.r |
b3ae0 | 6f 75 74 65 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 65 72 65 66 6f | oute.refresh.capability..Therefo |
b3b00 | 72 65 20 6f 6e 65 20 6d 69 67 68 74 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e | re.one.might.have.to.reset.the.n |
b3b20 | 65 69 67 68 62 6f 72 20 66 6f 72 20 61 20 63 61 70 61 62 69 6c 69 74 79 20 63 68 61 6e 67 65 20 | eighbor.for.a.capability.change. |
b3b40 | 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 68 61 6e 67 65 20 74 6f 20 77 6f 72 | or.a.configuration.change.to.wor |
b3b60 | 6b 2e 00 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 65 78 70 65 63 74 73 20 74 68 65 20 | k..Apple.iOS/iPadOS.expects.the. |
b3b80 | 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 | server.name.to.be.also.used.in.t |
b3ba0 | 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e | he.server's.certificate.common.n |
b3bc0 | 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e | ame,.so.it's.best.to.use.this.DN |
b3be0 | 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 | S.name.for.your.VPN.connection.. |
b3c00 | 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 | Apply.a.route-map.filter.to.rout |
b3c20 | 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 | es.for.the.specified.protocol..A |
b3c40 | 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 | pply.a.route-map.filter.to.route |
b3c60 | 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 | s.for.the.specified.protocol..Th |
b3c80 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 | e.following.protocols.can.be.use |
b3ca0 | 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 | d:.any,.babel,.bgp,.connected,.e |
b3cc0 | 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 | igrp,.isis,.kernel,.ospf,.rip,.s |
b3ce0 | 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 | tatic,.table.Apply.a.route-map.f |
b3d00 | 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 | ilter.to.routes.for.the.specifie |
b3d20 | 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 | d.protocol..The.following.protoc |
b3d40 | 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 | ols.can.be.used:.any,.babel,.bgp |
b3d60 | 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 | ,.connected,.isis,.kernel,.ospfv |
b3d80 | 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 72 6f | 3,.ripng,.static,.table.Apply.ro |
b3da0 | 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 64 69 72 65 | uting.policy.to.**inbound**.dire |
b3dc0 | 63 74 69 6f 6e 20 6f 66 20 6f 75 74 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 00 41 70 70 | ction.of.out.VLAN.interfaces.App |
b3de0 | 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 20 5a 6f 6e 65 00 41 70 70 6c 79 | lying.a.Rule-Set.to.a.Zone.Apply |
b3e00 | 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 6e 20 49 6e 74 65 72 66 61 63 65 00 41 | ing.a.Rule-Set.to.an.Interface.A |
b3e20 | 70 70 6c 79 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 41 72 65 61 20 43 6f | pplying.a.traffic.policy.Area.Co |
b3e40 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 41 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 30 | nfiguration.Area.identifier:.``0 |
b3e60 | 30 30 31 60 60 20 49 53 2d 49 53 20 61 72 65 61 20 6e 75 6d 62 65 72 20 28 6e 75 6d 62 65 72 69 | 001``.IS-IS.area.number.(numberi |
b3e80 | 63 61 6c 20 61 72 65 61 20 60 60 31 60 60 29 00 41 72 67 75 6d 65 6e 74 73 20 77 68 69 63 68 20 | cal.area.``1``).Arguments.which. |
b3ea0 | 77 69 6c 6c 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 74 68 65 20 65 78 65 63 75 74 61 62 6c 65 | will.be.passed.to.the.executable |
b3ec0 | 2e 00 41 72 69 73 74 61 20 45 4f 53 00 41 72 75 62 61 2f 48 50 00 41 73 20 49 6e 74 65 72 6e 65 | ..Arista.EOS.Aruba/HP.As.Interne |
b3ee0 | 74 20 77 69 64 65 20 50 4d 54 55 20 64 69 73 63 6f 76 65 72 79 20 72 61 72 65 6c 79 20 77 6f 72 | t.wide.PMTU.discovery.rarely.wor |
b3f00 | 6b 73 2c 20 77 65 20 73 6f 6d 65 74 69 6d 65 73 20 6e 65 65 64 20 74 6f 20 63 6c 61 6d 70 20 6f | ks,.we.sometimes.need.to.clamp.o |
b3f20 | 75 72 20 54 43 50 20 4d 53 53 20 76 61 6c 75 65 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 | ur.TCP.MSS.value.to.a.specific.v |
b3f40 | 61 6c 75 65 2e 20 54 68 69 73 20 69 73 20 61 20 66 69 65 6c 64 20 69 6e 20 74 68 65 20 54 43 50 | alue..This.is.a.field.in.the.TCP |
b3f60 | 20 6f 70 74 69 6f 6e 73 20 70 61 72 74 20 6f 66 20 61 20 53 59 4e 20 70 61 63 6b 65 74 2e 20 42 | .options.part.of.a.SYN.packet..B |
b3f80 | 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 4d 53 53 20 76 61 6c 75 65 2c 20 79 6f 75 20 61 72 65 | y.setting.the.MSS.value,.you.are |
b3fa0 | 20 74 65 6c 6c 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 75 6e 65 71 75 69 76 | .telling.the.remote.side.unequiv |
b3fc0 | 6f 63 61 6c 6c 79 20 27 64 6f 20 6e 6f 74 20 74 72 79 20 74 6f 20 73 65 6e 64 20 6d 65 20 70 61 | ocally.'do.not.try.to.send.me.pa |
b3fe0 | 63 6b 65 74 73 20 62 69 67 67 65 72 20 74 68 61 6e 20 74 68 69 73 20 76 61 6c 75 65 27 2e 00 41 | ckets.bigger.than.this.value'..A |
b4000 | 73 20 53 53 54 50 20 70 72 6f 76 69 64 65 73 20 50 50 50 20 76 69 61 20 61 20 53 53 4c 2f 54 4c | s.SSTP.provides.PPP.via.a.SSL/TL |
b4020 | 53 20 63 68 61 6e 6e 65 6c 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 70 75 62 6c | S.channel.the.use.of.either.publ |
b4040 | 69 63 61 6c 6c 79 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 73 20 77 65 | ically.signed.certificates.as.we |
b4060 | 6c 6c 20 61 73 20 61 20 70 72 69 76 61 74 65 20 50 4b 49 20 69 73 20 72 65 71 75 69 72 65 64 2e | ll.as.a.private.PKI.is.required. |
b4080 | 00 41 73 20 56 79 4f 53 20 69 73 20 4c 69 6e 75 78 20 62 61 73 65 64 20 74 68 65 20 64 65 66 61 | .As.VyOS.is.Linux.based.the.defa |
b40a0 | 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 69 73 20 6e 6f 74 20 75 73 69 6e 67 20 34 37 38 39 20 | ult.port.used.is.not.using.4789. |
b40c0 | 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 | as.the.default.IANA-assigned.des |
b40e0 | 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 49 6e 73 74 65 61 | tination.UDP.port.number..Instea |
b4100 | 64 20 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 4c 69 6e 75 78 20 64 65 66 61 75 6c 74 20 70 6f | d.VyOS.uses.the.Linux.default.po |
b4120 | 72 74 20 6f 66 20 38 34 37 32 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 | rt.of.8472..As.VyOS.is.based.on. |
b4140 | 4c 69 6e 75 78 20 61 6e 64 20 74 68 65 72 65 20 77 61 73 20 6e 6f 20 6f 66 66 69 63 69 61 6c 20 | Linux.and.there.was.no.official. |
b4160 | 49 41 4e 41 20 70 6f 72 74 20 61 73 73 69 67 6e 65 64 20 66 6f 72 20 56 58 4c 41 4e 2c 20 56 79 | IANA.port.assigned.for.VXLAN,.Vy |
b4180 | 4f 53 20 75 73 65 73 20 61 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 20 | OS.uses.a.default.port.of.8472.. |
b41a0 | 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 6f 72 74 20 6f 6e 20 61 20 70 65 72 | You.can.change.the.port.on.a.per |
b41c0 | 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 67 65 74 20 69 74 | .VXLAN.interface.basis.to.get.it |
b41e0 | 20 77 6f 72 6b 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 76 65 6e 64 6f 72 73 | .working.across.multiple.vendors |
b4200 | 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 69 74 20 6c | ..As.VyOS.is.based.on.Linux.it.l |
b4220 | 65 76 65 72 61 67 65 73 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 20 54 68 65 20 4e 65 74 66 69 | everages.its.firewall..The.Netfi |
b4240 | 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 69 70 74 61 62 6c 65 73 20 61 6e | lter.project.created.iptables.an |
b4260 | 64 20 69 74 73 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 | d.its.successor.nftables.for.the |
b4280 | 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f | .Linux.kernel.to.work.directly.o |
b42a0 | 6e 20 70 61 63 6b 65 74 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 | n.packet.data.flows..This.now.ex |
b42c0 | 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 | tends.the.concept.of.zone-based. |
b42e0 | 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 | security.to.allow.for.manipulati |
b4300 | 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f | ng.the.data.at.multiple.stages.o |
b4320 | 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 | nce.accepted.by.the.network.inte |
b4340 | 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e | rface.and.the.driver.before.bein |
b4360 | 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | g.handed.off.to.the.destination. |
b4380 | 28 65 2e 67 2e 2c 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 | (e.g.,.a.web.server.OR.another.d |
b43a0 | 65 76 69 63 65 29 2e 00 41 73 20 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 | evice)..As.VyOS.makes.use.of.the |
b43c0 | 20 51 4d 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 | .QMI.interface.to.connect.to.the |
b43e0 | 20 57 57 41 4e 20 6d 6f 64 65 6d 20 63 61 72 64 73 2c 20 61 6c 73 6f 20 74 68 65 20 66 69 72 6d | .WWAN.modem.cards,.also.the.firm |
b4400 | 77 61 72 65 20 63 61 6e 20 62 65 20 72 65 70 72 6f 67 72 61 6d 6d 65 64 2e 00 41 73 20 61 20 72 | ware.can.be.reprogrammed..As.a.r |
b4420 | 65 66 65 72 65 6e 63 65 3a 20 66 6f 72 20 31 30 6d 62 69 74 2f 73 20 6f 6e 20 49 6e 74 65 6c 2c | eference:.for.10mbit/s.on.Intel, |
b4440 | 20 79 6f 75 20 6d 69 67 68 74 20 6e 65 65 64 20 61 74 20 6c 65 61 73 74 20 31 30 6b 62 79 74 65 | .you.might.need.at.least.10kbyte |
b4460 | 20 62 75 66 66 65 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 61 63 68 20 79 6f 75 | .buffer.if.you.want.to.reach.you |
b4480 | 72 20 63 6f 6e 66 69 67 75 72 65 64 20 72 61 74 65 2e 00 41 73 20 61 20 72 65 73 75 6c 74 2c 20 | r.configured.rate..As.a.result,. |
b44a0 | 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 65 61 63 68 20 70 61 63 6b 65 74 20 62 65 | the.processing.of.each.packet.be |
b44c0 | 63 6f 6d 65 73 20 6d 6f 72 65 20 65 66 66 69 63 69 65 6e 74 2c 20 70 6f 74 65 6e 74 69 61 6c 6c | comes.more.efficient,.potentiall |
b44e0 | 79 20 6c 65 76 65 72 61 67 69 6e 67 20 68 61 72 64 77 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e | y.leveraging.hardware.encryption |
b4500 | 20 6f 66 66 6c 6f 61 64 69 6e 67 20 73 75 70 70 6f 72 74 20 61 76 61 69 6c 61 62 6c 65 20 69 6e | .offloading.support.available.in |
b4520 | 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 41 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 | .the.kernel..As.an.alternative.t |
b4540 | 6f 20 61 70 70 6c 79 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 | o.applying.policy.to.an.interfac |
b4560 | 65 20 64 69 72 65 63 74 6c 79 2c 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c | e.directly,.a.zone-based.firewal |
b4580 | 6c 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 74 6f 20 73 69 6d 70 6c 69 66 79 20 63 6f 6e | l.can.be.created.to.simplify.con |
b45a0 | 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 6e 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 | figuration.when.multiple.interfa |
b45c0 | 63 65 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 63 75 72 69 74 79 20 | ces.belong.to.the.same.security. |
b45e0 | 7a 6f 6e 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 61 70 70 6c 79 69 6e 67 20 72 75 6c 65 2d 73 | zone..Instead.of.applying.rule-s |
b4600 | 65 74 73 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 79 20 61 72 65 20 61 70 70 6c | ets.to.interfaces,.they.are.appl |
b4620 | 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 7a 6f 6e 65 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 7a | ied.to.source.zone-destination.z |
b4640 | 6f 6e 65 20 70 61 69 72 73 2e 00 41 73 20 62 6f 74 68 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e | one.pairs..As.both.Microsoft.Win |
b4660 | 64 6f 77 73 20 61 6e 64 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 6e 6c 79 20 73 | dows.and.Apple.iOS/iPadOS.only.s |
b4680 | 75 70 70 6f 72 74 20 61 20 63 65 72 74 61 69 6e 20 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 | upport.a.certain.set.of.encrypti |
b46a0 | 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 | on.ciphers.and.integrity.algorit |
b46c0 | 68 6d 73 20 77 65 20 77 69 6c 6c 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 | hms.we.will.validate.the.configu |
b46e0 | 72 65 64 20 49 4b 45 2f 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 6f 6e 6c 79 20 6c | red.IKE/ESP.proposals.and.only.l |
b4700 | 69 73 74 20 74 68 65 20 63 6f 6d 70 61 74 69 62 6c 65 20 6f 6e 65 73 20 74 6f 20 74 68 65 20 75 | ist.the.compatible.ones.to.the.u |
b4720 | 73 65 72 20 e2 80 94 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 61 72 65 20 64 65 66 69 6e 65 64 2e | ser.....if.multiple.are.defined. |
b4740 | 20 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 70 72 6f 70 6f 73 | .If.there.are.no.matching.propos |
b4760 | 61 6c 73 20 66 6f 75 6e 64 20 e2 80 94 20 77 65 20 63 61 6e 20 6e 6f 74 20 67 65 6e 65 72 61 74 | als.found.....we.can.not.generat |
b4780 | 65 20 61 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 79 6f 75 2e 00 41 73 20 64 65 73 63 72 69 62 65 | e.a.profile.for.you..As.describe |
b47a0 | 64 2c 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 65 76 61 6c 75 61 74 65 | d,.first.packet.will.be.evaluate |
b47c0 | 64 20 62 79 20 61 6c 6c 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 70 61 74 68 2c 20 73 6f 20 64 | d.by.all.the.firewall.path,.so.d |
b47e0 | 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 65 78 70 6c | esired.connection.should.be.expl |
b4800 | 69 63 69 74 65 6c 79 20 61 63 63 65 70 74 65 64 2e 20 53 61 6d 65 20 74 68 69 6e 67 20 73 68 6f | icitely.accepted..Same.thing.sho |
b4820 | 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 74 72 | uld.be.taken.into.account.for.tr |
b4840 | 61 66 66 69 63 20 69 6e 20 72 65 76 65 72 73 65 20 6f 72 64 65 72 2e 20 49 6e 20 6d 6f 73 74 20 | affic.in.reverse.order..In.most. |
b4860 | 63 61 73 65 73 20 73 74 61 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 69 6e | cases.state.policies.are.used.in |
b4880 | 20 6f 72 64 65 72 20 74 6f 20 61 63 63 65 70 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 6e 20 72 | .order.to.accept.connection.in.r |
b48a0 | 65 76 65 72 73 65 20 70 61 74 63 68 2e 00 41 73 20 6d 6f 72 65 20 61 6e 64 20 6d 6f 72 65 20 72 | everse.patch..As.more.and.more.r |
b48c0 | 6f 75 74 65 72 73 20 72 75 6e 20 6f 6e 20 48 79 70 65 72 76 69 73 6f 72 73 2c 20 65 78 70 65 63 | outers.run.on.Hypervisors,.expec |
b48e0 | 69 61 6c 6c 79 20 77 69 74 68 20 61 20 3a 61 62 62 72 3a 60 4e 4f 53 20 28 4e 65 74 77 6f 72 6b | ially.with.a.:abbr:`NOS.(Network |
b4900 | 20 4f 70 65 72 61 74 69 6e 67 20 53 79 73 74 65 6d 29 60 20 61 73 20 56 79 4f 53 2c 20 69 74 20 | .Operating.System)`.as.VyOS,.it. |
b4920 | 6d 61 6b 65 73 20 66 65 77 65 72 20 61 6e 64 20 66 65 77 65 72 20 73 65 6e 73 65 20 74 6f 20 75 | makes.fewer.and.fewer.sense.to.u |
b4940 | 73 65 20 73 74 61 74 69 63 20 72 65 73 6f 75 72 63 65 20 62 69 6e 64 69 6e 67 73 20 6c 69 6b 65 | se.static.resource.bindings.like |
b4960 | 20 60 60 73 6d 70 2d 61 66 66 69 6e 69 74 79 60 60 20 61 73 20 70 72 65 73 65 6e 74 20 69 6e 20 | .``smp-affinity``.as.present.in. |
b4980 | 56 79 4f 53 20 31 2e 32 20 61 6e 64 20 65 61 72 6c 69 65 72 20 74 6f 20 70 69 6e 20 63 65 72 74 | VyOS.1.2.and.earlier.to.pin.cert |
b49a0 | 61 69 6e 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 73 20 74 6f 20 73 70 65 63 69 66 | ain.interrupt.handlers.to.specif |
b49c0 | 69 63 20 43 50 55 73 2e 00 41 73 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 74 72 61 6e | ic.CPUs..As.network.address.tran |
b49e0 | 73 6c 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | slation.modifies.the.IP.address. |
b4a00 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 70 61 63 6b 65 74 73 2c 20 4e 41 54 20 69 6d 70 6c | information.in.packets,.NAT.impl |
b4a20 | 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6d 61 79 20 76 61 72 79 20 69 6e 20 74 68 65 69 72 20 73 70 | ementations.may.vary.in.their.sp |
b4a40 | 65 63 69 66 69 63 20 62 65 68 61 76 69 6f 72 20 69 6e 20 76 61 72 69 6f 75 73 20 61 64 64 72 65 | ecific.behavior.in.various.addre |
b4a60 | 73 73 69 6e 67 20 63 61 73 65 73 20 61 6e 64 20 74 68 65 69 72 20 65 66 66 65 63 74 20 6f 6e 20 | ssing.cases.and.their.effect.on. |
b4a80 | 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 70 65 63 69 66 69 63 73 20 6f | network.traffic..The.specifics.o |
b4aa0 | 66 20 4e 41 54 20 62 65 68 61 76 69 6f 72 20 61 72 65 20 6e 6f 74 20 63 6f 6d 6d 6f 6e 6c 79 20 | f.NAT.behavior.are.not.commonly. |
b4ac0 | 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 76 65 6e 64 6f 72 73 20 6f 66 20 65 71 75 69 70 6d 65 | documented.by.vendors.of.equipme |
b4ae0 | 6e 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e | nt.containing.NAT.implementation |
b4b00 | 73 2e 00 41 73 20 6f 66 20 56 79 4f 53 20 31 2e 34 2c 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d | s..As.of.VyOS.1.4,.OpenVPN.site- |
b4b20 | 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 63 61 6e 20 75 73 65 20 65 69 74 68 65 72 20 70 72 65 2d | to-site.mode.can.use.either.pre- |
b4b40 | 73 68 61 72 65 64 20 6b 65 79 73 20 6f 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 | shared.keys.or.x.509.certificate |
b4b60 | 73 2e 00 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 20 61 6e 64 20 69 66 20 6e 6f 74 20 6f 74 68 | s..As.per.default.and.if.not.oth |
b4b80 | 65 72 77 69 73 65 20 64 65 66 69 6e 65 64 2c 20 6d 73 63 68 61 70 2d 76 32 20 69 73 20 62 65 69 | erwise.defined,.mschap-v2.is.bei |
b4ba0 | 6e 67 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 6d | ng.used.for.authentication.and.m |
b4bc0 | 70 70 65 20 31 32 38 2d 62 69 74 20 28 73 74 61 74 65 6c 65 73 73 29 20 66 6f 72 20 65 6e 63 72 | ppe.128-bit.(stateless).for.encr |
b4be0 | 79 70 74 69 6f 6e 2e 20 49 66 20 6e 6f 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 69 73 | yption..If.no.gateway-address.is |
b4c00 | 20 73 65 74 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 | .set.within.the.configuration,.t |
b4c20 | 68 65 20 6c 6f 77 65 73 74 20 49 50 20 6f 75 74 20 6f 66 20 74 68 65 20 2f 32 34 20 63 6c 69 65 | he.lowest.IP.out.of.the./24.clie |
b4c40 | 6e 74 2d 69 70 2d 70 6f 6f 6c 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 2e 20 46 6f 72 20 69 6e | nt-ip-pool.is.being.used..For.in |
b4c60 | 73 74 61 6e 63 65 2c 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 69 74 20 | stance,.in.the.example.below.it. |
b4c80 | 77 6f 75 6c 64 20 62 65 20 31 39 32 2e 31 36 38 2e 30 2e 31 2e 00 41 73 20 73 61 69 64 20 62 65 | would.be.192.168.0.1..As.said.be |
b4ca0 | 66 6f 72 65 2c 20 6f 6e 63 65 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 61 72 65 20 63 | fore,.once.firewall.groups.are.c |
b4cc0 | 72 65 61 74 65 64 2c 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 65 | reated,.they.can.be.referenced.e |
b4ce0 | 69 74 68 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 2c 20 6e 61 74 36 36 20 61 6e | ither.in.firewall,.nat,.nat66.an |
b4d00 | 64 2f 6f 72 20 70 6f 6c 69 63 79 2d 72 6f 75 74 65 20 72 75 6c 65 73 2e 00 41 73 20 73 68 6f 77 | d/or.policy-route.rules..As.show |
b4d20 | 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 6f 6e 65 20 6f 66 20 74 | n.in.the.example.above,.one.of.t |
b4d40 | 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 74 6f 20 6d 61 74 63 68 20 70 61 63 6b 65 74 | he.possibilities.to.match.packet |
b4d60 | 73 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6d 61 72 6b 73 20 64 6f 6e 65 20 62 79 20 74 68 65 20 | s.is.based.on.marks.done.by.the. |
b4d80 | 66 69 72 65 77 61 6c 6c 2c 20 60 74 68 61 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 67 | firewall,.`that.can.give.you.a.g |
b4da0 | 72 65 61 74 20 64 65 61 6c 20 6f 66 20 66 6c 65 78 69 62 69 6c 69 74 79 60 5f 2e 00 41 73 20 73 | reat.deal.of.flexibility`_..As.s |
b4dc0 | 68 6f 77 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 6f 66 20 74 68 65 20 | hown.in.the.last.command.of.the. |
b4de0 | 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 60 71 75 65 75 65 2d 74 79 70 65 60 20 | example.above,.the.`queue-type`. |
b4e00 | 73 65 74 74 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 73 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e | setting.allows.these.combination |
b4e20 | 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 74 20 69 6e | s..You.will.be.able.to.use.it.in |
b4e40 | 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 | .many.policies..As.the.example.i |
b4e60 | 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 20 6e 6f 77 | mage.below.shows,.the.device.now |
b4e80 | 20 6e 65 65 64 73 20 72 75 6c 65 73 20 74 6f 20 61 6c 6c 6f 77 2f 62 6c 6f 63 6b 20 74 72 61 66 | .needs.rules.to.allow/block.traf |
b4ea0 | 66 69 63 20 74 6f 20 6f 72 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e | fic.to.or.from.the.services.runn |
b4ec0 | 69 6e 67 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 74 68 61 74 20 68 61 76 65 20 6f 70 65 6e | ing.on.the.device.that.have.open |
b4ee0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 | .connections.on.that.interface.. |
b4f00 | 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 | As.the.example.image.below.shows |
b4f20 | 2c 20 74 68 65 20 64 65 76 69 63 65 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 | ,.the.device.was.configured.with |
b4f40 | 20 72 75 6c 65 73 20 62 6c 6f 63 6b 69 6e 67 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f | .rules.blocking.inbound.or.outbo |
b4f60 | 75 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 2e 00 41 | und.traffic.on.each.interface..A |
b4f80 | 73 20 74 68 65 20 6e 61 6d 65 20 69 6d 70 6c 69 65 73 2c 20 69 74 27 73 20 49 50 76 34 20 65 6e | s.the.name.implies,.it's.IPv4.en |
b4fa0 | 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 49 50 76 36 2c 20 61 73 20 73 69 6d 70 6c 65 20 61 73 | capsulated.in.IPv6,.as.simple.as |
b4fc0 | 20 74 68 61 74 2e 00 41 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 62 65 6c 6f 77 20 74 6f 20 61 | .that..As.well.as.the.below.to.a |
b4fe0 | 6c 6c 6f 77 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 20 28 77 68 65 6e 20 4e 41 54 20 69 73 20 | llow.NAT-traversal.(when.NAT.is. |
b5000 | 64 65 74 65 63 74 65 64 20 62 79 20 74 68 65 20 56 50 4e 20 63 6c 69 65 6e 74 2c 20 45 53 50 20 | detected.by.the.VPN.client,.ESP. |
b5020 | 69 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 55 44 50 20 66 6f 72 20 4e 41 54 2d 74 | is.encapsulated.in.UDP.for.NAT-t |
b5040 | 72 61 76 65 72 73 61 6c 29 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 | raversal):.As.with.other.policie |
b5060 | 73 2c 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 6e 6f 74 68 65 | s,.Round-Robin.can.embed_.anothe |
b5080 | 72 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 | r.policy.into.a.class.through.th |
b50a0 | 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 41 73 20 77 69 74 | e.``queue-type``.setting..As.wit |
b50c0 | 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 53 68 61 70 65 72 20 63 61 6e 20 65 6d 62 | h.other.policies,.Shaper.can.emb |
b50e0 | 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f 20 69 74 73 20 63 6c 61 73 | ed_.other.policies.into.its.clas |
b5100 | 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 | ses.through.the.``queue-type``.s |
b5120 | 65 74 74 69 6e 67 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 69 72 20 | etting.and.then.configure.their. |
b5140 | 70 61 72 61 6d 65 74 65 72 73 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 | parameters..As.with.other.polici |
b5160 | 65 73 2c 20 79 6f 75 20 63 61 6e 20 64 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 | es,.you.can.define.different.typ |
b5180 | 65 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 79 6f 75 72 20 63 6c 61 | e.of.matching.rules.for.your.cla |
b51a0 | 73 73 65 73 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f | sses:.As.with.other.policies,.yo |
b51c0 | 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f | u.can.embed_.other.policies.into |
b51e0 | 20 74 68 65 20 63 6c 61 73 73 65 73 20 28 61 6e 64 20 64 65 66 61 75 6c 74 29 20 6f 66 20 79 6f | .the.classes.(and.default).of.yo |
b5200 | 75 72 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 20 74 68 72 6f 75 67 68 | ur.Priority.Queue.policy.through |
b5220 | 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 3a 00 41 73 20 | .the.``queue-type``.setting:.As. |
b5240 | 79 6f 75 20 63 61 6e 20 73 65 65 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 68 65 72 65 2c | you.can.see.in.the.example.here, |
b5260 | 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 72 75 6c 65 2d 73 65 | .you.can.assign.the.same.rule-se |
b5280 | 74 20 74 6f 20 73 65 76 65 72 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 6e 20 69 6e 74 65 | t.to.several.interfaces..An.inte |
b52a0 | 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 68 61 76 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 | rface.can.only.have.one.rule-set |
b52c0 | 20 70 65 72 20 63 68 61 69 6e 2e 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 2c 20 4c 65 61 66 | .per.chain..As.you.can.see,.Leaf |
b52e0 | 32 20 61 6e 64 20 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6c 6d | 2.and.Leaf3.configuration.is.alm |
b5300 | 6f 73 74 20 69 64 65 6e 74 69 63 61 6c 2e 20 54 68 65 72 65 20 61 72 65 20 6c 6f 74 73 20 6f 66 | ost.identical..There.are.lots.of |
b5320 | 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 2c 20 49 27 6c 6c 20 74 72 79 20 74 6f 20 69 6e 74 | .commands.above,.I'll.try.to.int |
b5340 | 6f 20 6d 6f 72 65 20 64 65 74 61 69 6c 20 62 65 6c 6f 77 2c 20 63 6f 6d 6d 61 6e 64 20 64 65 73 | o.more.detail.below,.command.des |
b5360 | 63 72 69 70 74 69 6f 6e 73 20 61 72 65 20 70 6c 61 63 65 64 20 75 6e 64 65 72 20 74 68 65 20 63 | criptions.are.placed.under.the.c |
b5380 | 6f 6d 6d 61 6e 64 20 62 6f 78 65 73 3a 00 41 73 73 69 67 6e 20 60 3c 6d 65 6d 62 65 72 3e 60 20 | ommand.boxes:.Assign.`<member>`. |
b53a0 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 72 69 64 67 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | interface.to.bridge.`<interface> |
b53c0 | 60 2e 20 41 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 68 65 6c 70 | `..A.completion.helper.will.help |
b53e0 | 20 79 6f 75 20 77 69 74 68 20 61 6c 6c 20 61 6c 6c 6f 77 65 64 20 69 6e 74 65 72 66 61 63 65 73 | .you.with.all.allowed.interfaces |
b5400 | 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 2e 20 54 68 69 73 20 69 6e 63 6c | .which.can.be.bridged..This.incl |
b5420 | 75 64 65 73 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 | udes.:ref:`ethernet-interface`,. |
b5440 | 3a 72 65 66 3a 60 62 6f 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6c 32 74 | :ref:`bond-interface`,.:ref:`l2t |
b5460 | 70 76 33 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6f 70 65 6e 76 70 6e 60 2c 20 | pv3-interface`,.:ref:`openvpn`,. |
b5480 | 3a 72 65 66 3a 60 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 77 69 | :ref:`vxlan-interface`,.:ref:`wi |
b54a0 | 72 65 6c 65 73 73 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d | reless-interface`,.:ref:`tunnel- |
b54c0 | 69 6e 74 65 72 66 61 63 65 60 20 61 6e 64 20 3a 72 65 66 3a 60 67 65 6e 65 76 65 2d 69 6e 74 65 | interface`.and.:ref:`geneve-inte |
b54e0 | 72 66 61 63 65 60 2e 00 41 73 73 69 67 6e 20 61 20 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e | rface`..Assign.a.specific.backen |
b5500 | 64 20 74 6f 20 61 20 72 75 6c 65 00 41 73 73 69 67 6e 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 | d.to.a.rule.Assign.interface.ide |
b5520 | 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 74 6f 20 56 52 46 20 | ntified.by.`<interface>`.to.VRF. |
b5540 | 6e 61 6d 65 64 20 60 3c 6e 61 6d 65 3e 60 2e 00 41 73 73 69 67 6e 20 6d 65 6d 62 65 72 20 69 6e | named.`<name>`..Assign.member.in |
b5560 | 74 65 72 66 61 63 65 73 20 74 6f 20 50 6f 72 74 43 68 61 6e 6e 65 6c 00 41 73 73 69 67 6e 20 73 | terfaces.to.PortChannel.Assign.s |
b5580 | 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 60 3c 75 73 65 72 3e 60 20 61 63 63 | tatic.IP.address.to.`<user>`.acc |
b55a0 | 6f 75 6e 74 2e 00 41 73 73 69 67 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 | ount..Assign.the.IP.address.to.t |
b55c0 | 68 69 73 20 6d 61 63 68 69 6e 65 20 66 6f 72 20 60 3c 74 69 6d 65 3e 60 20 73 65 63 6f 6e 64 73 | his.machine.for.`<time>`.seconds |
b55e0 | 2e 00 41 73 73 69 67 6e 20 74 68 65 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 | ..Assign.the.SSH.public.key.port |
b5600 | 69 6f 6e 20 60 3c 6b 65 79 3e 60 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 70 65 72 2d 6b 65 | ion.`<key>`.identified.by.per-ke |
b5620 | 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 | y.`<identifier>`.to.the.local.us |
b5640 | 65 72 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 2e 00 41 73 73 6f 63 69 61 74 65 73 20 74 68 65 20 | er.`<username>`..Associates.the. |
b5660 | 70 72 65 76 69 6f 75 73 6c 79 20 67 65 6e 65 72 61 74 65 64 20 70 72 69 76 61 74 65 20 6b 65 79 | previously.generated.private.key |
b5680 | 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 | .to.a.specific.WireGuard.interfa |
b56a0 | 63 65 2e 20 54 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 63 61 6e 20 62 65 20 67 65 6e 65 72 | ce..The.private.key.can.be.gener |
b56c0 | 61 74 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 00 41 73 73 75 72 65 20 74 68 61 74 20 | ate.via.the.command.Assure.that. |
b56e0 | 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 6c 6c 6f 77 20 74 68 65 20 74 72 | your.firewall.rules.allow.the.tr |
b5700 | 61 66 66 69 63 2c 20 69 6e 20 77 68 69 63 68 20 63 61 73 65 20 79 6f 75 20 68 61 76 65 20 61 20 | affic,.in.which.case.you.have.a. |
b5720 | 77 6f 72 6b 69 6e 67 20 56 50 4e 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 2e 00 41 73 73 | working.VPN.using.WireGuard..Ass |
b5740 | 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 31 00 41 73 73 75 72 65 64 20 46 | ured.Forwarding(AF).11.Assured.F |
b5760 | 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 | orwarding(AF).12.Assured.Forward |
b5780 | 69 6e 67 28 41 46 29 20 31 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 | ing(AF).13.Assured.Forwarding(AF |
b57a0 | 29 20 32 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 32 00 41 | ).21.Assured.Forwarding(AF).22.A |
b57c0 | 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 33 00 41 73 73 75 72 65 64 | ssured.Forwarding(AF).23.Assured |
b57e0 | 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 | .Forwarding(AF).31.Assured.Forwa |
b5800 | 72 64 69 6e 67 28 41 46 29 20 33 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 | rding(AF).32.Assured.Forwarding( |
b5820 | 41 46 29 20 33 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 31 | AF).33.Assured.Forwarding(AF).41 |
b5840 | 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 32 00 41 73 73 75 72 | .Assured.Forwarding(AF).42.Assur |
b5860 | 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 33 00 41 74 20 65 76 65 72 79 20 72 6f | ed.Forwarding(AF).43.At.every.ro |
b5880 | 75 6e 64 2c 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 61 64 64 73 20 74 68 | und,.the.deficit.counter.adds.th |
b58a0 | 65 20 71 75 61 6e 74 75 6d 20 73 6f 20 74 68 61 74 20 65 76 65 6e 20 6c 61 72 67 65 20 70 61 63 | e.quantum.so.that.even.large.pac |
b58c0 | 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 6f 70 70 6f 72 74 75 6e 69 74 79 | kets.will.have.their.opportunity |
b58e0 | 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 2e 00 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 69 | .to.be.dequeued..At.the.moment.i |
b5900 | 74 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 77 68 | t.not.possible.to.look.at.the.wh |
b5920 | 6f 6c 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 20 77 69 74 68 20 56 79 4f 53 20 6f 70 65 72 61 | ole.firewall.log.with.VyOS.opera |
b5940 | 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 41 6c 6c 20 6c 6f 67 73 20 77 69 6c 6c 20 73 | tional.commands..All.logs.will.s |
b5960 | 61 76 65 20 74 6f 20 60 60 2f 76 61 72 2f 6c 6f 67 73 2f 6d 65 73 73 61 67 65 73 60 60 2e 20 46 | ave.to.``/var/logs/messages``..F |
b5980 | 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 67 72 65 70 20 27 31 30 2e 31 30 2e 30 2e 31 30 27 20 | or.example:.``grep.'10.10.0.10'. |
b59a0 | 2f 76 61 72 2f 6c 6f 67 2f 6d 65 73 73 61 67 65 73 60 60 00 41 74 20 74 68 65 20 74 69 6d 65 20 | /var/log/messages``.At.the.time. |
b59c0 | 6f 66 20 74 68 69 73 20 77 72 69 74 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 69 | of.this.writing.the.following.di |
b59e0 | 73 70 6c 61 79 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 41 74 20 76 65 72 79 20 6c 6f | splays.are.supported:.At.very.lo |
b5a00 | 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 33 4d 62 69 74 29 2c 20 62 65 73 69 64 65 73 20 74 | w.rates.(below.3Mbit),.besides.t |
b5a20 | 75 6e 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 28 33 30 30 20 6b 65 65 70 73 20 62 65 69 6e 67 | uning.`quantum`.(300.keeps.being |
b5a40 | 20 6f 6b 29 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 77 61 6e 74 20 74 6f 20 69 6e 63 72 65 61 | .ok).you.may.also.want.to.increa |
b5a60 | 73 65 20 60 74 61 72 67 65 74 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 31 35 | se.`target`.to.something.like.15 |
b5a80 | 6d 73 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 60 69 6e 74 65 72 76 61 6c 60 20 74 6f 20 73 6f | ms.and.increase.`interval`.to.so |
b5aa0 | 6d 65 74 68 69 6e 67 20 61 72 6f 75 6e 64 20 31 35 30 20 6d 73 2e 00 41 74 74 61 63 68 65 73 20 | mething.around.150.ms..Attaches. |
b5ac0 | 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 63 6f 6e 74 61 69 | user-defined.network.to.a.contai |
b5ae0 | 6e 65 72 2e 20 4f 6e 6c 79 20 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 62 65 20 73 70 | ner..Only.one.network.must.be.sp |
b5b00 | 65 63 69 66 69 65 64 20 61 6e 64 20 6d 75 73 74 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 2e 00 | ecified.and.must.already.exist.. |
b5b20 | 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 45 | Authentication.Authentication.(E |
b5b40 | 41 50 6f 4c 29 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 41 64 76 61 6e 63 65 64 20 4f 70 | APoL).Authentication.Advanced.Op |
b5b60 | 74 69 6f 6e 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e | tions.Authentication.application |
b5b80 | 20 63 6c 69 65 6e 74 2d 69 64 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 | .client-id..Authentication.appli |
b5ba0 | 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 73 65 63 72 65 74 2e 00 41 75 74 68 65 6e 74 69 63 61 | cation.client-secret..Authentica |
b5bc0 | 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 74 65 6e 61 6e 74 2d 69 64 00 41 75 74 68 65 | tion.application.tenant-id.Authe |
b5be0 | 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 60 | ntication.is.done.by.using.the.` |
b5c00 | 60 6f 70 65 6e 76 70 6e 2d 61 75 74 68 2d 6c 64 61 70 2e 73 6f 60 60 20 70 6c 75 67 69 6e 20 77 | `openvpn-auth-ldap.so``.plugin.w |
b5c20 | 68 69 63 68 20 69 73 20 73 68 69 70 70 65 64 20 77 69 74 68 20 65 76 65 72 79 20 56 79 4f 53 20 | hich.is.shipped.with.every.VyOS. |
b5c40 | 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2e 20 41 20 64 65 64 69 63 61 74 65 64 20 63 6f 6e 66 69 67 | installation..A.dedicated.config |
b5c60 | 75 72 61 74 69 6f 6e 20 66 69 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 49 74 20 69 73 20 | uration.file.is.required..It.is. |
b5c80 | 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 73 74 6f 72 65 20 69 74 20 69 6e 20 60 60 2f | best.practise.to.store.it.in.``/ |
b5ca0 | 63 6f 6e 66 69 67 60 60 20 74 6f 20 73 75 72 76 69 76 65 20 69 6d 61 67 65 20 75 70 64 61 74 65 | config``.to.survive.image.update |
b5cc0 | 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6e 61 | s.Authentication.organization.na |
b5ce0 | 6d 65 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 68 65 6e 74 69 | me.Authentication.token.Authenti |
b5d00 | 63 61 74 69 6f 6e 20 e2 80 93 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 6d 65 | cation.....to.verify.that.the.me |
b5d20 | 73 73 61 67 65 20 69 73 20 66 72 6f 6d 20 61 20 76 61 6c 69 64 20 73 6f 75 72 63 65 2e 00 41 75 | ssage.is.from.a.valid.source..Au |
b5d40 | 74 68 6f 72 69 7a 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e | thorization.token.Automatic.VLAN |
b5d60 | 20 43 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e 20 63 72 65 61 74 69 6f | .Creation.Automatic.VLAN.creatio |
b5d80 | 6e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 42 46 44 20 73 65 73 73 69 | n.Automatically.create.BFD.sessi |
b5da0 | 6f 6e 20 66 6f 72 20 65 61 63 68 20 52 49 50 20 70 65 65 72 20 64 69 73 63 6f 76 65 72 65 64 20 | on.for.each.RIP.peer.discovered. |
b5dc0 | 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 74 68 65 20 42 46 44 20 | in.this.interface..When.the.BFD. |
b5de0 | 73 65 73 73 69 6f 6e 20 6d 6f 6e 69 74 6f 72 20 73 69 67 6e 61 6c 69 7a 65 20 74 68 61 74 20 74 | session.monitor.signalize.that.t |
b5e00 | 68 65 20 6c 69 6e 6b 20 69 73 20 64 6f 77 6e 20 74 68 65 20 52 49 50 20 70 65 65 72 20 69 73 20 | he.link.is.down.the.RIP.peer.is. |
b5e20 | 72 65 6d 6f 76 65 64 20 61 6e 64 20 61 6c 6c 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 | removed.and.all.the.learned.rout |
b5e40 | 65 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 61 74 20 70 65 65 72 20 61 72 65 | es.associated.with.that.peer.are |
b5e60 | 20 72 65 6d 6f 76 65 64 2e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 62 6f 6f 74 20 73 | .removed..Automatically.reboot.s |
b5e80 | 79 73 74 65 6d 20 6f 6e 20 6b 65 72 6e 65 6c 20 70 61 6e 69 63 20 61 66 74 65 72 20 36 30 20 73 | ystem.on.kernel.panic.after.60.s |
b5ea0 | 65 63 6f 6e 64 73 2e 00 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 73 00 41 76 6f 69 64 | econds..Autonomous.Systems.Avoid |
b5ec0 | 69 6e 67 20 22 6c 65 61 6b 79 22 20 4e 41 54 00 41 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f | ing."leaky".NAT.Azure-data-explo |
b5ee0 | 72 65 72 00 42 46 44 00 42 46 44 20 53 74 61 74 69 63 20 52 6f 75 74 65 20 4d 6f 6e 69 74 6f 72 | rer.BFD.BFD.Static.Route.Monitor |
b5f00 | 69 6e 67 00 42 46 44 20 73 65 6e 64 73 20 6c 6f 74 73 20 6f 66 20 73 6d 61 6c 6c 20 55 44 50 20 | ing.BFD.sends.lots.of.small.UDP. |
b5f20 | 70 61 63 6b 65 74 73 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 74 6f 20 65 6e 73 75 72 65 73 20 | packets.very.quickly.to.ensures. |
b5f40 | 74 68 61 74 20 74 68 65 20 70 65 65 72 20 69 73 20 73 74 69 6c 6c 20 61 6c 69 76 65 2e 00 42 47 | that.the.peer.is.still.alive..BG |
b5f60 | 50 00 42 47 50 20 2d 20 41 53 20 50 61 74 68 20 50 6f 6c 69 63 79 00 42 47 50 20 2d 20 43 6f 6d | P.BGP.-.AS.Path.Policy.BGP.-.Com |
b5f80 | 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 | munity.List.BGP.-.Extended.Commu |
b5fa0 | 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 4c 61 72 67 65 20 43 6f 6d 6d 75 6e 69 74 79 20 | nity.List.BGP.-.Large.Community. |
b5fc0 | 4c 69 73 74 00 42 47 50 20 45 78 61 6d 70 6c 65 00 42 47 50 20 52 6f 75 74 65 72 20 43 6f 6e 66 | List.BGP.Example.BGP.Router.Conf |
b5fe0 | 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 53 63 61 6c 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 | iguration.BGP.Scaling.Configurat |
b6000 | 69 6f 6e 00 42 47 50 20 61 67 67 72 65 67 61 74 6f 72 20 61 74 74 72 69 62 75 74 65 3a 20 41 53 | ion.BGP.aggregator.attribute:.AS |
b6020 | 20 6e 75 6d 62 65 72 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 6e 20 61 67 67 72 | .number.or.IP.address.of.an.aggr |
b6040 | 65 67 61 74 69 6f 6e 2e 00 42 47 50 20 61 73 2d 70 61 74 68 20 6c 69 73 74 20 74 6f 20 6d 61 74 | egation..BGP.as-path.list.to.mat |
b6060 | 63 68 2e 00 42 47 50 20 61 74 6f 6d 69 63 20 61 67 67 72 65 67 61 74 65 20 61 74 74 72 69 62 75 | ch..BGP.atomic.aggregate.attribu |
b6080 | 74 65 2e 00 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e | te..BGP.community-list.to.match. |
b60a0 | 00 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 74 6f 20 6d 61 74 63 68 | .BGP.extended.community.to.match |
b60c0 | 2e 00 42 47 50 20 72 6f 6c 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a | ..BGP.roles.are.defined.in.RFC.: |
b60e0 | 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 6e 20 65 61 73 79 20 77 | rfc:`9234`.and.provide.an.easy.w |
b6100 | 61 79 20 74 6f 20 61 64 64 20 72 6f 75 74 65 20 6c 65 61 6b 20 70 72 65 76 65 6e 74 69 6f 6e 2c | ay.to.add.route.leak.prevention, |
b6120 | 20 64 65 74 65 63 74 69 6f 6e 20 61 6e 64 20 6d 69 74 69 67 61 74 69 6f 6e 2e 20 54 68 65 20 6c | .detection.and.mitigation..The.l |
b6140 | 6f 63 61 6c 20 52 6f 6c 65 20 76 61 6c 75 65 20 69 73 20 6e 65 67 6f 74 69 61 74 65 64 20 77 69 | ocal.Role.value.is.negotiated.wi |
b6160 | 74 68 20 74 68 65 20 6e 65 77 20 42 47 50 20 52 6f 6c 65 20 63 61 70 61 62 69 6c 69 74 79 20 77 | th.the.new.BGP.Role.capability.w |
b6180 | 68 69 63 68 20 68 61 73 20 61 20 62 75 69 6c 74 2d 69 6e 20 63 68 65 63 6b 20 6f 66 20 74 68 65 | hich.has.a.built-in.check.of.the |
b61a0 | 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 76 61 6c 75 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 | .corresponding.value..In.case.of |
b61c0 | 20 61 20 6d 69 73 6d 61 74 63 68 20 74 68 65 20 6e 65 77 20 4f 50 45 4e 20 52 6f 6c 65 73 20 4d | .a.mismatch.the.new.OPEN.Roles.M |
b61e0 | 69 73 6d 61 74 63 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 3c 32 2c 20 31 31 3e 20 77 6f 75 | ismatch.Notification.<2,.11>.wou |
b6200 | 6c 64 20 62 65 20 73 65 6e 74 2e 20 54 68 65 20 63 6f 72 72 65 63 74 20 52 6f 6c 65 20 70 61 69 | ld.be.sent..The.correct.Role.pai |
b6220 | 72 73 20 61 72 65 3a 00 42 47 50 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e | rs.are:.BGP.routers.connected.in |
b6240 | 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 74 68 72 6f 75 67 68 20 42 47 50 20 62 65 6c | side.the.same.AS.through.BGP.bel |
b6260 | 6f 6e 67 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 73 65 73 73 69 6f 6e 2c 20 | ong.to.an.internal.BGP.session,. |
b6280 | 6f 72 20 49 42 47 50 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 70 72 65 76 65 6e 74 20 72 6f 75 | or.IBGP..In.order.to.prevent.rou |
b62a0 | 74 69 6e 67 20 74 61 62 6c 65 20 6c 6f 6f 70 73 2c 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 64 | ting.table.loops,.IBGP.speaker.d |
b62c0 | 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 49 42 47 50 2d 6c 65 61 72 6e 65 64 20 72 | oes.not.advertise.IBGP-learned.r |
b62e0 | 6f 75 74 65 73 20 74 6f 20 6f 74 68 65 72 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 28 53 70 6c | outes.to.other.IBGP.speaker.(Spl |
b6300 | 69 74 20 48 6f 72 69 7a 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 29 2e 20 41 73 20 73 75 63 68 2c 20 | it.Horizon.mechanism)..As.such,. |
b6320 | 49 42 47 50 20 72 65 71 75 69 72 65 73 20 61 20 66 75 6c 6c 20 6d 65 73 68 20 6f 66 20 61 6c 6c | IBGP.requires.a.full.mesh.of.all |
b6340 | 20 70 65 65 72 73 2e 20 46 6f 72 20 6c 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 69 73 | .peers..For.large.networks,.this |
b6360 | 20 71 75 69 63 6b 6c 79 20 62 65 63 6f 6d 65 73 20 75 6e 73 63 61 6c 61 62 6c 65 2e 00 42 47 50 | .quickly.becomes.unscalable..BGP |
b6380 | 20 72 6f 75 74 65 73 20 6d 61 79 20 62 65 20 6c 65 61 6b 65 64 20 28 69 2e 65 2e 20 63 6f 70 69 | .routes.may.be.leaked.(i.e..copi |
b63a0 | 65 64 29 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e | ed).between.a.unicast.VRF.RIB.an |
b63c0 | 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c | d.the.VPN.SAFI.RIB.of.the.defaul |
b63e0 | 74 20 56 52 46 20 66 6f 72 20 75 73 65 20 69 6e 20 4d 50 4c 53 2d 62 61 73 65 64 20 4c 33 56 50 | t.VRF.for.use.in.MPLS-based.L3VP |
b6400 | 4e 73 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 6c | Ns..Unicast.routes.may.also.be.l |
b6420 | 65 61 6b 65 64 20 62 65 74 77 65 65 6e 20 61 6e 79 20 56 52 46 73 20 28 69 6e 63 6c 75 64 69 6e | eaked.between.any.VRFs.(includin |
b6440 | 67 20 74 68 65 20 75 6e 69 63 61 73 74 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 | g.the.unicast.RIB.of.the.default |
b6460 | 20 42 47 50 20 69 6e 73 74 61 6e 63 65 29 2e 20 41 20 73 68 6f 72 74 63 75 74 20 73 79 6e 74 61 | .BGP.instance)..A.shortcut.synta |
b6480 | 78 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 73 70 65 63 69 66 79 69 | x.is.also.available.for.specifyi |
b64a0 | 6e 67 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 6f 6e 65 20 56 52 46 20 74 6f 20 61 6e 6f 74 68 | ng.leaking.from.one.VRF.to.anoth |
b64c0 | 65 72 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 6e 73 74 61 6e 63 | er.VRF.using.the.default.instanc |
b64e0 | 65 e2 80 99 73 20 56 50 4e 20 52 49 42 20 61 73 20 74 68 65 20 69 6e 74 65 6d 65 64 69 61 72 79 | e...s.VPN.RIB.as.the.intemediary |
b6500 | 20 2e 20 41 20 63 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 56 | ...A.common.application.of.the.V |
b6520 | 52 46 2d 56 52 46 20 66 65 61 74 75 72 65 20 69 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 63 | RF-VRF.feature.is.to.connect.a.c |
b6540 | 75 73 74 6f 6d 65 72 e2 80 99 73 20 70 72 69 76 61 74 65 20 72 6f 75 74 69 6e 67 20 64 6f 6d 61 | ustomer...s.private.routing.doma |
b6560 | 69 6e 20 74 6f 20 61 20 70 72 6f 76 69 64 65 72 e2 80 99 73 20 56 50 4e 20 73 65 72 76 69 63 65 | in.to.a.provider...s.VPN.service |
b6580 | 2e 20 4c 65 61 6b 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 66 72 6f 6d 20 74 68 65 | ..Leaking.is.configured.from.the |
b65a0 | 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 6f 66 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 | .point.of.view.of.an.individual. |
b65c0 | 56 52 46 3a 20 69 6d 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 | VRF:.import.refers.to.routes.lea |
b65e0 | 6b 65 64 20 66 72 6f 6d 20 56 50 4e 20 74 6f 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 2c 20 77 | ked.from.VPN.to.a.unicast.VRF,.w |
b6600 | 68 65 72 65 61 73 20 65 78 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c | hereas.export.refers.to.routes.l |
b6620 | 65 61 6b 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e | eaked.from.a.unicast.VRF.to.VPN. |
b6640 | 00 42 61 62 65 6c 00 42 61 62 65 6c 20 61 20 64 75 61 6c 20 73 74 61 63 6b 20 70 72 6f 74 6f 63 | .Babel.Babel.a.dual.stack.protoc |
b6660 | 6f 6c 2e 20 41 20 73 69 6e 67 6c 65 20 42 61 62 65 6c 20 69 6e 73 74 61 6e 63 65 20 69 73 20 61 | ol..A.single.Babel.instance.is.a |
b6680 | 62 6c 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 | ble.to.perform.routing.for.both. |
b66a0 | 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 42 61 62 65 6c 20 69 73 20 61 20 6d 6f 64 65 72 6e | IPv4.and.IPv6..Babel.is.a.modern |
b66c0 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 | .routing.protocol.designed.to.be |
b66e0 | 20 72 6f 62 75 73 74 20 61 6e 64 20 65 66 66 69 63 69 65 6e 74 20 62 6f 74 68 20 69 6e 20 6f 72 | .robust.and.efficient.both.in.or |
b6700 | 64 69 6e 61 72 79 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 69 6e 20 77 69 72 | dinary.wired.networks.and.in.wir |
b6720 | 65 6c 65 73 73 20 6d 65 73 68 20 6e 65 74 77 6f 72 6b 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c | eless.mesh.networks..By.default, |
b6740 | 20 69 74 20 75 73 65 73 20 68 6f 70 2d 63 6f 75 6e 74 20 6f 6e 20 77 69 72 65 64 20 6e 65 74 77 | .it.uses.hop-count.on.wired.netw |
b6760 | 6f 72 6b 73 20 61 6e 64 20 61 20 76 61 72 69 61 6e 74 20 6f 66 20 45 54 58 20 6f 6e 20 77 69 72 | orks.and.a.variant.of.ETX.on.wir |
b6780 | 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 49 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | eless.links,.It.can.be.configure |
b67a0 | 64 20 74 6f 20 74 61 6b 65 20 72 61 64 69 6f 20 64 69 76 65 72 73 69 74 79 20 69 6e 74 6f 20 61 | d.to.take.radio.diversity.into.a |
b67c0 | 63 63 6f 75 6e 74 20 61 6e 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6f 6d 70 | ccount.and.to.automatically.comp |
b67e0 | 75 74 65 20 61 20 6c 69 6e 6b 27 73 20 6c 61 74 65 6e 63 79 20 61 6e 64 20 69 6e 63 6c 75 64 65 | ute.a.link's.latency.and.include |
b6800 | 20 69 74 20 69 6e 20 74 68 65 20 6d 65 74 72 69 63 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 | .it.in.the.metric..It.is.defined |
b6820 | 20 69 6e 20 3a 72 66 63 3a 60 38 39 36 36 60 2e 00 42 61 63 6b 65 6e 64 00 42 61 6c 61 6e 63 65 | .in.:rfc:`8966`..Backend.Balance |
b6840 | 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 42 61 6c 61 6e 63 69 6e 67 20 52 75 6c 65 73 00 42 61 6c | .algorithms:.Balancing.Rules.Bal |
b6860 | 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 42 61 6e 64 | ancing.based.on.domain.name.Band |
b6880 | 77 69 64 74 68 20 53 68 61 70 69 6e 67 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 20 | width.Shaping.Bandwidth.Shaping. |
b68a0 | 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c | for.local.users.Bandwidth.rate.l |
b68c0 | 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 | imits.can.be.set.for.local.users |
b68e0 | 20 6f 72 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e | .or.RADIUS.based.attributes..Ban |
b6900 | 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f | dwidth.rate.limits.can.be.set.fo |
b6920 | 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 62 61 73 65 | r.local.users.or.via.RADIUS.base |
b6940 | 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d | d.attributes..Bandwidth.rate.lim |
b6960 | 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 77 | its.can.be.set.for.local.users.w |
b6980 | 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 76 69 61 20 52 | ithin.the.configuration.or.via.R |
b69a0 | 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 73 65 20 63 68 61 | ADIUS.based.attributes..Base.cha |
b69c0 | 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 | in.is.for.traffic.toward.the.rou |
b69e0 | 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 | ter.is.``set.firewall.ipv4.input |
b6a00 | 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 | .filter....``.Base.chain.is.for. |
b6a20 | 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 | traffic.toward.the.router.is.``s |
b6a40 | 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e | et.firewall.ipv6.input.filter... |
b6a60 | 2e 60 60 00 42 61 73 65 6c 69 6e 65 20 44 4d 56 50 4e 20 74 6f 70 6f 6c 6f 67 79 00 42 61 73 69 | .``.Baseline.DMVPN.topology.Basi |
b6a80 | 63 20 43 6f 6e 63 65 70 74 73 00 42 61 73 69 63 20 63 6f 6d 6d 61 6e 64 73 00 42 61 73 69 63 20 | c.Concepts.Basic.commands.Basic. |
b6aa0 | 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 61 63 63 65 | filtering.can.be.done.using.acce |
b6ac0 | 73 73 2d 6c 69 73 74 20 61 6e 64 20 61 63 63 65 73 73 2d 6c 69 73 74 36 2e 00 42 61 73 69 63 20 | ss-list.and.access-list6..Basic. |
b6ae0 | 66 69 6c 74 65 72 69 6e 67 20 63 6f 75 6c 64 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 | filtering.could.also.be.applied. |
b6b00 | 74 6f 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 00 42 61 73 69 63 20 73 65 74 75 70 00 42 65 20 | to.IPv6.traffic..Basic.setup.Be. |
b6b20 | 73 75 72 65 20 74 6f 20 73 65 74 20 61 20 73 61 6e 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 | sure.to.set.a.sane.default.confi |
b6b40 | 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 66 69 6c 65 2c 20 74 68 | g.in.the.default.config.file,.th |
b6b60 | 69 73 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 | is.will.be.loaded.in.the.case.th |
b6b80 | 61 74 20 61 20 75 73 65 72 20 69 73 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 61 6e 64 20 6e | at.a.user.is.authenticated.and.n |
b6ba0 | 6f 20 66 69 6c 65 20 69 73 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 | o.file.is.found.in.the.configure |
b6bc0 | 64 20 64 69 72 65 63 74 6f 72 79 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 75 73 65 72 73 20 75 | d.directory.matching.the.users.u |
b6be0 | 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 2e 00 42 65 61 6d 66 6f 72 6d 69 6e 67 20 63 61 70 61 62 | sername/group..Beamforming.capab |
b6c00 | 69 6c 69 74 69 65 73 3a 00 42 65 63 61 75 73 65 20 61 6e 20 61 67 67 72 65 67 61 74 6f 72 20 63 | ilities:.Because.an.aggregator.c |
b6c20 | 61 6e 6e 6f 74 20 62 65 20 61 63 74 69 76 65 20 77 69 74 68 6f 75 74 20 61 74 20 6c 65 61 73 74 | annot.be.active.without.at.least |
b6c40 | 20 6f 6e 65 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 2c 20 73 65 74 74 69 6e 67 20 74 68 69 | .one.available.link,.setting.thi |
b6c60 | 73 20 6f 70 74 69 6f 6e 20 74 6f 20 30 20 6f 72 20 74 6f 20 31 20 68 61 73 20 74 68 65 20 65 78 | s.option.to.0.or.to.1.has.the.ex |
b6c80 | 61 63 74 20 73 61 6d 65 20 65 66 66 65 63 74 2e 00 42 65 63 61 75 73 65 20 65 78 69 73 74 69 6e | act.same.effect..Because.existin |
b6ca0 | 67 20 73 65 73 73 69 6f 6e 73 20 64 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | g.sessions.do.not.automatically. |
b6cc0 | 66 61 69 6c 20 6f 76 65 72 20 74 6f 20 61 20 6e 65 77 20 70 61 74 68 2c 20 74 68 65 20 73 65 73 | fail.over.to.a.new.path,.the.ses |
b6ce0 | 73 69 6f 6e 20 74 61 62 6c 65 20 63 61 6e 20 62 65 20 66 6c 75 73 68 65 64 20 6f 6e 20 65 61 63 | sion.table.can.be.flushed.on.eac |
b6d00 | 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 63 68 61 6e 67 65 3a 00 42 65 66 6f 72 | h.connection.state.change:.Befor |
b6d20 | 65 20 65 6e 61 62 6c 69 6e 67 20 61 6e 79 20 68 61 72 64 77 61 72 65 20 73 65 67 6d 65 6e 74 61 | e.enabling.any.hardware.segmenta |
b6d40 | 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 6f 66 | tion.offload.a.corresponding.sof |
b6d60 | 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 47 53 4f | tware.offload.is.required.in.GSO |
b6d80 | 2e 20 4f 74 68 65 72 77 69 73 65 20 69 74 20 62 65 63 6f 6d 65 73 20 70 6f 73 73 69 62 6c 65 20 | ..Otherwise.it.becomes.possible. |
b6da0 | 66 6f 72 20 61 20 66 72 61 6d 65 20 74 6f 20 62 65 20 72 65 2d 72 6f 75 74 65 64 20 62 65 74 77 | for.a.frame.to.be.re-routed.betw |
b6dc0 | 65 65 6e 20 64 65 76 69 63 65 73 20 61 6e 64 20 65 6e 64 20 75 70 20 62 65 69 6e 67 20 75 6e 61 | een.devices.and.end.up.being.una |
b6de0 | 62 6c 65 20 74 6f 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 42 65 66 6f 72 65 20 79 6f | ble.to.be.transmitted..Before.yo |
b6e00 | 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 74 | u.are.able.to.apply.a.rule-set.t |
b6e20 | 6f 20 61 20 7a 6f 6e 65 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 | o.a.zone.you.have.to.create.the. |
b6e40 | 7a 6f 6e 65 73 20 66 69 72 73 74 2e 00 42 65 6c 6f 77 20 66 6c 6f 77 2d 63 68 61 72 74 20 63 6f | zones.first..Below.flow-chart.co |
b6e60 | 75 6c 64 20 62 65 20 61 20 71 75 69 63 6b 20 72 65 66 65 72 65 6e 63 65 20 66 6f 72 20 74 68 65 | uld.be.a.quick.reference.for.the |
b6e80 | 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 64 65 70 65 6e 64 | .close-action.combination.depend |
b6ea0 | 69 6e 67 20 6f 6e 20 68 6f 77 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | ing.on.how.the.peer.is.configure |
b6ec0 | 64 2e 00 42 65 6c 6f 77 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 74 6f 20 63 6f 6e 66 69 67 | d..Below.is.an.example.to.config |
b6ee0 | 75 72 65 20 61 20 4c 4e 53 3a 00 42 65 73 74 20 65 66 66 6f 72 74 20 74 72 61 66 66 69 63 2c 20 | ure.a.LNS:.Best.effort.traffic,. |
b6f00 | 64 65 66 61 75 6c 74 00 42 65 74 77 65 65 6e 20 63 6f 6d 70 75 74 65 72 73 2c 20 74 68 65 20 6d | default.Between.computers,.the.m |
b6f20 | 6f 73 74 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 65 64 20 77 61 | ost.common.configuration.used.wa |
b6f40 | 73 20 22 38 4e 31 22 3a 20 65 69 67 68 74 20 62 69 74 20 63 68 61 72 61 63 74 65 72 73 2c 20 77 | s."8N1":.eight.bit.characters,.w |
b6f60 | 69 74 68 20 6f 6e 65 20 73 74 61 72 74 20 62 69 74 2c 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 2c | ith.one.start.bit,.one.stop.bit, |
b6f80 | 20 61 6e 64 20 6e 6f 20 70 61 72 69 74 79 20 62 69 74 2e 20 54 68 75 73 20 31 30 20 42 61 75 64 | .and.no.parity.bit..Thus.10.Baud |
b6fa0 | 20 74 69 6d 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 65 6e 64 20 61 20 73 69 6e 67 6c 65 | .times.are.used.to.send.a.single |
b6fc0 | 20 63 68 61 72 61 63 74 65 72 2c 20 61 6e 64 20 73 6f 20 64 69 76 69 64 69 6e 67 20 74 68 65 20 | .character,.and.so.dividing.the. |
b6fe0 | 73 69 67 6e 61 6c 6c 69 6e 67 20 62 69 74 2d 72 61 74 65 20 62 79 20 74 65 6e 20 72 65 73 75 6c | signalling.bit-rate.by.ten.resul |
b7000 | 74 73 20 69 6e 20 74 68 65 20 6f 76 65 72 61 6c 6c 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 73 | ts.in.the.overall.transmission.s |
b7020 | 70 65 65 64 20 69 6e 20 63 68 61 72 61 63 74 65 72 73 20 70 65 72 20 73 65 63 6f 6e 64 2e 20 54 | peed.in.characters.per.second..T |
b7040 | 68 69 73 20 69 73 20 61 6c 73 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 20 | his.is.also.the.default.setting. |
b7060 | 69 66 20 6e 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 64 65 66 | if.none.of.those.options.are.def |
b7080 | 69 6e 65 64 2e 00 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 4e 41 54 00 42 69 6e 61 72 79 20 76 | ined..Bidirectional.NAT.Binary.v |
b70a0 | 61 6c 75 65 00 42 69 6e 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 | alue.Bind.container.network.to.a |
b70c0 | 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 42 69 6e 64 20 6c 69 73 74 65 6e | .given.VRF.instance..Bind.listen |
b70e0 | 65 72 20 74 6f 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2f 61 64 64 72 65 73 73 | er.to.specific.interface/address |
b7100 | 2c 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 49 50 76 36 00 42 69 6e 64 73 20 65 74 68 31 2e | ,.mandatory.for.IPv6.Binds.eth1. |
b7120 | 32 34 31 20 61 6e 64 20 76 78 6c 61 6e 32 34 31 20 74 6f 20 65 61 63 68 20 6f 74 68 65 72 20 62 | 241.and.vxlan241.to.each.other.b |
b7140 | 79 20 6d 61 6b 69 6e 67 20 74 68 65 6d 20 62 6f 74 68 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 | y.making.them.both.member.interf |
b7160 | 61 63 65 73 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 72 69 64 67 65 2e 00 42 6c 61 63 6b 68 6f | aces.of.the.same.bridge..Blackho |
b7180 | 6c 65 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 53 | le.Block.source.IP.in.seconds..S |
b71a0 | 75 62 73 65 71 75 65 6e 74 20 62 6c 6f 63 6b 73 20 69 6e 63 72 65 61 73 65 20 62 79 20 61 20 66 | ubsequent.blocks.increase.by.a.f |
b71c0 | 61 63 74 6f 72 20 6f 66 20 31 2e 35 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 2e | actor.of.1.5.The.default.is.120. |
b71e0 | 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 77 68 65 6e 20 74 68 65 69 72 20 63 75 6d 75 | .Block.source.IP.when.their.cumu |
b7200 | 6c 61 74 69 76 65 20 61 74 74 61 63 6b 20 73 63 6f 72 65 20 65 78 63 65 65 64 73 20 74 68 72 65 | lative.attack.score.exceeds.thre |
b7220 | 73 68 6f 6c 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 33 30 2e 00 42 6c 6f 63 6b 69 | shold..The.default.is.30..Blocki |
b7240 | 6e 67 20 63 61 6c 6c 20 77 69 74 68 20 6e 6f 20 74 69 6d 65 6f 75 74 2e 20 53 79 73 74 65 6d 20 | ng.call.with.no.timeout..System. |
b7260 | 77 69 6c 6c 20 62 65 63 6f 6d 65 20 75 6e 72 65 73 70 6f 6e 73 69 76 65 20 69 66 20 73 63 72 69 | will.become.unresponsive.if.scri |
b7280 | 70 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 74 75 72 6e 21 00 42 6f 61 72 64 65 72 20 47 61 74 65 | pt.does.not.return!.Boarder.Gate |
b72a0 | 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 20 6f 72 69 67 69 6e 20 63 6f 64 65 20 74 | way.Protocol.(BGP).origin.code.t |
b72c0 | 6f 20 6d 61 74 63 68 2e 00 42 6f 6e 64 20 2f 20 4c 69 6e 6b 20 41 67 67 72 65 67 61 74 69 6f 6e | o.match..Bond./.Link.Aggregation |
b72e0 | 00 42 6f 6e 64 20 6f 70 74 69 6f 6e 73 00 42 6f 6f 74 20 69 6d 61 67 65 20 6c 65 6e 67 74 68 20 | .Bond.options.Boot.image.length. |
b7300 | 69 6e 20 35 31 32 2d 6f 63 74 65 74 20 62 6c 6f 63 6b 73 00 42 6f 6f 74 73 74 72 61 70 20 66 69 | in.512-octet.blocks.Bootstrap.fi |
b7320 | 6c 65 20 6e 61 6d 65 00 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 6d 75 6c 74 69 | le.name.Both.IPv4.and.IPv6.multi |
b7340 | 63 61 73 74 20 69 73 20 70 6f 73 73 69 62 6c 65 2e 00 42 6f 74 68 20 6c 6f 63 61 6c 20 61 64 6d | cast.is.possible..Both.local.adm |
b7360 | 69 6e 69 73 74 65 72 65 64 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 6d 69 6e 69 73 74 65 72 65 | inistered.and.remote.administere |
b7380 | 64 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 | d.:abbr:`RADIUS.(Remote.Authenti |
b73a0 | 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 20 61 63 | cation.Dial-In.User.Service)`.ac |
b73c0 | 63 6f 75 6e 74 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 42 6f 74 68 20 72 65 70 6c 69 | counts.are.supported..Both.repli |
b73e0 | 65 73 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 74 79 70 65 20 67 72 61 74 75 69 74 6f 75 73 20 | es.and.requests.type.gratuitous. |
b7400 | 61 72 70 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 74 | arp.will.trigger.the.ARP.table.t |
b7420 | 6f 20 62 65 20 75 70 64 61 74 65 64 2c 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 | o.be.updated,.if.this.setting.is |
b7440 | 20 6f 6e 2e 00 42 72 61 6e 63 68 20 31 27 73 20 72 6f 75 74 65 72 20 6d 69 67 68 74 20 68 61 76 | .on..Branch.1's.router.might.hav |
b7460 | 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c 69 6e 65 73 3a 00 42 72 69 64 67 65 00 42 72 | e.the.following.lines:.Bridge.Br |
b7480 | 69 64 67 65 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 72 69 64 | idge.Firewall.Configuration.Brid |
b74a0 | 67 65 20 4f 70 74 69 6f 6e 73 00 42 72 69 64 67 65 20 52 75 6c 65 73 00 42 72 69 64 67 65 20 61 | ge.Options.Bridge.Rules.Bridge.a |
b74c0 | 6e 73 77 65 72 73 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 | nswers.on.IP.address.192.0.2.1/2 |
b74e0 | 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 2f 36 34 00 42 72 69 64 67 65 20 6d | 4.and.2001:db8::ffff/64.Bridge.m |
b7500 | 61 78 69 6d 75 6d 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 | aximum.aging.`<time>`.in.seconds |
b7520 | 20 28 64 65 66 61 75 6c 74 3a 20 32 30 29 2e 00 42 72 69 64 67 65 3a 00 42 75 72 73 74 20 63 6f | .(default:.20)..Bridge:.Burst.co |
b7540 | 75 6e 74 00 42 75 73 69 6e 65 73 73 20 55 73 65 72 73 00 42 75 74 20 62 65 66 6f 72 65 20 6c 65 | unt.Business.Users.But.before.le |
b7560 | 61 72 6e 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 70 6f 6c 69 63 79 2c | arning.to.configure.your.policy, |
b7580 | 20 77 65 20 77 69 6c 6c 20 77 61 72 6e 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 20 64 69 66 66 | .we.will.warn.you.about.the.diff |
b75a0 | 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 64 20 61 6c 73 6f | erent.units.you.can.use.and.also |
b75c0 | 20 73 68 6f 77 20 79 6f 75 20 77 68 61 74 20 2a 63 6c 61 73 73 65 73 2a 20 61 72 65 20 61 6e 64 | .show.you.what.*classes*.are.and |
b75e0 | 20 68 6f 77 20 74 68 65 79 20 77 6f 72 6b 2c 20 61 73 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 | .how.they.work,.as.some.policies |
b7600 | 20 6d 61 79 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | .may.require.you.to.configure.th |
b7620 | 65 6d 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 20 6d 75 6c 74 69 63 61 | em..By.default.VRRP.uses.multica |
b7640 | 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 | st.packets..If.your.network.does |
b7660 | 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 77 68 61 74 65 | .not.support.multicast.for.whate |
b7680 | 76 65 72 20 72 65 61 73 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 6d 61 6b 65 20 56 52 52 50 20 75 73 | ver.reason,.you.can.make.VRRP.us |
b76a0 | 65 20 75 6e 69 63 61 73 74 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 2e | e.unicast.communication.instead. |
b76c0 | 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 20 70 72 65 65 6d 70 74 69 6f 6e | .By.default.VRRP.uses.preemption |
b76e0 | 2e 20 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 69 74 20 77 69 74 68 20 74 68 65 20 22 6e | ..You.can.disable.it.with.the."n |
b7700 | 6f 2d 70 72 65 65 6d 70 74 22 20 6f 70 74 69 6f 6e 3a 00 42 79 20 64 65 66 61 75 6c 74 20 60 73 | o-preempt".option:.By.default.`s |
b7720 | 74 72 69 63 74 2d 6c 73 61 2d 63 68 65 63 6b 69 6e 67 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | trict-lsa-checking`.is.configure |
b7740 | 64 20 74 68 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 61 62 6f 72 74 20 74 68 65 | d.then.the.helper.will.abort.the |
b7760 | 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 77 68 65 6e 20 61 20 4c 53 41 20 63 68 61 | .Graceful.Restart.when.a.LSA.cha |
b7780 | 6e 67 65 20 6f 63 63 75 72 73 20 77 68 69 63 68 20 61 66 66 65 63 74 73 20 74 68 65 20 72 65 73 | nge.occurs.which.affects.the.res |
b77a0 | 74 61 72 74 69 6e 67 20 72 6f 75 74 65 72 2e 00 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 73 | tarting.router..By.default.the.s |
b77c0 | 63 6f 70 65 20 6f 66 20 74 68 65 20 70 6f 72 74 20 62 69 6e 64 69 6e 67 73 20 66 6f 72 20 75 6e | cope.of.the.port.bindings.for.un |
b77e0 | 62 6f 75 6e 64 20 73 6f 63 6b 65 74 73 20 69 73 20 6c 69 6d 69 74 65 64 20 74 6f 20 74 68 65 20 | bound.sockets.is.limited.to.the. |
b7800 | 64 65 66 61 75 6c 74 20 56 52 46 2e 20 54 68 61 74 20 69 73 2c 20 69 74 20 77 69 6c 6c 20 6e 6f | default.VRF..That.is,.it.will.no |
b7820 | 74 20 62 65 20 6d 61 74 63 68 65 64 20 62 79 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 | t.be.matched.by.packets.arriving |
b7840 | 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 | .on.interfaces.enslaved.to.a.VRF |
b7860 | 20 61 6e 64 20 70 72 6f 63 65 73 73 65 73 20 6d 61 79 20 62 69 6e 64 20 74 6f 20 74 68 65 20 73 | .and.processes.may.bind.to.the.s |
b7880 | 61 6d 65 20 70 6f 72 74 20 69 66 20 74 68 65 79 20 62 69 6e 64 20 74 6f 20 61 20 56 52 46 2e 00 | ame.port.if.they.bind.to.a.VRF.. |
b78a0 | 42 79 20 64 65 66 61 75 6c 74 2c 20 46 52 52 20 77 69 6c 6c 20 62 72 69 6e 67 20 75 70 20 70 65 | By.default,.FRR.will.bring.up.pe |
b78c0 | 65 72 69 6e 67 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 | ering.with.minimal.common.capabi |
b78e0 | 6c 69 74 79 20 66 6f 72 20 74 68 65 20 62 6f 74 68 20 73 69 64 65 73 2e 20 46 6f 72 20 65 78 61 | lity.for.the.both.sides..For.exa |
b7900 | 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 68 61 73 20 75 6e | mple,.if.the.local.router.has.un |
b7920 | 69 63 61 73 74 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 69 65 73 | icast.and.multicast.capabilities |
b7940 | 20 61 6e 64 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 20 6f 6e 6c 79 20 68 61 73 20 | .and.the.remote.router.only.has. |
b7960 | 75 6e 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 79 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 | unicast.capability.the.local.rou |
b7980 | 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | ter.will.establish.the.connectio |
b79a0 | 6e 20 77 69 74 68 20 75 6e 69 63 61 73 74 20 6f 6e 6c 79 20 63 61 70 61 62 69 6c 69 74 79 2e 20 | n.with.unicast.only.capability.. |
b79c0 | 57 68 65 6e 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c | When.there.are.no.common.capabil |
b79e0 | 69 74 69 65 73 2c 20 46 52 52 20 73 65 6e 64 73 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 | ities,.FRR.sends.Unsupported.Cap |
b7a00 | 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 61 6e 64 20 74 68 65 6e 20 72 65 73 65 74 73 20 74 68 | ability.error.and.then.resets.th |
b7a20 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 | e.connection..By.default,.VyOS.d |
b7a40 | 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | oes.not.advertise.a.default.rout |
b7a60 | 65 20 28 30 2e 30 2e 30 2e 30 2f 30 29 20 65 76 65 6e 20 69 66 20 69 74 20 69 73 20 69 6e 20 72 | e.(0.0.0.0/0).even.if.it.is.in.r |
b7a80 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 57 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 | outing.table..When.you.want.to.a |
b7aa0 | 6e 6e 6f 75 6e 63 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 | nnounce.default.routes.to.the.pe |
b7ac0 | 65 72 2c 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 20 55 73 69 6e 67 20 6f 70 74 69 | er,.use.this.command..Using.opti |
b7ae0 | 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 | onal.argument.:cfgcmd:`route-map |
b7b00 | 60 20 79 6f 75 20 63 61 6e 20 69 6e 6a 65 63 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 | `.you.can.inject.the.default.rou |
b7b20 | 74 65 20 74 6f 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 6f 6e 6c 79 20 69 66 20 74 68 65 | te.to.given.neighbor.only.if.the |
b7b40 | 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 | .conditions.in.the.route.map.are |
b7b60 | 20 6d 65 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 61 20 6e 65 77 20 74 6f 6b 65 6e 20 69 73 | .met..By.default,.a.new.token.is |
b7b80 | 20 67 65 6e 65 72 61 74 65 64 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e 64 73 20 62 79 20 74 | .generated.every.30.seconds.by.t |
b7ba0 | 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 20 49 6e 20 6f 72 64 65 72 20 | he.mobile.application..In.order. |
b7bc0 | 74 6f 20 63 6f 6d 70 65 6e 73 61 74 65 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 20 74 69 6d 65 2d | to.compensate.for.possible.time- |
b7be0 | 73 6b 65 77 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 | skew.between.the.client.and.the. |
b7c00 | 73 65 72 76 65 72 2c 20 61 6e 20 65 78 74 72 61 20 74 6f 6b 65 6e 20 62 65 66 6f 72 65 20 61 6e | server,.an.extra.token.before.an |
b7c20 | 64 20 61 66 74 65 72 20 74 68 65 20 63 75 72 72 65 6e 74 20 74 69 6d 65 20 69 73 20 61 6c 6c 6f | d.after.the.current.time.is.allo |
b7c40 | 77 65 64 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 | wed..This.allows.for.a.time.skew |
b7c60 | 20 6f 66 20 75 70 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 61 75 74 | .of.up.to.30.seconds.between.aut |
b7c80 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 42 | hentication.server.and.client..B |
b7ca0 | 79 20 64 65 66 61 75 6c 74 2c 20 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 75 70 64 61 74 65 | y.default,.ddclient_.will.update |
b7cc0 | 20 61 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 72 65 63 6f 72 64 20 75 73 69 6e 67 20 74 68 65 20 | .a.dynamic.dns.record.using.the. |
b7ce0 | 49 50 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 74 6f 20 | IP.address.directly.attached.to. |
b7d00 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 | the.interface..If.your.VyOS.inst |
b7d20 | 61 6e 63 65 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2c 20 79 6f 75 72 20 72 65 63 6f 72 64 20 | ance.is.behind.NAT,.your.record. |
b7d40 | 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 74 6f 20 70 6f 69 6e 74 20 74 6f 20 79 6f 75 72 | will.be.updated.to.point.to.your |
b7d60 | 20 69 6e 74 65 72 6e 61 6c 20 49 50 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 61 62 6c 69 | .internal.IP..By.default,.enabli |
b7d80 | 6e 67 20 52 50 4b 49 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 62 65 73 74 20 70 61 74 | ng.RPKI.does.not.change.best.pat |
b7da0 | 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 49 6e 20 70 61 72 74 69 63 75 6c 61 72 2c 20 69 6e 76 61 | h.selection..In.particular,.inva |
b7dc0 | 6c 69 64 20 70 72 65 66 69 78 65 73 20 77 69 6c 6c 20 73 74 69 6c 6c 20 62 65 20 63 6f 6e 73 69 | lid.prefixes.will.still.be.consi |
b7de0 | 64 65 72 65 64 20 64 75 72 69 6e 67 20 62 65 73 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e | dered.during.best.path.selection |
b7e00 | 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e | ..However,.the.router.can.be.con |
b7e20 | 66 69 67 75 72 65 64 20 74 6f 20 69 67 6e 6f 72 65 20 61 6c 6c 20 69 6e 76 61 6c 69 64 20 70 72 | figured.to.ignore.all.invalid.pr |
b7e40 | 65 66 69 78 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 73 75 70 70 6f 72 74 73 20 | efixes..By.default,.it.supports. |
b7e60 | 62 6f 74 68 20 70 6c 61 6e 6e 65 64 20 61 6e 64 20 75 6e 70 6c 61 6e 6e 65 64 20 6f 75 74 61 67 | both.planned.and.unplanned.outag |
b7e80 | 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6c 6f 63 61 6c 6c 79 20 61 64 76 65 72 74 69 73 | es..By.default,.locally.advertis |
b7ea0 | 65 64 20 70 72 65 66 69 78 65 73 20 75 73 65 20 74 68 65 20 69 6d 70 6c 69 63 69 74 2d 6e 75 6c | ed.prefixes.use.the.implicit-nul |
b7ec0 | 6c 20 6c 61 62 65 6c 20 74 6f 20 65 6e 63 6f 64 65 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e | l.label.to.encode.in.the.outgoin |
b7ee0 | 67 20 4e 4c 52 49 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6e 67 69 6e 78 20 65 78 70 6f 73 65 | g.NLRI..By.default,.nginx.expose |
b7f00 | 73 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 20 6f 6e 20 61 6c 6c 20 76 69 72 74 75 61 6c 20 73 | s.the.local.API.on.all.virtual.s |
b7f20 | 65 72 76 65 72 73 2e 20 55 73 65 20 74 68 69 73 20 74 6f 20 72 65 73 74 72 69 63 74 20 6e 67 69 | ervers..Use.this.to.restrict.ngi |
b7f40 | 6e 78 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 2e | nx.to.one.or.more.virtual.hosts. |
b7f60 | 00 42 79 20 64 65 66 61 75 6c 74 2c 20 72 65 63 6f 72 64 65 64 20 66 6c 6f 77 73 20 77 69 6c 6c | .By.default,.recorded.flows.will |
b7f80 | 20 62 65 20 73 61 76 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 61 6e 64 20 63 61 6e 20 62 65 20 | .be.saved.internally.and.can.be. |
b7fa0 | 6c 69 73 74 65 64 20 77 69 74 68 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e 20 59 6f 75 | listed.with.the.CLI.command..You |
b7fc0 | 20 6d 61 79 20 64 69 73 61 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 2d | .may.disable.using.the.local.in- |
b7fe0 | 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 42 | memory.table.with.the.command:.B |
b8000 | 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 42 47 50 20 70 72 65 66 69 78 20 69 73 20 61 64 76 | y.default,.the.BGP.prefix.is.adv |
b8020 | 65 72 74 69 73 65 64 20 65 76 65 6e 20 69 66 20 69 74 27 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 | ertised.even.if.it's.not.present |
b8040 | 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 69 73 20 62 65 68 61 | .in.the.routing.table..This.beha |
b8060 | 76 69 6f 75 72 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 74 68 65 20 69 6d 70 6c 65 6d 65 6e 74 | viour.differs.from.the.implement |
b8080 | 61 74 69 6f 6e 20 6f 66 20 73 6f 6d 65 20 76 65 6e 64 6f 72 73 2e 00 42 79 20 64 65 66 61 75 6c | ation.of.some.vendors..By.defaul |
b80a0 | 74 2c 20 74 68 69 73 20 62 72 69 64 67 69 6e 67 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 42 79 20 | t,.this.bridging.is.allowed..By. |
b80c0 | 64 65 66 61 75 6c 74 2c 20 77 68 65 6e 20 56 79 4f 53 20 72 65 63 65 69 76 65 73 20 61 6e 20 49 | default,.when.VyOS.receives.an.I |
b80e0 | 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 70 61 63 6b 65 74 20 64 65 73 74 69 6e 65 64 | CMP.echo.request.packet.destined |
b8100 | 20 66 6f 72 20 69 74 73 65 6c 66 2c 20 69 74 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 77 69 74 68 | .for.itself,.it.will.answer.with |
b8120 | 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 70 6c 79 2c 20 75 6e 6c 65 73 73 20 79 6f 75 20 | .an.ICMP.echo.reply,.unless.you. |
b8140 | 61 76 6f 69 64 20 69 74 20 74 68 72 6f 75 67 68 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 00 42 | avoid.it.through.its.firewall..B |
b8160 | 79 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 | y.using.Pseudo-Ethernet.interfac |
b8180 | 65 73 20 74 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6c 65 73 73 20 73 79 73 74 65 6d 20 6f 76 65 | es.there.will.be.less.system.ove |
b81a0 | 72 68 65 61 64 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 72 75 6e 6e 69 6e 67 20 61 20 74 72 61 64 | rhead.compared.to.running.a.trad |
b81c0 | 69 74 69 6f 6e 61 6c 20 62 72 69 64 67 69 6e 67 20 61 70 70 72 6f 61 63 68 2e 20 50 73 65 75 64 | itional.bridging.approach..Pseud |
b81e0 | 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 | o-Ethernet.interfaces.can.also.b |
b8200 | 65 20 75 73 65 64 20 74 6f 20 77 6f 72 6b 61 72 6f 75 6e 64 20 74 68 65 20 67 65 6e 65 72 61 6c | e.used.to.workaround.the.general |
b8220 | 20 6c 69 6d 69 74 20 6f 66 20 34 30 39 36 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 | .limit.of.4096.virtual.LANs.(VLA |
b8240 | 4e 73 29 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2c 20 | Ns).per.physical.Ethernet.port,. |
b8260 | 73 69 6e 63 65 20 74 68 61 74 20 6c 69 6d 69 74 20 69 73 20 77 69 74 68 20 72 65 73 70 65 63 74 | since.that.limit.is.with.respect |
b8280 | 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 2e 00 42 79 70 61 73 73 | .to.a.single.MAC.address..Bypass |
b82a0 | 69 6e 67 20 74 68 65 20 77 65 62 70 72 6f 78 79 00 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 | ing.the.webproxy.CA.(Certificate |
b82c0 | 20 41 75 74 68 6f 72 69 74 79 29 00 43 52 49 54 49 43 2f 45 43 50 00 43 61 6c 6c 20 61 6e 6f 74 | .Authority).CRITIC/ECP.Call.anot |
b82e0 | 68 65 72 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 2e 00 43 | her.route-map.policy.on.match..C |
b8300 | 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 00 43 65 72 74 61 69 6e 20 76 65 | apability.Negotiation.Certain.ve |
b8320 | 6e 64 6f 72 73 20 75 73 65 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 | ndors.use.broadcasts.to.identify |
b8340 | 20 74 68 65 69 72 20 65 71 75 69 70 6d 65 6e 74 20 77 69 74 68 69 6e 20 6f 6e 65 20 65 74 68 65 | .their.equipment.within.one.ethe |
b8360 | 72 6e 65 74 20 73 65 67 6d 65 6e 74 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 69 66 20 79 | rnet.segment..Unfortunately.if.y |
b8380 | 6f 75 20 73 70 6c 69 74 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 6d 75 6c 74 69 | ou.split.your.network.with.multi |
b83a0 | 70 6c 65 20 56 4c 41 4e 73 20 79 6f 75 20 6c 6f 6f 73 65 20 74 68 65 20 61 62 69 6c 69 74 79 20 | ple.VLANs.you.loose.the.ability. |
b83c0 | 6f 66 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f 75 72 20 65 71 75 69 70 6d 65 6e 74 2e 00 43 | of.identifying.your.equipment..C |
b83e0 | 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 28 43 41 29 00 43 65 72 74 69 66 | ertificate.Authority.(CA).Certif |
b8400 | 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 20 69 6e 20 50 45 4d 20 66 6f 72 | icate.revocation.list.in.PEM.for |
b8420 | 6d 61 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 73 00 43 68 61 6e 67 65 20 73 79 73 74 65 6d 20 | mat..Certificates.Change.system. |
b8440 | 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 74 6f 20 67 69 76 65 6e 20 6c 61 6e 67 75 61 67 | keyboard.layout.to.given.languag |
b8460 | 65 2e 00 43 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 77 69 74 | e..Change.the.default-action.wit |
b8480 | 68 20 74 68 69 73 20 73 65 74 74 69 6e 67 2e 00 43 68 61 6e 67 65 73 20 69 6e 20 42 47 50 20 70 | h.this.setting..Changes.in.BGP.p |
b84a0 | 6f 6c 69 63 69 65 73 20 72 65 71 75 69 72 65 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 | olicies.require.the.BGP.session. |
b84c0 | 74 6f 20 62 65 20 63 6c 65 61 72 65 64 2e 20 43 6c 65 61 72 69 6e 67 20 68 61 73 20 61 20 6c 61 | to.be.cleared..Clearing.has.a.la |
b84e0 | 72 67 65 20 6e 65 67 61 74 69 76 65 20 69 6d 70 61 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6f | rge.negative.impact.on.network.o |
b8500 | 70 65 72 61 74 69 6f 6e 73 2e 20 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | perations..Soft.reconfiguration. |
b8520 | 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 67 65 6e 65 72 61 74 65 20 69 6e 62 6f 75 6e 64 20 | enables.you.to.generate.inbound. |
b8540 | 75 70 64 61 74 65 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 2c 20 63 68 61 6e 67 65 20 | updates.from.a.neighbor,.change. |
b8560 | 61 6e 64 20 61 63 74 69 76 61 74 65 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 77 69 74 68 6f 75 | and.activate.BGP.policies.withou |
b8580 | 74 20 63 6c 65 61 72 69 6e 67 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 43 68 61 6e | t.clearing.the.BGP.session..Chan |
b85a0 | 67 65 73 20 74 6f 20 74 68 65 20 4e 41 54 20 73 79 73 74 65 6d 20 6f 6e 6c 79 20 61 66 66 65 63 | ges.to.the.NAT.system.only.affec |
b85c0 | 74 20 6e 65 77 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e | t.newly.established.connections. |
b85e0 | 20 41 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | .Already.established.connections |
b8600 | 20 61 72 65 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2e 00 43 68 61 6e 67 69 6e 67 20 74 68 65 20 | .are.not.affected..Changing.the. |
b8620 | 6b 65 79 6d 61 70 20 6f 6e 6c 79 20 68 61 73 20 61 6e 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 | keymap.only.has.an.effect.on.the |
b8640 | 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2c 20 75 73 69 6e 67 20 53 53 48 20 6f 72 20 53 65 | .system.console,.using.SSH.or.Se |
b8660 | 72 69 61 6c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 | rial.remote.access.to.the.device |
b8680 | 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 20 61 73 20 74 68 65 20 6b 65 79 62 6f 61 72 64 | .is.not.affected.as.the.keyboard |
b86a0 | 20 6c 61 79 6f 75 74 20 68 65 72 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 79 6f 75 72 | .layout.here.corresponds.to.your |
b86c0 | 20 61 63 63 65 73 73 20 73 79 73 74 65 6d 2e 00 43 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 28 | .access.system..Channel.number.( |
b86e0 | 49 45 45 45 20 38 30 32 2e 31 31 29 2c 20 66 6f 72 20 32 2e 34 47 68 7a 20 28 38 30 32 2e 31 31 | IEEE.802.11),.for.2.4Ghz.(802.11 |
b8700 | 20 62 2f 67 2f 6e 29 20 63 68 61 6e 6e 65 6c 73 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 2d 31 34 | .b/g/n).channels.range.from.1-14 |
b8720 | 2e 20 4f 6e 20 35 47 68 7a 20 28 38 30 32 2e 31 31 20 61 2f 68 2f 6a 2f 6e 2f 61 63 29 20 63 68 | ..On.5Ghz.(802.11.a/h/j/n/ac).ch |
b8740 | 61 6e 6e 65 6c 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 30 2c 20 33 34 20 74 6f 20 31 37 | annels.available.are.0,.34.to.17 |
b8760 | 33 00 43 68 65 63 6b 20 69 66 20 74 68 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 64 65 76 69 63 | 3.Check.if.the.Intel...QAT.devic |
b8780 | 65 20 69 73 20 75 70 20 61 6e 64 20 72 65 61 64 79 20 74 6f 20 64 6f 20 74 68 65 20 6a 6f 62 2e | e.is.up.and.ready.to.do.the.job. |
b87a0 | 00 43 68 65 63 6b 20 73 74 61 74 75 73 00 43 68 65 63 6b 20 74 68 65 20 6d 61 6e 79 20 70 61 72 | .Check.status.Check.the.many.par |
b87c0 | 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 60 73 68 6f 77 20 | ameters.available.for.the.`show. |
b87e0 | 69 70 76 36 20 72 6f 75 74 65 60 20 63 6f 6d 6d 61 6e 64 3a 00 43 68 65 63 6b 3a 00 43 68 65 63 | ipv6.route`.command:.Check:.Chec |
b8800 | 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 43 68 65 63 6b 73 00 43 68 6f 6f 73 65 20 79 | king.connections.Checks.Choose.y |
b8820 | 6f 75 72 20 60 60 64 69 72 65 63 74 6f 72 79 60 60 20 6c 6f 63 61 74 69 6f 6e 20 63 61 72 65 66 | our.``directory``.location.caref |
b8840 | 75 6c 6c 79 20 6f 72 20 79 6f 75 20 77 69 6c 6c 20 6c 6f 6f 73 65 20 74 68 65 20 63 6f 6e 74 65 | ully.or.you.will.loose.the.conte |
b8860 | 6e 74 20 6f 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 73 2e 20 41 6e 79 20 64 69 72 65 63 74 | nt.on.image.upgrades..Any.direct |
b8880 | 6f 72 79 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 69 73 20 73 61 76 65 20 61 74 | ory.under.``/config``.is.save.at |
b88a0 | 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 2e 00 43 69 73 63 6f 20 43 61 | .this.will.be.migrated..Cisco.Ca |
b88c0 | 74 61 6c 79 73 74 00 43 69 73 63 6f 20 61 6e 64 20 41 6c 6c 69 65 64 20 54 65 6c 65 73 79 6e 20 | talyst.Cisco.and.Allied.Telesyn. |
b88e0 | 63 61 6c 6c 20 69 74 20 50 72 69 76 61 74 65 20 56 4c 41 4e 00 43 6c 61 6d 70 20 4d 53 53 20 66 | call.it.Private.VLAN.Clamp.MSS.f |
b8900 | 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 49 50 00 43 6c 61 73 73 20 74 72 65 61 74 6d 65 6e 74 | or.a.specific.IP.Class.treatment |
b8920 | 00 43 6c 61 73 73 65 73 00 43 6c 61 73 73 6c 65 73 73 20 73 74 61 74 69 63 20 72 6f 75 74 65 00 | .Classes.Classless.static.route. |
b8940 | 43 6c 65 61 72 20 61 6c 6c 20 42 47 50 20 65 78 74 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 43 6c | Clear.all.BGP.extcommunities..Cl |
b8960 | 69 65 6e 74 00 43 6c 69 65 6e 74 20 41 64 64 72 65 73 73 20 50 6f 6f 6c 73 00 43 6c 69 65 6e 74 | ient.Client.Address.Pools.Client |
b8980 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 | .Authentication.Client.Configura |
b89a0 | 74 69 6f 6e 00 43 6c 69 65 6e 74 20 49 50 20 50 6f 6f 6c 20 41 64 76 61 6e 63 65 64 20 4f 70 74 | tion.Client.IP.Pool.Advanced.Opt |
b89c0 | 69 6f 6e 73 00 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 | ions.Client.IP.addresses.will.be |
b89e0 | 20 70 72 6f 76 69 64 65 64 20 66 72 6f 6d 20 70 6f 6f 6c 20 60 31 39 32 2e 30 2e 32 2e 30 2f 32 | .provided.from.pool.`192.0.2.0/2 |
b8a00 | 35 60 00 43 6c 69 65 6e 74 20 53 69 64 65 00 43 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 | 5`.Client.Side.Client.configurat |
b8a20 | 69 6f 6e 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 43 6c 69 65 6e 74 20 64 6f | ion.Client.domain.name.Client.do |
b8a40 | 6d 61 69 6e 20 73 65 61 72 63 68 00 43 6c 69 65 6e 74 20 69 73 6f 6c 61 74 69 6f 6e 20 63 61 6e | main.search.Client.isolation.can |
b8a60 | 20 62 65 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 77 2d 6c 65 76 65 6c 20 62 72 | .be.used.to.prevent.low-level.br |
b8a80 | 69 64 67 69 6e 67 20 6f 66 20 66 72 61 6d 65 73 20 62 65 74 77 65 65 6e 20 61 73 73 6f 63 69 61 | idging.of.frames.between.associa |
b8aa0 | 74 65 64 20 73 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 42 53 53 2e 00 43 6c 69 65 6e 74 3a | ted.stations.in.the.BSS..Client: |
b8ac0 | 00 43 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 68 65 20 43 | .Clients.are.identified.by.the.C |
b8ae0 | 4e 20 66 69 65 6c 64 20 6f 66 20 74 68 65 69 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 | N.field.of.their.x.509.certifica |
b8b00 | 74 65 73 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 74 68 65 20 43 4e 20 69 73 20 60 | tes,.in.this.example.the.CN.is.` |
b8b20 | 60 63 6c 69 65 6e 74 30 60 60 3a 00 43 6c 69 65 6e 74 73 20 72 65 63 65 69 76 69 6e 67 20 61 64 | `client0``:.Clients.receiving.ad |
b8b40 | 76 65 72 74 69 73 65 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 73 | vertise.messages.from.multiple.s |
b8b60 | 65 72 76 65 72 73 20 63 68 6f 6f 73 65 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 | ervers.choose.the.server.with.th |
b8b80 | 65 20 68 69 67 68 65 73 74 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 | e.highest.preference.value..The. |
b8ba0 | 72 61 6e 67 65 20 66 6f 72 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 60 60 30 2e 2e 2e 32 35 | range.for.this.value.is.``0...25 |
b8bc0 | 35 60 60 2e 00 43 6c 6f 63 6b 20 64 61 65 6d 6f 6e 00 43 6f 6d 6d 61 6e 64 20 63 6f 6d 70 6c 65 | 5``..Clock.daemon.Command.comple |
b8be0 | 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 6c 69 73 74 20 61 76 61 69 6c 61 62 | tion.can.be.used.to.list.availab |
b8c00 | 6c 65 20 74 69 6d 65 20 7a 6f 6e 65 73 2e 20 54 68 65 20 61 64 6a 75 73 74 6d 65 6e 74 20 66 6f | le.time.zones..The.adjustment.fo |
b8c20 | 72 20 64 61 79 6c 69 67 68 74 20 74 69 6d 65 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 20 | r.daylight.time.will.take.place. |
b8c40 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 74 69 6d 65 20 | automatically.based.on.the.time. |
b8c60 | 6f 66 20 79 65 61 72 2e 00 43 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 61 62 6c 69 6e 67 20 61 | of.year..Command.for.disabling.a |
b8c80 | 20 72 75 6c 65 20 62 75 74 20 6b 65 65 70 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 | .rule.but.keep.it.in.the.configu |
b8ca0 | 72 61 74 69 6f 6e 2e 00 43 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 | ration..Command.should.probably. |
b8cc0 | 62 65 20 65 78 74 65 6e 64 65 64 20 74 6f 20 6c 69 73 74 20 61 6c 73 6f 20 74 68 65 20 72 65 61 | be.extended.to.list.also.the.rea |
b8ce0 | 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 69 73 20 6f 6e | l.interfaces.assigned.to.this.on |
b8d00 | 65 20 56 52 46 20 74 6f 20 67 65 74 20 61 20 62 65 74 74 65 72 20 6f 76 65 72 76 69 65 77 2e 00 | e.VRF.to.get.a.better.overview.. |
b8d20 | 43 6f 6d 6d 61 6e 64 20 75 73 65 64 20 74 6f 20 75 70 64 61 74 65 20 47 65 6f 49 50 20 64 61 74 | Command.used.to.update.GeoIP.dat |
b8d40 | 61 62 61 73 65 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 74 73 2e 00 43 6f 6d 6d 61 6e 64 | abase.and.firewall.sets..Command |
b8d60 | 73 00 43 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 76 61 6c 69 64 20 66 6f | s.Common.configuration,.valid.fo |
b8d80 | 72 20 62 6f 74 68 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 6e 6f 64 | r.both.primary.and.secondary.nod |
b8da0 | 65 2e 00 43 6f 6d 6d 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | e..Common.interface.configuratio |
b8dc0 | 6e 00 43 6f 6d 6d 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 65 64 65 72 61 74 69 6f | n.Common.parameters.Confederatio |
b8de0 | 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 | n.Configuration.Confidentiality. |
b8e00 | e2 80 93 20 45 6e 63 72 79 70 74 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 70 72 65 | ....Encryption.of.packets.to.pre |
b8e20 | 76 65 6e 74 20 73 6e 6f 6f 70 69 6e 67 20 62 79 20 61 6e 20 75 6e 61 75 74 68 6f 72 69 7a 65 64 | vent.snooping.by.an.unauthorized |
b8e40 | 20 73 6f 75 72 63 65 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 61 | .source..Configuration.Configura |
b8e60 | 74 69 6f 6e 20 45 78 61 6d 70 6c 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 | tion.Example.Configuration.Examp |
b8e80 | 6c 65 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 75 69 64 65 00 43 6f 6e 66 69 67 75 72 | les.Configuration.Guide.Configur |
b8ea0 | 61 74 69 6f 6e 20 4f 70 74 69 6f 6e 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d | ation.Options.Configuration.comm |
b8ec0 | 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 43 6f | ands.covered.in.this.section:.Co |
b8ee0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 74 68 65 20 70 72 69 | nfiguration.commands.for.the.pri |
b8f00 | 76 61 74 65 20 61 6e 64 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 62 65 20 64 69 73 70 | vate.and.public.key.will.be.disp |
b8f20 | 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 73 63 72 65 65 6e 20 77 68 69 63 68 20 6e 65 65 64 73 20 | layed.on.the.screen.which.needs. |
b8f40 | 74 6f 20 62 65 20 73 65 74 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 66 69 72 73 74 2e 20 4e | to.be.set.on.the.router.first..N |
b8f60 | 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 | ote.the.command.with.the.public. |
b8f80 | 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 | key.(set.pki.key-pair.ipsec-LEFT |
b8fa0 | 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e | .public.key.'MIIBIjANBgkqh...'). |
b8fc0 | 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 | .Then.do.the.same.on.the.opposit |
b8fe0 | 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 | e.router:.Configuration.commands |
b9000 | 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 | .will.display..Note.the.command. |
b9020 | 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 | with.the.public.key.(set.pki.key |
b9040 | 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 | -pair.ipsec-LEFT.public.key.'MII |
b9060 | 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d | BIjANBgkqh...')..Then.do.the.sam |
b9080 | 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 | e.on.the.opposite.router:.Config |
b90a0 | 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 | uration.example:.Configuration.f |
b90c0 | 6f 72 20 74 68 65 73 65 20 65 78 70 6f 72 74 65 64 20 72 6f 75 74 65 73 20 6d 75 73 74 2c 20 61 | or.these.exported.routes.must,.a |
b90e0 | 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 73 70 65 63 69 66 79 20 74 68 65 73 65 20 74 77 6f 20 70 | t.a.minimum,.specify.these.two.p |
b9100 | 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 3a 72 65 66 | arameters..Configuration.of.:ref |
b9120 | 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | :`routing-static`.Configuration. |
b9140 | 6f 66 20 61 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 69 72 00 43 6f 6e 66 69 67 75 72 | of.a.DHCP.failover.pair.Configur |
b9160 | 61 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 20 62 65 74 77 65 65 6e 20 61 | ation.of.route.leaking.between.a |
b9180 | 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 46 | .unicast.VRF.RIB.and.the.VPN.SAF |
b91a0 | 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 69 73 20 61 63 63 6f | I.RIB.of.the.default.VRF.is.acco |
b91c0 | 6d 70 6c 69 73 68 65 64 20 76 69 61 20 63 6f 6d 6d 61 6e 64 73 20 69 6e 20 74 68 65 20 63 6f 6e | mplished.via.commands.in.the.con |
b91e0 | 74 65 78 74 20 6f 66 20 61 20 56 52 46 20 61 64 64 72 65 73 73 2d 66 61 6d 69 6c 79 2e 00 43 6f | text.of.a.VRF.address-family..Co |
b9200 | 6e 66 69 67 75 72 65 00 43 6f 6e 66 69 67 75 72 65 20 3a 61 62 62 72 3a 60 4d 54 55 20 28 4d 61 | nfigure.Configure.:abbr:`MTU.(Ma |
b9220 | 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 29 60 20 6f 6e 20 67 69 76 | ximum.Transmission.Unit)`.on.giv |
b9240 | 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 20 69 73 20 74 68 65 20 73 69 7a 65 | en.`<interface>`..It.is.the.size |
b9260 | 20 28 69 6e 20 62 79 74 65 73 29 20 6f 66 20 74 68 65 20 6c 61 72 67 65 73 74 20 65 74 68 65 72 | .(in.bytes).of.the.largest.ether |
b9280 | 6e 65 74 20 66 72 61 6d 65 20 73 65 6e 74 20 6f 6e 20 74 68 69 73 20 6c 69 6e 6b 2e 00 43 6f 6e | net.frame.sent.on.this.link..Con |
b92a0 | 66 69 67 75 72 65 20 42 46 44 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 72 65 63 6f 72 | figure.BFD.Configure.DNS.`<recor |
b92c0 | 64 3e 60 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 75 70 64 61 74 65 64 2e 20 54 68 69 | d>`.which.should.be.updated..Thi |
b92e0 | 73 20 63 61 6e 20 62 65 20 73 65 74 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 43 6f 6e | s.can.be.set.multiple.times..Con |
b9300 | 66 69 67 75 72 65 20 44 4e 53 20 60 3c 7a 6f 6e 65 3e 60 20 74 6f 20 62 65 20 75 70 64 61 74 65 | figure.DNS.`<zone>`.to.be.update |
b9320 | 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 45 4e 45 56 45 20 74 75 6e 6e 65 6c 20 66 61 72 20 65 | d..Configure.GENEVE.tunnel.far.e |
b9340 | 6e 64 2f 72 65 6d 6f 74 65 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 | nd/remote.tunnel.endpoint..Confi |
b9360 | 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 33 | gure.Graceful.Restart.:rfc:`3623 |
b9380 | 60 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 68 65 | `.helper.support..By.default,.he |
b93a0 | 6c 70 65 72 20 73 75 70 70 6f 72 74 20 69 73 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 61 6c 6c | lper.support.is.disabled.for.all |
b93c0 | 20 6e 65 69 67 68 62 6f 75 72 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 20 65 6e 61 62 6c 65 73 | .neighbours..This.config.enables |
b93e0 | 2f 64 69 73 61 62 6c 65 73 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 6f 6e 20 74 68 69 73 | /disables.helper.support.on.this |
b9400 | 20 72 6f 75 74 65 72 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 43 6f 6e 66 | .router.for.all.neighbours..Conf |
b9420 | 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 | igure.Graceful.Restart.:rfc:`362 |
b9440 | 33 60 20 72 65 73 74 61 72 74 69 6e 67 20 73 75 70 70 6f 72 74 2e 20 57 68 65 6e 20 65 6e 61 62 | 3`.restarting.support..When.enab |
b9460 | 6c 65 64 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 72 61 63 65 20 70 65 72 69 6f 64 20 69 73 | led,.the.default.grace.period.is |
b9480 | 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 43 4d 50 20 74 68 72 | .120.seconds..Configure.ICMP.thr |
b94a0 | 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 50 20 | eshold.parameters..Configure.IP. |
b94c0 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 44 48 43 50 20 60 3c 73 65 72 76 65 72 3e 60 20 77 | address.of.the.DHCP.`<server>`.w |
b94e0 | 68 69 63 68 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 6c 61 79 65 64 20 70 61 63 | hich.will.handle.the.relayed.pac |
b9500 | 6b 65 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e | kets..Configure.RADIUS.`<server> |
b9520 | 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 64 20 70 6f 72 74 20 66 6f 72 20 61 75 74 68 | `.and.its.required.port.for.auth |
b9540 | 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 | entication.requests..Configure.R |
b9560 | 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 | ADIUS.`<server>`.and.its.require |
b9580 | 64 20 73 68 61 72 65 64 20 60 3c 73 65 63 72 65 74 3e 60 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 | d.shared.`<secret>`.for.communic |
b95a0 | 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 43 6f | ating.with.the.RADIUS.server..Co |
b95c0 | 6e 66 69 67 75 72 65 20 53 4e 41 54 20 72 75 6c 65 20 28 34 30 29 20 74 6f 20 6f 6e 6c 79 20 4e | nfigure.SNAT.rule.(40).to.only.N |
b95e0 | 41 54 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 | AT.packets.with.a.destination.ad |
b9600 | 64 72 65 73 73 20 6f 66 20 31 39 32 2e 30 2e 32 2e 31 2e 00 43 6f 6e 66 69 67 75 72 65 20 54 43 | dress.of.192.0.2.1..Configure.TC |
b9620 | 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 65 | P.threshold.parameters.Configure |
b9640 | 20 55 44 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 | .UDP.threshold.parameters.Config |
b9660 | 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 61 | ure.`<message>`.which.is.shown.a |
b9680 | 66 74 65 72 20 75 73 65 72 20 68 61 73 20 6c 6f 67 67 65 64 20 69 6e 20 74 6f 20 74 68 65 20 73 | fter.user.has.logged.in.to.the.s |
b96a0 | 79 73 74 65 6d 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 | ystem..Configure.`<message>`.whi |
b96c0 | 63 68 20 69 73 20 73 68 6f 77 6e 20 64 75 72 69 6e 67 20 53 53 48 20 63 6f 6e 6e 65 63 74 20 61 | ch.is.shown.during.SSH.connect.a |
b96e0 | 6e 64 20 62 65 66 6f 72 65 20 61 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2e 00 43 | nd.before.a.user.is.logged.in..C |
b9700 | 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e 20 | onfigure.`<password>`.used.when. |
b9720 | 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 | authenticating.the.update.reques |
b9740 | 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 | t.for.DynDNS.service.identified. |
b9760 | 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 | by.`<service-name>`..Configure.` |
b9780 | 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 | <password>`.used.when.authentica |
b97a0 | 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 | ting.the.update.request.for.DynD |
b97c0 | 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | NS.service.identified.by.`<servi |
b97e0 | 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 65 | ce>`..Configure.`<username>`.use |
b9800 | 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 | d.when.authenticating.the.update |
b9820 | 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e | .request.for.DynDNS.service.iden |
b9840 | 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 | tified.by.`<service-name>`..Conf |
b9860 | 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 | igure.`<username>`.used.when.aut |
b9880 | 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 | henticating.the.update.request.f |
b98a0 | 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 | or.DynDNS.service.identified.by. |
b98c0 | 60 3c 73 65 72 76 69 63 65 3e 60 2e 20 46 6f 72 20 4e 61 6d 65 63 68 65 61 70 2c 20 73 65 74 20 | `<service>`..For.Namecheap,.set. |
b98e0 | 74 68 65 20 3c 64 6f 6d 61 69 6e 3e 20 79 6f 75 20 77 69 73 68 20 74 6f 20 75 70 64 61 74 65 2e | the.<domain>.you.wish.to.update. |
b9900 | 00 43 6f 6e 66 69 67 75 72 65 20 61 20 55 52 4c 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 69 | .Configure.a.URL.that.contains.i |
b9920 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 69 6d 61 67 65 73 2e 00 43 6f 6e 66 69 67 75 | nformation.about.images..Configu |
b9940 | 72 65 20 61 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 61 64 64 72 65 73 73 2e 20 49 74 20 63 61 6e | re.a.sFlow.agent.address..It.can |
b9960 | 20 62 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f | .be.IPv4.or.IPv6.address,.but.yo |
b9980 | 75 20 6d 75 73 74 20 73 65 74 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 | u.must.set.the.same.protocol,.wh |
b99a0 | 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 20 | ich.is.used.for.sFlow.collector. |
b99c0 | 61 64 64 72 65 73 73 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 75 73 69 6e 67 20 72 6f 75 | addresses..By.default,.using.rou |
b99e0 | 74 65 72 2d 69 64 20 66 72 6f 6d 20 42 47 50 20 6f 72 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c | ter-id.from.BGP.or.OSPF.protocol |
b9a00 | 2c 20 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d | ,.or.the.primary.IP.address.from |
b9a20 | 20 74 68 65 20 66 69 72 73 74 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 | .the.first.interface..Configure. |
b9a40 | 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e | a.static.route.for.<subnet>.usin |
b9a60 | 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 2c 20 75 73 65 20 73 6f 75 72 63 65 | g.gateway.<address>.,.use.source |
b9a80 | 20 61 64 64 72 65 73 73 20 74 6f 20 69 6e 64 65 6e 74 69 66 79 20 74 68 65 20 70 65 65 72 20 77 | .address.to.indentify.the.peer.w |
b9aa0 | 68 65 6e 20 69 73 20 6d 75 6c 74 69 2d 68 6f 70 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 74 68 65 | hen.is.multi-hop.session.and.the |
b9ac0 | 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 | .gateway.address.as.BFD.peer.des |
b9ae0 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 74 | tination.address..Configure.a.st |
b9b00 | 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 61 | atic.route.for.<subnet>.using.ga |
b9b20 | 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 61 6e 64 20 75 73 65 20 74 68 65 20 67 61 74 65 | teway.<address>.and.use.the.gate |
b9b40 | 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 74 | way.address.as.BFD.peer.destinat |
b9b60 | 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f | ion.address..Configure.address.o |
b9b80 | 66 20 4e 65 74 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 4e 65 74 46 6c 6f 77 20 73 65 72 | f.NetFlow.collector..NetFlow.ser |
b9ba0 | 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c | ver.at.`<address>`.can.be.both.l |
b9bc0 | 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 | istening.on.an.IPv4.or.IPv6.addr |
b9be0 | 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 | ess..Configure.address.of.sFlow. |
b9c00 | 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 3c 61 64 64 72 | collector..sFlow.server.at.<addr |
b9c20 | 65 73 73 3e 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e | ess>.can.be.both.listening.on.an |
b9c40 | 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 | .IPv4.or.IPv6.address..Configure |
b9c60 | 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c | .address.of.sFlow.collector..sFl |
b9c80 | 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 | ow.server.at.`<address>`.can.be. |
b9ca0 | 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 42 75 74 20 79 6f 75 | an.IPv4.or.IPv6.address..But.you |
b9cc0 | 20 63 61 6e 6e 6f 74 20 65 78 70 6f 72 74 20 74 6f 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 | .cannot.export.to.both.IPv4.and. |
b9ce0 | 49 50 76 36 20 63 6f 6c 6c 65 63 74 6f 72 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 | IPv6.collectors.at.the.same.time |
b9d00 | 21 00 43 6f 6e 66 69 67 75 72 65 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 | !.Configure.agent.IP.address.ass |
b9d20 | 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e | ociated.with.this.interface..Con |
b9d40 | 66 69 67 75 72 65 20 61 67 67 72 65 67 61 74 69 6f 6e 20 64 65 6c 61 79 20 74 69 6d 65 72 20 69 | figure.aggregation.delay.timer.i |
b9d60 | 6e 74 65 72 76 61 6c 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6c 65 72 74 20 73 63 72 69 70 74 20 | nterval..Configure.alert.script. |
b9d80 | 74 68 61 74 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 61 6e 20 61 74 | that.will.be.executed.when.an.at |
b9da0 | 74 61 63 6b 20 69 73 20 64 65 74 65 63 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 20 61 | tack.is.detected..Configure.an.a |
b9dc0 | 63 63 6f 75 6e 74 69 6e 67 20 73 65 72 76 65 72 20 61 6e 64 20 65 6e 61 62 6c 65 20 61 63 63 6f | ccounting.server.and.enable.acco |
b9de0 | 75 6e 74 69 6e 67 20 77 69 74 68 3a 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 6c | unting.with:.Configure.and.enabl |
b9e00 | 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | e.collection.of.flow.information |
b9e20 | 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | .for.the.interface.identified.by |
b9e40 | 20 3c 69 6e 74 65 72 66 61 63 65 3e 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 | .<interface>..Configure.and.enab |
b9e60 | 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f | le.collection.of.flow.informatio |
b9e80 | 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 | n.for.the.interface.identified.b |
b9ea0 | 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 75 74 6f 2d | y.`<interface>`..Configure.auto- |
b9ec0 | 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 6e 65 77 20 69 6d 61 67 65 73 00 43 6f 6e 66 69 67 75 72 | checking.for.new.images.Configur |
b9ee0 | 65 20 62 61 63 6b 65 6e 64 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 | e.backend.`<name>`.mode.TCP.or.H |
b9f00 | 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 28 61 20 61 6e | TTP.Configure.both.routers.(a.an |
b9f20 | 64 20 62 29 20 66 6f 72 20 44 48 43 50 76 36 2d 50 44 20 76 69 61 20 64 75 6d 6d 79 20 69 6e 74 | d.b).for.DHCPv6-PD.via.dummy.int |
b9f40 | 65 72 66 61 63 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 | erface:.Configure.direction.for. |
b9f60 | 70 72 6f 63 65 73 73 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 | processing.traffic..Configure.ei |
b9f80 | 74 68 65 72 20 6f 6e 65 20 6f 72 20 74 77 6f 20 73 74 6f 70 20 62 69 74 73 2e 20 54 68 69 73 20 | ther.one.or.two.stop.bits..This. |
b9fa0 | 64 65 66 61 75 6c 74 73 20 74 6f 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 73 20 69 66 20 6c 65 66 | defaults.to.one.stop.bits.if.lef |
b9fc0 | 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 72 | t.unconfigured..Configure.either |
b9fe0 | 20 73 65 76 65 6e 20 6f 72 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 2e 20 54 68 69 73 20 | .seven.or.eight.data.bits..This. |
ba000 | 64 65 66 61 75 6c 74 73 20 74 6f 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 20 69 66 20 6c | defaults.to.eight.data.bits.if.l |
ba020 | 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 67 65 6e 65 | eft.unconfigured..Configure.gene |
ba040 | 72 61 6c 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 | ral.threshold.parameters..Config |
ba060 | 75 72 65 20 68 6f 77 20 6c 6f 6e 67 20 61 6e 20 49 50 20 28 61 74 74 61 63 6b 65 72 29 20 73 68 | ure.how.long.an.IP.(attacker).sh |
ba080 | 6f 75 6c 64 20 62 65 20 6b 65 70 74 20 69 6e 20 62 6c 6f 63 6b 65 64 20 73 74 61 74 65 2e 20 44 | ould.be.kept.in.blocked.state..D |
ba0a0 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 39 30 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 | efault.value.is.1900..Configure. |
ba0c0 | 69 6e 64 69 76 69 64 75 61 6c 20 62 72 69 64 67 65 20 70 6f 72 74 20 60 3c 70 72 69 6f 72 69 74 | individual.bridge.port.`<priorit |
ba0e0 | 79 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 | y>`..Configure.interface.`<inter |
ba100 | 66 61 63 65 3e 60 20 77 69 74 68 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 69 6e 74 65 72 66 61 63 | face>`.with.one.or.more.interfac |
ba120 | 65 20 61 64 64 72 65 73 73 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 | e.addresses..Configure.interface |
ba140 | 2d 73 70 65 63 69 66 69 63 20 48 6f 73 74 2f 52 6f 75 74 65 72 20 62 65 68 61 76 69 6f 75 72 2e | -specific.Host/Router.behaviour. |
ba160 | 20 49 66 20 73 65 74 2c 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 73 77 69 74 | .If.set,.the.interface.will.swit |
ba180 | 63 68 20 74 6f 20 68 6f 73 74 20 6d 6f 64 65 20 61 6e 64 20 49 50 76 36 20 66 6f 72 77 61 72 64 | ch.to.host.mode.and.IPv6.forward |
ba1a0 | 69 6e 67 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 6c 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 | ing.will.be.disabled.on.this.int |
ba1c0 | 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 69 73 74 65 6e 20 69 6e 74 65 72 66 61 | erface..Configure.listen.interfa |
ba1e0 | 63 65 20 66 6f 72 20 6d 69 72 72 6f 72 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 | ce.for.mirroring.traffic..Config |
ba200 | 75 72 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e | ure.local.IPv4.address.to.listen |
ba220 | 20 66 6f 72 20 73 66 6c 6f 77 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 77 20 53 4e 4d 50 20 75 | .for.sflow..Configure.new.SNMP.u |
ba240 | 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 22 | ser.named."vyos".with.password." |
ba260 | 76 79 6f 73 31 32 33 34 35 36 37 38 22 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 | vyos12345678".Configure.next-hop |
ba280 | 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 60 3c 74 61 72 67 65 74 2d 61 64 64 72 65 73 | .`<address>`.and.`<target-addres |
ba2a0 | 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 53 70 | s>`.for.an.IPv4.static.route..Sp |
ba2c0 | 65 63 69 66 79 20 74 68 65 20 74 61 72 67 65 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f | ecify.the.target.IPv4.address.fo |
ba2e0 | 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 | r.health.checking..Configure.nex |
ba300 | 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 | t-hop.`<address>`.for.an.IPv4.st |
ba320 | 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 74 | atic.route..Multiple.static.rout |
ba340 | 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 | es.can.be.created..Configure.nex |
ba360 | 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 36 20 73 74 | t-hop.`<address>`.for.an.IPv6.st |
ba380 | 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 74 | atic.route..Multiple.static.rout |
ba3a0 | 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 | es.can.be.created..Configure.one |
ba3c0 | 20 6f 66 20 74 68 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 | .of.the.predefined.system.perfor |
ba3e0 | 6d 61 6e 63 65 20 70 72 6f 66 69 6c 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 | mance.profiles..Configure.one.or |
ba400 | 20 6d 6f 72 65 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 4e 54 | .more.attributes.to.the.given.NT |
ba420 | 50 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 | P.server..Configure.one.or.more. |
ba440 | 73 65 72 76 65 72 73 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 20 53 65 72 | servers.for.synchronisation..Ser |
ba460 | 76 65 72 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 | ver.name.can.be.either.an.IP.add |
ba480 | 72 65 73 73 20 6f 72 20 3a 61 62 62 72 3a 60 46 51 44 4e 20 28 46 75 6c 6c 79 20 51 75 61 6c 69 | ress.or.:abbr:`FQDN.(Fully.Quali |
ba4a0 | 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 29 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 70 | fied.Domain.Name)`..Configure.op |
ba4c0 | 74 69 6f 6e 61 6c 20 54 54 4c 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 72 65 | tional.TTL.value.on.the.given.re |
ba4e0 | 73 6f 75 72 63 65 20 72 65 63 6f 72 64 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 | source.record..This.defaults.to. |
ba500 | 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 | 600.seconds..Configure.physical. |
ba520 | 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 | interface.duplex.setting..Config |
ba540 | 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 73 65 74 | ure.physical.interface.speed.set |
ba560 | 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 66 | ting..Configure.port.mirroring.f |
ba580 | 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 61 | or.`interface`.inbound.traffic.a |
ba5a0 | 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d | nd.copy.the.traffic.to.`monitor- |
ba5c0 | 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 | interface`.Configure.port.mirror |
ba5e0 | 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 | ing.for.`interface`.outbound.tra |
ba600 | 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f | ffic.and.copy.the.traffic.to.`mo |
ba620 | 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 | nitor-interface`.Configure.port. |
ba640 | 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 2e | number.of.remote.VXLAN.endpoint. |
ba660 | 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 62 65 20 75 73 65 | .Configure.port.number.to.be.use |
ba680 | 64 20 66 6f 72 20 73 66 6c 6f 77 20 63 6f 6e 65 63 74 69 6f 6e 2e 20 44 65 66 61 75 6c 74 20 70 | d.for.sflow.conection..Default.p |
ba6a0 | 6f 72 74 20 69 73 20 36 33 34 33 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 74 6f 63 6f 6c 20 | ort.is.6343..Configure.protocol. |
ba6c0 | 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 | used.for.communication.to.remote |
ba6e0 | 20 73 79 73 6c 6f 67 20 68 6f 73 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 | .syslog.host..This.can.be.either |
ba700 | 20 55 44 50 20 6f 72 20 54 43 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 78 79 20 70 6f 72 | .UDP.or.TCP..Configure.proxy.por |
ba720 | 74 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6c 69 73 74 65 6e 20 74 6f 20 74 68 65 20 64 | t.if.it.does.not.listen.to.the.d |
ba740 | 65 66 61 75 6c 74 20 70 6f 72 74 20 38 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 73 46 6c 6f 77 20 | efault.port.80..Configure.sFlow. |
ba760 | 61 67 65 6e 74 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 43 6f 6e 66 69 | agent.IPv4.or.IPv6.address.Confi |
ba780 | 67 75 72 65 20 73 63 68 65 64 75 6c 65 20 63 6f 75 6e 74 65 72 2d 70 6f 6c 6c 69 6e 67 20 69 6e | gure.schedule.counter-polling.in |
ba7a0 | 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 29 00 43 6f 6e 66 69 67 75 72 65 | .seconds.(default:.30).Configure |
ba7c0 | 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 54 | .service.`<name>`.mode.TCP.or.HT |
ba7e0 | 54 50 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f | TP.Configure.service.`<name>`.to |
ba800 | 20 75 73 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 3c 6e 61 6d 65 3e 00 43 6f 6e 66 69 67 75 72 | .use.the.backend.<name>.Configur |
ba820 | 65 20 73 65 73 73 69 6f 6e 20 74 69 6d 65 6f 75 74 20 61 66 74 65 72 20 77 68 69 63 68 20 74 68 | e.session.timeout.after.which.th |
ba840 | 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 6f 75 74 2e 00 43 6f 6e 66 69 | e.user.will.be.logged.out..Confi |
ba860 | 67 75 72 65 20 73 79 73 74 65 6d 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 20 41 20 64 6f 6d 61 69 | gure.system.domain.name..A.domai |
ba880 | 6e 20 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 | n.name.must.start.and.end.with.a |
ba8a0 | 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 6e | .letter.or.digit,.and.have.as.in |
ba8c0 | 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c 20 | terior.characters.only.letters,. |
ba8e0 | 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 | digits,.or.a.hyphen..Configure.t |
ba900 | 68 65 20 41 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e 67 | he.A-side.router.for.NPTv6.using |
ba920 | 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 74 | .the.prefixes.above:.Configure.t |
ba940 | 68 65 20 42 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e 67 | he.B-side.router.for.NPTv6.using |
ba960 | 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 74 | .the.prefixes.above:.Configure.t |
ba980 | 68 65 20 44 4e 53 20 60 3c 73 65 72 76 65 72 3e 60 20 49 50 2f 46 51 44 4e 20 75 73 65 64 20 77 | he.DNS.`<server>`.IP/FQDN.used.w |
ba9a0 | 68 65 6e 20 75 70 64 61 74 69 6e 67 20 74 68 69 73 20 64 79 6e 61 6d 69 63 20 61 73 73 69 67 6e | hen.updating.this.dynamic.assign |
ba9c0 | 6d 65 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 | ment..Configure.the.IPv4.or.IPv6 |
ba9e0 | 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 54 46 54 50 20 73 65 72 76 | .listen.address.of.the.TFTP.serv |
baa00 | 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 | er..Multiple.IPv4.and.IPv6.addre |
baa20 | 73 73 65 73 20 63 61 6e 20 62 65 20 67 69 76 65 6e 2e 20 54 68 65 72 65 20 77 69 6c 6c 20 62 65 | sses.can.be.given..There.will.be |
baa40 | 20 6f 6e 65 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 73 74 61 6e 63 65 73 20 6c 69 73 74 65 | .one.TFTP.server.instances.liste |
baa60 | 6e 69 6e 67 20 6f 6e 20 65 61 63 68 20 49 50 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 | ning.on.each.IP.address..Configu |
baa80 | 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f | re.the.connection.tracking.proto |
baaa0 | 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 73 2e 20 41 6c 6c 20 6d 6f 64 75 6c 65 73 20 | col.helper.modules..All.modules. |
baac0 | 61 72 65 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c 74 2e 00 43 6f 6e 66 69 67 75 72 65 | are.enable.by.default..Configure |
baae0 | 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 | .the.discrete.port.under.which.t |
bab00 | 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e | he.RADIUS.server.can.be.reached. |
bab20 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e 64 | .Configure.the.discrete.port.und |
bab40 | 65 72 20 77 68 69 63 68 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 | er.which.the.TACACS.server.can.b |
bab60 | 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 61 64 2d 62 61 | e.reached..Configure.the.load-ba |
bab80 | 6c 61 6e 63 69 6e 67 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 66 6f | lancing.reverse-proxy.service.fo |
baba0 | 72 20 48 54 54 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 72 61 66 66 69 63 20 63 61 70 74 75 72 | r.HTTP..Configure.traffic.captur |
babc0 | 65 20 6d 6f 64 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 3a | e.mode..Configure.user.defined.: |
babe0 | 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 | abbr:`MAC.(Media.Access.Control) |
bac00 | 60 20 61 64 64 72 65 73 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | `.address.on.given.`<interface>` |
bac20 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 77 61 74 65 72 6d 61 72 6b 20 77 61 72 6e 69 6e 67 20 67 65 | ..Configure.watermark.warning.ge |
bac40 | 6e 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 6e 20 49 47 4d 50 20 67 72 6f 75 70 20 6c 69 6d 69 74 | neration.for.an.IGMP.group.limit |
bac60 | 2e 20 47 65 6e 65 72 61 74 65 73 20 77 61 72 6e 69 6e 67 20 6f 6e 63 65 20 74 68 65 20 63 6f 6e | ..Generates.warning.once.the.con |
bac80 | 66 69 67 75 72 65 64 20 67 72 6f 75 70 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 20 77 | figured.group.limit.is.reached.w |
baca0 | 68 69 6c 65 20 61 64 64 69 6e 67 20 6e 65 77 20 67 72 6f 75 70 73 2e 00 43 6f 6e 66 69 67 75 72 | hile.adding.new.groups..Configur |
bacc0 | 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 60 3c 69 64 3e 60 20 69 73 20 75 73 65 64 20 | ed.routing.table.`<id>`.is.used. |
bace0 | 62 79 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 | by.VRF.`<name>`..Configured.valu |
bad00 | 65 00 43 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 73 6f 20 | e.Configures.the.BGP.speaker.so. |
bad20 | 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 69 6e 62 6f 75 6e 64 20 63 6f 6e | that.it.only.accepts.inbound.con |
bad40 | 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 69 74 | nections.from,.but.does.not.init |
bad60 | 69 61 74 65 20 6f 75 74 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 | iate.outbound.connections.to.the |
bad80 | 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 43 6f 6e 66 69 67 75 72 69 6e 67 | .peer.or.peer.group..Configuring |
bada0 | 20 49 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 73 65 63 00 43 | .IPoE.Server.Configuring.IPsec.C |
badc0 | 6f 6e 66 69 67 75 72 69 6e 67 20 4c 32 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 | onfiguring.L2TP.Server.Configuri |
bade0 | 6e 67 20 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 76 65 72 29 00 43 6f 6e | ng.LNS.(L2TP.Network.Server).Con |
bae00 | 66 69 67 75 72 69 6e 67 20 50 50 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e | figuring.PPPoE.Server.Configurin |
bae20 | 67 20 50 50 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 53 | g.PPTP.Server.Configuring.RADIUS |
bae40 | 20 61 63 63 6f 75 6e 74 69 6e 67 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 | .accounting.Configuring.RADIUS.a |
bae60 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 53 | uthentication.Configuring.SSTP.S |
bae80 | 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 63 6c 69 65 6e 74 00 43 6f | erver.Configuring.SSTP.client.Co |
baea0 | 6e 66 69 67 75 72 69 6e 67 20 56 79 4f 53 20 74 6f 20 61 63 74 20 61 73 20 79 6f 75 72 20 49 50 | nfiguring.VyOS.to.act.as.your.IP |
baec0 | 53 65 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 73 20 6f 6e 65 20 74 | Sec.access.concentrator.is.one.t |
baee0 | 68 69 6e 67 2c 20 62 75 74 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 6e 65 65 64 20 74 6f 20 73 | hing,.but.you.probably.need.to.s |
baf00 | 65 74 75 70 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 | etup.your.client.connecting.to.t |
baf20 | 68 65 20 73 65 72 76 65 72 20 73 6f 20 74 68 65 79 20 63 61 6e 20 74 61 6c 6b 20 74 6f 20 74 68 | he.server.so.they.can.talk.to.th |
baf40 | 65 20 49 50 53 65 63 20 67 61 74 65 77 61 79 2e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 6c | e.IPSec.gateway..Configuring.a.l |
baf60 | 69 73 74 65 6e 2d 61 64 64 72 65 73 73 20 69 73 20 65 73 73 65 6e 74 69 61 6c 20 66 6f 72 20 74 | isten-address.is.essential.for.t |
baf80 | 68 65 20 73 65 72 76 69 63 65 20 74 6f 20 77 6f 72 6b 2e 00 43 6f 6e 6e 65 63 74 2f 44 69 73 63 | he.service.to.work..Connect/Disc |
bafa0 | 6f 6e 6e 65 63 74 00 43 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 20 73 68 6f 75 6c 64 20 75 | onnect.Connected.client.should.u |
bafc0 | 73 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 73 20 74 68 65 69 72 20 44 4e 53 20 73 65 72 76 | se.`<address>`.as.their.DNS.serv |
bafe0 | 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 73 20 62 6f 74 68 20 49 50 | er..This.command.accepts.both.IP |
bb000 | 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 55 70 20 74 6f 20 74 77 6f | v4.and.IPv6.addresses..Up.to.two |
bb020 | 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 | .nameservers.can.be.configured.f |
bb040 | 6f 72 20 49 50 76 34 2c 20 75 70 20 74 6f 20 74 68 72 65 65 20 66 6f 72 20 49 50 76 36 2e 00 43 | or.IPv4,.up.to.three.for.IPv6..C |
bb060 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 | onnections.to.the.RPKI.caching.s |
bb080 | 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 | erver.can.not.only.be.establishe |
bb0a0 | 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 | d.by.HTTP/TLS.but.you.can.also.r |
bb0c0 | 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 | ely.on.a.secure.SSH.session.to.t |
bb0e0 | 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 20 79 6f 75 20 66 69 72 | he.server..To.enable.SSH.you.fir |
bb100 | 73 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 73 65 6c 73 20 61 6e 20 53 53 | st.need.to.create.yoursels.an.SS |
bb120 | 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 | H.client.keypair.using.``generat |
bb140 | 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 | e.ssh.client-key./config/auth/id |
bb160 | 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 | _rsa_rpki``..Once.your.key.is.cr |
bb180 | 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | eated.you.can.setup.the.connecti |
bb1a0 | 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 | on..Connections.to.the.RPKI.cach |
bb1c0 | 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 | ing.server.can.not.only.be.estab |
bb1e0 | 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 | lished.by.HTTP/TLS.but.you.can.a |
bb200 | 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e | lso.rely.on.a.secure.SSH.session |
bb220 | 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 66 | .to.the.server..To.enable.SSH,.f |
bb240 | 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 63 | irst.you.need.to.create.an.SSH.c |
bb260 | 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 | lient.keypair.using.``generate.s |
bb280 | 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 | sh.client-key./config/auth/id_rs |
bb2a0 | 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 | a_rpki``..Once.your.key.is.creat |
bb2c0 | 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e | ed.you.can.setup.the.connection. |
bb2e0 | 00 43 6f 6e 6e 74 72 61 63 6b 00 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 00 43 6f 6e 6e 74 72 | .Conntrack.Conntrack.Sync.Conntr |
bb300 | 61 63 6b 20 53 79 6e 63 20 45 78 61 6d 70 6c 65 00 43 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 | ack.Sync.Example.Conntrack.ignor |
bb320 | 65 20 72 75 6c 65 73 00 43 6f 6e 6e 74 72 61 63 6b 20 6c 6f 67 00 43 6f 6e 73 6f 6c 65 00 43 6f | e.rules.Conntrack.log.Console.Co |
bb340 | 6e 73 6f 6c 65 20 53 65 72 76 65 72 00 43 6f 6e 73 74 72 61 69 6e 20 74 68 65 20 6d 65 6d 6f 72 | nsole.Server.Constrain.the.memor |
bb360 | 79 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 43 6f | y.available.to.the.container..Co |
bb380 | 6e 74 61 69 6e 65 72 00 43 6f 6e 74 61 69 6e 65 72 20 4e 65 74 77 6f 72 6b 73 00 43 6f 6e 74 61 | ntainer.Container.Networks.Conta |
bb3a0 | 69 6e 65 72 20 52 65 67 69 73 74 72 79 00 43 6f 6e 74 72 61 63 6b 20 54 69 6d 65 6f 75 74 73 00 | iner.Registry.Contrack.Timeouts. |
bb3c0 | 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 | Convert.the.address.prefix.of.a. |
bb3e0 | 73 69 6e 67 6c 65 20 60 66 63 30 30 3a 3a 2f 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 | single.`fc00::/64`.network.to.`f |
bb400 | 63 30 31 3a 3a 2f 36 34 60 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 | c01::/64`.Convert.the.address.pr |
bb420 | 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 31 3a 3a 2f 36 34 60 20 6e 65 74 | efix.of.a.single.`fc01::/64`.net |
bb440 | 77 6f 72 6b 20 74 6f 20 60 66 63 30 30 3a 3a 2f 36 34 60 00 43 6f 70 79 20 74 68 65 20 6b 65 79 | work.to.`fc00::/64`.Copy.the.key |
bb460 | 2c 20 61 73 20 69 74 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6c 6f 63 | ,.as.it.is.not.stored.on.the.loc |
bb480 | 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2e 20 42 65 63 61 75 73 65 20 69 74 20 69 73 20 61 20 73 | al.filesystem..Because.it.is.a.s |
bb4a0 | 79 6d 6d 65 74 72 69 63 20 6b 65 79 2c 20 6f 6e 6c 79 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 | ymmetric.key,.only.you.and.your. |
bb4c0 | 70 65 65 72 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 69 74 | peer.should.have.knowledge.of.it |
bb4e0 | 73 20 63 6f 6e 74 65 6e 74 2e 20 4d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 64 69 73 74 72 69 62 | s.content..Make.sure.you.distrib |
bb500 | 75 74 65 20 74 68 65 20 6b 65 79 20 69 6e 20 61 20 73 61 66 65 20 6d 61 6e 6e 65 72 2c 00 43 6f | ute.the.key.in.a.safe.manner,.Co |
bb520 | 75 6e 74 72 79 20 63 6f 64 65 20 28 49 53 4f 2f 49 45 43 20 33 31 36 36 2d 31 29 2e 20 55 73 65 | untry.code.(ISO/IEC.3166-1)..Use |
bb540 | 64 20 74 6f 20 73 65 74 20 72 65 67 75 6c 61 74 6f 72 79 20 64 6f 6d 61 69 6e 2e 20 53 65 74 20 | d.to.set.regulatory.domain..Set. |
bb560 | 61 73 20 6e 65 65 64 65 64 20 74 6f 20 69 6e 64 69 63 61 74 65 20 63 6f 75 6e 74 72 79 20 69 6e | as.needed.to.indicate.country.in |
bb580 | 20 77 68 69 63 68 20 64 65 76 69 63 65 20 69 73 20 6f 70 65 72 61 74 69 6e 67 2e 20 54 68 69 73 | .which.device.is.operating..This |
bb5a0 | 20 63 61 6e 20 6c 69 6d 69 74 20 61 76 61 69 6c 61 62 6c 65 20 63 68 61 6e 6e 65 6c 73 20 61 6e | .can.limit.available.channels.an |
bb5c0 | 64 20 74 72 61 6e 73 6d 69 74 20 70 6f 77 65 72 2e 00 43 72 65 61 74 20 63 6f 6d 6d 75 6e 69 74 | d.transmit.power..Creat.communit |
bb5e0 | 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 | y-list.policy.identified.by.name |
bb600 | 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 | .<text>..Creat.extcommunity-list |
bb620 | 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 | .policy.identified.by.name.<text |
bb640 | 3e 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 | >..Create.DHCP.address.range.wit |
bb660 | 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 | h.a.range.id.of.`<n>`..DHCP.leas |
bb680 | 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 | es.are.taken.from.this.pool..The |
bb6a0 | 20 70 6f 6f 6c 20 73 74 61 72 74 73 20 61 74 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 | .pool.starts.at.address.`<addres |
bb6c0 | 73 3e 60 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 | s>`..Create.DHCP.address.range.w |
bb6e0 | 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 | ith.a.range.id.of.`<n>`..DHCP.le |
bb700 | 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 | ases.are.taken.from.this.pool..T |
bb720 | 68 65 20 70 6f 6f 6c 20 73 74 6f 70 73 20 77 69 74 68 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 | he.pool.stops.with.address.`<add |
bb740 | 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 70 65 72 20 63 6c | ress>`..Create.DNS.record.per.cl |
bb760 | 69 65 6e 74 20 6c 65 61 73 65 2c 20 62 79 20 61 64 64 69 6e 67 20 63 6c 69 65 6e 74 73 20 74 6f | ient.lease,.by.adding.clients.to |
bb780 | 20 2f 65 74 63 2f 68 6f 73 74 73 20 66 69 6c 65 2e 20 45 6e 74 72 79 20 77 69 6c 6c 20 68 61 76 | ./etc/hosts.file..Entry.will.hav |
bb7a0 | 65 20 66 6f 72 6d 61 74 3a 20 60 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e | e.format:.`<shared-network-name> |
bb7c0 | 5f 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 43 72 65 61 74 | _<hostname>.<domain-name>`.Creat |
bb7e0 | 65 20 60 3c 75 73 65 72 3e 60 20 66 6f 72 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 | e.`<user>`.for.local.authenticat |
bb800 | 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 75 73 65 72 73 20 70 61 | ion.on.this.system..The.users.pa |
bb820 | 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 73 65 74 20 74 6f 20 60 3c 70 61 73 73 3e 60 2e 00 | ssword.will.be.set.to.`<pass>`.. |
bb840 | 43 72 65 61 74 65 20 61 20 62 61 73 69 63 20 62 72 69 64 67 65 00 43 72 65 61 74 65 20 61 20 66 | Create.a.basic.bridge.Create.a.f |
bb860 | 69 6c 65 20 6e 61 6d 65 64 20 60 60 56 79 4f 53 2d 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 34 34 36 | ile.named.``VyOS-1.3.6.1.4.1.446 |
bb880 | 34 31 2e 43 6f 6e 66 69 67 4d 67 6d 74 2d 43 6f 6d 6d 61 6e 64 73 60 60 20 75 73 69 6e 67 20 74 | 41.ConfigMgmt-Commands``.using.t |
bb8a0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 74 65 6e 74 3a 00 43 72 65 61 74 65 20 61 20 6c | he.following.content:.Create.a.l |
bb8c0 | 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 2c 20 69 74 20 63 61 6e 20 62 65 20 61 20 | oad.balancing.rule,.it.can.be.a. |
bb8e0 | 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 39 39 39 39 3a 00 43 72 65 61 74 | number.between.1.and.9999:.Creat |
bb900 | 65 20 61 20 6e 65 77 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 | e.a.new.:abbr:`CA.(Certificate.A |
bb920 | 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 43 41 73 20 70 75 | uthority)`.and.output.the.CAs.pu |
bb940 | 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 | blic.and.private.key.on.the.cons |
bb960 | 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 | ole..Create.a.new.DHCP.static.ma |
bb980 | 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 | pping.named.`<description>`.whic |
bb9a0 | 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 | h.is.valid.for.the.host.identifi |
bb9c0 | 65 64 20 62 79 20 69 74 73 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 | ed.by.its.DHCP.unique.identifier |
bb9e0 | 20 28 44 55 49 44 29 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 2e 00 43 72 65 61 74 65 20 61 | .(DUID).`<identifier>`..Create.a |
bba00 | 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 | .new.DHCP.static.mapping.named.` |
bba20 | 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f | <description>`.which.is.valid.fo |
bba40 | 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 69 74 73 20 4d 41 43 | r.the.host.identified.by.its.MAC |
bba60 | 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 56 4c 41 4e 20 | .`<address>`..Create.a.new.VLAN. |
bba80 | 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 | interface.on.interface.`<interfa |
bbaa0 | 63 65 3e 60 20 75 73 69 6e 67 20 74 68 65 20 56 4c 41 4e 20 6e 75 6d 62 65 72 20 70 72 6f 76 69 | ce>`.using.the.VLAN.number.provi |
bbac0 | 64 65 64 20 76 69 61 20 60 3c 76 6c 61 6e 2d 69 64 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 | ded.via.`<vlan-id>`..Create.a.ne |
bbae0 | 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 72 20 61 6e 64 20 6f 75 74 | w.public/private.keypair.and.out |
bbb00 | 70 75 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f | put.the.certificate.on.the.conso |
bbb20 | 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 | le..Create.a.new.public/private. |
bbb40 | 6b 65 79 70 61 69 72 20 77 68 69 63 68 20 69 73 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 43 | keypair.which.is.signed.by.the.C |
bbb60 | 41 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 20 54 68 65 20 73 | A.referenced.by.`ca-name`..The.s |
bbb80 | 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 74 68 65 6e 20 6f 75 74 70 75 74 | igned.certificate.is.then.output |
bbba0 | 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 65 | .to.the.console..Create.a.new.se |
bbbc0 | 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 68 65 20 70 75 62 6c 69 | lf-signed.certificate..The.publi |
bbbe0 | 63 2f 70 72 69 76 61 74 65 20 69 73 20 74 68 65 6e 20 73 68 6f 77 6e 20 6f 6e 20 74 68 65 20 63 | c/private.is.then.shown.on.the.c |
bbc00 | 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 | onsole..Create.a.new.subordinate |
bbc20 | 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 | .:abbr:`CA.(Certificate.Authorit |
bbc40 | 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 | y)`.and.sign.it.using.the.privat |
bbc60 | 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 00 43 | e.key.referenced.by.`ca-name`..C |
bbc80 | 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 | reate.a.new.subordinate.:abbr:`C |
bbca0 | 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 | A.(Certificate.Authority)`.and.s |
bbcc0 | 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 | ign.it.using.the.private.key.ref |
bbce0 | 65 72 65 6e 63 65 64 20 62 79 20 60 6e 61 6d 65 60 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 | erenced.by.`name`..Create.a.peer |
bbd00 | 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 | .as.you.would.when.you.specify.a |
bbd20 | 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 | n.ASN,.except.that.if.the.peers. |
bbd40 | 41 53 4e 20 69 73 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 6d 69 6e 65 20 61 73 20 73 70 | ASN.is.different.than.mine.as.sp |
bbd60 | 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f | ecified.under.the.:cfgcmd:`proto |
bbd80 | 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e | cols.bgp.<asn>`.command.the.conn |
bbda0 | 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 | ection.will.be.denied..Create.a. |
bbdc0 | 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 | peer.as.you.would.when.you.speci |
bbde0 | 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 | fy.an.ASN,.except.that.if.the.pe |
bbe00 | 65 72 73 20 41 53 4e 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 6d 69 6e 65 20 61 73 20 73 | ers.ASN.is.the.same.as.mine.as.s |
bbe20 | 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 | pecified.under.the.:cfgcmd:`prot |
bbe40 | 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e | ocols.bgp.<asn>`.command.the.con |
bbe60 | 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 | nection.will.be.denied..Create.a |
bbe80 | 20 73 74 61 74 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 20 77 68 69 63 68 20 77 | .static.hostname.mapping.which.w |
bbea0 | 69 6c 6c 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 65 20 74 68 65 20 6e 61 6d 65 20 60 3c 68 6f | ill.always.resolve.the.name.`<ho |
bbec0 | 73 74 6e 61 6d 65 3e 60 20 74 6f 20 49 50 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 | stname>`.to.IP.address.`<address |
bbee0 | 3e 60 2e 00 43 72 65 61 74 65 20 61 73 2d 70 61 74 68 2d 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 | >`..Create.as-path-policy.identi |
bbf00 | 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 66 69 72 65 | fied.by.name.<text>..Create.fire |
bbf20 | 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 | wall.rule.in.forward.chain,.and. |
bbf40 | 64 65 66 69 6e 65 20 77 68 69 63 68 20 66 6c 6f 77 74 62 61 6c 65 20 73 68 6f 75 6c 64 20 62 65 | define.which.flowtbale.should.be |
bbf60 | 20 75 73 65 64 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 61 63 74 69 6f 6e | .used..Only.applicable.if.action |
bbf80 | 20 69 73 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c | .is.``offload``..Create.firewall |
bbfa0 | 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 73 65 74 20 | .rule.in.forward.chain,.and.set. |
bbfc0 | 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 | action.to.``offload``..Create.fi |
bbfe0 | 72 65 77 61 6c 6c 20 72 75 6c 65 3a 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 72 | rewall.rule:.create.a.firewall.r |
bc000 | 75 6c 65 2c 20 73 65 74 74 69 6e 67 20 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 | ule,.setting.action.to.``offload |
bc020 | 60 60 20 61 6e 64 20 75 73 69 6e 67 20 64 65 73 69 72 65 64 20 66 6c 6f 77 74 61 62 6c 65 20 66 | ``.and.using.desired.flowtable.f |
bc040 | 6f 72 20 60 60 6f 66 66 6c 6f 61 64 2d 74 61 72 67 65 74 60 60 2e 00 43 72 65 61 74 65 20 66 6c | or.``offload-target``..Create.fl |
bc060 | 6f 77 74 61 62 6c 65 3a 20 63 72 65 61 74 65 20 66 6c 6f 77 74 61 62 6c 65 2c 20 77 68 69 63 68 | owtable:.create.flowtable,.which |
bc080 | 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 72 | .includes.the.interfaces.that.ar |
bc0a0 | 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 | e.going.to.be.used.by.the.flowta |
bc0c0 | 62 6c 65 2e 00 43 72 65 61 74 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 | ble..Create.large-community-list |
bc0e0 | 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 | .policy.identified.by.name.<text |
bc100 | 3e 2e 00 43 72 65 61 74 65 20 6e 61 6d 65 64 20 60 3c 61 6c 69 61 73 3e 60 20 66 6f 72 20 74 68 | >..Create.named.`<alias>`.for.th |
bc120 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 66 6f 72 20 | e.configured.static.mapping.for. |
bc140 | 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 2e 20 54 68 75 73 20 74 68 65 20 61 64 64 72 65 73 73 20 63 | `<hostname>`..Thus.the.address.c |
bc160 | 6f 6e 66 69 67 75 72 65 64 20 61 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d | onfigured.as.:cfgcmd:`set.system |
bc180 | 20 73 74 61 74 69 63 2d 68 6f 73 74 2d 6d 61 70 70 69 6e 67 20 68 6f 73 74 2d 6e 61 6d 65 20 3c | .static-host-mapping.host-name.< |
bc1a0 | 68 6f 73 74 6e 61 6d 65 3e 20 69 6e 65 74 20 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 | hostname>.inet.<address>`.can.be |
bc1c0 | 20 72 65 61 63 68 65 64 20 76 69 61 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 2e 00 43 72 65 | .reached.via.multiple.names..Cre |
bc1e0 | 61 74 65 20 6e 65 77 20 3a 72 66 63 3a 60 32 31 33 36 60 20 44 4e 53 20 75 70 64 61 74 65 20 63 | ate.new.:rfc:`2136`.DNS.update.c |
bc200 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 | onfiguration.which.will.update.t |
bc220 | 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 | he.IP.address.assigned.to.`<inte |
bc240 | 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 | rface>`.on.the.service.you.confi |
bc260 | 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 | gured.under.`<service-name>`..Cr |
bc280 | 65 61 74 65 20 6e 65 77 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 77 69 74 68 20 60 3c 6e 61 6d | eate.new.VRF.instance.with.`<nam |
bc2a0 | 65 3e 60 2e 20 54 68 65 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 70 6c 61 63 69 | e>`..The.name.is.used.when.placi |
bc2c0 | 6e 67 20 69 6e 64 69 76 69 64 75 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 74 68 | ng.individual.interfaces.into.th |
bc2e0 | 65 20 56 52 46 2e 00 43 72 65 61 74 65 20 6e 65 77 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 | e.VRF..Create.new.dynamic.DNS.up |
bc300 | 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 | date.configuration.which.will.up |
bc320 | 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 | date.the.IP.address.assigned.to. |
bc340 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 | `<interface>`.on.the.service.you |
bc360 | 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 | .configured.under.`<service-name |
bc380 | 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 73 79 73 74 65 6d 20 75 73 65 72 20 77 69 74 68 20 | >`..Create.new.system.user.with. |
bc3a0 | 75 73 65 72 6e 61 6d 65 20 60 3c 6e 61 6d 65 3e 60 20 61 6e 64 20 72 65 61 6c 2d 6e 61 6d 65 20 | username.`<name>`.and.real-name. |
bc3c0 | 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 73 74 72 69 6e 67 3e 60 2e 00 43 72 65 61 74 65 20 | specified.by.`<string>`..Create. |
bc3e0 | 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 3c 70 | service.`<name>`.to.listen.on.<p |
bc400 | 6f 72 74 3e 00 43 72 65 61 74 65 73 20 61 20 6e 61 6d 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e | ort>.Creates.a.named.container.n |
bc420 | 65 74 77 6f 72 6b 00 43 72 65 61 74 65 73 20 6c 6f 63 61 6c 20 49 50 6f 45 20 75 73 65 72 20 77 | etwork.Creates.local.IPoE.user.w |
bc440 | 69 74 68 20 75 73 65 72 6e 61 6d 65 3d 2a 2a 3c 69 6e 74 65 72 66 61 63 65 3e 2a 2a 20 61 6e 64 | ith.username=**<interface>**.and |
bc460 | 20 70 61 73 73 77 6f 72 64 3d 2a 2a 3c 4d 41 43 3e 2a 2a 20 28 6d 61 63 2d 61 64 64 72 65 73 73 | .password=**<MAC>**.(mac-address |
bc480 | 29 00 43 72 65 61 74 65 73 20 73 74 61 74 69 63 20 70 65 65 72 20 6d 61 70 70 69 6e 67 20 6f 66 | ).Creates.static.peer.mapping.of |
bc4a0 | 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 6f 20 3a 61 62 62 72 3a 60 4e 42 4d 41 | .protocol-address.to.:abbr:`NBMA |
bc4c0 | 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 | .(Non-broadcast.multiple-access. |
bc4e0 | 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 73 73 2e 00 43 72 65 61 74 69 6e 67 20 61 20 62 72 | network)`.address..Creating.a.br |
bc500 | 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 2e 20 49 | idge.interface.is.very.simple..I |
bc520 | 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 68 61 76 65 3a 00 43 72 | n.this.example,.we.will.have:.Cr |
bc540 | 65 61 74 69 6e 67 20 61 20 66 6c 6f 77 20 74 61 62 6c 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 | eating.a.flow.table:.Creating.a. |
bc560 | 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 43 72 65 61 74 69 6e 67 20 72 75 6c 65 73 20 66 6f | traffic.policy.Creating.rules.fo |
bc580 | 72 20 75 73 69 6e 67 20 66 6c 6f 77 20 74 61 62 6c 65 73 3a 00 43 72 65 64 65 6e 74 69 61 6c 73 | r.using.flow.tables:.Credentials |
bc5a0 | 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 68 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6f 6e | .can.be.defined.here.and.will.on |
bc5c0 | 6c 79 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 61 64 64 69 6e 67 20 61 20 63 6f 6e 74 61 69 6e | ly.be.used.when.adding.a.contain |
bc5e0 | 65 72 20 69 6d 61 67 65 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e 00 43 72 69 74 69 63 61 6c | er.image.to.the.system..Critical |
bc600 | 00 43 72 69 74 69 63 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 65 2e 67 2e 20 68 61 72 64 | .Critical.conditions.-.e.g..hard |
bc620 | 20 64 72 69 76 65 20 65 72 72 6f 72 73 2e 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d | .drive.errors..Crystalfontz.CFA- |
bc640 | 35 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 31 00 43 72 79 73 74 61 6c | 533.Crystalfontz.CFA-631.Crystal |
bc660 | 66 6f 6e 74 7a 20 43 46 41 2d 36 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 | fontz.CFA-633.Crystalfontz.CFA-6 |
bc680 | 33 35 00 43 75 72 20 48 6f 70 20 4c 69 6d 69 74 00 43 75 72 72 65 6e 74 6c 79 20 64 6f 65 73 20 | 35.Cur.Hop.Limit.Currently.does. |
bc6a0 | 6e 6f 74 20 64 6f 20 6d 75 63 68 20 61 73 20 63 61 63 68 69 6e 67 20 69 73 20 6e 6f 74 20 69 6d | not.do.much.as.caching.is.not.im |
bc6c0 | 70 6c 65 6d 65 6e 74 65 64 2e 00 43 75 72 72 65 6e 74 6c 79 20 64 79 6e 61 6d 69 63 20 72 6f 75 | plemented..Currently.dynamic.rou |
bc6e0 | 74 69 6e 67 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 | ting.is.supported.for.the.follow |
bc700 | 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 00 43 75 73 74 6f 6d 20 46 69 6c 65 00 43 75 73 74 6f | ing.protocols:.Custom.File.Custo |
bc720 | 6d 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 | m.bridge.firewall.chains.can.be. |
bc740 | 63 72 65 61 74 65 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 66 69 72 65 77 61 | create.with.command.``set.firewa |
bc760 | 6c 6c 20 62 72 69 64 67 65 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 | ll.bridge.name.<name>....``..In. |
bc780 | 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 | order.to.use.such.custom.chain,. |
bc7a0 | 61 20 72 75 6c 65 20 77 69 74 68 20 61 63 74 69 6f 6e 20 6a 75 6d 70 2c 20 61 6e 64 20 74 68 65 | a.rule.with.action.jump,.and.the |
bc7c0 | 20 61 70 70 72 6f 70 69 61 74 65 20 74 61 72 67 65 74 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 | .appropiate.target.should.be.def |
bc7e0 | 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 | ined.in.a.base.chain..Custom.fir |
bc800 | 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 | ewall.chains.can.be.created,.wit |
bc820 | 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 | h.commands.``set.firewall.[ipv4. |
bc840 | 7c 20 69 70 76 36 5d 20 5b 6e 61 6d 65 20 7c 20 69 70 76 36 2d 6e 61 6d 65 5d 20 3c 6e 61 6d 65 | |.ipv6].[name.|.ipv6-name].<name |
bc860 | 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 | >....``..In.order.to.use.such.cu |
bc880 | 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e | stom.chain,.a.rule.with.**action |
bc8a0 | 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 | .jump**,.and.the.appropiate.**ta |
bc8c0 | 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 | rget**.should.be.defined.in.a.ba |
bc8e0 | 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 | se.chain..Custom.firewall.chains |
bc900 | 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 | .can.be.created,.with.commands.` |
bc920 | 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e | `set.firewall.ipv4.name.<name>.. |
bc940 | 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f | ..``..In.order.to.use.such.custo |
bc960 | 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 | m.chain,.a.rule.with.**action.ju |
bc980 | 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 | mp**,.and.the.appropiate.**targe |
bc9a0 | 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 | t**.should.be.defined.in.a.base. |
bc9c0 | 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 | chain..Custom.firewall.chains.ca |
bc9e0 | 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 | n.be.created,.with.commands.``se |
bca00 | 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 | t.firewall.ipv6.name.<name>....` |
bca20 | 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 | `..In.order.to.use.such.custom.c |
bca40 | 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a | hain,.a.rule.with.**action.jump* |
bca60 | 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a | *,.and.the.appropiate.**target** |
bca80 | 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 | .should.be.defined.in.a.base.cha |
bcaa0 | 69 6e 2e 00 43 75 73 74 6f 6d 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 73 63 72 69 70 74 20 61 | in..Custom.health-check.script.a |
bcac0 | 6c 6c 6f 77 73 20 63 68 65 63 6b 69 6e 67 20 72 65 61 6c 2d 73 65 72 76 65 72 20 61 76 61 69 6c | llows.checking.real-server.avail |
bcae0 | 61 62 69 6c 69 74 79 00 43 75 73 74 6f 6d 69 7a 65 64 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 2c | ability.Customized.ignore.rules, |
bcb00 | 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 | .based.on.a.packet.and.flow.sele |
bcb20 | 63 74 6f 72 2e 00 44 43 4f 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 62 6f 74 | ctor..DCO.can.be.enabled.for.bot |
bcb40 | 68 20 6e 65 77 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 6c 73 2c 56 79 4f 53 20 | h.new.and.existing.tunnels,VyOS. |
bcb60 | 61 64 64 73 20 61 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 63 6f | adds.an.option.in.each.tunnel.co |
bcb80 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 | nfiguration.where.we.can.enable. |
bcba0 | 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 20 2e 54 68 65 20 63 75 72 72 65 6e 74 20 62 65 73 74 | this.function...The.current.best |
bcbc0 | 20 70 72 61 63 74 69 63 65 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 74 75 6e | .practice.is.to.create.a.new.tun |
bcbe0 | 6e 65 6c 20 77 69 74 68 20 44 43 4f 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 63 68 61 | nel.with.DCO.to.minimize.the.cha |
bcc00 | 6e 63 65 20 6f 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 65 78 69 73 74 69 6e 67 20 63 6c | nce.of.problems.with.existing.cl |
bcc20 | 69 65 6e 74 73 2e 00 44 43 4f 20 73 75 70 70 6f 72 74 20 69 73 20 61 20 70 65 72 2d 74 75 6e 6e | ients..DCO.support.is.a.per-tunn |
bcc40 | 65 6c 20 6f 70 74 69 6f 6e 20 61 6e 64 20 69 74 20 69 73 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 | el.option.and.it.is.not.automati |
bcc60 | 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 6e 65 77 | cally.enabled.by.default.for.new |
bcc80 | 20 6f 72 20 75 70 67 72 61 64 65 64 20 74 75 6e 6e 65 6c 73 2e 20 45 78 69 73 74 69 6e 67 20 74 | .or.upgraded.tunnels..Existing.t |
bcca0 | 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e | unnels.will.continue.to.function |
bccc0 | 20 61 73 20 74 68 65 79 20 68 61 76 65 20 69 6e 20 74 68 65 20 70 61 73 74 2e 00 44 44 6f 53 20 | .as.they.have.in.the.past..DDoS. |
bcce0 | 50 72 6f 74 65 63 74 69 6f 6e 00 44 48 20 47 72 6f 75 70 20 31 34 00 44 48 43 50 20 52 65 6c 61 | Protection.DH.Group.14.DHCP.Rela |
bcd00 | 79 00 44 48 43 50 20 53 65 72 76 65 72 00 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 72 61 | y.DHCP.Server.DHCP.failover.para |
bcd20 | 6d 65 74 65 72 73 00 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 44 48 43 50 20 72 61 6e | meters.DHCP.lease.range.DHCP.ran |
bcd40 | 67 65 20 73 70 61 6e 73 20 66 72 6f 6d 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 31 30 60 20 2d | ge.spans.from.`192.168.189.10`.- |
bcd60 | 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 30 60 00 44 48 43 50 20 72 65 6c 61 79 20 65 78 | .`192.168.189.250`.DHCP.relay.ex |
bcd80 | 61 6d 70 6c 65 00 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 | ample.DHCP.server.is.located.at. |
bcda0 | 49 50 76 34 20 61 64 64 72 65 73 73 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 | IPv4.address.10.0.1.4.on.``eth2` |
bcdc0 | 60 2e 00 44 48 43 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 73 20 6d 75 73 74 20 62 65 20 | `..DHCPv6.address.pools.must.be. |
bcde0 | 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 | configured.for.the.system.to.act |
bce00 | 20 61 73 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 | .as.a.DHCPv6.server..The.followi |
bce20 | 6e 67 20 65 78 61 6d 70 6c 65 20 64 65 73 63 72 69 62 65 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 | ng.example.describes.a.common.sc |
bce40 | 65 6e 61 72 69 6f 2e 00 44 48 43 50 76 36 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 | enario..DHCPv6.relay.example.DHC |
bce60 | 50 76 36 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 | Pv6.requests.are.received.by.the |
bce80 | 20 72 6f 75 74 65 72 20 6f 6e 20 60 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 60 | .router.on.`listening.interface` |
bcea0 | 20 60 60 65 74 68 31 60 60 00 44 4d 56 50 4e 00 44 4d 56 50 4e 20 65 78 61 6d 70 6c 65 20 6e 65 | .``eth1``.DMVPN.DMVPN.example.ne |
bcec0 | 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6e 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6f 6e 6c 79 20 61 | twork.DMVPN.network.DMVPN.only.a |
bcee0 | 75 74 6f 6d 61 74 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 | utomates.the.tunnel.endpoint.dis |
bcf00 | 63 6f 76 65 72 79 20 61 6e 64 20 73 65 74 75 70 2e 20 41 20 63 6f 6d 70 6c 65 74 65 20 73 6f 6c | covery.and.setup..A.complete.sol |
bcf20 | 75 74 69 6f 6e 20 61 6c 73 6f 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 74 68 65 20 75 73 65 20 | ution.also.incorporates.the.use. |
bcf40 | 6f 66 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 42 47 50 20 69 73 20 70 61 | of.a.routing.protocol..BGP.is.pa |
bcf60 | 72 74 69 63 75 6c 61 72 6c 79 20 77 65 6c 6c 20 73 75 69 74 65 64 20 66 6f 72 20 75 73 65 20 77 | rticularly.well.suited.for.use.w |
bcf80 | 69 74 68 20 44 4d 56 50 4e 2e 00 44 4e 41 54 00 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c | ith.DMVPN..DNAT.DNAT.is.typicall |
bcfa0 | 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 2a 2a 50 6f 72 74 20 46 6f 72 77 61 72 | y.referred.to.as.a.**Port.Forwar |
bcfc0 | 64 2a 2a 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 56 79 4f 53 20 61 73 20 61 20 4e 41 54 20 72 6f | d**..When.using.VyOS.as.a.NAT.ro |
bcfe0 | 75 74 65 72 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 2c 20 61 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 | uter.and.firewall,.a.common.conf |
bd000 | 69 67 75 72 61 74 69 6f 6e 20 74 61 73 6b 20 69 73 20 74 6f 20 72 65 64 69 72 65 63 74 20 69 6e | iguration.task.is.to.redirect.in |
bd020 | 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 73 79 73 74 65 6d 20 62 65 68 69 6e | coming.traffic.to.a.system.behin |
bd040 | 64 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 44 4e 41 54 20 72 75 6c 65 20 31 30 20 72 65 70 | d.the.firewall..DNAT.rule.10.rep |
bd060 | 6c 61 63 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 | laces.the.destination.address.of |
bd080 | 20 61 6e 20 69 6e 62 6f 75 6e 64 20 70 61 63 6b 65 74 20 77 69 74 68 20 31 39 32 2e 30 2e 32 2e | .an.inbound.packet.with.192.0.2. |
bd0a0 | 31 30 00 44 4e 41 54 36 36 00 44 4e 53 20 46 6f 72 77 61 72 64 69 6e 67 00 44 4e 53 20 6e 61 6d | 10.DNAT66.DNS.Forwarding.DNS.nam |
bd0c0 | 65 20 73 65 72 76 65 72 73 00 44 4e 53 20 73 65 61 72 63 68 20 6c 69 73 74 20 74 6f 20 61 64 76 | e.servers.DNS.search.list.to.adv |
bd0e0 | 65 72 74 69 73 65 00 44 4e 53 20 73 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 44 | ertise.DNS.server.IPv4.address.D |
bd100 | 4e 53 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 32 30 30 31 3a 64 | NS.server.is.located.at.``2001:d |
bd120 | 62 38 3a 3a 66 66 66 66 60 60 00 44 4e 53 53 4c 00 44 53 43 50 20 76 61 6c 75 65 73 20 61 73 20 | b8::ffff``.DNSSL.DSCP.values.as. |
bd140 | 70 65 72 20 3a 72 66 63 3a 60 32 34 37 34 60 20 61 6e 64 20 3a 72 66 63 3a 60 34 35 39 35 60 3a | per.:rfc:`2474`.and.:rfc:`4595`: |
bd160 | 00 44 53 53 53 2f 43 43 4b 20 4d 6f 64 65 20 69 6e 20 34 30 20 4d 48 7a 2c 20 74 68 69 73 20 73 | .DSSS/CCK.Mode.in.40.MHz,.this.s |
bd180 | 65 74 73 20 60 60 5b 44 53 53 53 5f 43 43 4b 2d 34 30 5d 60 60 00 44 61 74 61 20 69 73 20 70 72 | ets.``[DSSS_CCK-40]``.Data.is.pr |
bd1a0 | 6f 76 69 64 65 64 20 62 79 20 44 42 2d 49 50 2e 63 6f 6d 20 75 6e 64 65 72 20 43 43 2d 42 59 2d | ovided.by.DB-IP.com.under.CC-BY- |
bd1c0 | 34 2e 30 20 6c 69 63 65 6e 73 65 2e 20 41 74 74 72 69 62 75 74 69 6f 6e 20 72 65 71 75 69 72 65 | 4.0.license..Attribution.require |
bd1e0 | 64 2c 20 70 65 72 6d 69 74 73 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 73 6f 20 77 65 20 | d,.permits.redistribution.so.we. |
bd200 | 63 61 6e 20 69 6e 63 6c 75 64 65 20 61 20 64 61 74 61 62 61 73 65 20 69 6e 20 69 6d 61 67 65 73 | can.include.a.database.in.images |
bd220 | 28 7e 33 4d 42 20 63 6f 6d 70 72 65 73 73 65 64 29 2e 20 49 6e 63 6c 75 64 65 73 20 63 72 6f 6e | (~3MB.compressed)..Includes.cron |
bd240 | 20 73 63 72 69 70 74 20 28 6d 61 6e 75 61 6c 6c 79 20 63 61 6c 6c 61 62 6c 65 20 62 79 20 6f 70 | .script.(manually.callable.by.op |
bd260 | 2d 6d 6f 64 65 20 75 70 64 61 74 65 20 67 65 6f 69 70 29 20 74 6f 20 6b 65 65 70 20 64 61 74 61 | -mode.update.geoip).to.keep.data |
bd280 | 62 61 73 65 20 61 6e 64 20 72 75 6c 65 73 20 75 70 64 61 74 65 64 2e 00 44 65 62 75 67 00 44 65 | base.and.rules.updated..Debug.De |
bd2a0 | 62 75 67 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 20 2d 20 4d 65 73 73 61 67 65 73 20 74 68 | bug-level.messages.-.Messages.th |
bd2c0 | 61 74 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 72 6d 61 6c 6c 79 20 | at.contain.information.normally. |
bd2e0 | 6f 66 20 75 73 65 20 6f 6e 6c 79 20 77 68 65 6e 20 64 65 62 75 67 67 69 6e 67 20 61 20 70 72 6f | of.use.only.when.debugging.a.pro |
bd300 | 67 72 61 6d 2e 00 44 65 66 61 75 6c 74 00 44 65 66 61 75 6c 74 20 31 2e 00 44 65 66 61 75 6c 74 | gram..Default.Default.1..Default |
bd320 | 20 47 61 74 65 77 61 79 2f 52 6f 75 74 65 00 44 65 66 61 75 6c 74 20 52 6f 75 74 65 72 20 50 72 | .Gateway/Route.Default.Router.Pr |
bd340 | 65 66 65 72 65 6e 63 65 00 44 65 66 61 75 6c 74 20 62 65 68 61 76 69 6f 72 20 2d 20 64 6f 6e 27 | eference.Default.behavior.-.don' |
bd360 | 74 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 62 75 74 20 61 6c 6c 6f 77 | t.ask.client.for.mppe,.but.allow |
bd380 | 20 69 74 20 69 66 20 63 6c 69 65 6e 74 20 77 61 6e 74 73 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 | .it.if.client.wants..Please.note |
bd3a0 | 20 74 68 61 74 20 52 41 44 49 55 53 20 6d 61 79 20 6f 76 65 72 72 69 64 65 20 74 68 69 73 20 6f | .that.RADIUS.may.override.this.o |
bd3c0 | 70 74 69 6f 6e 20 62 79 20 4d 53 2d 4d 50 50 45 2d 45 6e 63 72 79 70 74 69 6f 6e 2d 50 6f 6c 69 | ption.by.MS-MPPE-Encryption-Poli |
bd3e0 | 63 79 20 61 74 74 72 69 62 75 74 65 2e 00 44 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 61 6e | cy.attribute..Default.gateway.an |
bd400 | 64 20 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 61 74 20 60 31 39 32 2e 30 2e 32 2e 32 35 34 60 | d.DNS.server.is.at.`192.0.2.254` |
bd420 | 00 44 65 66 61 75 6c 74 20 69 73 20 35 31 32 20 4d 42 2e 20 55 73 65 20 30 20 4d 42 20 66 6f 72 | .Default.is.512.MB..Use.0.MB.for |
bd440 | 20 75 6e 6c 69 6d 69 74 65 64 20 6d 65 6d 6f 72 79 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 | .unlimited.memory..Default.is.`` |
bd460 | 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 69 63 | any-available``..Default.is.``ic |
bd480 | 6d 70 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 74 6f 20 64 65 74 65 63 74 73 20 70 68 79 73 | mp``..Default.is.to.detects.phys |
bd4a0 | 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 2e 00 44 65 66 61 75 6c 74 | ical.link.state.changes..Default |
bd4c0 | 20 70 6f 72 74 20 69 73 20 33 31 32 38 2e 00 44 65 66 61 75 6c 74 3a 20 31 00 44 65 66 61 75 6c | .port.is.3128..Default:.1.Defaul |
bd4e0 | 74 3a 20 34 34 33 00 44 65 66 61 75 6c 74 73 20 74 6f 20 27 75 69 64 27 00 44 65 66 61 75 6c 74 | t:.443.Defaults.to.'uid'.Default |
bd500 | 73 20 74 6f 20 32 32 35 2e 30 2e 30 2e 35 30 2e 00 44 65 66 61 75 6c 74 73 20 74 6f 20 60 60 75 | s.to.225.0.0.50..Defaults.to.``u |
bd520 | 73 60 60 2e 00 44 65 66 69 6e 65 20 43 6f 6e 65 63 74 69 6f 6e 20 54 69 6d 65 6f 75 74 73 00 44 | s``..Define.Conection.Timeouts.D |
bd540 | 65 66 69 6e 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 70 72 65 66 69 78 20 66 6f 72 20 61 20 | efine.IPv4.or.IPv6.prefix.for.a. |
bd560 | 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 20 4f 6e 6c 79 20 6f 6e 65 20 49 50 76 | given.network.name..Only.one.IPv |
bd580 | 34 20 61 6e 64 20 6f 6e 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 75 73 65 | 4.and.one.IPv6.prefix.can.be.use |
bd5a0 | 64 20 70 65 72 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 00 44 65 66 69 6e 65 20 49 50 76 34 2f | d.per.network.name..Define.IPv4/ |
bd5c0 | 49 50 76 36 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6d 69 74 | IPv6.management.address.transmit |
bd5e0 | 74 65 64 20 76 69 61 20 4c 4c 44 50 2e 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 | ted.via.LLDP..Multiple.addresses |
bd600 | 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 20 4f 6e 6c 79 20 61 64 64 72 65 73 73 65 73 20 | .can.be.defined..Only.addresses. |
bd620 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 20 | connected.to.the.system.will.be. |
bd640 | 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 | transmitted..Define.a.IPv4.or.IP |
bd660 | 76 36 20 4e 65 74 77 6f 72 6b 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 | v6.Network.group..Define.a.IPv4. |
bd680 | 6f 72 20 61 20 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 00 44 65 66 69 6e 65 20 61 | or.a.IPv6.address.group.Define.a |
bd6a0 | 20 5a 6f 6e 65 00 44 65 66 69 6e 65 20 61 20 64 69 73 63 72 65 74 65 20 73 6f 75 72 63 65 20 49 | .Zone.Define.a.discrete.source.I |
bd6c0 | 50 20 61 64 64 72 65 73 73 20 6f 66 20 31 30 30 2e 36 34 2e 30 2e 31 20 66 6f 72 20 53 4e 41 54 | P.address.of.100.64.0.1.for.SNAT |
bd6e0 | 20 72 75 6c 65 20 32 30 00 44 65 66 69 6e 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2e 00 | .rule.20.Define.a.domain.group.. |
bd700 | 44 65 66 69 6e 65 20 61 20 6d 61 63 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 70 6f 72 | Define.a.mac.group..Define.a.por |
bd720 | 74 20 67 72 6f 75 70 2e 20 41 20 70 6f 72 74 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 61 6e 79 20 | t.group..A.port.name.can.be.any. |
bd740 | 6e 61 6d 65 20 64 65 66 69 6e 65 64 20 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2e 20 65 | name.defined.in./etc/services..e |
bd760 | 2e 67 2e 3a 20 68 74 74 70 00 44 65 66 69 6e 65 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 | .g.:.http.Define.allowed.ciphers |
bd780 | 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 20 | .used.for.the.SSH.connection..A. |
bd7a0 | 6e 75 6d 62 65 72 20 6f 66 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 63 61 6e 20 62 65 | number.of.allowed.ciphers.can.be |
bd7c0 | 20 73 70 65 63 69 66 69 65 64 2c 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 6f 63 63 75 72 72 65 | .specified,.use.multiple.occurre |
bd7e0 | 6e 63 65 73 20 74 6f 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 63 69 70 68 65 72 73 2e 00 | nces.to.allow.multiple.ciphers.. |
bd800 | 44 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 57 69 6c 64 63 | Define.an.interface.group..Wildc |
bd820 | 61 72 64 20 61 72 65 20 61 63 63 65 70 74 65 64 20 74 6f 6f 2e 00 44 65 66 69 6e 65 20 62 65 68 | ard.are.accepted.too..Define.beh |
bd840 | 61 76 69 6f 72 20 66 6f 72 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 66 72 61 6d 65 73 20 | avior.for.gratuitous.ARP.frames. |
bd860 | 77 68 6f 27 73 20 49 50 20 69 73 20 6e 6f 74 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 | who's.IP.is.not.already.present. |
bd880 | 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 20 49 66 20 63 6f 6e 66 69 67 75 72 65 64 20 | in.the.ARP.table..If.configured. |
bd8a0 | 63 72 65 61 74 65 20 6e 65 77 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 | create.new.entries.in.the.ARP.ta |
bd8c0 | 62 6c 65 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 | ble..Define.different.modes.for. |
bd8e0 | 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 | IP.directed.broadcast.forwarding |
bd900 | 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 38 31 32 60 20 61 6e 64 | .as.described.in.:rfc:`1812`.and |
bd920 | 20 3a 72 66 63 3a 60 32 36 34 34 60 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d | .:rfc:`2644`..Define.different.m |
bd940 | 6f 64 65 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 72 65 70 6c 69 65 73 20 69 6e 20 72 65 73 70 | odes.for.sending.replies.in.resp |
bd960 | 6f 6e 73 65 20 74 6f 20 72 65 63 65 69 76 65 64 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 68 | onse.to.received.ARP.requests.th |
bd980 | 61 74 20 72 65 73 6f 6c 76 65 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 | at.resolve.local.target.IP.addre |
bd9a0 | 73 73 65 73 3a 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 72 65 73 74 72 69 63 74 69 | sses:.Define.different.restricti |
bd9c0 | 6f 6e 20 6c 65 76 65 6c 73 20 66 6f 72 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 6f 63 | on.levels.for.announcing.the.loc |
bd9e0 | 61 6c 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 49 50 20 70 61 63 | al.source.IP.address.from.IP.pac |
bda00 | 6b 65 74 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 6f 6e 20 69 6e 74 | kets.in.ARP.requests.sent.on.int |
bda20 | 65 72 66 61 63 65 2e 00 44 65 66 69 6e 65 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 6c 65 61 | erface..Define.how.to.handle.lea |
bda40 | 66 2d 73 65 6f 6e 64 73 2e 00 44 65 66 69 6e 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 62 | f-seonds..Define.interfaces.to.b |
bda60 | 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 | e.used.in.the.flowtable..Define. |
bda80 | 6c 65 6e 67 74 68 20 6f 66 20 70 61 63 6b 65 74 20 70 61 79 6c 6f 61 64 20 74 6f 20 69 6e 63 6c | length.of.packet.payload.to.incl |
bdaa0 | 75 64 65 20 69 6e 20 6e 65 74 6c 69 6e 6b 20 6d 65 73 73 61 67 65 2e 20 4f 6e 6c 79 20 61 70 70 | ude.in.netlink.message..Only.app |
bdac0 | 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e | licable.if.rule.log.is.enable.an |
bdae0 | 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6c | d.log.group.is.defined..Define.l |
bdb00 | 6f 67 20 67 72 6f 75 70 20 74 6f 20 73 65 6e 64 20 6d 65 73 73 61 67 65 20 74 6f 2e 20 4f 6e 6c | og.group.to.send.message.to..Onl |
bdb20 | 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 | y.applicable.if.rule.log.is.enab |
bdb40 | 6c 65 2e 00 44 65 66 69 6e 65 20 6c 6f 67 2d 6c 65 76 65 6c 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 | le..Define.log-level..Only.appli |
bdb60 | 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 | cable.if.rule.log.is.enable..Def |
bdb80 | 69 6e 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 71 75 65 75 65 20 69 | ine.number.of.packets.to.queue.i |
bdba0 | 6e 73 69 64 65 20 74 68 65 20 6b 65 72 6e 65 6c 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 | nside.the.kernel.before.sending. |
bdbc0 | 74 68 65 6d 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 | them.to.userspace..Only.applicab |
bdbe0 | 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 | le.if.rule.log.is.enable.and.log |
bdc00 | 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 74 68 65 20 74 69 | .group.is.defined..Define.the.ti |
bdc20 | 6d 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 6c 6f 63 61 6c 20 | me.interval.to.update.the.local. |
bdc40 | 63 61 63 68 65 00 44 65 66 69 6e 65 20 74 68 65 20 7a 6f 6e 65 20 61 73 20 61 20 6c 6f 63 61 6c | cache.Define.the.zone.as.a.local |
bdc60 | 20 7a 6f 6e 65 2e 20 41 20 6c 6f 63 61 6c 20 7a 6f 6e 65 20 68 61 73 20 6e 6f 20 69 6e 74 65 72 | .zone..A.local.zone.has.no.inter |
bdc80 | 66 61 63 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 | faces.and.will.be.applied.to.the |
bdca0 | 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 44 65 66 69 6e 65 20 74 79 70 65 20 6f 66 20 6f | .router.itself..Define.type.of.o |
bdcc0 | 66 66 6c 6f 61 64 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 | ffload.to.be.used.by.the.flowtab |
bdce0 | 6c 65 3a 20 60 60 68 61 72 64 77 61 72 65 60 60 20 6f 72 20 60 60 73 6f 66 74 77 61 72 65 60 60 | le:.``hardware``.or.``software`` |
bdd00 | 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 60 60 73 6f 66 74 77 61 72 65 60 60 20 6f 66 66 6c 6f | ..By.default,.``software``.offlo |
bdd20 | 61 64 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 64 20 74 68 65 20 49 50 76 34 2c 20 49 50 | ad.is.used..Defined.the.IPv4,.IP |
bdd40 | 76 36 20 6f 72 20 46 51 44 4e 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 | v6.or.FQDN.and.port.number.of.th |
bdd60 | 65 20 63 61 63 68 69 6e 67 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 20 | e.caching.RPKI.caching.instance. |
bdd80 | 77 68 69 63 68 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6c 74 65 72 6e 61 74 65 | which.is.used..Defines.alternate |
bdda0 | 20 73 6f 75 72 63 65 73 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 20 61 6e 64 20 49 47 | .sources.for.multicasting.and.IG |
bddc0 | 4d 50 20 64 61 74 61 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6d 75 73 | MP.data..The.network.address.mus |
bdde0 | 74 20 62 65 20 6f 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 6f 72 6d 61 74 20 27 61 2e | t.be.on.the.following.format.'a. |
bde00 | 62 2e 63 2e 64 2f 6e 27 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 72 6f 75 74 65 72 | b.c.d/n'..By.default,.the.router |
bde20 | 20 77 69 6c 6c 20 61 63 63 65 70 74 20 64 61 74 61 20 66 72 6f 6d 20 73 6f 75 72 63 65 73 20 6f | .will.accept.data.from.sources.o |
bde40 | 6e 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 61 73 20 63 6f 6e 66 69 67 75 72 65 64 | n.the.same.network.as.configured |
bde60 | 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 74 68 65 20 6d 75 6c 74 69 63 61 | .on.an.interface..If.the.multica |
bde80 | 73 74 20 73 6f 75 72 63 65 20 6c 69 65 73 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f | st.source.lies.on.a.remote.netwo |
bdea0 | 72 6b 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 66 72 6f 6d 20 77 68 65 72 65 20 74 | rk,.one.must.define.from.where.t |
bdec0 | 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 61 63 63 65 70 74 65 64 2e 00 44 65 66 69 6e | raffic.should.be.accepted..Defin |
bdee0 | 65 73 20 61 6e 20 6f 66 66 2d 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 20 66 6f | es.an.off-NBMA.network.prefix.fo |
bdf00 | 72 20 77 68 69 63 68 20 74 68 65 20 47 52 45 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 61 | r.which.the.GRE.interface.will.a |
bdf20 | 63 74 20 61 73 20 61 20 67 61 74 65 77 61 79 2e 20 54 68 69 73 20 61 6e 20 61 6c 74 65 72 6e 61 | ct.as.a.gateway..This.an.alterna |
bdf40 | 74 69 76 65 20 74 6f 20 64 65 66 69 6e 69 6e 67 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 | tive.to.defining.local.interface |
bdf60 | 73 20 77 69 74 68 20 73 68 6f 72 74 63 75 74 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6c 61 67 | s.with.shortcut-destination.flag |
bdf80 | 2e 00 44 65 66 69 6e 65 73 20 62 6c 61 63 6b 68 6f 6c 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 | ..Defines.blackhole.distance.for |
bdfa0 | 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 | .this.route,.routes.with.smaller |
bdfc0 | 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 | .administrative.distance.are.ele |
bdfe0 | 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 | cted.prior.to.those.with.a.highe |
be000 | 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 6d 69 6e 69 6d 75 6d 20 61 63 63 65 | r.distance..Defines.minimum.acce |
be020 | 70 74 61 62 6c 65 20 4d 54 55 2e 20 49 66 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 74 72 79 20 74 | ptable.MTU..If.client.will.try.t |
be040 | 6f 20 6e 65 67 6f 74 69 61 74 65 20 6c 65 73 73 20 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 | o.negotiate.less.then.specified. |
be060 | 4d 54 55 20 74 68 65 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 4e 41 4b 65 64 20 6f 72 20 64 69 73 | MTU.then.it.will.be.NAKed.or.dis |
be080 | 63 6f 6e 6e 65 63 74 65 64 20 69 66 20 72 65 6a 65 63 74 73 20 67 72 65 61 74 65 72 20 4d 54 55 | connected.if.rejects.greater.MTU |
be0a0 | 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 31 30 30 2a 2a 2e 00 44 65 66 69 | ..Default.value.is.**100**..Defi |
be0c0 | 6e 65 73 20 6e 65 78 74 2d 68 6f 70 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 | nes.next-hop.distance.for.this.r |
be0e0 | 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 | oute,.routes.with.smaller.admini |
be100 | 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 | strative.distance.are.elected.pr |
be120 | 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 | ior.to.those.with.a.higher.dista |
be140 | 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 70 72 65 66 65 72 72 65 64 20 4d 52 55 2e 20 42 79 20 64 | nce..Defines.preferred.MRU..By.d |
be160 | 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 73 20 70 | efault.is.not.defined..Defines.p |
be180 | 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 41 52 50 2c 20 49 43 4d 50 2c | rotocols.for.checking.ARP,.ICMP, |
be1a0 | 20 54 43 50 00 44 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 | .TCP.Defines.the.maximum.`<numbe |
be1c0 | 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e | r>`.of.unanswered.echo.requests. |
be1e0 | 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 | .Upon.reaching.the.value.`<numbe |
be200 | 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 00 | r>`,.the.session.will.be.reset.. |
be220 | 44 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f | Defines.the.maximum.`<number>`.o |
be240 | 66 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e | f.unanswered.echo.requests..Upon |
be260 | 20 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 | .reaching.the.value.`<number>`,. |
be280 | 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 20 44 65 66 61 75 | the.session.will.be.reset..Defau |
be2a0 | 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 2a 2a 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 73 | lt.value.is.**3**..Defines.the.s |
be2c0 | 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 61 73 20 61 20 73 79 73 74 65 6d 20 63 6f 6e 73 | pecified.device.as.a.system.cons |
be2e0 | 6f 6c 65 2e 20 41 76 61 69 6c 61 62 6c 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 73 20 63 | ole..Available.console.devices.c |
be300 | 61 6e 20 62 65 20 28 73 65 65 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 29 3a 00 44 | an.be.(see.completion.helper):.D |
be320 | 65 66 69 6e 69 6e 67 20 50 65 65 72 73 00 44 65 6c 65 67 61 74 65 20 70 72 65 66 69 78 65 73 20 | efining.Peers.Delegate.prefixes. |
be340 | 66 72 6f 6d 20 74 68 65 20 72 61 6e 67 65 20 69 6e 64 69 63 61 74 65 64 20 62 79 20 74 68 65 20 | from.the.range.indicated.by.the. |
be360 | 73 74 61 72 74 20 61 6e 64 20 73 74 6f 70 20 71 75 61 6c 69 66 69 65 72 2e 00 44 65 6c 65 74 65 | start.and.stop.qualifier..Delete |
be380 | 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 63 6f | .BGP.communities.matching.the.co |
be3a0 | 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 | mmunity-list..Delete.BGP.communi |
be3c0 | 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 | ties.matching.the.large-communit |
be3e0 | 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 4c 6f 67 73 00 44 65 6c 65 74 65 20 61 20 70 61 72 | y-list..Delete.Logs.Delete.a.par |
be400 | 74 69 63 75 6c 61 72 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 62 61 73 65 64 20 6f 6e | ticular.container.image.based.on |
be420 | 20 69 74 27 73 20 69 6d 61 67 65 20 49 44 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 6c | .it's.image.ID..You.can.also.del |
be440 | 65 74 65 20 61 6c 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 73 20 61 74 20 6f 6e 63 65 | ete.all.container.images.at.once |
be460 | 2e 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c | ..Delete.all.BGP.communities.Del |
be480 | 65 74 65 20 61 6c 6c 20 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 | ete.all.BGP.large-communities.De |
be4a0 | 6c 65 74 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 | lete.default.route.from.the.syst |
be4c0 | 65 6d 2e 00 44 65 6c 65 74 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 | em..Deletes.the.specified.user-d |
be4e0 | 65 66 69 6e 65 64 20 66 69 6c 65 20 3c 74 65 78 74 3e 20 69 6e 20 74 68 65 20 2f 76 61 72 2f 6c | efined.file.<text>.in.the./var/l |
be500 | 6f 67 2f 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 00 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 | og/user.directory.Depending.on.t |
be520 | 68 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 6e 6f 74 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 63 68 | he.location,.not.all.of.these.ch |
be540 | 61 6e 6e 65 6c 73 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 73 65 21 | annels.may.be.available.for.use! |
be560 | 00 44 65 73 63 72 69 70 74 69 6f 6e 00 44 65 73 70 69 74 65 20 74 68 65 20 44 72 6f 70 2d 54 61 | .Description.Despite.the.Drop-Ta |
be580 | 69 6c 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 73 6c 6f 77 20 64 6f 77 6e 20 70 61 63 | il.policy.does.not.slow.down.pac |
be5a0 | 6b 65 74 73 2c 20 69 66 20 6d 61 6e 79 20 70 61 63 6b 65 74 73 20 61 72 65 20 74 6f 20 62 65 20 | kets,.if.many.packets.are.to.be. |
be5c0 | 73 65 6e 74 2c 20 74 68 65 79 20 63 6f 75 6c 64 20 67 65 74 20 64 72 6f 70 70 65 64 20 77 68 65 | sent,.they.could.get.dropped.whe |
be5e0 | 6e 20 74 72 79 69 6e 67 20 74 6f 20 67 65 74 20 65 6e 71 75 65 75 65 64 20 61 74 20 74 68 65 20 | n.trying.to.get.enqueued.at.the. |
be600 | 74 61 69 6c 2e 20 54 68 69 73 20 63 61 6e 20 68 61 70 70 65 6e 20 69 66 20 74 68 65 20 71 75 65 | tail..This.can.happen.if.the.que |
be620 | 75 65 20 68 61 73 20 73 74 69 6c 6c 20 6e 6f 74 20 62 65 65 6e 20 61 62 6c 65 20 74 6f 20 72 65 | ue.has.still.not.been.able.to.re |
be640 | 6c 65 61 73 65 20 65 6e 6f 75 67 68 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 69 74 73 20 68 65 | lease.enough.packets.from.its.he |
be660 | 61 64 2e 00 44 65 73 70 69 74 65 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 41 44 20 69 73 20 | ad..Despite.the.fact.that.AD.is. |
be680 | 61 20 73 75 70 65 72 73 65 74 20 6f 66 20 4c 44 41 50 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 41 | a.superset.of.LDAP.Destination.A |
be6a0 | 64 64 72 65 73 73 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 44 65 73 74 69 6e 61 74 69 | ddress.Destination.NAT.Destinati |
be6c0 | 6f 6e 20 50 72 65 66 69 78 00 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 | on.Prefix.Detailed.information.a |
be6e0 | 62 6f 75 74 20 22 63 69 73 63 6f 22 20 61 6e 64 20 22 69 62 6d 22 20 6d 6f 64 65 6c 73 20 64 69 | bout."cisco".and."ibm".models.di |
be700 | 66 66 65 72 65 6e 63 65 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 3a 72 66 63 3a 60 | fferences.can.be.found.in.:rfc:` |
be720 | 33 35 30 39 60 2e 20 41 20 22 73 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c 20 61 6c 6c 6f 77 73 | 3509`..A."shortcut".model.allows |
be740 | 20 41 42 52 20 74 6f 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 61 72 | .ABR.to.create.routes.between.ar |
be760 | 65 61 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 74 68 65 | eas.based.on.the.topology.of.the |
be780 | 20 61 72 65 61 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 | .areas.connected.to.this.router. |
be7a0 | 62 75 74 20 6e 6f 74 20 75 73 69 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 6e | but.not.using.a.backbone.area.in |
be7c0 | 20 63 61 73 65 20 69 66 20 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 20 72 6f 75 74 65 20 77 69 6c 6c | .case.if.non-backbone.route.will |
be7e0 | 20 62 65 20 63 68 65 61 70 65 72 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f | .be.cheaper..For.more.informatio |
be800 | 6e 20 61 62 6f 75 74 20 22 73 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c 2c 20 73 65 65 20 3a 74 | n.about."shortcut".model,.see.:t |
be820 | 3a 60 6f 73 70 66 2d 73 68 6f 72 74 63 75 74 2d 61 62 72 2d 30 32 2e 74 78 74 60 00 44 65 74 65 | :`ospf-shortcut-abr-02.txt`.Dete |
be840 | 72 6d 69 6e 65 73 20 68 6f 77 20 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c | rmines.how.opennhrp.daemon.shoul |
be860 | 64 20 73 6f 66 74 20 73 77 69 74 63 68 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 | d.soft.switch.the.multicast.traf |
be880 | 66 69 63 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 | fic..Currently,.multicast.traffi |
be8a0 | 63 20 69 73 20 63 61 70 74 75 72 65 64 20 62 79 20 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e | c.is.captured.by.opennhrp.daemon |
be8c0 | 20 75 73 69 6e 67 20 61 20 70 61 63 6b 65 74 20 73 6f 63 6b 65 74 2c 20 61 6e 64 20 72 65 73 65 | .using.a.packet.socket,.and.rese |
be8e0 | 6e 74 20 62 61 63 6b 20 74 6f 20 70 72 6f 70 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 20 | nt.back.to.proper.destinations.. |
be900 | 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 | This.means.that.multicast.packet |
be920 | 20 73 65 6e 64 69 6e 67 20 69 73 20 43 50 55 20 69 6e 74 65 6e 73 69 76 65 2e 00 44 65 76 69 63 | .sending.is.CPU.intensive..Devic |
be940 | 65 20 69 73 20 69 6e 63 61 70 61 62 6c 65 20 6f 66 20 34 30 20 4d 48 7a 2c 20 64 6f 20 6e 6f 74 | e.is.incapable.of.40.MHz,.do.not |
be960 | 20 61 64 76 65 72 74 69 73 65 2e 20 54 68 69 73 20 73 65 74 73 20 60 60 5b 34 30 2d 49 4e 54 4f | .advertise..This.sets.``[40-INTO |
be980 | 4c 45 52 41 4e 54 5d 60 60 00 44 65 76 69 63 65 73 20 65 76 61 6c 75 61 74 69 6e 67 20 77 68 65 | LERANT]``.Devices.evaluating.whe |
be9a0 | 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 69 73 20 70 75 62 6c 69 63 20 6d | ther.an.IPv4.address.is.public.m |
be9c0 | 75 73 74 20 62 65 20 75 70 64 61 74 65 64 20 74 6f 20 72 65 63 6f 67 6e 69 7a 65 20 74 68 65 20 | ust.be.updated.to.recognize.the. |
be9e0 | 6e 65 77 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 20 41 6c 6c 6f 63 61 74 69 6e 67 20 6d 6f | new.address.space..Allocating.mo |
bea00 | 72 65 20 70 72 69 76 61 74 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f | re.private.IPv4.address.space.fo |
bea20 | 72 20 4e 41 54 20 64 65 76 69 63 65 73 20 6d 69 67 68 74 20 70 72 6f 6c 6f 6e 67 20 74 68 65 20 | r.NAT.devices.might.prolong.the. |
bea40 | 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 49 50 76 36 2e 00 44 69 66 66 65 72 65 6e 74 20 4e 41 | transition.to.IPv6..Different.NA |
bea60 | 54 20 54 79 70 65 73 00 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 70 61 72 61 6d 65 74 65 72 | T.Types.Diffie-Hellman.parameter |
bea80 | 73 00 44 69 72 65 63 74 69 6f 6e 3a 20 2a 2a 69 6e 2a 2a 20 61 6e 64 20 2a 2a 6f 75 74 2a 2a 2e | s.Direction:.**in**.and.**out**. |
beaa0 | 20 50 72 6f 74 65 63 74 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 65 78 74 | .Protect.public.network.from.ext |
beac0 | 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 2c 20 61 6e 64 20 69 64 65 6e 74 69 66 79 20 69 6e 74 65 | ernal.attacks,.and.identify.inte |
beae0 | 72 6e 61 6c 20 61 74 74 61 63 6b 73 20 74 6f 77 61 72 64 73 20 69 6e 74 65 72 6e 65 74 2e 00 44 | rnal.attacks.towards.internet..D |
beb00 | 69 73 61 62 6c 65 20 28 6c 6f 63 6b 29 20 61 63 63 6f 75 6e 74 2e 20 55 73 65 72 20 77 69 6c 6c | isable.(lock).account..User.will |
beb20 | 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 00 44 69 73 61 62 6c 65 20 | .not.be.able.to.log.in..Disable. |
beb40 | 43 50 55 20 70 6f 77 65 72 20 73 61 76 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 73 20 61 6c 73 6f | CPU.power.saving.mechanisms.also |
beb60 | 20 6b 6e 6f 77 6e 20 61 73 20 43 20 73 74 61 74 65 73 2e 00 44 69 73 61 62 6c 65 20 43 6f 6d 70 | .known.as.C.states..Disable.Comp |
beb80 | 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 2e 20 | ression.Control.Protocol.(CCP).. |
beba0 | 43 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 44 69 73 61 62 | CCP.is.enabled.by.default..Disab |
bebc0 | 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 | le.MLD.reports.and.query.on.the. |
bebe0 | 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c 65 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f | interface..Disable.`<user>`.acco |
bec00 | 75 6e 74 2e 00 44 69 73 61 62 6c 65 20 61 20 42 46 44 20 70 65 65 72 00 44 69 73 61 62 6c 65 20 | unt..Disable.a.BFD.peer.Disable. |
bec20 | 61 20 63 6f 6e 74 61 69 6e 65 72 2e 00 44 69 73 61 62 6c 65 20 61 20 67 69 76 65 6e 20 63 6f 6e | a.container..Disable.a.given.con |
bec40 | 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 00 44 69 73 61 62 6c 65 20 61 6c 6c 20 6f 70 74 69 | tainer.registry.Disable.all.opti |
bec60 | 6f 6e 61 6c 20 43 50 55 20 6d 69 74 69 67 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 69 6d 70 72 6f | onal.CPU.mitigations..This.impro |
bec80 | 76 65 73 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 62 75 74 20 69 74 20 6d | ves.system.performance,.but.it.m |
beca0 | 61 79 20 61 6c 73 6f 20 65 78 70 6f 73 65 20 75 73 65 72 73 20 74 6f 20 73 65 76 65 72 61 6c 20 | ay.also.expose.users.to.several. |
becc0 | 43 50 55 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 69 65 73 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e | CPU.vulnerabilities..Disable.con |
bece0 | 6e 65 63 74 69 6f 6e 20 6c 6f 67 67 69 6e 67 20 76 69 61 20 53 79 73 6c 6f 67 2e 00 44 69 73 61 | nection.logging.via.Syslog..Disa |
bed00 | 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 20 6c 6f 6f 73 65 20 74 72 61 63 6b 20 6f 70 74 69 6f 6e | ble.conntrack.loose.track.option |
bed20 | 00 44 69 73 61 62 6c 65 20 64 68 63 70 2d 72 65 6c 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 | .Disable.dhcp-relay.service..Dis |
bed40 | 61 62 6c 65 20 64 68 63 70 76 36 2d 72 65 6c 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 | able.dhcpv6-relay.service..Disab |
bed60 | 6c 65 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 20 77 69 6c 6c 20 | le.given.`<interface>`..It.will. |
bed80 | 62 65 20 70 6c 61 63 65 64 20 69 6e 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 64 6f | be.placed.in.administratively.do |
beda0 | 77 6e 20 28 60 60 41 2f 44 60 60 29 20 73 74 61 74 65 2e 00 44 69 73 61 62 6c 65 20 69 6d 6d 65 | wn.(``A/D``).state..Disable.imme |
bedc0 | 64 69 61 74 65 20 73 65 73 73 69 6f 6e 20 72 65 73 65 74 20 69 66 20 70 65 65 72 27 73 20 63 6f | diate.session.reset.if.peer's.co |
bede0 | 6e 6e 65 63 74 65 64 20 6c 69 6e 6b 20 67 6f 65 73 20 64 6f 77 6e 2e 00 44 69 73 61 62 6c 65 20 | nnected.link.goes.down..Disable. |
bee00 | 70 61 73 73 77 6f 72 64 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 4c | password.based.authentication..L |
bee20 | 6f 67 69 6e 20 76 69 61 20 53 53 48 20 6b 65 79 73 20 6f 6e 6c 79 2e 20 54 68 69 73 20 68 61 72 | ogin.via.SSH.keys.only..This.har |
bee40 | 64 65 6e 73 20 73 65 63 75 72 69 74 79 21 00 44 69 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 | dens.security!.Disable.sending.a |
bee60 | 6e 64 20 72 65 63 65 69 76 69 6e 67 20 50 49 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 | nd.receiving.PIM.control.packets |
bee80 | 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 68 | .on.the.interface..Disable.the.h |
beea0 | 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 72 65 76 65 72 73 65 20 44 | ost.validation.through.reverse.D |
beec0 | 4e 53 20 6c 6f 6f 6b 75 70 73 20 2d 20 63 61 6e 20 73 70 65 65 64 75 70 20 6c 6f 67 69 6e 20 74 | NS.lookups.-.can.speedup.login.t |
beee0 | 69 6d 65 20 77 68 65 6e 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 20 69 73 20 6e 6f 74 20 70 | ime.when.reverse.lookup.is.not.p |
bef00 | 6f 73 73 69 62 6c 65 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 63 6f 6e 66 69 67 | ossible..Disable.the.peer.config |
bef20 | 75 72 61 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 49 50 76 34 20 73 74 61 74 69 63 | uration.Disable.this.IPv4.static |
bef40 | 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 49 50 76 36 20 | .route.entry..Disable.this.IPv6. |
bef60 | 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 | static.route.entry..Disable.this |
bef80 | 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 74 72 61 6e 73 6d 69 74 20 6f 66 20 4c 4c | .service..Disable.transmit.of.LL |
befa0 | 44 50 20 66 72 61 6d 65 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | DP.frames.on.given.`<interface>` |
befc0 | 2e 20 55 73 65 66 75 6c 20 74 6f 20 65 78 63 6c 75 64 65 20 63 65 72 74 61 69 6e 20 69 6e 74 65 | ..Useful.to.exclude.certain.inte |
befe0 | 72 66 61 63 65 73 20 66 72 6f 6d 20 4c 4c 44 50 20 77 68 65 6e 20 60 60 61 6c 6c 60 60 20 68 61 | rfaces.from.LLDP.when.``all``.ha |
bf000 | 76 65 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 2e 00 44 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 | ve.been.enabled..Disabled.by.def |
bf020 | 61 75 6c 74 20 2d 20 6e 6f 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6c 6f 61 64 65 64 2e 00 | ault.-.no.kernel.module.loaded.. |
bf040 | 44 69 73 61 62 6c 65 73 20 63 61 63 68 69 6e 67 20 6f 66 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 | Disables.caching.of.peer.informa |
bf060 | 74 69 6f 6e 20 66 72 6f 6d 20 66 6f 72 77 61 72 64 65 64 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 | tion.from.forwarded.NHRP.Resolut |
bf080 | 69 6f 6e 20 52 65 70 6c 79 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 | ion.Reply.packets..This.can.be.u |
bf0a0 | 73 65 64 20 74 6f 20 72 65 64 75 63 65 20 6d 65 6d 6f 72 79 20 63 6f 6e 73 75 6d 70 74 69 6f 6e | sed.to.reduce.memory.consumption |
bf0c0 | 20 6f 6e 20 62 69 67 20 4e 42 4d 41 20 73 75 62 6e 65 74 73 2e 00 44 69 73 61 62 6c 65 73 20 69 | .on.big.NBMA.subnets..Disables.i |
bf0e0 | 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 | nterface-based.IPv4.static.route |
bf100 | 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 | ..Disables.interface-based.IPv6. |
bf120 | 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 71 75 69 63 6b 6c 65 61 76 | static.route..Disables.quickleav |
bf140 | 65 20 6d 6f 64 65 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 64 61 65 6d 6f 6e 20 | e.mode..In.this.mode.the.daemon. |
bf160 | 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 20 4c 65 61 76 65 20 49 47 4d 50 20 6d 65 73 73 61 | will.not.send.a.Leave.IGMP.messa |
bf180 | 67 65 20 75 70 73 74 72 65 61 6d 20 61 73 20 73 6f 6f 6e 20 61 73 20 69 74 20 72 65 63 65 69 76 | ge.upstream.as.soon.as.it.receiv |
bf1a0 | 65 73 20 61 20 4c 65 61 76 65 20 6d 65 73 73 61 67 65 20 66 6f 72 20 61 6e 79 20 64 6f 77 6e 73 | es.a.Leave.message.for.any.downs |
bf1c0 | 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c | tream.interface..The.daemon.will |
bf1e0 | 20 6e 6f 74 20 61 73 6b 20 66 6f 72 20 4d 65 6d 62 65 72 73 68 69 70 20 72 65 70 6f 72 74 73 20 | .not.ask.for.Membership.reports. |
bf200 | 6f 6e 20 74 68 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e | on.the.downstream.interfaces,.an |
bf220 | 64 20 69 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 72 65 63 65 69 76 65 64 20 74 68 65 20 67 72 | d.if.a.report.is.received.the.gr |
bf240 | 6f 75 70 20 69 73 20 6e 6f 74 20 6a 6f 69 6e 65 64 20 61 67 61 69 6e 20 74 68 65 20 75 70 73 74 | oup.is.not.joined.again.the.upst |
bf260 | 72 65 61 6d 2e 00 44 69 73 61 62 6c 65 73 20 77 65 62 20 66 69 6c 74 65 72 69 6e 67 20 77 69 74 | ream..Disables.web.filtering.wit |
bf280 | 68 6f 75 74 20 64 69 73 63 61 72 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 | hout.discarding.configuration..D |
bf2a0 | 69 73 61 62 6c 65 73 20 77 65 62 20 70 72 6f 78 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6d 6f | isables.web.proxy.transparent.mo |
bf2c0 | 64 65 20 61 74 20 61 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 00 44 69 73 61 62 | de.at.a.listening.address..Disab |
bf2e0 | 6c 69 6e 67 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 44 69 73 61 62 6c 69 6e 67 20 61 20 | ling.Advertisements.Disabling.a. |
bf300 | 56 52 52 50 20 67 72 6f 75 70 00 44 69 73 61 62 6c 69 6e 67 20 74 68 65 20 65 6e 63 72 79 70 74 | VRRP.group.Disabling.the.encrypt |
bf320 | 69 6f 6e 20 6f 6e 20 74 68 65 20 6c 69 6e 6b 20 62 79 20 72 65 6d 6f 76 69 6e 67 20 60 60 73 65 | ion.on.the.link.by.removing.``se |
bf340 | 63 75 72 69 74 79 20 65 6e 63 72 79 70 74 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 74 68 65 20 75 | curity.encrypt``.will.show.the.u |
bf360 | 6e 65 6e 63 72 79 70 74 65 64 20 62 75 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 63 6f 6e | nencrypted.but.authenticated.con |
bf380 | 74 65 6e 74 2e 00 44 69 73 61 64 76 61 6e 74 61 67 65 73 20 61 72 65 3a 00 44 69 73 61 73 73 6f | tent..Disadvantages.are:.Disasso |
bf3a0 | 63 69 61 74 65 20 73 74 61 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 65 78 63 65 73 73 69 76 | ciate.stations.based.on.excessiv |
bf3c0 | 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 66 61 69 6c 75 72 65 73 20 6f 72 20 6f 74 68 65 72 | e.transmission.failures.or.other |
bf3e0 | 20 69 6e 64 69 63 61 74 69 6f 6e 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 73 73 2e | .indications.of.connection.loss. |
bf400 | 00 44 69 73 70 6c 61 79 20 49 50 76 34 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 | .Display.IPv4.routing.table.for. |
bf420 | 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 | VRF.identified.by.`<name>`..Disp |
bf440 | 6c 61 79 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 | lay.IPv6.routing.table.for.VRF.i |
bf460 | 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 4c | dentified.by.`<name>`..Display.L |
bf480 | 6f 67 73 00 44 69 73 70 6c 61 79 20 4f 54 50 20 6b 65 79 20 66 6f 72 20 75 73 65 72 00 44 69 73 | ogs.Display.OTP.key.for.user.Dis |
bf4a0 | 70 6c 61 79 20 61 6c 6c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 20 | play.all.authorization.attempts. |
bf4c0 | 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 61 | of.the.specified.image.Display.a |
bf4e0 | 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 6f 6e 20 61 20 | ll.known.ARP.table.entries.on.a. |
bf500 | 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 6c 79 20 28 60 65 74 68 31 60 29 3a 00 44 | given.interface.only.(`eth1`):.D |
bf520 | 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 | isplay.all.known.ARP.table.entri |
bf540 | 65 73 20 73 70 61 6e 6e 69 6e 67 20 61 63 72 6f 73 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 | es.spanning.across.all.interface |
bf560 | 73 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 | s.Display.contents.of.a.specifie |
bf580 | 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 69 6c 65 20 6f 66 20 74 68 65 20 73 | d.user-defined.log.file.of.the.s |
bf5a0 | 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 | pecified.image.Display.contents. |
bf5c0 | 6f 66 20 61 6c 6c 20 6d 61 73 74 65 72 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 | of.all.master.log.files.of.the.s |
bf5e0 | 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 61 73 74 20 6c 69 6e 65 | pecified.image.Display.last.line |
bf600 | 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 6c 6f 67 20 6f 66 20 74 68 65 20 73 70 65 63 69 | s.of.the.system.log.of.the.speci |
bf620 | 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 75 | fied.image.Display.list.of.all.u |
bf640 | 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 | ser-defined.log.files.of.the.spe |
bf660 | 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 6f 67 20 66 69 6c 65 73 20 6f | cified.image.Display.log.files.o |
bf680 | 66 20 67 69 76 65 6e 20 63 61 74 65 67 6f 72 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e | f.given.category.on.the.console. |
bf6a0 | 20 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 | .Use.tab.completion.to.get.a.lis |
bf6c0 | 74 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 63 61 74 65 67 6f 72 69 65 73 2e 20 54 68 6f 73 20 | t.of.available.categories..Thos. |
bf6e0 | 63 61 74 65 67 6f 72 69 65 73 20 63 6f 75 6c 64 20 62 65 3a 20 61 6c 6c 2c 20 61 75 74 68 6f 72 | categories.could.be:.all,.author |
bf700 | 69 7a 61 74 69 6f 6e 2c 20 63 6c 75 73 74 65 72 2c 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 | ization,.cluster,.conntrack-sync |
bf720 | 2c 20 64 68 63 70 2c 20 64 69 72 65 63 74 6f 72 79 2c 20 64 6e 73 2c 20 66 69 6c 65 2c 20 66 69 | ,.dhcp,.directory,.dns,.file,.fi |
bf740 | 72 65 77 61 6c 6c 2c 20 68 74 74 70 73 2c 20 69 6d 61 67 65 20 6c 6c 64 70 2c 20 6e 61 74 2c 20 | rewall,.https,.image.lldp,.nat,. |
bf760 | 6f 70 65 6e 76 70 6e 2c 20 73 6e 6d 70 2c 20 74 61 69 6c 2c 20 76 70 6e 2c 20 76 72 72 70 00 44 | openvpn,.snmp,.tail,.vpn,.vrrp.D |
bf780 | 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6e 65 | isplays.information.about.all.ne |
bf7a0 | 69 67 68 62 6f 72 73 20 64 69 73 63 6f 76 65 72 65 64 20 76 69 61 20 4c 4c 44 50 2e 00 44 69 73 | ighbors.discovered.via.LLDP..Dis |
bf7c0 | 70 6c 61 79 73 20 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 20 50 50 | plays.queue.information.for.a.PP |
bf7e0 | 50 6f 45 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 | PoE.interface..Displays.the.rout |
bf800 | 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 | e.packets.taken.to.a.network.hos |
bf820 | 74 20 75 74 69 6c 69 7a 69 6e 67 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 69 64 65 6e 74 69 66 | t.utilizing.VRF.instance.identif |
bf840 | 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 | ied.by.`<name>`..When.using.the. |
bf860 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 6f 70 74 69 6f 6e 2c 20 64 69 73 70 6c 61 79 73 20 74 68 | IPv4.or.IPv6.option,.displays.th |
bf880 | 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 6f 20 74 68 65 20 67 69 76 | e.route.packets.taken.to.the.giv |
bf8a0 | 65 6e 20 68 6f 73 74 73 20 49 50 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2e 20 54 68 69 73 | en.hosts.IP.address.family..This |
bf8c0 | 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 68 6f 73 74 20 | .option.is.useful.when.the.host. |
bf8e0 | 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 68 6f 73 74 6e 61 6d 65 20 72 61 74 68 65 | is.specified.as.a.hostname.rathe |
bf900 | 72 20 74 68 61 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 44 6f 20 2a 6e 6f 74 2a 20 6d | r.than.an.IP.address..Do.*not*.m |
bf920 | 61 6e 75 61 6c 6c 79 20 65 64 69 74 20 60 2f 65 74 63 2f 68 6f 73 74 73 60 2e 20 54 68 69 73 20 | anually.edit.`/etc/hosts`..This. |
bf940 | 66 69 6c 65 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 72 65 67 65 6e | file.will.automatically.be.regen |
bf960 | 65 72 61 74 65 64 20 6f 6e 20 62 6f 6f 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 65 74 74 | erated.on.boot.based.on.the.sett |
bf980 | 69 6e 67 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2c 20 77 68 69 63 68 20 6d 65 61 6e | ings.in.this.section,.which.mean |
bf9a0 | 73 20 79 6f 75 27 6c 6c 20 6c 6f 73 65 20 61 6c 6c 20 79 6f 75 72 20 6d 61 6e 75 61 6c 20 65 64 | s.you'll.lose.all.your.manual.ed |
bf9c0 | 69 74 73 2e 20 49 6e 73 74 65 61 64 2c 20 63 6f 6e 66 69 67 75 72 65 20 73 74 61 74 69 63 20 68 | its..Instead,.configure.static.h |
bf9e0 | 6f 73 74 20 6d 61 70 70 69 6e 67 73 20 61 73 20 66 6f 6c 6c 6f 77 73 2e 00 44 6f 20 6e 6f 74 20 | ost.mappings.as.follows..Do.not. |
bfa00 | 61 6c 6c 6f 77 20 49 50 76 34 20 6e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 | allow.IPv4.nexthop.tracking.to.r |
bfa20 | 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 | esolve.via.the.default.route..Th |
bfa40 | 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 | is.parameter.is.configured.per-V |
bfa60 | 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c | RF,.so.the.command.is.also.avail |
bfa80 | 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 | able.in.the.VRF.subnode..Do.not. |
bfaa0 | 61 6c 6c 6f 77 20 49 50 76 36 20 6e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 | allow.IPv6.nexthop.tracking.to.r |
bfac0 | 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 | esolve.via.the.default.route..Th |
bfae0 | 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 | is.parameter.is.configured.per-V |
bfb00 | 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c | RF,.so.the.command.is.also.avail |
bfb20 | 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 | able.in.the.VRF.subnode..Do.not. |
bfb40 | 61 73 73 69 67 6e 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 49 50 76 36 20 61 64 64 72 65 73 73 | assign.a.link-local.IPv6.address |
bfb60 | 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 44 6f 20 6e 6f 74 20 63 6f 6e 66 69 | .to.this.interface..Do.not.confi |
bfb80 | 67 75 72 65 20 49 46 42 20 61 73 20 74 68 65 20 66 69 72 73 74 20 73 74 65 70 2e 20 46 69 72 73 | gure.IFB.as.the.first.step..Firs |
bfba0 | 74 20 63 72 65 61 74 65 20 65 76 65 72 79 74 68 69 6e 67 20 65 6c 73 65 20 6f 66 20 79 6f 75 72 | t.create.everything.else.of.your |
bfbc0 | 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 2c 20 61 6e 64 20 74 68 65 6e 20 79 6f 75 20 63 61 | .traffic-policy,.and.then.you.ca |
bfbe0 | 6e 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 2e 20 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 6d | n.configure.IFB..Otherwise.you.m |
bfc00 | 69 67 68 74 20 67 65 74 20 74 68 65 20 60 60 52 54 4e 45 54 4c 49 4e 4b 20 61 6e 73 77 65 72 3a | ight.get.the.``RTNETLINK.answer: |
bfc20 | 20 46 69 6c 65 20 65 78 69 73 74 73 60 60 20 65 72 72 6f 72 2c 20 77 68 69 63 68 20 63 61 6e 20 | .File.exists``.error,.which.can. |
bfc40 | 62 65 20 73 6f 6c 76 65 64 20 77 69 74 68 20 60 60 73 75 64 6f 20 69 70 20 6c 69 6e 6b 20 64 65 | be.solved.with.``sudo.ip.link.de |
bfc60 | 6c 65 74 65 20 69 66 62 30 60 60 2e 00 44 6f 20 6e 6f 74 20 73 65 6e 64 20 48 61 72 64 20 52 65 | lete.ifb0``..Do.not.send.Hard.Re |
bfc80 | 73 65 74 20 43 45 41 53 45 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 66 6f 72 20 22 41 64 6d 69 | set.CEASE.Notification.for."Admi |
bfca0 | 6e 69 73 74 72 61 74 69 76 65 20 52 65 73 65 74 22 20 65 76 65 6e 74 73 2e 20 57 68 65 6e 20 73 | nistrative.Reset".events..When.s |
bfcc0 | 65 74 20 61 6e 64 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 4e 6f 74 69 66 69 63 61 | et.and.Graceful.Restart.Notifica |
bfce0 | 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 | tion.capability.is.exchanged.bet |
bfd00 | 77 65 65 6e 20 74 68 65 20 70 65 65 72 73 2c 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 | ween.the.peers,.Graceful.Restart |
bfd20 | 20 70 72 6f 63 65 64 75 72 65 73 20 61 70 70 6c 79 2c 20 61 6e 64 20 72 6f 75 74 65 73 20 77 69 | .procedures.apply,.and.routes.wi |
bfd40 | 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 2e 00 44 6f 20 6e 6f 74 20 75 73 65 20 74 68 65 20 6c | ll.be.retained..Do.not.use.the.l |
bfd60 | 6f 63 61 6c 20 60 60 2f 65 74 63 2f 68 6f 73 74 73 60 60 20 66 69 6c 65 20 69 6e 20 6e 61 6d 65 | ocal.``/etc/hosts``.file.in.name |
bfd80 | 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 56 79 4f 53 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 | .resolution..VyOS.DHCP.server.wi |
bfda0 | 6c 6c 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 61 64 64 20 72 65 73 6f 6c 76 65 72 | ll.use.this.file.to.add.resolver |
bfdc0 | 73 20 74 6f 20 61 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 65 73 2e 00 44 6f 65 73 20 6e 6f | s.to.assigned.addresses..Does.no |
bfde0 | 74 20 6e 65 65 64 20 74 6f 20 62 65 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 | t.need.to.be.used.together.with. |
bfe00 | 70 72 6f 78 79 5f 61 72 70 2e 00 44 6f 6d 61 69 6e 00 44 6f 6d 61 69 6e 20 47 72 6f 75 70 73 00 | proxy_arp..Domain.Domain.Groups. |
bfe20 | 44 6f 6d 61 69 6e 20 4e 61 6d 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 28 73 29 20 66 6f 72 20 77 | Domain.Name.Domain.name(s).for.w |
bfe40 | 68 69 63 68 20 74 6f 20 6f 62 74 61 69 6e 20 63 65 72 74 69 66 69 63 61 74 65 00 44 6f 6d 61 69 | hich.to.obtain.certificate.Domai |
bfe60 | 6e 20 6e 61 6d 65 73 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d | n.names.can.include.letters,.num |
bfe80 | 62 65 72 73 2c 20 68 79 70 68 65 6e 73 20 61 6e 64 20 70 65 72 69 6f 64 73 20 77 69 74 68 20 61 | bers,.hyphens.and.periods.with.a |
bfea0 | 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 32 35 33 20 63 68 61 72 61 63 74 65 72 | .maximum.length.of.253.character |
bfec0 | 73 2e 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 74 6f 20 61 70 70 6c 79 2c 20 6d 75 6c 74 69 70 | s..Domain.names.to.apply,.multip |
bfee0 | 6c 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 | le.domain-names.can.be.specified |
bff00 | 2e 00 44 6f 6d 61 69 6e 20 73 65 61 72 63 68 20 6f 72 64 65 72 00 44 6f 6e 27 74 20 62 65 20 61 | ..Domain.search.order.Don't.be.a |
bff20 | 66 72 61 69 64 20 74 68 61 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 72 65 2d 64 6f 20 79 6f 75 | fraid.that.you.need.to.re-do.you |
bff40 | 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4b 65 79 20 74 72 61 6e 73 66 6f 72 6d 61 74 | r.configuration..Key.transformat |
bff60 | 69 6f 6e 20 69 73 20 68 61 6e 64 6c 65 64 2c 20 61 73 20 61 6c 77 61 79 73 2c 20 62 79 20 6f 75 | ion.is.handled,.as.always,.by.ou |
bff80 | 72 20 6d 69 67 72 61 74 69 6f 6e 20 73 63 72 69 70 74 73 2c 20 73 6f 20 74 68 69 73 20 77 69 6c | r.migration.scripts,.so.this.wil |
bffa0 | 6c 20 62 65 20 61 20 73 6d 6f 6f 74 68 20 74 72 61 6e 73 69 74 69 6f 6e 20 66 6f 72 20 79 6f 75 | l.be.a.smooth.transition.for.you |
bffc0 | 21 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 | !.Don't.forget,.the.CIDR.declare |
bffe0 | 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 2a 2a 4d 55 53 | d.in.the.network.statement.**MUS |
c0000 | 54 20 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 | T.exist.in.your.routing.table.(d |
c0020 | 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 | ynamic.or.static),.the.best.way. |
c0040 | 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 | to.make.sure.that.is.true.is.cre |
c0060 | 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 66 6f | ating.a.static.route:**.Don't.fo |
c0080 | 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e | rget,.the.CIDR.declared.in.the.n |
c00a0 | 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 4d 55 53 54 20 2a 2a 65 78 69 73 74 20 69 6e | etwork.statement.MUST.**exist.in |
c00c0 | 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 | .your.routing.table.(dynamic.or. |
c00e0 | 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 | static),.the.best.way.to.make.su |
c0100 | 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 | re.that.is.true.is.creating.a.st |
c0120 | 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 | atic.route:**.Don't.get.confused |
c0140 | 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 64 20 2f 33 31 20 74 75 6e 6e 65 6c 20 73 75 62 6e 65 | .about.the.used./31.tunnel.subne |
c0160 | 74 2e 20 3a 72 66 63 3a 60 33 30 32 31 60 20 67 69 76 65 73 20 79 6f 75 20 61 64 64 69 74 69 6f | t..:rfc:`3021`.gives.you.additio |
c0180 | 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 75 73 69 6e 67 20 2f 33 31 20 73 75 | nal.information.for.using./31.su |
c01a0 | 62 6e 65 74 73 20 6f 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6c 69 6e 6b 73 2e 00 44 | bnets.on.point-to-point.links..D |
c01c0 | 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f | ownload.bandwidth.limit.in.kbit/ |
c01e0 | 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 | s.for.`<user>`..Download.bandwid |
c0200 | 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 | th.limit.in.kbit/s.for.user.on.i |
c0220 | 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 | nterface.`<interface>`..Download |
c0240 | 2f 55 70 64 61 74 65 20 63 6f 6d 70 6c 65 74 65 20 62 6c 61 63 6b 6c 69 73 74 00 44 6f 77 6e 6c | /Update.complete.blacklist.Downl |
c0260 | 6f 61 64 2f 55 70 64 61 74 65 20 70 61 72 74 69 61 6c 20 62 6c 61 63 6b 6c 69 73 74 2e 00 44 72 | oad/Update.partial.blacklist..Dr |
c0280 | 6f 70 20 41 53 2d 4e 55 4d 42 45 52 20 66 72 6f 6d 20 74 68 65 20 42 47 50 20 41 53 20 70 61 74 | op.AS-NUMBER.from.the.BGP.AS.pat |
c02a0 | 68 2e 00 44 72 6f 70 20 54 61 69 6c 00 44 72 6f 70 20 72 61 74 65 00 44 72 6f 70 70 65 64 20 70 | h..Drop.Tail.Drop.rate.Dropped.p |
c02c0 | 61 63 6b 65 74 73 20 72 65 70 6f 72 74 65 64 20 6f 6e 20 44 52 4f 50 4d 4f 4e 20 4e 65 74 6c 69 | ackets.reported.on.DROPMON.Netli |
c02e0 | 6e 6b 20 63 68 61 6e 6e 65 6c 20 62 79 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 61 72 65 20 65 | nk.channel.by.Linux.kernel.are.e |
c0300 | 78 70 6f 72 74 65 64 20 76 69 61 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 73 46 6c 6f 77 20 76 | xported.via.the.standard.sFlow.v |
c0320 | 35 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 72 65 70 6f 72 74 69 6e 67 20 64 72 6f 70 70 65 | 5.extension.for.reporting.droppe |
c0340 | 64 20 70 61 63 6b 65 74 73 00 44 75 61 6c 2d 53 74 61 63 6b 20 49 50 76 34 2f 49 50 76 36 20 70 | d.packets.Dual-Stack.IPv4/IPv6.p |
c0360 | 72 6f 76 69 73 69 6f 6e 69 6e 67 20 77 69 74 68 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 | rovisioning.with.Prefix.Delegati |
c0380 | 6f 6e 00 44 75 6d 6d 79 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 44 75 6d 6d 79 20 69 | on.Dummy.Dummy.interface.Dummy.i |
c03a0 | 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 69 6e 74 65 72 66 61 | nterfaces.can.be.used.as.interfa |
c03c0 | 63 65 73 20 74 68 61 74 20 61 6c 77 61 79 73 20 73 74 61 79 20 75 70 20 28 69 6e 20 74 68 65 20 | ces.that.always.stay.up.(in.the. |
c03e0 | 73 61 6d 65 20 66 61 73 68 69 6f 6e 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 73 20 69 6e 20 43 69 73 | same.fashion.to.loopbacks.in.Cis |
c0400 | 63 6f 20 49 4f 53 29 2c 20 6f 72 20 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 | co.IOS),.or.for.testing.purposes |
c0420 | 2e 00 44 75 70 6c 69 63 61 74 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 69 6e 63 6c | ..Duplicate.packets.are.not.incl |
c0440 | 75 64 65 64 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 63 61 6c 63 75 6c 61 74 | uded.in.the.packet.loss.calculat |
c0460 | 69 6f 6e 2c 20 61 6c 74 68 6f 75 67 68 20 74 68 65 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d | ion,.although.the.round-trip.tim |
c0480 | 65 20 6f 66 20 74 68 65 73 65 20 70 61 63 6b 65 74 73 20 69 73 20 75 73 65 64 20 69 6e 20 63 61 | e.of.these.packets.is.used.in.ca |
c04a0 | 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2f 20 61 76 65 72 61 67 65 2f 6d | lculating.the.minimum/.average/m |
c04c0 | 61 78 69 6d 75 6d 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6e 75 6d 62 65 72 73 2e 00 | aximum.round-trip.time.numbers.. |
c04e0 | 44 75 72 69 6e 67 20 69 6e 69 74 69 61 6c 20 64 65 70 6c 6f 79 6d 65 6e 74 20 77 65 20 72 65 63 | During.initial.deployment.we.rec |
c0500 | 6f 6d 6d 65 6e 64 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 67 69 6e 67 20 41 50 49 20 6f 66 20 | ommend.using.the.staging.API.of. |
c0520 | 4c 65 74 73 45 6e 63 72 79 70 74 20 74 6f 20 70 72 65 76 65 6e 74 20 61 6e 64 20 62 6c 61 63 6b | LetsEncrypt.to.prevent.and.black |
c0540 | 6c 69 73 74 69 6e 67 20 6f 66 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 65 20 41 50 49 20 | listing.of.your.system..The.API. |
c0560 | 65 6e 64 70 6f 69 6e 74 20 69 73 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d 73 74 61 67 69 6e 67 | endpoint.is.https://acme-staging |
c0580 | 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f | -v02.api.letsencrypt.org/directo |
c05a0 | 72 79 00 44 75 72 69 6e 67 20 70 72 6f 66 69 6c 65 20 69 6d 70 6f 72 74 2c 20 74 68 65 20 75 73 | ry.During.profile.import,.the.us |
c05c0 | 65 72 20 69 73 20 61 73 6b 65 64 20 74 6f 20 65 6e 74 65 72 20 69 74 73 20 49 50 53 65 63 20 63 | er.is.asked.to.enter.its.IPSec.c |
c05e0 | 72 65 64 65 6e 74 69 61 6c 73 20 28 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 | redentials.(username.and.passwor |
c0600 | 64 29 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 | d).which.is.stored.on.the.mobile |
c0620 | 2e 00 44 79 6e 61 6d 69 63 20 44 4e 53 00 44 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e | ..Dynamic.DNS.Dynamic-protection |
c0640 | 00 45 41 50 6f 4c 20 63 6f 6d 65 73 20 77 69 74 68 20 61 6e 20 69 64 65 6e 74 69 66 79 20 6f 70 | .EAPoL.comes.with.an.identify.op |
c0660 | 74 69 6f 6e 2e 20 57 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 73 65 20 74 68 65 20 69 | tion..We.automatically.use.the.i |
c0680 | 6e 74 65 72 66 61 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 61 73 20 69 64 65 6e 74 69 74 79 | nterface.MAC.address.as.identity |
c06a0 | 20 70 61 72 61 6d 65 74 65 72 2e 00 45 53 50 20 28 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 | .parameter..ESP.(Encapsulating.S |
c06c0 | 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 29 20 41 74 74 72 69 62 75 74 65 73 00 45 53 50 20 | ecurity.Payload).Attributes.ESP. |
c06e0 | 50 68 61 73 65 3a 00 45 53 50 20 69 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f | Phase:.ESP.is.used.to.provide.co |
c0700 | 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 64 61 74 61 20 6f 72 69 67 69 6e 20 61 75 74 68 65 | nfidentiality,.data.origin.authe |
c0720 | 6e 74 69 63 61 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 20 69 6e 74 65 67 72 | ntication,.connectionless.integr |
c0740 | 69 74 79 2c 20 61 6e 20 61 6e 74 69 2d 72 65 70 6c 61 79 20 73 65 72 76 69 63 65 20 28 61 20 66 | ity,.an.anti-replay.service.(a.f |
c0760 | 6f 72 6d 20 6f 66 20 70 61 72 74 69 61 6c 20 73 65 71 75 65 6e 63 65 20 69 6e 74 65 67 72 69 74 | orm.of.partial.sequence.integrit |
c0780 | 79 29 2c 20 61 6e 64 20 6c 69 6d 69 74 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 63 6f 6e | y),.and.limited.traffic.flow.con |
c07a0 | 66 69 64 65 6e 74 69 61 6c 69 74 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 | fidentiality..https://datatracke |
c07c0 | 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 34 33 30 33 00 45 61 63 68 | r.ietf.org/doc/html/rfc4303.Each |
c07e0 | 20 3a 61 62 62 72 3a 60 41 53 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 29 60 20 | .:abbr:`AS.(Autonomous.System)`. |
c0800 | 68 61 73 20 61 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 | has.an.identifying.number.associ |
c0820 | 61 74 65 64 20 77 69 74 68 20 69 74 20 63 61 6c 6c 65 64 20 61 6e 20 3a 61 62 62 72 3a 60 41 53 | ated.with.it.called.an.:abbr:`AS |
c0840 | 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 | N.(Autonomous.System.Number)`..T |
c0860 | 68 69 73 20 69 73 20 61 20 74 77 6f 20 6f 63 74 65 74 20 76 61 6c 75 65 20 72 61 6e 67 69 6e 67 | his.is.a.two.octet.value.ranging |
c0880 | 20 69 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 31 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 41 | .in.value.from.1.to.65535..The.A |
c08a0 | 53 20 6e 75 6d 62 65 72 73 20 36 34 35 31 32 20 74 68 72 6f 75 67 68 20 36 35 35 33 35 20 61 72 | S.numbers.64512.through.65535.ar |
c08c0 | 65 20 64 65 66 69 6e 65 64 20 61 73 20 70 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 2e | e.defined.as.private.AS.numbers. |
c08e0 | 20 50 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 | .Private.AS.numbers.must.not.be. |
c0900 | 61 64 76 65 72 74 69 73 65 64 20 6f 6e 20 74 68 65 20 67 6c 6f 62 61 6c 20 49 6e 74 65 72 6e 65 | advertised.on.the.global.Interne |
c0920 | 74 2e 20 54 68 65 20 32 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 68 61 | t..The.2-byte.AS.number.range.ha |
c0940 | 73 20 62 65 65 6e 20 65 78 68 61 75 73 74 65 64 2e 20 34 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 | s.been.exhausted..4-byte.AS.numb |
c0960 | 65 72 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 37 39 33 60 | ers.are.specified.in.:rfc:`6793` |
c0980 | 2c 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 20 70 6f 6f 6c 20 6f 66 20 34 32 39 34 39 36 37 32 | ,.and.provide.a.pool.of.42949672 |
c09a0 | 39 36 20 41 53 20 6e 75 6d 62 65 72 73 2e 00 45 61 63 68 20 4e 65 74 66 69 6c 74 65 72 20 63 6f | 96.AS.numbers..Each.Netfilter.co |
c09c0 | 6e 6e 65 63 74 69 6f 6e 20 69 73 20 75 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 64 20 | nnection.is.uniquely.identified. |
c09e0 | 62 79 20 61 20 28 6c 61 79 65 72 2d 33 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 | by.a.(layer-3.protocol,.source.a |
c0a00 | 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 6c 61 79 | ddress,.destination.address,.lay |
c0a20 | 65 72 2d 34 20 70 72 6f 74 6f 63 6f 6c 2c 20 6c 61 79 65 72 2d 34 20 6b 65 79 29 20 74 75 70 6c | er-4.protocol,.layer-4.key).tupl |
c0a40 | 65 2e 20 54 68 65 20 6c 61 79 65 72 2d 34 20 6b 65 79 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 | e..The.layer-4.key.depends.on.th |
c0a60 | 65 20 74 72 61 6e 73 70 6f 72 74 20 70 72 6f 74 6f 63 6f 6c 3b 20 66 6f 72 20 54 43 50 2f 55 44 | e.transport.protocol;.for.TCP/UD |
c0a80 | 50 20 69 74 20 69 73 20 74 68 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 66 6f 72 20 74 75 | P.it.is.the.port.numbers,.for.tu |
c0aa0 | 6e 6e 65 6c 73 20 69 74 20 63 61 6e 20 62 65 20 74 68 65 69 72 20 74 75 6e 6e 65 6c 20 49 44 2c | nnels.it.can.be.their.tunnel.ID, |
c0ac0 | 20 62 75 74 20 6f 74 68 65 72 77 69 73 65 20 69 73 20 6a 75 73 74 20 7a 65 72 6f 2c 20 61 73 20 | .but.otherwise.is.just.zero,.as. |
c0ae0 | 69 66 20 69 74 20 77 65 72 65 20 6e 6f 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 75 70 6c 65 | if.it.were.not.part.of.the.tuple |
c0b00 | 2e 20 54 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 69 6e 73 70 65 63 74 20 74 68 65 20 54 43 50 20 | ..To.be.able.to.inspect.the.TCP. |
c0b20 | 70 6f 72 74 20 69 6e 20 61 6c 6c 20 63 61 73 65 73 2c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 | port.in.all.cases,.packets.will. |
c0b40 | 62 65 20 6d 61 6e 64 61 74 6f 72 69 6c 79 20 64 65 66 72 61 67 6d 65 6e 74 65 64 2e 00 45 61 63 | be.mandatorily.defragmented..Eac |
c0b60 | 68 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 74 68 | h.VXLAN.segment.is.identified.th |
c0b80 | 72 6f 75 67 68 20 61 20 32 34 2d 62 69 74 20 73 65 67 6d 65 6e 74 20 49 44 2c 20 74 65 72 6d 65 | rough.a.24-bit.segment.ID,.terme |
c0ba0 | 64 20 74 68 65 20 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 | d.the.:abbr:`VNI.(VXLAN.Network. |
c0bc0 | 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 | Identifier.(or.VXLAN.Segment.ID) |
c0be0 | 29 60 2c 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 75 70 20 74 6f 20 31 36 4d 20 56 58 4c 41 4e 20 | )`,.This.allows.up.to.16M.VXLAN. |
c0c00 | 73 65 67 6d 65 6e 74 73 20 74 6f 20 63 6f 65 78 69 73 74 20 77 69 74 68 69 6e 20 74 68 65 20 73 | segments.to.coexist.within.the.s |
c0c20 | 61 6d 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 6f 6d 61 69 6e 2e 00 45 61 63 68 20 | ame.administrative.domain..Each. |
c0c40 | 62 72 69 64 67 65 20 68 61 73 20 61 20 72 65 6c 61 74 69 76 65 20 70 72 69 6f 72 69 74 79 20 61 | bridge.has.a.relative.priority.a |
c0c60 | 6e 64 20 63 6f 73 74 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 6f 63 | nd.cost..Each.interface.is.assoc |
c0c80 | 69 61 74 65 64 20 77 69 74 68 20 61 20 70 6f 72 74 20 28 6e 75 6d 62 65 72 29 20 69 6e 20 74 68 | iated.with.a.port.(number).in.th |
c0ca0 | 65 20 53 54 50 20 63 6f 64 65 2e 20 45 61 63 68 20 68 61 73 20 61 20 70 72 69 6f 72 69 74 79 20 | e.STP.code..Each.has.a.priority. |
c0cc0 | 61 6e 64 20 61 20 63 6f 73 74 2c 20 74 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 69 | and.a.cost,.that.is.used.to.deci |
c0ce0 | 64 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 70 61 74 68 20 74 6f | de.which.is.the.shortest.path.to |
c0d00 | 20 66 6f 72 77 61 72 64 20 61 20 70 61 63 6b 65 74 2e 20 54 68 65 20 6c 6f 77 65 73 74 20 63 6f | .forward.a.packet..The.lowest.co |
c0d20 | 73 74 20 70 61 74 68 20 69 73 20 61 6c 77 61 79 73 20 75 73 65 64 20 75 6e 6c 65 73 73 20 74 68 | st.path.is.always.used.unless.th |
c0d40 | 65 20 6f 74 68 65 72 20 70 61 74 68 20 69 73 20 64 6f 77 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 | e.other.path.is.down..If.you.hav |
c0d60 | 65 20 6d 75 6c 74 69 70 6c 65 20 62 72 69 64 67 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 | e.multiple.bridges.and.interface |
c0d80 | 73 20 74 68 65 6e 20 79 6f 75 20 6d 61 79 20 6e 65 65 64 20 74 6f 20 61 64 6a 75 73 74 20 74 68 | s.then.you.may.need.to.adjust.th |
c0da0 | 65 20 70 72 69 6f 72 69 74 69 65 73 20 74 6f 20 61 63 68 69 65 76 65 20 6f 70 74 69 6d 75 6d 20 | e.priorities.to.achieve.optimum. |
c0dc0 | 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 45 61 63 68 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 | performance..Each.broadcast.rela |
c0de0 | 79 20 69 6e 73 74 61 6e 63 65 20 63 61 6e 20 62 65 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 64 | y.instance.can.be.individually.d |
c0e00 | 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e | isabled.without.deleting.the.con |
c0e20 | 66 69 67 75 72 65 64 20 6e 6f 64 65 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 | figured.node.by.using.the.follow |
c0e40 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 45 61 63 68 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 | ing.command:.Each.class.can.have |
c0e60 | 20 61 20 67 75 61 72 61 6e 74 65 65 64 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 6f 74 61 6c 20 | .a.guaranteed.part.of.the.total. |
c0e80 | 62 61 6e 64 77 69 64 74 68 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 77 68 6f 6c 65 20 | bandwidth.defined.for.the.whole. |
c0ea0 | 70 6f 6c 69 63 79 2c 20 73 6f 20 61 6c 6c 20 74 68 6f 73 65 20 73 68 61 72 65 73 20 74 6f 67 65 | policy,.so.all.those.shares.toge |
c0ec0 | 74 68 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 68 69 67 68 65 72 20 74 68 61 6e 20 74 | ther.should.not.be.higher.than.t |
c0ee0 | 68 65 20 70 6f 6c 69 63 79 27 73 20 77 68 6f 6c 65 20 62 61 6e 64 77 69 64 74 68 2e 00 45 61 63 | he.policy's.whole.bandwidth..Eac |
c0f00 | 68 20 63 6c 61 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 61 20 64 65 66 69 63 69 74 20 63 6f | h.class.is.assigned.a.deficit.co |
c0f20 | 75 6e 74 65 72 20 28 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 74 68 61 74 20 | unter.(the.number.of.bytes.that. |
c0f40 | 61 20 66 6c 6f 77 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 77 68 | a.flow.is.allowed.to.transmit.wh |
c0f60 | 65 6e 20 69 74 20 69 73 20 69 74 73 20 74 75 72 6e 29 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 74 | en.it.is.its.turn).initialized.t |
c0f80 | 6f 20 71 75 61 6e 74 75 6d 2e 20 51 75 61 6e 74 75 6d 20 69 73 20 61 20 70 61 72 61 6d 65 74 65 | o.quantum..Quantum.is.a.paramete |
c0fa0 | 72 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 77 68 69 63 68 20 61 63 74 73 20 6c 69 6b 65 20 | r.you.configure.which.acts.like. |
c0fc0 | 61 20 63 72 65 64 69 74 20 6f 66 20 66 69 78 20 62 79 74 65 73 20 74 68 65 20 63 6f 75 6e 74 65 | a.credit.of.fix.bytes.the.counte |
c0fe0 | 72 20 72 65 63 65 69 76 65 73 20 6f 6e 20 65 61 63 68 20 72 6f 75 6e 64 2e 20 54 68 65 6e 20 74 | r.receives.on.each.round..Then.t |
c1000 | 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 73 74 61 72 74 73 20 6d 6f 76 | he.Round-Robin.policy.starts.mov |
c1020 | 69 6e 67 20 69 74 73 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 74 68 72 6f | ing.its.Round.Robin.pointer.thro |
c1040 | 75 67 68 20 74 68 65 20 71 75 65 75 65 73 2e 20 49 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 | ugh.the.queues..If.the.deficit.c |
c1060 | 6f 75 6e 74 65 72 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 63 6b 65 | ounter.is.greater.than.the.packe |
c1080 | 74 27 73 20 73 69 7a 65 20 61 74 20 74 68 65 20 68 65 61 64 20 6f 66 20 74 68 65 20 71 75 65 75 | t's.size.at.the.head.of.the.queu |
c10a0 | 65 2c 20 74 68 69 73 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 6e 64 20 | e,.this.packet.will.be.sent.and. |
c10c0 | 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 62 65 | the.value.of.the.counter.will.be |
c10e0 | 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 70 61 63 6b 65 74 20 73 69 7a 65 2e | .decremented.by.the.packet.size. |
c1100 | 20 54 68 65 6e 2c 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e 65 78 74 20 70 61 63 6b | .Then,.the.size.of.the.next.pack |
c1120 | 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 74 68 65 20 63 6f 75 6e 74 | et.will.be.compared.to.the.count |
c1140 | 65 72 20 76 61 6c 75 65 20 61 67 61 69 6e 2c 20 72 65 70 65 61 74 69 6e 67 20 74 68 65 20 70 72 | er.value.again,.repeating.the.pr |
c1160 | 6f 63 65 73 73 2e 20 4f 6e 63 65 20 74 68 65 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 20 6f | ocess..Once.the.queue.is.empty.o |
c1180 | 72 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 75 6e 74 65 72 20 69 73 20 69 6e | r.the.value.of.the.counter.is.in |
c11a0 | 73 75 66 66 69 63 69 65 6e 74 2c 20 74 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 69 6e | sufficient,.the.Round-Robin.poin |
c11c0 | 74 65 72 20 77 69 6c 6c 20 6d 6f 76 65 20 74 6f 20 74 68 65 20 6e 65 78 74 20 71 75 65 75 65 2e | ter.will.move.to.the.next.queue. |
c11e0 | 20 49 66 20 74 68 65 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 2c 20 74 68 65 20 76 61 6c 75 | .If.the.queue.is.empty,.the.valu |
c1200 | 65 20 6f 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 69 73 20 72 65 73 65 | e.of.the.deficit.counter.is.rese |
c1220 | 74 20 74 6f 20 30 2e 00 45 61 63 68 20 64 79 6e 61 6d 69 63 20 4e 48 53 20 77 69 6c 6c 20 67 65 | t.to.0..Each.dynamic.NHS.will.ge |
c1240 | 74 20 61 20 70 65 65 72 20 65 6e 74 72 79 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 | t.a.peer.entry.with.the.configur |
c1260 | 65 64 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f | ed.network.address.and.the.disco |
c1280 | 76 65 72 65 64 20 4e 42 4d 41 20 61 64 64 72 65 73 73 2e 00 45 61 63 68 20 68 65 61 6c 74 68 20 | vered.NBMA.address..Each.health. |
c12a0 | 63 68 65 63 6b 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 69 74 73 20 6f 77 6e 20 74 | check.is.configured.in.its.own.t |
c12c0 | 65 73 74 2c 20 74 65 73 74 73 20 61 72 65 20 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 70 72 6f 63 | est,.tests.are.numbered.and.proc |
c12e0 | 65 73 73 65 64 20 69 6e 20 6e 75 6d 65 72 69 63 20 6f 72 64 65 72 2e 20 46 6f 72 20 6d 75 6c 74 | essed.in.numeric.order..For.mult |
c1300 | 69 20 74 61 72 67 65 74 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 20 6d 75 6c 74 69 70 6c | i.target.health.checking.multipl |
c1320 | 65 20 74 65 73 74 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 3a 00 45 61 63 68 20 69 6e 64 | e.tests.can.be.defined:.Each.ind |
c1340 | 69 76 69 64 75 61 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6f 6e 73 6f 6c 65 2d 73 65 72 76 65 | ividual.configured.console-serve |
c1360 | 72 20 64 65 76 69 63 65 20 63 61 6e 20 62 65 20 64 69 72 65 63 74 6c 79 20 65 78 70 6f 73 65 64 | r.device.can.be.directly.exposed |
c1380 | 20 74 6f 20 74 68 65 20 6f 75 74 73 69 64 65 20 77 6f 72 6c 64 2e 20 41 20 75 73 65 72 20 63 61 | .to.the.outside.world..A.user.ca |
c13a0 | 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 20 76 69 61 20 53 53 48 20 74 6f 20 74 68 | n.directly.connect.via.SSH.to.th |
c13c0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 6f 72 74 2e 00 45 61 63 68 20 6e 6f 64 65 20 28 48 75 | e.configured.port..Each.node.(Hu |
c13e0 | 62 20 61 6e 64 20 53 70 6f 6b 65 29 20 75 73 65 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 | b.and.Spoke).uses.an.IP.address. |
c1400 | 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 31 37 32 2e 31 36 2e 32 35 33 2e 31 32 38 2f | from.the.network.172.16.253.128/ |
c1420 | 32 39 2e 00 45 61 63 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 | 29..Each.of.the.install.command. |
c1440 | 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 | should.be.applied.to.the.configu |
c1460 | 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 | ration.and.commited.before.using |
c1480 | 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 63 6f 6e 66 69 67 75 72 61 | .under.the.openconnect.configura |
c14a0 | 74 69 6f 6e 3a 00 45 61 63 68 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 68 61 73 | tion:.Each.site-to-site.peer.has |
c14c0 | 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 45 65 6e 61 62 6c 65 73 20 74 68 65 20 | .the.next.options:.Eenables.the. |
c14e0 | 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 | Generic.Protocol.extension.(VXLA |
c1500 | 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 | N-GPE)..Currently,.this.is.only. |
c1520 | 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 | supported.together.with.the.exte |
c1540 | 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 61 | rnal.keyword..Email.address.to.a |
c1560 | 73 73 6f 63 69 61 74 65 20 77 69 74 68 20 63 65 72 74 69 66 69 63 61 74 65 00 45 6d 61 69 6c 20 | ssociate.with.certificate.Email. |
c1580 | 75 73 65 64 20 66 6f 72 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 72 65 63 6f 76 65 | used.for.registration.and.recove |
c15a0 | 72 79 20 63 6f 6e 74 61 63 74 2e 00 45 6d 62 65 64 64 69 6e 67 20 6f 6e 65 20 70 6f 6c 69 63 79 | ry.contact..Embedding.one.policy |
c15c0 | 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 00 45 6d 65 72 67 65 6e 63 79 00 45 6e 61 62 | .into.another.one.Emergency.Enab |
c15e0 | 6c 65 20 3a 61 62 62 72 3a 60 42 4d 50 20 28 42 47 50 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 50 72 | le.:abbr:`BMP.(BGP.Monitoring.Pr |
c1600 | 6f 74 6f 63 6f 6c 29 60 20 73 75 70 70 6f 72 74 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 | otocol)`.support.Enable.BFD.for. |
c1620 | 49 53 49 53 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 | ISIS.on.an.interface.Enable.BFD. |
c1640 | 66 6f 72 20 4f 53 50 46 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 | for.OSPF.on.an.interface.Enable. |
c1660 | 42 46 44 20 66 6f 72 20 4f 53 50 46 76 33 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 | BFD.for.OSPFv3.on.an.interface.E |
c1680 | 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 42 47 50 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 49 | nable.BFD.in.BGP.Enable.BFD.in.I |
c16a0 | 53 49 53 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 42 46 | SIS.Enable.BFD.in.OSPF.Enable.BF |
c16c0 | 44 20 6f 6e 20 61 20 42 47 50 20 70 65 65 72 20 67 72 6f 75 70 00 45 6e 61 62 6c 65 20 42 46 44 | D.on.a.BGP.peer.group.Enable.BFD |
c16e0 | 20 6f 6e 20 61 20 73 69 6e 67 6c 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 00 45 6e 61 62 6c 65 | .on.a.single.BGP.neighbor.Enable |
c1700 | 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 | .DHCP.failover.configuration.for |
c1720 | 20 74 68 69 73 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 2e 00 45 6e 61 62 6c 65 20 48 54 2d 64 65 | .this.address.pool..Enable.HT-de |
c1740 | 6c 61 79 65 64 20 42 6c 6f 63 6b 20 41 63 6b 20 60 60 5b 44 45 4c 41 59 45 44 2d 42 41 5d 60 60 | layed.Block.Ack.``[DELAYED-BA]`` |
c1760 | 00 45 6e 61 62 6c 65 20 49 43 4d 50 20 52 6f 75 74 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 | .Enable.ICMP.Router.Discovery.Pr |
c1780 | 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d | otocol.support.Enable.IGMP.and.M |
c17a0 | 4c 44 20 71 75 65 72 69 65 72 2e 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 | LD.querier..Enable.IGMP.and.MLD. |
c17c0 | 73 6e 6f 6f 70 69 6e 67 2e 00 45 6e 61 62 6c 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 6f | snooping..Enable.IP.forwarding.o |
c17e0 | 6e 20 63 6c 69 65 6e 74 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d | n.client.Enable.IS-IS.Enable.IS- |
c1800 | 49 53 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 00 45 | IS.and.IGP-LDP.synchronization.E |
c1820 | 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 72 6f 75 | nable.IS-IS.and.redistribute.rou |
c1840 | 74 65 73 20 6e 6f 74 20 6e 61 74 69 76 65 6c 79 20 69 6e 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 | tes.not.natively.in.IS-IS.Enable |
c1860 | 20 49 53 2d 49 53 20 77 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 | .IS-IS.with.Segment.Routing.(Exp |
c1880 | 65 72 69 6d 65 6e 74 61 6c 29 00 45 6e 61 62 6c 65 20 4c 2d 53 49 47 20 54 58 4f 50 20 70 72 6f | erimental).Enable.L-SIG.TXOP.pro |
c18a0 | 74 65 63 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 28 | tection.capability.Enable.LDPC.( |
c18c0 | 4c 6f 77 20 44 65 6e 73 69 74 79 20 50 61 72 69 74 79 20 43 68 65 63 6b 29 20 63 6f 64 69 6e 67 | Low.Density.Parity.Check).coding |
c18e0 | 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 63 6f 64 69 6e 67 20 63 | .capability.Enable.LDPC.coding.c |
c1900 | 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 4c 44 50 20 73 65 72 76 69 63 65 00 45 6e | apability.Enable.LLDP.service.En |
c1920 | 61 62 6c 65 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 61 6e 64 20 49 47 50 2d 4c 44 | able.OSPF.Enable.OSPF.and.IGP-LD |
c1940 | 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 | P.synchronization:.Enable.OSPF.w |
c1960 | 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 | ith.Segment.Routing.(Experimenta |
c1980 | 6c 29 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 72 6f 75 74 65 20 72 65 64 69 73 | l):.Enable.OSPF.with.route.redis |
c19a0 | 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 61 6e 64 20 64 65 | tribution.of.the.loopback.and.de |
c19c0 | 66 61 75 6c 74 20 6f 72 69 67 69 6e 61 74 65 3a 00 45 6e 61 62 6c 65 20 4f 54 50 20 32 46 41 20 | fault.originate:.Enable.OTP.2FA. |
c19e0 | 66 6f 72 20 75 73 65 72 20 60 75 73 65 72 6e 61 6d 65 60 20 77 69 74 68 20 64 65 66 61 75 6c 74 | for.user.`username`.with.default |
c1a00 | 20 73 65 74 74 69 6e 67 73 2c 20 75 73 69 6e 67 20 74 68 65 20 42 41 53 45 33 32 20 65 6e 63 6f | .settings,.using.the.BASE32.enco |
c1a20 | 64 65 64 20 32 46 41 2f 4d 46 41 20 6b 65 79 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 6b | ded.2FA/MFA.key.specified.by.`<k |
c1a40 | 65 79 3e 60 2e 00 45 6e 61 62 6c 65 20 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 | ey>`..Enable.OpenVPN.Data.Channe |
c1a60 | 6c 20 4f 66 66 6c 6f 61 64 20 66 65 61 74 75 72 65 20 62 79 20 6c 6f 61 64 69 6e 67 20 74 68 65 | l.Offload.feature.by.loading.the |
c1a80 | 20 61 70 70 72 6f 70 72 69 61 74 65 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 2e 00 45 6e 61 62 | .appropriate.kernel.module..Enab |
c1aa0 | 6c 65 20 50 52 45 46 36 34 20 6f 70 74 69 6f 6e 20 61 73 20 6f 75 74 6c 69 6e 65 64 20 69 6e 20 | le.PREF64.option.as.outlined.in. |
c1ac0 | 3a 72 66 63 3a 60 38 37 38 31 60 2e 00 45 6e 61 62 6c 65 20 53 4e 4d 50 00 45 6e 61 62 6c 65 20 | :rfc:`8781`..Enable.SNMP.Enable. |
c1ae0 | 53 4e 4d 50 20 71 75 65 72 69 65 73 20 6f 66 20 74 68 65 20 4c 4c 44 50 20 64 61 74 61 62 61 73 | SNMP.queries.of.the.LLDP.databas |
c1b00 | 65 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 6e 20 69 6e 64 | e.Enable.SNMP.support.for.an.ind |
c1b20 | 69 76 69 64 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2e 00 45 6e 61 62 6c 65 20 53 | ividual.routing.daemon..Enable.S |
c1b40 | 54 50 00 45 6e 61 62 6c 65 20 54 46 54 50 20 73 65 72 76 69 63 65 20 62 79 20 73 70 65 63 69 66 | TP.Enable.TFTP.service.by.specif |
c1b60 | 79 69 6e 67 20 74 68 65 20 60 3c 64 69 72 65 63 74 6f 72 79 3e 60 20 77 68 69 63 68 20 77 69 6c | ying.the.`<directory>`.which.wil |
c1b80 | 6c 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 72 76 65 20 66 69 6c 65 73 2e 00 45 6e 61 62 6c 65 | l.be.used.to.serve.files..Enable |
c1ba0 | 20 56 48 54 20 54 58 4f 50 20 50 6f 77 65 72 20 53 61 76 65 20 4d 6f 64 65 00 45 6e 61 62 6c 65 | .VHT.TXOP.Power.Save.Mode.Enable |
c1bc0 | 20 56 4c 41 4e 2d 41 77 61 72 65 20 42 72 69 64 67 65 00 45 6e 61 62 6c 65 20 61 75 74 6f 6d 61 | .VLAN-Aware.Bridge.Enable.automa |
c1be0 | 74 69 63 20 72 65 64 69 72 65 63 74 20 66 72 6f 6d 20 68 74 74 70 20 74 6f 20 68 74 74 70 73 2e | tic.redirect.from.http.to.https. |
c1c00 | 00 45 6e 61 62 6c 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 | .Enable.creation.of.shortcut.rou |
c1c20 | 74 65 73 2e 00 45 6e 61 62 6c 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 68 | tes..Enable.different.types.of.h |
c1c40 | 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 | ardware.offloading.on.the.given. |
c1c60 | 4e 49 43 2e 00 45 6e 61 62 6c 65 20 67 69 76 65 6e 20 6c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f | NIC..Enable.given.legacy.protoco |
c1c80 | 6c 20 6f 6e 20 74 68 69 73 20 4c 4c 44 50 20 69 6e 73 74 61 6e 63 65 2e 20 4c 65 67 61 63 79 20 | l.on.this.LLDP.instance..Legacy. |
c1ca0 | 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 65 3a 00 45 6e 61 62 6c 65 20 6c 61 79 65 72 20 | protocols.include:.Enable.layer. |
c1cc0 | 37 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 00 45 6e 61 62 6c 65 20 6c 6f 67 67 69 | 7.HTTP.health.check.Enable.loggi |
c1ce0 | 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 20 49 66 20 74 68 | ng.for.the.matched.packet..If.th |
c1d00 | 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 | is.configuration.command.is.not. |
c1d20 | 70 72 65 73 65 6e 74 2c 20 74 68 65 6e 20 6c 6f 67 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 | present,.then.log.is.not.enabled |
c1d40 | 2e 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 61 62 6c 65 20 56 79 4f 53 20 74 6f 20 62 65 20 3a | ..Enable.or.Disable.VyOS.to.be.: |
c1d60 | 72 66 63 3a 60 31 33 33 37 60 20 63 6f 6e 66 6f 72 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | rfc:`1337`.conform..The.followin |
c1d80 | 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 | g.system.parameter.will.be.alter |
c1da0 | 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 61 62 6c 65 20 69 66 20 56 79 4f 53 20 75 73 | ed:.Enable.or.Disable.if.VyOS.us |
c1dc0 | 65 20 49 50 76 34 20 54 43 50 20 53 59 4e 20 43 6f 6f 6b 69 65 73 2e 20 54 68 65 20 66 6f 6c 6c | e.IPv4.TCP.SYN.Cookies..The.foll |
c1de0 | 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 | owing.system.parameter.will.be.a |
c1e00 | 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 67 69 6e | ltered:.Enable.or.disable.loggin |
c1e20 | 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 00 45 6e 61 62 6c 65 | g.for.the.matched.packet..Enable |
c1e40 | 20 6f 73 70 66 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 73 65 74 20 61 73 | .ospf.on.an.interface.and.set.as |
c1e60 | 73 6f 63 69 61 74 65 64 20 61 72 65 61 2e 00 45 6e 61 62 6c 65 20 70 6f 6c 69 63 79 20 66 6f 72 | sociated.area..Enable.policy.for |
c1e80 | 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 72 65 76 65 72 73 65 64 20 70 | .source.validation.by.reversed.p |
c1ea0 | 61 74 68 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 | ath,.as.specified.in.:rfc:`3704` |
c1ec0 | 2e 20 43 75 72 72 65 6e 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 70 72 61 63 74 69 63 65 20 69 | ..Current.recommended.practice.i |
c1ee0 | 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 20 69 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 74 72 69 63 | n.:rfc:`3704`.is.to.enable.stric |
c1f00 | 74 20 6d 6f 64 65 20 74 6f 20 70 72 65 76 65 6e 74 20 49 50 20 73 70 6f 6f 66 69 6e 67 20 66 72 | t.mode.to.prevent.IP.spoofing.fr |
c1f20 | 6f 6d 20 44 44 6f 73 20 61 74 74 61 63 6b 73 2e 20 49 66 20 75 73 69 6e 67 20 61 73 79 6d 6d 65 | om.DDos.attacks..If.using.asymme |
c1f40 | 74 72 69 63 20 72 6f 75 74 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 63 6f 6d 70 6c 69 63 61 74 65 | tric.routing.or.other.complicate |
c1f60 | 64 20 72 6f 75 74 69 6e 67 2c 20 74 68 65 6e 20 6c 6f 6f 73 65 20 6d 6f 64 65 20 69 73 20 72 65 | d.routing,.then.loose.mode.is.re |
c1f80 | 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 6e 61 62 6c 65 20 72 65 63 65 69 76 69 6e 67 20 50 50 44 55 | commended..Enable.receiving.PPDU |
c1fa0 | 20 75 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f | .using.STBC.(Space.Time.Block.Co |
c1fc0 | 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 73 61 6d 70 6c 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 | ding).Enable.sampling.of.packets |
c1fe0 | 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 73 | ,.which.will.be.transmitted.to.s |
c2000 | 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 2e 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 | Flow.collectors..Enable.sending. |
c2020 | 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 | PPDU.using.STBC.(Space.Time.Bloc |
c2040 | 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 6f 66 20 43 69 73 63 | k.Coding).Enable.sending.of.Cisc |
c2060 | 6f 20 73 74 79 6c 65 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 | o.style.NHRP.Traffic.Indication. |
c2080 | 70 61 63 6b 65 74 73 2e 20 49 66 20 74 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 | packets..If.this.is.enabled.and. |
c20a0 | 6f 70 65 6e 6e 68 72 70 20 64 65 74 65 63 74 73 20 61 20 66 6f 72 77 61 72 64 65 64 20 20 70 61 | opennhrp.detects.a.forwarded..pa |
c20c0 | 63 6b 65 74 2c 20 69 74 20 77 69 6c 6c 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 | cket,.it.will.send.a.message.to. |
c20e0 | 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 20 6f 66 20 74 68 65 20 70 61 63 6b 65 | the.original.sender.of.the.packe |
c2100 | 74 20 69 6e 73 74 72 75 63 74 69 6e 67 20 69 74 20 74 6f 20 63 72 65 61 74 65 20 61 20 64 69 72 | t.instructing.it.to.create.a.dir |
c2120 | 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 64 65 73 74 69 6e 61 74 | ect.connection.with.the.destinat |
c2140 | 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 61 73 69 63 61 6c 6c 79 20 61 20 70 72 6f 74 6f 63 6f | ion..This.is.basically.a.protoco |
c2160 | 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 49 43 4d 50 | l.independent.equivalent.of.ICMP |
c2180 | 20 72 65 64 69 72 65 63 74 2e 00 45 6e 61 62 6c 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 | .redirect..Enable.spanning.tree. |
c21a0 | 70 72 6f 74 6f 63 6f 6c 2e 20 53 54 50 20 69 73 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 | protocol..STP.is.disabled.by.def |
c21c0 | 61 75 6c 74 2e 00 45 6e 61 62 6c 65 20 74 68 65 20 4f 70 61 71 75 65 2d 4c 53 41 20 63 61 70 61 | ault..Enable.the.Opaque-LSA.capa |
c21e0 | 62 69 6c 69 74 79 20 28 72 66 63 32 33 37 30 29 2c 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 74 | bility.(rfc2370),.necessary.to.t |
c2200 | 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 20 6f 6e 20 49 47 50 00 45 6e 61 62 6c 65 20 74 68 69 | ransport.label.on.IGP.Enable.thi |
c2220 | 73 20 66 65 61 74 75 72 65 20 63 61 75 73 65 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 65 | s.feature.causes.an.interface.re |
c2240 | 73 65 74 2e 00 45 6e 61 62 6c 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 4c 4c 44 50 | set..Enable.transmission.of.LLDP |
c2260 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 | .information.on.given.`<interfac |
c2280 | 65 3e 60 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 73 61 79 20 60 60 61 6c 6c 60 60 20 68 65 | e>`..You.can.also.say.``all``.he |
c22a0 | 72 65 20 73 6f 20 4c 4c 44 50 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 6f 6e 20 65 76 65 72 79 | re.so.LLDP.is.turned.on.on.every |
c22c0 | 20 69 6e 74 65 72 66 61 63 65 2e 00 45 6e 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 | .interface..Enabled.on-demand.PP |
c22e0 | 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 62 72 69 6e 67 20 75 70 20 74 68 65 20 6c 69 6e | PoE.connections.bring.up.the.lin |
c2300 | 6b 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 6e 65 65 64 73 20 74 6f 20 70 61 73 | k.only.when.traffic.needs.to.pas |
c2320 | 73 20 74 68 69 73 20 6c 69 6e 6b 2e 20 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 | s.this.link...If.the.link.fails. |
c2340 | 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 | for.any.reason,.the.link.is.brou |
c2360 | 67 68 74 20 62 61 63 6b 20 75 70 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 | ght.back.up.automatically.once.t |
c2380 | 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 67 61 69 | raffic.passes.the.interface.agai |
c23a0 | 6e 2e 20 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 | n..If.you.configure.an.on-demand |
c23c0 | 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f | .PPPoE.connection,.you.must.also |
c23e0 | 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 70 65 72 69 | .configure.the.idle.timeout.peri |
c2400 | 6f 64 2c 20 61 66 74 65 72 20 77 68 69 63 68 20 61 6e 20 69 64 6c 65 20 50 50 50 6f 45 20 6c 69 | od,.after.which.an.idle.PPPoE.li |
c2420 | 6e 6b 20 77 69 6c 6c 20 62 65 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 2e 20 41 20 6e 6f 6e 2d 7a | nk.will.be.disconnected..A.non-z |
c2440 | 65 72 6f 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 77 69 6c 6c 20 6e 65 76 65 72 20 64 69 73 63 | ero.idle.timeout.will.never.disc |
c2460 | 6f 6e 6e 65 63 74 20 74 68 65 20 6c 69 6e 6b 20 61 66 74 65 72 20 69 74 20 66 69 72 73 74 20 63 | onnect.the.link.after.it.first.c |
c2480 | 61 6d 65 20 75 70 2e 00 45 6e 61 62 6c 65 73 20 43 69 73 63 6f 20 73 74 79 6c 65 20 61 75 74 68 | ame.up..Enables.Cisco.style.auth |
c24a0 | 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 | entication.on.NHRP.packets..This |
c24c0 | 20 65 6d 62 65 64 73 20 74 68 65 20 73 65 63 72 65 74 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 | .embeds.the.secret.plaintext.pas |
c24e0 | 73 77 6f 72 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 | sword.to.the.outgoing.NHRP.packe |
c2500 | 74 73 2e 20 49 6e 63 6f 6d 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 | ts..Incoming.NHRP.packets.on.thi |
c2520 | 73 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 64 69 73 63 61 72 64 65 64 20 75 6e 6c 65 73 73 | s.interface.are.discarded.unless |
c2540 | 20 74 68 65 20 73 65 63 72 65 74 20 70 61 73 73 77 6f 72 64 20 69 73 20 70 72 65 73 65 6e 74 2e | .the.secret.password.is.present. |
c2560 | 20 4d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 73 65 63 72 65 74 20 69 73 | .Maximum.length.of.the.secret.is |
c2580 | 20 38 20 63 68 61 72 61 63 74 65 72 73 2e 00 45 6e 61 62 6c 65 73 20 61 6e 20 4d 50 4c 53 20 6c | .8.characters..Enables.an.MPLS.l |
c25a0 | 61 62 65 6c 20 74 6f 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 | abel.to.be.attached.to.a.route.e |
c25c0 | 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 | xported.from.the.current.unicast |
c25e0 | 20 56 52 46 20 74 6f 20 56 50 4e 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 73 70 65 63 69 66 | .VRF.to.VPN..If.the.value.specif |
c2600 | 69 65 64 20 69 73 20 61 75 74 6f 2c 20 74 68 65 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 69 73 20 | ied.is.auto,.the.label.value.is. |
c2620 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 61 20 70 6f | automatically.assigned.from.a.po |
c2640 | 6f 6c 20 6d 61 69 6e 74 61 69 6e 65 64 2e 00 45 6e 61 62 6c 65 73 20 62 61 6e 64 77 69 64 74 68 | ol.maintained..Enables.bandwidth |
c2660 | 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2e 00 45 6e 61 62 6c 65 73 20 69 6d 70 | .shaping.via.RADIUS..Enables.imp |
c2680 | 6f 72 74 20 6f 72 20 65 78 70 6f 72 74 20 6f 66 20 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 | ort.or.export.of.routes.between. |
c26a0 | 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e | the.current.unicast.VRF.and.VPN. |
c26c0 | 00 45 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 | .Enables.the.Generic.Protocol.ex |
c26e0 | 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 | tension.(VXLAN-GPE)..Currently,. |
c2700 | 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 | this.is.only.supported.together. |
c2720 | 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6e 61 62 6c | with.the.external.keyword..Enabl |
c2740 | 65 73 20 74 68 65 20 65 63 68 6f 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6d 6f 64 65 00 45 6e | es.the.echo.transmission.mode.En |
c2760 | 61 62 6c 65 73 20 74 68 65 20 72 6f 6f 74 20 70 61 72 74 69 74 69 6f 6e 20 61 75 74 6f 2d 65 78 | ables.the.root.partition.auto-ex |
c2780 | 74 65 6e 73 69 6f 6e 20 61 6e 64 20 72 65 73 69 7a 65 73 20 74 6f 20 74 68 65 20 6d 61 78 69 6d | tension.and.resizes.to.the.maxim |
c27a0 | 75 6d 20 61 76 61 69 6c 61 62 6c 65 20 73 70 61 63 65 20 6f 6e 20 73 79 73 74 65 6d 20 62 6f 6f | um.available.space.on.system.boo |
c27c0 | 74 2e 00 45 6e 61 62 6c 69 6e 67 20 41 64 76 65 72 74 69 73 6d 65 6e 74 73 00 45 6e 61 62 6c 69 | t..Enabling.Advertisments.Enabli |
c27e0 | 6e 67 20 4f 70 65 6e 56 50 4e 20 44 43 4f 00 45 6e 61 62 6c 69 6e 67 20 53 53 48 20 6f 6e 6c 79 | ng.OpenVPN.DCO.Enabling.SSH.only |
c2800 | 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 | .requires.you.to.specify.the.por |
c2820 | 74 20 60 60 3c 70 6f 72 74 3e 60 60 20 79 6f 75 20 77 61 6e 74 20 53 53 48 20 74 6f 20 6c 69 73 | t.``<port>``.you.want.SSH.to.lis |
c2840 | 74 65 6e 20 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 53 53 48 20 72 75 6e 73 20 6f 6e 20 | ten.on..By.default,.SSH.runs.on. |
c2860 | 70 6f 72 74 20 32 32 2e 00 45 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 | port.22..Enabling.this.function. |
c2880 | 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 72 69 73 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 | increases.the.risk.of.bandwidth. |
c28a0 | 73 61 74 75 72 61 74 69 6f 6e 2e 00 45 6e 66 6f 72 63 65 20 73 74 72 69 63 74 20 70 61 74 68 20 | saturation..Enforce.strict.path. |
c28c0 | 63 68 65 63 6b 69 6e 67 00 45 6e 73 6c 61 76 65 20 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 | checking.Enslave.`<member>`.inte |
c28e0 | 72 66 61 63 65 20 74 6f 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 45 6e 73 | rface.to.bond.`<interface>`..Ens |
c2900 | 75 72 65 20 74 68 61 74 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 77 | ure.that.when.comparing.routes.w |
c2920 | 68 65 72 65 20 62 6f 74 68 20 61 72 65 20 65 71 75 61 6c 20 6f 6e 20 6d 6f 73 74 20 6d 65 74 72 | here.both.are.equal.on.most.metr |
c2940 | 69 63 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6c 6f 63 61 6c 2d 70 72 65 66 2c 20 41 53 5f 50 41 | ics,.including.local-pref,.AS_PA |
c2960 | 54 48 20 6c 65 6e 67 74 68 2c 20 49 47 50 20 63 6f 73 74 2c 20 4d 45 44 2c 20 74 68 61 74 20 74 | TH.length,.IGP.cost,.MED,.that.t |
c2980 | 68 65 20 74 69 65 20 69 73 20 62 72 6f 6b 65 6e 20 62 61 73 65 64 20 6f 6e 20 72 6f 75 74 65 72 | he.tie.is.broken.based.on.router |
c29a0 | 2d 49 44 2e 00 45 6e 74 65 72 70 72 69 73 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 20 75 73 | -ID..Enterprise.installations.us |
c29c0 | 75 61 6c 6c 79 20 73 68 69 70 20 61 20 6b 69 6e 64 20 6f 66 20 64 69 72 65 63 74 6f 72 79 20 73 | ually.ship.a.kind.of.directory.s |
c29e0 | 65 72 76 69 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 74 6f 20 68 61 76 65 20 61 20 73 | ervice.which.is.used.to.have.a.s |
c2a00 | 69 6e 67 6c 65 20 70 61 73 73 77 6f 72 64 20 73 74 6f 72 65 20 66 6f 72 20 61 6c 6c 20 65 6d 70 | ingle.password.store.for.all.emp |
c2a20 | 6c 6f 79 65 65 73 2e 20 56 79 4f 53 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 73 75 70 70 6f 72 74 | loyees..VyOS.and.OpenVPN.support |
c2a40 | 20 75 73 69 6e 67 20 4c 44 41 50 2f 41 44 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 61 | .using.LDAP/AD.as.single.user.ba |
c2a60 | 63 6b 65 6e 64 2e 00 45 72 69 63 73 73 6f 6e 20 63 61 6c 6c 20 69 74 20 4d 41 43 2d 46 6f 72 63 | ckend..Ericsson.call.it.MAC-Forc |
c2a80 | 65 64 20 46 6f 72 77 61 72 64 69 6e 67 20 28 52 46 43 20 44 72 61 66 74 29 00 45 72 72 6f 72 00 | ed.Forwarding.(RFC.Draft).Error. |
c2aa0 | 45 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 00 45 73 74 61 62 6c 69 73 68 65 64 20 73 65 73 | Error.conditions.Established.ses |
c2ac0 | 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 75 73 69 6e 67 20 74 68 65 20 2a 2a | sions.can.be.viewed.using.the.** |
c2ae0 | 73 68 6f 77 20 6c 32 74 70 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 2a 2a 20 6f 70 65 72 | show.l2tp-server.sessions**.oper |
c2b00 | 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 00 45 74 68 65 72 6e 65 74 00 45 74 68 65 72 6e 65 | ational.command.Ethernet.Etherne |
c2b20 | 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 69 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f | t.flow.control.is.a.mechanism.fo |
c2b40 | 72 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 73 74 6f 70 70 69 6e 67 20 74 68 65 20 74 72 61 6e 73 | r.temporarily.stopping.the.trans |
c2b60 | 6d 69 73 73 69 6f 6e 20 6f 66 20 64 61 74 61 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 66 61 6d 69 | mission.of.data.on.Ethernet.fami |
c2b80 | 6c 79 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 67 6f 61 6c 20 6f | ly.computer.networks..The.goal.o |
c2ba0 | 66 20 74 68 69 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 74 6f 20 65 6e 73 75 72 65 20 7a 65 | f.this.mechanism.is.to.ensure.ze |
c2bc0 | 72 6f 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 69 6e 20 74 68 65 20 70 72 65 73 65 6e 63 65 20 6f | ro.packet.loss.in.the.presence.o |
c2be0 | 66 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 00 45 74 68 65 72 6e 65 74 20 6f | f.network.congestion..Ethernet.o |
c2c00 | 70 74 69 6f 6e 73 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 00 45 76 65 6e 74 20 48 61 6e 64 6c | ptions.Event.Handler.Event.Handl |
c2c20 | 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 53 74 65 70 73 00 45 76 65 6e 74 20 48 61 6e | er.Configuration.Steps.Event.Han |
c2c40 | 64 6c 65 72 20 54 65 63 68 6e 6f 6c 6f 67 79 20 4f 76 65 72 76 69 65 77 00 45 76 65 6e 74 20 68 | dler.Technology.Overview.Event.h |
c2c60 | 61 6e 64 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 73 63 72 | andler.allows.you.to.execute.scr |
c2c80 | 69 70 74 73 20 77 68 65 6e 20 61 20 73 74 72 69 6e 67 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 | ipts.when.a.string.that.matches. |
c2ca0 | 61 20 72 65 67 65 78 20 6f 72 20 61 20 72 65 67 65 78 20 77 69 74 68 20 61 20 73 65 72 76 69 63 | a.regex.or.a.regex.with.a.servic |
c2cc0 | 65 20 6e 61 6d 65 20 61 70 70 65 61 72 73 20 69 6e 20 6a 6f 75 72 6e 61 6c 64 20 6c 6f 67 73 2e | e.name.appears.in.journald.logs. |
c2ce0 | 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 76 61 72 69 61 62 6c 65 73 2c 20 61 72 67 75 6d 65 6e | .You.can.pass.variables,.argumen |
c2d00 | 74 73 2c 20 61 6e 64 20 61 20 66 75 6c 6c 20 6d 61 74 63 68 69 6e 67 20 73 74 72 69 6e 67 20 74 | ts,.and.a.full.matching.string.t |
c2d20 | 6f 20 74 68 65 20 73 63 72 69 70 74 2e 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 73 63 72 69 | o.the.script..Event.handler.scri |
c2d40 | 70 74 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 73 20 74 | pt.Event.handler.that.monitors.t |
c2d60 | 68 65 20 73 74 61 74 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2e 00 45 76 65 72 | he.state.of.interface.eth0..Ever |
c2d80 | 79 20 4e 41 54 20 72 75 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d | y.NAT.rule.has.a.translation.com |
c2da0 | 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 64 65 66 69 6e 65 | mand.defined..The.address.define |
c2dc0 | 64 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 61 64 64 | d.for.the.translation.is.the.add |
c2de0 | 72 65 73 73 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 | ress.used.when.the.address.infor |
c2e00 | 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e 00 | mation.in.a.packet.is.replaced.. |
c2e20 | 45 76 65 72 79 20 53 4e 41 54 36 36 20 72 75 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 | Every.SNAT66.rule.has.a.translat |
c2e40 | 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 70 72 65 66 69 78 20 | ion.command.defined..The.prefix. |
c2e60 | 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 | defined.for.the.translation.is.t |
c2e80 | 68 65 20 70 72 65 66 69 78 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 | he.prefix.used.when.the.address. |
c2ea0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 | information.in.a.packet.is.repla |
c2ec0 | 63 65 64 2e e3 80 81 00 45 76 65 72 79 20 53 53 48 20 6b 65 79 20 63 6f 6d 65 73 20 69 6e 20 74 | ced.....Every.SSH.key.comes.in.t |
c2ee0 | 68 72 65 65 20 70 61 72 74 73 3a 00 45 76 65 72 79 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 | hree.parts:.Every.SSH.public.key |
c2f00 | 20 70 6f 72 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 3c 69 64 65 6e 74 69 66 | .portion.referenced.by.`<identif |
c2f20 | 69 65 72 3e 60 20 72 65 71 75 69 72 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ier>`.requires.the.configuration |
c2f40 | 20 6f 66 20 74 68 65 20 60 3c 74 79 70 65 3e 60 20 6f 66 20 70 75 62 6c 69 63 2d 6b 65 79 20 75 | .of.the.`<type>`.of.public-key.u |
c2f60 | 73 65 64 2e 20 54 68 69 73 20 74 79 70 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6f 66 3a 00 45 76 | sed..This.type.can.be.any.of:.Ev |
c2f80 | 65 72 79 20 55 44 50 20 70 6f 72 74 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 | ery.UDP.port.which.will.be.forwa |
c2fa0 | 72 64 20 72 65 71 75 69 72 65 73 20 6f 6e 65 20 75 6e 69 71 75 65 20 49 44 2e 20 43 75 72 72 65 | rd.requires.one.unique.ID..Curre |
c2fc0 | 6e 74 6c 79 20 77 65 20 73 75 70 70 6f 72 74 20 39 39 20 49 44 73 21 00 45 76 65 72 79 20 56 69 | ntly.we.support.99.IDs!.Every.Vi |
c2fe0 | 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 68 61 76 65 | rtual.Ethernet.interfaces.behave |
c3000 | 73 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 | s.like.a.real.Ethernet.interface |
c3020 | 2e 20 54 68 65 79 20 63 61 6e 20 68 61 76 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 | ..They.can.have.IPv4/IPv6.addres |
c3040 | 73 65 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 6f 72 20 63 61 6e 20 72 65 71 75 65 73 74 20 61 | ses.configured,.or.can.request.a |
c3060 | 64 64 72 65 73 73 65 73 20 62 79 20 44 48 43 50 2f 20 44 48 43 50 76 36 20 61 6e 64 20 61 72 65 | ddresses.by.DHCP/.DHCPv6.and.are |
c3080 | 20 61 73 73 6f 63 69 61 74 65 64 2f 6d 61 70 70 65 64 20 77 69 74 68 20 61 20 72 65 61 6c 20 65 | .associated/mapped.with.a.real.e |
c30a0 | 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 54 68 69 73 20 61 6c 73 6f 20 6d 61 6b 65 73 20 50 73 | thernet.port..This.also.makes.Ps |
c30c0 | 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 65 72 65 73 | eudo-Ethernet.interfaces.interes |
c30e0 | 74 69 6e 67 20 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 20 41 20 50 73 65 | ting.for.testing.purposes..A.Pse |
c3100 | 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 | udo-Ethernet.device.will.inherit |
c3120 | 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 20 28 73 70 65 65 64 2c 20 64 75 70 6c 65 78 2c | .characteristics.(speed,.duplex, |
c3140 | 20 2e 2e 2e 29 20 66 72 6f 6d 20 69 74 73 20 70 68 79 73 69 63 61 6c 20 70 61 72 65 6e 74 20 28 | ....).from.its.physical.parent.( |
c3160 | 74 68 65 20 73 6f 20 63 61 6c 6c 65 64 20 6c 69 6e 6b 29 20 69 6e 74 65 72 66 61 63 65 2e 00 45 | the.so.called.link).interface..E |
c3180 | 76 65 72 79 20 57 57 41 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 6e | very.WWAN.connection.requires.an |
c31a0 | 20 3a 61 62 62 72 3a 60 41 50 4e 20 28 41 63 63 65 73 73 20 50 6f 69 6e 74 20 4e 61 6d 65 29 60 | .:abbr:`APN.(Access.Point.Name)` |
c31c0 | 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 20 74 6f 20 | .which.is.used.by.the.client.to. |
c31e0 | 64 69 61 6c 20 69 6e 74 6f 20 74 68 65 20 49 53 50 73 20 6e 65 74 77 6f 72 6b 2e 20 54 68 69 73 | dial.into.the.ISPs.network..This |
c3200 | 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 43 6f 6e 74 61 | .is.a.mandatory.parameter..Conta |
c3220 | 63 74 20 79 6f 75 72 20 53 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 20 66 6f 72 20 63 6f 72 | ct.your.Service.Provider.for.cor |
c3240 | 72 65 63 74 20 41 50 4e 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 | rect.APN..Every.connection/remot |
c3260 | 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 | e-access.pool.we.configure.also. |
c3280 | 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f | needs.a.pool.where.we.can.draw.o |
c32a0 | 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 | ur.client.IP.addresses.from..We. |
c32c0 | 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 | provide.one.IPv4.and.IPv6.pool.. |
c32e0 | 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 | Authorized.clients.will.receive. |
c3300 | 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 | an.IPv4.address.from.the.192.0.2 |
c3320 | 2e 31 32 38 2f 32 35 20 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 | .128/25.prefix.and.an.IPv6.addre |
c3340 | 73 73 20 66 72 6f 6d 20 74 68 65 20 32 30 30 31 3a 64 62 38 3a 32 30 30 30 3a 3a 2f 36 34 20 70 | ss.from.the.2001:db8:2000::/64.p |
c3360 | 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 | refix..We.can.also.send.some.DNS |
c3380 | 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 | .nameservers.down.to.our.clients |
c33a0 | 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 76 65 72 79 | .used.on.their.connection..Every |
c33c0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 | .connection/remote-access.pool.w |
c33e0 | 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 | e.configure.also.needs.a.pool.wh |
c3400 | 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 | ere.we.can.draw.our.client.IP.ad |
c3420 | 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 | dresses.from..We.provide.one.IPv |
c3440 | 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 | 4.and.IPv6.pool..Authorized.clie |
c3460 | 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 | nts.will.receive.an.IPv4.address |
c3480 | 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 49 50 76 34 20 70 72 65 66 69 78 | .from.the.configured.IPv4.prefix |
c34a0 | 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 49 50 | .and.an.IPv6.address.from.the.IP |
c34c0 | 76 36 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 | v6.prefix..We.can.also.send.some |
c34e0 | 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 | .DNS.nameservers.down.to.our.cli |
c3500 | 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 | ents.used.on.their.connection..E |
c3520 | 78 61 6d 70 6c 65 00 45 78 61 6d 70 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 45 78 61 | xample.Example.Configuration.Exa |
c3540 | 6d 70 6c 65 20 49 50 76 36 20 6f 6e 6c 79 3a 00 45 78 61 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 00 | mple.IPv6.only:.Example.Network. |
c3560 | 45 78 61 6d 70 6c 65 20 50 61 72 74 69 61 6c 20 43 6f 6e 66 69 67 00 45 78 61 6d 70 6c 65 20 63 | Example.Partial.Config.Example.c |
c3580 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 | onfiguration.for.WireGuard.inter |
c35a0 | 66 61 63 65 73 3a 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 63 68 61 6e 67 69 6e 67 20 72 61 74 65 | faces:.Example.for.changing.rate |
c35c0 | 2d 6c 69 6d 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 6f 41 2e 00 45 78 61 6d 70 6c 65 20 66 | -limit.via.RADIUS.CoA..Example.f |
c35e0 | 6f 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 73 69 6d 70 6c 65 20 4c 32 54 50 20 6f 76 65 | or.configuring.a.simple.L2TP.ove |
c3600 | 72 20 49 50 73 65 63 20 56 50 4e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 28 77 | r.IPsec.VPN.for.remote.access.(w |
c3620 | 6f 72 6b 73 20 77 69 74 68 20 6e 61 74 69 76 65 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 4d 61 63 | orks.with.native.Windows.and.Mac |
c3640 | 20 56 50 4e 20 63 6c 69 65 6e 74 73 29 3a 00 45 78 61 6d 70 6c 65 20 6f 66 20 72 65 64 69 72 65 | .VPN.clients):.Example.of.redire |
c3660 | 63 74 69 6f 6e 3a 00 45 78 61 6d 70 6c 65 20 73 79 6e 70 72 6f 78 79 00 45 78 61 6d 70 6c 65 2c | ction:.Example.synproxy.Example, |
c3680 | 20 66 72 6f 6d 20 72 61 64 69 75 73 2d 73 65 72 76 65 72 20 73 65 6e 64 20 63 6f 6d 6d 61 6e 64 | .from.radius-server.send.command |
c36a0 | 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 77 69 74 68 20 75 73 65 72 | .for.disconnect.client.with.user |
c36c0 | 6e 61 6d 65 20 74 65 73 74 00 45 78 61 6d 70 6c 65 3a 00 45 78 61 6d 70 6c 65 3a 20 44 65 6c 65 | name.test.Example:.Example:.Dele |
c36e0 | 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 65 | gate.a./64.prefix.to.interface.e |
c3700 | 74 68 38 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 61 20 6c 6f 63 61 6c 20 61 64 64 72 65 | th8.which.will.use.a.local.addre |
c3720 | 73 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 20 6f 66 20 60 60 3c 70 72 65 66 69 78 3e 3a | ss.on.this.router.of.``<prefix>: |
c3740 | 3a 66 66 66 66 60 60 2c 20 61 73 20 74 68 65 20 61 64 64 72 65 73 73 20 36 35 35 33 34 20 77 69 | :ffff``,.as.the.address.65534.wi |
c3760 | 6c 6c 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 60 60 66 66 66 66 60 60 20 69 6e 20 68 65 78 | ll.correspond.to.``ffff``.in.hex |
c3780 | 61 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 3a 20 46 6f 72 20 | adecimal.notation..Example:.For. |
c37a0 | 61 6e 20 7e 38 2c 30 30 30 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 20 61 20 73 6f 75 72 63 65 20 | an.~8,000.host.network.a.source. |
c37c0 | 4e 41 54 20 70 6f 6f 6c 20 6f 66 20 33 32 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 73 20 72 | NAT.pool.of.32.IP.addresses.is.r |
c37e0 | 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 78 61 6d 70 6c 65 3a 20 49 66 20 49 44 20 69 73 20 31 20 | ecommended..Example:.If.ID.is.1. |
c3800 | 61 6e 64 20 74 68 65 20 63 6c 69 65 6e 74 20 69 73 20 64 65 6c 65 67 61 74 65 64 20 61 6e 20 49 | and.the.client.is.delegated.an.I |
c3820 | 50 76 36 20 70 72 65 66 69 78 20 32 30 30 31 3a 64 62 38 3a 66 66 66 66 3a 3a 2f 34 38 2c 20 64 | Pv6.prefix.2001:db8:ffff::/48,.d |
c3840 | 68 63 70 36 63 20 77 69 6c 6c 20 63 6f 6d 62 69 6e 65 20 74 68 65 20 74 77 6f 20 76 61 6c 75 65 | hcp6c.will.combine.the.two.value |
c3860 | 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 49 50 76 36 20 70 72 65 66 69 78 2c 20 32 30 30 | s.into.a.single.IPv6.prefix,.200 |
c3880 | 31 3a 64 62 38 3a 66 66 66 66 3a 31 3a 3a 2f 36 34 2c 20 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 | 1:db8:ffff:1::/64,.and.will.conf |
c38a0 | 69 67 75 72 65 20 74 68 65 20 70 72 65 66 69 78 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 | igure.the.prefix.on.the.specifie |
c38c0 | 64 20 69 6e 74 65 72 66 61 63 65 2e 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 | d.interface..Example:.Mirror.the |
c38e0 | 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 | .inbound.traffic.of.`bond1`.port |
c3900 | 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 | .to.`eth3`.Example:.Mirror.the.i |
c3920 | 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 | nbound.traffic.of.`br1`.port.to. |
c3940 | 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 | `eth3`.Example:.Mirror.the.inbou |
c3960 | 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 | nd.traffic.of.`eth1`.port.to.`et |
c3980 | 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 | h3`.Example:.Mirror.the.outbound |
c39a0 | 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 | .traffic.of.`bond1`.port.to.`eth |
c39c0 | 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 | 3`.Example:.Mirror.the.outbound. |
c39e0 | 74 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 | traffic.of.`br1`.port.to.`eth3`. |
c3a00 | 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 | Example:.Mirror.the.outbound.tra |
c3a20 | 66 66 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 | ffic.of.`eth1`.port.to.`eth3`.Ex |
c3a40 | 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f | ample:.Set.`eth0`.member.port.to |
c3a60 | 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 34 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 | .be.allowed.VLAN.4.Example:.Set. |
c3a80 | 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 | `eth0`.member.port.to.be.allowed |
c3aa0 | 20 56 4c 41 4e 20 36 2d 38 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 | .VLAN.6-8.Example:.Set.`eth0`.me |
c3ac0 | 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 32 00 45 78 | mber.port.to.be.native.VLAN.2.Ex |
c3ae0 | 61 6d 70 6c 65 3a 20 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 69 73 20 73 65 74 20 74 6f 20 | ample:.to.be.appended.is.set.to. |
c3b00 | 60 60 76 79 6f 73 2e 6e 65 74 60 60 20 61 6e 64 20 74 68 65 20 55 52 4c 20 72 65 63 65 69 76 65 | ``vyos.net``.and.the.URL.receive |
c3b20 | 64 20 69 73 20 60 60 77 77 77 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2c 20 74 68 65 20 73 79 73 74 65 | d.is.``www/foo.html``,.the.syste |
c3b40 | 6d 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 2c 20 66 69 6e 61 6c 20 | m.will.use.the.generated,.final. |
c3b60 | 55 52 4c 20 6f 66 20 60 60 77 77 77 2e 76 79 6f 73 2e 6e 65 74 2f 66 6f 6f 2e 68 74 6d 6c 60 60 | URL.of.``www.vyos.net/foo.html`` |
c3b80 | 2e 00 45 78 61 6d 70 6c 65 73 00 45 78 61 6d 70 6c 65 73 20 6f 66 20 70 6f 6c 69 63 69 65 73 20 | ..Examples.Examples.of.policies. |
c3ba0 | 75 73 61 67 65 3a 00 45 78 61 6d 70 6c 65 73 3a 00 45 78 63 6c 75 64 65 20 49 50 20 61 64 64 72 | usage:.Examples:.Exclude.IP.addr |
c3bc0 | 65 73 73 65 73 20 66 72 6f 6d 20 60 60 56 52 52 50 20 70 61 63 6b 65 74 73 60 60 2e 20 54 68 69 | esses.from.``VRRP.packets``..Thi |
c3be0 | 73 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 20 69 73 | s.option.``excluded-address``.is |
c3c00 | 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 65 74 20 49 50 76 34 20 | .used.when.you.want.to.set.IPv4. |
c3c20 | 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 76 69 72 | +.IPv6.addresses.on.the.same.vir |
c3c40 | 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 77 68 65 6e 20 75 73 65 64 20 6d 6f 72 65 | tual.interface.or.when.used.more |
c3c60 | 20 74 68 61 6e 20 32 30 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 00 45 78 63 6c 75 64 65 20 61 | .than.20.IP.addresses..Exclude.a |
c3c80 | 64 64 72 65 73 73 00 45 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 00 45 78 69 74 20 70 6f 6c 69 | ddress.Exclude.traffic.Exit.poli |
c3ca0 | 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 6e 65 78 74 20 73 65 71 75 65 6e 63 65 | cy.on.match:.go.to.next.sequence |
c3cc0 | 20 6e 75 6d 62 65 72 2e 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 | .number..Exit.policy.on.match:.g |
c3ce0 | 6f 20 74 6f 20 72 75 6c 65 20 3c 31 2d 36 35 35 33 35 3e 00 45 78 70 65 64 69 74 65 64 20 66 6f | o.to.rule.<1-65535>.Expedited.fo |
c3d00 | 72 77 61 72 64 69 6e 67 20 28 45 46 29 00 45 78 70 6c 61 6e 61 74 69 6f 6e 00 45 78 70 6c 69 63 | rwarding.(EF).Explanation.Explic |
c3d20 | 69 74 6c 79 20 64 65 63 6c 61 72 65 20 49 44 20 66 6f 72 20 74 68 69 73 20 6d 69 6e 69 6f 6e 20 | itly.declare.ID.for.this.minion. |
c3d40 | 74 6f 20 75 73 65 20 28 64 65 66 61 75 6c 74 3a 20 68 6f 73 74 6e 61 6d 65 29 00 45 78 74 65 72 | to.use.(default:.hostname).Exter |
c3d60 | 6e 61 6c 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 69 73 20 61 74 20 32 30 30 31 3a 64 62 38 | nal.DHCPv6.server.is.at.2001:db8 |
c3d80 | 3a 3a 34 00 45 78 74 65 72 6e 61 6c 20 52 6f 75 74 65 20 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e | ::4.External.Route.Summarisation |
c3da0 | 00 45 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d | .External.attack:.an.attack.from |
c3dc0 | 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 74 6f 77 61 72 64 73 20 61 6e 20 69 6e 74 65 72 6e 61 | .the.internet.towards.an.interna |
c3de0 | 6c 20 49 50 20 69 73 20 69 64 65 6e 74 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 | l.IP.is.identify..In.this.case,. |
c3e00 | 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 77 61 72 64 73 20 73 75 63 68 20 49 50 20 | all.connections.towards.such.IP. |
c3e20 | 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 00 46 51 2d 43 6f 44 65 6c 00 46 51 2d 43 6f 44 65 | will.be.blocked.FQ-CoDel.FQ-CoDe |
c3e40 | 6c 20 66 69 67 68 74 73 20 62 75 66 66 65 72 62 6c 6f 61 74 20 61 6e 64 20 72 65 64 75 63 65 73 | l.fights.bufferbloat.and.reduces |
c3e60 | 20 6c 61 74 65 6e 63 79 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 63 6f 6d | .latency.without.the.need.of.com |
c3e80 | 70 6c 65 78 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2e 20 49 74 20 68 61 73 20 62 65 63 6f | plex.configurations..It.has.beco |
c3ea0 | 6d 65 20 74 68 65 20 6e 65 77 20 64 65 66 61 75 6c 74 20 51 75 65 75 65 69 6e 67 20 44 69 73 63 | me.the.new.default.Queueing.Disc |
c3ec0 | 69 70 6c 69 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 73 6f 6d | ipline.for.the.interfaces.of.som |
c3ee0 | 65 20 47 4e 55 2f 4c 69 6e 75 78 20 64 69 73 74 72 69 62 75 74 69 6f 6e 73 2e 00 46 51 2d 43 6f | e.GNU/Linux.distributions..FQ-Co |
c3f00 | 44 65 6c 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 6d 6f 64 69 66 69 65 64 20 44 65 66 69 63 | Del.is.based.on.a.modified.Defic |
c3f20 | 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 28 44 52 52 5f 29 20 71 75 65 75 65 20 73 63 68 65 | it.Round.Robin.(DRR_).queue.sche |
c3f40 | 64 75 6c 65 72 20 77 69 74 68 20 74 68 65 20 43 6f 44 65 6c 20 41 63 74 69 76 65 20 51 75 65 75 | duler.with.the.CoDel.Active.Queu |
c3f60 | 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 28 41 51 4d 29 20 61 6c 67 6f 72 69 74 68 6d 20 6f 70 65 | e.Management.(AQM).algorithm.ope |
c3f80 | 72 61 74 69 6e 67 20 6f 6e 20 65 61 63 68 20 71 75 65 75 65 2e 00 46 51 2d 43 6f 44 65 6c 20 69 | rating.on.each.queue..FQ-CoDel.i |
c3fa0 | 73 20 74 75 6e 65 64 20 74 6f 20 72 75 6e 20 6f 6b 20 77 69 74 68 20 69 74 73 20 64 65 66 61 75 | s.tuned.to.run.ok.with.its.defau |
c3fc0 | 6c 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 31 30 47 62 69 74 20 73 70 65 65 64 73 2e 20 | lt.parameters.at.10Gbit.speeds.. |
c3fe0 | 49 74 20 6d 69 67 68 74 20 77 6f 72 6b 20 6f 6b 20 74 6f 6f 20 61 74 20 6f 74 68 65 72 20 73 70 | It.might.work.ok.too.at.other.sp |
c4000 | 65 65 64 73 20 77 69 74 68 6f 75 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 74 68 69 6e | eeds.without.configuring.anythin |
c4020 | 67 2c 20 62 75 74 20 68 65 72 65 20 77 65 20 77 69 6c 6c 20 65 78 70 6c 61 69 6e 20 73 6f 6d 65 | g,.but.here.we.will.explain.some |
c4040 | 20 63 61 73 65 73 20 77 68 65 6e 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 74 75 | .cases.when.you.might.want.to.tu |
c4060 | 6e 65 20 69 74 73 20 70 61 72 61 6d 65 74 65 72 73 2e 00 46 51 2d 43 6f 64 65 6c 20 69 73 20 61 | ne.its.parameters..FQ-Codel.is.a |
c4080 | 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 | .non-shaping.(work-conserving).p |
c40a0 | 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c | olicy,.so.it.will.only.be.useful |
c40c0 | 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 | .if.your.outgoing.interface.is.r |
c40e0 | 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 | eally.full..If.it.is.not,.VyOS.w |
c4100 | 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 51 2d 43 6f 64 | ill.not.own.the.queue.and.FQ-Cod |
c4120 | 65 6c 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 | el.will.have.no.effect..If.there |
c4140 | 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 | .is.bandwidth.available.on.the.p |
c4160 | 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 51 2d | hysical.link,.you.can.embed_.FQ- |
c4180 | 43 6f 64 65 6c 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f | Codel.into.a.classful.shaping.po |
c41a0 | 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 | licy.to.make.sure.it.owns.the.qu |
c41c0 | 65 75 65 2e 20 49 66 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 73 75 72 65 20 69 66 20 79 6f 75 20 | eue..If.you.are.not.sure.if.you. |
c41e0 | 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 79 6f 75 72 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 | need.to.embed.your.FQ-CoDel.poli |
c4200 | 63 79 20 69 6e 74 6f 20 61 20 53 68 61 70 65 72 2c 20 64 6f 20 69 74 2e 00 46 52 52 00 46 52 52 | cy.into.a.Shaper,.do.it..FRR.FRR |
c4220 | 20 6f 66 66 65 72 73 20 6f 6e 6c 79 20 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 | .offers.only.partial.support.for |
c4240 | 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 65 78 | .some.of.the.routing.protocol.ex |
c4260 | 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 4d 50 4c 53 | tensions.that.are.used.with.MPLS |
c4280 | 2d 54 45 3b 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 20 63 6f 6d 70 6c | -TE;.it.does.not.support.a.compl |
c42a0 | 65 74 65 20 52 53 56 50 2d 54 45 20 73 6f 6c 75 74 69 6f 6e 2e 00 46 52 52 20 73 75 70 70 6f 72 | ete.RSVP-TE.solution..FRR.suppor |
c42c0 | 74 73 20 61 20 6e 65 77 20 77 61 79 20 6f 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 4c 41 4e | ts.a.new.way.of.configuring.VLAN |
c42e0 | 2d 74 6f 2d 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 66 6f 72 20 45 56 50 4e 2d 56 58 4c 41 4e 2c | -to-VNI.mappings.for.EVPN-VXLAN, |
c4300 | 20 77 68 65 6e 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 | .when.working.with.the.Linux.ker |
c4320 | 6e 65 6c 2e 20 49 6e 20 74 68 69 73 20 6e 65 77 20 77 61 79 2c 20 74 68 65 20 6d 61 70 70 69 6e | nel..In.this.new.way,.the.mappin |
c4340 | 67 20 6f 66 20 61 20 56 4c 41 4e 20 74 6f 20 61 20 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c | g.of.a.VLAN.to.a.:abbr:`VNI.(VXL |
c4360 | 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 | AN.Network.Identifier.(or.VXLAN. |
c4380 | 53 65 67 6d 65 6e 74 20 49 44 29 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 | Segment.ID))`.is.configured.agai |
c43a0 | 6e 73 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 | nst.a.container.VXLAN.interface. |
c43c0 | 77 68 69 63 68 20 69 73 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 3a 61 62 62 72 3a | which.is.referred.to.as.a.:abbr: |
c43e0 | 60 53 56 44 20 28 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 29 60 2e 00 46 54 50 | `SVD.(Single.VXLAN.device)`..FTP |
c4400 | 20 64 61 65 6d 6f 6e 00 46 61 63 69 6c 69 74 69 65 73 00 46 61 63 69 6c 69 74 69 65 73 20 63 61 | .daemon.Facilities.Facilities.ca |
c4420 | 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 74 6f 20 6d 65 65 74 20 74 68 65 20 6e 65 65 64 73 20 | n.be.adjusted.to.meet.the.needs. |
c4440 | 6f 66 20 74 68 65 20 75 73 65 72 3a 00 46 61 63 69 6c 69 74 79 20 43 6f 64 65 00 46 61 69 6c 6f | of.the.user:.Facility.Code.Failo |
c4460 | 76 65 72 00 46 61 69 6c 6f 76 65 72 20 52 6f 75 74 65 73 00 46 61 69 6c 6f 76 65 72 20 6d 65 63 | ver.Failover.Routes.Failover.mec |
c4480 | 68 61 6e 69 73 6d 20 74 6f 20 75 73 65 20 66 6f 72 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 | hanism.to.use.for.conntrack-sync |
c44a0 | 2e 00 46 61 69 6c 6f 76 65 72 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 | ..Failover.routes.are.manually.c |
c44c0 | 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 62 75 74 20 74 68 65 79 20 69 6e 73 74 61 | onfigured.routes,.but.they.insta |
c44e0 | 6c 6c 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 66 20 74 68 65 20 68 | ll.to.the.routing.table.if.the.h |
c4500 | 65 61 6c 74 68 2d 63 68 65 63 6b 20 74 61 72 67 65 74 20 69 73 20 61 6c 69 76 65 2e 20 49 66 20 | ealth-check.target.is.alive..If. |
c4520 | 74 68 65 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 61 6c 69 76 65 20 74 68 65 20 72 6f 75 74 | the.target.is.not.alive.the.rout |
c4540 | 65 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 | e.is.removed.from.the.routing.ta |
c4560 | 62 6c 65 20 75 6e 74 69 6c 20 74 68 65 20 74 61 72 67 65 74 20 77 69 6c 6c 20 62 65 20 61 76 61 | ble.until.the.target.will.be.ava |
c4580 | 69 6c 61 62 6c 65 2e 00 46 61 69 72 20 51 75 65 75 65 00 46 61 69 72 20 51 75 65 75 65 20 69 73 | ilable..Fair.Queue.Fair.Queue.is |
c45a0 | 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 | .a.non-shaping.(work-conserving) |
c45c0 | 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 | .policy,.so.it.will.only.be.usef |
c45e0 | 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 | ul.if.your.outgoing.interface.is |
c4600 | 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 | .really.full..If.it.is.not,.VyOS |
c4620 | 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 61 69 72 | .will.not.own.the.queue.and.Fair |
c4640 | 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 | .Queue.will.have.no.effect..If.t |
c4660 | 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 | here.is.bandwidth.available.on.t |
c4680 | 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f | he.physical.link,.you.can.embed_ |
c46a0 | 20 46 61 69 72 2d 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 | .Fair-Queue.into.a.classful.shap |
c46c0 | 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 | ing.policy.to.make.sure.it.owns. |
c46e0 | 74 68 65 20 71 75 65 75 65 2e 00 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 20 77 6f 72 6b 2d | the.queue..Fair.Queue.is.a.work- |
c4700 | 63 6f 6e 73 65 72 76 69 6e 67 20 73 63 68 65 64 75 6c 65 72 20 77 68 69 63 68 20 73 63 68 65 64 | conserving.scheduler.which.sched |
c4720 | 75 6c 65 73 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 | ules.the.transmission.of.packets |
c4740 | 20 62 61 73 65 64 20 6f 6e 20 66 6c 6f 77 73 2c 20 74 68 61 74 20 69 73 2c 20 69 74 20 62 61 6c | .based.on.flows,.that.is,.it.bal |
c4760 | 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 20 74 68 | ances.traffic.distributing.it.th |
c4780 | 72 6f 75 67 68 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 2d 71 75 65 75 65 73 20 69 6e 20 6f 72 | rough.different.sub-queues.in.or |
c47a0 | 64 65 72 20 74 6f 20 65 6e 73 75 72 65 20 66 61 69 72 6e 65 73 73 20 73 6f 20 74 68 61 74 20 65 | der.to.ensure.fairness.so.that.e |
c47c0 | 61 63 68 20 66 6c 6f 77 20 69 73 20 61 62 6c 65 20 74 6f 20 73 65 6e 64 20 64 61 74 61 20 69 6e | ach.flow.is.able.to.send.data.in |
c47e0 | 20 74 75 72 6e 2c 20 70 72 65 76 65 6e 74 69 6e 67 20 61 6e 79 20 73 69 6e 67 6c 65 20 6f 6e 65 | .turn,.preventing.any.single.one |
c4800 | 20 66 72 6f 6d 20 64 72 6f 77 6e 69 6e 67 20 6f 75 74 20 74 68 65 20 72 65 73 74 2e 00 46 61 73 | .from.drowning.out.the.rest..Fas |
c4820 | 74 4e 65 74 4d 6f 6e 00 46 61 73 74 4e 65 74 4d 6f 6e 20 69 73 20 61 20 68 69 67 68 2d 70 65 72 | tNetMon.FastNetMon.is.a.high-per |
c4840 | 66 6f 72 6d 61 6e 63 65 20 44 44 6f 53 20 64 65 74 65 63 74 6f 72 2f 73 65 6e 73 6f 72 20 62 75 | formance.DDoS.detector/sensor.bu |
c4860 | 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 70 61 63 6b 65 74 20 63 61 | ilt.on.top.of.multiple.packet.ca |
c4880 | 70 74 75 72 65 20 65 6e 67 69 6e 65 73 3a 20 4e 65 74 46 6c 6f 77 2c 20 49 50 46 49 58 2c 20 73 | pture.engines:.NetFlow,.IPFIX,.s |
c48a0 | 46 6c 6f 77 2c 20 41 46 5f 50 41 43 4b 45 54 20 28 70 6f 72 74 20 6d 69 72 72 6f 72 29 2e 20 49 | Flow,.AF_PACKET.(port.mirror)..I |
c48c0 | 74 20 63 61 6e 20 64 65 74 65 63 74 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 64 65 70 6c 6f 79 | t.can.detect.hosts.in.the.deploy |
c48e0 | 65 64 20 6e 65 74 77 6f 72 6b 20 73 65 6e 64 69 6e 67 20 6f 72 20 72 65 63 65 69 76 69 6e 67 20 | ed.network.sending.or.receiving. |
c4900 | 6c 61 72 67 65 20 76 6f 6c 75 6d 65 73 20 6f 66 20 74 72 61 66 66 69 63 2c 20 70 61 63 6b 65 74 | large.volumes.of.traffic,.packet |
c4920 | 73 2f 62 79 74 65 73 2f 66 6c 6f 77 73 20 70 65 72 20 73 65 63 6f 6e 64 20 61 6e 64 20 70 65 72 | s/bytes/flows.per.second.and.per |
c4940 | 66 6f 72 6d 20 61 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 68 61 | form.a.configurable.action.to.ha |
c4960 | 6e 64 6c 65 20 74 68 61 74 20 65 76 65 6e 74 2c 20 73 75 63 68 20 61 73 20 63 61 6c 6c 69 6e 67 | ndle.that.event,.such.as.calling |
c4980 | 20 61 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 2e 00 46 65 61 74 75 72 65 73 20 6f 66 20 74 68 | .a.custom.script..Features.of.th |
c49a0 | 65 20 43 75 72 72 65 6e 74 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 00 46 69 65 6c 64 00 46 | e.Current.Implementation.Field.F |
c49c0 | 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 20 63 | ile.identified.by.`<filename>`.c |
c49e0 | 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 54 53 49 47 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ontaining.the.TSIG.authenticatio |
c4a00 | 6e 20 6b 65 79 20 66 6f 72 20 52 46 43 32 31 33 36 20 6e 73 75 70 64 61 74 65 20 6f 6e 20 72 65 | n.key.for.RFC2136.nsupdate.on.re |
c4a20 | 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 | mote.DNS.server..File.identified |
c4a40 | 20 62 79 20 60 3c 6b 65 79 66 69 6c 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 73 | .by.`<keyfile>`.containing.the.s |
c4a60 | 65 63 72 65 74 20 52 4e 44 43 20 6b 65 79 20 73 68 61 72 65 64 20 77 69 74 68 20 72 65 6d 6f 74 | ecret.RNDC.key.shared.with.remot |
c4a80 | 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 74 65 72 20 54 79 70 65 2d 33 20 73 75 6d 6d | e.DNS.server..Filter.Type-3.summ |
c4aa0 | 61 72 79 2d 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 | ary-LSAs.announced.to.other.area |
c4ac0 | 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 69 6e 74 72 61 2d 20 61 72 65 61 20 70 61 | s.originated.from.intra-.area.pa |
c4ae0 | 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 2e 20 54 68 69 73 20 63 6f | ths.from.specified.area..This.co |
c4b00 | 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 46 | mmand.makes.sense.in.ABR.only..F |
c4b20 | 69 6c 74 65 72 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 2f 64 65 | ilter.traffic.based.on.source/de |
c4b40 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 69 6c 74 65 72 2d 49 64 3d 32 30 30 | stination.address..Filter-Id=200 |
c4b60 | 30 2f 33 30 30 30 20 28 6d 65 61 6e 73 20 32 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 | 0/3000.(means.2000Kbit.down-stre |
c4b80 | 61 6d 20 72 61 74 65 20 61 6e 64 20 33 30 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 | am.rate.and.3000Kbit.up-stream.r |
c4ba0 | 61 74 65 29 00 46 69 6c 74 65 72 2d 49 64 3d 35 30 30 30 2f 34 30 30 30 20 28 6d 65 61 6e 73 20 | ate).Filter-Id=5000/4000.(means. |
c4bc0 | 35 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 61 6e 64 20 34 30 | 5000Kbit.down-stream.rate.and.40 |
c4be0 | 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 20 49 66 20 61 74 74 72 69 62 | 00Kbit.up-stream.rate).If.attrib |
c4c00 | 75 74 65 20 46 69 6c 74 65 72 2d 49 64 20 72 65 64 65 66 69 6e 65 64 2c 20 72 65 70 6c 61 63 65 | ute.Filter-Id.redefined,.replace |
c4c20 | 20 69 74 20 69 6e 20 52 41 44 49 55 53 20 43 6f 41 20 72 65 71 75 65 73 74 2e 00 46 69 6c 74 65 | .it.in.RADIUS.CoA.request..Filte |
c4c40 | 72 69 6e 67 00 46 69 6c 74 65 72 69 6e 67 20 69 73 20 75 73 65 64 20 66 6f 72 20 62 6f 74 68 20 | ring.Filtering.is.used.for.both. |
c4c60 | 69 6e 70 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 | input.and.output.of.the.routing. |
c4c80 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4f 6e 63 65 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 64 | information..Once.filtering.is.d |
c4ca0 | 65 66 69 6e 65 64 2c 20 69 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 69 6e 20 61 6e 79 | efined,.it.can.be.applied.in.any |
c4cc0 | 20 64 69 72 65 63 74 69 6f 6e 2e 20 56 79 4f 53 20 6d 61 6b 65 73 20 66 69 6c 74 65 72 69 6e 67 | .direction..VyOS.makes.filtering |
c4ce0 | 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 61 63 6c 73 20 61 6e 64 20 70 72 65 66 69 78 20 | .possible.using.acls.and.prefix. |
c4d00 | 6c 69 73 74 73 2e 00 46 69 6e 61 6c 6c 79 2c 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 70 6f 6c | lists..Finally,.to.apply.the.pol |
c4d20 | 69 63 79 20 72 6f 75 74 65 20 74 6f 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 6e 20 | icy.route.to.ingress.traffic.on. |
c4d40 | 6f 75 72 20 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 77 65 20 75 73 65 3a 00 46 69 72 65 77 | our.LAN.interface,.we.use:.Firew |
c4d60 | 61 6c 6c 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 34 20 52 75 6c 65 73 00 46 69 72 65 77 61 | all.Firewall.-.IPv4.Rules.Firewa |
c4d80 | 6c 6c 20 2d 20 49 50 76 36 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 | ll.-.IPv6.Rules.Firewall.Configu |
c4da0 | 72 61 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 28 44 | ration.Firewall.Configuration.(D |
c4dc0 | 65 70 72 65 63 61 74 65 64 29 00 46 69 72 65 77 61 6c 6c 20 44 65 73 63 72 69 70 74 69 6f 6e 00 | eprecated).Firewall.Description. |
c4de0 | 46 69 72 65 77 61 6c 6c 20 45 78 63 65 70 74 69 6f 6e 73 00 46 69 72 65 77 61 6c 6c 20 4c 6f 67 | Firewall.Exceptions.Firewall.Log |
c4e00 | 73 00 46 69 72 65 77 61 6c 6c 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 | s.Firewall.Rules.Firewall.groups |
c4e20 | 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 | .Firewall.groups.represent.colle |
c4e40 | 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 | ctions.of.IP.addresses,.networks |
c4e60 | 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 64 6f 6d 61 69 6e | ,.ports,.mac.addresses.or.domain |
c4e80 | 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 | s..Once.created,.a.group.can.be. |
c4ea0 | 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 | referenced.by.firewall,.nat.and. |
c4ec0 | 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 | policy.route.rules.as.either.a.s |
c4ee0 | 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 4d 65 | ource.or.destination.matcher..Me |
c4f00 | 6d 62 65 72 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 6f 72 20 72 65 6d 6f 76 65 64 20 66 72 | mbers.can.be.added.or.removed.fr |
c4f20 | 6f 6d 20 61 20 67 72 6f 75 70 20 77 69 74 68 6f 75 74 20 63 68 61 6e 67 65 73 20 74 6f 2c 20 6f | om.a.group.without.changes.to,.o |
c4f40 | 72 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6c 6f 61 64 2c 20 69 6e 64 69 76 69 64 75 61 6c | r.the.need.to.reload,.individual |
c4f60 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 | .firewall.rules..Firewall.groups |
c4f80 | 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 | .represent.collections.of.IP.add |
c4fa0 | 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 | resses,.networks,.ports,.mac.add |
c4fc0 | 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f | resses,.domains.or.interfaces..O |
c4fe0 | 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 | nce.created,.a.group.can.be.refe |
c5000 | 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 | renced.by.firewall,.nat.and.poli |
c5020 | 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 | cy.route.rules.as.either.a.sourc |
c5040 | 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 20 61 73 | e.or.destination.matcher,.and.as |
c5060 | 20 69 6e 62 70 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 | .inbpund/outbound.in.the.case.of |
c5080 | 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 | .interface.group..Firewall.group |
c50a0 | 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 | s.represent.collections.of.IP.ad |
c50c0 | 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 | dresses,.networks,.ports,.mac.ad |
c50e0 | 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | dresses,.domains.or.interfaces.. |
c5100 | 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 | Once.created,.a.group.can.be.ref |
c5120 | 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c | erenced.by.firewall,.nat.and.pol |
c5140 | 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 | icy.route.rules.as.either.a.sour |
c5160 | 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 2f 6f | ce.or.destination.matcher,.and/o |
c5180 | 72 20 61 73 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 | r.as.inbound/outbound.in.the.cas |
c51a0 | 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 6d | e.of.interface.group..Firewall.m |
c51c0 | 61 72 6b 2e 20 49 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 61 64 62 61 6c 61 6e 63 69 6e | ark..It.possible.to.loadbalancin |
c51e0 | 67 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 60 60 66 77 6d 61 72 6b 60 60 20 76 61 | g.traffic.based.on.``fwmark``.va |
c5200 | 6c 75 65 00 46 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 | lue.Firewall.policy.can.also.be. |
c5220 | 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 20 | applied.to.the.tunnel.interface. |
c5240 | 66 6f 72 20 60 6c 6f 63 61 6c 60 2c 20 60 69 6e 60 2c 20 61 6e 64 20 60 6f 75 74 60 20 64 69 72 | for.`local`,.`in`,.and.`out`.dir |
c5260 | 65 63 74 69 6f 6e 73 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 73 20 69 64 65 6e 74 69 63 61 6c 6c | ections.and.functions.identicall |
c5280 | 79 20 74 6f 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 46 69 72 65 77 61 | y.to.ethernet.interfaces..Firewa |
c52a0 | 6c 6c 20 72 75 6c 65 73 20 61 72 65 20 77 72 69 74 74 65 6e 20 61 73 20 6e 6f 72 6d 61 6c 2c 20 | ll.rules.are.written.as.normal,. |
c52c0 | 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 73 | using.the.internal.IP.address.as |
c52e0 | 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 61 6e | .the.source.of.outbound.rules.an |
c5300 | 64 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 69 6e 62 6f 75 6e 64 20 72 75 6c | d.the.destination.of.inbound.rul |
c5320 | 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 44 65 73 74 69 6e 61 74 69 | es..Firewall.rules.for.Destinati |
c5340 | 6f 6e 20 4e 41 54 00 46 69 72 65 77 61 6c 6c 2d 4c 65 67 61 63 79 00 46 69 72 6d 77 61 72 65 20 | on.NAT.Firewall-Legacy.Firmware. |
c5360 | 55 70 64 61 74 65 00 46 69 72 73 74 20 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 61 20 | Update.First.hop.interface.of.a. |
c5380 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2e 00 46 69 72 73 74 20 6f 66 20 61 6c 6c 20 79 6f 75 | route.to.match..First.of.all.you |
c53a0 | 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 42 47 50 20 72 6f 75 74 65 72 20 77 69 74 68 20 | .must.configure.BGP.router.with. |
c53c0 | 74 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 | the.:abbr:`ASN.(Autonomous.Syste |
c53e0 | 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 65 72 20 69 73 20 61 6e 20 | m.Number)`..The.AS.number.is.an. |
c5400 | 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 | identifier.for.the.autonomous.sy |
c5420 | 73 74 65 6d 2e 20 54 68 65 20 42 47 50 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 73 20 74 68 65 20 | stem..The.BGP.protocol.uses.the. |
c5440 | 41 53 20 6e 75 6d 62 65 72 20 66 6f 72 20 64 65 74 65 63 74 69 6e 67 20 77 68 65 74 68 65 72 20 | AS.number.for.detecting.whether. |
c5460 | 74 68 65 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 69 6e 74 65 72 6e 61 6c 20 6f | the.BGP.connection.is.internal.o |
c5480 | 72 20 65 78 74 65 72 6e 61 6c 2e 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 | r.external..VyOS.does.not.have.a |
c54a0 | 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 47 | .special.command.to.start.the.BG |
c54c0 | 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 | P.process..The.BGP.process.start |
c54e0 | 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 69 67 68 62 6f 72 20 69 73 20 63 6f 6e | s.when.the.first.neighbor.is.con |
c5500 | 66 69 67 75 72 65 64 2e 00 46 69 72 73 74 20 6f 66 20 61 6c 6c 2c 20 77 65 20 6e 65 65 64 20 74 | figured..First.of.all,.we.need.t |
c5520 | 6f 20 63 72 65 61 74 65 20 61 20 43 41 20 72 6f 6f 74 20 63 65 72 74 69 66 69 63 61 74 65 20 61 | o.create.a.CA.root.certificate.a |
c5540 | 6e 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 74 68 65 20 73 65 72 | nd.server.certificate.on.the.ser |
c5560 | 76 65 72 20 73 69 64 65 2e 00 46 69 72 73 74 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 | ver.side..First.scenario:.apply. |
c5580 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 48 54 54 50 20 74 72 61 | destination.NAT.for.all.HTTP.tra |
c55a0 | 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 74 68 72 6f 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 | ffic.comming.through.interface.e |
c55c0 | 74 68 30 2c 20 61 6e 64 20 75 73 65 72 20 34 20 62 61 63 6b 65 6e 64 73 2e 20 46 69 72 73 74 20 | th0,.and.user.4.backends..First. |
c55e0 | 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 72 65 63 65 69 76 65 64 20 33 30 25 20 6f 66 20 74 | backend.should.received.30%.of.t |
c5600 | 68 65 20 72 65 71 75 65 73 74 2c 20 73 65 63 6f 6e 64 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c | he.request,.second.backend.shoul |
c5620 | 64 20 67 65 74 20 32 30 25 2c 20 74 68 69 72 64 20 31 35 25 20 61 6e 64 20 74 68 65 20 66 6f 75 | d.get.20%,.third.15%.and.the.fou |
c5640 | 72 74 68 20 33 35 25 20 57 65 20 77 69 6c 6c 20 75 73 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 | rth.35%.We.will.use.source.and.d |
c5660 | 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 68 61 73 68 20 67 65 6e 65 | estination.address.for.hash.gene |
c5680 | 72 61 74 69 6f 6e 2e 00 46 69 72 73 74 20 73 74 65 70 73 00 46 69 72 73 74 20 74 68 65 20 4f 54 | ration..First.steps.First.the.OT |
c56a0 | 50 20 6b 65 79 73 20 6d 75 73 74 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 61 6e 64 20 73 65 6e | P.keys.must.be.generated.and.sen |
c56c0 | 74 20 74 6f 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 | t.to.the.user.and.to.the.configu |
c56e0 | 72 61 74 69 6f 6e 3a 00 46 69 72 73 74 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 | ration:.First.we.need.to.specify |
c5700 | 20 74 68 65 20 62 61 73 69 63 20 73 65 74 74 69 6e 67 73 2e 20 31 31 39 34 2f 55 44 50 20 69 73 | .the.basic.settings..1194/UDP.is |
c5720 | 20 74 68 65 20 64 65 66 61 75 6c 74 2e 20 54 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 | .the.default..The.``persistent-t |
c5740 | 75 6e 6e 65 6c 60 60 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2c 20 69 | unnel``.option.is.recommended,.i |
c5760 | 74 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 54 55 4e 2f 54 41 50 20 64 65 76 69 63 65 20 66 72 | t.prevents.the.TUN/TAP.device.fr |
c5780 | 6f 6d 20 63 6c 6f 73 69 6e 67 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 73 65 74 73 20 | om.closing.on.connection.resets. |
c57a0 | 6f 72 20 64 61 65 6d 6f 6e 20 72 65 6c 6f 61 64 73 2e 00 46 69 72 73 74 20 79 6f 75 20 77 69 6c | or.daemon.reloads..First.you.wil |
c57c0 | 6c 20 6e 65 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 61 6e 20 52 50 4b 49 20 76 61 6c 69 64 61 74 | l.need.to.deploy.an.RPKI.validat |
c57e0 | 6f 72 20 66 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 74 6f 20 75 73 65 2e 20 54 68 65 20 | or.for.your.routers.to.use..The. |
c5800 | 52 49 50 45 20 4e 43 43 20 68 65 6c 70 66 75 6c 6c 79 20 70 72 6f 76 69 64 65 20 60 73 6f 6d 65 | RIPE.NCC.helpfully.provide.`some |
c5820 | 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 60 5f 20 74 6f 20 67 65 74 20 79 6f 75 20 73 74 61 72 74 | .instructions`_.to.get.you.start |
c5840 | 65 64 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 64 69 66 66 65 72 65 6e 74 20 6f 70 74 69 6f 6e | ed.with.several.different.option |
c5860 | 73 2e 20 20 4f 6e 63 65 20 79 6f 75 72 20 73 65 72 76 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 | s...Once.your.server.is.running. |
c5880 | 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 76 61 6c 69 64 61 74 69 6e 67 20 61 6e 6e 6f 75 6e 63 | you.can.start.validating.announc |
c58a0 | 65 6d 65 6e 74 73 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 | ements..First,.on.both.routers.r |
c58c0 | 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 | un.the.operational.command."gene |
c58e0 | 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 | rate.pki.key-pair.install.<key-p |
c5900 | 61 69 72 20 6e 61 6d 3e 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 | air.nam>>"..You.may.choose.diffe |
c5920 | 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e | rent.length.than.2048.of.course. |
c5940 | 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 | .First,.on.both.routers.run.the. |
c5960 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b | operational.command."generate.pk |
c5980 | 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d | i.key-pair.install.<key-pair.nam |
c59a0 | 65 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 | e>"..You.may.choose.different.le |
c59c0 | 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c | ngth.than.2048.of.course..First, |
c59e0 | 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 73 20 67 65 6e 65 72 61 74 65 20 74 68 65 | .one.of.the.systems.generate.the |
c5a00 | 20 6b 65 79 20 75 73 69 6e 67 20 74 68 65 20 3a 72 65 66 3a 60 67 65 6e 65 72 61 74 65 20 70 6b | .key.using.the.:ref:`generate.pk |
c5a20 | 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 3c 63 6f 6e 66 69 67 75 72 | i.openvpn.shared-secret<configur |
c5a40 | 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 4f | ation/pki/index:pki>`.command..O |
c5a60 | 6e 63 65 20 67 65 6e 65 72 61 74 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 | nce.generated,.you.will.need.to. |
c5a80 | 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 | install.this.key.on.the.local.sy |
c5aa0 | 73 74 65 6d 2c 20 74 68 65 6e 20 63 6f 70 79 20 61 6e 64 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 | stem,.then.copy.and.install.this |
c5ac0 | 20 6b 65 79 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 46 69 72 73 74 | .key.to.the.remote.router..First |
c5ae0 | 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 6b 65 79 20 62 79 20 | ,.you.need.to.generate.a.key.by. |
c5b00 | 72 75 6e 6e 69 6e 67 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 | running.``run.generate.pki.openv |
c5b20 | 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 | pn.shared-secret.install.<name>` |
c5b40 | 60 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 59 6f 75 20 63 | `.from.configuration.mode..You.c |
c5b60 | 61 6e 20 75 73 65 20 61 6e 79 20 6e 61 6d 65 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 60 60 73 | an.use.any.name,.we.will.use.``s |
c5b80 | 32 73 60 60 2e 00 46 6c 61 73 68 00 46 6c 61 73 68 20 4f 76 65 72 72 69 64 65 00 46 6c 6f 77 20 | 2s``..Flash.Flash.Override.Flow. |
c5ba0 | 41 63 63 6f 75 6e 74 69 6e 67 00 46 6c 6f 77 20 45 78 70 6f 72 74 00 46 6c 6f 77 20 61 6e 64 20 | Accounting.Flow.Export.Flow.and. |
c5bc0 | 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 00 46 6c 6f 77 73 20 63 61 6e | packet-based.balancing.Flows.can |
c5be0 | 20 62 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 70 | .be.exported.via.two.different.p |
c5c00 | 72 6f 74 6f 63 6f 6c 73 3a 20 4e 65 74 46 6c 6f 77 20 28 76 65 72 73 69 6f 6e 73 20 35 2c 20 39 | rotocols:.NetFlow.(versions.5,.9 |
c5c20 | 20 61 6e 64 20 31 30 2f 49 50 46 49 58 29 20 61 6e 64 20 73 46 6c 6f 77 2e 20 41 64 64 69 74 69 | .and.10/IPFIX).and.sFlow..Additi |
c5c40 | 6f 6e 61 6c 6c 79 2c 20 79 6f 75 20 6d 61 79 20 73 61 76 65 20 66 6c 6f 77 73 20 74 6f 20 61 6e | onally,.you.may.save.flows.to.an |
c5c60 | 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 20 61 | .in-memory.table.internally.in.a |
c5c80 | 20 72 6f 75 74 65 72 2e 00 46 6c 6f 77 74 61 62 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .router..Flowtable.Configuration |
c5ca0 | 00 46 6c 6f 77 74 61 62 6c 65 73 20 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e | .Flowtables..allows.you.to.defin |
c5cc0 | 65 20 61 20 66 61 73 74 70 61 74 68 20 74 68 72 6f 75 67 68 20 74 68 65 20 66 6c 6f 77 74 61 62 | e.a.fastpath.through.the.flowtab |
c5ce0 | 6c 65 20 64 61 74 61 70 61 74 68 2e 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 73 75 70 70 6f | le.datapath..The.flowtable.suppo |
c5d00 | 72 74 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 20 33 20 49 50 76 34 20 61 6e 64 20 49 50 76 | rts.for.the.layer.3.IPv4.and.IPv |
c5d20 | 36 20 61 6e 64 20 74 68 65 20 6c 61 79 65 72 20 34 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 72 | 6.and.the.layer.4.TCP.and.UDP.pr |
c5d40 | 6f 74 6f 63 6f 6c 73 2e 00 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e | otocols..Flowtables.Firewall.Con |
c5d60 | 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 75 73 68 69 6e 67 20 74 68 65 20 73 65 73 73 69 6f 6e 20 | figuration.Flushing.the.session. |
c5d80 | 74 61 62 6c 65 20 77 69 6c 6c 20 63 61 75 73 65 20 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f | table.will.cause.other.connectio |
c5da0 | 6e 73 20 74 6f 20 66 61 6c 6c 20 62 61 63 6b 20 66 72 6f 6d 20 66 6c 6f 77 2d 62 61 73 65 64 20 | ns.to.fall.back.from.flow-based. |
c5dc0 | 74 6f 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 75 6e 74 69 6c 20 | to.packet-based.balancing.until. |
c5de0 | 65 61 63 68 20 66 6c 6f 77 20 69 73 20 72 65 65 73 74 61 62 6c 69 73 68 65 64 2e 00 46 6f 6c 6c | each.flow.is.reestablished..Foll |
c5e00 | 6f 77 20 74 68 65 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f | ow.the.SSH.dynamic-protection.lo |
c5e20 | 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 46 6f | g..Follow.the.SSH.server.log..Fo |
c5e40 | 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 | llow.the.instructions.to.generat |
c5e60 | 65 20 43 41 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 | e.CA.cert.(in.configuration.mode |
c5e80 | 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 | ):.Follow.the.instructions.to.ge |
c5ea0 | 6e 65 72 61 74 65 20 73 65 72 76 65 72 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 | nerate.server.cert.(in.configura |
c5ec0 | 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 6c 6f 67 73 20 66 6f 72 20 | tion.mode):.Follow.the.logs.for. |
c5ee0 | 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 46 6f 72 20 3a 72 65 66 3a | mDNS.repeater.service..For.:ref: |
c5f00 | 60 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 2d 6e 61 74 60 20 61 20 72 75 6c 65 20 66 6f 72 20 62 | `bidirectional-nat`.a.rule.for.b |
c5f20 | 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 | oth.:ref:`source-nat`.and.:ref:` |
c5f40 | 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 | destination-nat`.needs.to.be.cre |
c5f60 | 61 74 65 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 | ated..For.:ref:`destination-nat` |
c5f80 | 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | .rules.the.packets.destination.a |
c5fa0 | 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 73 | ddress.will.be.replaced.by.the.s |
c5fc0 | 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 | pecified.address.in.the.`transla |
c5fe0 | 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 2e 00 46 6f 72 20 3a 72 65 66 3a | tion.address`.command..For.:ref: |
c6000 | 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 | `source-nat`.rules.the.packets.s |
c6020 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 | ource.address.will.be.replaced.w |
c6040 | 69 74 68 20 74 68 65 20 61 64 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 | ith.the.address.specified.in.the |
c6060 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 2e 20 41 20 70 6f 72 74 20 74 72 61 | .translation.command..A.port.tra |
c6080 | 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 | nslation.can.also.be.specified.a |
c60a0 | 6e 64 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 | nd.is.part.of.the.translation.ad |
c60c0 | 64 72 65 73 73 2e 00 46 6f 72 20 45 6e 63 72 79 70 74 69 6f 6e 3a 00 46 6f 72 20 48 61 73 68 69 | dress..For.Encryption:.For.Hashi |
c60e0 | 6e 67 3a 00 46 6f 72 20 49 53 2d 49 53 20 74 6f 70 20 6f 70 65 72 61 74 65 20 63 6f 72 72 65 63 | ng:.For.IS-IS.top.operate.correc |
c6100 | 74 6c 79 2c 20 6f 6e 65 20 6d 75 73 74 20 64 6f 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 | tly,.one.must.do.the.equivalent. |
c6120 | 6f 66 20 61 20 52 6f 75 74 65 72 20 49 44 20 69 6e 20 43 4c 4e 53 2e 20 54 68 69 73 20 52 6f 75 | of.a.Router.ID.in.CLNS..This.Rou |
c6140 | 74 65 72 20 49 44 20 69 73 20 63 61 6c 6c 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 | ter.ID.is.called.the.:abbr:`NET. |
c6160 | 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 2e 20 54 68 69 73 20 6d 75 | (Network.Entity.Title)`..This.mu |
c6180 | 73 74 20 62 65 20 75 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 | st.be.unique.for.each.and.every. |
c61a0 | 72 6f 75 74 65 72 20 74 68 61 74 20 69 73 20 6f 70 65 72 61 74 69 6e 67 20 69 6e 20 49 53 2d 49 | router.that.is.operating.in.IS-I |
c61c0 | 53 2e 20 49 74 20 61 6c 73 6f 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 64 75 70 6c 69 63 61 74 65 | S..It.also.must.not.be.duplicate |
c61e0 | 64 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 73 61 6d 65 20 69 73 73 75 65 73 20 74 68 61 74 | d.otherwise.the.same.issues.that |
c6200 | 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 4f 53 50 46 20 77 69 6c 6c 20 6f 63 63 75 72 20 77 69 | .occur.within.OSPF.will.occur.wi |
c6220 | 74 68 69 6e 20 49 53 2d 49 53 20 77 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 73 61 69 64 | thin.IS-IS.when.it.comes.to.said |
c6240 | 20 64 75 70 6c 69 63 61 74 69 6f 6e 2e 00 46 6f 72 20 49 6e 63 6f 6d 69 6e 67 20 61 6e 64 20 49 | .duplication..For.Incoming.and.I |
c6260 | 6d 70 6f 72 74 20 52 6f 75 74 65 2d 6d 61 70 73 20 69 66 20 77 65 20 72 65 63 65 69 76 65 20 61 | mport.Route-maps.if.we.receive.a |
c6280 | 20 76 36 20 67 6c 6f 62 61 6c 20 61 6e 64 20 76 36 20 4c 4c 20 61 64 64 72 65 73 73 20 66 6f 72 | .v6.global.and.v6.LL.address.for |
c62a0 | 20 74 68 65 20 72 6f 75 74 65 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 6f 20 75 73 65 20 74 | .the.route,.then.prefer.to.use.t |
c62c0 | 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 6e 65 78 74 68 6f 70 | he.global.address.as.the.nexthop |
c62e0 | 2e 00 46 6f 72 20 4c 6f 63 61 6c 20 55 73 65 72 73 00 46 6f 72 20 52 41 44 49 55 53 20 75 73 65 | ..For.Local.Users.For.RADIUS.use |
c6300 | 72 73 00 46 6f 72 20 55 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 | rs.For.USB.port.information.plea |
c6320 | 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 | se.refor.to:.:ref:`hardware_usb` |
c6340 | 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 | ..For.a.headstart.you.can.use.th |
c6360 | 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 | e.below.example.on.how.to.build. |
c6380 | 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 | a.bond.with.two.interfaces.from. |
c63a0 | 56 79 4f 53 20 74 6f 20 61 20 4a 75 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 20 73 79 73 74 | VyOS.to.a.Juniper.EX.Switch.syst |
c63c0 | 65 6d 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 | em..For.a.headstart.you.can.use. |
c63e0 | 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c | the.below.example.on.how.to.buil |
c6400 | 64 20 61 20 62 6f 6e 64 2c 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 74 68 20 74 77 6f 20 69 | d.a.bond,port-channel.with.two.i |
c6420 | 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 41 72 75 62 61 2f 48 | nterfaces.from.VyOS.to.a.Aruba/H |
c6440 | 50 20 32 35 31 30 47 20 73 77 69 74 63 68 2e 00 46 6f 72 20 61 20 6c 61 72 67 65 20 61 6d 6f 75 | P.2510G.switch..For.a.large.amou |
c6460 | 6e 74 20 6f 66 20 70 72 69 76 61 74 65 20 6d 61 63 68 69 6e 65 73 20 62 65 68 69 6e 64 20 74 68 | nt.of.private.machines.behind.th |
c6480 | 65 20 4e 41 54 20 79 6f 75 72 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6d 69 67 68 74 20 74 6f | e.NAT.your.address.pool.might.to |
c64a0 | 20 62 65 20 62 69 67 67 65 72 2e 20 55 73 65 20 61 6e 79 20 61 64 64 72 65 73 73 20 69 6e 20 74 | .be.bigger..Use.any.address.in.t |
c64c0 | 68 65 20 72 61 6e 67 65 20 31 30 30 2e 36 34 2e 30 2e 31 30 20 2d 20 31 30 30 2e 36 34 2e 30 2e | he.range.100.64.0.10.-.100.64.0. |
c64e0 | 32 30 20 6f 6e 20 53 4e 41 54 20 72 75 6c 65 20 34 30 20 77 68 65 6e 20 64 6f 69 6e 67 20 74 68 | 20.on.SNAT.rule.40.when.doing.th |
c6500 | 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 00 46 6f 72 20 61 20 73 69 6d 70 6c 65 20 68 6f 6d 65 20 | e.translation.For.a.simple.home. |
c6520 | 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 6a 75 73 74 20 74 68 65 20 49 53 50 27 73 20 65 71 75 | network.using.just.the.ISP's.equ |
c6540 | 69 70 6d 65 6e 74 2c 20 74 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 69 72 61 62 6c | ipment,.this.is.usually.desirabl |
c6560 | 65 2e 20 42 75 74 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 75 6e 20 56 79 4f 53 20 61 | e..But.if.you.want.to.run.VyOS.a |
c6580 | 73 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 61 6e 64 20 72 6f 75 74 65 72 2c 20 74 68 69 73 | s.your.firewall.and.router,.this |
c65a0 | 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 68 61 76 69 6e 67 20 61 20 64 6f 75 62 6c 65 20 | .will.result.in.having.a.double. |
c65c0 | 4e 41 54 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 74 75 70 2e 20 54 68 69 73 20 72 65 73 | NAT.and.firewall.setup..This.res |
c65e0 | 75 6c 74 73 20 69 6e 20 61 20 66 65 77 20 65 78 74 72 61 20 6c 61 79 65 72 73 20 6f 66 20 63 6f | ults.in.a.few.extra.layers.of.co |
c6600 | 6d 70 6c 65 78 69 74 79 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 69 66 20 79 6f 75 20 75 73 | mplexity,.particularly.if.you.us |
c6620 | 65 20 73 6f 6d 65 20 4e 41 54 20 6f 72 20 74 75 6e 6e 65 6c 20 66 65 61 74 75 72 65 73 2e 00 46 | e.some.NAT.or.tunnel.features..F |
c6640 | 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 20 70 72 6f 74 6f 63 6f 6c 73 20 61 73 20 6c | or.connectionless.protocols.as.l |
c6660 | 69 6b 65 20 49 43 4d 50 20 61 6e 64 20 55 44 50 2c 20 61 20 66 6c 6f 77 20 69 73 20 63 6f 6e 73 | ike.ICMP.and.UDP,.a.flow.is.cons |
c6680 | 69 64 65 72 65 64 20 63 6f 6d 70 6c 65 74 65 20 6f 6e 63 65 20 6e 6f 20 6d 6f 72 65 20 70 61 63 | idered.complete.once.no.more.pac |
c66a0 | 6b 65 74 73 20 66 6f 72 20 74 68 69 73 20 66 6c 6f 77 20 61 70 70 65 61 72 20 61 66 74 65 72 20 | kets.for.this.flow.appear.after. |
c66c0 | 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 74 69 6d 65 6f 75 74 2e 00 46 6f 72 20 65 78 61 6d 70 6c | configurable.timeout..For.exampl |
c66e0 | 65 2c 20 69 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 70 6f 6f 72 20 74 69 6d 65 20 73 79 | e,.if.problems.with.poor.time.sy |
c6700 | 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 72 65 20 65 78 70 65 72 69 65 6e 63 65 64 2c 20 74 | nchronization.are.experienced,.t |
c6720 | 68 65 20 77 69 6e 64 6f 77 20 63 61 6e 20 62 65 20 69 6e 63 72 65 61 73 65 64 20 66 72 6f 6d 20 | he.window.can.be.increased.from. |
c6740 | 69 74 73 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 20 33 20 70 65 72 6d 69 74 74 65 64 20 | its.default.size.of.3.permitted. |
c6760 | 63 6f 64 65 73 20 28 6f 6e 65 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 2c 20 74 68 65 20 63 75 | codes.(one.previous.code,.the.cu |
c6780 | 72 72 65 6e 74 20 63 6f 64 65 2c 20 74 68 65 20 6e 65 78 74 20 63 6f 64 65 29 20 74 6f 20 31 37 | rrent.code,.the.next.code).to.17 |
c67a0 | 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 74 68 65 20 38 20 70 72 65 76 69 6f 75 73 | .permitted.codes.(the.8.previous |
c67c0 | 20 63 6f 64 65 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 61 6e 64 20 74 68 | .codes,.the.current.code,.and.th |
c67e0 | 65 20 38 20 6e 65 78 74 20 63 6f 64 65 73 29 2e 20 54 68 69 73 20 77 69 6c 6c 20 70 65 72 6d 69 | e.8.next.codes)..This.will.permi |
c6800 | 74 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 34 20 6d 69 6e | t.for.a.time.skew.of.up.to.4.min |
c6820 | 75 74 65 73 20 62 65 74 77 65 65 6e 20 63 6c 69 65 6e 74 20 61 6e 64 20 73 65 72 76 65 72 2e 00 | utes.between.client.and.server.. |
c6840 | 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 | For.example:.For.firewall.filter |
c6860 | 69 6e 67 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 64 6f 6e | ing,.configuration.should.be.don |
c6880 | 65 20 69 6e 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 | e.in.``set.firewall.[ipv4.|.ipv6 |
c68a0 | 5d 20 2e 2e 2e 60 60 00 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 | ]....``.For.firewall.filtering,. |
c68c0 | 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 | firewall.rules.needs.to.be.creat |
c68e0 | 65 64 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 | ed..Each.rule.is.numbered,.has.a |
c6900 | 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 | n.action.to.apply.if.the.rule.is |
c6920 | 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 | .matched,.and.the.ability.to.spe |
c6940 | 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 2e | cify.multiple.criteria.matchers. |
c6960 | 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c | .Data.packets.go.through.the.rul |
c6980 | 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 73 6f 20 6f 72 64 65 72 20 69 73 20 | es.from.1.-.999999,.so.order.is. |
c69a0 | 63 72 75 63 69 61 6c 2e 20 41 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 | crucial..At.the.first.match.the. |
c69c0 | 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 | action.of.the.rule.will.be.execu |
c69e0 | 74 65 64 2e 00 46 6f 72 20 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 6f 72 20 55 44 50 20 70 | ted..For.fragmented.TCP.or.UDP.p |
c6a00 | 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 6c 20 6f 74 68 65 72 20 49 50 76 34 20 61 6e 64 20 49 50 | ackets.and.all.other.IPv4.and.IP |
c6a20 | 76 36 20 70 72 6f 74 6f 63 6f 6c 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 73 6f 75 72 63 65 20 | v6.protocol.traffic,.the.source. |
c6a40 | 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | and.destination.port.information |
c6a60 | 20 69 73 20 6f 6d 69 74 74 65 64 2e 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c | .is.omitted..For.non-IP.traffic, |
c6a80 | 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 | .the.formula.is.the.same.as.for. |
c6aa0 | 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e | the.layer2.transmit.hash.policy. |
c6ac0 | 00 46 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 6e 20 56 79 | .For.generating.an.OTP.key.in.Vy |
c6ae0 | 4f 53 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 | OS,.you.can.use.the.CLI.command. |
c6b00 | 28 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 29 3a 00 46 6f 72 20 69 6e 62 6f 75 6e 64 20 | (operational.mode):.For.inbound. |
c6b20 | 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 | updates.the.order.of.preference. |
c6b40 | 69 73 3a 00 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 77 69 74 68 20 3a 63 6f 64 65 3a 60 73 65 | is:.For.instance,.with.:code:`se |
c6b60 | 74 20 71 6f 73 20 70 6f 6c 69 63 79 20 73 68 61 70 65 72 20 4d 59 2d 53 48 41 50 45 52 20 63 6c | t.qos.policy.shaper.MY-SHAPER.cl |
c6b80 | 61 73 73 20 33 30 20 73 65 74 2d 64 73 63 70 20 45 46 60 20 79 6f 75 20 77 6f 75 6c 64 20 62 65 | ass.30.set-dscp.EF`.you.would.be |
c6ba0 | 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 44 53 43 50 20 66 69 65 6c 64 20 76 61 6c 75 65 20 | .modifying.the.DSCP.field.value. |
c6bc0 | 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 61 74 20 63 6c 61 73 73 20 74 6f 20 45 78 70 65 | of.packets.in.that.class.to.Expe |
c6be0 | 64 69 74 65 20 46 6f 72 77 61 72 64 69 6e 67 2e 00 46 6f 72 20 69 70 76 34 3a 00 46 6f 72 20 6c | dite.Forwarding..For.ipv4:.For.l |
c6c00 | 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 | atest.releases,.refer.the.`firew |
c6c20 | 61 6c 6c 20 28 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 29 20 3c 68 74 74 70 73 3a 2f 2f | all.(interface-groups).<https:// |
c6c40 | 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 | docs.vyos.io/en/latest/configura |
c6c60 | 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 | tion/firewall/general.html#inter |
c6c80 | 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 | face-groups>`_.main.page.to.conf |
c6ca0 | 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 | igure.zone.based.rules..New.synt |
c6cc0 | 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 | ax.was.introduced.here.:vytask:` |
c6ce0 | 54 35 31 36 30 60 00 46 6f 72 20 6c 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 65 | T5160`.For.latest.releases,.refe |
c6d00 | 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 | r.the.`firewall.<https://docs.vy |
c6d20 | 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 | os.io/en/latest/configuration/fi |
c6d40 | 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 | rewall/general.html#interface-gr |
c6d60 | 6f 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a | oups>`_.main.page.to.configure.z |
c6d80 | 6f 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 | one.based.rules..New.syntax.was. |
c6da0 | 69 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 | introduced.here.:vytask:`T5160`. |
c6dc0 | 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 4d 50 4c 53 | For.more.information.on.how.MPLS |
c6de0 | 20 6c 61 62 65 6c 20 73 77 69 74 63 68 69 6e 67 20 77 6f 72 6b 73 2c 20 70 6c 65 61 73 65 20 67 | .label.switching.works,.please.g |
c6e00 | 6f 20 76 69 73 69 74 20 60 57 69 6b 69 70 65 64 69 61 20 28 4d 50 4c 53 29 60 5f 2e 00 46 6f 72 | o.visit.`Wikipedia.(MPLS)`_..For |
c6e20 | 20 6d 75 6c 74 69 20 68 6f 70 20 73 65 73 73 69 6f 6e 73 20 6f 6e 6c 79 2e 20 43 6f 6e 66 69 67 | .multi.hop.sessions.only..Config |
c6e40 | 75 72 65 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 65 78 70 65 63 74 65 64 20 54 54 4c 20 66 6f 72 | ure.the.minimum.expected.TTL.for |
c6e60 | 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 2e | .an.incoming.BFD.control.packet. |
c6e80 | 00 46 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2c 20 69 74 27 73 20 61 | .For.network.maintenance,.it's.a |
c6ea0 | 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 64 69 72 65 63 74 20 75 73 65 72 73 20 74 6f 20 61 20 | .good.idea.to.direct.users.to.a. |
c6ec0 | 62 61 63 6b 75 70 20 73 65 72 76 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 70 72 69 6d 61 72 | backup.server.so.that.the.primar |
c6ee0 | 79 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 73 61 66 65 6c 79 20 74 61 6b 65 6e 20 6f 75 74 | y.server.can.be.safely.taken.out |
c6f00 | 20 6f 66 20 73 65 72 76 69 63 65 2e 20 49 74 27 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 77 | .of.service..It's.possible.to.sw |
c6f20 | 69 74 63 68 20 79 6f 75 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 74 6f 20 6d 61 69 6e 74 65 | itch.your.PPPoE.server.to.mainte |
c6f40 | 6e 61 6e 63 65 20 6d 6f 64 65 20 77 68 65 72 65 20 69 74 20 6d 61 69 6e 74 61 69 6e 73 20 61 6c | nance.mode.where.it.maintains.al |
c6f60 | 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 | ready.established.connections,.b |
c6f80 | 75 74 20 72 65 66 75 73 65 73 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 | ut.refuses.new.connection.attemp |
c6fa0 | 74 73 2e 00 46 6f 72 20 6f 70 74 69 6d 61 6c 20 73 63 61 6c 61 62 69 6c 69 74 79 2c 20 4d 75 6c | ts..For.optimal.scalability,.Mul |
c6fc0 | 74 69 63 61 73 74 20 73 68 6f 75 6c 64 6e 27 74 20 62 65 20 75 73 65 64 20 61 74 20 61 6c 6c 2c | ticast.shouldn't.be.used.at.all, |
c6fe0 | 20 62 75 74 20 69 6e 73 74 65 61 64 20 75 73 65 20 42 47 50 20 74 6f 20 73 69 67 6e 61 6c 20 61 | .but.instead.use.BGP.to.signal.a |
c7000 | 6c 6c 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 63 65 73 20 62 65 74 77 65 65 6e 20 6c 65 61 | ll.connected.devices.between.lea |
c7020 | 76 65 73 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f | ves..Unfortunately,.VyOS.does.no |
c7040 | 74 20 79 65 74 20 73 75 70 70 6f 72 74 20 74 68 69 73 2e 00 46 6f 72 20 6f 75 74 62 6f 75 6e 64 | t.yet.support.this..For.outbound |
c7060 | 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 | .updates.the.order.of.preference |
c7080 | 20 69 73 3a 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f | .is:.For.reference,.a.descriptio |
c70a0 | 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e | n.can.be.defined.for.every.defin |
c70c0 | 65 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c 20 | ed.custom.chain..For.reference,. |
c70e0 | 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 | a.description.can.be.defined.for |
c7100 | 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c 20 61 6e 64 20 66 6f 72 20 65 76 65 72 | .every.single.rule,.and.for.ever |
c7120 | 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 73 65 63 75 | y.defined.custom.chain..For.secu |
c7140 | 72 69 74 79 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 | rity,.the.listen.address.should. |
c7160 | 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 69 6e 74 65 72 6e 61 6c 2f 74 72 75 73 74 65 64 | only.be.used.on.internal/trusted |
c7180 | 20 6e 65 74 77 6f 72 6b 73 21 00 46 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 70 6f | .networks!.For.serial.via.USB.po |
c71a0 | 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 | rt.information.please.refor.to:. |
c71c0 | 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 73 69 6d 70 6c 69 63 | :ref:`hardware_usb`..For.simplic |
c71e0 | 69 74 79 20 77 65 27 6c 6c 20 61 73 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 70 72 6f 74 6f 63 | ity.we'll.assume.that.the.protoc |
c7200 | 6f 6c 20 69 73 20 47 52 45 2c 20 69 74 27 73 20 6e 6f 74 20 68 61 72 64 20 74 6f 20 67 75 65 73 | ol.is.GRE,.it's.not.hard.to.gues |
c7220 | 73 20 77 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 74 6f 20 6d 61 | s.what.needs.to.be.changed.to.ma |
c7240 | 6b 65 20 69 74 20 77 6f 72 6b 20 77 69 74 68 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 | ke.it.work.with.a.different.prot |
c7260 | 6f 63 6f 6c 2e 20 57 65 20 61 73 73 75 6d 65 20 74 68 61 74 20 49 50 73 65 63 20 77 69 6c 6c 20 | ocol..We.assume.that.IPsec.will. |
c7280 | 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 | use.pre-shared.secret.authentica |
c72a0 | 74 69 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 41 45 53 31 32 38 2f 53 48 41 31 20 66 6f | tion.and.will.use.AES128/SHA1.fo |
c72c0 | 72 20 74 68 65 20 63 69 70 68 65 72 20 61 6e 64 20 68 61 73 68 2e 20 41 64 6a 75 73 74 20 74 68 | r.the.cipher.and.hash..Adjust.th |
c72e0 | 69 73 20 61 73 20 6e 65 63 65 73 73 61 72 79 2e 00 46 6f 72 20 74 68 65 20 3a 72 65 66 3a 60 64 | is.as.necessary..For.the.:ref:`d |
c7300 | 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 36 36 60 20 72 75 6c 65 2c 20 74 68 65 20 64 65 73 74 | estination-nat66`.rule,.the.dest |
c7320 | 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 | ination.address.of.the.packet.is |
c7340 | 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 61 64 64 72 65 73 73 20 63 61 6c 63 75 6c 61 74 | replaced.by.the.address.calculat |
c7360 | 65 64 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 72 | ed.from.the.specified.address.or |
c7380 | 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 | .prefix.in.the.`translation.addr |
c73a0 | 65 73 73 60 20 63 6f 6d 6d 61 6e 64 00 46 6f 72 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 74 72 61 | ess`.command.For.the.OpenVPN.tra |
c73c0 | 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 | ffic.to.pass.through.the.WAN.int |
c73e0 | 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 | erface,.you.must.create.a.firewa |
c7400 | 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 | ll.exception..For.the.WireGuard. |
c7420 | 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 | traffic.to.pass.through.the.WAN. |
c7440 | 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 | interface,.you.must.create.a.fir |
c7460 | 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 61 76 65 72 61 67 65 | ewall.exception..For.the.average |
c7480 | 20 75 73 65 72 20 61 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 20 68 61 73 20 6e 6f 20 61 64 | .user.a.serial.console.has.no.ad |
c74a0 | 76 61 6e 74 61 67 65 20 6f 76 65 72 20 61 20 63 6f 6e 73 6f 6c 65 20 6f 66 66 65 72 65 64 20 62 | vantage.over.a.console.offered.b |
c74c0 | 79 20 61 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 6b 65 79 62 6f 61 72 64 20 61 | y.a.directly.attached.keyboard.a |
c74e0 | 6e 64 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 6d | nd.screen..Serial.consoles.are.m |
c7500 | 75 63 68 20 73 6c 6f 77 65 72 2c 20 74 61 6b 69 6e 67 20 75 70 20 74 6f 20 61 20 73 65 63 6f 6e | uch.slower,.taking.up.to.a.secon |
c7520 | 64 20 74 6f 20 66 69 6c 6c 20 61 20 38 30 20 63 6f 6c 75 6d 6e 20 62 79 20 32 34 20 6c 69 6e 65 | d.to.fill.a.80.column.by.24.line |
c7540 | 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 67 65 6e 65 72 61 6c | .screen..Serial.consoles.general |
c7560 | 6c 79 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 6e 6f 6e 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c | ly.only.support.non-proportional |
c7580 | 20 41 53 43 49 49 20 74 65 78 74 2c 20 77 69 74 68 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 | .ASCII.text,.with.limited.suppor |
c75a0 | 74 20 66 6f 72 20 6c 61 6e 67 75 61 67 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 45 6e 67 6c 69 | t.for.languages.other.than.Engli |
c75c0 | 73 68 2e 00 46 6f 72 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 | sh..For.the.ingress.traffic.of.a |
c75e0 | 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 | n.interface,.there.is.only.one.p |
c7600 | 6f 6c 69 63 79 20 79 6f 75 20 63 61 6e 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 79 2c 20 61 20 | olicy.you.can.directly.apply,.a. |
c7620 | 2a 2a 4c 69 6d 69 74 65 72 2a 2a 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 | **Limiter**.policy..You.cannot.a |
c7640 | 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 64 69 72 65 63 74 6c 79 20 74 | pply.a.shaping.policy.directly.t |
c7660 | 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 79 20 69 6e 74 | o.the.ingress.traffic.of.any.int |
c7680 | 65 72 66 61 63 65 20 62 65 63 61 75 73 65 20 73 68 61 70 69 6e 67 20 6f 6e 6c 79 20 77 6f 72 6b | erface.because.shaping.only.work |
c76a0 | 73 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 46 6f 72 20 74 68 65 20 | s.for.outbound.traffic..For.the. |
c76c0 | 73 61 6b 65 20 6f 66 20 64 65 6d 6f 6e 73 74 72 61 74 69 6f 6e 2c 20 60 65 78 61 6d 70 6c 65 20 | sake.of.demonstration,.`example. |
c76e0 | 23 31 20 69 6e 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | #1.in.the.official.documentation |
c7700 | 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 61 62 62 69 78 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e | .<https://www.zabbix.com/documen |
c7720 | 74 61 74 69 6f 6e 2f 63 75 72 72 65 6e 74 2f 6d 61 6e 75 61 6c 2f 69 6e 73 74 61 6c 6c 61 74 69 | tation/current/manual/installati |
c7740 | 6f 6e 2f 63 6f 6e 74 61 69 6e 65 72 73 3e 60 5f 20 74 6f 20 74 68 65 20 64 65 63 6c 61 72 61 74 | on/containers>`_.to.the.declarat |
c7760 | 69 76 65 20 56 79 4f 53 20 43 4c 49 20 73 79 6e 74 61 78 2e 00 46 6f 72 20 74 72 61 66 66 69 63 | ive.VyOS.CLI.syntax..For.traffic |
c7780 | 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 | .originated.by.the.router,.base. |
c77a0 | 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 | chain.is.**output.filter**:.``se |
c77c0 | 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 6f 75 74 70 75 74 20 | t.firewall.[ipv4.|.ipv6].output. |
c77e0 | 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 | filter....``.For.traffic.that.ne |
c7800 | 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 | eds.to.be.forwared.internally.by |
c7820 | 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a | .the.bridge,.base.chain.is.is.** |
c7840 | 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 | forward**,.and.it's.base.command |
c7860 | 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | .for.filtering.is.``set.firewall |
c7880 | 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 | .bridge.forward.filter....``.For |
c78a0 | 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 | .traffic.that.needs.to.be.forwar |
c78c0 | 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 | ed.internally.by.the.bridge,.bas |
c78e0 | 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 | e.chain.is.is.**forward**,.and.i |
c7900 | 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 | t's.base.command.for.filtering.i |
c7920 | 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 | s.``set.firewall.bridge.forward. |
c7940 | 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 | filter....``,.which.happens.in.s |
c7960 | 74 61 67 65 20 34 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 | tage.4,.highlightened.with.red.c |
c7980 | 6f 6c 6f 72 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f | olor..For.traffic.towards.the.ro |
c79a0 | 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 | uter.itself,.base.chain.is.**inp |
c79c0 | 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 | ut.filter**:.``set.firewall.[ipv |
c79e0 | 34 20 7c 20 69 70 76 36 5d 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 | 4.|.ipv6].input.filter....``.For |
c7a00 | 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 | .traffic.towards.the.router.itse |
c7a20 | 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 2a 2a 2c 20 77 68 69 | lf,.base.chain.is.**input**,.whi |
c7a40 | 6c 65 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 | le.traffic.originated.by.the.rou |
c7a60 | 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 2a 2a 2e 20 41 | ter,.base.chain.is.**output**..A |
c7a80 | 20 6e 65 77 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 | .new.simplified.packet.flow.diag |
c7aa0 | 72 61 6d 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 77 68 69 63 68 20 73 68 6f 77 73 20 74 | ram.is.shown.next,.which.shows.t |
c7ac0 | 68 65 20 70 61 74 68 20 66 6f 72 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 | he.path.for.traffic.destinated.t |
c7ae0 | 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 72 61 66 66 69 63 | o.the.router.itself,.and.traffic |
c7b00 | 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 28 73 74 61 72 74 69 | .generated.by.the.router.(starti |
c7b20 | 6e 67 20 66 72 6f 6d 20 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 3a 00 46 6f 72 20 74 72 | ng.from.circle.number.6):.For.tr |
c7b40 | 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 | ansit.traffic,.which.is.received |
c7b60 | 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 | .by.the.router.and.forwarded,.ba |
c7b80 | 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 2a 2a 3a 20 | se.chain.is.**forward.filter**:. |
c7ba0 | 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 66 6f 72 | ``set.firewall.[ipv4.|.ipv6].for |
c7bc0 | 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 | ward.filter....``.For.transit.tr |
c7be0 | 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 | affic,.which.is.received.by.the. |
c7c00 | 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e | router.and.forwarded,.base.chain |
c7c20 | 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 | .is.**forward**..A.simplified.pa |
c7c40 | 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 | cket.flow.diagram.for.transit.tr |
c7c60 | 61 66 66 69 63 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 46 6f 72 6d 61 6c 6c 79 2c 20 61 | affic.is.shown.next:.Formally,.a |
c7c80 | 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 61 20 70 6f 69 6e 74 | .virtual.link.looks.like.a.point |
c7ca0 | 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 77 6f | -to-point.network.connecting.two |
c7cc0 | 20 41 42 52 20 66 72 6f 6d 20 6f 6e 65 20 61 72 65 61 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 | .ABR.from.one.area.one.of.which. |
c7ce0 | 70 68 79 73 69 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 61 63 6b 62 6f | physically.connected.to.a.backbo |
c7d00 | 6e 65 20 61 72 65 61 2e 20 54 68 69 73 20 70 73 65 75 64 6f 2d 6e 65 74 77 6f 72 6b 20 69 73 20 | ne.area..This.pseudo-network.is. |
c7d20 | 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 6c 6f 6e 67 20 74 6f 20 61 20 62 61 63 6b 62 6f | considered.to.belong.to.a.backbo |
c7d40 | 6e 65 20 61 72 65 61 2e 00 46 6f 72 77 61 72 64 20 69 6e 63 6f 6d 69 6e 67 20 44 4e 53 20 71 75 | ne.area..Forward.incoming.DNS.qu |
c7d60 | 65 72 69 65 73 20 74 6f 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 | eries.to.the.DNS.servers.configu |
c7d80 | 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 60 60 73 79 73 74 65 6d 20 6e 61 6d 65 2d 73 65 72 76 | red.under.the.``system.name-serv |
c7da0 | 65 72 60 60 20 6e 6f 64 65 73 2e 00 46 6f 72 77 61 72 64 20 6d 65 74 68 6f 64 00 46 6f 72 77 61 | er``.nodes..Forward.method.Forwa |
c7dc0 | 72 64 20 72 65 63 65 69 76 65 64 20 71 75 65 72 69 65 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 | rd.received.queries.for.a.partic |
c7de0 | 75 6c 61 72 20 64 6f 6d 61 69 6e 20 28 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 64 6f 6d 61 | ular.domain.(specified.via.`doma |
c7e00 | 69 6e 2d 6e 61 6d 65 60 29 20 74 6f 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 73 65 72 76 65 72 2e | in-name`).to.a.given.nameserver. |
c7e20 | 20 4d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 | .Multiple.nameservers.can.be.spe |
c7e40 | 63 69 66 69 65 64 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 66 65 61 74 75 72 65 | cified..You.can.use.this.feature |
c7e60 | 20 66 6f 72 20 61 20 44 4e 53 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 63 6f 6e 66 69 67 75 | .for.a.DNS.split-horizon.configu |
c7e80 | 72 61 74 69 6f 6e 2e 00 46 6f 75 72 20 70 6f 6c 69 63 69 65 73 20 66 6f 72 20 72 65 66 6f 72 77 | ration..Four.policies.for.reforw |
c7ea0 | 61 72 64 69 6e 67 20 44 48 43 50 20 70 61 63 6b 65 74 73 20 65 78 69 73 74 3a 00 46 72 6f 6d 20 | arding.DHCP.packets.exist:.From. |
c7ec0 | 3a 72 66 63 3a 60 31 39 33 30 60 3a 00 46 72 6f 6d 20 61 20 73 65 63 75 72 69 74 79 20 70 65 72 | :rfc:`1930`:.From.a.security.per |
c7ee0 | 73 70 65 63 74 69 76 65 2c 20 69 74 20 69 73 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 | spective,.it.is.not.recommended. |
c7f00 | 74 6f 20 6c 65 74 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 63 72 65 61 74 65 20 61 6e 64 20 | to.let.a.third.party.create.and. |
c7f20 | 73 68 61 72 65 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 66 6f 72 20 61 20 73 65 63 75 | share.the.private.key.for.a.secu |
c7f40 | 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 59 6f 75 20 73 68 6f 75 6c 64 20 63 72 65 61 74 | red.connection..You.should.creat |
c7f60 | 65 20 74 68 65 20 70 72 69 76 61 74 65 20 70 6f 72 74 69 6f 6e 20 6f 6e 20 79 6f 75 72 20 6f 77 | e.the.private.portion.on.your.ow |
c7f80 | 6e 20 61 6e 64 20 6f 6e 6c 79 20 68 61 6e 64 20 6f 75 74 20 74 68 65 20 70 75 62 6c 69 63 20 6b | n.and.only.hand.out.the.public.k |
c7fa0 | 65 79 2e 20 50 6c 65 61 73 65 20 6b 65 65 70 20 74 68 69 73 20 69 6e 20 6d 69 6e 64 20 77 68 65 | ey..Please.keep.this.in.mind.whe |
c7fc0 | 6e 20 75 73 69 6e 67 20 74 68 69 73 20 63 6f 6e 76 65 6e 69 65 6e 63 65 20 66 65 61 74 75 72 65 | n.using.this.convenience.feature |
c7fe0 | 2e 00 46 72 6f 6d 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 64 65 66 69 6e 65 64 20 69 6e | ..From.main.structure.defined.in |
c8000 | 20 3a 64 6f 63 3a 60 46 69 72 65 77 61 6c 6c 20 4f 76 65 72 76 69 65 77 3c 2f 63 6f 6e 66 69 67 | .:doc:`Firewall.Overview</config |
c8020 | 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 69 6e 64 65 78 3e 60 20 69 6e 20 74 68 69 73 | uration/firewall/index>`.in.this |
c8040 | 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 | .section.you.can.find.detailed.i |
c8060 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 6c 79 20 66 6f 72 20 74 68 65 20 6e 65 78 74 20 70 61 72 | nformation.only.for.the.next.par |
c8080 | 74 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 6c 20 73 74 72 75 63 74 75 72 65 3a 00 46 77 6d 61 | t.of.the.general.structure:.Fwma |
c80a0 | 72 6b 00 47 45 4e 45 56 45 00 47 45 4e 45 56 45 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 | rk.GENEVE.GENEVE.is.designed.to. |
c80c0 | 73 75 70 70 6f 72 74 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 | support.network.virtualization.u |
c80e0 | 73 65 20 63 61 73 65 73 2c 20 77 68 65 72 65 20 74 75 6e 6e 65 6c 73 20 61 72 65 20 74 79 70 69 | se.cases,.where.tunnels.are.typi |
c8100 | 63 61 6c 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 74 6f 20 61 63 74 20 61 73 20 61 20 62 61 | cally.established.to.act.as.a.ba |
c8120 | 63 6b 70 6c 61 6e 65 20 62 65 74 77 65 65 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 73 77 69 74 | ckplane.between.the.virtual.swit |
c8140 | 63 68 65 73 20 72 65 73 69 64 69 6e 67 20 69 6e 20 68 79 70 65 72 76 69 73 6f 72 73 2c 20 70 68 | ches.residing.in.hypervisors,.ph |
c8160 | 79 73 69 63 61 6c 20 73 77 69 74 63 68 65 73 2c 20 6f 72 20 6d 69 64 64 6c 65 62 6f 78 65 73 20 | ysical.switches,.or.middleboxes. |
c8180 | 6f 72 20 6f 74 68 65 72 20 61 70 70 6c 69 61 6e 63 65 73 2e 20 41 6e 20 61 72 62 69 74 72 61 72 | or.other.appliances..An.arbitrar |
c81a0 | 79 20 49 50 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 75 | y.IP.network.can.be.used.as.an.u |
c81c0 | 6e 64 65 72 6c 61 79 20 61 6c 74 68 6f 75 67 68 20 43 6c 6f 73 20 6e 65 74 77 6f 72 6b 73 20 2d | nderlay.although.Clos.networks.- |
c81e0 | 20 41 20 74 65 63 68 6e 69 71 75 65 20 66 6f 72 20 63 6f 6d 70 6f 73 69 6e 67 20 6e 65 74 77 6f | .A.technique.for.composing.netwo |
c8200 | 72 6b 20 66 61 62 72 69 63 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 61 20 73 69 6e 67 6c 65 20 | rk.fabrics.larger.than.a.single. |
c8220 | 73 77 69 74 63 68 20 77 68 69 6c 65 20 6d 61 69 6e 74 61 69 6e 69 6e 67 20 6e 6f 6e 2d 62 6c 6f | switch.while.maintaining.non-blo |
c8240 | 63 6b 69 6e 67 20 62 61 6e 64 77 69 64 74 68 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 69 6f | cking.bandwidth.across.connectio |
c8260 | 6e 20 70 6f 69 6e 74 73 2e 20 45 43 4d 50 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 76 69 64 65 | n.points..ECMP.is.used.to.divide |
c8280 | 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 65 20 6c 69 6e | .traffic.across.the.multiple.lin |
c82a0 | 6b 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 74 68 61 74 20 63 6f 6e 73 74 69 74 75 74 65 20 | ks.and.switches.that.constitute. |
c82c0 | 74 68 65 20 66 61 62 72 69 63 2e 20 53 6f 6d 65 74 69 6d 65 73 20 74 65 72 6d 65 64 20 22 6c 65 | the.fabric..Sometimes.termed."le |
c82e0 | 61 66 20 61 6e 64 20 73 70 69 6e 65 22 20 6f 72 20 22 66 61 74 20 74 72 65 65 22 20 74 6f 70 6f | af.and.spine".or."fat.tree".topo |
c8300 | 6c 6f 67 69 65 73 2e 00 47 45 4e 45 56 45 20 6f 70 74 69 6f 6e 73 00 47 52 45 20 69 73 20 61 20 | logies..GENEVE.options.GRE.is.a. |
c8320 | 77 65 6c 6c 20 64 65 66 69 6e 65 64 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 69 73 20 63 6f | well.defined.standard.that.is.co |
c8340 | 6d 6d 6f 6e 20 69 6e 20 6d 6f 73 74 20 6e 65 74 77 6f 72 6b 73 2e 20 57 68 69 6c 65 20 6e 6f 74 | mmon.in.most.networks..While.not |
c8360 | 20 69 6e 68 65 72 65 6e 74 6c 79 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6e 66 69 67 75 | .inherently.difficult.to.configu |
c8380 | 72 65 20 74 68 65 72 65 20 61 72 65 20 61 20 63 6f 75 70 6c 65 20 6f 66 20 74 68 69 6e 67 73 20 | re.there.are.a.couple.of.things. |
c83a0 | 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 | to.keep.in.mind.to.make.sure.the |
c83c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 65 72 66 6f 72 6d 73 20 61 73 20 65 78 70 65 63 | .configuration.performs.as.expec |
c83e0 | 74 65 64 2e 20 41 20 63 6f 6d 6d 6f 6e 20 63 61 75 73 65 20 66 6f 72 20 47 52 45 20 74 75 6e 6e | ted..A.common.cause.for.GRE.tunn |
c8400 | 65 6c 73 20 74 6f 20 66 61 69 6c 20 74 6f 20 63 6f 6d 65 20 75 70 20 63 6f 72 72 65 63 74 6c 79 | els.to.fail.to.come.up.correctly |
c8420 | 20 69 6e 63 6c 75 64 65 20 41 43 4c 20 6f 72 20 46 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 | .include.ACL.or.Firewall.configu |
c8440 | 72 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 64 69 73 63 61 72 64 69 6e 67 20 49 50 20 70 | rations.that.are.discarding.IP.p |
c8460 | 72 6f 74 6f 63 6f 6c 20 34 37 20 6f 72 20 62 6c 6f 63 6b 69 6e 67 20 79 6f 75 72 20 73 6f 75 72 | rotocol.47.or.blocking.your.sour |
c8480 | 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 74 72 61 66 66 69 63 2e 00 47 52 45 20 69 73 20 61 | ce/destination.traffic..GRE.is.a |
c84a0 | 6c 73 6f 20 74 68 65 20 6f 6e 6c 79 20 63 6c 61 73 73 69 63 20 70 72 6f 74 6f 63 6f 6c 20 74 68 | lso.the.only.classic.protocol.th |
c84c0 | 61 74 20 61 6c 6c 6f 77 73 20 63 72 65 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e | at.allows.creating.multiple.tunn |
c84e0 | 65 6c 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 | els.with.the.same.source.and.des |
c8500 | 74 69 6e 61 74 69 6f 6e 20 64 75 65 20 74 6f 20 69 74 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 | tination.due.to.its.support.for. |
c8520 | 74 75 6e 6e 65 6c 20 6b 65 79 73 2e 20 44 65 73 70 69 74 65 20 69 74 73 20 6e 61 6d 65 2c 20 74 | tunnel.keys..Despite.its.name,.t |
c8540 | 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 6e 6f 74 68 69 6e 67 20 74 6f 20 64 6f 20 77 69 | his.feature.has.nothing.to.do.wi |
c8560 | 74 68 20 73 65 63 75 72 69 74 79 3a 20 69 74 27 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e | th.security:.it's.simply.an.iden |
c8580 | 74 69 66 69 65 72 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 72 6f 75 74 65 72 73 20 74 6f 20 74 65 | tifier.that.allows.routers.to.te |
c85a0 | 6c 6c 20 6f 6e 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 2e 00 47 52 45 20 | ll.one.tunnel.from.another..GRE. |
c85c0 | 69 73 20 6f 66 74 65 6e 20 73 65 65 6e 20 61 73 20 61 20 6f 6e 65 20 73 69 7a 65 20 66 69 74 73 | is.often.seen.as.a.one.size.fits |
c85e0 | 20 61 6c 6c 20 73 6f 6c 75 74 69 6f 6e 20 77 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 63 | .all.solution.when.it.comes.to.c |
c8600 | 6c 61 73 73 69 63 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 61 | lassic.IP.tunneling.protocols,.a |
c8620 | 6e 64 20 66 6f 72 20 61 20 67 6f 6f 64 20 72 65 61 73 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 | nd.for.a.good.reason..However,.t |
c8640 | 68 65 72 65 20 61 72 65 20 6d 6f 72 65 20 73 70 65 63 69 61 6c 69 7a 65 64 20 6f 70 74 69 6f 6e | here.are.more.specialized.option |
c8660 | 73 2c 20 61 6e 64 20 6d 61 6e 79 20 6f 66 20 74 68 65 6d 20 61 72 65 20 73 75 70 70 6f 72 74 65 | s,.and.many.of.them.are.supporte |
c8680 | 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 72 61 74 68 65 72 | d.by.VyOS..There.are.also.rather |
c86a0 | 20 6f 62 73 63 75 72 65 20 47 52 45 20 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 | .obscure.GRE.options.that.can.be |
c86c0 | 20 75 73 65 66 75 6c 2e 00 47 52 45 2f 49 50 49 50 2f 53 49 54 20 61 6e 64 20 49 50 73 65 63 20 | .useful..GRE/IPIP/SIT.and.IPsec. |
c86e0 | 61 72 65 20 77 69 64 65 6c 79 20 61 63 63 65 70 74 65 64 20 73 74 61 6e 64 61 72 64 73 2c 20 77 | are.widely.accepted.standards,.w |
c8700 | 68 69 63 68 20 6d 61 6b 65 20 74 68 69 73 20 73 63 68 65 6d 65 20 65 61 73 79 20 74 6f 20 69 6d | hich.make.this.scheme.easy.to.im |
c8720 | 70 6c 65 6d 65 6e 74 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 76 69 72 74 75 61 6c | plement.between.VyOS.and.virtual |
c8740 | 6c 79 20 61 6e 79 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 47 52 45 54 41 50 00 47 65 6e 65 | ly.any.other.router..GRETAP.Gene |
c8760 | 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 | arate.a.new.OpenVPN.shared.secre |
c8780 | 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 64 20 69 73 20 74 68 65 20 6f | t..The.generated.secred.is.the.o |
c87a0 | 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 61 72 61 74 65 20 | utput.to.the.console..Genearate. |
c87c0 | 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 | a.new.OpenVPN.shared.secret..The |
c87e0 | 20 67 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 74 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 | .generated.secret.is.the.output. |
c8800 | 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 72 61 6c 00 47 65 6e 65 72 61 6c 20 | to.the.console..General.General. |
c8820 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 65 6e 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 66 | Configuration.General.commands.f |
c8840 | 6f 72 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 63 6f 75 6e 74 | or.firewall.configuration,.count |
c8860 | 65 72 20 61 6e 64 20 73 74 61 74 69 73 63 69 74 73 3a 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 | er.and.statiscits:.Generate.:abb |
c8880 | 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f | r:`MKA.(MACsec.Key.Agreement.pro |
c88a0 | 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 20 31 32 38 20 6f 72 20 32 35 36 20 62 69 74 73 2e | tocol)`.CAK.key.128.or.256.bits. |
c88c0 | 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 | .Generate.:abbr:`MKA.(MACsec.Key |
c88e0 | 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 2e 00 47 | .Agreement.protocol)`.CAK.key..G |
c8900 | 65 6e 65 72 61 74 65 20 4b 65 79 70 61 69 72 00 47 65 6e 65 72 61 74 65 20 61 20 57 69 72 65 47 | enerate.Keypair.Generate.a.WireG |
c8920 | 75 61 72 64 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 75 73 65 64 20 66 6f 72 20 | uard.pre-shared.secret.used.for. |
c8940 | 70 65 65 72 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 2e 00 47 65 6e 65 72 61 74 65 20 61 | peers.to.communicate..Generate.a |
c8960 | 20 6e 65 77 20 57 69 72 65 47 75 61 72 64 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 | .new.WireGuard.public/private.ke |
c8980 | 79 20 70 6f 72 74 69 6f 6e 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 72 65 73 75 6c 74 20 | y.portion.and.output.the.result. |
c89a0 | 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 73 | to.the.console..Generate.a.new.s |
c89c0 | 65 74 20 6f 66 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 29 | et.of.:abbr:`DH.(Diffie-Hellman) |
c89e0 | 60 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 65 20 6b 65 79 20 73 69 7a 65 20 69 73 20 72 65 | `.parameters..The.key.size.is.re |
c8a00 | 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 43 4c 49 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 | quested.by.the.CLI.and.defaults. |
c8a20 | 74 6f 20 32 30 34 38 20 62 69 74 2e 00 47 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 | to.2048.bit..Generate.the.config |
c8a40 | 75 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 61 64 64 20 61 20 70 | uration.mode.commands.to.add.a.p |
c8a60 | 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 3a 72 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 | ublic.key.for.:ref:`ssh_key_base |
c8a80 | 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 2e 20 60 60 3c 6c 6f 63 61 74 69 6f 6e 3e 60 | d_authentication`..``<location>` |
c8aa0 | 60 20 63 61 6e 20 62 65 20 61 20 6c 6f 63 61 6c 20 70 61 74 68 20 6f 72 20 61 20 55 52 4c 20 70 | `.can.be.a.local.path.or.a.URL.p |
c8ac0 | 6f 69 6e 74 69 6e 67 20 61 74 20 61 20 72 65 6d 6f 74 65 20 66 69 6c 65 2e 00 47 65 6e 65 72 61 | ointing.at.a.remote.file..Genera |
c8ae0 | 74 65 73 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 | tes.a.keypair,.which.includes.th |
c8b00 | 65 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2c 20 61 6e 64 20 | e.public.and.private.parts,.and. |
c8b20 | 62 75 69 6c 64 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 74 6f | build.a.configuration.command.to |
c8b40 | 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 | .install.this.key.to.``interface |
c8b60 | 60 60 2e 00 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f | ``..Generic.Routing.Encapsulatio |
c8b80 | 6e 20 28 47 52 45 29 00 47 65 6e 65 76 65 20 48 65 61 64 65 72 3a 00 47 65 74 20 61 20 6c 69 73 | n.(GRE).Geneve.Header:.Get.a.lis |
c8ba0 | 74 20 6f 66 20 61 6c 6c 20 77 69 72 65 67 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 00 47 65 | t.of.all.wireguard.interfaces.Ge |
c8bc0 | 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 76 65 72 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f | t.an.overview.over.the.encryptio |
c8be0 | 6e 20 63 6f 75 6e 74 65 72 73 2e 00 47 65 74 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 | n.counters..Get.detailed.informa |
c8c00 | 74 69 6f 6e 20 61 62 6f 75 74 20 4c 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 47 65 74 20 74 | tion.about.LLDP.neighbors..Get.t |
c8c20 | 68 65 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 62 6f 74 68 20 | he.DHCPv6-PD.prefixes.from.both. |
c8c40 | 72 6f 75 74 65 72 73 3a 00 47 65 74 74 69 6e 67 20 73 74 61 72 74 65 64 00 47 69 76 65 6e 20 74 | routers:.Getting.started.Given.t |
c8c60 | 68 65 20 66 61 63 74 20 74 68 61 74 20 6f 70 65 6e 20 44 4e 53 20 72 65 63 75 72 73 6f 72 73 20 | he.fact.that.open.DNS.recursors. |
c8c80 | 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 20 44 44 6f 53 20 61 6d 70 6c 69 66 69 63 61 74 | could.be.used.on.DDoS.amplificat |
c8ca0 | 69 6f 6e 20 61 74 74 61 63 6b 73 2c 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 | ion.attacks,.you.must.configure. |
c8cc0 | 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 68 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 | the.networks.which.are.allowed.t |
c8ce0 | 6f 20 75 73 65 20 74 68 69 73 20 72 65 63 75 72 73 6f 72 2e 20 41 20 6e 65 74 77 6f 72 6b 20 6f | o.use.this.recursor..A.network.o |
c8d00 | 66 20 60 60 30 2e 30 2e 30 2e 30 2f 30 60 60 20 6f 72 20 60 60 3a 3a 2f 30 60 60 20 77 6f 75 6c | f.``0.0.0.0/0``.or.``::/0``.woul |
c8d20 | 64 20 61 6c 6c 6f 77 20 61 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 6e 65 74 77 6f 72 | d.allow.all.IPv4.and.IPv6.networ |
c8d40 | 6b 73 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 69 73 | ks.to.query.this.server..This.is |
c8d60 | 20 67 65 6e 65 72 61 6c 6c 79 20 61 20 62 61 64 20 69 64 65 61 2e 00 47 69 76 65 6e 20 74 68 65 | .generally.a.bad.idea..Given.the |
c8d80 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 65 20 68 61 76 65 20 6f 6e 65 20 56 | .following.example.we.have.one.V |
c8da0 | 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 73 65 72 | yOS.router.acting.as.OpenVPN.ser |
c8dc0 | 76 65 72 20 61 6e 64 20 61 6e 6f 74 68 65 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 | ver.and.another.VyOS.router.acti |
c8de0 | 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 73 65 72 76 65 72 | ng.as.OpenVPN.client..The.server |
c8e00 | 20 61 6c 73 6f 20 70 75 73 68 65 73 20 61 20 73 74 61 74 69 63 20 63 6c 69 65 6e 74 20 49 50 20 | .also.pushes.a.static.client.IP. |
c8e20 | 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 52 | address.to.the.OpenVPN.client..R |
c8e40 | 65 6d 65 6d 62 65 72 2c 20 63 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 | emember,.clients.are.identified. |
c8e60 | 75 73 69 6e 67 20 74 68 65 69 72 20 43 4e 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 74 68 65 20 | using.their.CN.attribute.in.the. |
c8e80 | 53 53 4c 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 47 6c 6f 61 62 61 6c 00 47 6c 6f 62 61 6c 20 | SSL.certificate..Gloabal.Global. |
c8ea0 | 41 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 00 | Advanced.options.Global.Options. |
c8ec0 | 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 | Global.Options.Firewall.Configur |
c8ee0 | 61 74 69 6f 6e 00 47 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 70 61 72 61 | ation.Global.options.Global.para |
c8f00 | 6d 65 74 65 72 73 00 47 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 73 00 47 72 61 63 65 66 75 6c 20 | meters.Global.settings.Graceful. |
c8f20 | 52 65 73 74 61 72 74 00 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 00 47 72 6f 75 70 73 00 47 72 | Restart.Gratuitous.ARP.Groups.Gr |
c8f40 | 6f 75 70 73 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2e 20 | oups.need.to.have.unique.names.. |
c8f60 | 45 76 65 6e 20 74 68 6f 75 67 68 20 73 6f 6d 65 20 63 6f 6e 74 61 69 6e 20 49 50 76 34 20 61 64 | Even.though.some.contain.IPv4.ad |
c8f80 | 64 72 65 73 73 65 73 20 61 6e 64 20 6f 74 68 65 72 73 20 63 6f 6e 74 61 69 6e 20 49 50 76 36 20 | dresses.and.others.contain.IPv6. |
c8fa0 | 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 79 20 73 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 68 61 | addresses,.they.still.need.to.ha |
c8fc0 | 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2c 20 73 6f 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 | ve.unique.names,.so.you.may.want |
c8fe0 | 20 74 6f 20 61 70 70 65 6e 64 20 22 2d 76 34 22 20 6f 72 20 22 2d 76 36 22 20 74 6f 20 79 6f 75 | .to.append."-v4".or."-v6".to.you |
c9000 | 72 20 67 72 6f 75 70 20 6e 61 6d 65 73 2e 00 48 51 27 73 20 72 6f 75 74 65 72 20 72 65 71 75 69 | r.group.names..HQ's.router.requi |
c9020 | 72 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 65 70 73 20 74 6f 20 67 65 6e 65 72 | res.the.following.steps.to.gener |
c9040 | 61 74 65 20 63 72 79 70 74 6f 20 6d 61 74 65 72 69 61 6c 73 20 66 6f 72 20 74 68 65 20 42 72 61 | ate.crypto.materials.for.the.Bra |
c9060 | 6e 63 68 20 31 3a 00 48 54 20 28 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 | nch.1:.HT.(High.Throughput).capa |
c9080 | 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 6e 29 00 48 54 54 50 20 41 50 49 00 48 54 54 50 | bilities.(802.11n).HTTP.API.HTTP |
c90a0 | 20 62 61 73 65 64 20 73 65 72 76 69 63 65 73 00 48 54 54 50 20 62 61 73 69 63 20 61 75 74 68 65 | .based.services.HTTP.basic.authe |
c90c0 | 6e 74 69 63 61 74 69 6f 6e 20 75 73 65 72 6e 61 6d 65 00 48 54 54 50 20 63 6c 69 65 6e 74 00 48 | ntication.username.HTTP.client.H |
c90e0 | 54 54 50 2d 41 50 49 00 48 61 69 72 70 69 6e 20 4e 41 54 2f 4e 41 54 20 52 65 66 6c 65 63 74 69 | TTP-API.Hairpin.NAT/NAT.Reflecti |
c9100 | 6f 6e 00 48 61 6e 64 20 6f 75 74 20 70 72 65 66 69 78 65 73 20 6f 66 20 73 69 7a 65 20 60 3c 6c | on.Hand.out.prefixes.of.size.`<l |
c9120 | 65 6e 67 74 68 3e 60 20 74 6f 20 63 6c 69 65 6e 74 73 20 69 6e 20 73 75 62 6e 65 74 20 60 3c 70 | ength>`.to.clients.in.subnet.`<p |
c9140 | 72 65 66 69 78 3e 60 20 77 68 65 6e 20 74 68 65 79 20 72 65 71 75 65 73 74 20 66 6f 72 20 70 72 | refix>`.when.they.request.for.pr |
c9160 | 65 66 69 78 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 48 61 6e 64 6c 69 6e 67 20 61 6e 64 20 6d 6f | efix.delegation..Handling.and.mo |
c9180 | 6e 69 74 6f 72 69 6e 67 00 48 61 76 69 6e 67 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 74 68 65 | nitoring.Having.control.over.the |
c91a0 | 20 6d 61 74 63 68 69 6e 67 20 6f 66 20 49 4e 56 41 4c 49 44 20 73 74 61 74 65 20 74 72 61 66 66 | .matching.of.INVALID.state.traff |
c91c0 | 69 63 2c 20 65 2e 67 2e 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 65 6c 65 63 74 69 76 | ic,.e.g..the.ability.to.selectiv |
c91e0 | 65 6c 79 20 6c 6f 67 2c 20 69 73 20 61 6e 20 69 6d 70 6f 72 74 61 6e 74 20 74 72 6f 75 62 6c 65 | ely.log,.is.an.important.trouble |
c9200 | 73 68 6f 6f 74 69 6e 67 20 74 6f 6f 6c 20 66 6f 72 20 6f 62 73 65 72 76 69 6e 67 20 62 72 6f 6b | shooting.tool.for.observing.brok |
c9220 | 65 6e 20 70 72 6f 74 6f 63 6f 6c 20 62 65 68 61 76 69 6f 72 2e 20 46 6f 72 20 74 68 69 73 20 72 | en.protocol.behavior..For.this.r |
c9240 | 65 61 73 6f 6e 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 67 6c 6f 62 61 6c 6c 79 20 64 72 | eason,.VyOS.does.not.globally.dr |
c9260 | 6f 70 20 69 6e 76 61 6c 69 64 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 69 6e 73 74 65 61 | op.invalid.state.traffic,.instea |
c9280 | 64 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f 20 6d 61 6b 65 20 | d.allowing.the.operator.to.make. |
c92a0 | 74 68 65 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 74 68 65 20 74 72 61 | the.determination.on.how.the.tra |
c92c0 | 66 66 69 63 20 69 73 20 68 61 6e 64 6c 65 64 2e 00 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 | ffic.is.handled..Health.check.sc |
c92e0 | 72 69 70 74 73 00 48 65 61 6c 74 68 20 63 68 65 63 6b 73 00 48 65 61 6c 74 68 2d 63 68 65 63 6b | ripts.Health.checks.Health-check |
c9300 | 00 48 65 72 65 20 61 72 65 20 73 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 66 6f 72 20 61 70 70 6c | .Here.are.some.examples.for.appl |
c9320 | 79 69 6e 67 20 61 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 | ying.a.rule-set.to.an.interface. |
c9340 | 48 65 72 65 20 69 73 20 61 20 73 65 63 6f 6e 64 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 64 75 | Here.is.a.second.example.of.a.du |
c9360 | 61 6c 2d 73 74 61 63 6b 20 74 75 6e 6e 65 6c 20 6f 76 65 72 20 49 50 76 36 20 62 65 74 77 65 65 | al-stack.tunnel.over.IPv6.betwee |
c9380 | 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 20 61 20 4c 69 6e 75 78 20 68 6f 73 74 | n.a.VyOS.router.and.a.Linux.host |
c93a0 | 20 75 73 69 6e 67 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 2e 00 48 65 72 65 20 69 73 | .using.systemd-networkd..Here.is |
c93c0 | 20 61 6e 20 65 78 61 6d 70 6c 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 | .an.example.:abbr:`NET.(Network. |
c93e0 | 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 76 61 6c 75 65 3a 00 48 65 72 65 20 69 73 20 61 6e | Entity.Title)`.value:.Here.is.an |
c9400 | 20 65 78 61 6d 70 6c 65 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 72 | .example.route-map.to.apply.to.r |
c9420 | 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 74 20 69 6d 70 6f 72 74 2e 20 49 6e 20 74 68 69 73 | outes.learned.at.import..In.this |
c9440 | 20 66 69 6c 74 65 72 20 77 65 20 72 65 6a 65 63 74 20 70 72 65 66 69 78 65 73 20 77 69 74 68 20 | .filter.we.reject.prefixes.with. |
c9460 | 74 68 65 20 73 74 61 74 65 20 60 69 6e 76 61 6c 69 64 60 2c 20 61 6e 64 20 73 65 74 20 61 20 68 | the.state.`invalid`,.and.set.a.h |
c9480 | 69 67 68 65 72 20 60 6c 6f 63 61 6c 2d 70 72 65 66 65 72 65 6e 63 65 60 20 69 66 20 74 68 65 20 | igher.`local-preference`.if.the. |
c94a0 | 70 72 65 66 69 78 20 69 73 20 52 50 4b 49 20 60 76 61 6c 69 64 60 20 72 61 74 68 65 72 20 74 68 | prefix.is.RPKI.`valid`.rather.th |
c94c0 | 61 6e 20 6d 65 72 65 6c 79 20 60 6e 6f 74 66 6f 75 6e 64 60 2e 00 48 65 72 65 20 69 73 20 61 6e | an.merely.`notfound`..Here.is.an |
c94e0 | 20 65 78 61 6d 70 6c 65 20 77 65 72 65 20 6d 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 61 72 | .example.were.multiple.groups.ar |
c9500 | 65 20 63 72 65 61 74 65 64 3a 00 48 65 72 65 20 69 73 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 | e.created:.Here.is.the.routing.t |
c9520 | 61 62 6c 65 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 | ables.showing.the.MPLS.segment.r |
c9540 | 6f 75 74 69 6e 67 20 6c 61 62 65 6c 20 6f 70 65 72 61 74 69 6f 6e 73 3a 00 48 65 72 65 20 77 65 | outing.label.operations:.Here.we |
c9560 | 20 70 72 6f 76 69 64 65 20 74 77 6f 20 65 78 61 6d 70 6c 65 73 20 6f 6e 20 68 6f 77 20 74 6f 20 | .provide.two.examples.on.how.to. |
c9580 | 61 70 70 6c 79 20 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 2e 00 48 65 72 65 27 73 20 61 | apply.NAT.Load.Balance..Here's.a |
c95a0 | 6e 20 65 78 74 72 61 63 74 20 6f 66 20 61 20 73 69 6d 70 6c 65 20 31 2d 74 6f 2d 31 20 4e 41 54 | n.extract.of.a.simple.1-to-1.NAT |
c95c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 74 68 20 6f 6e 65 20 69 6e 74 65 72 6e 61 6c | .configuration.with.one.internal |
c95e0 | 20 61 6e 64 20 6f 6e 65 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 3a 00 48 65 72 | .and.one.external.interface:.Her |
c9600 | 65 27 73 20 6f 6e 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 20 65 6e 76 | e's.one.example.of.a.network.env |
c9620 | 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 61 6e 20 41 53 50 2e 20 54 68 65 20 41 53 50 20 72 65 71 | ironment.for.an.ASP..The.ASP.req |
c9640 | 75 65 73 74 73 20 74 68 61 74 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 | uests.that.all.connections.from. |
c9660 | 74 68 69 73 20 63 6f 6d 70 61 6e 79 20 73 68 6f 75 6c 64 20 63 6f 6d 65 20 66 72 6f 6d 20 31 37 | this.company.should.come.from.17 |
c9680 | 32 2e 32 39 2e 34 31 2e 38 39 20 2d 20 61 6e 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 | 2.29.41.89.-.an.address.that.is. |
c96a0 | 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 41 53 50 20 61 6e 64 20 6e 6f 74 20 69 6e 20 75 | assigned.by.the.ASP.and.not.in.u |
c96c0 | 73 65 20 61 74 20 74 68 65 20 63 75 73 74 6f 6d 65 72 20 73 69 74 65 2e 00 48 65 72 65 27 73 20 | se.at.the.customer.site..Here's. |
c96e0 | 74 68 65 20 49 50 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 70 6f 70 75 6c 61 74 65 64 | the.IP.routes.that.are.populated |
c9700 | 2e 20 4a 75 73 74 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 3a 00 48 65 72 65 27 73 20 74 68 65 20 | ..Just.the.loopback:.Here's.the. |
c9720 | 6e 65 69 67 68 62 6f 72 73 20 75 70 3a 00 48 65 72 65 27 73 20 74 68 65 20 72 6f 75 74 65 73 3a | neighbors.up:.Here's.the.routes: |
c9740 | 00 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 63 61 6c 6c 20 69 74 20 53 6f 75 72 63 65 2d | .Hewlett-Packard.call.it.Source- |
c9760 | 50 6f 72 74 20 66 69 6c 74 65 72 69 6e 67 20 6f 72 20 70 6f 72 74 2d 69 73 6f 6c 61 74 69 6f 6e | Port.filtering.or.port-isolation |
c9780 | 00 48 69 67 68 00 48 69 67 68 20 61 76 61 69 6c 61 62 69 6c 69 74 79 00 48 6f 6d 65 20 55 73 65 | .High.High.availability.Home.Use |
c97a0 | 72 73 00 48 6f 70 20 63 6f 75 6e 74 20 66 69 65 6c 64 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 | rs.Hop.count.field.of.the.outgoi |
c97c0 | 6e 67 20 52 41 20 70 61 63 6b 65 74 73 00 48 6f 73 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 48 | ng.RA.packets.Host.Information.H |
c97e0 | 6f 73 74 20 6e 61 6d 65 00 48 6f 73 74 20 73 70 65 63 69 66 69 63 20 6d 61 70 70 69 6e 67 20 73 | ost.name.Host.specific.mapping.s |
c9800 | 68 61 6c 6c 20 62 65 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 31 60 60 00 48 6f 73 74 6e 61 | hall.be.named.``client1``.Hostna |
c9820 | 6d 65 00 48 6f 77 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 | me.How.an.IP.address.is.assigned |
c9840 | 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 3a 72 65 66 3a 60 65 74 68 65 72 6e | .to.an.interface.in.:ref:`ethern |
c9860 | 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 73 68 6f 77 | et-interface`..This.section.show |
c9880 | 73 20 68 6f 77 20 74 6f 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 20 61 6e 20 49 50 20 61 64 | s.how.to.statically.map.an.IP.ad |
c98a0 | 64 72 65 73 73 20 74 6f 20 61 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 20 6c 6f 63 61 6c 20 28 6d | dress.to.a.hostname.for.local.(m |
c98c0 | 65 61 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 29 20 6e 61 | eaning.on.this.VyOS.instance).na |
c98e0 | 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 56 79 4f 53 20 | me.resolution..This.is.the.VyOS. |
c9900 | 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 60 2f 65 74 63 2f 68 6f 73 74 73 60 20 66 69 6c 65 20 | equivalent.to.`/etc/hosts`.file. |
c9920 | 65 6e 74 72 69 65 73 2e 00 48 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 45 76 65 6e 74 20 | entries..How.to.configure.Event. |
c9940 | 48 61 6e 64 6c 65 72 00 48 6f 77 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f 72 6b 00 48 6f 77 65 | Handler.How.to.make.it.work.Howe |
c9960 | 76 65 72 2c 20 6e 6f 77 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6b 65 20 49 50 73 65 63 20 | ver,.now.you.need.to.make.IPsec. |
c9980 | 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 | work.with.dynamic.address.on.one |
c99a0 | 20 73 69 64 65 2e 20 54 68 65 20 74 72 69 63 6b 79 20 70 61 72 74 20 69 73 20 74 68 61 74 20 70 | .side..The.tricky.part.is.that.p |
c99c0 | 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | re-shared.secret.authentication. |
c99e0 | 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 | doesn't.work.with.dynamic.addres |
c9a00 | 73 2c 20 73 6f 20 77 65 27 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 | s,.so.we'll.have.to.use.RSA.keys |
c9a20 | 2e 00 48 6f 77 65 76 65 72 2c 20 73 69 6e 63 65 20 56 79 4f 53 20 31 2e 34 2c 20 69 74 20 69 73 | ..However,.since.VyOS.1.4,.it.is |
c9a40 | 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 76 65 72 69 66 79 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 | .possible.to.verify.self-signed. |
c9a60 | 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 66 | certificates.using.certificate.f |
c9a80 | 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 70 6c 69 74 2d 74 75 6e 6e | ingerprints..However,.split-tunn |
c9aa0 | 65 6c 69 6e 67 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 73 70 65 63 69 66 79 | eling.can.be.achieved.by.specify |
c9ac0 | 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 75 62 6e 65 74 73 2e 20 54 68 69 73 20 65 6e 73 | ing.the.remote.subnets..This.ens |
c9ae0 | 75 72 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 | ures.that.only.traffic.destined. |
c9b00 | 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 69 73 20 73 65 6e 74 20 6f 76 65 72 | for.the.remote.site.is.sent.over |
c9b20 | 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 69 | .the.tunnel..All.other.traffic.i |
c9b40 | 73 20 75 6e 61 66 66 65 63 74 65 64 2e 00 48 75 61 77 65 69 20 4d 45 39 30 39 73 2d 31 32 30 20 | s.unaffected..Huawei.ME909s-120. |
c9b60 | 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 61 77 65 69 20 4d 45 39 30 39 | miniPCIe.card.(LTE).Huawei.ME909 |
c9b80 | 75 2d 35 32 31 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 62 00 49 45 | u-521.miniPCIe.card.(LTE).Hub.IE |
c9ba0 | 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 | EE.802.1X/MACsec.pre-shared.key. |
c9bc0 | 6d 6f 64 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 4d 41 | mode..This.allows.configuring.MA |
c9be0 | 43 73 65 63 20 77 69 74 68 20 61 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 75 73 69 6e 67 | Csec.with.a.pre-shared.key.using |
c9c00 | 20 61 20 3a 61 62 62 72 3a 60 43 41 4b 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 | .a.:abbr:`CAK.(MACsec.connectivi |
c9c20 | 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6b 65 79 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 | ty.association.key)`.and.:abbr:` |
c9c40 | 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 | CKN.(MACsec.connectivity.associa |
c9c60 | 74 69 6f 6e 20 6e 61 6d 65 29 60 20 70 61 69 72 2e 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 | tion.name)`.pair..IEEE.802.1X/MA |
c9c80 | 43 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 77 69 6e 64 6f 77 2e 20 54 | Csec.replay.protection.window..T |
c9ca0 | 68 69 73 20 64 65 74 65 72 6d 69 6e 65 73 20 61 20 77 69 6e 64 6f 77 20 69 6e 20 77 68 69 63 68 | his.determines.a.window.in.which |
c9cc0 | 20 72 65 70 6c 61 79 20 69 73 20 74 6f 6c 65 72 61 74 65 64 2c 20 74 6f 20 61 6c 6c 6f 77 20 72 | .replay.is.tolerated,.to.allow.r |
c9ce0 | 65 63 65 69 70 74 20 6f 66 20 66 72 61 6d 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 | eceipt.of.frames.that.have.been. |
c9d00 | 6d 69 73 6f 72 64 65 72 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 49 45 45 45 20 | misordered.by.the.network..IEEE. |
c9d20 | 38 30 32 2e 31 61 64 5f 20 77 61 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b | 802.1ad_.was.an.Ethernet.network |
c9d40 | 69 6e 67 20 73 74 61 6e 64 61 72 64 20 69 6e 66 6f 72 6d 61 6c 6c 79 20 6b 6e 6f 77 6e 20 61 73 | ing.standard.informally.known.as |
c9d60 | 20 51 69 6e 51 20 61 73 20 61 6e 20 61 6d 65 6e 64 6d 65 6e 74 20 74 6f 20 49 45 45 45 20 73 74 | .QinQ.as.an.amendment.to.IEEE.st |
c9d80 | 61 6e 64 61 72 64 20 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 | andard.802.1q.VLAN.interfaces.as |
c9da0 | 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 38 30 32 2e 31 61 64 20 77 61 73 20 69 6e | .described.above..802.1ad.was.in |
c9dc0 | 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 68 65 20 62 61 73 65 20 38 30 32 2e 31 71 5f | corporated.into.the.base.802.1q_ |
c9de0 | 20 73 74 61 6e 64 61 72 64 20 69 6e 20 32 30 31 31 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 | .standard.in.2011..The.technique |
c9e00 | 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 70 72 6f 76 69 64 65 72 20 62 72 69 64 67 | .is.also.known.as.provider.bridg |
c9e20 | 69 6e 67 2c 20 53 74 61 63 6b 65 64 20 56 4c 41 4e 73 2c 20 6f 72 20 73 69 6d 70 6c 79 20 51 69 | ing,.Stacked.VLANs,.or.simply.Qi |
c9e40 | 6e 51 20 6f 72 20 51 2d 69 6e 2d 51 2e 20 22 51 2d 69 6e 2d 51 22 20 63 61 6e 20 66 6f 72 20 73 | nQ.or.Q-in-Q.."Q-in-Q".can.for.s |
c9e60 | 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 73 20 61 70 70 6c 79 20 74 6f 20 43 2d 74 61 67 20 | upported.devices.apply.to.C-tag. |
c9e80 | 73 74 61 63 6b 69 6e 67 20 6f 6e 20 43 2d 74 61 67 20 28 45 74 68 65 72 6e 65 74 20 54 79 70 65 | stacking.on.C-tag.(Ethernet.Type |
c9ea0 | 20 3d 20 30 78 38 31 30 30 29 2e 00 49 45 45 45 20 38 30 32 2e 31 71 5f 2c 20 6f 66 74 65 6e 20 | .=.0x8100)..IEEE.802.1q_,.often. |
c9ec0 | 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 44 6f 74 31 71 2c 20 69 73 20 74 68 65 20 6e 65 74 | referred.to.as.Dot1q,.is.the.net |
c9ee0 | 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 76 | working.standard.that.supports.v |
c9f00 | 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 | irtual.LANs.(VLANs).on.an.IEEE.8 |
c9f20 | 30 32 2e 33 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 | 02.3.Ethernet.network..The.stand |
c9f40 | 61 72 64 20 64 65 66 69 6e 65 73 20 61 20 73 79 73 74 65 6d 20 6f 66 20 56 4c 41 4e 20 74 61 67 | ard.defines.a.system.of.VLAN.tag |
c9f60 | 67 69 6e 67 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 6e 64 20 74 68 65 | ging.for.Ethernet.frames.and.the |
c9f80 | 20 61 63 63 6f 6d 70 61 6e 79 69 6e 67 20 70 72 6f 63 65 64 75 72 65 73 20 74 6f 20 62 65 20 75 | .accompanying.procedures.to.be.u |
c9fa0 | 73 65 64 20 62 79 20 62 72 69 64 67 65 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 69 6e 20 68 | sed.by.bridges.and.switches.in.h |
c9fc0 | 61 6e 64 6c 69 6e 67 20 73 75 63 68 20 66 72 61 6d 65 73 2e 20 54 68 65 20 73 74 61 6e 64 61 72 | andling.such.frames..The.standar |
c9fe0 | 64 20 61 6c 73 6f 20 63 6f 6e 74 61 69 6e 73 20 70 72 6f 76 69 73 69 6f 6e 73 20 66 6f 72 20 61 | d.also.contains.provisions.for.a |
ca000 | 20 71 75 61 6c 69 74 79 2d 6f 66 2d 73 65 72 76 69 63 65 20 70 72 69 6f 72 69 74 69 7a 61 74 69 | .quality-of-service.prioritizati |
ca020 | 6f 6e 20 73 63 68 65 6d 65 20 63 6f 6d 6d 6f 6e 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 49 45 45 45 | on.scheme.commonly.known.as.IEEE |
ca040 | 20 38 30 32 2e 31 70 20 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 | .802.1p.and.defines.the.Generic. |
ca060 | 41 74 74 72 69 62 75 74 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 2e | Attribute.Registration.Protocol. |
ca080 | 00 49 45 54 46 20 70 75 62 6c 69 73 68 65 64 20 3a 72 66 63 3a 60 36 35 39 38 60 2c 20 64 65 74 | .IETF.published.:rfc:`6598`,.det |
ca0a0 | 61 69 6c 69 6e 67 20 61 20 73 68 61 72 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f | ailing.a.shared.address.space.fo |
ca0c0 | 72 20 75 73 65 20 69 6e 20 49 53 50 20 43 47 4e 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 74 68 61 | r.use.in.ISP.CGN.deployments.tha |
ca0e0 | 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 70 72 | t.can.handle.the.same.network.pr |
ca100 | 65 66 69 78 65 73 20 6f 63 63 75 72 72 69 6e 67 20 62 6f 74 68 20 6f 6e 20 69 6e 62 6f 75 6e 64 | efixes.occurring.both.on.inbound |
ca120 | 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 52 49 4e 20 72 | .and.outbound.interfaces..ARIN.r |
ca140 | 65 74 75 72 6e 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 74 68 65 20 3a 61 62 | eturned.address.space.to.the.:ab |
ca160 | 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 | br:`IANA.(Internet.Assigned.Numb |
ca180 | 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 74 68 69 73 20 61 6c 6c 6f 63 61 74 | ers.Authority)`.for.this.allocat |
ca1a0 | 69 6f 6e 2e 00 49 47 4d 50 20 2d 20 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 | ion..IGMP.-.Internet.Group.Manag |
ca1c0 | 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 00 49 47 4d 50 20 50 72 6f 78 79 00 49 4b 45 20 28 | ement.Protocol).IGMP.Proxy.IKE.( |
ca1e0 | 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 29 20 41 74 74 72 69 62 75 74 65 | Internet.Key.Exchange).Attribute |
ca200 | 73 00 49 4b 45 20 50 68 61 73 65 3a 00 49 4b 45 20 70 65 72 66 6f 72 6d 73 20 6d 75 74 75 61 6c | s.IKE.Phase:.IKE.performs.mutual |
ca220 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 70 61 72 74 | .authentication.between.two.part |
ca240 | 69 65 73 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 6e 20 49 4b 45 20 73 65 63 75 72 | ies.and.establishes.an.IKE.secur |
ca260 | 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 28 53 41 29 20 74 68 61 74 20 69 6e 63 6c 75 64 | ity.association.(SA).that.includ |
ca280 | 65 73 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 | es.shared.secret.information.tha |
ca2a0 | 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 66 66 69 63 69 65 6e 74 6c 79 20 65 73 74 | t.can.be.used.to.efficiently.est |
ca2c0 | 61 62 6c 69 73 68 20 53 41 73 20 66 6f 72 20 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 | ablish.SAs.for.Encapsulating.Sec |
ca2e0 | 75 72 69 74 79 20 50 61 79 6c 6f 61 64 20 28 45 53 50 29 20 6f 72 20 41 75 74 68 65 6e 74 69 63 | urity.Payload.(ESP).or.Authentic |
ca300 | 61 74 69 6f 6e 20 48 65 61 64 65 72 20 28 41 48 29 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 63 | ation.Header.(AH).and.a.set.of.c |
ca320 | 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 | ryptographic.algorithms.to.be.us |
ca340 | 65 64 20 62 79 20 74 68 65 20 53 41 73 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 | ed.by.the.SAs.to.protect.the.tra |
ca360 | 66 66 69 63 20 74 68 61 74 20 74 68 65 79 20 63 61 72 72 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 | ffic.that.they.carry..https://da |
ca380 | 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 35 | tatracker.ietf.org/doc/html/rfc5 |
ca3a0 | 39 39 36 00 49 4b 45 76 31 00 49 4b 45 76 32 00 49 4b 45 76 32 20 49 50 53 65 63 20 72 6f 61 64 | 996.IKEv1.IKEv2.IKEv2.IPSec.road |
ca3c0 | 2d 77 61 72 72 69 6f 72 73 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 56 50 4e 00 49 50 00 49 | -warriors.remote-access.VPN.IP.I |
ca3e0 | 50 20 61 64 64 72 65 73 73 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 31 | P.address.IP.address.``192.168.1 |
ca400 | 2e 31 30 30 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 | .100``.shall.be.statically.mappe |
ca420 | 64 20 74 6f 20 63 6c 69 65 6e 74 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 31 60 60 00 49 50 | d.to.client.named.``client1``.IP |
ca440 | 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 32 2e 31 2f 32 34 60 60 00 49 50 20 61 | .address.``192.168.2.1/24``.IP.a |
ca460 | 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 20 69 64 65 6e 74 69 66 69 65 | ddress.for.DHCP.server.identifie |
ca480 | 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 4e 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 | r.IP.address.of.NTP.server.IP.ad |
ca4a0 | 64 72 65 73 73 20 6f 66 20 50 4f 50 33 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 | dress.of.POP3.server.IP.address. |
ca4c0 | 6f 66 20 53 4d 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 | of.SMTP.server.IP.address.of.rou |
ca4e0 | 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 | te.to.match,.based.on.access-lis |
ca500 | 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c | t..IP.address.of.route.to.match, |
ca520 | 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 | .based.on.prefix-list..IP.addres |
ca540 | 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 70 | s.of.route.to.match,.based.on.sp |
ca560 | 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 74 | ecified.prefix-length..Note.that |
ca580 | 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f 75 | .this.can.be.used.for.kernel.rou |
ca5a0 | 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 6f | tes.only..Do.not.apply.to.the.ro |
ca5c0 | 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | utes.of.dynamic.routing.protocol |
ca5e0 | 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 73 | s.(e.g..BGP,.RIP,.OSFP),.as.this |
ca600 | 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 2e | .can.lead.to.unexpected.results. |
ca620 | 2e 00 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 65 78 63 6c 75 64 65 20 66 72 6f 6d 20 44 48 43 | ..IP.address.to.exclude.from.DHC |
ca640 | 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 6e 65 | P.lease.range.IP.addresses.or.ne |
ca660 | 74 77 6f 72 6b 73 20 66 6f 72 20 77 68 69 63 68 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b | tworks.for.which.local.conntrack |
ca680 | 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 73 79 6e 63 65 64 00 49 50 20 6d | .entries.will.not.be.synced.IP.m |
ca6a0 | 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 00 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e | anagement.address.IP.masqueradin |
ca6c0 | 67 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 74 68 61 74 20 68 69 64 65 73 20 61 6e 20 65 | g.is.a.technique.that.hides.an.e |
ca6e0 | 6e 74 69 72 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 | ntire.IP.address.space,.usually. |
ca700 | 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 70 72 69 76 61 74 65 20 49 50 20 61 64 64 72 65 73 73 | consisting.of.private.IP.address |
ca720 | 65 73 2c 20 62 65 68 69 6e 64 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 69 | es,.behind.a.single.IP.address.i |
ca740 | 6e 20 61 6e 6f 74 68 65 72 2c 20 75 73 75 61 6c 6c 79 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 | n.another,.usually.public.addres |
ca760 | 73 20 73 70 61 63 65 2e 20 54 68 65 20 68 69 64 64 65 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 | s.space..The.hidden.addresses.ar |
ca780 | 65 20 63 68 61 6e 67 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 28 70 75 62 6c 69 63 29 | e.changed.into.a.single.(public) |
ca7a0 | 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | .IP.address.as.the.source.addres |
ca7c0 | 73 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 49 50 20 70 61 63 6b 65 74 73 20 73 6f 20 | s.of.the.outgoing.IP.packets.so. |
ca7e0 | 74 68 65 79 20 61 70 70 65 61 72 20 61 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 6e 6f 74 20 66 | they.appear.as.originating.not.f |
ca800 | 72 6f 6d 20 74 68 65 20 68 69 64 64 65 6e 20 68 6f 73 74 20 62 75 74 20 66 72 6f 6d 20 74 68 65 | rom.the.hidden.host.but.from.the |
ca820 | 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 69 74 73 65 6c 66 2e 20 42 65 63 61 75 73 65 20 | .routing.device.itself..Because. |
ca840 | 6f 66 20 74 68 65 20 70 6f 70 75 6c 61 72 69 74 79 20 6f 66 20 74 68 69 73 20 74 65 63 68 6e 69 | of.the.popularity.of.this.techni |
ca860 | 71 75 65 20 74 6f 20 63 6f 6e 73 65 72 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 | que.to.conserve.IPv4.address.spa |
ca880 | 63 65 2c 20 74 68 65 20 74 65 72 6d 20 4e 41 54 20 68 61 73 20 62 65 63 6f 6d 65 20 76 69 72 74 | ce,.the.term.NAT.has.become.virt |
ca8a0 | 75 61 6c 6c 79 20 73 79 6e 6f 6e 79 6d 6f 75 73 20 77 69 74 68 20 49 50 20 6d 61 73 71 75 65 72 | ually.synonymous.with.IP.masquer |
ca8c0 | 61 64 69 6e 67 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d | ading..IP.next-hop.of.route.to.m |
ca8e0 | 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 6e | atch,.based.on.access-list..IP.n |
ca900 | 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 | ext-hop.of.route.to.match,.based |
ca920 | 20 6f 6e 20 69 70 20 61 64 64 72 65 73 73 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 | .on.ip.address..IP.next-hop.of.r |
ca940 | 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 20 6c | oute.to.match,.based.on.prefix.l |
ca960 | 65 6e 67 74 68 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d | ength..IP.next-hop.of.route.to.m |
ca980 | 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 6e | atch,.based.on.prefix-list..IP.n |
ca9a0 | 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 | ext-hop.of.route.to.match,.based |
ca9c0 | 20 6f 6e 20 74 79 70 65 2e 00 49 50 20 70 72 65 63 65 64 65 6e 63 65 20 61 73 20 64 65 66 69 6e | .on.type..IP.precedence.as.defin |
ca9e0 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 37 39 31 60 3a 00 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 | ed.in.:rfc:`791`:.IP.protocol.nu |
caa00 | 6d 62 65 72 20 35 30 20 28 45 53 50 29 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 | mber.50.(ESP).IP.route.source.of |
caa20 | 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 | .route.to.match,.based.on.access |
caa40 | 2d 6c 69 73 74 2e 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 | -list..IP.route.source.of.route. |
caa60 | 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 | to.match,.based.on.prefix-list.. |
caa80 | 49 50 36 49 50 36 00 49 50 49 50 00 49 50 49 50 36 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 | IP6IP6.IPIP.IPIP6.IPSec.IKE.and. |
caaa0 | 45 53 50 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 53 50 20 47 72 6f 75 70 73 3b 00 49 50 | ESP.IPSec.IKE.and.ESP.Groups;.IP |
caac0 | 53 65 63 20 49 4b 45 76 32 20 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 56 50 4e 00 49 50 53 65 | Sec.IKEv2.Remote.Access.VPN.IPSe |
caae0 | 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 | c.IKEv2.site2site.VPN.IPSec.IKEv |
cab00 | 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 | 2.site2site.VPN.(source../draw.i |
cab20 | 6f 2f 76 70 6e 5f 73 32 73 5f 69 6b 65 76 32 2e 64 72 61 77 69 6f 29 00 49 50 53 65 63 20 56 50 | o/vpn_s2s_ikev2.drawio).IPSec.VP |
cab40 | 4e 20 54 75 6e 6e 65 6c 73 00 49 50 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 00 49 50 53 | N.Tunnels.IPSec.VPN.tunnels..IPS |
cab60 | 65 63 3a 00 49 50 6f 45 20 53 65 72 76 65 72 00 49 50 6f 45 20 63 61 6e 20 62 65 20 63 6f 6e 66 | ec:.IPoE.Server.IPoE.can.be.conf |
cab80 | 69 67 75 72 65 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 | igure.on.different.interfaces,.i |
caba0 | 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 65 61 63 68 20 73 70 65 63 69 66 69 63 20 73 | t.will.depend.on.each.specific.s |
cabc0 | 69 74 75 61 74 69 6f 6e 20 77 68 69 63 68 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 70 72 | ituation.which.interface.will.pr |
cabe0 | 6f 76 69 64 65 20 49 50 6f 45 20 74 6f 20 63 6c 69 65 6e 74 73 2e 20 54 68 65 20 63 6c 69 65 6e | ovide.IPoE.to.clients..The.clien |
cac00 | 74 73 20 6d 61 63 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 | ts.mac.address.and.the.incoming. |
cac20 | 69 6e 74 65 72 66 61 63 65 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 63 6f 6e 74 72 | interface.is.being.used.as.contr |
cac40 | 6f 6c 20 70 61 72 61 6d 65 74 65 72 2c 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 20 | ol.parameter,.to.authenticate.a. |
cac60 | 63 6c 69 65 6e 74 2e 00 49 50 6f 45 20 69 73 20 61 20 6d 65 74 68 6f 64 20 6f 66 20 64 65 6c 69 | client..IPoE.is.a.method.of.deli |
cac80 | 76 65 72 69 6e 67 20 61 6e 20 49 50 20 70 61 79 6c 6f 61 64 20 6f 76 65 72 20 61 6e 20 45 74 68 | vering.an.IP.payload.over.an.Eth |
caca0 | 65 72 6e 65 74 2d 62 61 73 65 64 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 6e | ernet-based.access.network.or.an |
cacc0 | 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 62 72 69 64 67 65 64 20 45 74 | .access.network.using.bridged.Et |
cace0 | 68 65 72 6e 65 74 20 6f 76 65 72 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 72 61 6e 73 66 65 | hernet.over.Asynchronous.Transfe |
cad00 | 72 20 4d 6f 64 65 20 28 41 54 4d 29 20 77 69 74 68 6f 75 74 20 75 73 69 6e 67 20 50 50 50 6f 45 | r.Mode.(ATM).without.using.PPPoE |
cad20 | 2e 20 49 74 20 64 69 72 65 63 74 6c 79 20 65 6e 63 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 49 | ..It.directly.encapsulates.the.I |
cad40 | 50 20 64 61 74 61 67 72 61 6d 73 20 69 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 | P.datagrams.in.Ethernet.frames,. |
cad60 | 75 73 69 6e 67 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 3a 72 66 63 3a 60 38 39 34 60 20 65 6e | using.the.standard.:rfc:`894`.en |
cad80 | 63 61 70 73 75 6c 61 74 69 6f 6e 2e 00 49 50 6f 45 20 73 65 72 76 65 72 20 77 69 6c 6c 20 6c 69 | capsulation..IPoE.server.will.li |
cada0 | 73 74 65 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 31 2e 35 30 20 61 6e 64 20 65 | sten.on.interfaces.eth1.50.and.e |
cadc0 | 74 68 31 2e 35 31 00 49 50 73 65 63 00 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 69 | th1.51.IPsec.IPsec.policy.matchi |
cade0 | 6e 67 20 47 52 45 00 49 50 76 34 00 49 50 76 34 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 | ng.GRE.IPv4.IPv4.Firewall.Config |
cae00 | 75 72 61 74 69 6f 6e 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 6e 65 78 74 20 62 6f 6f | uration.IPv4.address.of.next.boo |
cae20 | 74 73 74 72 61 70 20 73 65 72 76 65 72 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f | tstrap.server.IPv4.address.of.ro |
cae40 | 75 74 65 72 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 00 49 50 76 34 | uter.on.the.client's.subnet.IPv4 |
cae60 | 20 6f 72 20 49 50 76 36 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c | .or.IPv6.source.address.of.NetFl |
cae80 | 6f 77 20 70 61 63 6b 65 74 73 00 49 50 76 34 20 70 65 65 72 69 6e 67 00 49 50 76 34 20 72 65 6c | ow.packets.IPv4.peering.IPv4.rel |
caea0 | 61 79 00 49 50 76 34 20 72 6f 75 74 65 20 61 6e 64 20 49 50 76 36 20 72 6f 75 74 65 20 70 6f 6c | ay.IPv4.route.and.IPv6.route.pol |
caec0 | 69 63 69 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f | icies.are.defined.in.this.sectio |
caee0 | 6e 2e 20 54 68 65 73 65 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e 20 74 68 65 6e | n..These.route.policies.can.then |
caf00 | 20 62 65 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 00 49 50 | .be.associated.to.interfaces..IP |
caf20 | 76 34 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c | v4.route.source:.bgp,.connected, |
caf40 | 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 | .eigrp,.isis,.kernel,.nhrp,.ospf |
caf60 | 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 49 50 76 34 20 73 65 72 76 65 72 00 49 50 76 34 2f | ,.rip,.static..IPv4.server.IPv4/ |
caf80 | 49 50 76 36 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e | IPv6.remote.address.of.the.VXLAN |
cafa0 | 20 74 75 6e 6e 65 6c 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 | .tunnel..Alternative.to.multicas |
cafc0 | 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 | t,.the.remote.IPv4/IPv6.address. |
cafe0 | 63 61 6e 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 00 49 50 76 36 00 49 50 76 36 20 41 63 63 65 | can.set.directly..IPv6.IPv6.Acce |
cb000 | 73 73 20 4c 69 73 74 00 49 50 76 36 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 49 50 | ss.List.IPv6.Advanced.Options.IP |
cb020 | 76 36 20 44 48 43 50 76 36 2d 50 44 20 45 78 61 6d 70 6c 65 00 49 50 76 36 20 44 4e 53 20 61 64 | v6.DHCPv6-PD.Example.IPv6.DNS.ad |
cb040 | 64 72 65 73 73 65 73 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 2e 00 49 50 76 36 20 46 69 72 65 77 | dresses.are.optional..IPv6.Firew |
cb060 | 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 | all.Configuration.IPv6.Multicast |
cb080 | 00 49 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 49 50 76 36 20 50 72 65 | .IPv6.Prefix.Delegation.IPv6.Pre |
cb0a0 | 66 69 78 20 4c 69 73 74 73 00 49 50 76 36 20 53 4c 41 41 43 20 61 6e 64 20 49 41 2d 50 44 00 49 | fix.Lists.IPv6.SLAAC.and.IA-PD.I |
cb0c0 | 50 76 36 20 54 43 50 20 66 69 6c 74 65 72 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | Pv6.TCP.filters.will.only.match. |
cb0e0 | 49 50 76 36 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 6e 6f 20 68 65 61 64 65 72 20 65 78 74 65 | IPv6.packets.with.no.header.exte |
cb100 | 6e 73 69 6f 6e 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e | nsion,.see.https://en.wikipedia. |
cb120 | 6f 72 67 2f 77 69 6b 69 2f 49 50 76 36 5f 70 61 63 6b 65 74 23 45 78 74 65 6e 73 69 6f 6e 5f 68 | org/wiki/IPv6_packet#Extension_h |
cb140 | 65 61 64 65 72 73 00 49 50 76 36 20 61 64 64 72 65 73 73 20 60 60 32 30 30 31 3a 64 62 38 3a 3a | eaders.IPv6.address.``2001:db8:: |
cb160 | 31 30 31 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 | 101``.shall.be.statically.mapped |
cb180 | 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c | .IPv6.address.of.route.to.match, |
cb1a0 | 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 76 36 | .based.on.IPv6.access-list..IPv6 |
cb1c0 | 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 | .address.of.route.to.match,.base |
cb1e0 | 64 20 6f 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 | d.on.IPv6.prefix-list..IPv6.addr |
cb200 | 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 | ess.of.route.to.match,.based.on. |
cb220 | 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 | specified.prefix-length..Note.th |
cb240 | 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 | at.this.can.be.used.for.kernel.r |
cb260 | 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 | outes.only..Do.not.apply.to.the. |
cb280 | 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | routes.of.dynamic.routing.protoc |
cb2a0 | 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 | ols.(e.g..BGP,.RIP,.OSFP),.as.th |
cb2c0 | 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 | is.can.lead.to.unexpected.result |
cb2e0 | 73 2e 2e 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 00 49 50 76 36 20 63 6c | s...IPv6.client's.prefix.IPv6.cl |
cb300 | 69 65 6e 74 27 73 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 64 65 | ient's.prefix.assignment.IPv6.de |
cb320 | 66 61 75 6c 74 20 63 6c 69 65 6e 74 27 73 20 70 6f 6f 6c 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 | fault.client's.pool.assignment.I |
cb340 | 50 76 36 20 70 65 65 72 69 6e 67 00 49 50 76 36 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 | Pv6.peering.IPv6.prefix.``2001:d |
cb360 | 62 38 3a 30 3a 31 30 31 3a 3a 2f 36 34 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 | b8:0:101::/64``.shall.be.statica |
cb380 | 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 70 72 65 66 69 78 2e 00 49 50 76 36 20 72 65 6c | lly.mapped.IPv6.prefix..IPv6.rel |
cb3a0 | 61 79 00 49 50 76 36 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 | ay.IPv6.route.source:.bgp,.conne |
cb3c0 | 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c | cted,.eigrp,.isis,.kernel,.nhrp, |
cb3e0 | 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 49 50 76 36 20 73 65 72 | .ospfv3,.ripng,.static..IPv6.ser |
cb400 | 76 65 72 00 49 50 76 36 20 73 75 70 70 6f 72 74 00 49 53 2d 49 53 00 49 53 2d 49 53 20 47 6c 6f | ver.IPv6.support.IS-IS.IS-IS.Glo |
cb420 | 62 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 2d 49 53 20 53 52 20 43 6f 6e 66 69 | bal.Configuration.IS-IS.SR.Confi |
cb440 | 67 75 72 61 74 69 6f 6e 00 49 53 43 2d 44 48 43 50 20 4f 70 74 69 6f 6e 20 6e 61 6d 65 00 49 64 | guration.ISC-DHCP.Option.name.Id |
cb460 | 65 6e 74 69 74 79 20 42 61 73 65 64 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 66 20 2a 2a | entity.Based.Configuration.If.** |
cb480 | 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 65 74 20 62 75 74 20 2a 2a 6d 69 6e | max-threshold**.is.set.but.**min |
cb4a0 | 2d 74 68 72 65 73 68 6f 6c 64 20 69 73 20 6e 6f 74 2c 20 74 68 65 6e 20 2a 2a 6d 69 6e 2d 74 68 | -threshold.is.not,.then.**min-th |
cb4c0 | 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 35 30 25 20 6f 66 20 2a 2a | reshold**.is.scaled.to.50%.of.** |
cb4e0 | 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2e 00 49 66 20 3a 63 66 67 63 6d 64 3a 60 73 74 72 | max-threshold**..If.:cfgcmd:`str |
cb500 | 69 63 74 60 20 69 73 20 73 65 74 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 77 6f 6e e2 | ict`.is.set.the.BGP.session.won. |
cb520 | 80 99 74 20 62 65 63 6f 6d 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 75 6e 74 69 6c 20 74 68 65 | ..t.become.established.until.the |
cb540 | 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 73 65 74 73 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 6f 6e | .BGP.neighbor.sets.local.Role.on |
cb560 | 20 69 74 73 20 73 69 64 65 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 | .its.side..This.configuration.pa |
cb580 | 72 61 6d 65 74 65 72 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 | rameter.is.defined.in.RFC.:rfc:` |
cb5a0 | 39 32 33 34 60 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 65 6e 66 6f 72 63 65 20 74 68 65 | 9234`.and.is.used.to.enforce.the |
cb5c0 | 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 | .corresponding.configuration.at. |
cb5e0 | 79 6f 75 72 20 63 6f 75 6e 74 65 72 2d 70 61 72 74 73 20 73 69 64 65 2e 00 49 66 20 41 52 50 20 | your.counter-parts.side..If.ARP. |
cb600 | 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 73 20 75 73 65 64 20 69 6e 20 61 6e 20 65 74 68 65 72 63 68 | monitoring.is.used.in.an.etherch |
cb620 | 61 6e 6e 65 6c 20 63 6f 6d 70 61 74 69 62 6c 65 20 6d 6f 64 65 20 28 6d 6f 64 65 73 20 72 6f 75 | annel.compatible.mode.(modes.rou |
cb640 | 6e 64 2d 72 6f 62 69 6e 20 61 6e 64 20 78 6f 72 2d 68 61 73 68 29 2c 20 74 68 65 20 73 77 69 74 | nd-robin.and.xor-hash),.the.swit |
cb660 | 63 68 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 20 6d 6f 64 | ch.should.be.configured.in.a.mod |
cb680 | 65 20 74 68 61 74 20 65 76 65 6e 6c 79 20 64 69 73 74 72 69 62 75 74 65 73 20 70 61 63 6b 65 74 | e.that.evenly.distributes.packet |
cb6a0 | 73 20 61 63 72 6f 73 73 20 61 6c 6c 20 6c 69 6e 6b 73 2e 20 49 66 20 74 68 65 20 73 77 69 74 63 | s.across.all.links..If.the.switc |
cb6c0 | 68 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 74 68 | h.is.configured.to.distribute.th |
cb6e0 | 65 20 70 61 63 6b 65 74 73 20 69 6e 20 61 6e 20 58 4f 52 20 66 61 73 68 69 6f 6e 2c 20 61 6c 6c | e.packets.in.an.XOR.fashion,.all |
cb700 | 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 74 61 72 67 65 74 73 20 77 69 | .replies.from.the.ARP.targets.wi |
cb720 | 6c 6c 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 6c 69 6e 6b 20 | ll.be.received.on.the.same.link. |
cb740 | 77 68 69 63 68 20 63 6f 75 6c 64 20 63 61 75 73 65 20 74 68 65 20 6f 74 68 65 72 20 74 65 61 6d | which.could.cause.the.other.team |
cb760 | 20 6d 65 6d 62 65 72 73 20 74 6f 20 66 61 69 6c 2e 00 49 66 20 43 41 20 69 73 20 70 72 65 73 65 | .members.to.fail..If.CA.is.prese |
cb780 | 6e 74 2c 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 77 69 6c 6c 20 62 65 20 69 6e 63 | nt,.this.certificate.will.be.inc |
cb7a0 | 6c 75 64 65 64 20 69 6e 20 67 65 6e 65 72 61 74 65 64 20 43 52 4c 73 00 49 66 20 43 4c 49 20 6f | luded.in.generated.CRLs.If.CLI.o |
cb7c0 | 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 66 65 61 | ption.is.not.specified,.this.fea |
cb7e0 | 74 75 72 65 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 49 66 20 50 49 4d 20 68 61 73 20 74 68 65 | ture.is.disabled..If.PIM.has.the |
cb800 | 20 61 20 63 68 6f 69 63 65 20 6f 66 20 45 43 4d 50 20 6e 65 78 74 68 6f 70 73 20 66 6f 72 20 61 | .a.choice.of.ECMP.nexthops.for.a |
cb820 | 20 70 61 72 74 69 63 75 6c 61 72 20 3a 61 62 62 72 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 | .particular.:abbr:`RPF.(Reverse. |
cb840 | 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 2c 20 50 49 4d 20 77 69 6c 6c 20 63 61 75 73 | Path.Forwarding)`,.PIM.will.caus |
cb860 | 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 6f 20 62 65 20 73 70 72 65 61 64 20 6f 75 74 20 61 6d 6f | e.S,G.flows.to.be.spread.out.amo |
cb880 | 6e 67 73 74 20 74 68 65 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 | ngst.the.nexthops..If.this.comma |
cb8a0 | 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 6e 20 74 68 65 20 66 69 72 | nd.is.not.specified.then.the.fir |
cb8c0 | 73 74 20 6e 65 78 74 68 6f 70 20 66 6f 75 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 | st.nexthop.found.will.be.used..I |
cb8e0 | 66 20 50 49 4d 20 69 73 20 75 73 69 6e 67 20 45 43 4d 50 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 | f.PIM.is.using.ECMP.and.an.inter |
cb900 | 66 61 63 65 20 67 6f 65 73 20 64 6f 77 6e 2c 20 63 61 75 73 65 20 50 49 4d 20 74 6f 20 72 65 62 | face.goes.down,.cause.PIM.to.reb |
cb920 | 61 6c 61 6e 63 65 20 61 6c 6c 20 53 2c 47 20 66 6c 6f 77 73 20 61 63 72 6f 73 73 20 74 68 65 20 | alance.all.S,G.flows.across.the. |
cb940 | 72 65 6d 61 69 6e 69 6e 67 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d | remaining.nexthops..If.this.comm |
cb960 | 61 6e 64 20 69 73 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 64 20 50 49 4d 20 6f 6e 6c 79 20 6d | and.is.not.configured.PIM.only.m |
cb980 | 6f 64 69 66 69 65 73 20 74 68 6f 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 68 61 74 20 77 65 72 | odifies.those.S,G.flows.that.wer |
cb9a0 | 65 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 77 65 6e 74 20 | e.using.the.interface.that.went. |
cb9c0 | 64 6f 77 6e 2e 00 49 66 20 60 60 61 6c 69 61 73 60 60 20 69 73 20 73 65 74 2c 20 69 74 20 63 61 | down..If.``alias``.is.set,.it.ca |
cb9e0 | 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 | n.be.used.instead.of.the.device. |
cba00 | 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 49 66 20 60 60 61 6c 6c 60 60 20 69 73 20 73 | when.connecting..If.``all``.is.s |
cba20 | 70 65 63 69 66 69 65 64 2c 20 72 65 6d 6f 76 65 20 61 6c 6c 20 41 53 20 6e 75 6d 62 65 72 73 20 | pecified,.remove.all.AS.numbers. |
cba40 | 66 72 6f 6d 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 | from.the.AS_PATH.of.the.BGP.path |
cba60 | 27 73 20 4e 4c 52 49 2e 00 49 66 20 61 20 6c 6f 63 61 6c 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c | 's.NLRI..If.a.local.firewall.pol |
cba80 | 69 63 79 20 69 73 20 69 6e 20 70 6c 61 63 65 20 6f 6e 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c | icy.is.in.place.on.your.external |
cbaa0 | 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 6c 6c 6f | .interface.you.will.need.to.allo |
cbac0 | 77 20 74 68 65 20 70 6f 72 74 73 20 62 65 6c 6f 77 3a 00 49 66 20 61 20 72 65 67 69 73 74 72 79 | w.the.ports.below:.If.a.registry |
cbae0 | 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 44 6f 63 6b 65 72 2e 69 6f 20 77 69 6c | .is.not.specified,.Docker.io.wil |
cbb00 | 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 | l.be.used.as.the.container.regis |
cbb20 | 74 72 79 20 75 6e 6c 65 73 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 72 65 67 69 73 74 | try.unless.an.alternative.regist |
cbb40 | 72 79 20 69 73 20 73 70 65 63 69 66 69 65 64 20 75 73 69 6e 67 20 2a 2a 73 65 74 20 63 6f 6e 74 | ry.is.specified.using.**set.cont |
cbb60 | 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 3c 6e 61 6d 65 3e 2a 2a 20 6f 72 20 74 68 65 20 72 | ainer.registry.<name>**.or.the.r |
cbb80 | 65 67 69 73 74 72 79 20 69 73 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 69 6d 61 67 65 | egistry.is.included.in.the.image |
cbba0 | 20 6e 61 6d 65 00 49 66 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 20 68 65 61 72 64 2c 20 74 68 | .name.If.a.response.is.heard,.th |
cbbc0 | 65 20 6c 65 61 73 65 20 69 73 20 61 62 61 6e 64 6f 6e 65 64 2c 20 61 6e 64 20 74 68 65 20 73 65 | e.lease.is.abandoned,.and.the.se |
cbbe0 | 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 63 6c 69 | rver.does.not.respond.to.the.cli |
cbc00 | 65 6e 74 2e 20 54 68 65 20 6c 65 61 73 65 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 61 62 61 6e 64 | ent..The.lease.will.remain.aband |
cbc20 | 6f 6e 65 64 20 66 6f 72 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 | oned.for.a.minimum.of.abandon-le |
cbc40 | 61 73 65 2d 74 69 6d 65 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 73 20 74 6f 20 32 34 | ase-time.seconds.(defaults.to.24 |
cbc60 | 20 68 6f 75 72 73 29 2e 00 49 66 20 61 20 72 6f 75 74 65 20 68 61 73 20 61 6e 20 4f 52 49 47 49 | .hours)..If.a.route.has.an.ORIGI |
cbc80 | 4e 41 54 4f 52 5f 49 44 20 61 74 74 72 69 62 75 74 65 20 62 65 63 61 75 73 65 20 69 74 20 68 61 | NATOR_ID.attribute.because.it.ha |
cbca0 | 73 20 62 65 65 6e 20 72 65 66 6c 65 63 74 65 64 2c 20 74 68 61 74 20 4f 52 49 47 49 4e 41 54 4f | s.been.reflected,.that.ORIGINATO |
cbcc0 | 52 5f 49 44 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 4f 74 68 65 72 77 69 73 65 2c 20 74 68 | R_ID.will.be.used..Otherwise,.th |
cbce0 | 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 | e.router-ID.of.the.peer.the.rout |
cbd00 | 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 77 69 6c 6c 20 62 65 20 75 73 65 64 | e.was.received.from.will.be.used |
cbd20 | 2e 00 49 66 20 61 20 72 75 6c 65 20 69 73 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 61 6e 20 | ..If.a.rule.is.defined,.then.an. |
cbd40 | 61 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 69 74 2e 20 54 | action.must.be.defined.for.it..T |
cbd60 | 68 69 73 20 74 65 6c 6c 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 77 68 61 74 20 74 6f 20 64 | his.tells.the.firewall.what.to.d |
cbd80 | 6f 20 69 66 20 61 6c 6c 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 20 64 65 66 69 6e | o.if.all.criteria.matchers.defin |
cbda0 | 65 64 20 66 6f 72 20 73 75 63 68 20 72 75 6c 65 20 64 6f 20 6d 61 74 63 68 2e 00 49 66 20 61 20 | ed.for.such.rule.do.match..If.a. |
cbdc0 | 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 | there.are.no.free.addresses.but. |
cbde0 | 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 | there.are.abandoned.IP.addresses |
cbe00 | 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 | ,.the.DHCP.server.will.attempt.t |
cbe20 | 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 | o.reclaim.an.abandoned.IP.addres |
cbe40 | 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 | s.regardless.of.the.value.of.aba |
cbe60 | 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 61 6e 20 49 53 50 20 64 65 70 6c 6f | ndon-lease-time..If.an.ISP.deplo |
cbe80 | 79 73 20 61 20 3a 61 62 62 72 3a 60 43 47 4e 20 28 43 61 72 72 69 65 72 2d 67 72 61 64 65 20 4e | ys.a.:abbr:`CGN.(Carrier-grade.N |
cbea0 | 41 54 29 60 2c 20 61 6e 64 20 75 73 65 73 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 | AT)`,.and.uses.:rfc:`1918`.addre |
cbec0 | 73 73 20 73 70 61 63 65 20 74 6f 20 6e 75 6d 62 65 72 20 63 75 73 74 6f 6d 65 72 20 67 61 74 65 | ss.space.to.number.customer.gate |
cbee0 | 77 61 79 73 2c 20 74 68 65 20 72 69 73 6b 20 6f 66 20 61 64 64 72 65 73 73 20 63 6f 6c 6c 69 73 | ways,.the.risk.of.address.collis |
cbf00 | 69 6f 6e 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 66 61 69 6c 75 | ion,.and.therefore.routing.failu |
cbf20 | 72 65 73 2c 20 61 72 69 73 65 73 20 77 68 65 6e 20 74 68 65 20 63 75 73 74 6f 6d 65 72 20 6e 65 | res,.arises.when.the.customer.ne |
cbf40 | 74 77 6f 72 6b 20 61 6c 72 65 61 64 79 20 75 73 65 73 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 | twork.already.uses.an.:rfc:`1918 |
cbf60 | 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 00 49 66 20 61 6e 20 61 6e 6f 74 68 65 72 20 62 | `.address.space..If.an.another.b |
cbf80 | 72 69 64 67 65 20 69 6e 20 74 68 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 64 6f 65 73 20 | ridge.in.the.spanning.tree.does. |
cbfa0 | 6e 6f 74 20 73 65 6e 64 20 6f 75 74 20 61 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 66 6f 72 20 | not.send.out.a.hello.packet.for. |
cbfc0 | 61 20 6c 6f 6e 67 20 70 65 72 69 6f 64 20 6f 66 20 74 69 6d 65 2c 20 69 74 20 69 73 20 61 73 73 | a.long.period.of.time,.it.is.ass |
cbfe0 | 75 6d 65 64 20 74 6f 20 62 65 20 64 65 61 64 2e 00 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 | umed.to.be.dead..If.choosing.a.v |
cc000 | 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 | alue.below.31.seconds.be.aware.t |
cc020 | 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e | hat.some.hardware.platforms.cann |
cc040 | 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 | ot.see.data.flowing.in.better.th |
cc060 | 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 | an.30.second.chunks..If.configur |
cc080 | 65 64 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 | ed,.incoming.IP.directed.broadca |
cc0a0 | 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c | st.packets.on.this.interface.wil |
cc0c0 | 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 72 | l.be.forwarded..If.configured,.r |
cc0e0 | 65 70 6c 79 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 | eply.only.if.the.target.IP.addre |
cc100 | 73 73 20 69 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f | ss.is.local.address.configured.o |
cc120 | 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 63 6f 6e | n.the.incoming.interface..If.con |
cc140 | 66 69 67 75 72 65 64 2c 20 74 72 79 20 74 6f 20 61 76 6f 69 64 20 6c 6f 63 61 6c 20 61 64 64 72 | figured,.try.to.avoid.local.addr |
cc160 | 65 73 73 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 69 6e 20 74 68 65 20 74 61 72 67 65 74 | esses.that.are.not.in.the.target |
cc180 | 27 73 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 | 's.subnet.for.this.interface..Th |
cc1a0 | 69 73 20 6d 6f 64 65 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 61 72 67 65 74 20 68 6f | is.mode.is.useful.when.target.ho |
cc1c0 | 73 74 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | sts.reachable.via.this.interface |
cc1e0 | 20 72 65 71 75 69 72 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 69 | .require.the.source.IP.address.i |
cc200 | 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 | n.ARP.requests.to.be.part.of.the |
cc220 | 69 72 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e | ir.logical.network.configured.on |
cc240 | 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 77 | .the.receiving.interface..When.w |
cc260 | 65 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 72 65 71 75 65 73 74 20 77 65 20 77 69 6c 6c 20 63 | e.generate.the.request.we.will.c |
cc280 | 68 65 63 6b 20 61 6c 6c 20 6f 75 72 20 73 75 62 6e 65 74 73 20 74 68 61 74 20 69 6e 63 6c 75 64 | heck.all.our.subnets.that.includ |
cc2a0 | 65 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 6e 64 20 77 69 6c 6c 20 70 72 65 73 65 72 76 | e.the.target.IP.and.will.preserv |
cc2c0 | 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 66 20 69 74 20 69 73 20 66 72 | e.the.source.address.if.it.is.fr |
cc2e0 | 6f 6d 20 73 75 63 68 20 73 75 62 6e 65 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 | om.such.subnet..If.there.is.no.s |
cc300 | 75 63 68 20 73 75 62 6e 65 74 20 77 65 20 73 65 6c 65 63 74 20 73 6f 75 72 63 65 20 61 64 64 72 | uch.subnet.we.select.source.addr |
cc320 | 65 73 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 72 75 6c 65 73 20 66 6f 72 20 6c | ess.according.to.the.rules.for.l |
cc340 | 65 76 65 6c 20 32 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 58 4c 41 4e 20 69 6e 20 | evel.2..If.configuring.VXLAN.in. |
cc360 | 61 20 56 79 4f 53 20 76 69 72 74 75 61 6c 20 6d 61 63 68 69 6e 65 2c 20 65 6e 73 75 72 65 20 74 | a.VyOS.virtual.machine,.ensure.t |
cc380 | 68 61 74 20 4d 41 43 20 73 70 6f 6f 66 69 6e 67 20 28 48 79 70 65 72 2d 56 29 20 6f 72 20 46 6f | hat.MAC.spoofing.(Hyper-V).or.Fo |
cc3a0 | 72 67 65 64 20 54 72 61 6e 73 6d 69 74 73 20 28 45 53 58 29 20 61 72 65 20 70 65 72 6d 69 74 74 | rged.Transmits.(ESX).are.permitt |
cc3c0 | 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 66 6f 72 77 61 72 64 65 64 20 66 72 61 6d 65 73 20 6d | ed,.otherwise.forwarded.frames.m |
cc3e0 | 61 79 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 68 79 70 65 72 76 69 73 6f 72 2e | ay.be.blocked.by.the.hypervisor. |
cc400 | 00 49 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 64 69 66 66 | .If.forwarding.traffic.to.a.diff |
cc420 | 65 72 65 6e 74 20 70 6f 72 74 20 74 68 61 6e 20 69 74 20 69 73 20 61 72 72 69 76 69 6e 67 20 6f | erent.port.than.it.is.arriving.o |
cc440 | 6e 2c 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 72 | n,.you.may.also.configure.the.tr |
cc460 | 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 69 6e 67 20 60 73 65 74 20 6e 61 74 20 64 65 | anslation.port.using.`set.nat.de |
cc480 | 73 74 69 6e 61 74 69 6f 6e 20 72 75 6c 65 20 5b 6e 5d 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 | stination.rule.[n].translation.p |
cc4a0 | 6f 72 74 60 2e 00 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 66 6f 72 20 | ort`..If.guaranteed.traffic.for. |
cc4c0 | 61 20 63 6c 61 73 73 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 72 65 20 69 73 20 72 6f 6f 6d | a.class.is.met.and.there.is.room |
cc4e0 | 20 66 6f 72 20 6d 6f 72 65 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 63 65 69 6c 69 6e 67 20 70 | .for.more.traffic,.the.ceiling.p |
cc500 | 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 74 20 68 6f 77 20 | arameter.can.be.used.to.set.how. |
cc520 | 6d 75 63 68 20 6d 6f 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 | much.more.bandwidth.could.be.use |
cc540 | 64 2e 20 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 69 73 20 6d 65 74 20 | d..If.guaranteed.traffic.is.met. |
cc560 | 61 6e 64 20 74 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 63 6c 61 73 73 65 73 20 77 69 | and.there.are.several.classes.wi |
cc580 | 6c 6c 69 6e 67 20 74 6f 20 75 73 65 20 74 68 65 69 72 20 63 65 69 6c 69 6e 67 73 2c 20 74 68 65 | lling.to.use.their.ceilings,.the |
cc5a0 | 20 70 72 69 6f 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 | .priority.parameter.will.establi |
cc5c0 | 73 68 20 74 68 65 20 6f 72 64 65 72 20 69 6e 20 77 68 69 63 68 20 74 68 61 74 20 61 64 64 69 74 | sh.the.order.in.which.that.addit |
cc5e0 | 69 6f 6e 61 6c 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 2e | ional.traffic.will.be.allocated. |
cc600 | 20 50 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 75 6d 62 65 72 20 66 72 6f 6d | .Priority.can.be.any.number.from |
cc620 | 20 30 20 74 6f 20 37 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 | .0.to.7..The.lower.the.number,.t |
cc640 | 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 66 20 69 6e 74 65 72 | he.higher.the.priority..If.inter |
cc660 | 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 | face.were.the.packet.was.receive |
cc680 | 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b | d.is.part.of.a.bridge,.then.pack |
cc6a0 | 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 | et.is.processed.at.the.**Bridge. |
cc6c0 | 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 76 65 72 20 62 61 | Layer**,.which.contains.a.ver.ba |
cc6e0 | 73 69 63 20 73 65 74 75 70 20 77 68 65 72 65 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 | sic.setup.where.for.bridge.filte |
cc700 | 72 69 6e 67 3a 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b | ring:.If.interface.were.the.pack |
cc720 | 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 | et.was.received.isn't.part.of.a. |
cc740 | 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 | bridge,.then.packet.is.processed |
cc760 | 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 69 74 27 73 20 76 69 | .at.the.**IP.Layer**:.If.it's.vi |
cc780 | 74 61 6c 20 74 68 61 74 20 74 68 65 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 61 63 74 20 65 | tal.that.the.daemon.should.act.e |
cc7a0 | 78 61 63 74 6c 79 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 | xactly.like.a.real.multicast.cli |
cc7c0 | 65 6e 74 20 6f 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 74 | ent.on.the.upstream.interface,.t |
cc7e0 | 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 | his.function.should.be.enabled.. |
cc800 | 49 66 20 6b 6e 6f 77 6e 2c 20 74 68 65 20 49 50 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 72 | If.known,.the.IP.of.the.remote.r |
cc820 | 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 | outer.can.be.configured.using.th |
cc840 | 65 20 60 60 72 65 6d 6f 74 65 2d 68 6f 73 74 60 60 20 64 69 72 65 63 74 69 76 65 3b 20 69 66 20 | e.``remote-host``.directive;.if. |
cc860 | 75 6e 6b 6e 6f 77 6e 2c 20 69 74 20 63 61 6e 20 62 65 20 6f 6d 69 74 74 65 64 2e 20 57 65 20 77 | unknown,.it.can.be.omitted..We.w |
cc880 | 69 6c 6c 20 61 73 73 75 6d 65 20 61 20 64 79 6e 61 6d 69 63 20 49 50 20 66 6f 72 20 6f 75 72 20 | ill.assume.a.dynamic.IP.for.our. |
cc8a0 | 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 49 66 20 6c 6f 67 67 69 6e 67 20 74 6f 20 61 20 6c | remote.router..If.logging.to.a.l |
cc8c0 | 6f 63 61 6c 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2c | ocal.user.account.is.configured, |
cc8e0 | 20 61 6c 6c 20 64 65 66 69 6e 65 64 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 64 69 | .all.defined.log.messages.are.di |
cc900 | 73 70 6c 61 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 66 20 74 68 65 20 6c 6f 63 61 | splay.on.the.console.if.the.loca |
cc920 | 6c 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2c 20 69 66 20 74 68 65 20 75 73 65 72 | l.user.is.logged.in,.if.the.user |
cc940 | 20 69 73 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 6e 2c 20 6e 6f 20 6d 65 73 73 61 67 65 73 20 61 | .is.not.logged.in,.no.messages.a |
cc960 | 72 65 20 62 65 69 6e 67 20 64 69 73 70 6c 61 79 65 64 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 | re.being.displayed..For.an.expla |
cc980 | 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 | nation.on.:ref:`syslog_facilitie |
cc9a0 | 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 | s`.keywords.and.:ref:`syslog_sev |
cc9c0 | 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 | erity_level`.keywords.see.tables |
cc9e0 | 20 62 65 6c 6f 77 2e 00 49 66 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c | .below..If.making.use.of.multipl |
cca00 | 65 20 74 75 6e 6e 65 6c 73 2c 20 4f 70 65 6e 56 50 4e 20 6d 75 73 74 20 68 61 76 65 20 61 20 77 | e.tunnels,.OpenVPN.must.have.a.w |
cca20 | 61 79 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 64 69 66 66 65 72 | ay.to.distinguish.between.differ |
cca40 | 65 6e 74 20 74 75 6e 6e 65 6c 73 20 61 73 69 64 65 20 66 72 6f 6d 20 74 68 65 20 70 72 65 2d 73 | ent.tunnels.aside.from.the.pre-s |
cca60 | 68 61 72 65 64 2d 6b 65 79 2e 20 54 68 69 73 20 69 73 20 65 69 74 68 65 72 20 62 79 20 72 65 66 | hared-key..This.is.either.by.ref |
cca80 | 65 72 65 6e 63 69 6e 67 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 70 6f 72 74 20 6e 75 6d 62 | erencing.IP.address.or.port.numb |
ccaa0 | 65 72 2e 20 4f 6e 65 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 | er..One.option.is.to.dedicate.a. |
ccac0 | 70 75 62 6c 69 63 20 49 50 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 2e 20 41 6e 6f 74 68 65 | public.IP.to.each.tunnel..Anothe |
ccae0 | 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 70 6f 72 74 20 6e | r.option.is.to.dedicate.a.port.n |
ccb00 | 75 6d 62 65 72 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 28 65 2e 67 2e 20 31 31 39 35 2c | umber.to.each.tunnel.(e.g..1195, |
ccb20 | 31 31 39 36 2c 31 31 39 37 2e 2e 2e 29 2e 00 49 66 20 6d 75 6c 74 69 2d 70 61 74 68 69 6e 67 20 | 1196,1197...)..If.multi-pathing. |
ccb40 | 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 63 68 65 63 6b 20 77 68 65 74 68 65 72 20 74 | is.enabled,.then.check.whether.t |
ccb60 | 68 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 79 65 74 20 64 69 73 74 69 6e 67 75 69 73 68 65 64 20 | he.routes.not.yet.distinguished. |
ccb80 | 69 6e 20 70 72 65 66 65 72 65 6e 63 65 20 6d 61 79 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 | in.preference.may.be.considered. |
ccba0 | 65 71 75 61 6c 2e 20 49 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 | equal..If.:cfgcmd:`bgp.bestpath. |
ccbc0 | 61 73 2d 70 61 74 68 20 6d 75 6c 74 69 70 61 74 68 2d 72 65 6c 61 78 60 20 69 73 20 73 65 74 2c | as-path.multipath-relax`.is.set, |
ccbe0 | 20 61 6c 6c 20 73 75 63 68 20 72 6f 75 74 65 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 | .all.such.routes.are.considered. |
ccc00 | 65 71 75 61 6c 2c 20 6f 74 68 65 72 77 69 73 65 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 | equal,.otherwise.routes.received |
ccc20 | 20 76 69 61 20 69 42 47 50 20 77 69 74 68 20 69 64 65 6e 74 69 63 61 6c 20 41 53 5f 50 41 54 48 | .via.iBGP.with.identical.AS_PATH |
ccc40 | 73 20 6f 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 6e | s.or.routes.received.from.eBGP.n |
ccc60 | 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 61 72 65 20 63 6f 6e | eighbours.in.the.same.AS.are.con |
ccc80 | 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 00 49 66 20 6e 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | sidered.equal..If.no.connection. |
ccca0 | 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 65 | to.an.RPKI.cache.server.can.be.e |
cccc0 | 73 74 61 62 6c 69 73 68 65 64 20 61 66 74 65 72 20 61 20 70 72 65 2d 64 65 66 69 6e 65 64 20 74 | stablished.after.a.pre-defined.t |
ccce0 | 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 | imeout,.the.router.will.process. |
ccd00 | 72 6f 75 74 65 73 20 77 69 74 68 6f 75 74 20 70 72 65 66 69 78 20 6f 72 69 67 69 6e 20 76 61 6c | routes.without.prefix.origin.val |
ccd20 | 69 64 61 74 69 6f 6e 2e 20 49 74 20 73 74 69 6c 6c 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 | idation..It.still.will.try.to.es |
ccd40 | 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 | tablish.a.connection.to.an.RPKI. |
ccd60 | 63 61 63 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 2e 00 | cache.server.in.the.background.. |
ccd80 | 49 66 20 6e 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 74 | If.no.destination.is.specified.t |
ccda0 | 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 6d 61 74 63 68 20 6f 6e 20 61 6e 79 20 64 65 73 74 69 6e | he.rule.will.match.on.any.destin |
ccdc0 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 2e 00 49 66 20 6e 6f 20 69 70 | ation.address.and.port..If.no.ip |
ccde0 | 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 69 74 20 61 63 | .prefix.list.is.specified,.it.ac |
cce00 | 74 73 20 61 73 20 70 65 72 6d 69 74 2e 20 49 66 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 | ts.as.permit..If.ip.prefix.list. |
cce20 | 69 73 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 6e 6f 20 6d 61 74 63 68 20 69 73 20 66 6f 75 6e | is.defined,.and.no.match.is.foun |
cce40 | 64 2c 20 64 65 66 61 75 6c 74 20 64 65 6e 79 20 69 73 20 61 70 70 6c 69 65 64 2e 00 49 66 20 6e | d,.default.deny.is.applied..If.n |
cce60 | 6f 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 64 65 66 61 | o.option.is.specified,.this.defa |
cce80 | 75 6c 74 73 20 74 6f 20 60 61 6c 6c 60 2e 00 49 66 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 | ults.to.`all`..If.not.set.(defau |
ccea0 | 6c 74 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 | lt).allows.you.to.have.multiple. |
ccec0 | 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 | network.interfaces.on.the.same.s |
ccee0 | 75 62 6e 65 74 2c 20 61 6e 64 20 68 61 76 65 20 74 68 65 20 41 52 50 73 20 66 6f 72 20 65 61 63 | ubnet,.and.have.the.ARPs.for.eac |
ccf00 | 68 20 69 6e 74 65 72 66 61 63 65 20 62 65 20 61 6e 73 77 65 72 65 64 20 62 61 73 65 64 20 6f 6e | h.interface.be.answered.based.on |
ccf20 | 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 77 6f 75 6c 64 | .whether.or.not.the.kernel.would |
ccf40 | 20 72 6f 75 74 65 20 61 20 70 61 63 6b 65 74 20 66 72 6f 6d 20 74 68 65 20 41 52 50 27 64 20 49 | .route.a.packet.from.the.ARP'd.I |
ccf60 | 50 20 6f 75 74 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 20 28 74 68 65 72 65 66 6f 72 65 20 | P.out.that.interface.(therefore. |
ccf80 | 79 6f 75 20 6d 75 73 74 20 75 73 65 20 73 6f 75 72 63 65 20 62 61 73 65 64 20 72 6f 75 74 69 6e | you.must.use.source.based.routin |
ccfa0 | 67 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 49 66 20 6f 70 74 69 6f 6e 61 6c | g.for.this.to.work)..If.optional |
ccfc0 | 20 70 72 6f 66 69 6c 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 75 73 65 64 2c 20 73 65 6c 65 | .profile.parameter.is.used,.sele |
ccfe0 | 63 74 20 61 20 42 46 44 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 74 68 65 20 42 46 44 20 73 65 73 | ct.a.BFD.profile.for.the.BFD.ses |
cd000 | 73 69 6f 6e 73 20 63 72 65 61 74 65 64 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | sions.created.via.this.interface |
cd020 | 2e 00 49 66 20 73 65 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 63 61 6e 20 72 65 73 70 6f 6e 64 20 | ..If.set.the.kernel.can.respond. |
cd040 | 74 6f 20 61 72 70 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 61 64 64 72 65 73 73 65 73 20 66 | to.arp.requests.with.addresses.f |
cd060 | 72 6f 6d 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 73 | rom.other.interfaces..This.may.s |
cd080 | 65 65 6d 20 77 72 6f 6e 67 20 62 75 74 20 69 74 20 75 73 75 61 6c 6c 79 20 6d 61 6b 65 73 20 73 | eem.wrong.but.it.usually.makes.s |
cd0a0 | 65 6e 73 65 2c 20 62 65 63 61 75 73 65 20 69 74 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 63 | ense,.because.it.increases.the.c |
cd0c0 | 68 61 6e 63 65 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f | hance.of.successful.communicatio |
cd0e0 | 6e 2e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 77 6e 65 64 20 62 79 20 74 68 65 | n..IP.addresses.are.owned.by.the |
cd100 | 20 63 6f 6d 70 6c 65 74 65 20 68 6f 73 74 20 6f 6e 20 4c 69 6e 75 78 2c 20 6e 6f 74 20 62 79 20 | .complete.host.on.Linux,.not.by. |
cd120 | 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 6c 79 20 66 6f 72 20 | particular.interfaces..Only.for. |
cd140 | 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 73 65 74 75 70 73 20 6c 69 6b 65 20 6c 6f 61 64 2d 62 61 | more.complex.setups.like.load-ba |
cd160 | 6c 61 6e 63 69 6e 67 2c 20 64 6f 65 73 20 74 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 63 61 75 | lancing,.does.this.behaviour.cau |
cd180 | 73 65 20 70 72 6f 62 6c 65 6d 73 2e 00 49 66 20 73 65 74 2c 20 49 50 76 34 20 64 69 72 65 63 74 | se.problems..If.set,.IPv4.direct |
cd1a0 | 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 | ed.broadcast.forwarding.will.be. |
cd1c0 | 63 6f 6d 70 6c 65 74 65 6c 79 20 64 69 73 61 62 6c 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 6f | completely.disabled.regardless.o |
cd1e0 | 66 20 77 68 65 74 68 65 72 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 64 69 72 65 63 74 65 64 | f.whether.per-interface.directed |
cd200 | 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 | .broadcast.forwarding.is.enabled |
cd220 | 20 6f 72 20 6e 6f 74 2e 00 49 66 20 73 75 66 66 69 78 20 69 73 20 6f 6d 69 74 74 65 64 2c 20 6d | .or.not..If.suffix.is.omitted,.m |
cd240 | 69 6e 75 74 65 73 20 61 72 65 20 69 6d 70 6c 69 65 64 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 | inutes.are.implied..If.the.:cfgc |
cd260 | 6d 64 3a 60 6e 6f 2d 70 72 65 70 65 6e 64 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 | md:`no-prepend`.attribute.is.spe |
cd280 | 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d | cified,.then.the.supplied.local- |
cd2a0 | 61 73 20 69 73 20 6e 6f 74 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 | as.is.not.prepended.to.the.recei |
cd2c0 | 76 65 64 20 41 53 5f 50 41 54 48 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 70 | ved.AS_PATH..If.the.:cfgcmd:`rep |
cd2e0 | 6c 61 63 65 2d 61 73 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c | lace-as`.attribute.is.specified, |
cd300 | 20 74 68 65 6e 20 6f 6e 6c 79 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 73 | .then.only.the.supplied.local-as |
cd320 | 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 20 77 68 65 | .is.prepended.to.the.AS_PATH.whe |
cd340 | 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 2d 72 6f 75 74 65 20 75 70 64 61 74 | n.transmitting.local-route.updat |
cd360 | 65 73 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 00 49 66 20 74 68 65 20 41 52 50 20 74 61 62 6c | es.to.this.peer..If.the.ARP.tabl |
cd380 | 65 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 | e.already.contains.the.IP.addres |
cd3a0 | 73 20 6f 66 20 74 68 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 20 66 72 61 6d 65 2c 20 74 | s.of.the.gratuitous.arp.frame,.t |
cd3c0 | 68 65 20 61 72 70 20 74 61 62 6c 65 20 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 72 65 67 | he.arp.table.will.be.updated.reg |
cd3e0 | 61 72 64 6c 65 73 73 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e 20 6f 72 | ardless.if.this.setting.is.on.or |
cd400 | 20 6f 66 66 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 | .off..If.the.AS-Path.for.the.rou |
cd420 | 74 65 20 68 61 73 20 61 20 70 72 69 76 61 74 65 20 41 53 4e 20 62 65 74 77 65 65 6e 20 70 75 62 | te.has.a.private.ASN.between.pub |
cd440 | 6c 69 63 20 41 53 4e 73 2c 20 69 74 20 69 73 20 61 73 73 75 6d 65 64 20 74 68 61 74 20 74 68 69 | lic.ASNs,.it.is.assumed.that.thi |
cd460 | 73 20 69 73 20 61 20 64 65 73 69 67 6e 20 63 68 6f 69 63 65 2c 20 61 6e 64 20 74 68 65 20 70 72 | s.is.a.design.choice,.and.the.pr |
cd480 | 69 76 61 74 65 20 41 53 4e 20 69 73 20 6e 6f 74 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 | ivate.ASN.is.not.removed..If.the |
cd4a0 | 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 6f 6e 6c 79 20 | .AS-Path.for.the.route.has.only. |
cd4c0 | 70 72 69 76 61 74 65 20 41 53 4e 73 2c 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 61 | private.ASNs,.the.private.ASNs.a |
cd4e0 | 72 65 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 49 50 20 70 72 65 66 69 78 20 6d 61 73 | re.removed..If.the.IP.prefix.mas |
cd500 | 6b 20 69 73 20 70 72 65 73 65 6e 74 2c 20 69 74 20 64 69 72 65 63 74 73 20 6f 70 65 6e 6e 68 72 | k.is.present,.it.directs.opennhr |
cd520 | 70 20 74 6f 20 75 73 65 20 74 68 69 73 20 70 65 65 72 20 61 73 20 61 20 6e 65 78 74 20 68 6f 70 | p.to.use.this.peer.as.a.next.hop |
cd540 | 20 73 65 72 76 65 72 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 52 65 73 6f 6c 75 74 69 6f 6e 20 | .server.when.sending.Resolution. |
cd560 | 52 65 71 75 65 73 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 20 73 75 62 6e 65 74 2e 00 49 | Requests.matching.this.subnet..I |
cd580 | 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 | f.the.RADIUS.server.sends.the.at |
cd5a0 | 74 72 69 62 75 74 65 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d | tribute.``Delegated-IPv6-Prefix- |
cd5c0 | 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 65 66 69 78 20 77 69 | Pool``,.IPv6.delegation.pefix.wi |
cd5e0 | 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 | ll.be.allocated.from.a.predefine |
cd600 | 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 64 65 6c 65 67 61 74 65 60 60 20 77 68 6f 73 65 20 6e | d.IPv6.pool.``delegate``.whose.n |
cd620 | 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 | ame.equals.the.attribute.value.. |
cd640 | 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 | If.the.RADIUS.server.sends.the.a |
cd660 | 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 | ttribute.``Framed-IP-Address``.t |
cd680 | 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f | hen.this.IP.address.will.be.allo |
cd6a0 | 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 | cated.to.the.client.and.the.opti |
cd6c0 | 6f 6e 20 60 60 64 65 66 61 75 6c 74 2d 70 6f 6f 6c 60 60 20 77 69 74 68 69 6e 20 74 68 65 20 43 | on.``default-pool``.within.the.C |
cd6e0 | 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 | LI.config.is.being.ignored..If.t |
cd700 | 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 | he.RADIUS.server.sends.the.attri |
cd720 | 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 | bute.``Framed-IP-Address``.then. |
cd740 | 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 | this.IP.address.will.be.allocate |
cd760 | 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 | d.to.the.client.and.the.option.i |
cd780 | 70 2d 70 6f 6f 6c 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 | p-pool.within.the.CLI.config.is. |
cd7a0 | 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 | being.ignored..If.the.RADIUS.ser |
cd7c0 | 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 | ver.sends.the.attribute.``Framed |
cd7e0 | 2d 50 6f 6f 6c 60 60 2c 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f | -Pool``,.IP.address.will.be.allo |
cd800 | 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 20 70 6f 6f 6c 20 | cated.from.a.predefined.IP.pool. |
cd820 | 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 | whose.name.equals.the.attribute. |
cd840 | 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 | value..If.the.RADIUS.server.send |
cd860 | 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d | s.the.attribute.``Stateful-IPv6- |
cd880 | 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 77 69 6c | Address-Pool``,.IPv6.address.wil |
cd8a0 | 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 | l.be.allocated.from.a.predefined |
cd8c0 | 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 70 72 65 66 69 78 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 | .IPv6.pool.``prefix``.whose.name |
cd8e0 | 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 | .equals.the.attribute.value..If. |
cd900 | 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 73 20 74 68 65 20 61 74 74 72 69 | the.RADIUS.server.uses.the.attri |
cd920 | 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 2c 20 70 70 70 20 74 75 6e 6e 65 6c | bute.``NAS-Port-Id``,.ppp.tunnel |
cd940 | 73 20 77 69 6c 6c 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 49 66 20 74 68 65 20 61 76 65 72 61 67 | s.will.be.renamed..If.the.averag |
cd960 | 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 2a | e.queue.size.is.lower.than.the.* |
cd980 | 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 | *min-threshold**,.an.arriving.pa |
cd9a0 | 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 | cket.will.be.placed.in.the.queue |
cd9c0 | 2e 00 49 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c | ..If.the.current.queue.size.is.l |
cd9e0 | 61 72 67 65 72 20 74 68 61 6e 20 2a 2a 71 75 65 75 65 2d 6c 69 6d 69 74 2a 2a 2c 20 74 68 65 6e | arger.than.**queue-limit**,.then |
cda00 | 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 61 76 | .packets.will.be.dropped..The.av |
cda20 | 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 | erage.queue.size.depends.on.its. |
cda40 | 66 6f 72 6d 65 72 20 61 76 65 72 61 67 65 20 73 69 7a 65 20 61 6e 64 20 69 74 73 20 63 75 72 72 | former.average.size.and.its.curr |
cda60 | 65 6e 74 20 6f 6e 65 2e 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 | ent.one..If.the.interface.where. |
cda80 | 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 | the.packet.was.received.is.part. |
cdaa0 | 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 | of.a.bridge,.then.packetis.proce |
cdac0 | 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 | ssed.at.the.**Bridge.Layer**,.wh |
cdae0 | 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 | ich.contains.a.basic.setup.for.b |
cdb00 | 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 | ridge.filtering:.If.the.interfac |
cdb20 | 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 | e.where.the.packet.was.received. |
cdb40 | 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 74 68 65 20 70 61 | is.part.of.a.bridge,.then.the.pa |
cdb60 | 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 | cket.is.processed.at.the.**Bridg |
cdb80 | 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 | e.Layer**,.which.contains.a.basi |
cdba0 | 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 | c.setup.for.bridge.filtering:.If |
cdbc0 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 | .the.interface.where.the.packet. |
cdbe0 | 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 | was.received.isn't.part.of.a.bri |
cdc00 | 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 | dge,.then.packetis.processed.at. |
cdc20 | 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 74 68 65 20 70 72 6f 74 6f 63 6f | the.**IP.Layer**:.If.the.protoco |
cdc40 | 6c 20 69 73 20 49 50 76 36 20 74 68 65 6e 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 | l.is.IPv6.then.the.source.and.de |
cdc60 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 66 69 72 73 74 20 68 61 | stination.addresses.are.first.ha |
cdc80 | 73 68 65 64 20 75 73 69 6e 67 20 69 70 76 36 5f 61 64 64 72 5f 68 61 73 68 2e 00 49 66 20 74 68 | shed.using.ipv6_addr_hash..If.th |
cdca0 | 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 20 70 65 65 72 20 69 73 20 72 75 6e 6e | e.statically.mapped.peer.is.runn |
cdcc0 | 69 6e 67 20 43 69 73 63 6f 20 49 4f 53 2c 20 73 70 65 63 69 66 79 20 74 68 65 20 63 69 73 63 6f | ing.Cisco.IOS,.specify.the.cisco |
cdce0 | 20 6b 65 79 77 6f 72 64 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 66 69 78 20 73 74 61 74 | .keyword..It.is.used.to.fix.stat |
cdd00 | 69 63 61 6c 6c 79 20 74 68 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 | ically.the.Registration.Request. |
cdd20 | 49 44 20 73 6f 20 74 68 61 74 20 61 20 6d 61 74 63 68 69 6e 67 20 50 75 72 67 65 20 52 65 71 75 | ID.so.that.a.matching.Purge.Requ |
cdd40 | 65 73 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 69 66 20 4e 42 4d 41 20 61 64 64 72 65 73 73 20 | est.can.be.sent.if.NBMA.address. |
cdd60 | 68 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 69 73 20 69 73 20 74 6f 20 77 6f 72 6b 20 61 72 6f | has.changed..This.is.to.work.aro |
cdd80 | 75 6e 64 20 62 72 6f 6b 65 6e 20 49 4f 53 20 77 68 69 63 68 20 72 65 71 75 69 72 65 73 20 50 75 | und.broken.IOS.which.requires.Pu |
cdda0 | 72 67 65 20 52 65 71 75 65 73 74 20 49 44 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 6f 72 69 67 | rge.Request.ID.to.match.the.orig |
cddc0 | 69 6e 61 6c 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 49 44 2e 00 49 66 | inal.Registration.Request.ID..If |
cdde0 | 20 74 68 65 20 73 79 73 74 65 6d 20 64 65 74 65 63 74 73 20 61 6e 20 75 6e 63 6f 6e 66 69 67 75 | .the.system.detects.an.unconfigu |
cde00 | 72 65 64 20 77 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 | red.wireless.device,.it.will.be. |
cde20 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 | automatically.added.the.configur |
cde40 | 61 74 69 6f 6e 20 74 72 65 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 61 6e 79 20 64 65 74 65 63 | ation.tree,.specifying.any.detec |
cde60 | 74 65 64 20 73 65 74 74 69 6e 67 73 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 74 73 20 4d | ted.settings.(for.example,.its.M |
cde80 | 41 43 20 61 64 64 72 65 73 73 29 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 75 | AC.address).and.configured.to.ru |
cdea0 | 6e 20 69 6e 20 6d 6f 6e 69 74 6f 72 20 6d 6f 64 65 2e 00 49 66 20 74 68 65 20 74 61 62 6c 65 20 | n.in.monitor.mode..If.the.table. |
cdec0 | 69 73 20 65 6d 70 74 79 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 61 20 77 61 72 6e 69 6e 67 20 | is.empty.and.you.have.a.warning. |
cdee0 | 6d 65 73 73 61 67 65 2c 20 69 74 20 6d 65 61 6e 73 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 6e | message,.it.means.conntrack.is.n |
cdf00 | 6f 74 20 65 6e 61 62 6c 65 64 2e 20 54 6f 20 65 6e 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 2c | ot.enabled..To.enable.conntrack, |
cdf20 | 20 6a 75 73 74 20 63 72 65 61 74 65 20 61 20 4e 41 54 20 6f 72 20 61 20 66 69 72 65 77 61 6c 6c | .just.create.a.NAT.or.a.firewall |
cdf40 | 20 72 75 6c 65 2e 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 73 74 61 | .rule..:cfgcmd:`set.firewall.sta |
cdf60 | 74 65 2d 70 6f 6c 69 63 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 63 74 69 6f 6e 20 61 63 63 | te-policy.established.action.acc |
cdf80 | 65 70 74 60 00 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 | ept`.If.there.are.no.free.addres |
cdfa0 | 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 | ses.but.there.are.abandoned.IP.a |
cdfc0 | 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 | ddresses,.the.DHCP.server.will.a |
cdfe0 | 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 | ttempt.to.reclaim.an.abandoned.I |
ce000 | 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 | P.address.regardless.of.the.valu |
ce020 | 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 74 68 65 72 | e.of.abandon-lease-time..If.ther |
ce040 | 65 20 69 73 20 53 4e 41 54 20 72 75 6c 65 73 20 6f 6e 20 65 74 68 31 2c 20 6e 65 65 64 20 74 6f | e.is.SNAT.rules.on.eth1,.need.to |
ce060 | 20 61 64 64 20 65 78 63 6c 75 64 65 20 72 75 6c 65 00 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e | .add.exclude.rule.If.this.comman |
ce080 | 64 20 69 73 20 69 6e 76 6f 6b 65 64 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 65 20 6d 6f 64 65 | d.is.invoked.from.configure.mode |
ce0a0 | 20 77 69 74 68 20 74 68 65 20 60 60 72 75 6e 60 60 20 70 72 65 66 69 78 20 74 68 65 20 6b 65 79 | .with.the.``run``.prefix.the.key |
ce0c0 | 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 74 | .is.automatically.installed.to.t |
ce0e0 | 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 69 6e 74 65 72 66 61 63 65 3a 00 49 66 20 74 68 69 | he.appropriate.interface:.If.thi |
ce100 | 73 20 69 73 20 73 65 74 20 74 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 69 6c 6c 20 69 6e | s.is.set.the.relay.agent.will.in |
ce120 | 73 65 72 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 49 44 2e 20 54 68 69 73 20 6f 70 74 69 | sert.the.interface.ID..This.opti |
ce140 | 6f 6e 20 69 73 20 73 65 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6d 6f 72 65 20 | on.is.set.automatically.if.more. |
ce160 | 74 68 61 6e 20 6f 6e 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 | than.one.listening.interfaces.ar |
ce180 | 65 20 69 6e 20 75 73 65 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 65 6e 61 62 | e.in.use..If.this.option.is.enab |
ce1a0 | 6c 65 64 2c 20 74 68 65 6e 20 74 68 65 20 61 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 63 | led,.then.the.already-selected.c |
ce1c0 | 68 65 63 6b 2c 20 77 68 65 72 65 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 20 65 42 47 | heck,.where.already.selected.eBG |
ce1e0 | 50 20 72 6f 75 74 65 73 20 61 72 65 20 70 72 65 66 65 72 72 65 64 2c 20 69 73 20 73 6b 69 70 70 | P.routes.are.preferred,.is.skipp |
ce200 | 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 | ed..If.this.option.is.specified. |
ce220 | 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 | and.is.greater.than.0,.then.the. |
ce240 | 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f | PPP.module.will.send.LCP.pings.o |
ce260 | 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 | f.the.echo.request.every.`<inter |
ce280 | 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 | val>`.seconds..If.this.option.is |
ce2a0 | 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 | .specified.and.is.greater.than.0 |
ce2c0 | 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 | ,.then.the.PPP.module.will.send. |
ce2e0 | 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 | LCP.pings.of.the.echo.request.ev |
ce300 | 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 75 6c | ery.`<interval>`.seconds..Defaul |
ce320 | 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 30 2a 2a 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f | t.value.is.**30**..If.this.optio |
ce340 | 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 | n.is.unset.(default),.incoming.I |
ce360 | 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 77 69 6c | P.directed.broadcast.packets.wil |
ce380 | 6c 20 6e 6f 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 | l.not.be.forwarded..If.this.opti |
ce3a0 | 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 72 65 70 6c 79 20 66 6f 72 | on.is.unset.(default),.reply.for |
ce3c0 | 20 61 6e 79 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 2c 20 63 6f | .any.local.target.IP.address,.co |
ce3e0 | 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 74 68 | nfigured.on.any.interface..If.th |
ce400 | 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 65 74 20 6f 72 20 30 2c 20 61 6e | is.parameter.is.not.set.or.0,.an |
ce420 | 20 6f 6e 2d 64 65 6d 61 6e 64 20 6c 69 6e 6b 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 74 61 6b 65 | .on-demand.link.will.not.be.take |
ce440 | 6e 20 64 6f 77 6e 20 77 68 65 6e 20 69 74 20 69 73 20 69 64 6c 65 20 61 6e 64 20 61 66 74 65 72 | n.down.when.it.is.idle.and.after |
ce460 | 20 74 68 65 20 69 6e 69 74 69 61 6c 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 74 68 | .the.initial.establishment.of.th |
ce480 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 74 20 77 69 6c 6c 20 73 74 61 79 20 75 70 20 66 6f | e.connection..It.will.stay.up.fo |
ce4a0 | 72 65 76 65 72 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 | rever..If.this.parameter.is.not. |
ce4c0 | 73 65 74 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 68 6f 6c 64 6f 66 66 20 74 69 6d 65 20 69 73 | set,.the.default.holdoff.time.is |
ce4e0 | 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 | .30.seconds..If.unset,.incoming. |
ce500 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | connections.to.the.RADIUS.server |
ce520 | 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 | .will.use.the.nearest.interface. |
ce540 | 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 | address.pointing.towards.the.ser |
ce560 | 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 | ver.-.making.it.error.prone.on.e |
ce580 | 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 | .g..OSPF.networks.when.a.link.fa |
ce5a0 | 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e | ils.and.a.backup.route.is.taken. |
ce5c0 | 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 | .If.unset,.incoming.connections. |
ce5e0 | 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 | to.the.TACACS.server.will.use.th |
ce600 | 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e | e.nearest.interface.address.poin |
ce620 | 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 | ting.towards.the.server.-.making |
ce640 | 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 | .it.error.prone.on.e.g..OSPF.net |
ce660 | 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 | works.when.a.link.fails.and.a.ba |
ce680 | 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 49 66 20 79 6f 75 20 61 70 70 6c | ckup.route.is.taken..If.you.appl |
ce6a0 | 79 20 61 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 6e | y.a.parameter.to.an.individual.n |
ce6c0 | 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 79 6f 75 20 6f 76 65 72 72 69 64 65 | eighbor.IP.address,.you.override |
ce6e0 | 20 74 68 65 20 61 63 74 69 6f 6e 20 64 65 66 69 6e 65 64 20 66 6f 72 20 61 20 70 65 65 72 20 67 | .the.action.defined.for.a.peer.g |
ce700 | 72 6f 75 70 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 61 74 20 49 50 20 61 64 64 72 65 | roup.that.includes.that.IP.addre |
ce720 | 73 73 2e 00 49 66 20 79 6f 75 20 61 72 65 20 61 20 68 61 63 6b 65 72 20 6f 72 20 77 61 6e 74 20 | ss..If.you.are.a.hacker.or.want. |
ce740 | 74 6f 20 74 72 79 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 77 65 20 73 75 70 70 6f 72 74 20 70 61 | to.try.on.your.own.we.support.pa |
ce760 | 73 73 69 6e 67 20 72 61 77 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 4f 70 65 | ssing.raw.OpenVPN.options.to.Ope |
ce780 | 6e 56 50 4e 2e 00 49 66 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 56 | nVPN..If.you.are.configuring.a.V |
ce7a0 | 52 46 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 70 75 72 70 6f 73 65 73 2c 20 74 68 65 72 | RF.for.management.purposes,.ther |
ce7c0 | 65 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 20 77 61 79 20 74 6f 20 66 6f 72 63 65 20 73 | e.is.currently.no.way.to.force.s |
ce7e0 | 79 73 74 65 6d 20 44 4e 53 20 74 72 61 66 66 69 63 20 76 69 61 20 61 20 73 70 65 63 69 66 69 63 | ystem.DNS.traffic.via.a.specific |
ce800 | 20 56 52 46 2e 00 49 66 20 79 6f 75 20 61 72 65 20 6e 65 77 20 74 6f 20 74 68 65 73 65 20 72 6f | .VRF..If.you.are.new.to.these.ro |
ce820 | 75 74 69 6e 67 20 73 65 63 75 72 69 74 79 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 68 65 6e | uting.security.technologies.then |
ce840 | 20 74 68 65 72 65 20 69 73 20 61 6e 20 60 65 78 63 65 6c 6c 65 6e 74 20 67 75 69 64 65 20 74 6f | .there.is.an.`excellent.guide.to |
ce860 | 20 52 50 4b 49 60 5f 20 62 79 20 4e 4c 6e 65 74 20 4c 61 62 73 20 77 68 69 63 68 20 77 69 6c 6c | .RPKI`_.by.NLnet.Labs.which.will |
ce880 | 20 67 65 74 20 79 6f 75 20 75 70 20 74 6f 20 73 70 65 65 64 20 76 65 72 79 20 71 75 69 63 6b 6c | .get.you.up.to.speed.very.quickl |
ce8a0 | 79 2e 20 54 68 65 69 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 65 78 70 6c 61 69 6e 73 20 | y..Their.documentation.explains. |
ce8c0 | 65 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 77 68 61 74 20 52 50 4b 49 20 69 73 20 74 6f 20 | everything.from.what.RPKI.is.to. |
ce8e0 | 64 65 70 6c 6f 79 69 6e 67 20 69 74 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 2e 20 49 74 20 61 | deploying.it.in.production..It.a |
ce900 | 6c 73 6f 20 68 61 73 20 73 6f 6d 65 20 60 68 65 6c 70 20 61 6e 64 20 6f 70 65 72 61 74 69 6f 6e | lso.has.some.`help.and.operation |
ce920 | 61 6c 20 67 75 69 64 61 6e 63 65 60 5f 20 69 6e 63 6c 75 64 69 6e 67 20 22 57 68 61 74 20 63 61 | al.guidance`_.including."What.ca |
ce940 | 6e 20 49 20 64 6f 20 61 62 6f 75 74 20 6d 79 20 72 6f 75 74 65 20 68 61 76 69 6e 67 20 61 6e 20 | n.I.do.about.my.route.having.an. |
ce960 | 49 6e 76 61 6c 69 64 20 73 74 61 74 65 3f 22 00 49 66 20 79 6f 75 20 61 72 65 20 72 65 73 70 6f | Invalid.state?".If.you.are.respo |
ce980 | 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 65 73 20 | nsible.for.the.global.addresses. |
ce9a0 | 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2c 20 70 6c 65 61 73 65 | assigned.to.your.network,.please |
ce9c0 | 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 70 72 65 66 69 78 65 73 20 68 61 | .make.sure.that.your.prefixes.ha |
ce9e0 | 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 | ve.ROAs.associated.with.them.to. |
cea00 | 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 6f 75 6e 64 60 20 62 79 20 52 50 4b 49 2e 20 | avoid.being.`notfound`.by.RPKI.. |
cea20 | 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 73 20 77 69 6c 6c 20 69 6e 76 6f 6c 76 65 20 | For.most.ASNs.this.will.involve. |
cea40 | 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 | publishing.ROAs.via.your.:abbr:` |
cea60 | 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 65 72 6e 65 74 20 52 65 67 69 73 74 72 79 29 | RIR.(Regional.Internet.Registry) |
cea80 | 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 43 2c 20 41 52 49 4e 2c 20 4c 41 43 4e 49 43 | `.(RIPE.NCC,.APNIC,.ARIN,.LACNIC |
ceaa0 | 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 20 79 | .or.AFRINIC),.and.is.something.y |
ceac0 | 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 20 74 6f 20 64 6f 20 77 68 65 6e 65 76 65 72 | ou.are.encouraged.to.do.whenever |
ceae0 | 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 61 64 64 72 65 73 73 65 73 20 | .you.plan.to.announce.addresses. |
ceb00 | 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 46 | into.the.DFZ..If.you.are.using.F |
ceb20 | 51 2d 43 6f 44 65 6c 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 53 68 61 70 65 72 5f 20 61 6e | Q-CoDel.embedded.into.Shaper_.an |
ceb40 | 64 20 79 6f 75 20 68 61 76 65 20 6c 61 72 67 65 20 72 61 74 65 73 20 28 31 30 30 4d 62 69 74 20 | d.you.have.large.rates.(100Mbit. |
ceb60 | 61 6e 64 20 61 62 6f 76 65 29 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 73 69 64 65 72 20 69 6e 63 | and.above),.you.may.consider.inc |
ceb80 | 72 65 61 73 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 74 6f 20 38 30 30 30 20 6f 72 20 68 69 67 | reasing.`quantum`.to.8000.or.hig |
ceba0 | 68 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 63 68 65 64 75 6c 65 72 20 73 61 76 65 73 20 | her.so.that.the.scheduler.saves. |
cebc0 | 43 50 55 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 | CPU..If.you.are.using.OSPF.as.IG |
cebe0 | 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 | P,.always.the.closest.interface. |
cec00 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 | connected.to.the.RADIUS.server.i |
cec20 | 73 20 75 73 65 64 2e 20 57 69 74 68 20 56 79 4f 53 20 31 2e 32 20 79 6f 75 20 63 61 6e 20 62 69 | s.used..With.VyOS.1.2.you.can.bi |
cec40 | 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 | nd.all.outgoing.RADIUS.requests. |
cec60 | 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c | to.a.single.source.IP.e.g..the.l |
cec80 | 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 | oopback.interface..If.you.are.us |
ceca0 | 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 | ing.OSPF.as.IGP,.always.the.clos |
cecc0 | 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 | est.interface.connected.to.the.R |
cece0 | 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 62 69 | ADIUS.server.is.used..You.can.bi |
ced00 | 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 | nd.all.outgoing.RADIUS.requests. |
ced20 | 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c | to.a.single.source.IP.e.g..the.l |
ced40 | 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 63 68 61 6e 67 65 | oopback.interface..If.you.change |
ced60 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 68 61 73 68 | .the.default.encryption.and.hash |
ced80 | 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2c 20 62 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 | ing.algorithms,.be.sure.that.the |
ceda0 | 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 65 6e 64 73 20 68 61 76 65 20 6d 61 74 63 | .local.and.remote.ends.have.matc |
cedc0 | 68 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 | hing.configurations,.otherwise.t |
cede0 | 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 6e 6f 74 20 63 6f 6d 65 20 75 70 2e 00 49 66 20 79 | he.tunnel.will.not.come.up..If.y |
cee00 | 6f 75 20 63 68 6f 6f 73 65 20 61 6e 79 20 61 73 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 68 61 74 | ou.choose.any.as.the.option.that |
cee20 | 20 77 69 6c 6c 20 63 61 75 73 65 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 61 | .will.cause.all.protocols.that.a |
cee40 | 72 65 20 73 65 6e 64 69 6e 67 20 72 6f 75 74 65 73 20 74 6f 20 7a 65 62 72 61 2e 00 49 66 20 79 | re.sending.routes.to.zebra..If.y |
cee60 | 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 63 6c 61 73 73 20 66 6f 72 20 2a 2a 56 6f 49 50 20 | ou.configure.a.class.for.**VoIP. |
cee80 | 74 72 61 66 66 69 63 2a 2a 2c 20 64 6f 6e 27 74 20 67 69 76 65 20 69 74 20 61 6e 79 20 2a 63 65 | traffic**,.don't.give.it.any.*ce |
ceea0 | 69 6c 69 6e 67 2a 2c 20 6f 74 68 65 72 77 69 73 65 20 6e 65 77 20 56 6f 49 50 20 63 61 6c 6c 73 | iling*,.otherwise.new.VoIP.calls |
ceec0 | 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 61 76 | .could.start.when.the.link.is.av |
ceee0 | 61 69 6c 61 62 6c 65 20 61 6e 64 20 67 65 74 20 73 75 64 64 65 6e 6c 79 20 64 72 6f 70 70 65 64 | ailable.and.get.suddenly.dropped |
cef00 | 20 77 68 65 6e 20 6f 74 68 65 72 20 63 6c 61 73 73 65 73 20 73 74 61 72 74 20 75 73 69 6e 67 20 | .when.other.classes.start.using. |
cef20 | 74 68 65 69 72 20 61 73 73 69 67 6e 65 64 20 2a 62 61 6e 64 77 69 64 74 68 2a 20 73 68 61 72 65 | their.assigned.*bandwidth*.share |
cef40 | 2e 00 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 74 68 69 73 2c 20 79 6f 75 20 77 69 6c 6c 20 70 | ..If.you.enable.this,.you.will.p |
cef60 | 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 64 69 76 65 72 73 69 74 79 2d 66 61 | robably.want.to.set.diversity-fa |
cef80 | 63 74 6f 72 20 61 6e 64 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 65 | ctor.and.channel.below..If.you.e |
cefa0 | 6e 74 65 72 20 61 20 76 61 6c 75 65 20 73 6d 61 6c 6c 65 72 20 74 68 61 6e 20 36 30 20 73 65 63 | nter.a.value.smaller.than.60.sec |
cefc0 | 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 61 6e 64 20 | onds.be.aware.that.this.can.and. |
cefe0 | 77 69 6c 6c 20 61 66 66 65 63 74 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 61 74 20 73 63 61 6c 65 | will.affect.convergence.at.scale |
cf000 | 2e 00 49 66 20 79 6f 75 20 66 65 65 6c 20 62 65 74 74 65 72 20 66 6f 72 77 61 72 64 69 6e 67 20 | ..If.you.feel.better.forwarding. |
cf020 | 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 79 | all.authentication.requests.to.y |
cf040 | 6f 75 72 20 65 6e 74 65 72 70 72 69 73 65 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2c 20 75 | our.enterprises.RADIUS.server,.u |
cf060 | 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 68 61 | se.the.commands.below..If.you.ha |
cf080 | 70 70 65 6e 20 74 6f 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 76 69 72 74 75 61 6c 20 65 6e | ppen.to.run.this.in.a.virtual.en |
cf0a0 | 76 69 72 6f 6e 6d 65 6e 74 20 6c 69 6b 65 20 62 79 20 45 56 45 2d 4e 47 20 79 6f 75 20 6e 65 65 | vironment.like.by.EVE-NG.you.nee |
cf0c0 | 64 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 56 79 4f 53 20 4e 49 43 20 69 73 20 73 65 74 | d.to.ensure.your.VyOS.NIC.is.set |
cf0e0 | 20 74 6f 20 75 73 65 20 74 68 65 20 65 31 30 30 30 20 64 72 69 76 65 72 2e 20 55 73 69 6e 67 20 | .to.use.the.e1000.driver..Using. |
cf100 | 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 76 69 72 74 69 6f 2d 6e 65 74 2d 70 63 69 60 60 20 6f | the.default.``virtio-net-pci``.o |
cf120 | 72 20 74 68 65 20 60 60 76 6d 78 6e 65 74 33 60 60 20 64 72 69 76 65 72 20 77 69 6c 6c 20 6e 6f | r.the.``vmxnet3``.driver.will.no |
cf140 | 74 20 77 6f 72 6b 2e 20 49 43 4d 50 20 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 | t.work..ICMP.messages.will.not.b |
cf160 | 65 20 70 72 6f 70 65 72 6c 79 20 70 72 6f 63 65 73 73 65 64 2e 20 54 68 65 79 20 61 72 65 20 76 | e.properly.processed..They.are.v |
cf180 | 69 73 69 62 6c 65 20 6f 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 77 69 72 65 20 62 75 74 20 77 | isible.on.the.virtual.wire.but.w |
cf1a0 | 69 6c 6c 20 6e 6f 74 20 6d 61 6b 65 20 69 74 20 66 75 6c 6c 79 20 75 70 20 74 68 65 20 6e 65 74 | ill.not.make.it.fully.up.the.net |
cf1c0 | 77 6f 72 6b 69 6e 67 20 73 74 61 63 6b 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 | working.stack..If.you.happen.to. |
cf1e0 | 75 73 65 20 53 6f 6c 61 72 57 69 6e 64 73 20 4f 72 69 6f 6e 20 61 73 20 4e 4d 53 20 79 6f 75 20 | use.SolarWinds.Orion.as.NMS.you. |
cf200 | 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 44 65 76 69 63 65 20 54 65 6d 70 6c 61 74 65 | can.also.use.the.Device.Template |
cf220 | 73 20 4d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 20 74 65 6d 70 6c 61 74 65 20 66 6f 72 20 56 79 4f | s.Management..A.template.for.VyO |
cf240 | 53 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 69 6d 70 6f 72 74 65 64 2e 00 49 66 20 79 6f 75 | S.can.be.easily.imported..If.you |
cf260 | 20 68 61 70 70 65 6e 65 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 63 6f 20 4e 4d 2d 31 36 41 20 | .happened.to.use.a.Cisco.NM-16A. |
cf280 | 2d 20 53 69 78 74 65 65 6e 20 50 6f 72 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 | -.Sixteen.Port.Async.Network.Mod |
cf2a0 | 75 6c 65 20 6f 72 20 4e 4d 2d 33 32 41 20 2d 20 54 68 69 72 74 79 2d 74 77 6f 20 50 6f 72 74 20 | ule.or.NM-32A.-.Thirty-two.Port. |
cf2c0 | 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 2d 20 74 68 69 73 20 69 73 20 79 | Async.Network.Module.-.this.is.y |
cf2e0 | 6f 75 72 20 56 79 4f 53 20 72 65 70 6c 61 63 65 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 | our.VyOS.replacement..If.you.hav |
cf300 | 65 20 61 20 6c 6f 74 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 2f 6f 72 20 61 20 | e.a.lot.of.interfaces,.and/or.a. |
cf320 | 6c 6f 74 20 6f 66 20 73 75 62 6e 65 74 73 2c 20 74 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 4f 53 | lot.of.subnets,.then.enabling.OS |
cf340 | 50 46 20 76 69 61 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 79 20 72 65 73 75 6c 74 20 69 | PF.via.this.command.may.result.i |
cf360 | 6e 20 61 20 73 6c 69 67 68 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 69 6d 70 72 6f 76 65 6d 65 | n.a.slight.performance.improveme |
cf380 | 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 60 | nt..If.you.have.configured.the.` |
cf3a0 | 49 4e 53 49 44 45 2d 4f 55 54 60 20 70 6f 6c 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 | INSIDE-OUT`.policy,.you.will.nee |
cf3c0 | 64 20 74 6f 20 61 64 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 74 6f 20 70 65 72 | d.to.add.additional.rules.to.per |
cf3e0 | 6d 69 74 20 69 6e 62 6f 75 6e 64 20 4e 41 54 20 74 72 61 66 66 69 63 2e 00 49 66 20 79 6f 75 20 | mit.inbound.NAT.traffic..If.you. |
cf400 | 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 | have.multiple.addresses.configur |
cf420 | 65 64 20 6f 6e 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 | ed.on.a.particular.interface.and |
cf440 | 20 77 6f 75 6c 64 20 6c 69 6b 65 20 50 49 4d 20 74 6f 20 75 73 65 20 61 20 73 70 65 63 69 66 69 | .would.like.PIM.to.use.a.specifi |
cf460 | 63 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 | c.source.address.associated.with |
cf480 | 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 | .that.interface..If.you.need.to. |
cf4a0 | 73 61 6d 70 6c 65 20 61 6c 73 6f 20 65 67 72 65 73 73 20 74 72 61 66 66 69 63 2c 20 79 6f 75 20 | sample.also.egress.traffic,.you. |
cf4c0 | 6d 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 67 72 65 73 73 20 66 6c 6f | may.want.to.configure.egress.flo |
cf4e0 | 77 2d 61 63 63 6f 75 6e 74 69 6e 67 3a 00 49 66 20 79 6f 75 20 6f 6e 6c 79 20 77 61 6e 74 20 74 | w-accounting:.If.you.only.want.t |
cf500 | 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 65 | o.check.if.the.user.account.is.e |
cf520 | 6e 61 62 6c 65 64 20 61 6e 64 20 63 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 28 61 67 61 | nabled.and.can.authenticate.(aga |
cf540 | 69 6e 73 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 67 72 6f 75 70 29 20 74 68 65 20 66 6f 6c 6c | inst.the.primary.group).the.foll |
cf560 | 6f 77 69 6e 67 20 73 6e 69 70 70 65 64 20 69 73 20 73 75 66 66 69 63 69 65 6e 74 3a 00 49 66 20 | owing.snipped.is.sufficient:.If. |
cf580 | 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 | you.set.a.custom.RADIUS.attribut |
cf5a0 | 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 | e.you.must.define.it.on.both.dic |
cf5c0 | 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 | tionaries.at.RADIUS.server.and.c |
cf5e0 | 6c 69 65 6e 74 2c 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 79 6f 73 20 72 6f 75 74 65 72 20 | lient,.which.is.the.vyos.router. |
cf600 | 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2e 00 49 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 | in.our.example..If.you.set.a.cus |
cf620 | 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 | tom.RADIUS.attribute.you.must.de |
cf640 | 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 | fine.it.on.both.dictionaries.at. |
cf660 | 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 49 66 20 79 6f 75 | RADIUS.server.and.client..If.you |
cf680 | 20 75 73 65 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 66 6f | .use.USB.to.serial.converters.fo |
cf6a0 | 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 61 70 70 6c 69 61 | r.connecting.to.your.VyOS.applia |
cf6c0 | 6e 63 65 20 70 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 6d 6f 73 74 20 6f 66 20 74 68 65 | nce.please.note.that.most.of.the |
cf6e0 | 6d 20 75 73 65 20 73 6f 66 74 77 61 72 65 20 65 6d 75 6c 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 | m.use.software.emulation.without |
cf700 | 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 79 6f 75 20 73 68 | .flow.control..This.means.you.sh |
cf720 | 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 20 63 6f 6d 6d 6f 6e 20 62 61 75 64 20 72 61 | ould.start.with.a.common.baud.ra |
cf740 | 74 65 20 28 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 39 36 30 30 20 62 61 75 64 29 20 61 73 20 6f 74 | te.(most.likely.9600.baud).as.ot |
cf760 | 68 65 72 77 69 73 65 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 63 61 6e 20 6e 6f 74 20 63 6f 6e | herwise.you.probably.can.not.con |
cf780 | 6e 65 63 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 75 73 69 6e 67 20 68 69 67 68 20 73 70 | nect.to.the.device.using.high.sp |
cf7a0 | 65 65 64 20 62 61 75 64 20 72 61 74 65 73 20 61 73 20 79 6f 75 72 20 73 65 72 69 61 6c 20 63 6f | eed.baud.rates.as.your.serial.co |
cf7c0 | 6e 76 65 72 74 65 72 20 73 69 6d 70 6c 79 20 63 61 6e 20 6e 6f 74 20 70 72 6f 63 65 73 73 20 74 | nverter.simply.can.not.process.t |
cf7e0 | 68 69 73 20 64 61 74 61 20 72 61 74 65 2e 00 49 66 20 79 6f 75 20 75 73 65 20 61 20 73 65 6c 66 | his.data.rate..If.you.use.a.self |
cf800 | 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 64 6f 20 6e 6f 74 20 66 6f 72 67 | -signed.certificate,.do.not.forg |
cf820 | 65 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 43 41 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 | et.to.install.CA.on.the.client.s |
cf840 | 69 64 65 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 6d | ide..If.you.want.to.change.the.m |
cf860 | 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 66 6c 6f 77 73 2c 20 77 68 69 63 68 20 61 72 | aximum.number.of.flows,.which.ar |
cf880 | 65 20 74 72 61 63 6b 69 6e 67 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 2c 20 79 6f 75 20 6d | e.tracking.simultaneously,.you.m |
cf8a0 | 61 79 20 64 6f 20 74 68 69 73 20 77 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 28 64 65 | ay.do.this.with.this.command.(de |
cf8c0 | 66 61 75 6c 74 20 38 31 39 32 29 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 69 73 61 | fault.8192)..If.you.want.to.disa |
cf8e0 | 62 6c 65 20 61 20 72 75 6c 65 20 62 75 74 20 6c 65 74 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e | ble.a.rule.but.let.it.in.the.con |
cf900 | 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 20 | figuration..If.you.want.to.have. |
cf920 | 61 64 6d 69 6e 20 75 73 65 72 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 76 69 61 20 | admin.users.to.authenticate.via. |
cf940 | 52 41 44 49 55 53 20 69 74 20 69 73 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 20 73 65 6e 74 20 74 | RADIUS.it.is.essential.to.sent.t |
cf960 | 68 65 20 60 60 43 69 73 63 6f 2d 41 56 2d 50 61 69 72 20 73 68 65 6c 6c 3a 70 72 69 76 2d 6c 76 | he.``Cisco-AV-Pair.shell:priv-lv |
cf980 | 6c 3d 31 35 60 60 20 61 74 74 72 69 62 75 74 65 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 61 74 | l=15``.attribute..Without.the.at |
cf9a0 | 74 72 69 62 75 74 65 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 67 65 74 20 72 65 67 75 6c 61 | tribute.you.will.only.get.regula |
cf9c0 | 72 2c 20 6e 6f 6e 20 70 72 69 76 69 6c 65 67 75 65 64 2c 20 73 79 73 74 65 6d 20 75 73 65 72 73 | r,.non.privilegued,.system.users |
cf9e0 | 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 65 78 69 73 74 69 6e 67 20 62 6c | ..If.you.want.to.use.existing.bl |
cfa00 | 61 63 6b 6c 69 73 74 73 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 2f 64 6f 77 6e | acklists.you.have.to.create/down |
cfa20 | 6c 6f 61 64 20 61 20 64 61 74 61 62 61 73 65 20 66 69 72 73 74 2e 20 4f 74 68 65 72 77 69 73 65 | load.a.database.first..Otherwise |
cfa40 | 20 79 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6d 6d 69 74 20 | .you.will.not.be.able.to.commit. |
cfa60 | 74 68 65 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 | the.config.changes..If.you.want. |
cfa80 | 79 6f 75 72 20 72 6f 75 74 65 72 20 74 6f 20 66 6f 72 77 61 72 64 20 44 48 43 50 20 72 65 71 75 | your.router.to.forward.DHCP.requ |
cfaa0 | 65 73 74 73 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 44 48 43 50 20 73 65 72 76 65 72 20 | ests.to.an.external.DHCP.server. |
cfac0 | 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 | you.can.configure.the.system.to. |
cfae0 | 61 63 74 20 61 73 20 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 2e 20 54 68 65 20 44 | act.as.a.DHCP.relay.agent..The.D |
cfb00 | 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 6f 72 6b 73 20 77 69 74 68 20 49 50 76 34 20 | HCP.relay.agent.works.with.IPv4. |
cfb20 | 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 2c | and.IPv6.addresses..If.you.want, |
cfb40 | 20 6e 65 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 75 73 65 20 6d 6f 72 65 20 61 64 76 61 6e | .need,.and.should.use.more.advan |
cfb60 | 63 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 28 64 65 66 61 75 6c 74 20 | ced.encryption.ciphers.(default. |
cfb80 | 69 73 20 73 74 69 6c 6c 20 33 44 45 53 29 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 70 72 6f 76 69 | is.still.3DES).you.need.to.provi |
cfba0 | 73 69 6f 6e 20 79 6f 75 72 20 64 65 76 69 63 65 20 75 73 69 6e 67 20 61 20 73 6f 2d 63 61 6c 6c | sion.your.device.using.a.so-call |
cfbc0 | 65 64 20 22 44 65 76 69 63 65 20 50 72 6f 66 69 6c 65 22 2e 20 41 20 70 72 6f 66 69 6c 65 20 69 | ed."Device.Profile"..A.profile.i |
cfbe0 | 73 20 61 20 73 69 6d 70 6c 65 20 74 65 78 74 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 | s.a.simple.text.file.containing. |
cfc00 | 58 4d 4c 20 6e 6f 64 65 73 20 77 69 74 68 20 61 20 60 60 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 | XML.nodes.with.a.``.mobileconfig |
cfc20 | 60 60 20 66 69 6c 65 20 65 78 74 65 6e 73 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 65 | ``.file.extension.that.can.be.se |
cfc40 | 6e 74 20 61 6e 64 20 6f 70 65 6e 65 64 20 6f 6e 20 61 6e 79 20 64 65 76 69 63 65 20 66 72 6f 6d | nt.and.opened.on.any.device.from |
cfc60 | 20 61 6e 20 45 2d 4d 61 69 6c 2e 00 49 66 20 79 6f 75 27 76 65 20 63 6f 6d 70 6c 65 74 65 64 20 | .an.E-Mail..If.you've.completed. |
cfc80 | 61 6c 6c 20 74 68 65 20 61 62 6f 76 65 20 73 74 65 70 73 20 79 6f 75 20 6e 6f 20 64 6f 75 62 74 | all.the.above.steps.you.no.doubt |
cfca0 | 20 77 61 6e 74 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 61 6c 6c 20 77 6f 72 6b 69 6e 67 | .want.to.see.if.it's.all.working |
cfcc0 | 2e 00 49 67 6e 6f 72 65 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 77 68 65 6e 20 73 65 6c | ..Ignore.AS_PATH.length.when.sel |
cfce0 | 65 63 74 69 6e 67 20 61 20 72 6f 75 74 65 00 49 67 6e 6f 72 65 20 56 52 52 50 20 6d 61 69 6e 20 | ecting.a.route.Ignore.VRRP.main. |
cfd00 | 69 6e 74 65 72 66 61 63 65 20 66 61 75 6c 74 73 00 49 6d 61 67 65 20 74 68 61 6e 6b 66 75 6c 6c | interface.faults.Image.thankfull |
cfd20 | 79 20 62 6f 72 72 6f 77 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 | y.borrowed.from.https://en.wikip |
cfd40 | 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 46 69 6c 65 3a 53 4e 4d 50 5f 63 6f 6d 6d 75 6e 69 63 | edia.org/wiki/File:SNMP_communic |
cfd60 | 61 74 69 6f 6e 5f 70 72 69 6e 63 69 70 6c 65 73 5f 64 69 61 67 72 61 6d 2e 50 4e 47 20 77 68 69 | ation_principles_diagram.PNG.whi |
cfd80 | 63 68 20 69 73 20 75 6e 64 65 72 20 74 68 65 20 47 4e 55 20 46 72 65 65 20 44 6f 63 75 6d 65 6e | ch.is.under.the.GNU.Free.Documen |
cfda0 | 74 61 74 69 6f 6e 20 4c 69 63 65 6e 73 65 00 49 6d 61 67 69 6e 65 20 74 68 65 20 66 6f 6c 6c 6f | tation.License.Imagine.the.follo |
cfdc0 | 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 00 49 6d 6d 65 64 69 61 74 65 00 49 6d 70 6f 72 74 20 66 | wing.topology.Immediate.Import.f |
cfde0 | 69 6c 65 73 20 74 6f 20 50 4b 49 20 66 6f 72 6d 61 74 00 49 6d 70 6f 72 74 20 74 68 65 20 43 41 | iles.to.PKI.format.Import.the.CA |
cfe00 | 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 74 6f 20 74 68 65 20 43 4c 49 | s.private.key.portion.to.the.CLI |
cfe20 | 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 | ..This.should.never.leave.the.sy |
cfe40 | 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 | stem.as.it.is.used.to.decrypt.th |
cfe60 | 65 20 64 61 74 61 2e 20 54 68 65 20 6b 65 79 20 69 73 20 72 65 71 75 69 72 65 64 20 69 66 20 79 | e.data..The.key.is.required.if.y |
cfe80 | 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 | ou.use.VyOS.as.your.certificate. |
cfea0 | 67 65 6e 65 72 61 74 6f 72 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 73 68 | generator..Import.the.OpenVPN.sh |
cfec0 | 61 72 65 64 20 73 65 63 72 65 74 20 73 74 6f 72 65 64 20 69 6e 20 66 69 6c 65 20 74 6f 20 74 68 | ared.secret.stored.in.file.to.th |
cfee0 | 65 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 | e.VyOS.CLI..Import.the.certifica |
cff00 | 74 65 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d | te.from.the.file.to.VyOS.CLI..Im |
cff20 | 70 6f 72 74 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 66 20 74 68 65 20 63 65 72 74 | port.the.private.key.of.the.cert |
cff40 | 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 | ificate.to.the.VyOS.CLI..This.sh |
cff60 | 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 | ould.never.leave.the.system.as.i |
cff80 | 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 49 | t.is.used.to.decrypt.the.data..I |
cffa0 | 6d 70 6f 72 74 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 | mport.the.public.CA.certificate. |
cffc0 | 66 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c | from.the.defined.file.to.VyOS.CL |
cffe0 | 49 2e 00 49 6d 70 6f 72 74 65 64 20 70 72 65 66 69 78 65 73 20 64 75 72 69 6e 67 20 74 68 65 20 | I..Imported.prefixes.during.the. |
d0000 | 76 61 6c 69 64 61 74 69 6f 6e 20 6d 61 79 20 68 61 76 65 20 76 61 6c 75 65 73 3a 00 49 6e 20 3a | validation.may.have.values:.In.: |
d0020 | 72 66 63 3a 60 33 30 36 39 60 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 56 4c 41 4e 20 41 67 67 | rfc:`3069`.it.is.called.VLAN.Agg |
d0040 | 72 65 67 61 74 69 6f 6e 00 49 6e 20 3a 76 79 74 61 73 6b 3a 60 54 32 31 39 39 60 20 74 68 65 20 | regation.In.:vytask:`T2199`.the. |
d0060 | 73 79 6e 74 61 78 20 6f 66 20 74 68 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | syntax.of.the.zone.configuration |
d0080 | 20 77 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 | .was.changed..The.zone.configura |
d00a0 | 74 69 6f 6e 20 6d 6f 76 65 64 20 66 72 6f 6d 20 60 60 7a 6f 6e 65 2d 70 6f 6c 69 63 79 20 7a 6f | tion.moved.from.``zone-policy.zo |
d00c0 | 6e 65 20 3c 6e 61 6d 65 3e 60 60 20 74 6f 20 60 60 66 69 72 65 77 61 6c 6c 20 7a 6f 6e 65 20 3c | ne.<name>``.to.``firewall.zone.< |
d00e0 | 6e 61 6d 65 3e 60 60 2e 00 49 6e 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 56 65 | name>``..In.Internet.Protocol.Ve |
d0100 | 72 73 69 6f 6e 20 36 20 28 49 50 76 36 29 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 20 66 75 6e | rsion.6.(IPv6).networks,.the.fun |
d0120 | 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 41 52 50 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 | ctionality.of.ARP.is.provided.by |
d0140 | 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c | .the.Neighbor.Discovery.Protocol |
d0160 | 20 28 4e 44 50 29 2e 00 49 6e 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 65 20 64 6f 20 | .(NDP)..In.Priority.Queue.we.do. |
d0180 | 6e 6f 74 20 64 65 66 69 6e 65 20 63 6c 61 73 65 73 20 77 69 74 68 20 61 20 6d 65 61 6e 69 6e 67 | not.define.clases.with.a.meaning |
d01a0 | 6c 65 73 73 20 63 6c 61 73 73 20 49 44 20 6e 75 6d 62 65 72 20 62 75 74 20 77 69 74 68 20 61 20 | less.class.ID.number.but.with.a. |
d01c0 | 63 6c 61 73 73 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 20 28 31 2d 37 29 2e 20 54 68 65 | class.priority.number.(1-7)..The |
d01e0 | 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 | .lower.the.number,.the.higher.th |
d0200 | 65 20 70 72 69 6f 72 69 74 79 2e 00 49 6e 20 56 79 4f 53 20 74 68 65 20 74 65 72 6d 73 20 60 60 | e.priority..In.VyOS.the.terms.`` |
d0220 | 76 69 66 2d 73 60 60 20 61 6e 64 20 60 60 76 69 66 2d 63 60 60 20 73 74 61 6e 64 20 66 6f 72 20 | vif-s``.and.``vif-c``.stand.for. |
d0240 | 74 68 65 20 65 74 68 65 72 74 79 70 65 20 74 61 67 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 | the.ethertype.tags.that.are.used |
d0260 | 2e 00 49 6e 20 56 79 4f 53 2c 20 45 53 50 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 | ..In.VyOS,.ESP.attributes.are.sp |
d0280 | 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 45 53 50 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 | ecified.through.ESP.groups..Mult |
d02a0 | 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | iple.proposals.can.be.specified. |
d02c0 | 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 49 4b 45 20 | in.a.single.group..In.VyOS,.IKE. |
d02e0 | 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 | attributes.are.specified.through |
d0300 | 20 49 4b 45 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 | .IKE.groups..Multiple.proposals. |
d0320 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f | can.be.specified.in.a.single.gro |
d0340 | 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 61 20 63 6c 61 73 73 20 69 73 20 69 64 65 6e 74 69 66 69 | up..In.VyOS,.a.class.is.identifi |
d0360 | 65 64 20 62 79 20 61 20 6e 75 6d 62 65 72 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 77 68 | ed.by.a.number.you.can.choose.wh |
d0380 | 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 69 74 2e 00 49 6e 20 61 20 6d 69 6e 69 6d 61 6c 20 | en.configuring.it..In.a.minimal. |
d03a0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6d 75 73 | configuration,.the.following.mus |
d03c0 | 74 20 62 65 20 70 72 6f 76 69 64 65 64 3a 00 49 6e 20 61 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 | t.be.provided:.In.a.multiple.VLA |
d03e0 | 4e 20 68 65 61 64 65 72 20 63 6f 6e 74 65 78 74 2c 20 6f 75 74 20 6f 66 20 63 6f 6e 76 65 6e 69 | N.header.context,.out.of.conveni |
d0400 | 65 6e 63 65 20 74 68 65 20 74 65 72 6d 20 22 56 4c 41 4e 20 74 61 67 22 20 6f 72 20 6a 75 73 74 | ence.the.term."VLAN.tag".or.just |
d0420 | 20 22 74 61 67 22 20 66 6f 72 20 73 68 6f 72 74 20 69 73 20 6f 66 74 65 6e 20 75 73 65 64 20 69 | ."tag".for.short.is.often.used.i |
d0440 | 6e 20 70 6c 61 63 65 20 6f 66 20 22 38 30 32 2e 31 71 5f 20 56 4c 41 4e 20 68 65 61 64 65 72 22 | n.place.of."802.1q_.VLAN.header" |
d0460 | 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 | ..QinQ.allows.multiple.VLAN.tags |
d0480 | 20 69 6e 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 3b 20 74 6f 67 65 74 68 65 72 20 | .in.an.Ethernet.frame;.together. |
d04a0 | 74 68 65 73 65 20 74 61 67 73 20 63 6f 6e 73 74 69 74 75 74 65 20 61 20 74 61 67 20 73 74 61 63 | these.tags.constitute.a.tag.stac |
d04c0 | 6b 2e 20 57 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 | k..When.used.in.the.context.of.a |
d04e0 | 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2c 20 61 20 51 69 6e 51 20 66 72 61 6d 65 20 69 | n.Ethernet.frame,.a.QinQ.frame.i |
d0500 | 73 20 61 20 66 72 61 6d 65 20 74 68 61 74 20 68 61 73 20 32 20 56 4c 41 4e 20 38 30 32 2e 31 71 | s.a.frame.that.has.2.VLAN.802.1q |
d0520 | 5f 20 68 65 61 64 65 72 73 20 28 64 6f 75 62 6c 65 2d 74 61 67 67 65 64 29 2e 00 49 6e 20 61 20 | _.headers.(double-tagged)..In.a. |
d0540 | 6e 75 74 73 68 65 6c 6c 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 | nutshell,.the.current.implementa |
d0560 | 74 69 6f 6e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 65 61 74 | tion.provides.the.following.feat |
d0580 | 75 72 65 73 3a 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 3a 61 62 62 72 3a 60 52 41 44 49 | ures:.In.addition.to.:abbr:`RADI |
d05a0 | 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 | US.(Remote.Authentication.Dial-I |
d05c0 | 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 2c 20 3a 61 62 62 72 3a 60 54 41 43 41 43 53 20 | n.User.Service)`,.:abbr:`TACACS. |
d05e0 | 28 54 65 72 6d 69 6e 61 6c 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 63 63 65 | (Terminal.Access.Controller.Acce |
d0600 | 73 73 20 43 6f 6e 74 72 6f 6c 20 53 79 73 74 65 6d 29 60 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 | ss.Control.System)`.can.also.be. |
d0620 | 66 6f 75 6e 64 20 69 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 00 49 6e 20 61 | found.in.large.deployments..In.a |
d0640 | 64 64 69 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c 61 79 69 6e 67 20 66 6c 6f 77 20 61 63 63 6f 75 | ddition.to.displaying.flow.accou |
d0660 | 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6c 6f 63 61 6c 6c 79 2c 20 6f 6e 65 20 63 | nting.information.locally,.one.c |
d0680 | 61 6e 20 61 6c 73 6f 20 65 78 70 6f 72 74 65 64 20 74 68 65 6d 20 74 6f 20 61 20 63 6f 6c 6c 65 | an.also.exported.them.to.a.colle |
d06a0 | 63 74 69 6f 6e 20 73 65 72 76 65 72 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 | ction.server..In.addition.to.the |
d06c0 | 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 74 68 65 20 6f 75 74 70 75 74 20 69 73 20 69 6e | .command.above,.the.output.is.in |
d06e0 | 20 61 20 66 6f 72 6d 61 74 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 | .a.format.which.can.be.used.to.d |
d0700 | 69 72 65 63 74 6c 79 20 69 6d 70 6f 72 74 20 74 68 65 20 6b 65 79 20 69 6e 74 6f 20 74 68 65 20 | irectly.import.the.key.into.the. |
d0720 | 56 79 4f 53 20 43 4c 49 20 62 79 20 73 69 6d 70 6c 79 20 63 6f 70 79 2d 70 61 73 74 69 6e 67 20 | VyOS.CLI.by.simply.copy-pasting. |
d0740 | 74 68 65 20 6f 75 74 70 75 74 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 20 69 6e 74 6f 20 63 6f 6e | the.output.from.op-mode.into.con |
d0760 | 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 77 65 20 | figuration.mode..In.addition.we. |
d0780 | 73 65 74 75 70 20 49 50 76 36 20 3a 61 62 62 72 3a 60 52 41 20 28 52 6f 75 74 65 72 20 41 64 76 | setup.IPv6.:abbr:`RA.(Router.Adv |
d07a0 | 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 70 72 65 66 69 78 | ertisements)`.to.make.the.prefix |
d07c0 | 20 6b 6e 6f 77 6e 20 6f 6e 20 74 68 65 20 65 74 68 30 20 6c 69 6e 6b 2e 00 49 6e 20 61 64 64 69 | .known.on.the.eth0.link..In.addi |
d07e0 | 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 77 68 | tion.you.can.also.disable.the.wh |
d0800 | 6f 6c 65 20 73 65 72 76 69 63 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 74 6f 20 | ole.service.without.the.need.to. |
d0820 | 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 6e 66 69 | remove.it.from.the.current.confi |
d0840 | 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 | guration..In.addition.you.will.s |
d0860 | 70 65 63 69 66 69 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 | pecifiy.the.IP.address.or.FQDN.f |
d0880 | 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e | or.the.client.where.it.will.conn |
d08a0 | 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 | ect.to..The.address.parameter.ca |
d08c0 | 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 | n.be.used.up.to.two.times.and.is |
d08e0 | 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 | .used.to.assign.the.clients.spec |
d0900 | 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 | ific.IPv4.(/32).or.IPv6.(/128).a |
d0920 | 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 65 | ddress..In.addition.you.will.spe |
d0940 | 63 69 66 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 | cify.the.IP.address.or.FQDN.for. |
d0960 | 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 | the.client.where.it.will.connect |
d0980 | 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 | .to..The.address.parameter.can.b |
d09a0 | 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 20 75 73 | e.used.up.to.two.times.and.is.us |
d09c0 | 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 69 66 69 | ed.to.assign.the.clients.specifi |
d09e0 | 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 64 64 72 | c.IPv4.(/32).or.IPv6.(/128).addr |
d0a00 | 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 | ess..In.addition,.you.can.specif |
d0a20 | 79 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 61 72 61 6d 65 74 65 72 73 20 74 6f 20 67 65 74 20 42 | y.many.other.parameters.to.get.B |
d0a40 | 47 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 49 6e 20 61 6e 20 2a 2a 61 64 64 72 65 73 73 20 | GP.information:.In.an.**address. |
d0a60 | 67 72 6f 75 70 2a 2a 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 49 | group**.a.single.IP.address.or.I |
d0a80 | 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 2e 00 49 6e | P.address.ranges.are.defined..In |
d0aa0 | 20 62 6f 74 68 20 63 61 73 65 73 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 66 6f 6c | .both.cases,.we.will.use.the.fol |
d0ac0 | 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 3a 00 49 6e 20 63 61 73 65 20 6f 66 20 70 65 65 72 | lowing.settings:.In.case.of.peer |
d0ae0 | 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 | -peer.relationship.routes.can.be |
d0b00 | 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 4f 54 43 20 76 61 6c 75 65 20 69 73 20 65 | .received.only.if.OTC.value.is.e |
d0b20 | 71 75 61 6c 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 41 53 20 6e 75 6d 62 65 72 2e | qual.to.your.neighbor.AS.number. |
d0b40 | 00 49 6e 20 63 61 73 65 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 61 74 63 68 20 73 | .In.case,.if.you.need.to.catch.s |
d0b60 | 6f 6d 65 20 6c 6f 67 73 20 66 72 6f 6d 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 64 61 | ome.logs.from.flow-accounting.da |
d0b80 | 65 6d 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 66 69 67 75 72 65 20 6c 6f 67 67 69 6e 67 20 | emon,.you.may.configure.logging. |
d0ba0 | 66 61 63 69 6c 69 74 79 3a 00 49 6e 20 63 6f 6e 74 72 61 73 74 20 74 6f 20 73 69 6d 70 6c 65 20 | facility:.In.contrast.to.simple. |
d0bc0 | 52 45 44 2c 20 56 79 4f 53 27 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 75 73 65 73 20 61 20 | RED,.VyOS'.Random-Detect.uses.a. |
d0be0 | 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 20 | Generalized.Random.Early.Detect. |
d0c00 | 70 6f 6c 69 63 79 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 64 69 66 66 65 72 65 6e 74 20 76 | policy.that.provides.different.v |
d0c20 | 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 49 50 20 50 72 | irtual.queues.based.on.the.IP.Pr |
d0c40 | 65 63 65 64 65 6e 63 65 20 76 61 6c 75 65 20 73 6f 20 74 68 61 74 20 73 6f 6d 65 20 76 69 72 74 | ecedence.value.so.that.some.virt |
d0c60 | 75 61 6c 20 71 75 65 75 65 73 20 63 61 6e 20 64 72 6f 70 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 | ual.queues.can.drop.more.packets |
d0c80 | 20 74 68 61 6e 20 6f 74 68 65 72 73 2e 00 49 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 | .than.others..In.failover.mode,. |
d0ca0 | 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 74 20 74 6f 20 62 65 20 74 68 65 20 70 | one.interface.is.set.to.be.the.p |
d0cc0 | 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 | rimary.interface.and.other.inter |
d0ce0 | 66 61 63 65 73 20 61 72 65 20 73 65 63 6f 6e 64 61 72 79 20 6f 72 20 73 70 61 72 65 2e 20 49 6e | faces.are.secondary.or.spare..In |
d0d00 | 73 74 65 61 64 20 6f 66 20 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 | stead.of.balancing.traffic.acros |
d0d20 | 73 20 61 6c 6c 20 68 65 61 6c 74 68 79 20 69 6e 74 65 72 66 61 63 65 73 2c 20 6f 6e 6c 79 20 74 | s.all.healthy.interfaces,.only.t |
d0d40 | 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 73 65 64 20 61 6e 64 | he.primary.interface.is.used.and |
d0d60 | 20 69 6e 20 63 61 73 65 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 61 20 73 65 63 6f 6e 64 61 72 79 | .in.case.of.failure,.a.secondary |
d0d80 | 20 69 6e 74 65 72 66 61 63 65 20 73 65 6c 65 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f | .interface.selected.from.the.poo |
d0da0 | 6c 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 61 6b 65 73 20 | l.of.available.interfaces.takes. |
d0dc0 | 6f 76 65 72 2e 20 54 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 | over..The.primary.interface.is.s |
d0de0 | 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 77 65 69 67 68 74 20 61 6e 64 20 | elected.based.on.its.weight.and. |
d0e00 | 68 65 61 6c 74 68 2c 20 6f 74 68 65 72 73 20 62 65 63 6f 6d 65 20 73 65 63 6f 6e 64 61 72 79 20 | health,.others.become.secondary. |
d0e20 | 69 6e 74 65 72 66 61 63 65 73 2e 20 53 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 | interfaces..Secondary.interfaces |
d0e40 | 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 61 20 66 61 69 6c 65 64 20 70 72 69 6d 61 72 79 20 69 | .to.take.over.a.failed.primary.i |
d0e60 | 6e 74 65 72 66 61 63 65 20 61 72 65 20 63 68 6f 73 65 6e 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 | nterface.are.chosen.from.the.loa |
d0e80 | 64 20 62 61 6c 61 6e 63 65 72 27 73 20 69 6e 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 64 65 70 | d.balancer's.interface.pool,.dep |
d0ea0 | 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 77 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 | ending.on.their.weight.and.healt |
d0ec0 | 68 2e 20 49 6e 74 65 72 66 61 63 65 20 72 6f 6c 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 | h..Interface.roles.can.also.be.s |
d0ee0 | 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 72 75 6c 65 20 6f 72 64 65 72 20 62 79 20 69 | elected.based.on.rule.order.by.i |
d0f00 | 6e 63 6c 75 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 62 61 6c 61 6e 63 69 6e 67 | ncluding.interfaces.in.balancing |
d0f20 | 20 72 75 6c 65 73 20 61 6e 64 20 6f 72 64 65 72 69 6e 67 20 74 68 6f 73 65 20 72 75 6c 65 73 20 | .rules.and.ordering.those.rules. |
d0f40 | 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 54 6f 20 70 75 74 20 74 68 65 20 6c 6f 61 64 20 62 61 6c | accordingly..To.put.the.load.bal |
d0f60 | 61 6e 63 65 72 20 69 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 63 72 65 61 74 65 20 61 | ancer.in.failover.mode,.create.a |
d0f80 | 20 66 61 69 6c 6f 76 65 72 20 72 75 6c 65 3a 00 49 6e 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 | .failover.rule:.In.firewall.brid |
d0fa0 | 67 65 20 72 75 6c 65 73 2c 20 74 68 65 20 61 63 74 69 6f 6e 20 63 61 6e 20 62 65 3a 00 49 6e 20 | ge.rules,.the.action.can.be:.In. |
d0fc0 | 67 65 6e 65 72 61 6c 2c 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 72 65 71 75 69 72 65 73 20 | general,.OSPF.protocol.requires. |
d0fe0 | 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 28 61 72 65 61 20 30 29 20 74 6f 20 62 65 20 63 | a.backbone.area.(area.0).to.be.c |
d1000 | 6f 68 65 72 65 6e 74 20 61 6e 64 20 66 75 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 20 49 2e 65 | oherent.and.fully.connected..I.e |
d1020 | 2e 20 61 6e 79 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 20 6d 75 73 74 20 | ..any.backbone.area.router.must. |
d1040 | 68 61 76 65 20 61 20 72 6f 75 74 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 62 61 63 6b 62 6f | have.a.route.to.any.other.backbo |
d1060 | 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 65 76 65 72 79 20 | ne.area.router..Moreover,.every. |
d1080 | 41 42 52 20 6d 75 73 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 62 61 63 6b 62 6f 6e 65 | ABR.must.have.a.link.to.backbone |
d10a0 | 20 61 72 65 61 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 6e 6f 74 20 61 6c 77 61 79 73 | .area..However,.it.is.not.always |
d10c0 | 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 68 61 76 65 20 61 20 70 68 79 73 69 63 61 6c 20 6c 69 6e | .possible.to.have.a.physical.lin |
d10e0 | 6b 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 49 6e 20 74 68 69 73 20 63 61 | k.to.a.backbone.area..In.this.ca |
d1100 | 73 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 41 42 52 20 28 6f 6e 65 20 6f 66 20 74 68 65 6d 20 | se.between.two.ABR.(one.of.them. |
d1120 | 68 61 73 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 29 | has.a.link.to.the.backbone.area) |
d1140 | 20 69 6e 20 74 68 65 20 61 72 65 61 20 28 6e 6f 74 20 73 74 75 62 20 61 72 65 61 29 20 61 20 76 | .in.the.area.(not.stub.area).a.v |
d1160 | 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 6f 72 67 61 6e 69 7a 65 64 2e 00 49 6e 20 6c 61 72 | irtual.link.is.organized..In.lar |
d1180 | 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 69 74 20 69 73 20 6e 6f 74 20 72 65 61 73 6f 6e 61 | ge.deployments.it.is.not.reasona |
d11a0 | 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 61 63 68 20 75 73 65 72 20 69 6e 64 69 76 | ble.to.configure.each.user.indiv |
d11c0 | 69 64 75 61 6c 6c 79 20 6f 6e 20 65 76 65 72 79 20 73 79 73 74 65 6d 2e 20 56 79 4f 53 20 73 75 | idually.on.every.system..VyOS.su |
d11e0 | 70 70 6f 72 74 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f | pports.using.:abbr:`RADIUS.(Remo |
d1200 | 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 | te.Authentication.Dial-In.User.S |
d1220 | 65 72 76 69 63 65 29 60 20 73 65 72 76 65 72 73 20 61 73 20 62 61 63 6b 65 6e 64 20 66 6f 72 20 | ervice)`.servers.as.backend.for. |
d1240 | 75 73 65 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f | user.authentication..In.order.fo |
d1260 | 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f | r.flow.accounting.information.to |
d1280 | 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 61 6e 64 20 64 69 73 70 6c 61 79 65 64 20 66 6f 72 20 | .be.collected.and.displayed.for. |
d12a0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 | an.interface,.the.interface.must |
d12c0 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 | .be.configured.for.flow.accounti |
d12e0 | 6e 67 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 | ng..In.order.for.the.primary.and |
d1300 | 20 74 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 6b 65 | .the.secondary.DHCP.server.to.ke |
d1320 | 65 70 20 74 68 65 69 72 20 6c 65 61 73 65 20 74 61 62 6c 65 73 20 69 6e 20 73 79 6e 63 2c 20 74 | ep.their.lease.tables.in.sync,.t |
d1340 | 68 65 79 20 6d 75 73 74 20 62 65 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 65 61 63 68 20 6f | hey.must.be.able.to.reach.each.o |
d1360 | 74 68 65 72 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 36 34 37 2e 20 49 66 20 79 6f 75 20 68 61 76 | ther.on.TCP.port.647..If.you.hav |
d1380 | 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 69 6e 20 65 66 66 65 63 74 2c 20 61 64 6a 75 | e.firewall.rules.in.effect,.adju |
d13a0 | 73 74 20 74 68 65 6d 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f | st.them.accordingly..In.order.fo |
d13c0 | 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 75 73 65 20 61 6e 64 20 63 6f 6d 70 6c 65 74 65 | r.the.system.to.use.and.complete |
d13e0 | 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2c 20 61 20 6c 69 73 74 20 | .unqualified.host.names,.a.list. |
d1400 | 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 | can.be.defined.which.will.be.use |
d1420 | 64 20 66 6f 72 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 | d.for.domain.searches..In.order. |
d1440 | 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 4c 44 50 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f | to.allow.for.LDP.on.the.local.ro |
d1460 | 75 74 65 72 20 74 6f 20 65 78 63 68 61 6e 67 65 20 6c 61 62 65 6c 20 61 64 76 65 72 74 69 73 65 | uter.to.exchange.label.advertise |
d1480 | 6d 65 6e 74 73 20 77 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2c 20 61 20 54 43 50 20 | ments.with.other.routers,.a.TCP. |
d14a0 | 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 65 74 77 | session.will.be.established.betw |
d14c0 | 65 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 65 64 20 61 6e 64 | een.automatically.discovered.and |
d14e0 | 20 73 74 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 72 6f 75 74 65 72 73 2e 20 4c 44 | .statically.assigned.routers..LD |
d1500 | 50 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 54 43 50 20 73 65 | P.will.try.to.establish.a.TCP.se |
d1520 | 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 2a 2a 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 | ssion.to.the.**transport.address |
d1540 | 2a 2a 20 6f 66 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2e 20 54 68 65 72 65 66 6f 72 65 20 66 | **.of.other.routers..Therefore.f |
d1560 | 6f 72 20 4c 44 50 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 70 65 72 6c 79 20 70 6c 65 61 | or.LDP.to.function.properly.plea |
d1580 | 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 | se.make.sure.the.transport.addre |
d15a0 | 73 73 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | ss.is.shown.in.the.routing.table |
d15c0 | 20 61 6e 64 20 72 65 61 63 68 61 62 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 74 20 61 6c 6c | .and.reachable.to.traffic.at.all |
d15e0 | 20 74 69 6d 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 | .times..In.order.to.control.and. |
d1600 | 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 | modify.routing.information.that. |
d1620 | 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 20 79 6f 75 20 63 | is.exchanged.between.peers.you.c |
d1640 | 61 6e 20 75 73 65 20 72 6f 75 74 65 2d 6d 61 70 2c 20 66 69 6c 74 65 72 2d 6c 69 73 74 2c 20 70 | an.use.route-map,.filter-list,.p |
d1660 | 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 2e 00 49 6e 20 | refix-list,.distribute-list..In. |
d1680 | 6f 72 64 65 72 20 74 6f 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 74 72 61 66 66 69 63 20 67 6f | order.to.define.which.traffic.go |
d16a0 | 65 73 20 69 6e 74 6f 20 77 68 69 63 68 20 63 6c 61 73 73 2c 20 79 6f 75 20 64 65 66 69 6e 65 20 | es.into.which.class,.you.define. |
d16c0 | 66 69 6c 74 65 72 73 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 63 | filters.(that.is,.the.matching.c |
d16e0 | 72 69 74 65 72 69 61 29 2e 20 50 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 | riteria)..Packets.go.through.the |
d1700 | 73 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 28 61 73 20 69 6e 20 74 68 65 20 72 75 6c | se.matching.rules.(as.in.the.rul |
d1720 | 65 73 20 6f 66 20 61 20 66 69 72 65 77 61 6c 6c 29 20 61 6e 64 2c 20 69 66 20 61 20 70 61 63 6b | es.of.a.firewall).and,.if.a.pack |
d1740 | 65 74 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 74 65 72 2c 20 69 74 20 69 73 20 61 73 73 | et.matches.the.filter,.it.is.ass |
d1760 | 69 67 6e 65 64 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f | igned.to.that.class..In.order.to |
d1780 | 20 68 61 76 65 20 56 79 4f 53 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 77 6f 72 6b 69 | .have.VyOS.Traffic.Control.worki |
d17a0 | 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 6f 6c 6c 6f 77 20 32 20 73 74 65 70 73 3a 00 49 | ng.you.need.to.follow.2.steps:.I |
d17c0 | 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 66 75 6c 6c 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 | n.order.to.have.full.control.and |
d17e0 | 20 6d 61 6b 65 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 70 75 62 | .make.use.of.multiple.static.pub |
d1800 | 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 79 6f 75 72 20 56 79 4f 53 20 77 69 6c 6c | lic.IP.addresses,.your.VyOS.will |
d1820 | 20 68 61 76 65 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e | .have.to.initiate.the.PPPoE.conn |
d1840 | 65 63 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 69 74 2e 20 49 6e 20 6f 72 64 65 72 20 | ection.and.control.it..In.order. |
d1860 | 66 6f 72 20 74 68 69 73 20 6d 65 74 68 6f 64 20 74 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 77 69 6c | for.this.method.to.work,.you.wil |
d1880 | 6c 20 68 61 76 65 20 74 6f 20 66 69 67 75 72 65 20 6f 75 74 20 68 6f 77 20 74 6f 20 6d 61 6b 65 | l.have.to.figure.out.how.to.make |
d18a0 | 20 79 6f 75 72 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 20 73 77 69 74 63 68 20 69 6e | .your.DSL.Modem/Router.switch.in |
d18c0 | 74 6f 20 61 20 42 72 69 64 67 65 64 20 4d 6f 64 65 20 73 6f 20 69 74 20 6f 6e 6c 79 20 61 63 74 | to.a.Bridged.Mode.so.it.only.act |
d18e0 | 73 20 61 73 20 61 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 64 65 76 69 63 65 20 74 6f | s.as.a.DSL.Transceiver.device.to |
d1900 | 20 63 6f 6e 6e 65 63 74 20 62 65 74 77 65 65 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 69 | .connect.between.the.Ethernet.li |
d1920 | 6e 6b 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 61 6e 64 20 74 68 65 20 70 68 6f 6e 65 20 63 61 | nk.of.your.VyOS.and.the.phone.ca |
d1940 | 62 6c 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 69 | ble..Once.your.DSL.Transceiver.i |
d1960 | 73 20 69 6e 20 42 72 69 64 67 65 20 4d 6f 64 65 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 67 65 74 | s.in.Bridge.Mode,.you.should.get |
d1980 | 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 69 74 2e 20 50 6c 65 61 73 65 20 6d | .no.IP.address.from.it..Please.m |
d19a0 | 61 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 45 74 68 65 | ake.sure.you.connect.to.the.Ethe |
d19c0 | 72 6e 65 74 20 50 6f 72 74 20 31 20 69 66 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 | rnet.Port.1.if.your.DSL.Transcei |
d19e0 | 76 65 72 20 68 61 73 20 61 20 73 77 69 74 63 68 2c 20 61 73 20 73 6f 6d 65 20 6f 66 20 74 68 65 | ver.has.a.switch,.as.some.of.the |
d1a00 | 6d 20 6f 6e 6c 79 20 77 6f 72 6b 20 74 68 69 73 20 77 61 79 2e 00 49 6e 20 6f 72 64 65 72 20 74 | m.only.work.this.way..In.order.t |
d1a20 | 6f 20 6d 61 70 20 73 70 65 63 69 66 69 63 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f | o.map.specific.IPv6.addresses.to |
d1a40 | 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 73 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 | .specific.hosts.static.mappings. |
d1a60 | 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 | can.be.created..The.following.ex |
d1a80 | 61 6d 70 6c 65 20 65 78 70 6c 61 69 6e 73 20 74 68 65 20 70 72 6f 63 65 73 73 2e 00 49 6e 20 6f | ample.explains.the.process..In.o |
d1aa0 | 72 64 65 72 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 66 6c 6f 6f 64 69 6e 67 20 6f 66 | rder.to.minimize.the.flooding.of |
d1ac0 | 20 41 52 50 20 61 6e 64 20 4e 44 20 6d 65 73 73 61 67 65 73 20 69 6e 20 74 68 65 20 56 58 4c 41 | .ARP.and.ND.messages.in.the.VXLA |
d1ae0 | 4e 20 6e 65 74 77 6f 72 6b 2c 20 45 56 50 4e 20 69 6e 63 6c 75 64 65 73 20 70 72 6f 76 69 73 69 | N.network,.EVPN.includes.provisi |
d1b00 | 6f 6e 73 20 3a 72 66 63 3a 60 37 34 33 32 23 73 65 63 74 69 6f 6e 2d 31 30 60 20 74 68 61 74 20 | ons.:rfc:`7432#section-10`.that. |
d1b20 | 61 6c 6c 6f 77 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 56 54 45 50 73 20 74 6f 20 73 75 70 | allow.participating.VTEPs.to.sup |
d1b40 | 70 72 65 73 73 20 73 75 63 68 20 6d 65 73 73 61 67 65 73 20 69 6e 20 63 61 73 65 20 74 68 65 79 | press.such.messages.in.case.they |
d1b60 | 20 6b 6e 6f 77 20 74 68 65 20 4d 41 43 2d 49 50 20 62 69 6e 64 69 6e 67 20 61 6e 64 20 63 61 6e | .know.the.MAC-IP.binding.and.can |
d1b80 | 20 72 65 70 6c 79 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 68 | .reply.on.behalf.of.the.remote.h |
d1ba0 | 6f 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 65 70 61 72 61 74 65 20 74 72 61 66 66 69 | ost..In.order.to.separate.traffi |
d1bc0 | 63 2c 20 46 61 69 72 20 51 75 65 75 65 20 75 73 65 73 20 61 20 63 6c 61 73 73 69 66 69 65 72 20 | c,.Fair.Queue.uses.a.classifier. |
d1be0 | 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 | based.on.source.address,.destina |
d1c00 | 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 54 68 | tion.address.and.source.port..Th |
d1c20 | 65 20 61 6c 67 6f 72 69 74 68 6d 20 65 6e 71 75 65 75 65 73 20 70 61 63 6b 65 74 73 20 74 6f 20 | e.algorithm.enqueues.packets.to. |
d1c40 | 68 61 73 68 20 62 75 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 6f 73 65 20 74 72 65 65 | hash.buckets.based.on.those.tree |
d1c60 | 20 70 61 72 61 6d 65 74 65 72 73 2e 20 45 61 63 68 20 6f 66 20 74 68 65 73 65 20 62 75 63 6b 65 | .parameters..Each.of.these.bucke |
d1c80 | 74 73 20 73 68 6f 75 6c 64 20 72 65 70 72 65 73 65 6e 74 20 61 20 75 6e 69 71 75 65 20 66 6c 6f | ts.should.represent.a.unique.flo |
d1ca0 | 77 2e 20 42 65 63 61 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 66 6c 6f 77 73 20 6d 61 79 20 67 65 | w..Because.multiple.flows.may.ge |
d1cc0 | 74 20 68 61 73 68 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 62 75 63 6b 65 74 2c 20 74 68 65 | t.hashed.to.the.same.bucket,.the |
d1ce0 | 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 70 65 72 74 75 72 62 65 64 20 | .hashing.algorithm.is.perturbed. |
d1d00 | 61 74 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 69 6e 74 65 72 76 61 6c 73 20 73 6f 20 74 68 61 | at.configurable.intervals.so.tha |
d1d20 | 74 20 74 68 65 20 75 6e 66 61 69 72 6e 65 73 73 20 6c 61 73 74 73 20 6f 6e 6c 79 20 66 6f 72 20 | t.the.unfairness.lasts.only.for. |
d1d40 | 61 20 73 68 6f 72 74 20 77 68 69 6c 65 2e 20 50 65 72 74 75 72 62 61 74 69 6f 6e 20 6d 61 79 20 | a.short.while..Perturbation.may. |
d1d60 | 68 6f 77 65 76 65 72 20 63 61 75 73 65 20 73 6f 6d 65 20 69 6e 61 64 76 65 72 74 65 6e 74 20 70 | however.cause.some.inadvertent.p |
d1d80 | 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 20 74 6f 20 6f 63 63 75 72 2e 20 41 6e 20 61 64 | acket.reordering.to.occur..An.ad |
d1da0 | 76 69 73 61 62 6c 65 20 76 61 6c 75 65 20 63 6f 75 6c 64 20 62 65 20 31 30 20 73 65 63 6f 6e 64 | visable.value.could.be.10.second |
d1dc0 | 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 50 49 4d 2c 20 69 74 20 69 73 20 6e 65 | s..In.order.to.use.PIM,.it.is.ne |
d1de0 | 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a 61 62 62 72 3a 60 52 50 | cessary.to.configure.a.:abbr:`RP |
d1e00 | 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 20 66 6f 72 20 6a 6f 69 6e 20 6d 65 | .(Rendezvous.Point)`.for.join.me |
d1e20 | 73 73 61 67 65 73 20 74 6f 20 62 65 20 73 65 6e 74 20 74 6f 2e 20 43 75 72 72 65 6e 74 6c 79 20 | ssages.to.be.sent.to..Currently. |
d1e40 | 74 68 65 20 6f 6e 6c 79 20 6d 65 74 68 6f 64 6f 6c 6f 67 79 20 74 6f 20 64 6f 20 74 68 69 73 20 | the.only.methodology.to.do.this. |
d1e60 | 69 73 20 76 69 61 20 73 74 61 74 69 63 20 72 65 6e 64 65 7a 76 6f 75 73 20 70 6f 69 6e 74 20 63 | is.via.static.rendezvous.point.c |
d1e80 | 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 54 53 4f 2f 4c 52 4f | ommands..In.order.to.use.TSO/LRO |
d1ea0 | 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 74 65 72 73 20 6f 6e 65 20 6d 75 73 74 20 61 | .with.VMXNET3.adaters.one.must.a |
d1ec0 | 6c 73 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 53 47 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 | lso.enable.the.SG.offloading.opt |
d1ee0 | 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 66 6c 6f 77 74 61 62 6c 65 73 2c | ion..In.order.to.use.flowtables, |
d1f00 | 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 | .the.minimal.configuration.neede |
d1f20 | 64 20 69 6e 63 6c 75 64 65 73 3a 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 20 69 74 20 61 6c | d.includes:.In.other.words.it.al |
d1f40 | 6c 6f 77 73 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 77 68 69 63 68 20 63 61 72 64 73 20 28 75 73 75 | lows.control.of.which.cards.(usu |
d1f60 | 61 6c 6c 79 20 31 29 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 20 61 72 70 20 72 | ally.1).will.respond.to.an.arp.r |
d1f80 | 65 71 75 65 73 74 2e 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 63 6f 6e 6e 65 63 74 69 | equest..In.other.words,.connecti |
d1fa0 | 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 20 61 6c 72 65 61 64 79 20 6f 62 73 65 72 76 65 64 | on.tracking.has.already.observed |
d1fc0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 20 63 6c 6f 73 65 64 20 61 6e 64 20 68 61 | .the.connection.be.closed.and.ha |
d1fe0 | 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 49 4e 56 41 4c 49 44 | s.transition.the.flow.to.INVALID |
d2000 | 20 74 6f 20 70 72 65 76 65 6e 74 20 61 74 74 61 63 6b 73 20 66 72 6f 6d 20 61 74 74 65 6d 70 74 | .to.prevent.attacks.from.attempt |
d2020 | 69 6e 67 20 74 6f 20 72 65 75 73 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 49 6e 20 | ing.to.reuse.the.connection..In. |
d2040 | 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 | our.example.the.certificate.name |
d2060 | 20 69 73 20 63 61 6c 6c 65 64 20 76 79 6f 73 3a 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c | .is.called.vyos:.In.our.example, |
d2080 | 20 77 65 20 75 73 65 64 20 74 68 65 20 6b 65 79 20 6e 61 6d 65 20 60 60 6f 70 65 6e 76 70 6e 2d | .we.used.the.key.name.``openvpn- |
d20a0 | 31 60 60 20 77 68 69 63 68 20 77 65 20 77 69 6c 6c 20 72 65 66 65 72 65 6e 63 65 20 69 6e 20 6f | 1``.which.we.will.reference.in.o |
d20c0 | 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 | ur.configuration..In.our.example |
d20e0 | 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 69 6e 67 20 77 65 62 20 73 65 72 76 | ,.we.will.be.forwarding.web.serv |
d2100 | 65 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 77 65 62 20 73 65 | er.traffic.to.an.internal.web.se |
d2120 | 72 76 65 72 20 6f 6e 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 20 48 54 54 50 20 74 72 61 66 | rver.on.192.168.0.100..HTTP.traf |
d2140 | 66 69 63 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 54 43 50 20 70 72 6f 74 6f 63 6f | fic.makes.use.of.the.TCP.protoco |
d2160 | 6c 20 6f 6e 20 70 6f 72 74 20 38 30 2e 20 46 6f 72 20 6f 74 68 65 72 20 63 6f 6d 6d 6f 6e 20 70 | l.on.port.80..For.other.common.p |
d2180 | 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 73 65 65 3a 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b | ort.numbers,.see:.https://en.wik |
d21a0 | 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4c 69 73 74 5f 6f 66 5f 54 43 50 5f 61 6e 64 5f | ipedia.org/wiki/List_of_TCP_and_ |
d21c0 | 55 44 50 5f 70 6f 72 74 5f 6e 75 6d 62 65 72 73 00 49 6e 20 70 72 69 6e 63 69 70 6c 65 2c 20 76 | UDP_port_numbers.In.principle,.v |
d21e0 | 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 3a 63 6f 64 65 3a 60 6d 69 6e 2d 74 68 72 65 73 68 6f | alues.must.be.:code:`min-thresho |
d2200 | 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 | ld`.<.:code:`max-threshold`.<.:c |
d2220 | 6f 64 65 3a 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 2e 00 49 6e 20 73 68 6f 72 74 2c 20 44 4d 56 | ode:`queue-limit`..In.short,.DMV |
d2240 | 50 4e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 63 | PN.provides.the.capability.for.c |
d2260 | 72 65 61 74 69 6e 67 20 61 20 64 79 6e 61 6d 69 63 2d 6d 65 73 68 20 56 50 4e 20 6e 65 74 77 6f | reating.a.dynamic-mesh.VPN.netwo |
d2280 | 72 6b 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 70 72 65 2d 63 6f 6e 66 69 67 75 | rk.without.having.to.pre-configu |
d22a0 | 72 65 20 28 73 74 61 74 69 63 29 20 61 6c 6c 20 70 6f 73 73 69 62 6c 65 20 74 75 6e 6e 65 6c 20 | re.(static).all.possible.tunnel. |
d22c0 | 65 6e 64 2d 70 6f 69 6e 74 20 70 65 65 72 73 2e 00 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 69 | end-point.peers..In.some.cases.i |
d22e0 | 74 20 6d 61 79 20 62 65 20 6d 6f 72 65 20 63 6f 6e 76 65 6e 69 65 6e 74 20 74 6f 20 65 6e 61 62 | t.may.be.more.convenient.to.enab |
d2300 | 6c 65 20 4f 53 50 46 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 2f 73 75 62 6e 65 | le.OSPF.on.a.per.interface/subne |
d2320 | 74 20 62 61 73 69 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 6f | t.basis.:cfgcmd:`set.protocols.o |
d2340 | 73 70 66 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 61 72 65 61 20 3c | spf.interface.<interface>.area.< |
d2360 | 78 2e 78 2e 78 2e 78 20 7c 20 78 3e 60 00 49 6e 20 74 68 65 20 3a 72 65 66 3a 60 63 72 65 61 74 | x.x.x.x.|.x>`.In.the.:ref:`creat |
d2380 | 69 6e 67 5f 61 5f 74 72 61 66 66 69 63 5f 70 6f 6c 69 63 79 60 20 73 65 63 74 69 6f 6e 20 79 6f | ing_a_traffic_policy`.section.yo |
d23a0 | 75 20 77 69 6c 6c 20 73 65 65 20 74 68 61 74 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 | u.will.see.that.some.of.the.poli |
d23c0 | 63 69 65 73 20 75 73 65 20 2a 63 6c 61 73 73 65 73 2a 2e 20 54 68 6f 73 65 20 70 6f 6c 69 63 69 | cies.use.*classes*..Those.polici |
d23e0 | 65 73 20 6c 65 74 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 74 72 61 66 66 69 63 20 69 6e | es.let.you.distribute.traffic.in |
d2400 | 74 6f 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 20 61 63 63 6f 72 64 69 6e 67 20 74 | to.different.classes.according.t |
d2420 | 6f 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 | o.different.parameters.you.can.c |
d2440 | 68 6f 6f 73 65 2e 20 53 6f 2c 20 61 20 63 6c 61 73 73 20 69 73 20 6a 75 73 74 20 61 20 73 70 65 | hoose..So,.a.class.is.just.a.spe |
d2460 | 63 69 66 69 63 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 79 6f 75 20 73 65 6c 65 63 74 | cific.type.of.traffic.you.select |
d2480 | 2e 00 49 6e 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2c 20 61 20 6b 65 79 20 70 6f 69 6e 74 20 6f | ..In.the.VyOS.CLI,.a.key.point.o |
d24a0 | 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 69 73 20 74 68 61 74 20 72 61 74 68 65 72 20 74 | ften.overlooked.is.that.rather.t |
d24c0 | 68 61 6e 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 | han.being.configured.using.the.` |
d24e0 | 73 65 74 20 76 70 6e 60 20 73 74 61 6e 7a 61 2c 20 4f 70 65 6e 56 50 4e 20 69 73 20 63 6f 6e 66 | set.vpn`.stanza,.OpenVPN.is.conf |
d2500 | 69 67 75 72 65 64 20 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 75 73 | igured.as.a.network.interface.us |
d2520 | 69 6e 67 20 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 6e 76 70 6e 60 2e 00 49 6e | ing.`set.interfaces.openvpn`..In |
d2540 | 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2c 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 | .the.above.example,.an.external. |
d2560 | 49 50 20 6f 66 20 31 39 32 2e 30 2e 32 2e 32 20 69 73 20 61 73 73 75 6d 65 64 2e 00 49 6e 20 74 | IP.of.192.0.2.2.is.assumed..In.t |
d2580 | 68 65 20 61 67 65 20 6f 66 20 76 65 72 79 20 66 61 73 74 20 6e 65 74 77 6f 72 6b 73 2c 20 61 20 | he.age.of.very.fast.networks,.a. |
d25a0 | 73 65 63 6f 6e 64 20 6f 66 20 75 6e 72 65 61 63 68 61 62 69 6c 69 74 79 20 6d 61 79 20 65 71 75 | second.of.unreachability.may.equ |
d25c0 | 61 6c 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 6c 6f 73 74 20 70 61 63 6b 65 74 73 2e 20 54 68 65 | al.millions.of.lost.packets..The |
d25e0 | 20 69 64 65 61 20 62 65 68 69 6e 64 20 42 46 44 20 69 73 20 74 6f 20 64 65 74 65 63 74 20 76 65 | .idea.behind.BFD.is.to.detect.ve |
d2600 | 72 79 20 71 75 69 63 6b 6c 79 20 77 68 65 6e 20 61 20 70 65 65 72 20 69 73 20 64 6f 77 6e 20 61 | ry.quickly.when.a.peer.is.down.a |
d2620 | 6e 64 20 74 61 6b 65 20 61 63 74 69 6f 6e 20 65 78 74 72 65 6d 65 6c 79 20 66 61 73 74 2e 00 49 | nd.take.action.extremely.fast..I |
d2640 | 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 4c 32 54 50 76 33 2c 20 74 68 65 20 66 65 61 74 75 72 | n.the.case.of.L2TPv3,.the.featur |
d2660 | 65 73 20 6c 6f 73 74 20 61 72 65 20 74 65 6c 65 74 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 | es.lost.are.teletraffic.engineer |
d2680 | 69 6e 67 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 64 20 69 6d 70 6f 72 74 61 6e | ing.features.considered.importan |
d26a0 | 74 20 69 6e 20 4d 50 4c 53 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 | t.in.MPLS..However,.there.is.no. |
d26c0 | 72 65 61 73 6f 6e 20 74 68 65 73 65 20 66 65 61 74 75 72 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 | reason.these.features.could.not. |
d26e0 | 62 65 20 72 65 2d 65 6e 67 69 6e 65 65 72 65 64 20 69 6e 20 6f 72 20 6f 6e 20 74 6f 70 20 6f 66 | be.re-engineered.in.or.on.top.of |
d2700 | 20 4c 32 54 50 76 33 20 69 6e 20 6c 61 74 65 72 20 70 72 6f 64 75 63 74 73 2e 00 49 6e 20 74 68 | .L2TPv3.in.later.products..In.th |
d2720 | 65 20 63 61 73 65 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 | e.case.the.average.queue.size.is |
d2740 | 20 62 65 74 77 65 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 61 6e 64 20 2a | .between.**min-threshold**.and.* |
d2760 | 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 74 68 65 6e 20 61 6e 20 61 72 72 69 76 69 | *max-threshold**,.then.an.arrivi |
d2780 | 6e 67 20 70 61 63 6b 65 74 20 77 6f 75 6c 64 20 62 65 20 65 69 74 68 65 72 20 64 72 6f 70 70 65 | ng.packet.would.be.either.droppe |
d27a0 | 64 20 6f 72 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 2c 20 69 74 20 77 69 6c | d.or.placed.in.the.queue,.it.wil |
d27c0 | 6c 20 64 65 70 65 6e 64 20 6f 6e 20 74 68 65 20 64 65 66 69 6e 65 64 20 2a 2a 6d 61 72 6b 2d 70 | l.depend.on.the.defined.**mark-p |
d27e0 | 72 6f 62 61 62 69 6c 69 74 79 2a 2a 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 79 6f 75 20 77 61 | robability**..In.the.case.you.wa |
d2800 | 6e 74 20 74 6f 20 61 70 70 6c 79 20 73 6f 6d 65 20 6b 69 6e 64 20 6f 66 20 2a 2a 73 68 61 70 69 | nt.to.apply.some.kind.of.**shapi |
d2820 | 6e 67 2a 2a 20 74 6f 20 79 6f 75 72 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 74 72 61 66 66 69 63 | ng**.to.your.**inbound**.traffic |
d2840 | 2c 20 63 68 65 63 6b 20 74 68 65 20 69 6e 67 72 65 73 73 2d 73 68 61 70 69 6e 67 5f 20 73 65 63 | ,.check.the.ingress-shaping_.sec |
d2860 | 74 69 6f 6e 2e 00 49 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 77 65 20 73 | tion..In.the.command.above,.we.s |
d2880 | 65 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 20 77 65 20 61 72 65 20 67 6f 69 | et.the.type.of.policy.we.are.goi |
d28a0 | 6e 67 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 61 6e 64 20 74 68 65 20 6e 61 6d 65 20 77 65 20 | ng.to.work.with.and.the.name.we. |
d28c0 | 63 68 6f 6f 73 65 20 66 6f 72 20 69 74 3b 20 61 20 63 6c 61 73 73 20 28 73 6f 20 74 68 61 74 20 | choose.for.it;.a.class.(so.that. |
d28e0 | 77 65 20 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 61 74 65 20 73 6f 6d 65 20 74 72 61 66 66 69 | we.can.differentiate.some.traffi |
d2900 | 63 29 20 61 6e 64 20 61 6e 20 69 64 65 6e 74 69 66 69 61 62 6c 65 20 6e 75 6d 62 65 72 20 66 6f | c).and.an.identifiable.number.fo |
d2920 | 72 20 74 68 61 74 20 63 6c 61 73 73 3b 20 74 68 65 6e 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 | r.that.class;.then.we.configure. |
d2940 | 61 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 28 6f 72 20 66 69 6c 74 65 72 29 20 61 6e 64 20 | a.matching.rule.(or.filter).and. |
d2960 | 61 20 6e 61 6d 65 20 66 6f 72 20 69 74 2e 00 49 6e 20 74 68 65 20 65 6e 64 2c 20 61 6e 20 58 4d | a.name.for.it..In.the.end,.an.XM |
d2980 | 4c 20 73 74 72 75 63 74 75 72 65 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 77 68 69 63 68 20 63 | L.structure.is.generated.which.c |
d29a0 | 61 6e 20 62 65 20 73 61 76 65 64 20 61 73 20 60 60 76 79 6f 73 2e 6d 6f 62 69 6c 65 63 6f 6e 66 | an.be.saved.as.``vyos.mobileconf |
d29c0 | 69 67 60 60 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 62 79 20 45 | ig``.and.sent.to.the.device.by.E |
d29e0 | 2d 4d 61 69 6c 20 77 68 65 72 65 20 69 74 20 6c 61 74 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6f | -Mail.where.it.later.can.be.impo |
d2a00 | 72 74 65 64 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 | rted..In.the.example.above,.the. |
d2a20 | 66 69 72 73 74 20 34 39 39 20 73 65 73 73 69 6f 6e 73 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 6f | first.499.sessions.connect.witho |
d2a40 | 75 74 20 64 65 6c 61 79 2e 20 50 41 44 4f 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 | ut.delay..PADO.packets.will.be.d |
d2a60 | 65 6c 61 79 65 64 20 35 30 20 6d 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 72 6f 6d | elayed.50.ms.for.connection.from |
d2a80 | 20 35 30 30 20 74 6f 20 39 39 39 2c 20 74 68 69 73 20 74 72 69 63 6b 20 61 6c 6c 6f 77 73 20 6f | .500.to.999,.this.trick.allows.o |
d2aa0 | 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 20 73 65 6e 64 20 50 41 44 4f 20 66 61 73 | ther.PPPoE.servers.send.PADO.fas |
d2ac0 | 74 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 | ter.and.clients.will.connect.to. |
d2ae0 | 6f 74 68 65 72 20 73 65 72 76 65 72 73 2e 20 4c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 73 61 79 73 | other.servers..Last.command.says |
d2b00 | 20 74 68 61 74 20 74 68 69 73 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 63 61 6e 20 73 65 72 76 | .that.this.PPPoE.server.can.serv |
d2b20 | 65 20 6f 6e 6c 79 20 33 30 30 30 20 63 6c 69 65 6e 74 73 2e 00 49 6e 20 74 68 65 20 65 78 61 6d | e.only.3000.clients..In.the.exam |
d2b40 | 70 6c 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e | ple.used.for.the.Quick.Start.con |
d2b60 | 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 2c 20 77 65 20 64 65 6d 6f 6e 73 74 72 61 74 65 | figuration.above,.we.demonstrate |
d2b80 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 49 6e | .the.following.configuration:.In |
d2ba0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 65 20 63 61 6e 20 73 65 | .the.following.example.we.can.se |
d2bc0 | 65 20 61 20 62 61 73 69 63 20 6d 75 6c 74 69 63 61 73 74 20 73 65 74 75 70 3a 00 49 6e 20 74 68 | e.a.basic.multicast.setup:.In.th |
d2be0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 62 6f 74 68 20 60 55 73 65 72 31 | e.following.example,.both.`User1 |
d2c00 | 60 20 61 6e 64 20 60 55 73 65 72 32 60 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 53 53 | `.and.`User2`.will.be.able.to.SS |
d2c20 | 48 20 69 6e 74 6f 20 56 79 4f 53 20 61 73 20 75 73 65 72 20 60 60 76 79 6f 73 60 60 20 75 73 69 | H.into.VyOS.as.user.``vyos``.usi |
d2c40 | 6e 67 20 74 68 65 69 72 20 76 65 72 79 20 6f 77 6e 20 6b 65 79 73 2e 20 60 55 73 65 72 31 60 20 | ng.their.very.own.keys..`User1`. |
d2c60 | 69 73 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f | is.restricted.to.only.be.able.to |
d2c80 | 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 | .connect.from.a.single.IP.addres |
d2ca0 | 73 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 69 66 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 20 | s..In.addition.if.password.base. |
d2cc0 | 6c 6f 67 69 6e 20 69 73 20 77 61 6e 74 65 64 20 66 6f 72 20 74 68 65 20 60 60 76 79 6f 73 60 60 | login.is.wanted.for.the.``vyos`` |
d2ce0 | 20 75 73 65 72 20 61 20 32 46 41 2f 4d 46 41 20 6b 65 79 63 6f 64 65 20 69 73 20 72 65 71 75 69 | .user.a.2FA/MFA.keycode.is.requi |
d2d00 | 72 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 70 61 73 73 77 6f 72 64 2e | red.in.addition.to.the.password. |
d2d20 | 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 49 | .In.the.following.example,.the.I |
d2d40 | 50 73 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 63 6c 69 65 6e 74 73 20 61 72 65 20 64 65 | Ps.for.the.remote.clients.are.de |
d2d60 | 66 69 6e 65 64 20 69 6e 20 74 68 65 20 70 65 65 72 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 | fined.in.the.peers..This.allows. |
d2d80 | 74 68 65 20 70 65 65 72 73 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6f 6e 65 20 61 | the.peers.to.interact.with.one.a |
d2da0 | 6e 6f 74 68 65 72 2e 20 49 6e 20 63 6f 6d 70 61 72 69 73 6f 6e 20 74 6f 20 74 68 65 20 73 69 74 | nother..In.comparison.to.the.sit |
d2dc0 | 65 2d 74 6f 2d 73 69 74 65 20 65 78 61 6d 70 6c 65 20 74 68 65 20 60 60 70 65 72 73 69 73 74 65 | e-to-site.example.the.``persiste |
d2de0 | 6e 74 2d 6b 65 65 70 61 6c 69 76 65 60 60 20 66 6c 61 67 20 69 73 20 73 65 74 20 74 6f 20 31 35 | nt-keepalive``.flag.is.set.to.15 |
d2e00 | 20 73 65 63 6f 6e 64 73 20 74 6f 20 61 73 73 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | .seconds.to.assure.the.connectio |
d2e20 | 6e 20 69 73 20 6b 65 70 74 20 61 6c 69 76 65 2e 20 54 68 69 73 20 69 73 20 6d 61 69 6e 6c 79 20 | n.is.kept.alive..This.is.mainly. |
d2e40 | 72 65 6c 65 76 61 6e 74 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 65 65 72 73 20 69 73 20 | relevant.if.one.of.the.peers.is. |
d2e60 | 62 65 68 69 6e 64 20 4e 41 54 20 61 6e 64 20 63 61 6e 27 74 20 62 65 20 63 6f 6e 6e 65 63 74 65 | behind.NAT.and.can't.be.connecte |
d2e80 | 64 20 74 6f 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6c 6f 73 74 2e 20 | d.to.if.the.connection.is.lost.. |
d2ea0 | 54 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 20 74 68 69 73 20 76 61 6c 75 65 20 6e 65 65 64 73 | To.be.effective.this.value.needs |
d2ec0 | 20 74 6f 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 55 44 50 20 74 69 6d 65 6f 75 | .to.be.lower.than.the.UDP.timeou |
d2ee0 | 74 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 | t..In.the.following.example,.whe |
d2f00 | 6e 20 56 4c 41 4e 39 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 56 4c 41 4e 32 30 20 77 69 6c 6c | n.VLAN9.transitions,.VLAN20.will |
d2f20 | 20 61 6c 73 6f 20 74 72 61 6e 73 69 74 69 6f 6e 3a 00 49 6e 20 74 68 65 20 66 75 74 75 72 65 20 | .also.transition:.In.the.future. |
d2f40 | 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 61 20 76 65 72 79 20 75 73 | this.is.expected.to.be.a.very.us |
d2f60 | 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 74 68 6f 75 67 68 20 74 68 65 72 65 20 61 72 65 20 | eful.protocol.(though.there.are. |
d2f80 | 60 6f 74 68 65 72 20 70 72 6f 70 6f 73 61 6c 73 60 5f 29 2e 00 49 6e 20 74 68 65 20 6e 65 78 74 | `other.proposals`_)..In.the.next |
d2fa0 | 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f | .example.all.traffic.destined.to |
d2fc0 | 20 60 60 32 30 33 2e 30 2e 31 31 33 2e 31 60 60 20 61 6e 64 20 70 6f 72 74 20 60 60 38 32 38 30 | .``203.0.113.1``.and.port.``8280 |
d2fe0 | 60 60 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 69 73 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 | ``.protocol.TCP.is.balanced.betw |
d3000 | 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 31 60 | een.2.real.servers.``192.0.2.11` |
d3020 | 60 20 61 6e 64 20 60 60 31 39 32 2e 30 2e 32 2e 31 32 60 60 20 74 6f 20 70 6f 72 74 20 60 60 38 | `.and.``192.0.2.12``.to.port.``8 |
d3040 | 30 60 60 00 49 6e 20 74 68 65 20 70 61 73 74 20 28 56 79 4f 53 20 31 2e 31 29 20 75 73 65 64 20 | 0``.In.the.past.(VyOS.1.1).used. |
d3060 | 61 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 | a.gateway-address.configured.und |
d3080 | 65 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 72 65 65 20 28 3a 63 66 67 63 6d 64 3a 60 73 65 74 | er.the.system.tree.(:cfgcmd:`set |
d30a0 | 20 73 79 73 74 65 6d 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 3c 61 64 64 72 65 73 73 | .system.gateway-address.<address |
d30c0 | 3e 60 29 2c 20 74 68 69 73 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 | >`),.this.is.no.longer.supported |
d30e0 | 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 61 72 65 | .and.existing.configurations.are |
d3100 | 20 6d 69 67 72 61 74 65 64 20 74 6f 20 74 68 65 20 6e 65 77 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 | .migrated.to.the.new.CLI.command |
d3120 | 2e 00 49 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 72 65 65 2c 20 61 6c 6c 20 68 61 72 64 | ..In.this.command.tree,.all.hard |
d3140 | 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 | ware.acceleration.options.will.b |
d3160 | 65 20 68 61 6e 64 6c 65 64 2e 20 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 6f 6e 6c 79 20 60 49 | e.handled..At.the.moment.only.`I |
d3180 | 6e 74 65 6c c2 ae 20 51 41 54 60 5f 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 49 6e 20 74 68 69 | ntel...QAT`_.is.supported.In.thi |
d31a0 | 73 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 | s.example.all.traffic.destined.t |
d31c0 | 6f 20 70 6f 72 74 73 20 22 38 30 2c 20 32 32 32 32 2c 20 38 38 38 38 22 20 70 72 6f 74 6f 63 6f | o.ports."80,.2222,.8888".protoco |
d31e0 | 6c 20 54 43 50 20 6d 61 72 6b 73 20 74 6f 20 66 77 6d 61 72 6b 20 22 31 31 31 22 20 61 6e 64 20 | l.TCP.marks.to.fwmark."111".and. |
d3200 | 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e | balanced.between.2.real.servers. |
d3220 | 20 50 6f 72 74 20 22 30 22 20 69 73 20 72 65 71 75 69 72 65 64 20 69 66 20 6d 75 6c 74 69 70 6c | .Port."0".is.required.if.multipl |
d3240 | 65 20 70 6f 72 74 73 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c | e.ports.are.used..In.this.exampl |
d3260 | 65 20 69 6d 61 67 65 2c 20 61 20 73 69 6d 70 6c 69 66 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f | e.image,.a.simplifed.traffic.flo |
d3280 | 77 20 69 73 20 73 68 6f 77 6e 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 | w.is.shown.to.help.provide.conte |
d32a0 | 78 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 | xt.to.the.terms.of.`forward`,.`i |
d32c0 | 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f 72 20 74 68 65 20 6e 65 77 20 | nput`,.and.`output`.for.the.new. |
d32e0 | 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 66 6f 72 6d 61 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 | firewall.CLI.format..In.this.exa |
d3300 | 6d 70 6c 65 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 70 6c 69 | mple.we.will.use.the.most.compli |
d3320 | 63 61 74 65 64 20 63 61 73 65 3a 20 61 20 73 65 74 75 70 20 77 68 65 72 65 20 65 61 63 68 20 63 | cated.case:.a.setup.where.each.c |
d3340 | 6c 69 65 6e 74 20 69 73 20 61 20 72 6f 75 74 65 72 20 74 68 61 74 20 68 61 73 20 69 74 73 20 6f | lient.is.a.router.that.has.its.o |
d3360 | 77 6e 20 73 75 62 6e 65 74 20 28 74 68 69 6e 6b 20 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f | wn.subnet.(think.HQ.and.branch.o |
d3380 | 66 66 69 63 65 73 29 2c 20 73 69 6e 63 65 20 73 69 6d 70 6c 65 72 20 73 65 74 75 70 73 20 61 72 | ffices),.since.simpler.setups.ar |
d33a0 | 65 20 73 75 62 73 65 74 73 20 6f 66 20 69 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 | e.subsets.of.it..In.this.example |
d33c0 | 2c 20 73 6f 6d 65 20 2a 4f 70 65 6e 4e 49 43 2a 20 73 65 72 76 65 72 73 20 61 72 65 20 75 73 65 | ,.some.*OpenNIC*.servers.are.use |
d33e0 | 64 2c 20 74 77 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 74 77 6f 20 49 50 | d,.two.IPv4.addresses.and.two.IP |
d3400 | 76 36 20 61 64 64 72 65 73 73 65 73 3a 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 | v6.addresses:.In.this.example,.w |
d3420 | 65 20 75 73 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 61 73 20 74 68 65 20 74 72 61 6e | e.use.**masquerade**.as.the.tran |
d3440 | 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 6e 73 74 65 61 64 20 6f 66 20 61 6e 20 49 50 | slation.address.instead.of.an.IP |
d3460 | 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 74 61 72 | .address..The.**masquerade**.tar |
d3480 | 67 65 74 20 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6e 20 61 6c 69 61 73 20 74 6f 20 73 | get.is.effectively.an.alias.to.s |
d34a0 | 61 79 20 22 75 73 65 20 77 68 61 74 65 76 65 72 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6f | ay."use.whatever.IP.address.is.o |
d34c0 | 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 22 2c 20 72 61 74 68 65 | n.the.outgoing.interface",.rathe |
d34e0 | 72 20 74 68 61 6e 20 61 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 49 | r.than.a.statically.configured.I |
d3500 | 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 | P.address..This.is.useful.if.you |
d3520 | 20 75 73 65 20 44 48 43 50 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 | .use.DHCP.for.your.outgoing.inte |
d3540 | 72 66 61 63 65 20 61 6e 64 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 20 65 | rface.and.do.not.know.what.the.e |
d3560 | 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 2e 00 49 6e 20 74 68 69 73 | xternal.address.will.be..In.this |
d3580 | 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 65 | .example,.we.will.be.using.the.e |
d35a0 | 78 61 6d 70 6c 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | xample.Quick.Start.configuration |
d35c0 | 20 61 62 6f 76 65 20 61 73 20 61 20 73 74 61 72 74 69 6e 67 20 70 6f 69 6e 74 2e 00 49 6e 20 74 | .above.as.a.starting.point..In.t |
d35e0 | 68 69 73 20 6d 65 74 68 6f 64 2c 20 74 68 65 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 | his.method,.the.DSL.Modem/Router |
d3600 | 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 74 68 65 20 49 53 50 20 66 6f 72 20 79 6f 75 20 77 69 74 | .connects.to.the.ISP.for.you.wit |
d3620 | 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 65 70 72 6f 67 72 61 6d 6d 65 64 | h.your.credentials.preprogrammed |
d3640 | 20 69 6e 74 6f 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 67 69 76 65 73 20 79 6f 75 | .into.the.device..This.gives.you |
d3660 | 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 | .an.:rfc:`1918`.address,.such.as |
d3680 | 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 60 60 20 62 79 20 64 65 66 61 75 6c 74 2e 00 | .``192.168.1.0/24``.by.default.. |
d36a0 | 49 6e 20 74 68 69 73 20 73 63 65 6e 61 72 69 6f 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f | In.this.scenario:.In.this.sectio |
d36c0 | 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 | n.there's.useful.information.of. |
d36e0 | 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 | all.firewall.configuration.that. |
d3700 | 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 34 2c 20 61 6e 64 20 | can.be.done.regarding.IPv4,.and. |
d3720 | 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e | appropiate.op-mode.commands..Con |
d3740 | 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 | figuration.commands.covered.in.t |
d3760 | 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 | his.section:.In.this.section.the |
d3780 | 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 | re's.useful.information.of.all.f |
d37a0 | 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 | irewall.configuration.that.can.b |
d37c0 | 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 36 2c 20 61 6e 64 20 61 70 70 72 6f | e.done.regarding.IPv6,.and.appro |
d37e0 | 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 | piate.op-mode.commands..Configur |
d3800 | 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 | ation.commands.covered.in.this.s |
d3820 | 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 | ection:.In.this.section.there's. |
d3840 | 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 | useful.information.of.all.firewa |
d3860 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e | ll.configuration.that.can.be.don |
d3880 | 65 20 72 65 67 61 72 64 69 6e 67 20 62 72 69 64 67 65 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 | e.regarding.bridge,.and.appropia |
d38a0 | 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 | te.op-mode.commands..Configurati |
d38c0 | 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 | on.commands.covered.in.this.sect |
d38e0 | 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 | ion:.In.this.section.there's.use |
d3900 | 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 | ful.information.of.all.firewall. |
d3920 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 | configuration.that.can.be.done.r |
d3940 | 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 00 49 6e 20 74 68 69 73 20 73 65 63 74 | egarding.flowtables.In.this.sect |
d3960 | 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f | ion.there's.useful.information.o |
d3980 | 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 | f.all.firewall.configuration.tha |
d39a0 | 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c | t.can.be.done.regarding.flowtabl |
d39c0 | 65 73 2e 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 | es..In.this.section.there's.usef |
d39e0 | 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 | ul.information.of.all.firewall.c |
d3a00 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 6e 65 65 64 65 64 20 66 6f 72 20 | onfiguration.that.is.needed.for. |
d3a20 | 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 | zone-based.firewall..Configurati |
d3a40 | 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 | on.commands.covered.in.this.sect |
d3a60 | 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e | ion:.In.this.section.you.can.fin |
d3a80 | 64 20 61 6c 6c 20 75 73 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 70 2d 6d 6f 64 65 20 63 6f | d.all.useful.firewall.op-mode.co |
d3aa0 | 6d 6d 61 6e 64 73 2e 00 49 6e 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 20 6d 6f 64 | mmands..In.transparent.proxy.mod |
d3ac0 | 65 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 61 72 72 69 76 69 6e 67 20 6f 6e 20 70 6f 72 74 20 | e,.all.traffic.arriving.on.port. |
d3ae0 | 38 30 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 | 80.and.destined.for.the.Internet |
d3b00 | 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f | .is.automatically.forwarded.thro |
d3b20 | 75 67 68 20 74 68 65 20 70 72 6f 78 79 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 69 6d 6d 65 64 | ugh.the.proxy..This.allows.immed |
d3b40 | 69 61 74 65 20 70 72 6f 78 79 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f | iate.proxy.forwarding.without.co |
d3b60 | 6e 66 69 67 75 72 69 6e 67 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 2e 00 49 6e 20 74 79 | nfiguring.client.browsers..In.ty |
d3b80 | 70 69 63 61 6c 20 75 73 65 73 20 6f 66 20 53 4e 4d 50 2c 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 | pical.uses.of.SNMP,.one.or.more. |
d3ba0 | 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 63 6f 6d 70 75 74 65 72 73 20 63 61 6c 6c 65 64 20 | administrative.computers.called. |
d3bc0 | 6d 61 6e 61 67 65 72 73 20 68 61 76 65 20 74 68 65 20 74 61 73 6b 20 6f 66 20 6d 6f 6e 69 74 6f | managers.have.the.task.of.monito |
d3be0 | 72 69 6e 67 20 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 20 67 72 6f 75 70 20 6f 66 20 68 6f 73 74 | ring.or.managing.a.group.of.host |
d3c00 | 73 20 6f 72 20 64 65 76 69 63 65 73 20 6f 6e 20 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f | s.or.devices.on.a.computer.netwo |
d3c20 | 72 6b 2e 20 45 61 63 68 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 6d 20 65 78 65 63 75 74 65 73 | rk..Each.managed.system.executes |
d3c40 | 20 61 20 73 6f 66 74 77 61 72 65 20 63 6f 6d 70 6f 6e 65 6e 74 20 63 61 6c 6c 65 64 20 61 6e 20 | .a.software.component.called.an. |
d3c60 | 61 67 65 6e 74 20 77 68 69 63 68 20 72 65 70 6f 72 74 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | agent.which.reports.information. |
d3c80 | 76 69 61 20 53 4e 4d 50 20 74 6f 20 74 68 65 20 6d 61 6e 61 67 65 72 2e 00 49 6e 20 7a 6f 6e 65 | via.SNMP.to.the.manager..In.zone |
d3ca0 | 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 | -based.policy,.interfaces.are.as |
d3cc0 | 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 | signed.to.zones,.and.inspection. |
d3ce0 | 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 | policy.is.applied.to.traffic.mov |
d3d00 | 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 | ing.between.the.zones.and.acted. |
d3d20 | 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 | on.according.to.firewall.rules.. |
d3d40 | 41 20 5a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 | A.Zone.is.a.group.of.interfaces. |
d3d60 | 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 | that.have.similar.functions.or.f |
d3d80 | 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 | eatures..It.establishes.the.secu |
d3da0 | 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e | rity.borders.of.a.network..A.zon |
d3dc0 | 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 | e.defines.a.boundary.where.traff |
d3de0 | 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 | ic.is.subjected.to.policy.restri |
d3e00 | 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 | ctions.as.it.crosses.to.another. |
d3e20 | 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 | region.of.a.network..In.zone-bas |
d3e40 | 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 69 67 6e | ed.policy,.interfaces.are.assign |
d3e60 | 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 | ed.to.zones,.and.inspection.poli |
d3e80 | 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 | cy.is.applied.to.traffic.moving. |
d3ea0 | 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 | between.the.zones.and.acted.on.a |
d3ec0 | 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 41 20 7a 6f | ccording.to.firewall.rules..A.zo |
d3ee0 | 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 | ne.is.a.group.of.interfaces.that |
d3f00 | 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 | .have.similar.functions.or.featu |
d3f20 | 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 | res..It.establishes.the.security |
d3f40 | 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 | .borders.of.a.network..A.zone.de |
d3f60 | 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 | fines.a.boundary.where.traffic.i |
d3f80 | 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 63 74 69 6f | s.subjected.to.policy.restrictio |
d3fa0 | 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 | ns.as.it.crosses.to.another.regi |
d3fc0 | 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 | on.of.a.network..Inbound.connect |
d3fe0 | 69 6f 6e 73 20 74 6f 20 61 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 69 | ions.to.a.WAN.interface.can.be.i |
d4000 | 6d 70 72 6f 70 65 72 6c 79 20 68 61 6e 64 6c 65 64 20 77 68 65 6e 20 74 68 65 20 72 65 70 6c 79 | mproperly.handled.when.the.reply |
d4020 | 20 69 73 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 49 6e 63 | .is.sent.back.to.the.client..Inc |
d4040 | 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 | oming.traffic.is.received.by.the |
d4060 | 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 49 66 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 | .current.slave..If.the.receiving |
d4080 | 20 73 6c 61 76 65 20 66 61 69 6c 73 2c 20 61 6e 6f 74 68 65 72 20 73 6c 61 76 65 20 74 61 6b 65 | .slave.fails,.another.slave.take |
d40a0 | 73 20 6f 76 65 72 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 66 61 | s.over.the.MAC.address.of.the.fa |
d40c0 | 69 6c 65 64 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 2e 00 49 6e 63 72 65 61 73 65 20 4d | iled.receiving.slave..Increase.M |
d40e0 | 61 78 69 6d 75 6d 20 4d 50 44 55 20 6c 65 6e 67 74 68 20 74 6f 20 37 39 39 31 20 6f 72 20 31 31 | aximum.MPDU.length.to.7991.or.11 |
d4100 | 34 35 34 20 6f 63 74 65 74 73 20 28 64 65 66 61 75 6c 74 20 33 38 39 35 20 6f 63 74 65 74 73 29 | 454.octets.(default.3895.octets) |
d4120 | 00 49 6e 64 69 63 61 74 69 6f 6e 00 49 6e 64 69 76 69 64 75 61 6c 20 43 6c 69 65 6e 74 20 53 75 | .Indication.Individual.Client.Su |
d4140 | 62 6e 65 74 00 49 6e 66 6f 72 6d 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 | bnet.Inform.client.that.the.DNS. |
d4160 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 | server.can.be.found.at.`<address |
d4180 | 3e 60 2e 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 67 61 74 68 65 72 65 64 20 77 69 74 68 20 4c 4c | >`..Information.gathered.with.LL |
d41a0 | 44 50 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 64 65 76 69 63 65 20 61 73 20 61 20 | DP.is.stored.in.the.device.as.a. |
d41c0 | 3a 61 62 62 72 3a 60 4d 49 42 20 28 4d 61 6e 61 67 65 6d 65 6e 74 20 49 6e 66 6f 72 6d 61 74 69 | :abbr:`MIB.(Management.Informati |
d41e0 | 6f 6e 20 44 61 74 61 62 61 73 65 29 60 20 61 6e 64 20 63 61 6e 20 62 65 20 71 75 65 72 69 65 64 | on.Database)`.and.can.be.queried |
d4200 | 20 77 69 74 68 20 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 | .with.:abbr:`SNMP.(Simple.Networ |
d4220 | 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 73 20 73 70 65 63 69 | k.Management.Protocol)`.as.speci |
d4240 | 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 39 32 32 60 2e 20 54 68 65 20 74 6f 70 6f 6c 6f 67 | fied.in.:rfc:`2922`..The.topolog |
d4260 | 79 20 6f 66 20 61 6e 20 4c 4c 44 50 2d 65 6e 61 62 6c 65 64 20 6e 65 74 77 6f 72 6b 20 63 61 6e | y.of.an.LLDP-enabled.network.can |
d4280 | 20 62 65 20 64 69 73 63 6f 76 65 72 65 64 20 62 79 20 63 72 61 77 6c 69 6e 67 20 74 68 65 20 68 | .be.discovered.by.crawling.the.h |
d42a0 | 6f 73 74 73 20 61 6e 64 20 71 75 65 72 79 69 6e 67 20 74 68 69 73 20 64 61 74 61 62 61 73 65 2e | osts.and.querying.this.database. |
d42c0 | 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 6d 61 79 20 62 65 20 72 65 74 72 69 65 76 | .Information.that.may.be.retriev |
d42e0 | 65 64 20 69 6e 63 6c 75 64 65 3a 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 00 49 6e 66 6f 72 6d | ed.include:.Informational.Inform |
d4300 | 61 74 69 6f 6e 61 6c 20 6d 65 73 73 61 67 65 73 00 49 6e 70 75 74 20 66 72 6f 6d 20 60 65 74 68 | ational.messages.Input.from.`eth |
d4320 | 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 49 6e 73 70 65 63 74 20 6c 6f 67 | 0`.network.interface.Inspect.log |
d4340 | 73 3a 00 49 6e 73 74 61 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 76 | s:.Install.the.client.software.v |
d4360 | 69 61 20 61 70 74 20 61 6e 64 20 65 78 65 63 75 74 65 20 70 70 74 70 73 65 74 75 70 20 74 6f 20 | ia.apt.and.execute.pptpsetup.to. |
d4380 | 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 73 74 | generate.the.configuration..Inst |
d43a0 | 65 61 64 20 6f 66 20 61 20 6e 75 6d 65 72 69 63 61 6c 20 4d 53 53 20 76 61 6c 75 65 20 60 63 6c | ead.of.a.numerical.MSS.value.`cl |
d43c0 | 61 6d 70 2d 6d 73 73 2d 74 6f 2d 70 6d 74 75 60 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 | amp-mss-to-pmtu`.can.be.used.to. |
d43e0 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 65 74 20 74 68 65 20 70 72 6f 70 65 72 20 76 61 6c | automatically.set.the.proper.val |
d4400 | 75 65 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 70 61 73 73 77 6f 72 64 20 6f 6e 6c 79 20 61 75 74 | ue..Instead.of.password.only.aut |
d4420 | 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 32 46 41 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e | hentication,.2FA.password.authen |
d4440 | 74 69 63 61 74 69 6f 6e 20 2b 20 4f 54 50 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 | tication.+.OTP.key.can.be.used.. |
d4460 | 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 4f 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | Alternatively,.OTP.authenticatio |
d4480 | 6e 20 6f 6e 6c 79 2c 20 77 69 74 68 6f 75 74 20 61 20 70 61 73 73 77 6f 72 64 2c 20 63 61 6e 20 | n.only,.without.a.password,.can. |
d44a0 | 62 65 20 75 73 65 64 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 61 6e 20 4f 54 50 20 63 6f 6e 66 | be.used..To.do.this,.an.OTP.conf |
d44c0 | 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 63 | iguration.must.be.added.to.the.c |
d44e0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 3a 00 49 6e 73 74 65 61 64 20 6f 66 20 73 | onfiguration.above:.Instead.of.s |
d4500 | 65 6e 64 69 6e 67 20 74 68 65 20 72 65 61 6c 20 73 79 73 74 65 6d 20 68 6f 73 74 6e 61 6d 65 20 | ending.the.real.system.hostname. |
d4520 | 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2c 20 6f 76 65 72 77 72 69 74 65 20 74 68 | to.the.DHCP.server,.overwrite.th |
d4540 | 65 20 68 6f 73 74 2d 6e 61 6d 65 20 77 69 74 68 20 74 68 69 73 20 67 69 76 65 6e 2d 76 61 6c 75 | e.host-name.with.this.given-valu |
d4560 | 65 2e 00 49 6e 74 65 67 72 69 74 79 20 e2 80 93 20 4d 65 73 73 61 67 65 20 69 6e 74 65 67 72 69 | e..Integrity.....Message.integri |
d4580 | 74 79 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 70 61 63 6b 65 74 20 68 61 73 20 6e | ty.to.ensure.that.a.packet.has.n |
d45a0 | 6f 74 20 62 65 65 6e 20 74 61 6d 70 65 72 65 64 20 77 68 69 6c 65 20 69 6e 20 74 72 61 6e 73 69 | ot.been.tampered.while.in.transi |
d45c0 | 74 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 70 61 63 6b 65 74 20 72 | t.including.an.optional.packet.r |
d45e0 | 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 2e 00 49 6e 74 65 | eplay.protection.mechanism..Inte |
d4600 | 6c 20 41 58 32 30 30 00 49 6e 74 65 6c c2 ae 20 51 41 54 00 49 6e 74 65 72 63 6f 6e 6e 65 63 74 | l.AX200.Intel...QAT.Interconnect |
d4620 | 20 74 68 65 20 67 6c 6f 62 61 6c 20 56 52 46 20 77 69 74 68 20 76 72 66 20 22 72 65 64 22 20 75 | .the.global.VRF.with.vrf."red".u |
d4640 | 73 69 6e 67 20 74 68 65 20 76 65 74 68 31 30 20 3c 2d 3e 20 76 65 74 68 20 31 31 20 70 61 69 72 | sing.the.veth10.<->.veth.11.pair |
d4660 | 00 49 6e 74 65 72 66 61 63 65 20 2a 2a 65 74 68 30 2a 2a 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e | .Interface.**eth0**.used.to.conn |
d4680 | 65 63 74 20 74 6f 20 75 70 73 74 72 65 61 6d 2e 00 49 6e 74 65 72 66 61 63 65 20 43 6f 6e 66 69 | ect.to.upstream..Interface.Confi |
d46a0 | 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 47 72 6f 75 70 73 00 49 6e 74 65 72 66 | guration.Interface.Groups.Interf |
d46c0 | 61 63 65 20 52 6f 75 74 65 73 00 49 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 4c 41 4e 20 | ace.Routes.Interface.`eth1`.LAN. |
d46e0 | 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 75 62 73 63 | is.behind.NAT..In.order.to.subsc |
d4700 | 72 69 62 65 20 60 31 30 2e 30 2e 30 2e 30 2f 32 33 60 20 73 75 62 6e 65 74 20 6d 75 6c 74 69 63 | ribe.`10.0.0.0/23`.subnet.multic |
d4720 | 61 73 74 20 77 68 69 63 68 20 69 73 20 69 6e 20 60 65 74 68 30 60 20 57 41 4e 20 77 65 20 6e 65 | ast.which.is.in.`eth0`.WAN.we.ne |
d4740 | 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 67 6d 70 2d 70 72 6f 78 79 2e 00 49 6e 74 65 | ed.to.configure.igmp-proxy..Inte |
d4760 | 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 66 6f | rface.configuration.Interface.fo |
d4780 | 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 | r.DHCP.Relay.Agent.to.forward.re |
d47a0 | 71 75 65 73 74 73 20 6f 75 74 2e 00 49 6e 74 65 72 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 | quests.out..Interface.for.DHCP.R |
d47c0 | 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 | elay.Agent.to.listen.for.request |
d47e0 | 73 2e 00 49 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 63 20 63 6f 6d 6d 61 6e 64 73 00 49 | s..Interface.specific.commands.I |
d4800 | 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e | nterface.to.use.for.syncing.conn |
d4820 | 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 49 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f | track.entries..Interface.used.fo |
d4840 | 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 74 | r.VXLAN.underlay..This.is.mandat |
d4860 | 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 69 61 20 61 20 6d 75 6c 74 69 | ory.when.using.VXLAN.via.a.multi |
d4880 | 63 61 73 74 20 6e 65 74 77 6f 72 6b 2e 20 56 58 4c 41 4e 20 74 72 61 66 66 69 63 20 77 69 6c 6c | cast.network..VXLAN.traffic.will |
d48a0 | 20 61 6c 77 61 79 73 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 74 68 69 73 20 69 6e 74 65 | .always.enter.and.exit.this.inte |
d48c0 | 72 66 61 63 65 2e 00 49 6e 74 65 72 66 61 63 65 20 77 65 69 67 68 74 00 49 6e 74 65 72 66 61 63 | rface..Interface.weight.Interfac |
d48e0 | 65 73 00 49 6e 74 65 72 66 61 63 65 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 | es.Interfaces.Configuration.Inte |
d4900 | 72 66 61 63 65 73 20 74 68 61 74 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 74 68 65 20 44 | rfaces.that.participate.in.the.D |
d4920 | 48 43 50 20 72 65 6c 61 79 20 70 72 6f 63 65 73 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 | HCP.relay.process..If.this.comma |
d4940 | 6e 64 20 69 73 20 75 73 65 64 2c 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 65 6e 74 72 69 65 73 | nd.is.used,.at.least.two.entries |
d4960 | 20 6f 66 20 69 74 20 61 72 65 20 72 65 71 75 69 72 65 64 3a 20 6f 6e 65 20 66 6f 72 20 74 68 65 | .of.it.are.required:.one.for.the |
d4980 | 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 63 61 70 74 75 72 65 73 20 74 68 65 20 64 68 63 | .interface.that.captures.the.dhc |
d49a0 | 70 2d 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6f 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 | p-requests,.and.one.for.the.inte |
d49c0 | 72 66 61 63 65 20 74 6f 20 66 6f 72 77 61 72 64 20 73 75 63 68 20 72 65 71 75 65 73 74 73 2e 20 | rface.to.forward.such.requests.. |
d49e0 | 41 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 | A.warning.message.will.be.shown. |
d4a00 | 69 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 2c 20 73 69 6e 63 65 20 6e | if.this.command.is.used,.since.n |
d4a20 | 65 77 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 68 6f 75 6c 64 20 75 73 65 20 60 60 | ew.implementations.should.use.`` |
d4a40 | 6c 69 73 74 65 6e 2d 69 6e 74 65 72 66 61 63 65 60 60 20 61 6e 64 20 60 60 75 70 73 74 72 65 61 | listen-interface``.and.``upstrea |
d4a60 | 6d 2d 69 6e 74 65 72 66 61 63 65 60 60 2e 00 49 6e 74 65 72 66 61 63 65 73 20 77 68 6f 73 65 20 | m-interface``..Interfaces.whose. |
d4a80 | 44 48 43 50 20 63 6c 69 65 6e 74 20 6e 61 6d 65 73 65 72 76 65 72 73 20 74 6f 20 66 6f 72 77 61 | DHCP.client.nameservers.to.forwa |
d4aa0 | 72 64 20 72 65 71 75 65 73 74 73 20 74 6f 2e 00 49 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 69 | rd.requests.to..Interfaces,.thei |
d4ac0 | 72 20 77 65 69 67 68 74 20 61 6e 64 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 | r.weight.and.the.type.of.traffic |
d4ae0 | 20 74 6f 20 62 65 20 62 61 6c 61 6e 63 65 64 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 6e | .to.be.balanced.are.defined.in.n |
d4b00 | 75 6d 62 65 72 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 20 73 65 74 73 2e 20 54 68 65 | umbered.balancing.rule.sets..The |
d4b20 | 20 72 75 6c 65 20 73 65 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 20 69 6e 20 6e 75 6d 65 72 | .rule.sets.are.executed.in.numer |
d4b40 | 69 63 61 6c 20 6f 72 64 65 72 20 61 67 61 69 6e 73 74 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b | ical.order.against.outgoing.pack |
d4b60 | 65 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 61 74 63 68 20 74 68 65 20 70 61 63 6b | ets..In.case.of.a.match.the.pack |
d4b80 | 65 74 20 69 73 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 | et.is.sent.through.an.interface. |
d4ba0 | 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 20 | specified.in.the.matching.rule.. |
d4bc0 | 49 66 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 | If.a.packet.doesn't.match.any.ru |
d4be0 | 6c 65 20 69 74 20 69 73 20 73 65 6e 74 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 73 79 73 74 65 | le.it.is.sent.by.using.the.syste |
d4c00 | 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 52 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 | m.routing.table..Rule.numbers.ca |
d4c20 | 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 2e 00 49 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a | n't.be.changed..Internal.attack: |
d4c40 | 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 | .an.attack.from.the.internal.net |
d4c60 | 77 6f 72 6b 20 28 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 63 75 73 74 6f 6d 65 72 29 20 74 | work.(generated.by.a.customer).t |
d4c80 | 6f 77 61 72 64 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 69 73 20 69 64 65 6e 74 69 66 79 2e | owards.the.internet.is.identify. |
d4ca0 | 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 | .In.this.case,.all.connections.f |
d4cc0 | 72 6f 6d 20 74 68 69 73 20 70 61 72 74 69 63 75 6c 61 72 20 49 50 2f 43 75 73 74 6f 6d 65 72 20 | rom.this.particular.IP/Customer. |
d4ce0 | 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 49 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 6e 20 | will.be.blocked..Internally,.in. |
d4d00 | 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 70 72 6f 63 65 73 73 65 73 20 65 78 69 73 74 20 | flow-accounting.processes.exist. |
d4d20 | 61 20 62 75 66 66 65 72 20 66 6f 72 20 64 61 74 61 20 65 78 63 68 61 6e 67 69 6e 67 20 62 65 74 | a.buffer.for.data.exchanging.bet |
d4d40 | 77 65 65 6e 20 63 6f 72 65 20 70 72 6f 63 65 73 73 20 61 6e 64 20 70 6c 75 67 69 6e 73 20 28 65 | ween.core.process.and.plugins.(e |
d4d60 | 61 63 68 20 65 78 70 6f 72 74 20 74 61 72 67 65 74 20 69 73 20 61 20 73 65 70 61 72 61 74 65 64 | ach.export.target.is.a.separated |
d4d80 | 20 70 6c 75 67 69 6e 29 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 68 69 67 68 20 74 72 61 66 66 | .plugin)..If.you.have.high.traff |
d4da0 | 69 63 20 6c 65 76 65 6c 73 20 6f 72 20 6e 6f 74 65 64 20 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 | ic.levels.or.noted.some.problems |
d4dc0 | 20 77 69 74 68 20 6d 69 73 73 65 64 20 72 65 63 6f 72 64 73 20 6f 72 20 73 74 6f 70 70 69 6e 67 | .with.missed.records.or.stopping |
d4de0 | 20 65 78 70 6f 72 74 69 6e 67 2c 20 79 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 69 6e 63 72 65 | .exporting,.you.may.try.to.incre |
d4e00 | 61 73 65 20 61 20 64 65 66 61 75 6c 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 28 31 30 20 4d 69 | ase.a.default.buffer.size.(10.Mi |
d4e20 | 42 29 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 3a 00 49 6e 74 65 72 6e | B).with.the.next.command:.Intern |
d4e40 | 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 20 28 49 4b 45 76 32 | et.Key.Exchange.version.2.(IKEv2 |
d4e60 | 29 20 69 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 62 61 73 65 64 | ).is.a.tunneling.protocol,.based |
d4e80 | 20 6f 6e 20 49 50 73 65 63 2c 20 74 68 61 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 20 73 65 | .on.IPsec,.that.establishes.a.se |
d4ea0 | 63 75 72 65 20 56 50 4e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 | cure.VPN.communication.between.V |
d4ec0 | 50 4e 20 64 65 76 69 63 65 73 2c 20 20 61 6e 64 20 64 65 66 69 6e 65 73 20 6e 65 67 6f 74 69 61 | PN.devices,..and.defines.negotia |
d4ee0 | 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 65 | tion.and.authentication.processe |
d4f00 | 73 20 66 6f 72 20 49 50 73 65 63 20 73 65 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e | s.for.IPsec.security.association |
d4f20 | 73 20 28 53 41 73 29 2e 20 49 74 20 69 73 20 6f 66 74 65 6e 20 6b 6e 6f 77 6e 20 61 73 20 49 4b | s.(SAs)..It.is.often.known.as.IK |
d4f40 | 45 76 32 2f 49 50 53 65 63 20 6f 72 20 49 50 53 65 63 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d | Ev2/IPSec.or.IPSec.IKEv2.remote- |
d4f60 | 61 63 63 65 73 73 20 e2 80 94 20 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 61 73 20 6f | access.....or.road-warriors.as.o |
d4f80 | 74 68 65 72 73 20 63 61 6c 6c 20 69 74 2e 00 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 | thers.call.it..Internet.Key.Exch |
d4fa0 | 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 2c 20 49 4b 45 76 32 20 66 6f 72 20 73 68 6f 72 74 2c | ange.version.2,.IKEv2.for.short, |
d4fc0 | 20 69 73 20 61 20 72 65 71 75 65 73 74 2f 72 65 73 70 6f 6e 73 65 20 70 72 6f 74 6f 63 6f 6c 20 | .is.a.request/response.protocol. |
d4fe0 | 64 65 76 65 6c 6f 70 65 64 20 62 79 20 62 6f 74 68 20 43 69 73 63 6f 20 61 6e 64 20 4d 69 63 72 | developed.by.both.Cisco.and.Micr |
d5000 | 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 | osoft..It.is.used.to.establish.a |
d5020 | 6e 64 20 73 65 63 75 72 65 20 49 50 76 34 2f 49 50 76 36 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c | nd.secure.IPv4/IPv6.connections, |
d5040 | 20 62 65 20 69 74 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 20 6f 72 20 66 72 6f | .be.it.a.site-to-site.VPN.or.fro |
d5060 | 6d 20 61 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 | m.a.road-warrior.connecting.to.a |
d5080 | 20 68 75 62 20 73 69 74 65 2e 20 49 4b 45 76 32 2c 20 77 68 65 6e 20 72 75 6e 20 69 6e 20 70 6f | .hub.site..IKEv2,.when.run.in.po |
d50a0 | 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2c 20 6f 72 20 72 65 6d 6f 74 65 2d 61 63 63 | int-to-multipoint,.or.remote-acc |
d50c0 | 65 73 73 2f 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 6d 6f 64 65 2c 20 73 65 63 75 72 65 73 20 74 | ess/road-warrior.mode,.secures.t |
d50e0 | 68 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6c 61 79 65 | he.server-side.with.another.laye |
d5100 | 72 20 62 79 20 75 73 69 6e 67 20 61 6e 20 78 35 30 39 20 73 69 67 6e 65 64 20 73 65 72 76 65 72 | r.by.using.an.x509.signed.server |
d5120 | 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 49 6e 74 65 72 6e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 | .certificate..Internetwork.Contr |
d5140 | 6f 6c 00 49 6e 74 65 72 76 61 6c 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 | ol.Interval.Interval.in.millisec |
d5160 | 6f 6e 64 73 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e | onds.Interval.in.minutes.between |
d5180 | 20 75 70 64 61 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 36 30 29 00 49 6e 74 72 6f 64 75 63 69 | .updates.(default:.60).Introduci |
d51a0 | 6e 67 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 72 65 6d 6f 76 65 73 20 74 68 65 20 | ng.route.reflectors.removes.the. |
d51c0 | 6e 65 65 64 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 2d 6d 65 73 68 2e 20 57 68 65 6e 20 79 6f 75 | need.for.the.full-mesh..When.you |
d51e0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 79 6f 75 | .configure.a.route.reflector.you |
d5200 | 20 68 61 76 65 20 74 6f 20 74 65 6c 6c 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 65 74 68 65 72 | .have.to.tell.the.router.whether |
d5220 | 20 74 68 65 20 6f 74 68 65 72 20 49 42 47 50 20 72 6f 75 74 65 72 20 69 73 20 61 20 63 6c 69 65 | .the.other.IBGP.router.is.a.clie |
d5240 | 6e 74 20 6f 72 20 6e 6f 6e 2d 63 6c 69 65 6e 74 2e 20 41 20 63 6c 69 65 6e 74 20 69 73 20 61 6e | nt.or.non-client..A.client.is.an |
d5260 | 20 49 42 47 50 20 72 6f 75 74 65 72 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 72 65 66 6c | .IBGP.router.that.the.route.refl |
d5280 | 65 63 74 6f 72 20 77 69 6c 6c 20 e2 80 9c 72 65 66 6c 65 63 74 e2 80 9d 20 72 6f 75 74 65 73 20 | ector.will....reflect....routes. |
d52a0 | 74 6f 2c 20 74 68 65 20 6e 6f 6e 2d 63 6c 69 65 6e 74 20 69 73 20 6a 75 73 74 20 61 20 72 65 67 | to,.the.non-client.is.just.a.reg |
d52c0 | 75 6c 61 72 20 49 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 20 52 6f 75 74 65 20 72 65 66 6c 65 63 | ular.IBGP.neighbor..Route.reflec |
d52e0 | 74 6f 72 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a | tors.mechanism.is.described.in.: |
d5300 | 72 66 63 3a 60 34 34 35 36 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 | rfc:`4456`.and.updated.by.:rfc:` |
d5320 | 37 36 30 36 60 2e 00 49 74 20 64 69 73 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 | 7606`..It.disables.transparent.h |
d5340 | 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 20 4e 55 4d 41 20 62 61 | uge.pages,.and.automatic.NUMA.ba |
d5360 | 6c 61 6e 63 69 6e 67 2e 20 49 74 20 61 6c 73 6f 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 | lancing..It.also.uses.cpupower.t |
d5380 | 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f | o.set.the.performance.cpufreq.go |
d53a0 | 76 65 72 6e 6f 72 2c 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 61 20 63 70 75 5f 64 6d 61 5f 6c | vernor,.and.requests.a.cpu_dma_l |
d53c0 | 61 74 65 6e 63 79 20 76 61 6c 75 65 20 6f 66 20 31 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 | atency.value.of.1..It.also.sets. |
d53e0 | 62 75 73 79 5f 72 65 61 64 20 61 6e 64 20 62 75 73 79 5f 70 6f 6c 6c 20 74 69 6d 65 73 20 74 6f | busy_read.and.busy_poll.times.to |
d5400 | 20 35 30 20 75 73 2c 20 61 6e 64 20 74 63 70 5f 66 61 73 74 6f 70 65 6e 20 74 6f 20 33 2e 00 49 | .50.us,.and.tcp_fastopen.to.3..I |
d5420 | 74 20 65 6e 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 | t.enables.transparent.huge.pages |
d5440 | 2c 20 61 6e 64 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 | ,.and.uses.cpupower.to.set.the.p |
d5460 | 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 65 72 6e 6f 72 2e 20 49 74 20 | erformance.cpufreq.governor..It. |
d5480 | 61 6c 73 6f 20 73 65 74 73 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 65 64 5f 6d 69 6e 5f 67 72 61 | also.sets.``kernel.sched_min_gra |
d54a0 | 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 30 20 75 73 2c 20 60 60 6b 65 72 6e 65 6c | nularity_ns``.to.10.us,.``kernel |
d54c0 | 2e 73 63 68 65 64 5f 77 61 6b 65 75 70 5f 67 72 61 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 | .sched_wakeup_granularity_ns``.t |
d54e0 | 6f 20 31 35 20 75 73 73 2c 20 61 6e 64 20 60 60 76 6d 2e 64 69 72 74 79 5f 72 61 74 69 6f 60 60 | o.15.uss,.and.``vm.dirty_ratio`` |
d5500 | 20 74 6f 20 34 30 25 2e 00 49 74 20 67 65 6e 65 72 61 74 65 73 20 74 68 65 20 6b 65 79 70 61 69 | .to.40%..It.generates.the.keypai |
d5520 | 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 | r,.which.includes.the.public.and |
d5540 | 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2e 20 54 68 65 20 6b 65 79 20 69 73 20 6e 6f 74 20 73 | .private.parts..The.key.is.not.s |
d5560 | 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 2d 20 6f 6e 6c 79 20 61 20 6b 65 79 | tored.on.the.system.-.only.a.key |
d5580 | 70 61 69 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 73 | pair.is.generated..It.helps.to.s |
d55a0 | 75 70 70 6f 72 74 20 61 73 20 48 45 4c 50 45 52 20 6f 6e 6c 79 20 66 6f 72 20 70 6c 61 6e 6e 65 | upport.as.HELPER.only.for.planne |
d55c0 | 64 20 72 65 73 74 61 72 74 73 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 | d.restarts..It.helps.to.think.of |
d55e0 | 20 74 68 65 20 73 79 6e 74 61 78 20 61 73 3a 20 28 73 65 65 20 62 65 6c 6f 77 29 2e 20 54 68 65 | .the.syntax.as:.(see.below)..The |
d5600 | 20 27 72 75 6c 65 2d 73 65 74 27 20 73 68 6f 75 6c 64 20 62 65 20 77 72 69 74 74 65 6e 20 66 72 | .'rule-set'.should.be.written.fr |
d5620 | 6f 6d 20 74 68 65 20 70 65 72 73 70 65 63 74 69 76 65 20 6f 66 3a 20 2a 53 6f 75 72 63 65 20 5a | om.the.perspective.of:.*Source.Z |
d5640 | 6f 6e 65 2a 2d 74 6f 2d 3e 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 5a 6f 6e 65 2a 00 49 74 20 69 | one*-to->*Destination.Zone*.It.i |
d5660 | 73 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 43 69 73 63 6f 20 28 52 29 20 41 6e 79 43 | s.compatible.with.Cisco.(R).AnyC |
d5680 | 6f 6e 6e 65 63 74 20 28 52 29 20 63 6c 69 65 6e 74 73 2e 00 49 74 20 69 73 20 63 6f 6e 6e 65 63 | onnect.(R).clients..It.is.connec |
d56a0 | 74 65 64 20 74 6f 20 60 60 65 74 68 31 60 60 00 49 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 | ted.to.``eth1``.It.is.highly.rec |
d56c0 | 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 53 53 48 20 6b 65 79 20 61 75 74 68 65 6e 74 69 | ommended.to.use.SSH.key.authenti |
d56e0 | 63 61 74 69 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 | cation..By.default.there.is.only |
d5700 | 20 6f 6e 65 20 75 73 65 72 20 28 60 60 76 79 6f 73 60 60 29 2c 20 61 6e 64 20 79 6f 75 20 63 61 | .one.user.(``vyos``),.and.you.ca |
d5720 | 6e 20 61 73 73 69 67 6e 20 61 6e 79 20 6e 75 6d 62 65 72 20 6f 66 20 6b 65 79 73 20 74 6f 20 74 | n.assign.any.number.of.keys.to.t |
d5740 | 68 61 74 20 75 73 65 72 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 61 20 73 73 68 | hat.user..You.can.generate.a.ssh |
d5760 | 20 6b 65 79 20 77 69 74 68 20 74 68 65 20 60 60 73 73 68 2d 6b 65 79 67 65 6e 60 60 20 63 6f 6d | .key.with.the.``ssh-keygen``.com |
d5780 | 6d 61 6e 64 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2c 20 77 68 69 63 | mand.on.your.local.machine,.whic |
d57a0 | 68 20 77 69 6c 6c 20 28 62 79 20 64 65 66 61 75 6c 74 29 20 73 61 76 65 20 69 74 20 61 73 20 60 | h.will.(by.default).save.it.as.` |
d57c0 | 60 7e 2f 2e 73 73 68 2f 69 64 5f 72 73 61 2e 70 75 62 60 60 2e 00 49 74 20 69 73 20 68 69 67 68 | `~/.ssh/id_rsa.pub``..It.is.high |
d57e0 | 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 | ly.recommended.to.use.the.same.a |
d5800 | 64 64 72 65 73 73 20 66 6f 72 20 62 6f 74 68 20 74 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 | ddress.for.both.the.LDP.router-i |
d5820 | 64 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 74 72 61 6e 73 70 6f 72 74 20 61 64 | d.and.the.discovery.transport.ad |
d5840 | 64 72 65 73 73 2c 20 62 75 74 20 66 6f 72 20 56 79 4f 53 20 4d 50 4c 53 20 4c 44 50 20 74 6f 20 | dress,.but.for.VyOS.MPLS.LDP.to. |
d5860 | 77 6f 72 6b 20 62 6f 74 68 20 70 61 72 61 6d 65 74 65 72 73 20 6d 75 73 74 20 62 65 20 65 78 70 | work.both.parameters.must.be.exp |
d5880 | 6c 69 63 69 74 6c 79 20 73 65 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | licitly.set.in.the.configuration |
d58a0 | 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 | ..It.is.important.to.note.that.w |
d58c0 | 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 | hen.creating.firewall.rules.that |
d58e0 | 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 | .the.DNAT.translation.occurs.**b |
d5900 | 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 | efore**.traffic.traverses.the.fi |
d5920 | 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 | rewall..In.other.words,.the.dest |
d5940 | 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e | ination.address.has.already.been |
d5960 | 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 | .translated.to.192.168.0.100..It |
d5980 | 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 | .is.important.to.note.that.when. |
d59a0 | 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 74 68 65 20 44 4e 41 | creating.firewall.rules,.the.DNA |
d59c0 | 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 | T.translation.occurs.**before**. |
d59e0 | 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 | traffic.traverses.the.firewall.. |
d5a00 | 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | In.other.words,.the.destination. |
d5a20 | 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 | address.has.already.been.transla |
d5a40 | 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 20 69 73 20 6e 6f 74 20 | ted.to.192.168.0.100..It.is.not. |
d5a60 | 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c | sufficient.to.only.configure.a.L |
d5a80 | 33 56 50 4e 20 56 52 46 73 20 62 75 74 20 4c 33 56 50 4e 20 56 52 46 73 20 6d 75 73 74 20 62 65 | 3VPN.VRFs.but.L3VPN.VRFs.must.be |
d5aa0 | 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 46 6f 72 20 4c 33 56 50 4e 20 56 52 46 20 6d | .maintained,.too.For.L3VPN.VRF.m |
d5ac0 | 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 | aintenance.the.following.operati |
d5ae0 | 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 | onal.commands.are.in.place..It.i |
d5b00 | 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 | s.not.sufficient.to.only.configu |
d5b20 | 72 65 20 61 20 56 52 46 20 62 75 74 20 56 52 46 73 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 | re.a.VRF.but.VRFs.must.be.mainta |
d5b40 | 69 6e 65 64 2c 20 74 6f 6f 2e 20 46 6f 72 20 56 52 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 | ined,.too..For.VRF.maintenance.t |
d5b60 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | he.following.operational.command |
d5b80 | 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 | s.are.in.place..It.is.not.valid. |
d5ba0 | 74 6f 20 75 73 65 20 74 68 65 20 60 76 69 66 20 31 60 20 6f 70 74 69 6f 6e 20 66 6f 72 20 56 4c | to.use.the.`vif.1`.option.for.VL |
d5bc0 | 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 62 65 63 61 75 73 65 20 56 4c 41 4e 20 61 77 | AN.aware.bridges.because.VLAN.aw |
d5be0 | 61 72 65 20 62 72 69 64 67 65 73 20 61 73 73 75 6d 65 20 74 68 61 74 20 61 6c 6c 20 75 6e 6c 61 | are.bridges.assume.that.all.unla |
d5c00 | 62 65 6c 65 64 20 70 61 63 6b 65 74 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 64 65 66 61 | beled.packets.belong.to.the.defa |
d5c20 | 75 6c 74 20 56 4c 41 4e 20 31 20 6d 65 6d 62 65 72 20 61 6e 64 20 74 68 61 74 20 74 68 65 20 56 | ult.VLAN.1.member.and.that.the.V |
d5c40 | 4c 41 4e 20 49 44 20 6f 66 20 74 68 65 20 62 72 69 64 67 65 27 73 20 70 61 72 65 6e 74 20 69 6e | LAN.ID.of.the.bridge's.parent.in |
d5c60 | 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 31 00 49 74 20 69 73 20 70 6f 73 73 69 62 | terface.is.always.1.It.is.possib |
d5c80 | 6c 65 20 74 6f 20 65 6e 68 61 6e 63 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 63 | le.to.enhance.authentication.sec |
d5ca0 | 75 72 69 74 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 | urity.by.using.the.:abbr:`2FA.(T |
d5cc0 | 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 | wo-factor.authentication)`/:abbr |
d5ce0 | 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | :`MFA.(Multi-factor.authenticati |
d5d00 | 6f 6e 29 60 20 66 65 61 74 75 72 65 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 61 62 62 72 | on)`.feature.together.with.:abbr |
d5d20 | 3a 60 4f 54 50 20 28 4f 6e 65 2d 54 69 6d 65 2d 50 61 64 29 60 20 6f 6e 20 56 79 4f 53 2e 20 3a | :`OTP.(One-Time-Pad)`.on.VyOS..: |
d5d40 | 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 | abbr:`2FA.(Two-factor.authentica |
d5d60 | 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 | tion)`/:abbr:`MFA.(Multi-factor. |
d5d80 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | authentication)`.is.configured.i |
d5da0 | 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 70 65 72 20 65 61 63 68 20 75 73 65 72 2e 20 49 66 20 61 | ndependently.per.each.user..If.a |
d5dc0 | 6e 20 4f 54 50 20 6b 65 79 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 61 20 75 73 | n.OTP.key.is.configured.for.a.us |
d5de0 | 65 72 2c 20 32 46 41 2f 4d 46 41 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 | er,.2FA/MFA.is.automatically.ena |
d5e00 | 62 6c 65 64 20 66 6f 72 20 74 68 61 74 20 70 61 72 74 69 63 75 6c 61 72 20 75 73 65 72 2e 20 49 | bled.for.that.particular.user..I |
d5e20 | 66 20 61 20 75 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 20 4f 54 50 20 6b 65 | f.a.user.does.not.have.an.OTP.ke |
d5e40 | 79 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 32 46 41 2f 4d 46 | y.configured,.there.is.no.2FA/MF |
d5e60 | 41 20 63 68 65 63 6b 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 00 49 74 20 69 73 20 70 6f 73 | A.check.for.that.user..It.is.pos |
d5e80 | 73 69 62 6c 65 20 74 6f 20 70 65 72 6d 69 74 20 42 47 50 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 | sible.to.permit.BGP.install.VPN. |
d5ea0 | 70 72 65 66 69 78 65 73 20 77 69 74 68 6f 75 74 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c | prefixes.without.transport.label |
d5ec0 | 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 69 6e 73 74 61 | s..This.configuration.will.insta |
d5ee0 | 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 | ll.VPN.prefixes.originated.from. |
d5f00 | 61 6e 20 65 2d 62 67 70 20 73 65 73 73 69 6f 6e 2c 20 61 6e 64 20 77 69 74 68 20 74 68 65 20 6e | an.e-bgp.session,.and.with.the.n |
d5f20 | 65 78 74 2d 68 6f 70 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 49 74 20 69 | ext-hop.directly.connected..It.i |
d5f40 | 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 73 74 61 74 69 63 20 72 | s.possible.to.specify.a.static.r |
d5f60 | 6f 75 74 65 20 66 6f 72 20 69 70 76 36 20 70 72 65 66 69 78 65 73 20 75 73 69 6e 67 20 61 6e 20 | oute.for.ipv6.prefixes.using.an. |
d5f80 | 53 52 76 36 20 73 65 67 6d 65 6e 74 73 20 69 6e 73 74 72 75 63 74 69 6f 6e 2e 20 54 68 65 20 60 | SRv6.segments.instruction..The.` |
d5fa0 | 2f 60 20 73 65 70 61 72 61 74 6f 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 70 65 63 | /`.separator.can.be.used.to.spec |
d5fc0 | 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 65 67 6d 65 6e 74 20 69 6e 73 74 72 75 63 74 69 6f 6e | ify.multiple.segment.instruction |
d5fe0 | 73 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 75 73 65 20 65 69 74 68 65 72 20 | s..It.is.possible.to.use.either. |
d6000 | 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 55 6e 69 63 61 73 74 20 74 6f 20 73 79 6e 63 20 63 6f 6e | Multicast.or.Unicast.to.sync.con |
d6020 | 6e 74 72 61 63 6b 20 74 72 61 66 66 69 63 2e 20 4d 6f 73 74 20 65 78 61 6d 70 6c 65 73 20 62 65 | ntrack.traffic..Most.examples.be |
d6040 | 6c 6f 77 20 73 68 6f 77 20 4d 75 6c 74 69 63 61 73 74 2c 20 62 75 74 20 75 6e 69 63 61 73 74 20 | low.show.Multicast,.but.unicast. |
d6060 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 22 70 | can.be.specified.by.using.the."p |
d6080 | 65 65 72 22 20 6b 65 79 77 6f 72 6b 20 61 66 74 65 72 20 74 68 65 20 73 70 65 63 69 66 69 63 65 | eer".keywork.after.the.specifice |
d60a0 | 64 20 69 6e 74 65 72 66 61 63 65 2c 20 61 73 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | d.interface,.as.in.the.following |
d60c0 | 20 65 78 61 6d 70 6c 65 3a 00 49 74 20 69 73 20 76 65 72 79 20 65 61 73 79 20 74 6f 20 6d 69 73 | .example:.It.is.very.easy.to.mis |
d60e0 | 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 63 61 73 74 20 72 65 70 65 61 74 69 6e 67 20 69 66 | configure.multicast.repeating.if |
d6100 | 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 4e 48 53 65 73 2e 00 49 74 20 75 73 65 | .you.have.multiple.NHSes..It.use |
d6120 | 73 20 61 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e | s.a.single.TCP.or.UDP.connection |
d6140 | 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 73 6f 75 | .and.does.not.rely.on.packet.sou |
d6160 | 72 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 77 6f 72 6b 20 65 | rce.addresses,.so.it.will.work.e |
d6180 | 76 65 6e 20 74 68 72 6f 75 67 68 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 3a 20 70 65 72 66 65 63 | ven.through.a.double.NAT:.perfec |
d61a0 | 74 20 66 6f 72 20 70 75 62 6c 69 63 20 68 6f 74 73 70 6f 74 73 20 61 6e 64 20 73 75 63 68 00 49 | t.for.public.hotspots.and.such.I |
d61c0 | 74 20 75 73 65 73 20 61 20 73 74 6f 63 68 61 73 74 69 63 20 6d 6f 64 65 6c 20 74 6f 20 63 6c 61 | t.uses.a.stochastic.model.to.cla |
d61e0 | 73 73 69 66 79 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 64 69 66 66 | ssify.incoming.packets.into.diff |
d6200 | 65 72 65 6e 74 20 66 6c 6f 77 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 | erent.flows.and.is.used.to.provi |
d6220 | 64 65 20 61 20 66 61 69 72 20 73 68 61 72 65 20 6f 66 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 | de.a.fair.share.of.the.bandwidth |
d6240 | 20 74 6f 20 61 6c 6c 20 74 68 65 20 66 6c 6f 77 73 20 75 73 69 6e 67 20 74 68 65 20 71 75 65 75 | .to.all.the.flows.using.the.queu |
d6260 | 65 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 74 68 65 20 43 | e..Each.flow.is.managed.by.the.C |
d6280 | 6f 44 65 6c 20 71 75 65 75 69 6e 67 20 20 64 69 73 63 69 70 6c 69 6e 65 2e 20 52 65 6f 72 64 65 | oDel.queuing..discipline..Reorde |
d62a0 | 72 69 6e 67 20 77 69 74 68 69 6e 20 61 20 66 6c 6f 77 20 69 73 20 61 76 6f 69 64 65 64 20 73 69 | ring.within.a.flow.is.avoided.si |
d62c0 | 6e 63 65 20 43 6f 64 65 6c 20 69 6e 74 65 72 6e 61 6c 6c 79 20 75 73 65 73 20 61 20 46 49 46 4f | nce.Codel.internally.uses.a.FIFO |
d62e0 | 20 71 75 65 75 65 2e 00 49 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 | .queue..It.will.be.combined.with |
d6300 | 20 74 68 65 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 6c | .the.delegated.prefix.and.the.sl |
d6320 | 61 2d 69 64 20 74 6f 20 66 6f 72 6d 20 61 20 63 6f 6d 70 6c 65 74 65 20 69 6e 74 65 72 66 61 63 | a-id.to.form.a.complete.interfac |
d6340 | 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 74 6f 20 75 73 65 | e.address..The.default.is.to.use |
d6360 | 20 74 68 65 20 45 55 49 2d 36 34 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 | .the.EUI-64.address.of.the.inter |
d6380 | 66 61 63 65 2e 00 49 74 27 73 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 20 61 6e 64 20 6f 66 66 | face..It's.easy.to.setup.and.off |
d63a0 | 65 72 73 20 76 65 72 79 20 66 6c 65 78 69 62 6c 65 20 73 70 6c 69 74 20 74 75 6e 6e 65 6c 69 6e | ers.very.flexible.split.tunnelin |
d63c0 | 67 00 49 74 27 73 20 6e 6f 74 20 6c 69 6b 65 6c 79 20 74 68 61 74 20 61 6e 79 6f 6e 65 20 77 69 | g.It's.not.likely.that.anyone.wi |
d63e0 | 6c 6c 20 6e 65 65 64 20 69 74 20 61 6e 79 20 74 69 6d 65 20 73 6f 6f 6e 2c 20 62 75 74 20 69 74 | ll.need.it.any.time.soon,.but.it |
d6400 | 20 64 6f 65 73 20 65 78 69 73 74 2e 00 49 74 27 73 20 73 6c 6f 77 65 72 20 74 68 61 6e 20 49 50 | .does.exist..It's.slower.than.IP |
d6420 | 73 65 63 20 64 75 65 20 74 6f 20 68 69 67 68 65 72 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 | sec.due.to.higher.protocol.overh |
d6440 | 65 61 64 20 61 6e 64 20 74 68 65 20 66 61 63 74 20 69 74 20 72 75 6e 73 20 69 6e 20 75 73 65 72 | ead.and.the.fact.it.runs.in.user |
d6460 | 20 6d 6f 64 65 20 77 68 69 6c 65 20 49 50 73 65 63 2c 20 6f 6e 20 4c 69 6e 75 78 2c 20 69 73 20 | .mode.while.IPsec,.on.Linux,.is. |
d6480 | 69 6e 20 6b 65 72 6e 65 6c 20 6d 6f 64 65 00 49 74 27 73 20 74 69 6d 65 20 74 6f 20 63 68 65 63 | in.kernel.mode.It's.time.to.chec |
d64a0 | 6b 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 2c 20 74 6f 20 73 65 65 20 69 66 20 61 6e 79 | k.conntrack.table,.to.see.if.any |
d64c0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 61 63 63 65 70 74 65 64 2c 20 61 6e 64 20 69 66 | .connection.was.accepted,.and.if |
d64e0 | 20 77 61 73 20 70 72 6f 70 65 72 6c 79 20 6f 66 66 6c 6f 61 64 65 64 00 4a 6f 69 6e 20 61 20 67 | .was.properly.offloaded.Join.a.g |
d6500 | 69 76 65 6e 20 56 52 46 2e 20 54 68 69 73 20 77 69 6c 6c 20 6f 70 65 6e 20 61 20 6e 65 77 20 73 | iven.VRF..This.will.open.a.new.s |
d6520 | 75 62 73 68 65 6c 6c 20 77 69 74 68 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 52 46 | ubshell.within.the.specified.VRF |
d6540 | 2e 00 4a 75 6d 70 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 75 6c 65 20 69 6e 20 74 68 | ..Jump.to.a.different.rule.in.th |
d6560 | 69 73 20 72 6f 75 74 65 2d 6d 61 70 20 6f 6e 20 61 20 6d 61 74 63 68 2e 00 4a 75 6e 69 70 65 72 | is.route-map.on.a.match..Juniper |
d6580 | 20 45 58 20 53 77 69 74 63 68 00 4b 65 72 6e 65 6c 00 4b 65 72 6e 65 6c 20 6d 65 73 73 61 67 65 | .EX.Switch.Kernel.Kernel.message |
d65a0 | 73 00 4b 65 79 20 42 61 73 65 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 4b 65 79 20 47 | s.Key.Based.Authentication.Key.G |
d65c0 | 65 6e 65 72 61 74 69 6f 6e 00 4b 65 79 20 4d 61 6e 61 67 65 6d 65 6e 74 00 4b 65 79 20 50 61 72 | eneration.Key.Management.Key.Par |
d65e0 | 61 6d 65 74 65 72 73 3a 00 4b 65 79 20 50 6f 69 6e 74 73 3a 00 4b 65 79 20 65 78 63 68 61 6e 67 | ameters:.Key.Points:.Key.exchang |
d6600 | 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 64 6f 6e 65 | e.and.payload.encryption.is.done |
d6620 | 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 | .using.IKE.and.ESP.proposals.as. |
d6640 | 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 | known.from.IKEv1.but.the.connect |
d6660 | 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f | ions.are.faster.to.establish,.mo |
d6680 | 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f | re.reliable,.and.also.support.ro |
d66a0 | 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 | aming.from.IP.to.IP.(called.MOBI |
d66c0 | 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 | KE.which.makes.sure.your.connect |
d66e0 | 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 | ion.does.not.drop.when.changing. |
d6700 | 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 | networks.from.e.g..WIFI.to.LTE.a |
d6720 | 6e 64 20 62 61 63 6b 29 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 | nd.back)..Authentication.can.be. |
d6740 | 61 63 68 69 65 76 65 64 20 77 69 74 68 20 58 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 | achieved.with.X.509.certificates |
d6760 | 2e 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 | ..Key.exchange.and.payload.encry |
d6780 | 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 64 6f 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e | ption.is.still.done.using.IKE.an |
d67a0 | 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b | d.ESP.proposals.as.known.from.IK |
d67c0 | 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 | Ev1.but.the.connections.are.fast |
d67e0 | 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 | er.to.establish,.more.reliable,. |
d6800 | 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 | and.also.support.roaming.from.IP |
d6820 | 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 | .to.IP.(called.MOBIKE.which.make |
d6840 | 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 | s.sure.your.connection.does.not. |
d6860 | 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d | drop.when.changing.networks.from |
d6880 | 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 62 61 63 6b 29 2e 00 4b 65 79 | .e.g..WIFI.to.LTE.and.back)..Key |
d68a0 | 20 75 73 61 67 65 20 28 43 4c 49 29 00 4b 65 79 62 6f 61 72 64 20 4c 61 79 6f 75 74 00 4b 65 79 | .usage.(CLI).Keyboard.Layout.Key |
d68c0 | 70 61 69 72 73 00 4b 65 79 77 6f 72 64 00 4c 32 54 50 00 4c 32 54 50 20 6f 76 65 72 20 49 50 73 | pairs.Keyword.L2TP.L2TP.over.IPs |
d68e0 | 65 63 00 4c 32 54 50 76 33 00 4c 32 54 50 76 33 20 63 61 6e 20 62 65 20 72 65 67 61 72 64 65 64 | ec.L2TPv3.L2TPv3.can.be.regarded |
d6900 | 20 61 73 20 62 65 69 6e 67 20 74 6f 20 4d 50 4c 53 20 77 68 61 74 20 49 50 20 69 73 20 74 6f 20 | .as.being.to.MPLS.what.IP.is.to. |
d6920 | 41 54 4d 3a 20 61 20 73 69 6d 70 6c 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 | ATM:.a.simplified.version.of.the |
d6940 | 20 73 61 6d 65 20 63 6f 6e 63 65 70 74 2c 20 77 69 74 68 20 6d 75 63 68 20 6f 66 20 74 68 65 20 | .same.concept,.with.much.of.the. |
d6960 | 73 61 6d 65 20 62 65 6e 65 66 69 74 20 61 63 68 69 65 76 65 64 20 61 74 20 61 20 66 72 61 63 74 | same.benefit.achieved.at.a.fract |
d6980 | 69 6f 6e 20 6f 66 20 74 68 65 20 65 66 66 6f 72 74 2c 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f | ion.of.the.effort,.at.the.cost.o |
d69a0 | 66 20 6c 6f 73 69 6e 67 20 73 6f 6d 65 20 74 65 63 68 6e 69 63 61 6c 20 66 65 61 74 75 72 65 73 | f.losing.some.technical.features |
d69c0 | 20 63 6f 6e 73 69 64 65 72 65 64 20 6c 65 73 73 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 74 68 | .considered.less.important.in.th |
d69e0 | 65 20 6d 61 72 6b 65 74 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e | e.market..L2TPv3.is.described.in |
d6a00 | 20 3a 72 66 63 3a 60 33 39 32 31 60 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 | .:rfc:`3921`..L2TPv3.is.describe |
d6a20 | 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 33 31 60 2e 00 4c 32 54 50 76 33 20 6f 70 74 69 6f 6e 73 | d.in.:rfc:`3931`..L2TPv3.options |
d6a40 | 00 4c 32 54 50 76 33 3a 00 4c 33 56 50 4e 20 56 52 46 73 00 4c 44 41 50 00 4c 44 41 50 20 70 72 | .L2TPv3:.L3VPN.VRFs.LDAP.LDAP.pr |
d6a60 | 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 2e 20 44 65 66 61 75 6c 74 73 20 74 6f 20 33 20 69 66 | otocol.version..Defaults.to.3.if |
d6a80 | 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2e 00 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 | .not.specified..LDAP.search.filt |
d6aa0 | 65 72 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 75 73 65 72 20 44 4e 2e 20 52 65 71 75 69 72 | er.to.locate.the.user.DN..Requir |
d6ac0 | 65 64 20 69 66 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 69 6e 20 61 20 68 69 65 72 61 72 63 | ed.if.the.users.are.in.a.hierarc |
d6ae0 | 68 79 20 62 65 6c 6f 77 20 74 68 65 20 62 61 73 65 20 44 4e 2c 20 6f 72 20 69 66 20 74 68 65 20 | hy.below.the.base.DN,.or.if.the. |
d6b00 | 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 6e 6f 74 20 77 68 61 74 20 62 75 69 6c 64 73 20 74 68 | login.name.is.not.what.builds.th |
d6b20 | 65 20 75 73 65 72 20 73 70 65 63 69 66 69 63 20 70 61 72 74 20 6f 66 20 74 68 65 20 75 73 65 72 | e.user.specific.part.of.the.user |
d6b40 | 73 20 44 4e 2e 00 4c 4c 44 50 00 4c 4c 44 50 20 70 65 72 66 6f 72 6d 73 20 66 75 6e 63 74 69 6f | s.DN..LLDP.LLDP.performs.functio |
d6b60 | 6e 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 65 76 65 72 61 6c 20 70 72 6f 70 72 69 65 74 61 72 | ns.similar.to.several.proprietar |
d6b80 | 79 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 73 75 63 68 20 61 73 20 3a 61 62 62 72 3a 60 43 44 50 20 | y.protocols,.such.as.:abbr:`CDP. |
d6ba0 | 28 43 69 73 63 6f 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 | (Cisco.Discovery.Protocol)`,.:ab |
d6bc0 | 62 72 3a 60 46 44 50 20 28 46 6f 75 6e 64 72 79 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f | br:`FDP.(Foundry.Discovery.Proto |
d6be0 | 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 4e 44 50 20 28 4e 6f 72 74 65 6c 20 44 69 73 63 6f 76 | col)`,.:abbr:`NDP.(Nortel.Discov |
d6c00 | 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 4c 4c 54 44 20 28 | ery.Protocol)`.and.:abbr:`LLTD.( |
d6c20 | 4c 69 6e 6b 20 4c 61 79 65 72 20 54 6f 70 6f 6c 6f 67 79 20 44 69 73 63 6f 76 65 72 79 29 60 2e | Link.Layer.Topology.Discovery)`. |
d6c40 | 00 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 76 65 72 29 00 4c 4e 53 20 61 | .LNS.(L2TP.Network.Server).LNS.a |
d6c60 | 72 65 20 6f 66 74 65 6e 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 20 4c 41 | re.often.used.to.connect.to.a.LA |
d6c80 | 43 20 28 4c 32 54 50 20 41 63 63 65 73 73 20 43 6f 6e 63 65 6e 74 72 61 74 6f 72 29 2e 00 4c 61 | C.(L2TP.Access.Concentrator)..La |
d6ca0 | 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 00 4c 61 79 65 72 20 | bel.Distribution.Protocol.Layer. |
d6cc0 | 32 20 54 75 6e 6e 65 6c 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 33 20 | 2.Tunnelling.Protocol.Version.3. |
d6ce0 | 69 73 20 61 6e 20 49 45 54 46 20 73 74 61 6e 64 61 72 64 20 72 65 6c 61 74 65 64 20 74 6f 20 4c | is.an.IETF.standard.related.to.L |
d6d00 | 32 54 50 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 61 6c 74 65 72 | 2TP.that.can.be.used.as.an.alter |
d6d20 | 6e 61 74 69 76 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 3a 72 65 66 3a 60 6d 70 6c 73 60 20 66 | native.protocol.to.:ref:`mpls`.f |
d6d40 | 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f | or.encapsulation.of.multiprotoco |
d6d60 | 6c 20 4c 61 79 65 72 20 32 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 66 66 69 63 | l.Layer.2.communications.traffic |
d6d80 | 20 6f 76 65 72 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4c 69 6b 65 20 4c 32 54 50 2c 20 4c 32 | .over.IP.networks..Like.L2TP,.L2 |
d6da0 | 54 50 76 33 20 70 72 6f 76 69 64 65 73 20 61 20 70 73 65 75 64 6f 2d 77 69 72 65 20 73 65 72 76 | TPv3.provides.a.pseudo-wire.serv |
d6dc0 | 69 63 65 20 62 75 74 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 66 69 74 20 63 61 72 72 69 65 72 | ice.but.is.scaled.to.fit.carrier |
d6de0 | 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2e 00 4c 65 61 73 65 20 74 69 6d 65 20 77 69 6c 6c 20 62 | .requirements..Lease.time.will.b |
d6e00 | 65 20 6c 65 66 74 20 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 77 68 69 63 | e.left.at.the.default.value.whic |
d6e20 | 68 20 69 73 20 32 34 20 68 6f 75 72 73 00 4c 65 61 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 | h.is.24.hours.Lease.timeout.in.s |
d6e40 | 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 38 36 34 30 30 29 00 4c 65 67 61 63 79 20 46 | econds.(default:.86400).Legacy.F |
d6e60 | 69 72 65 77 61 6c 6c 00 4c 65 74 20 53 4e 4d 50 20 64 61 65 6d 6f 6e 20 6c 69 73 74 65 6e 20 6f | irewall.Let.SNMP.daemon.listen.o |
d6e80 | 6e 6c 79 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 00 4c 65 74 27 | nly.on.IP.address.192.0.2.1.Let' |
d6ea0 | 73 20 61 73 73 75 6d 65 20 50 43 34 20 6f 6e 20 4c 65 61 66 32 20 77 61 6e 74 73 20 74 6f 20 70 | s.assume.PC4.on.Leaf2.wants.to.p |
d6ec0 | 69 6e 67 20 50 43 35 20 6f 6e 20 4c 65 61 66 33 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 73 65 74 | ing.PC5.on.Leaf3..Instead.of.set |
d6ee0 | 74 69 6e 67 20 4c 65 61 66 33 20 61 73 20 6f 75 72 20 72 65 6d 6f 74 65 20 65 6e 64 20 6d 61 6e | ting.Leaf3.as.our.remote.end.man |
d6f00 | 75 61 6c 6c 79 2c 20 4c 65 61 66 32 20 65 6e 63 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 70 61 | ually,.Leaf2.encapsulates.the.pa |
d6f20 | 63 6b 65 74 20 69 6e 74 6f 20 61 20 55 44 50 2d 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 | cket.into.a.UDP-packet.and.sends |
d6f40 | 20 69 74 20 74 6f 20 69 74 73 20 64 65 73 69 67 6e 61 74 65 64 20 6d 75 6c 74 69 63 61 73 74 2d | .it.to.its.designated.multicast- |
d6f60 | 61 64 64 72 65 73 73 20 76 69 61 20 53 70 69 6e 65 31 2e 20 57 68 65 6e 20 53 70 69 6e 65 31 20 | address.via.Spine1..When.Spine1. |
d6f80 | 72 65 63 65 69 76 65 73 20 74 68 69 73 20 70 61 63 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 | receives.this.packet.it.forwards |
d6fa0 | 20 69 74 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 6c 65 61 76 65 73 20 77 68 6f 20 68 61 73 20 | .it.to.all.other.leaves.who.has. |
d6fc0 | 6a 6f 69 6e 65 64 20 74 68 65 20 73 61 6d 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 2c | joined.the.same.multicast-group, |
d6fe0 | 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 4c 65 61 66 33 2e 20 57 68 65 6e 20 4c 65 61 66 33 20 | .in.this.case.Leaf3..When.Leaf3. |
d7000 | 72 65 63 65 69 76 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 | receives.the.packet.it.forwards. |
d7020 | 69 74 2c 20 77 68 69 6c 65 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 6c 65 61 72 6e | it,.while.at.the.same.time.learn |
d7040 | 69 6e 67 20 74 68 61 74 20 50 43 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 62 65 68 69 6e 64 | ing.that.PC4.is.reachable.behind |
d7060 | 20 4c 65 61 66 32 2c 20 62 65 63 61 75 73 65 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 | .Leaf2,.because.the.encapsulated |
d7080 | 20 70 61 63 6b 65 74 20 68 61 64 20 4c 65 61 66 32 27 73 20 49 50 20 61 64 64 72 65 73 73 20 73 | .packet.had.Leaf2's.IP.address.s |
d70a0 | 65 74 20 61 73 20 73 6f 75 72 63 65 20 49 50 2e 00 4c 65 74 27 73 20 61 73 73 75 6d 65 20 77 65 | et.as.source.IP..Let's.assume.we |
d70c0 | 20 68 61 76 65 20 74 77 6f 20 44 48 43 50 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e | .have.two.DHCP.WAN.interfaces.an |
d70e0 | 64 20 6f 6e 65 20 4c 41 4e 20 28 65 74 68 32 29 3a 00 4c 65 74 27 73 20 62 75 69 6c 64 20 61 20 | d.one.LAN.(eth2):.Let's.build.a. |
d7100 | 73 69 6d 70 6c 65 20 56 50 4e 20 62 65 74 77 65 65 6e 20 32 20 49 6e 74 65 6c c2 ae 20 51 41 54 | simple.VPN.between.2.Intel...QAT |
d7120 | 20 72 65 61 64 79 20 64 65 76 69 63 65 73 2e 00 4c 65 74 27 73 20 65 78 70 61 6e 64 20 74 68 65 | .ready.devices..Let's.expand.the |
d7140 | 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 6e 64 20 61 64 64 20 77 65 69 67 | .example.from.above.and.add.weig |
d7160 | 68 74 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 65 20 62 61 6e 64 77 69 | ht.to.the.interfaces..The.bandwi |
d7180 | 64 74 68 20 66 72 6f 6d 20 65 74 68 30 20 69 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 65 74 68 | dth.from.eth0.is.larger.than.eth |
d71a0 | 31 2e 20 50 65 72 20 64 65 66 61 75 6c 74 2c 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 | 1..Per.default,.outbound.traffic |
d71c0 | 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 72 61 6e 64 6f 6d 6c 79 20 61 63 72 6f 73 73 20 | .is.distributed.randomly.across. |
d71e0 | 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 65 69 67 68 74 73 20 63 61 | available.interfaces..Weights.ca |
d7200 | 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 69 | n.be.assigned.to.interfaces.to.i |
d7220 | 6e 66 6c 75 65 6e 63 65 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 2e 00 4c 65 74 73 20 61 73 73 | nfluence.the.balancing..Lets.ass |
d7240 | 75 6d 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 3a 00 4c 65 76 65 | ume.the.following.topology:.Leve |
d7260 | 6c 20 34 20 62 61 6c 61 6e 63 69 6e 67 00 4c 69 66 65 74 69 6d 65 20 61 73 73 6f 63 69 61 74 65 | l.4.balancing.Lifetime.associate |
d7280 | 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 20 69 6e 20 75 6e 69 | d.with.the.default.router.in.uni |
d72a0 | 74 73 20 6f 66 20 73 65 63 6f 6e 64 73 00 4c 69 66 65 74 69 6d 65 20 69 6e 20 64 61 79 73 3b 20 | ts.of.seconds.Lifetime.in.days;. |
d72c0 | 64 65 66 61 75 6c 74 20 69 73 20 33 36 35 00 4c 69 66 65 74 69 6d 65 20 69 73 20 64 65 63 72 65 | default.is.365.Lifetime.is.decre |
d72e0 | 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 | mented.by.the.number.of.seconds. |
d7300 | 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 52 41 20 2d 20 75 73 65 20 69 6e 20 63 6f 6e 6a 75 | since.the.last.RA.-.use.in.conju |
d7320 | 6e 63 74 69 6f 6e 20 77 69 74 68 20 61 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 69 78 00 4c | nction.with.a.DHCPv6-PD.prefix.L |
d7340 | 69 6b 65 20 6f 6e 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 2c 20 41 70 70 6c 65 20 | ike.on.Microsoft.Windows,.Apple. |
d7360 | 69 4f 53 2f 69 50 61 64 4f 53 20 6f 75 74 20 6f 66 20 74 68 65 20 62 6f 78 20 64 6f 65 73 20 6e | iOS/iPadOS.out.of.the.box.does.n |
d7380 | 6f 74 20 65 78 70 6f 73 65 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 56 50 4e 20 6f 70 74 69 | ot.expose.all.available.VPN.opti |
d73a0 | 6f 6e 73 20 76 69 61 20 74 68 65 20 64 65 76 69 63 65 20 47 55 49 2e 00 4c 69 6d 69 74 20 61 6c | ons.via.the.device.GUI..Limit.al |
d73c0 | 6c 6f 77 65 64 20 63 69 70 68 65 72 20 61 6c 67 6f 72 69 74 68 6d 73 20 75 73 65 64 20 64 75 72 | lowed.cipher.algorithms.used.dur |
d73e0 | 69 6e 67 20 53 53 4c 2f 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 00 4c 69 6d 69 74 20 6c 6f 67 69 | ing.SSL/TLS.handshake.Limit.logi |
d7400 | 6e 73 20 74 6f 20 60 3c 6c 69 6d 69 74 3e 60 20 70 65 72 20 65 76 65 72 79 20 60 60 72 61 74 65 | ns.to.`<limit>`.per.every.``rate |
d7420 | 2d 74 69 6d 65 60 60 20 73 65 63 6f 6e 64 73 2e 20 52 61 74 65 20 6c 69 6d 69 74 20 6d 75 73 74 | -time``.seconds..Rate.limit.must |
d7440 | 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 31 30 20 61 74 74 65 6d 70 74 73 2e 00 4c | .be.between.1.and.10.attempts..L |
d7460 | 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 60 72 61 74 65 2d 6c 69 6d 69 74 60 60 20 61 74 | imit.logins.to.``rate-limit``.at |
d7480 | 74 65 6d 70 73 20 70 65 72 20 65 76 65 72 79 20 60 3c 73 65 63 6f 6e 64 73 3e 60 2e 20 52 61 74 | temps.per.every.`<seconds>`..Rat |
d74a0 | 65 20 74 69 6d 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 35 20 61 6e 64 20 36 30 | e.time.must.be.between.15.and.60 |
d74c0 | 30 20 73 65 63 6f 6e 64 73 2e 00 4c 69 6d 69 74 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 | 0.seconds..Limit.maximum.number. |
d74e0 | 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 4c 69 6d 69 74 65 72 00 4c 69 6d 69 74 65 72 20 69 | of.connections.Limiter.Limiter.i |
d7500 | 73 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 75 73 65 | s.one.of.those.policies.that.use |
d7520 | 73 20 63 6c 61 73 73 65 73 5f 20 28 49 6e 67 72 65 73 73 20 71 64 69 73 63 20 69 73 20 61 63 74 | s.classes_.(Ingress.qdisc.is.act |
d7540 | 75 61 6c 6c 79 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 62 75 74 20 66 69 6c | ually.a.classless.policy.but.fil |
d7560 | 74 65 72 73 20 64 6f 20 77 6f 72 6b 20 69 6e 20 69 74 29 2e 00 4c 69 6d 69 74 73 00 4c 69 6e 65 | ters.do.work.in.it)..Limits.Line |
d7580 | 20 70 72 69 6e 74 65 72 20 73 75 62 73 79 73 74 65 6d 00 4c 69 6e 6b 20 4d 54 55 20 76 61 6c 75 | .printer.subsystem.Link.MTU.valu |
d75a0 | 65 20 70 6c 61 63 65 64 20 69 6e 20 52 41 73 2c 20 65 78 6c 75 64 65 64 20 69 6e 20 52 41 73 20 | e.placed.in.RAs,.exluded.in.RAs. |
d75c0 | 69 66 20 75 6e 73 65 74 00 4c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 00 4c 69 6e 75 78 20 | if.unset.Link.aggregation.Linux. |
d75e0 | 6e 65 74 66 69 6c 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 4e 41 54 20 74 72 61 66 66 69 63 20 6d | netfilter.will.not.NAT.traffic.m |
d7600 | 61 72 6b 65 64 20 61 73 20 49 4e 56 41 4c 49 44 2e 20 54 68 69 73 20 6f 66 74 65 6e 20 63 6f 6e | arked.as.INVALID..This.often.con |
d7620 | 66 75 73 65 73 20 70 65 6f 70 6c 65 20 69 6e 74 6f 20 74 68 69 6e 6b 69 6e 67 20 74 68 61 74 20 | fuses.people.into.thinking.that. |
d7640 | 4c 69 6e 75 78 20 28 6f 72 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 56 79 4f 53 29 20 68 61 73 | Linux.(or.specifically.VyOS).has |
d7660 | 20 61 20 62 72 6f 6b 65 6e 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 62 65 63 | .a.broken.NAT.implementation.bec |
d7680 | 61 75 73 65 20 6e 6f 6e 2d 4e 41 54 65 64 20 74 72 61 66 66 69 63 20 69 73 20 73 65 65 6e 20 6c | ause.non-NATed.traffic.is.seen.l |
d76a0 | 65 61 76 69 6e 67 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 | eaving.an.external.interface..Th |
d76c0 | 69 73 20 69 73 20 61 63 74 75 61 6c 6c 79 20 77 6f 72 6b 69 6e 67 20 61 73 20 69 6e 74 65 6e 64 | is.is.actually.working.as.intend |
d76e0 | 65 64 2c 20 61 6e 64 20 61 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 6f 66 20 74 68 65 20 | ed,.and.a.packet.capture.of.the. |
d7700 | 22 6c 65 61 6b 79 22 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 72 65 76 65 61 6c 20 74 68 | "leaky".traffic.should.reveal.th |
d7720 | 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 65 69 74 68 65 72 20 61 6e 20 61 64 64 69 | at.the.traffic.is.either.an.addi |
d7740 | 74 69 6f 6e 61 6c 20 54 43 50 20 22 52 53 54 22 2c 20 22 46 49 4e 2c 41 43 4b 22 2c 20 6f 72 20 | tional.TCP."RST",."FIN,ACK",.or. |
d7760 | 22 52 53 54 2c 41 43 4b 22 20 73 65 6e 74 20 62 79 20 63 6c 69 65 6e 74 20 73 79 73 74 65 6d 73 | "RST,ACK".sent.by.client.systems |
d7780 | 20 61 66 74 65 72 20 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 20 63 6f 6e 73 69 64 65 72 73 | .after.Linux.netfilter.considers |
d77a0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 6c 6f 73 65 64 2e 20 54 68 65 20 6d 6f 73 74 | .the.connection.closed..The.most |
d77c0 | 20 63 6f 6d 6d 6f 6e 20 69 73 20 74 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 52 53 | .common.is.the.additional.TCP.RS |
d77e0 | 54 20 73 6f 6d 65 20 68 6f 73 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 | T.some.host.implementations.send |
d7800 | 20 61 66 74 65 72 20 74 65 72 6d 69 6e 61 74 69 6e 67 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | .after.terminating.a.connection. |
d7820 | 28 77 68 69 63 68 20 69 73 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 | (which.is.implementation-specifi |
d7840 | 63 29 2e 00 4c 69 73 74 20 61 6c 6c 20 4d 41 43 73 65 63 20 69 6e 74 65 72 66 61 63 65 73 2e 00 | c)..List.all.MACsec.interfaces.. |
d7860 | 4c 69 73 74 20 6f 66 20 66 61 63 69 6c 69 74 69 65 73 20 75 73 65 64 20 62 79 20 73 79 73 6c 6f | List.of.facilities.used.by.syslo |
d7880 | 67 2e 20 4d 6f 73 74 20 66 61 63 69 6c 69 74 69 65 73 20 6e 61 6d 65 73 20 61 72 65 20 73 65 6c | g..Most.facilities.names.are.sel |
d78a0 | 66 20 65 78 70 6c 61 6e 61 74 6f 72 79 2e 20 46 61 63 69 6c 69 74 69 65 73 20 6c 6f 63 61 6c 30 | f.explanatory..Facilities.local0 |
d78c0 | 20 2d 20 6c 6f 63 61 6c 37 20 63 6f 6d 6d 6f 6e 20 75 73 61 67 65 20 69 73 20 66 2e 65 2e 20 61 | .-.local7.common.usage.is.f.e..a |
d78e0 | 73 20 6e 65 74 77 6f 72 6b 20 6c 6f 67 73 20 66 61 63 69 6c 69 74 69 65 73 20 66 6f 72 20 6e 6f | s.network.logs.facilities.for.no |
d7900 | 64 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 65 71 75 69 70 6d 65 6e 74 2e 20 47 65 6e 65 72 | des.and.network.equipment..Gener |
d7920 | 61 6c 6c 79 20 69 74 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 69 74 75 61 74 69 6f 6e | ally.it.depends.on.the.situation |
d7940 | 20 68 6f 77 20 74 6f 20 63 6c 61 73 73 69 66 79 20 6c 6f 67 73 20 61 6e 64 20 70 75 74 20 74 68 | .how.to.classify.logs.and.put.th |
d7960 | 65 6d 20 74 6f 20 66 61 63 69 6c 69 74 69 65 73 2e 20 53 65 65 20 66 61 63 69 6c 69 74 69 65 73 | em.to.facilities..See.facilities |
d7980 | 20 6d 6f 72 65 20 61 73 20 61 20 74 6f 6f 6c 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 20 64 69 | .more.as.a.tool.rather.than.a.di |
d79a0 | 72 65 63 74 69 76 65 20 74 6f 20 66 6f 6c 6c 6f 77 2e 00 4c 69 73 74 20 6f 66 20 6e 65 74 77 6f | rective.to.follow..List.of.netwo |
d79c0 | 72 6b 73 20 6f 72 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 65 73 20 70 65 72 6d 69 74 74 65 | rks.or.client.addresses.permitte |
d79e0 | 64 20 74 6f 20 63 6f 6e 74 61 63 74 20 74 68 69 73 20 4e 54 50 20 73 65 72 76 65 72 2e 00 4c 69 | d.to.contact.this.NTP.server..Li |
d7a00 | 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 4d 41 43 73 3a 20 60 60 68 6d 61 63 2d 6d 64 35 | st.of.supported.MACs:.``hmac-md5 |
d7a20 | 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 | ``,.``hmac-md5-96``,.``hmac-ripe |
d7a40 | 6d 64 31 36 30 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 60 60 2c 20 60 60 68 6d 61 63 2d 73 | md160``,.``hmac-sha1``,.``hmac-s |
d7a60 | 68 61 31 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 60 60 2c 20 60 60 68 | ha1-96``,.``hmac-sha2-256``,.``h |
d7a80 | 6d 61 63 2d 73 68 61 32 2d 35 31 32 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 40 6f 70 65 6e 73 73 | mac-sha2-512``,.``umac-64@openss |
d7aa0 | 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 | h.com``,.``umac-128@openssh.com` |
d7ac0 | 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c | `,.``hmac-md5-etm@openssh.com``, |
d7ae0 | 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 | .``hmac-md5-96-etm@openssh.com`` |
d7b00 | 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 | ,.``hmac-ripemd160-etm@openssh.c |
d7b20 | 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f | om``,.``hmac-sha1-etm@openssh.co |
d7b40 | 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e | m``,.``hmac-sha1-96-etm@openssh. |
d7b60 | 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 | com``,.``hmac-sha2-256-etm@opens |
d7b80 | 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2d 65 74 6d 40 6f 70 | sh.com``,.``hmac-sha2-512-etm@op |
d7ba0 | 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 2d 65 74 6d 40 6f 70 65 6e 73 | enssh.com``,.``umac-64-etm@opens |
d7bc0 | 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 | sh.com``,.``umac-128-etm@openssh |
d7be0 | 2e 63 6f 6d 60 60 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 61 6c 67 6f 72 69 74 | .com``.List.of.supported.algorit |
d7c00 | 68 6d 73 3a 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 2d 73 68 61 | hms:.``diffie-hellman-group1-sha |
d7c20 | 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 | 1``,.``diffie-hellman-group14-sh |
d7c40 | 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 | a1``,.``diffie-hellman-group14-s |
d7c60 | 68 61 32 35 36 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 | ha256``,.``diffie-hellman-group1 |
d7c80 | 36 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f | 6-sha512``,.``diffie-hellman-gro |
d7ca0 | 75 70 31 38 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d | up18-sha512``,.``diffie-hellman- |
d7cc0 | 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d | group-exchange-sha1``,.``diffie- |
d7ce0 | 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 32 35 36 60 60 2c | hellman-group-exchange-sha256``, |
d7d00 | 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d | .``ecdh-sha2-nistp256``,.``ecdh- |
d7d20 | 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 | sha2-nistp384``,.``ecdh-sha2-nis |
d7d40 | 74 70 35 32 31 60 60 2c 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 60 60 20 61 | tp521``,.``curve25519-sha256``.a |
d7d60 | 6e 64 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 40 6c 69 62 73 73 68 2e 6f 72 | nd.``curve25519-sha256@libssh.or |
d7d80 | 67 60 60 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 63 69 70 68 65 72 73 3a 20 | g``..List.of.supported.ciphers:. |
d7da0 | 60 60 33 64 65 73 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 2d 63 62 63 60 60 2c 20 60 60 | ``3des-cbc``,.``aes128-cbc``,.`` |
d7dc0 | 61 65 73 31 39 32 2d 63 62 63 60 60 2c 20 60 60 61 65 73 32 35 36 2d 63 62 63 60 60 2c 20 60 60 | aes192-cbc``,.``aes256-cbc``,.`` |
d7de0 | 61 65 73 31 32 38 2d 63 74 72 60 60 2c 20 60 60 61 65 73 31 39 32 2d 63 74 72 60 60 2c 20 60 60 | aes128-ctr``,.``aes192-ctr``,.`` |
d7e00 | 61 65 73 32 35 36 2d 63 74 72 60 60 2c 20 60 60 61 72 63 66 6f 75 72 31 32 38 60 60 2c 20 60 60 | aes256-ctr``,.``arcfour128``,.`` |
d7e20 | 61 72 63 66 6f 75 72 32 35 36 60 60 2c 20 60 60 61 72 63 66 6f 75 72 60 60 2c 20 60 60 62 6c 6f | arcfour256``,.``arcfour``,.``blo |
d7e40 | 77 66 69 73 68 2d 63 62 63 60 60 2c 20 60 60 63 61 73 74 31 32 38 2d 63 62 63 60 60 00 4c 69 73 | wfish-cbc``,.``cast128-cbc``.Lis |
d7e60 | 74 20 6f 66 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 00 4c 69 73 74 | t.of.well-known.communities.List |
d7e80 | 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 | en.for.DHCP.requests.on.interfac |
d7ea0 | 65 20 60 60 65 74 68 31 60 60 2e 00 4c 69 73 74 73 20 56 52 46 73 20 74 68 61 74 20 68 61 76 65 | e.``eth1``..Lists.VRFs.that.have |
d7ec0 | 20 62 65 65 6e 20 63 72 65 61 74 65 64 00 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4c 6f 61 64 20 | .been.created.Load.Balance.Load. |
d7ee0 | 42 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 | Balancing.Load.the.container.ima |
d7f00 | 67 65 20 69 6e 20 6f 70 2d 6d 6f 64 65 2e 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 00 4c 6f | ge.in.op-mode..Load-balancing.Lo |
d7f20 | 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 | ad-balancing.algorithms.to.be.us |
d7f40 | 65 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 69 6e 64 20 72 65 71 75 65 73 74 73 20 61 6d 6f | ed.for.distributind.requests.amo |
d7f60 | 6e 67 20 74 68 65 20 76 61 69 6c 61 62 6c 65 20 73 65 72 76 65 72 73 00 4c 6f 61 64 2d 62 61 6c | ng.the.vailable.servers.Load-bal |
d7f80 | 61 6e 63 69 6e 67 20 73 63 68 65 64 75 6c 65 20 61 6c 67 6f 72 69 74 68 6d 3a 00 4c 6f 63 61 6c | ancing.schedule.algorithm:.Local |
d7fa0 | 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 | .Local.Configuration.-.Annotated |
d7fc0 | 3a 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4c 6f 63 61 6c 20 49 50 20 | :.Local.Configuration:.Local.IP. |
d7fe0 | 60 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 | `<address>`.used.when.communicat |
d8000 | 69 6e 67 20 74 6f 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 2e 00 4c 6f 63 61 6c 20 | ing.to.the.failover.peer..Local. |
d8020 | 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 00 4c 6f 63 61 6c 20 | IP.addresses.to.listen.on.Local. |
d8040 | 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 73 65 72 76 69 63 65 20 74 6f 20 6c 69 | IPv4.addresses.for.service.to.li |
d8060 | 73 74 65 6e 20 6f 6e 2e 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 34 00 4c 6f 63 61 6c 20 | sten.on..Local.Route.IPv4.Local. |
d8080 | 52 6f 75 74 65 20 49 50 76 36 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 50 6f 6c 69 63 79 00 4c 6f | Route.IPv6.Local.Route.Policy.Lo |
d80a0 | 63 61 6c 20 55 73 65 72 20 41 63 63 6f 75 6e 74 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 | cal.User.Account.Local.path.that |
d80c0 | 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6b 6e 6f 77 6e 20 68 6f 73 74 73 20 66 69 6c 65 2e 00 | .includes.the.known.hosts.file.. |
d80e0 | 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 72 69 | Local.path.that.includes.the.pri |
d8100 | 76 61 74 65 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 | vate.key.file.of.the.router..Loc |
d8120 | 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 | al.path.that.includes.the.public |
d8140 | 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 72 | .key.file.of.the.router..Local.r |
d8160 | 6f 75 74 65 00 4c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 20 74 6f 20 73 65 72 69 61 6c 20 70 | oute.Locally.connect.to.serial.p |
d8180 | 6f 72 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 76 69 63 65 3e 60 2e 00 4c 6f | ort.identified.by.`<device>`..Lo |
d81a0 | 63 61 6c 6c 79 20 73 69 67 6e 69 66 69 63 61 6e 74 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 | cally.significant.administrative |
d81c0 | 20 64 69 73 74 61 6e 63 65 2e 00 4c 6f 67 20 61 6c 65 72 74 00 4c 6f 67 20 61 75 64 69 74 00 4c | .distance..Log.alert.Log.audit.L |
d81e0 | 6f 67 20 65 76 65 72 79 74 68 69 6e 67 00 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 | og.everything.Log.messages.from. |
d8200 | 61 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 | a.specified.image.can.be.display |
d8220 | 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 44 65 74 61 69 6c 73 20 6f 66 20 61 6c | ed.on.the.console..Details.of.al |
d8240 | 6c 6f 77 65 64 20 70 61 72 61 6d 65 74 65 72 73 3a 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 | lowed.parameters:.Log.syslog.mes |
d8260 | 73 61 67 65 73 20 74 6f 20 60 60 2f 64 65 76 2f 63 6f 6e 73 6f 6c 65 60 60 2c 20 66 6f 72 20 61 | sages.to.``/dev/console``,.for.a |
d8280 | 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 | n.explanation.on.:ref:`syslog_fa |
d82a0 | 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 | cilities`.keywords.and.:ref:`sys |
d82c0 | 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 | log_severity_level`.keywords.see |
d82e0 | 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 | .tables.below..Log.syslog.messag |
d8300 | 65 73 20 74 6f 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 3c 66 69 6c 65 6e | es.to.file.specified.via.`<filen |
d8320 | 61 6d 65 3e 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 | ame>`,.for.an.explanation.on.:re |
d8340 | 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 | f:`syslog_facilities`.keywords.a |
d8360 | 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 | nd.:ref:`syslog_severity_level`. |
d8380 | 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 | keywords.see.tables.below..Log.s |
d83a0 | 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 73 70 | yslog.messages.to.remote.host.sp |
d83c0 | 65 63 69 66 69 65 64 20 62 79 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 20 54 68 65 20 61 64 64 72 | ecified.by.`<address>`..The.addr |
d83e0 | 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 65 69 74 68 65 72 20 46 | ess.can.be.specified.by.either.F |
d8400 | 51 44 4e 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e | QDN.or.IP.address..For.an.explan |
d8420 | 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 | ation.on.:ref:`syslog_facilities |
d8440 | 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 | `.keywords.and.:ref:`syslog_seve |
d8460 | 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 | rity_level`.keywords.see.tables. |
d8480 | 62 65 6c 6f 77 2e 00 4c 6f 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 | below..Log.the.connection.tracki |
d84a0 | 6e 67 20 65 76 65 6e 74 73 20 70 65 72 20 70 72 6f 74 6f 63 6f 6c 2e 00 4c 6f 67 67 69 6e 67 00 | ng.events.per.protocol..Logging. |
d84c0 | 4c 6f 67 67 69 6e 67 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 20 66 6f 72 20 65 76 65 72 79 20 | Logging.can.be.enable.for.every. |
d84e0 | 73 69 6e 67 6c 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 49 66 20 65 6e 61 62 6c 65 64 | single.firewall.rule..If.enabled |
d8500 | 2c 20 6f 74 68 65 72 20 6c 6f 67 20 6f 70 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e | ,.other.log.options.can.be.defin |
d8520 | 65 64 2e 00 4c 6f 67 67 69 6e 67 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 6c 65 61 | ed..Logging.to.a.remote.host.lea |
d8540 | 76 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 6c 6f 67 67 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 | ves.the.local.logging.configurat |
d8560 | 69 6f 6e 20 69 6e 74 61 63 74 2c 20 69 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | ion.intact,.it.can.be.configured |
d8580 | 20 69 6e 20 70 61 72 61 6c 6c 65 6c 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 6f 72 | .in.parallel.to.a.custom.file.or |
d85a0 | 20 63 6f 6e 73 6f 6c 65 20 6c 6f 67 67 69 6e 67 2e 20 59 6f 75 20 63 61 6e 20 6c 6f 67 20 74 6f | .console.logging..You.can.log.to |
d85c0 | 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 | .multiple.hosts.at.the.same.time |
d85e0 | 2c 20 75 73 69 6e 67 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 54 68 65 20 64 | ,.using.either.TCP.or.UDP..The.d |
d8600 | 65 66 61 75 6c 74 20 69 73 20 73 65 6e 64 69 6e 67 20 74 68 65 20 6d 65 73 73 61 67 65 73 20 76 | efault.is.sending.the.messages.v |
d8620 | 69 61 20 70 6f 72 74 20 35 31 34 2f 55 44 50 2e 00 4c 6f 67 69 6e 20 42 61 6e 6e 65 72 00 4c 6f | ia.port.514/UDP..Login.Banner.Lo |
d8640 | 67 69 6e 20 6c 69 6d 69 74 73 00 4c 6f 67 69 6e 2f 55 73 65 72 20 4d 61 6e 61 67 65 6d 65 6e 74 | gin.limits.Login/User.Management |
d8660 | 00 4c 6f 6f 70 20 46 72 65 65 20 41 6c 74 65 72 6e 61 74 65 20 28 4c 46 41 29 00 4c 6f 6f 70 62 | .Loop.Free.Alternate.(LFA).Loopb |
d8680 | 61 63 6b 00 4c 6f 6f 70 62 61 63 6b 73 20 6f 63 63 75 72 73 20 61 74 20 74 68 65 20 49 50 20 6c | ack.Loopbacks.occurs.at.the.IP.l |
d86a0 | 65 76 65 6c 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 61 73 20 66 6f 72 20 6f 74 68 65 72 20 69 | evel.the.same.way.as.for.other.i |
d86c0 | 6e 74 65 72 66 61 63 65 73 2c 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 72 65 20 6e | nterfaces,.ethernet.frames.are.n |
d86e0 | 6f 74 20 66 6f 72 77 61 72 64 65 64 20 62 65 74 77 65 65 6e 20 50 73 65 75 64 6f 2d 45 74 68 65 | ot.forwarded.between.Pseudo-Ethe |
d8700 | 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c 6f 77 00 4d 41 43 20 47 72 6f 75 70 73 00 | rnet.interfaces..Low.MAC.Groups. |
d8720 | 4d 41 43 20 61 64 64 72 65 73 73 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 60 3e 20 69 6e 20 73 65 | MAC.address.aging.`<time`>.in.se |
d8740 | 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 30 29 2e 00 4d 41 43 2f 50 48 59 20 69 6e | conds.(default:.300)..MAC/PHY.in |
d8760 | 66 6f 72 6d 61 74 69 6f 6e 00 4d 41 43 56 4c 41 4e 20 2d 20 50 73 65 75 64 6f 20 45 74 68 65 72 | formation.MACVLAN.-.Pseudo.Ether |
d8780 | 6e 65 74 00 4d 41 43 73 65 63 00 4d 41 43 73 65 63 20 69 73 20 61 6e 20 49 45 45 45 20 73 74 61 | net.MACsec.MACsec.is.an.IEEE.sta |
d87a0 | 6e 64 61 72 64 20 28 49 45 45 45 20 38 30 32 2e 31 41 45 29 20 66 6f 72 20 4d 41 43 20 73 65 63 | ndard.(IEEE.802.1AE).for.MAC.sec |
d87c0 | 75 72 69 74 79 2c 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 32 30 30 36 2e 20 49 74 20 64 65 | urity,.introduced.in.2006..It.de |
d87e0 | 66 69 6e 65 73 20 61 20 77 61 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 70 72 6f 74 6f | fines.a.way.to.establish.a.proto |
d8800 | 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 74 77 65 | col.independent.connection.betwe |
d8820 | 65 6e 20 74 77 6f 20 68 6f 73 74 73 20 77 69 74 68 20 64 61 74 61 20 63 6f 6e 66 69 64 65 6e 74 | en.two.hosts.with.data.confident |
d8840 | 69 61 6c 69 74 79 2c 20 61 75 74 68 65 6e 74 69 63 69 74 79 20 61 6e 64 2f 6f 72 20 69 6e 74 65 | iality,.authenticity.and/or.inte |
d8860 | 67 72 69 74 79 2c 20 75 73 69 6e 67 20 47 43 4d 2d 41 45 53 2d 31 32 38 2e 20 4d 41 43 73 65 63 | grity,.using.GCM-AES-128..MACsec |
d8880 | 20 6f 70 65 72 61 74 65 73 20 6f 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 61 79 65 72 20 | .operates.on.the.Ethernet.layer. |
d88a0 | 61 6e 64 20 61 73 20 73 75 63 68 20 69 73 20 61 20 6c 61 79 65 72 20 32 20 70 72 6f 74 6f 63 6f | and.as.such.is.a.layer.2.protoco |
d88c0 | 6c 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 69 74 27 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 | l,.which.means.it's.designed.to. |
d88e0 | 73 65 63 75 72 65 20 74 72 61 66 66 69 63 20 77 69 74 68 69 6e 20 61 20 6c 61 79 65 72 20 32 20 | secure.traffic.within.a.layer.2. |
d8900 | 6e 65 74 77 6f 72 6b 2c 20 69 6e 63 6c 75 64 69 6e 67 20 44 48 43 50 20 6f 72 20 41 52 50 20 72 | network,.including.DHCP.or.ARP.r |
d8920 | 65 71 75 65 73 74 73 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6d 70 65 74 65 20 77 69 74 | equests..It.does.not.compete.wit |
d8940 | 68 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 73 20 73 75 63 68 20 | h.other.security.solutions.such. |
d8960 | 61 73 20 49 50 73 65 63 20 28 6c 61 79 65 72 20 33 29 20 6f 72 20 54 4c 53 20 28 6c 61 79 65 72 | as.IPsec.(layer.3).or.TLS.(layer |
d8980 | 20 34 29 2c 20 61 73 20 61 6c 6c 20 74 68 6f 73 65 20 73 6f 6c 75 74 69 6f 6e 73 20 61 72 65 20 | .4),.as.all.those.solutions.are. |
d89a0 | 75 73 65 64 20 66 6f 72 20 74 68 65 69 72 20 6f 77 6e 20 73 70 65 63 69 66 69 63 20 75 73 65 20 | used.for.their.own.specific.use. |
d89c0 | 63 61 73 65 73 2e 00 4d 41 43 73 65 63 20 6f 6e 6c 79 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 | cases..MACsec.only.provides.auth |
d89e0 | 65 6e 74 69 63 61 74 69 6f 6e 20 62 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 63 72 79 70 74 69 6f | entication.by.default,.encryptio |
d8a00 | 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c | n.is.optional..This.command.will |
d8a20 | 20 65 6e 61 62 6c 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f | .enable.encryption.for.all.outgo |
d8a40 | 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 4d 41 43 73 65 63 20 6f 70 74 69 6f 6e 73 00 4d 44 49 20 | ing.packets..MACsec.options.MDI. |
d8a60 | 70 6f 77 65 72 00 4d 46 41 2f 32 46 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 69 | power.MFA/2FA.authentication.usi |
d8a80 | 6e 67 20 4f 54 50 20 28 6f 6e 65 20 74 69 6d 65 20 70 61 73 73 77 6f 72 64 73 29 00 4d 50 4c 53 | ng.OTP.(one.time.passwords).MPLS |
d8aa0 | 00 4d 50 4c 53 20 73 75 70 70 6f 72 74 20 69 6e 20 56 79 4f 53 20 69 73 20 6e 6f 74 20 66 69 6e | .MPLS.support.in.VyOS.is.not.fin |
d8ac0 | 69 73 68 65 64 20 79 65 74 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 69 74 73 20 66 75 6e | ished.yet,.and.therefore.its.fun |
d8ae0 | 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 6c 69 6d 69 74 65 64 2e 20 43 75 72 72 65 6e 74 6c 79 | ctionality.is.limited..Currently |
d8b00 | 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 65 6e | .there.is.no.support.for.MPLS.en |
d8b20 | 61 62 6c 65 64 20 56 50 4e 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 4c 32 56 50 4e | abled.VPN.services.such.as.L2VPN |
d8b40 | 73 20 61 6e 64 20 6d 56 50 4e 73 2e 20 52 53 56 50 20 73 75 70 70 6f 72 74 20 69 73 20 61 6c 73 | s.and.mVPNs..RSVP.support.is.als |
d8b60 | 6f 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 61 73 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 | o.not.present.as.the.underlying. |
d8b80 | 72 6f 75 74 69 6e 67 20 73 74 61 63 6b 20 28 46 52 52 29 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 | routing.stack.(FRR).does.not.imp |
d8ba0 | 6c 65 6d 65 6e 74 20 69 74 2e 20 43 75 72 72 65 6e 74 6c 79 20 56 79 4f 53 20 69 6d 70 6c 65 6d | lement.it..Currently.VyOS.implem |
d8bc0 | 65 6e 74 73 20 4c 44 50 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 52 46 43 20 35 30 33 | ents.LDP.as.described.in.RFC.503 |
d8be0 | 36 3b 20 6f 74 68 65 72 20 4c 44 50 20 73 74 61 6e 64 61 72 64 20 61 72 65 20 74 68 65 20 66 6f | 6;.other.LDP.standard.are.the.fo |
d8c00 | 6c 6c 6f 77 69 6e 67 20 6f 6e 65 73 3a 20 52 46 43 20 36 37 32 30 2c 20 52 46 43 20 36 36 36 37 | llowing.ones:.RFC.6720,.RFC.6667 |
d8c20 | 2c 20 52 46 43 20 35 39 31 39 2c 20 52 46 43 20 35 35 36 31 2c 20 52 46 43 20 37 35 35 32 2c 20 | ,.RFC.5919,.RFC.5561,.RFC.7552,. |
d8c40 | 52 46 43 20 34 34 34 37 2e 20 42 65 63 61 75 73 65 20 4d 50 4c 53 20 69 73 20 61 6c 72 65 61 64 | RFC.4447..Because.MPLS.is.alread |
d8c60 | 79 20 61 76 61 69 6c 61 62 6c 65 20 28 46 52 52 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 52 | y.available.(FRR.also.supports.R |
d8c80 | 46 43 20 33 30 33 31 29 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 32 30 20 28 | FC.3031)..MSS.value.=.MTU.-.20.( |
d8ca0 | 49 50 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 | IP.header).-.20.(TCP.header),.re |
d8cc0 | 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 35 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 | sulting.in.1452.bytes.on.a.1492. |
d8ce0 | 62 79 74 65 20 4d 54 55 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 34 30 20 28 | byte.MTU..MSS.value.=.MTU.-.40.( |
d8d00 | 49 50 76 36 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 | IPv6.header).-.20.(TCP.header),. |
d8d20 | 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 33 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 | resulting.in.1432.bytes.on.a.149 |
d8d40 | 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 54 55 00 4d 61 69 6c 20 73 79 73 74 65 6d 00 4d 61 69 6e | 2.byte.MTU..MTU.Mail.system.Main |
d8d60 | 20 6e 6f 74 65 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f | .notes.regarding.this.packet.flo |
d8d80 | 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 | w.and.terminology.used.in.VyOS.f |
d8da0 | 69 72 65 77 61 6c 6c 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 | irewall:.Main.structure.VyOS.fir |
d8dc0 | 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 20 73 74 | ewall.cli.is.shown.next:.Main.st |
d8de0 | 72 75 63 74 75 72 65 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 74 65 6e 61 6e | ructure.is.shown.next:.Maintenan |
d8e00 | 63 65 20 6d 6f 64 65 00 4d 61 6b 65 20 73 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 65 | ce.mode.Make.sure.conntrack.is.e |
d8e20 | 6e 61 62 6c 65 64 20 62 79 20 72 75 6e 6e 69 6e 67 20 61 6e 64 20 73 68 6f 77 20 63 6f 6e 6e 65 | nabled.by.running.and.show.conne |
d8e40 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 4d 61 6e 61 67 65 64 20 64 65 | ction.tracking.table..Managed.de |
d8e60 | 76 69 63 65 73 00 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 20 50 72 6f 74 65 63 74 69 6f | vices.Management.Frame.Protectio |
d8e80 | 6e 20 28 4d 46 50 29 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 49 45 45 45 20 38 30 32 2e 31 31 | n.(MFP).according.to.IEEE.802.11 |
d8ea0 | 77 00 4d 61 6e 64 61 74 6f 72 79 20 53 65 74 74 69 6e 67 73 00 4d 61 6e 75 61 6c 20 4e 65 69 67 | w.Mandatory.Settings.Manual.Neig |
d8ec0 | 68 62 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4d 61 6e 75 61 6c 6c 79 20 74 72 69 67 | hbor.Configuration.Manually.trig |
d8ee0 | 67 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 72 65 6e 65 77 61 6c 2e 20 54 68 69 73 20 77 69 | ger.certificate.renewal..This.wi |
d8f00 | 6c 6c 20 62 65 20 64 6f 6e 65 20 74 77 69 63 65 20 61 20 64 61 79 2e 00 4d 61 70 73 20 74 68 65 | ll.be.done.twice.a.day..Maps.the |
d8f20 | 20 56 4e 49 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 4c 41 4e 20 69 64 2e 20 54 | .VNI.to.the.specified.VLAN.id..T |
d8f40 | 68 65 20 56 4c 41 4e 20 63 61 6e 20 74 68 65 6e 20 62 65 20 63 6f 6e 73 75 6d 65 64 20 62 79 20 | he.VLAN.can.then.be.consumed.by. |
d8f60 | 61 20 62 72 69 64 67 65 2e 00 4d 61 72 6b 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 73 20 | a.bridge..Mark.RADIUS.server.as. |
d8f80 | 6f 66 66 6c 69 6e 65 20 66 6f 72 20 74 68 69 73 20 67 69 76 65 6e 20 60 3c 74 69 6d 65 3e 60 20 | offline.for.this.given.`<time>`. |
d8fa0 | 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 61 72 6b 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 | in.seconds..Mark.the.CAs.private |
d8fc0 | 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 | .key.as.password.protected..User |
d8fe0 | 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 | .is.asked.for.the.password.when. |
d9000 | 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 72 6b 20 74 68 65 20 | the.key.is.referenced..Mark.the. |
d9020 | 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 | private.key.as.password.protecte |
d9040 | 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 | d..User.is.asked.for.the.passwor |
d9060 | 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 | d.when.the.key.is.referenced..Ma |
d9080 | 74 63 68 20 42 47 50 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 4d 61 74 63 68 | tch.BGP.large.communities..Match |
d90a0 | 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f | .IP.addresses.based.on.its.geolo |
d90c0 | 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 | cation..More.info:.`geoip.matchi |
d90e0 | 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 | ng.<https://wiki.nftables.org/wi |
d9100 | 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 | ki-nftables/index.php/GeoIP_matc |
d9120 | 68 69 6e 67 3e 60 5f 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 | hing>`_..Match.IP.addresses.base |
d9140 | 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a | d.on.its.geolocation..More.info: |
d9160 | 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e | .`geoip.matching.<https://wiki.n |
d9180 | 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e | ftables.org/wiki-nftables/index. |
d91a0 | 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 20 55 73 65 20 69 6e 76 65 72 | php/GeoIP_matching>`_..Use.inver |
d91c0 | 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 | se-match.to.match.anything.excep |
d91e0 | 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 4d 61 74 63 68 | t.the.given.country-codes..Match |
d9200 | 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 00 4d 61 74 63 68 20 61 | .RPKI.validation.result..Match.a |
d9220 | 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e | .protocol.criteria..A.protocol.n |
d9240 | 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 | umber.or.a.name.which.is.defined |
d9260 | 20 69 6e 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 61 6c | .in:.``/etc/protocols``..Special |
d9280 | 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f | .names.are.``all``.for.all.proto |
d92a0 | 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 20 61 6e 64 | cols.and.``tcp_udp``.for.tcp.and |
d92c0 | 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 | .udp.based.packets..The.``!``.ne |
d92e0 | 67 61 74 65 73 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 | gates.the.selected.protocol..Mat |
d9300 | 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 | ch.a.protocol.criteria..A.protoc |
d9320 | 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 | ol.number.or.a.name.which.is.her |
d9340 | 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 | e.defined:.``/etc/protocols``..S |
d9360 | 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c | pecial.names.are.``all``.for.all |
d9380 | 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 | .protocols.and.``tcp_udp``.for.t |
d93a0 | 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 | cp.and.udp.based.packets..The.`` |
d93c0 | 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c | !``.negate.the.selected.protocol |
d93e0 | 2e 00 4d 61 74 63 68 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 70 | ..Match.against.the.state.of.a.p |
d9400 | 61 63 6b 65 74 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e | acket..Match.based.on.connection |
d9420 | 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 | .tracking.protocol.helper.module |
d9440 | 20 74 6f 20 73 65 63 75 72 65 20 75 73 65 20 6f 66 20 74 68 61 74 20 68 65 6c 70 65 72 20 6d 6f | .to.secure.use.of.that.helper.mo |
d9460 | 64 75 6c 65 2e 20 53 65 65 20 62 65 6c 6f 77 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 20 63 6f 6d | dule..See.below.for.possible.com |
d9480 | 70 6c 65 74 69 6f 6e 73 20 60 3c 6d 6f 64 75 6c 65 3e 60 2e 00 4d 61 74 63 68 20 62 61 73 65 64 | pletions.`<module>`..Match.based |
d94a0 | 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c | .on.dscp.value.criteria..Multipl |
d94c0 | 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 30 20 74 6f 20 36 33 20 61 6e 64 20 72 61 6e 67 65 73 | e.values.from.0.to.63.and.ranges |
d94e0 | 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 64 | .are.supported..Match.based.on.d |
d9500 | 73 63 70 20 76 61 6c 75 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 66 72 61 67 6d 65 | scp.value..Match.based.on.fragme |
d9520 | 6e 74 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 | nt.criteria..Match.based.on.icmp |
d9540 | 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 | .code.and.type..Match.based.on.i |
d9560 | 63 6d 70 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 | cmp.type-name.criteria..Use.tab. |
d9580 | 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 | for.information.about.what.**typ |
d95a0 | 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e | e-name**.criteria.are.supported. |
d95c0 | 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 | .Match.based.on.icmpv6.type-name |
d95e0 | 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 | .criteria..Use.tab.for.informati |
d9600 | 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 | on.about.what.**type-name**.crit |
d9620 | 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 | eria.are.supported..Match.based. |
d9640 | 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 | on.icmp|icmpv6.code.and.type..Ma |
d9660 | 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 | tch.based.on.icmp|icmpv6.type-na |
d9680 | 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 | me.criteria..Use.tab.for.informa |
d96a0 | 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 | tion.about.what.**type-name**.cr |
d96c0 | 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 | iteria.are.supported..Match.base |
d96e0 | 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 | d.on.icmp|icmpv6.type-name.crite |
d9700 | 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f | ria..Use.tab.for.information.abo |
d9720 | 75 74 20 77 68 61 74 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 | ut.what.type-name.criteria.are.s |
d9740 | 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 | upported..Match.based.on.inbound |
d9760 | 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 | .interface.group..Prepending.cha |
d9780 | 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 | racter.``!``.for.inverted.matchi |
d97a0 | 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f | ng.criteria.is.also.supportd..Fo |
d97c0 | 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 | r.example.``!IFACE_GROUP``.Match |
d97e0 | 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c | .based.on.inbound.interface..Wil |
d9800 | 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d | card.``*``.can.be.used..For.exam |
d9820 | 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e | ple:.``eth2*``.Match.based.on.in |
d9840 | 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 | bound.interface..Wilcard.``*``.c |
d9860 | 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a | an.be.used..For.example:.``eth2* |
d9880 | 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 | ``..Prepending.character.``!``.f |
d98a0 | 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 | or.inverted.matching.criteria.is |
d98c0 | 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 | .also.supportd..For.example.``!e |
d98e0 | 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 | th2``.Match.based.on.inbound/out |
d9900 | 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 | bound.interface..Wilcard.``*``.c |
d9920 | 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a | an.be.used..For.example:.``eth2* |
d9940 | 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 70 73 65 63 20 63 72 69 74 65 72 69 61 | ``.Match.based.on.ipsec.criteria |
d9960 | 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 | ..Match.based.on.outbound.interf |
d9980 | 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 | ace.group..Prepending.character. |
d99a0 | 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 | ``!``.for.inverted.matching.crit |
d99c0 | 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 | eria.is.also.supportd..For.examp |
d99e0 | 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 | le.``!IFACE_GROUP``.Match.based. |
d9a00 | 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 | on.outbound.interface..Wilcard.` |
d9a20 | 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 | `*``.can.be.used..For.example:.` |
d9a40 | 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 | `eth2*``.Match.based.on.outbound |
d9a60 | 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 | .interface..Wilcard.``*``.can.be |
d9a80 | 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 50 | .used..For.example:.``eth2*``..P |
d9aa0 | 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e | repending.character.``!``.for.in |
d9ac0 | 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f | verted.matching.criteria.is.also |
d9ae0 | 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 60 | .supportd..For.example.``!eth2`` |
d9b00 | 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 20 63 72 | .Match.based.on.packet.length.cr |
d9b20 | 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 31 20 74 | iteria..Multiple.values.from.1.t |
d9b40 | 6f 20 36 35 35 33 35 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 | o.65535.and.ranges.are.supported |
d9b60 | 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 74 79 70 65 20 63 72 69 | ..Match.based.on.packet.type.cri |
d9b80 | 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 | teria..Match.based.on.the.maximu |
d9ba0 | 6d 20 61 76 65 72 61 67 65 20 72 61 74 65 2c 20 73 70 65 63 69 66 69 65 64 20 61 73 20 2a 2a 69 | m.average.rate,.specified.as.**i |
d9bc0 | 6e 74 65 67 65 72 2f 75 6e 69 74 2a 2a 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 2a 2a 35 2f 6d | nteger/unit**..For.example.**5/m |
d9be0 | 69 6e 75 74 65 73 2a 2a 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 | inutes**.Match.based.on.the.maxi |
d9c00 | 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6c 6f 77 20 69 | mum.number.of.packets.to.allow.i |
d9c20 | 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e | n.excess.of.rate..Match.based.on |
d9c40 | 20 76 6c 61 6e 20 49 44 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 | .vlan.ID..Range.is.also.supporte |
d9c60 | 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 70 72 69 6f 72 69 74 79 28 | d..Match.based.on.vlan.priority( |
d9c80 | 70 63 70 29 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d | pcp)..Range.is.also.supported..M |
d9ca0 | 61 74 63 68 20 62 61 73 65 73 20 6f 6e 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 | atch.bases.on.recently.seen.sour |
d9cc0 | 63 65 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e | ces..Match.criteria.based.on.con |
d9ce0 | 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 | nection.mark..Match.criteria.bas |
d9d00 | 65 64 20 6f 6e 20 6e 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 2e 00 4d 61 74 | ed.on.nat.connection.status..Mat |
d9d20 | 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f | ch.criteria.based.on.source.and/ |
d9d40 | 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 | or.destination.address..This.is. |
d9d60 | 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 | similar.to.the.network.groups.pa |
d9d80 | 72 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 | rt,.but.here.you.are.able.to.neg |
d9da0 | 61 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 4d 61 74 63 | ate.the.matching.addresses..Matc |
d9dc0 | 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f | h.criteria.based.on.source.and/o |
d9de0 | 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4d 61 74 63 68 | r.destination.mac-address..Match |
d9e00 | 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 4d 61 74 63 68 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b | .domain.name.Match.firewall.mark |
d9e20 | 20 76 61 6c 75 65 00 4d 61 74 63 68 20 68 6f 70 2d 6c 69 6d 69 74 20 70 61 72 61 6d 65 74 65 72 | .value.Match.hop-limit.parameter |
d9e40 | 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b | ,.where.'eq'.stands.for.'equal'; |
d9e60 | 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c | .'gt'.stands.for.'greater.than', |
d9e80 | 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 | .and.'lt'.stands.for.'less.than' |
d9ea0 | 2e 00 4d 61 74 63 68 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 2e 00 4d 61 74 63 68 20 | ..Match.local.preference..Match. |
d9ec0 | 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 00 4d 61 74 63 68 20 74 69 6d 65 20 74 6f 20 6c 69 76 65 | route.metric..Match.time.to.live |
d9ee0 | 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f | .parameter,.where.'eq'.stands.fo |
d9f00 | 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 | r.'equal';.'gt'.stands.for.'grea |
d9f20 | 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 | ter.than',.and.'lt'.stands.for.' |
d9f40 | 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 77 68 65 6e 20 27 63 6f 75 6e 74 27 20 61 | less.than'..Match.when.'count'.a |
d9f60 | 6d 6f 75 6e 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 73 65 65 6e 20 77 69 | mount.of.connections.are.seen.wi |
d9f80 | 74 68 69 6e 20 27 74 69 6d 65 27 2e 20 54 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 | thin.'time'..These.matching.crit |
d9fa0 | 65 72 69 61 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 62 72 75 74 65 2d | eria.can.be.used.to.block.brute- |
d9fc0 | 66 6f 72 63 65 20 61 74 74 65 6d 70 74 73 2e 00 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 | force.attempts..Matching.criteri |
d9fe0 | 61 00 4d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 00 4d 61 78 69 6d 75 6d 20 41 2d 4d 53 44 | a.Matching.traffic.Maximum.A-MSD |
da000 | 55 20 6c 65 6e 67 74 68 20 33 38 33 39 20 28 64 65 66 61 75 6c 74 29 20 6f 72 20 37 39 33 35 20 | U.length.3839.(default).or.7935. |
da020 | 6f 63 74 65 74 73 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 | octets.Maximum.Transmission.Unit |
da040 | 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 33 36 2a 2a 29 00 4d 61 78 69 6d | .(MTU).(default:.**1436**).Maxim |
da060 | 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 | um.Transmission.Unit.(MTU).(defa |
da080 | 75 6c 74 3a 20 2a 2a 31 34 39 32 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 | ult:.**1492**).Maximum.Transmiss |
da0a0 | 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 35 30 30 2a | ion.Unit.(MTU).(default:.**1500* |
da0c0 | 2a 29 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 44 4e 53 20 63 61 63 68 65 20 65 | *).Maximum.number.of.DNS.cache.e |
da0e0 | 6e 74 72 69 65 73 2e 20 31 20 6d 69 6c 6c 69 6f 6e 20 70 65 72 20 43 50 55 20 63 6f 72 65 20 77 | ntries..1.million.per.CPU.core.w |
da100 | 69 6c 6c 20 67 65 6e 65 72 61 6c 6c 79 20 73 75 66 66 69 63 65 20 66 6f 72 20 6d 6f 73 74 20 69 | ill.generally.suffice.for.most.i |
da120 | 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 | nstallations..Maximum.number.of. |
da140 | 49 50 76 34 20 6e 61 6d 65 73 65 72 76 65 72 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 | IPv4.nameservers.Maximum.number. |
da160 | 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 20 74 6f 20 73 70 | of.authenticator.processes.to.sp |
da180 | 61 77 6e 2e 20 49 66 20 79 6f 75 20 73 74 61 72 74 20 74 6f 6f 20 66 65 77 20 53 71 75 69 64 20 | awn..If.you.start.too.few.Squid. |
da1a0 | 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 77 61 69 74 20 66 6f 72 20 74 68 65 6d 20 74 6f 20 70 72 | will.have.to.wait.for.them.to.pr |
da1c0 | 6f 63 65 73 73 20 61 20 62 61 63 6b 6c 6f 67 20 6f 66 20 63 72 65 64 65 6e 74 69 61 6c 20 76 65 | ocess.a.backlog.of.credential.ve |
da1e0 | 72 69 66 69 63 61 74 69 6f 6e 73 2c 20 73 6c 6f 77 69 6e 67 20 69 74 20 64 6f 77 6e 2e 20 57 68 | rifications,.slowing.it.down..Wh |
da200 | 65 6e 20 70 61 73 73 77 6f 72 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 20 61 72 65 20 64 6f | en.password.verifications.are.do |
da220 | 6e 65 20 76 69 61 20 61 20 28 73 6c 6f 77 29 20 6e 65 74 77 6f 72 6b 20 79 6f 75 20 61 72 65 20 | ne.via.a.(slow).network.you.are. |
da240 | 6c 69 6b 65 6c 79 20 74 6f 20 6e 65 65 64 20 6c 6f 74 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 | likely.to.need.lots.of.authentic |
da260 | 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f | ator.processes..Maximum.number.o |
da280 | 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 73 74 61 72 74 20 61 74 74 65 6d | f.concurrent.session.start.attem |
da2a0 | 70 74 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 73 74 61 74 69 6f 6e 73 20 61 | pts.Maximum.number.of.stations.a |
da2c0 | 6c 6c 6f 77 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 2e 20 4e 65 77 20 73 74 61 | llowed.in.station.table..New.sta |
da2e0 | 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 72 65 6a 65 63 74 65 64 20 61 66 74 65 72 20 74 68 65 | tions.will.be.rejected.after.the |
da300 | 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 20 69 73 20 66 75 6c 6c 2e 20 49 45 45 45 20 38 30 32 | .station.table.is.full..IEEE.802 |
da320 | 2e 31 31 20 68 61 73 20 61 20 6c 69 6d 69 74 20 6f 66 20 32 30 30 37 20 64 69 66 66 65 72 65 6e | .11.has.a.limit.of.2007.differen |
da340 | 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 49 44 73 2c 20 73 6f 20 74 68 69 73 20 6e 75 6d 62 65 | t.association.IDs,.so.this.numbe |
da360 | 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 61 72 67 65 72 20 74 68 61 6e 20 74 68 61 74 | r.should.not.be.larger.than.that |
da380 | 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 6e 20 65 78 70 | ..Maximum.number.of.times.an.exp |
da3a0 | 69 72 65 64 20 72 65 63 6f 72 64 e2 80 99 73 20 54 54 4c 20 69 73 20 65 78 74 65 6e 64 65 64 20 | ired.record...s.TTL.is.extended. |
da3c0 | 62 79 20 33 30 73 20 77 68 65 6e 20 73 65 72 76 69 6e 67 20 73 74 61 6c 65 2e 20 45 78 74 65 6e | by.30s.when.serving.stale..Exten |
da3e0 | 73 69 6f 6e 20 6f 6e 6c 79 20 6f 63 63 75 72 73 20 69 66 20 61 20 72 65 63 6f 72 64 20 63 61 6e | sion.only.occurs.if.a.record.can |
da400 | 6e 6f 74 20 62 65 20 72 65 66 72 65 73 68 65 64 2e 20 41 20 76 61 6c 75 65 20 6f 66 20 30 20 6d | not.be.refreshed..A.value.of.0.m |
da420 | 65 61 6e 73 20 74 68 65 20 53 65 72 76 65 20 53 74 61 6c 65 20 6d 65 63 68 61 6e 69 73 6d 20 69 | eans.the.Serve.Stale.mechanism.i |
da440 | 73 20 6e 6f 74 20 75 73 65 64 2e 20 54 6f 20 61 6c 6c 6f 77 20 72 65 63 6f 72 64 73 20 62 65 63 | s.not.used..To.allow.records.bec |
da460 | 6f 6d 69 6e 67 20 73 74 61 6c 65 20 74 6f 20 62 65 20 73 65 72 76 65 64 20 66 6f 72 20 61 6e 20 | oming.stale.to.be.served.for.an. |
da480 | 68 6f 75 72 2c 20 75 73 65 20 61 20 76 61 6c 75 65 20 6f 66 20 31 32 30 2e 00 4d 61 78 69 6d 75 | hour,.use.a.value.of.120..Maximu |
da4a0 | 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 72 69 65 73 20 74 6f 20 73 65 6e 64 20 41 63 63 65 73 73 | m.number.of.tries.to.send.Access |
da4c0 | 2d 52 65 71 75 65 73 74 2f 41 63 63 6f 75 6e 74 69 6e 67 2d 52 65 71 75 65 73 74 20 71 75 65 72 | -Request/Accounting-Request.quer |
da4e0 | 69 65 73 00 4d 65 64 69 75 6d 00 4d 65 6d 62 65 72 20 49 6e 74 65 72 66 61 63 65 73 00 4d 65 6d | ies.Medium.Member.Interfaces.Mem |
da500 | 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 31 60 20 61 6e 64 20 56 4c 41 4e 20 31 | ber.interfaces.`eth1`.and.VLAN.1 |
da520 | 30 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 00 4d 65 73 73 61 67 65 73 20 67 | 0.on.interface.`eth2`.Messages.g |
da540 | 65 6e 65 72 61 74 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 73 79 73 6c 6f 67 64 00 4d | enerated.internally.by.syslogd.M |
da560 | 65 74 72 69 73 20 76 65 72 73 69 6f 6e 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 | etris.version,.the.default.is.`` |
da580 | 32 60 60 00 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 | 2``.Microsoft.Windows.expects.th |
da5a0 | 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e | e.server.name.to.be.also.used.in |
da5c0 | 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e | .the.server's.certificate.common |
da5e0 | 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 | .name,.so.it's.best.to.use.this. |
da600 | 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e | DNS.name.for.your.VPN.connection |
da620 | 2e 00 4d 69 6e 20 61 6e 64 20 6d 61 78 20 69 6e 74 65 72 76 61 6c 73 20 62 65 74 77 65 65 6e 20 | ..Min.and.max.intervals.between. |
da640 | 75 6e 73 6f 6c 69 63 69 74 65 64 20 6d 75 6c 74 69 63 61 73 74 20 52 41 73 00 4d 69 6e 75 6d 75 | unsolicited.multicast.RAs.Minumu |
da660 | 6d 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 69 73 20 70 72 6f 76 69 64 65 64 2c 20 | m.firewall.ruleset.is.provided,. |
da680 | 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 73 6f 6d 65 20 66 69 6c 74 65 72 69 6e 67 20 72 75 | which.includes.some.filtering.ru |
da6a0 | 6c 65 73 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 72 75 6c 65 73 20 66 6f 72 20 75 73 | les,.and.appropiate.rules.for.us |
da6c0 | 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 20 6f 66 66 6c 6f 61 64 20 63 61 70 61 62 69 6c 69 74 69 | ing.flowtable.offload.capabiliti |
da6e0 | 65 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 6a 6f 69 6e 2f 70 72 75 6e 65 20 69 6e 74 65 72 76 | es..Modify.the.join/prune.interv |
da700 | 61 6c 20 74 68 61 74 20 50 49 4d 20 75 73 65 73 20 74 6f 20 74 68 65 20 6e 65 77 20 76 61 6c 75 | al.that.PIM.uses.to.the.new.valu |
da720 | 65 2e 20 54 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e | e..Time.is.specified.in.seconds. |
da740 | 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 | .Modify.the.time.out.value.for.a |
da760 | 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e 64 73 20 61 | .S,G.flow.from.1-65535.seconds.a |
da780 | 74 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2e | t.:abbr:`RP.(Rendezvous.Point)`. |
da7a0 | 20 54 68 65 20 6e 6f 72 6d 61 6c 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 20 66 6f 72 | .The.normal.keepalive.period.for |
da7c0 | 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 31 30 20 73 65 | .the.KAT(S,G).defaults.to.210.se |
da7e0 | 63 6f 6e 64 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 74 20 74 68 65 20 3a 61 62 62 72 3a 60 52 50 | conds..However,.at.the.:abbr:`RP |
da800 | 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2c 20 74 68 65 20 6b 65 65 70 61 6c | .(Rendezvous.Point)`,.the.keepal |
da820 | 69 76 65 20 70 65 72 69 6f 64 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 | ive.period.must.be.at.least.the. |
da840 | 52 65 67 69 73 74 65 72 5f 53 75 70 70 72 65 73 73 69 6f 6e 5f 54 69 6d 65 2c 20 6f 72 20 74 68 | Register_Suppression_Time,.or.th |
da860 | 65 20 52 50 20 6d 61 79 20 74 69 6d 65 20 6f 75 74 20 74 68 65 20 28 53 2c 47 29 20 73 74 61 74 | e.RP.may.time.out.the.(S,G).stat |
da880 | 65 20 62 65 66 6f 72 65 20 74 68 65 20 6e 65 78 74 20 4e 75 6c 6c 2d 52 65 67 69 73 74 65 72 20 | e.before.the.next.Null-Register. |
da8a0 | 61 72 72 69 76 65 73 2e 20 54 68 75 73 2c 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 69 73 20 73 | arrives..Thus,.the.KAT(S,G).is.s |
da8c0 | 65 74 20 74 6f 20 6d 61 78 28 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 2c 20 52 50 5f 4b | et.to.max(Keepalive_Period,.RP_K |
da8e0 | 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 29 20 77 68 65 6e 20 61 20 52 65 67 69 73 74 65 72 | eepalive_Period).when.a.Register |
da900 | 2d 53 74 6f 70 20 69 73 20 73 65 6e 74 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f | -Stop.is.sent..Modify.the.time.o |
da920 | 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 | ut.value.for.a.S,G.flow.from.1-6 |
da940 | 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 | 5535.seconds..If.choosing.a.valu |
da960 | 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 | e.below.31.seconds.be.aware.that |
da980 | 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 | .some.hardware.platforms.cannot. |
da9a0 | 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 | see.data.flowing.in.better.than. |
da9c0 | 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d | 30.second.chunks..Modify.the.tim |
da9e0 | 65 20 74 68 61 74 20 70 69 6d 20 77 69 6c 6c 20 72 65 67 69 73 74 65 72 20 73 75 70 70 72 65 73 | e.that.pim.will.register.suppres |
daa00 | 73 20 61 20 46 48 52 20 77 69 6c 6c 20 73 65 6e 64 20 72 65 67 69 73 74 65 72 20 6e 6f 74 69 66 | s.a.FHR.will.send.register.notif |
daa20 | 69 63 61 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 4d 6f 6e 69 74 6f 72 2c | ications.to.the.kernel..Monitor, |
daa40 | 20 74 68 65 20 73 79 73 74 65 6d 20 70 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 73 20 61 | .the.system.passively.monitors.a |
daa60 | 6e 79 20 6b 69 6e 64 20 6f 66 20 77 69 72 65 6c 65 73 73 20 74 72 61 66 66 69 63 00 4d 6f 6e 69 | ny.kind.of.wireless.traffic.Moni |
daa80 | 74 6f 72 69 6e 67 00 4d 6f 6e 69 74 6f 72 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 | toring.Monitoring.functionality. |
daaa0 | 77 69 74 68 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 61 6e 64 20 60 60 49 6e 66 6c 75 78 44 42 | with.``telegraf``.and.``InfluxDB |
daac0 | 20 32 60 60 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 54 65 6c 65 67 72 61 66 20 69 73 20 74 68 | .2``.is.provided..Telegraf.is.th |
daae0 | 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 65 72 76 65 72 20 61 67 65 6e 74 20 74 6f 20 68 65 | e.open.source.server.agent.to.he |
dab00 | 6c 70 20 79 6f 75 20 63 6f 6c 6c 65 63 74 20 6d 65 74 72 69 63 73 2c 20 65 76 65 6e 74 73 20 61 | lp.you.collect.metrics,.events.a |
dab20 | 6e 64 20 6c 6f 67 73 20 66 72 6f 6d 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 00 4d 6f 72 65 20 | nd.logs.from.your.routers..More. |
dab40 | 64 65 74 61 69 6c 73 20 61 62 6f 75 74 20 74 68 65 20 49 50 73 65 63 20 61 6e 64 20 56 54 49 20 | details.about.the.IPsec.and.VTI. |
dab60 | 69 73 73 75 65 20 61 6e 64 20 6f 70 74 69 6f 6e 20 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 | issue.and.option.disable-route-a |
dab80 | 75 74 6f 69 6e 73 74 61 6c 6c 20 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 76 79 6f 73 2e 69 6f 2f | utoinstall.https://blog.vyos.io/ |
daba0 | 76 79 6f 73 2d 31 2d 64 6f 74 2d 32 2d 30 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 6e 65 77 73 2d | vyos-1-dot-2-0-development-news- |
dabc0 | 69 6e 2d 6a 75 6c 79 00 4d 6f 73 74 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 69 | in-july.Most.operating.systems.i |
dabe0 | 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6f 72 74 20 66 6f 72 | nclude.native.client.support.for |
dac00 | 20 49 50 73 65 63 20 49 4b 45 76 32 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 61 6e | .IPsec.IKEv2.VPN.connections,.an |
dac20 | 64 20 6f 74 68 65 72 73 20 74 79 70 69 63 61 6c 6c 79 20 68 61 76 65 20 61 6e 20 61 70 70 20 6f | d.others.typically.have.an.app.o |
dac40 | 72 20 61 64 64 2d 6f 6e 20 70 61 63 6b 61 67 65 20 77 68 69 63 68 20 61 64 64 73 20 74 68 65 20 | r.add-on.package.which.adds.the. |
dac60 | 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 63 6f 76 65 72 73 20 | capability..This.section.covers. |
dac80 | 49 50 73 65 63 20 49 4b 45 76 32 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | IPsec.IKEv2.client.configuration |
daca0 | 20 66 6f 72 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 4d 6f 75 6e 74 20 61 20 76 6f 6c 75 6d 65 20 | .for.Windows.10..Mount.a.volume. |
dacc0 | 69 6e 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 4d 75 6c 74 69 00 4d 75 6c 74 69 2d 63 | into.the.container.Multi.Multi-c |
dace0 | 6c 69 65 6e 74 20 73 65 72 76 65 72 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 | lient.server.is.the.most.popular |
dad00 | 20 4f 70 65 6e 56 50 4e 20 6d 6f 64 65 20 6f 6e 20 72 6f 75 74 65 72 73 2e 20 49 74 20 61 6c 77 | .OpenVPN.mode.on.routers..It.alw |
dad20 | 61 79 73 20 75 73 65 73 20 78 2e 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e | ays.uses.x.509.authentication.an |
dad40 | 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 71 75 69 72 65 73 20 61 20 50 4b 49 20 73 65 74 75 70 | d.therefore.requires.a.PKI.setup |
dad60 | 2e 20 52 65 66 65 72 20 74 68 69 73 20 74 6f 70 69 63 20 3a 72 65 66 3a 60 63 6f 6e 66 69 67 75 | ..Refer.this.topic.:ref:`configu |
dad80 | 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 60 20 74 6f 20 67 65 6e 65 72 61 74 | ration/pki/index:pki`.to.generat |
dada0 | 65 20 61 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 61 20 73 65 72 76 65 72 20 63 65 72 | e.a.CA.certificate,.a.server.cer |
dadc0 | 74 69 66 69 63 61 74 65 20 61 6e 64 20 6b 65 79 2c 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 | tificate.and.key,.a.certificate. |
dade0 | 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 2c 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 | revocation.list,.a.Diffie-Hellma |
dae00 | 6e 20 6b 65 79 20 65 78 63 68 61 6e 67 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 69 6c 65 2e 20 | n.key.exchange.parameters.file.. |
dae20 | 59 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 | You.do.not.need.client.certifica |
dae40 | 74 65 73 20 61 6e 64 20 6b 65 79 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 73 65 74 75 | tes.and.keys.for.the.server.setu |
dae60 | 70 2e 00 4d 75 6c 74 69 2d 68 6f 6d 65 64 2e 20 49 6e 20 61 20 6d 75 6c 74 69 2d 68 6f 6d 65 64 | p..Multi-homed..In.a.multi-homed |
dae80 | 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2c 20 74 68 65 20 4e 41 54 36 36 20 | .network.environment,.the.NAT66. |
daea0 | 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e | device.connects.to.an.internal.n |
daec0 | 65 74 77 6f 72 6b 20 61 6e 64 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 20 63 6f 6e 6e 65 63 | etwork.and.simultaneously.connec |
daee0 | 74 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b | ts.to.different.external.network |
daf00 | 73 2e 20 41 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 63 6f | s..Address.translation.can.be.co |
daf20 | 6e 66 69 67 75 72 65 64 20 6f 6e 20 65 61 63 68 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 | nfigured.on.each.external.networ |
daf40 | 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 65 | k.side.interface.of.the.NAT66.de |
daf60 | 76 69 63 65 20 74 6f 20 63 6f 6e 76 65 72 74 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 | vice.to.convert.the.same.interna |
daf80 | 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 | l.network.address.into.different |
dafa0 | 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 | .external.network.addresses,.and |
dafc0 | 20 72 65 61 6c 69 7a 65 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 74 68 65 20 73 61 6d 65 | .realize.the.mapping.of.the.same |
dafe0 | 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 65 78 | .internal.address.to.multiple.ex |
db000 | 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 4d 75 6c 74 69 3a 20 63 61 6e 20 62 65 20 | ternal.addresses..Multi:.can.be. |
db020 | 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 4d 75 6c 74 69 63 | specified.multiple.times..Multic |
db040 | 61 73 74 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 32 32 34 2e 30 | ast.Multicast.DNS.uses.the.224.0 |
db060 | 2e 30 2e 32 35 31 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 69 73 20 22 61 64 6d 69 6e 69 | .0.251.address,.which.is."admini |
db080 | 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 | stratively.scoped".and.does.not. |
db0a0 | 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 49 74 20 72 65 74 72 61 6e 73 6d 69 74 73 | leave.the.subnet..It.retransmits |
db0c0 | 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 | .mDNS.packets.from.one.interface |
db0e0 | 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c | .to.other.interfaces..This.enabl |
db100 | 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 65 2e 67 2e 20 41 70 70 6c 65 20 41 69 72 70 6c 61 | es.support.for.e.g..Apple.Airpla |
db120 | 79 20 64 65 76 69 63 65 73 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e | y.devices.across.multiple.VLANs. |
db140 | 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 72 65 73 65 72 76 65 64 | .Multicast.DNS.uses.the.reserved |
db160 | 20 61 64 64 72 65 73 73 20 60 60 32 32 34 2e 30 2e 30 2e 32 35 31 60 60 2c 20 77 68 69 63 68 20 | .address.``224.0.0.251``,.which. |
db180 | 69 73 20 60 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 60 20 61 | is.`"administratively.scoped"`.a |
db1a0 | 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 6d 44 | nd.does.not.leave.the.subnet..mD |
db1c0 | 4e 53 20 72 65 70 65 61 74 65 72 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 | NS.repeater.retransmits.mDNS.pac |
db1e0 | 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 | kets.from.one.interface.to.other |
db200 | 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 | .interfaces..This.enables.suppor |
db220 | 74 20 66 6f 72 20 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 6d 44 4e 53 20 64 69 73 63 6f 76 65 | t.for.devices.using.mDNS.discove |
db240 | 72 79 20 28 6c 69 6b 65 20 6e 65 74 77 6f 72 6b 20 70 72 69 6e 74 65 72 73 2c 20 41 70 70 6c 65 | ry.(like.network.printers,.Apple |
db260 | 20 41 69 72 70 6c 61 79 2c 20 43 68 72 6f 6d 65 63 61 73 74 2c 20 76 61 72 69 6f 75 73 20 49 50 | .Airplay,.Chromecast,.various.IP |
db280 | 20 62 61 73 65 64 20 68 6f 6d 65 2d 61 75 74 6f 6d 61 74 69 6f 6e 20 64 65 76 69 63 65 73 20 65 | .based.home-automation.devices.e |
db2a0 | 74 63 29 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 | tc).across.multiple.VLANs..Multi |
db2c0 | 63 61 73 74 20 56 58 4c 41 4e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 61 64 64 72 65 | cast.VXLAN.Multicast.group.addre |
db2e0 | 73 73 20 66 6f 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 56 58 4c 41 4e 20 74 75 | ss.for.VXLAN.interface..VXLAN.tu |
db300 | 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 62 75 69 6c 74 20 65 69 74 68 65 72 20 76 69 61 20 4d 75 | nnels.can.be.built.either.via.Mu |
db320 | 6c 74 69 63 61 73 74 20 6f 72 20 76 69 61 20 55 6e 69 63 61 73 74 2e 00 4d 75 6c 74 69 63 61 73 | lticast.or.via.Unicast..Multicas |
db340 | 74 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 | t.group.to.use.for.syncing.connt |
db360 | 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 | rack.entries..Multicast.receiver |
db380 | 73 20 77 69 6c 6c 20 74 61 6c 6b 20 49 47 4d 50 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 | s.will.talk.IGMP.to.their.local. |
db3a0 | 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 20 63 | router,.so,.besides.having.PIM.c |
db3c0 | 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 49 47 4d 50 20 | onfigured.in.every.router,.IGMP. |
db3e0 | 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 | must.also.be.configured.in.any.r |
db400 | 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c | outer.where.there.could.be.a.mul |
db420 | 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 | ticast.receiver.locally.connecte |
db440 | 64 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b | d..Multicast.receivers.will.talk |
db460 | 20 4d 4c 44 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 | .MLD.to.their.local.router,.so,. |
db480 | 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 76 36 20 63 6f 6e 66 69 67 75 72 65 64 20 | besides.having.PIMv6.configured. |
db4a0 | 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 4d 4c 44 20 6d 75 73 74 20 61 6c 73 6f 20 62 | in.every.router,.MLD.must.also.b |
db4c0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 | e.configured.in.any.router.where |
db4e0 | 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 | .there.could.be.a.multicast.rece |
db500 | 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 | iver.locally.connected..Multicas |
db520 | 74 2d 72 6f 75 74 69 6e 67 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 65 20 6c 65 | t-routing.is.required.for.the.le |
db540 | 61 76 65 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 | aves.to.forward.traffic.between. |
db560 | 65 61 63 68 20 6f 74 68 65 72 20 69 6e 20 61 20 6d 6f 72 65 20 73 63 61 6c 61 62 6c 65 20 77 61 | each.other.in.a.more.scalable.wa |
db580 | 79 2e 20 54 68 69 73 20 61 6c 73 6f 20 72 65 71 75 69 72 65 73 20 50 49 4d 20 74 6f 20 62 65 20 | y..This.also.requires.PIM.to.be. |
db5a0 | 65 6e 61 62 6c 65 64 20 74 6f 77 61 72 64 73 20 74 68 65 20 6c 65 61 76 65 73 20 73 6f 20 74 68 | enabled.towards.the.leaves.so.th |
db5c0 | 61 74 20 74 68 65 20 53 70 69 6e 65 20 63 61 6e 20 6c 65 61 72 6e 20 77 68 61 74 20 6d 75 6c 74 | at.the.Spine.can.learn.what.mult |
db5e0 | 69 63 61 73 74 20 67 72 6f 75 70 73 20 65 61 63 68 20 4c 65 61 66 20 65 78 70 65 63 74 73 20 74 | icast.groups.each.Leaf.expects.t |
db600 | 72 61 66 66 69 63 20 66 72 6f 6d 2e 00 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 72 | raffic.from..Multiple.DNS.server |
db620 | 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 52 50 4b 49 20 | s.can.be.defined..Multiple.RPKI. |
db640 | 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 73 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 | caching.instances.can.be.supplie |
db660 | 64 20 61 6e 64 20 74 68 65 79 20 6e 65 65 64 20 61 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 | d.and.they.need.a.preference.in. |
db680 | 77 68 69 63 68 20 74 68 65 69 72 20 72 65 73 75 6c 74 20 73 65 74 73 20 61 72 65 20 75 73 65 64 | which.their.result.sets.are.used |
db6a0 | 2e 00 4d 75 6c 74 69 70 6c 65 20 55 70 6c 69 6e 6b 73 00 4d 75 6c 74 69 70 6c 65 20 56 4c 41 4e | ..Multiple.Uplinks.Multiple.VLAN |
db6c0 | 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 | .to.VNI.mappings.can.be.configur |
db6e0 | 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 61 6d 65 20 53 56 44 2e 20 54 68 69 73 20 61 6c | ed.against.the.same.SVD..This.al |
db700 | 6c 6f 77 73 20 66 6f 72 20 61 20 73 69 67 6e 69 66 69 63 61 6e 74 20 73 63 61 6c 69 6e 67 20 6f | lows.for.a.significant.scaling.o |
db720 | 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 56 4e 49 73 20 73 69 6e 63 65 20 61 20 73 65 70 | f.the.number.of.VNIs.since.a.sep |
db740 | 61 72 61 74 65 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 | arate.VXLAN.interface.is.no.long |
db760 | 65 72 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 65 61 63 68 20 56 4e 49 2e 00 4d 75 6c 74 69 70 | er.required.for.each.VNI..Multip |
db780 | 6c 65 20 61 6c 69 61 73 65 73 20 63 61 6e 20 70 65 20 73 70 65 63 69 66 69 65 64 20 70 65 72 20 | le.aliases.can.pe.specified.per. |
db7a0 | 68 6f 73 74 2d 6e 61 6d 65 2e 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | host-name..Multiple.destination. |
db7c0 | 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d | ports.can.be.specified.as.a.comm |
db7e0 | 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 | a-separated.list..The.whole.list |
db800 | 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 | .can.also.be."negated".using.'!' |
db820 | 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 27 21 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c | ..For.example:.'!22,telnet,http, |
db840 | 31 32 33 2c 31 30 30 31 2d 31 30 30 35 27 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 | 123,1001-1005'.Multiple.destinat |
db860 | 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 | ion.ports.can.be.specified.as.a. |
db880 | 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 | comma-separated.list..The.whole. |
db8a0 | 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 | list.can.also.be."negated".using |
db8c0 | 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 21 32 32 2c 74 65 6c 6e 65 74 2c 68 | .'!'..For.example:.`!22,telnet,h |
db8e0 | 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 60 60 00 4d 75 6c 74 69 70 6c 65 20 69 6e 74 | ttp,123,1001-1005``.Multiple.int |
db900 | 65 72 66 61 63 65 73 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 | erfaces.may.be.specified..Multip |
db920 | 6c 65 20 6e 65 74 77 6f 72 6b 73 2f 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | le.networks/client.IP.addresses. |
db940 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 | can.be.configured..Multiple.serv |
db960 | 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 | ers.can.be.specified..Multiple.s |
db980 | 65 72 76 69 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 69 6e 74 65 72 66 61 63 | ervices.can.be.used.per.interfac |
db9a0 | 65 2e 20 4a 75 73 74 20 73 70 65 63 69 66 79 20 61 73 20 6d 61 6e 79 20 73 65 72 76 69 63 65 73 | e..Just.specify.as.many.services |
db9c0 | 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 79 6f 75 20 6c 69 6b 65 21 00 4d 75 6c 74 | .per.interface.as.you.like!.Mult |
db9e0 | 69 70 6c 65 20 73 6f 75 72 63 65 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 | iple.source.ports.can.be.specifi |
dba00 | 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 | ed.as.a.comma-separated.list..Th |
dba20 | 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 | e.whole.list.can.also.be."negate |
dba40 | 64 22 20 75 73 69 6e 67 20 60 60 21 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 4d 75 6c | d".using.``!``..For.example:.Mul |
dba60 | 74 69 70 6c 65 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 | tiple.target.IP.addresses.can.be |
dba80 | 20 73 70 65 63 69 66 69 65 64 2e 20 41 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 | .specified..At.least.one.IP.addr |
dbaa0 | 65 73 73 20 6d 75 73 74 20 62 65 20 67 69 76 65 6e 20 66 6f 72 20 41 52 50 20 6d 6f 6e 69 74 6f | ess.must.be.given.for.ARP.monito |
dbac0 | 72 69 6e 67 20 74 6f 20 66 75 6e 63 74 69 6f 6e 2e 00 4d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 | ring.to.function..Multiple.users |
dbae0 | 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 69 61 6c 20 | .can.connect.to.the.same.serial. |
dbb00 | 64 65 76 69 63 65 20 62 75 74 20 6f 6e 6c 79 20 6f 6e 65 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 | device.but.only.one.is.allowed.t |
dbb20 | 6f 20 77 72 69 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 70 6f 72 74 2e 00 4d 75 6c | o.write.to.the.console.port..Mul |
dbb40 | 74 69 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 65 6e 61 62 6c 65 20 42 47 50 | tiprotocol.extensions.enable.BGP |
dbb60 | 20 74 6f 20 63 61 72 72 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f | .to.carry.routing.information.fo |
dbb80 | 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f | r.multiple.network.layer.protoco |
dbba0 | 6c 73 2e 20 42 47 50 20 73 75 70 70 6f 72 74 73 20 61 6e 20 41 64 64 72 65 73 73 20 46 61 6d 69 | ls..BGP.supports.an.Address.Fami |
dbbc0 | 6c 79 20 49 64 65 6e 74 69 66 69 65 72 20 28 41 46 49 29 20 66 6f 72 20 49 50 76 34 20 61 6e 64 | ly.Identifier.(AFI).for.IPv4.and |
dbbe0 | 20 49 50 76 36 2e 00 4e 00 4e 41 54 00 4e 41 54 20 28 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 | .IPv6..N.NAT.NAT.(specifically,. |
dbc00 | 53 6f 75 72 63 65 20 4e 41 54 29 3b 00 4e 41 54 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e | Source.NAT);.NAT.Configuration.N |
dbc20 | 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 | AT.Load.Balance.NAT.Load.Balance |
dbc40 | 20 75 73 65 73 20 61 6e 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 67 65 6e 65 72 61 74 65 | .uses.an.algorithm.that.generate |
dbc60 | 73 20 61 20 68 61 73 68 20 61 6e 64 20 62 61 73 65 64 20 6f 6e 20 69 74 2c 20 74 68 65 6e 20 69 | s.a.hash.and.based.on.it,.then.i |
dbc80 | 74 20 61 70 70 6c 69 65 73 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 74 72 61 6e 73 6c 61 74 | t.applies.corresponding.translat |
dbca0 | 69 6f 6e 2e 20 54 68 69 73 20 68 61 73 68 20 63 61 6e 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 | ion..This.hash.can.be.generated. |
dbcc0 | 72 61 6e 64 6f 6d 6c 79 2c 20 6f 72 20 63 61 6e 20 75 73 65 20 64 61 74 61 20 66 72 6f 6d 20 74 | randomly,.or.can.use.data.from.t |
dbce0 | 68 65 20 69 70 20 68 65 61 64 65 72 3a 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 2c 20 64 65 | he.ip.header:.source-address,.de |
dbd00 | 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 2d 70 6f 72 74 20 61 | stination-address,.source-port.a |
dbd20 | 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 | nd/or.destination-port..By.defau |
dbd40 | 6c 74 2c 20 69 74 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 | lt,.it.will.generate.the.hash.ra |
dbd60 | 6e 64 6f 6d 6c 79 2e 00 4e 41 54 20 52 75 6c 65 73 65 74 00 4e 41 54 20 62 65 66 6f 72 65 20 56 | ndomly..NAT.Ruleset.NAT.before.V |
dbd80 | 50 4e 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e 20 54 6f 70 6f 6c 6f 67 79 00 4e 41 54 2c 20 | PN.NAT.before.VPN.Topology.NAT,. |
dbda0 | 52 6f 75 74 69 6e 67 2c 20 46 69 72 65 77 61 6c 6c 20 49 6e 74 65 72 61 63 74 69 6f 6e 00 4e 41 | Routing,.Firewall.Interaction.NA |
dbdc0 | 54 34 34 00 4e 41 54 36 34 00 4e 41 54 36 34 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 | T44.NAT64.NAT64.client.configura |
dbde0 | 74 69 6f 6e 3a 00 4e 41 54 36 34 20 70 72 65 66 69 78 20 6d 61 73 6b 20 6d 75 73 74 20 62 65 20 | tion:.NAT64.prefix.mask.must.be. |
dbe00 | 6f 6e 65 20 6f 66 3a 20 2f 33 32 2c 20 2f 34 30 2c 20 2f 34 38 2c 20 2f 35 36 2c 20 2f 36 34 20 | one.of:./32,./40,./48,./56,./64. |
dbe20 | 6f 72 20 39 36 2e 00 4e 41 54 36 34 20 73 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | or.96..NAT64.server.configuratio |
dbe40 | 6e 3a 00 4e 41 54 36 36 28 4e 50 54 76 36 29 00 4e 48 52 50 20 70 72 6f 76 69 64 65 73 20 74 68 | n:.NAT66(NPTv6).NHRP.provides.th |
dbe60 | 65 20 64 79 6e 61 6d 69 63 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 | e.dynamic.tunnel.endpoint.discov |
dbe80 | 65 72 79 20 6d 65 63 68 61 6e 69 73 6d 20 28 65 6e 64 70 6f 69 6e 74 20 72 65 67 69 73 74 72 61 | ery.mechanism.(endpoint.registra |
dbea0 | 74 69 6f 6e 2c 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 2f 6c 6f 6f | tion,.and.endpoint.discovery/loo |
dbec0 | 6b 75 70 29 2c 20 6d 47 52 45 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 | kup),.mGRE.provides.the.tunnel.e |
dbee0 | 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 20 49 50 53 | ncapsulation.itself,.and.the.IPS |
dbf00 | 65 63 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 6e 64 6c 65 20 74 68 65 20 6b 65 79 20 65 78 63 68 | ec.protocols.handle.the.key.exch |
dbf20 | 61 6e 67 65 2c 20 61 6e 64 20 63 72 79 70 74 6f 20 6d 65 63 68 61 6e 69 73 6d 2e 00 4e 54 50 00 | ange,.and.crypto.mechanism..NTP. |
dbf40 | 4e 54 50 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 61 | NTP.is.intended.to.synchronize.a |
dbf60 | 6c 6c 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 63 6f 6d 70 75 74 65 72 73 20 74 6f 20 77 69 | ll.participating.computers.to.wi |
dbf80 | 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 66 20 3a 61 62 62 72 | thin.a.few.milliseconds.of.:abbr |
dbfa0 | 3a 60 55 54 43 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d | :`UTC.(Coordinated.Universal.Tim |
dbfc0 | 65 29 60 2e 20 49 74 20 75 73 65 73 20 74 68 65 20 69 6e 74 65 72 73 65 63 74 69 6f 6e 20 61 6c | e)`..It.uses.the.intersection.al |
dbfe0 | 67 6f 72 69 74 68 6d 2c 20 61 20 6d 6f 64 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4d | gorithm,.a.modified.version.of.M |
dc000 | 61 72 7a 75 6c 6c 6f 27 73 20 61 6c 67 6f 72 69 74 68 6d 2c 20 74 6f 20 73 65 6c 65 63 74 20 61 | arzullo's.algorithm,.to.select.a |
dc020 | 63 63 75 72 61 74 65 20 74 69 6d 65 20 73 65 72 76 65 72 73 20 61 6e 64 20 69 73 20 64 65 73 69 | ccurate.time.servers.and.is.desi |
dc040 | 67 6e 65 64 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 65 66 66 65 63 74 73 20 6f 66 20 | gned.to.mitigate.the.effects.of. |
dc060 | 76 61 72 69 61 62 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 4e 54 50 20 63 61 | variable.network.latency..NTP.ca |
dc080 | 6e 20 75 73 75 61 6c 6c 79 20 6d 61 69 6e 74 61 69 6e 20 74 69 6d 65 20 74 6f 20 77 69 74 68 69 | n.usually.maintain.time.to.withi |
dc0a0 | 6e 20 74 65 6e 73 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 76 65 72 20 74 68 65 20 | n.tens.of.milliseconds.over.the. |
dc0c0 | 70 75 62 6c 69 63 20 49 6e 74 65 72 6e 65 74 2c 20 61 6e 64 20 63 61 6e 20 61 63 68 69 65 76 65 | public.Internet,.and.can.achieve |
dc0e0 | 20 62 65 74 74 65 72 20 74 68 61 6e 20 6f 6e 65 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 20 61 63 63 | .better.than.one.millisecond.acc |
dc100 | 75 72 61 63 79 20 69 6e 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 73 20 75 6e 64 | uracy.in.local.area.networks.und |
dc120 | 65 72 20 69 64 65 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 41 73 79 6d 6d 65 74 72 69 63 20 | er.ideal.conditions..Asymmetric. |
dc140 | 72 6f 75 74 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 20 63 61 | routes.and.network.congestion.ca |
dc160 | 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 20 6f 66 20 31 30 30 20 6d 73 20 6f 72 20 6d 6f 72 65 | n.cause.errors.of.100.ms.or.more |
dc180 | 2e 00 4e 54 50 20 70 72 6f 63 65 73 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f | ..NTP.process.will.only.listen.o |
dc1a0 | 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 | n.the.specified.IP.address..You. |
dc1c0 | 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 | must.specify.the.`<address>`.and |
dc1e0 | 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 74 68 65 20 70 65 72 6d 69 74 74 65 64 20 63 6c 69 65 6e 74 | .optionally.the.permitted.client |
dc200 | 73 2e 20 4d 75 6c 74 69 70 6c 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 65 73 20 63 61 6e | s..Multiple.listen.addresses.can |
dc220 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4e 54 50 20 73 75 62 73 79 73 74 65 6d 00 4e 54 | .be.configured..NTP.subsystem.NT |
dc240 | 50 20 73 75 70 70 6c 69 65 73 20 61 20 77 61 72 6e 69 6e 67 20 6f 66 20 61 6e 79 20 69 6d 70 65 | P.supplies.a.warning.of.any.impe |
dc260 | 6e 64 69 6e 67 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 64 6a 75 73 74 6d 65 6e 74 2c 20 62 75 | nding.leap.second.adjustment,.bu |
dc280 | 74 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6c 6f 63 61 6c 20 74 69 6d | t.no.information.about.local.tim |
dc2a0 | 65 20 7a 6f 6e 65 73 20 6f 72 20 64 61 79 6c 69 67 68 74 20 73 61 76 69 6e 67 20 74 69 6d 65 20 | e.zones.or.daylight.saving.time. |
dc2c0 | 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 4e 61 6d 65 20 53 65 72 76 65 72 00 4e 61 6d 65 | is.transmitted..Name.Server.Name |
dc2e0 | 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 | .of.installed.certificate.author |
dc300 | 69 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c | ity.certificate..Name.of.install |
dc320 | 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 73 | ed.server.certificate..Name.of.s |
dc340 | 74 61 74 69 63 20 6d 61 70 70 69 6e 67 00 4e 61 6d 65 20 6f 66 20 74 68 65 20 73 69 6e 67 6c 65 | tatic.mapping.Name.of.the.single |
dc360 | 20 74 61 62 6c 65 20 4f 6e 6c 79 20 69 66 20 73 65 74 20 67 72 6f 75 70 2d 6d 65 74 72 69 63 73 | .table.Only.if.set.group-metrics |
dc380 | 20 73 69 6e 67 6c 65 2d 74 61 62 6c 65 2e 00 4e 61 6d 65 20 6f 72 20 49 50 76 34 20 61 64 64 72 | .single-table..Name.or.IPv4.addr |
dc3a0 | 65 73 73 20 6f 66 20 54 46 54 50 20 73 65 72 76 65 72 00 4e 65 74 42 49 4f 53 20 6f 76 65 72 20 | ess.of.TFTP.server.NetBIOS.over. |
dc3c0 | 54 43 50 2f 49 50 20 6e 61 6d 65 20 73 65 72 76 65 72 00 4e 65 74 46 6c 6f 77 00 4e 65 74 46 6c | TCP/IP.name.server.NetFlow.NetFl |
dc3e0 | 6f 77 20 2f 20 49 50 46 49 58 00 4e 65 74 46 6c 6f 77 20 65 6e 67 69 6e 65 2d 69 64 20 77 68 69 | ow./.IPFIX.NetFlow.engine-id.whi |
dc400 | 63 68 20 77 69 6c 6c 20 61 70 70 65 61 72 20 69 6e 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 | ch.will.appear.in.NetFlow.data.. |
dc420 | 54 68 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 4e 65 74 46 6c 6f 77 20 69 | The.range.is.0.to.255..NetFlow.i |
dc440 | 73 20 61 20 66 65 61 74 75 72 65 20 74 68 61 74 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 | s.a.feature.that.was.introduced. |
dc460 | 6f 6e 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 20 61 72 6f 75 6e 64 20 31 39 39 36 20 74 68 61 | on.Cisco.routers.around.1996.tha |
dc480 | 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 6f 6c 6c 65 63 | t.provides.the.ability.to.collec |
dc4a0 | 74 20 49 50 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 61 73 20 69 74 20 65 6e 74 65 72 | t.IP.network.traffic.as.it.enter |
dc4c0 | 73 20 6f 72 20 65 78 69 74 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 61 6e 61 6c | s.or.exits.an.interface..By.anal |
dc4e0 | 79 7a 69 6e 67 20 74 68 65 20 64 61 74 61 20 70 72 6f 76 69 64 65 64 20 62 79 20 4e 65 74 46 6c | yzing.the.data.provided.by.NetFl |
dc500 | 6f 77 2c 20 61 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 63 61 6e 20 | ow,.a.network.administrator.can. |
dc520 | 64 65 74 65 72 6d 69 6e 65 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 20 74 68 65 20 73 6f 75 | determine.things.such.as.the.sou |
dc540 | 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 2c 20 | rce.and.destination.of.traffic,. |
dc560 | 63 6c 61 73 73 20 6f 66 20 73 65 72 76 69 63 65 2c 20 61 6e 64 20 74 68 65 20 63 61 75 73 65 73 | class.of.service,.and.the.causes |
dc580 | 20 6f 66 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 41 20 74 79 70 69 63 61 6c 20 66 6c 6f 77 20 6d | .of.congestion..A.typical.flow.m |
dc5a0 | 6f 6e 69 74 6f 72 69 6e 67 20 73 65 74 75 70 20 28 75 73 69 6e 67 20 4e 65 74 46 6c 6f 77 29 20 | onitoring.setup.(using.NetFlow). |
dc5c0 | 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 6d 61 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 | consists.of.three.main.component |
dc5e0 | 73 3a 00 4e 65 74 46 6c 6f 77 20 69 73 20 75 73 75 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 6f 6e | s:.NetFlow.is.usually.enabled.on |
dc600 | 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 6c 69 6d 69 74 20 | .a.per-interface.basis.to.limit. |
dc620 | 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 69 6e | load.on.the.router.components.in |
dc640 | 76 6f 6c 76 65 64 20 69 6e 20 4e 65 74 46 6c 6f 77 2c 20 6f 72 20 74 6f 20 6c 69 6d 69 74 20 74 | volved.in.NetFlow,.or.to.limit.t |
dc660 | 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 4e 65 74 46 6c 6f 77 20 72 65 63 6f 72 64 73 20 65 78 70 | he.amount.of.NetFlow.records.exp |
dc680 | 6f 72 74 65 64 2e 00 4e 65 74 46 6c 6f 77 20 76 35 20 65 78 61 6d 70 6c 65 3a 00 4e 65 74 66 69 | orted..NetFlow.v5.example:.Netfi |
dc6a0 | 6c 74 65 72 20 62 61 73 65 64 00 4e 65 74 6d 61 73 6b 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 | lter.based.Netmask.greater.than. |
dc6c0 | 6c 65 6e 67 74 68 2e 00 4e 65 74 6d 61 73 6b 20 6c 65 73 73 20 74 68 61 6e 20 6c 65 6e 67 74 68 | length..Netmask.less.than.length |
dc6e0 | 00 4e 65 74 77 6f 72 6b 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 | .Network.Advertisement.Configura |
dc700 | 74 69 6f 6e 00 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 4e 65 74 77 6f 72 6b 20 45 6d 75 | tion.Network.Control.Network.Emu |
dc720 | 6c 61 74 6f 72 00 4e 65 74 77 6f 72 6b 20 47 72 6f 75 70 73 00 4e 65 74 77 6f 72 6b 20 49 44 20 | lator.Network.Groups.Network.ID. |
dc740 | 28 53 53 49 44 29 20 60 60 45 6e 74 65 72 70 72 69 73 65 2d 54 45 53 54 60 60 00 4e 65 74 77 6f | (SSID).``Enterprise-TEST``.Netwo |
dc760 | 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 54 45 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 54 6f | rk.ID.(SSID).``TEST``.Network.To |
dc780 | 70 6f 6c 6f 67 79 20 44 69 61 67 72 61 6d 00 4e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e | pology.Diagram.Network.managemen |
dc7a0 | 74 20 73 74 61 74 69 6f 6e 20 28 4e 4d 53 29 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 | t.station.(NMS).-.software.which |
dc7c0 | 20 72 75 6e 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 72 00 4e 65 74 77 6f 72 6b 20 6e 65 77 | .runs.on.the.manager.Network.new |
dc7e0 | 73 20 73 75 62 73 79 73 74 65 6d 00 4e 65 74 77 6f 72 6b 20 74 6f 20 62 65 20 70 72 6f 74 65 63 | s.subsystem.Network.to.be.protec |
dc800 | 74 65 64 3a 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 28 70 75 62 6c 69 63 20 49 50 73 20 75 73 | ted:.192.0.2.0/24.(public.IPs.us |
dc820 | 65 20 62 79 20 63 75 73 74 6f 6d 65 72 73 29 00 4e 65 74 77 6f 72 6b 73 20 61 6c 6c 6f 77 65 64 | e.by.customers).Networks.allowed |
dc840 | 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 00 4e 65 77 20 75 73 65 72 20 77 | .to.query.this.server.New.user.w |
dc860 | 69 6c 6c 20 75 73 65 20 53 48 41 2f 41 45 53 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | ill.use.SHA/AES.for.authenticati |
dc880 | 6f 6e 20 61 6e 64 20 70 72 69 76 61 63 79 00 4e 65 78 74 20 69 74 20 69 73 20 6e 65 63 65 73 73 | on.and.privacy.Next.it.is.necess |
dc8a0 | 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 32 46 41 20 66 6f 72 20 4f 70 65 6e 43 6f 6e | ary.to.configure.2FA.for.OpenCon |
dc8c0 | 6e 65 63 74 3a 00 4e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 | nect:.Next-hop.interface.for.the |
dc8e0 | 20 72 6f 75 74 65 00 4e 65 78 74 68 6f 70 20 49 50 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 | .route.Nexthop.IP.address..Nexth |
dc900 | 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 4e 65 78 74 68 6f | op.IPv6.address.to.match..Nextho |
dc920 | 70 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 54 72 61 63 6b 69 6e 67 | p.IPv6.address..Nexthop.Tracking |
dc940 | 00 4e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 72 65 73 6f 6c 76 65 20 6e 65 78 74 68 6f | .Nexthop.tracking.resolve.nextho |
dc960 | 70 73 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 62 79 20 64 65 66 61 | ps.via.the.default.route.by.defa |
dc980 | 75 6c 74 2e 20 54 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 | ult..This.is.enabled.by.default. |
dc9a0 | 66 6f 72 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 6f 66 20 46 52 52 | for.a.traditional.profile.of.FRR |
dc9c0 | 20 77 68 69 63 68 20 77 65 20 75 73 65 2e 20 49 74 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 | .which.we.use..It.and.can.be.dis |
dc9e0 | 61 62 6c 65 64 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 6e 27 74 20 74 6f 20 65 2e 67 | abled.if.you.do.not.wan't.to.e.g |
dca00 | 2e 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 70 65 65 72 20 61 63 72 6f 73 73 20 74 68 65 20 64 | ..allow.BGP.to.peer.across.the.d |
dca20 | 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4e 6f 20 52 4f 41 20 65 78 69 73 74 73 20 77 68 69 63 | efault.route..No.ROA.exists.whic |
dca40 | 68 20 63 6f 76 65 72 73 20 74 68 61 74 20 70 72 65 66 69 78 2e 20 55 6e 66 6f 72 74 75 6e 61 74 | h.covers.that.prefix..Unfortunat |
dca60 | 65 6c 79 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 20 66 6f 72 20 61 62 6f 75 74 20 38 | ely.this.is.the.case.for.about.8 |
dca80 | 30 25 20 6f 66 20 74 68 65 20 49 50 76 34 20 70 72 65 66 69 78 65 73 20 77 68 69 63 68 20 77 65 | 0%.of.the.IPv4.prefixes.which.we |
dcaa0 | 72 65 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 44 46 5a 20 28 | re.announced.to.the.:abbr:`DFZ.( |
dcac0 | 64 65 66 61 75 6c 74 2d 66 72 65 65 20 7a 6f 6e 65 29 60 20 61 74 20 74 68 65 20 73 74 61 72 74 | default-free.zone)`.at.the.start |
dcae0 | 20 6f 66 20 32 30 32 30 00 4e 6f 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 72 65 71 75 69 72 65 | .of.2020.No.VLAN.tagging.require |
dcb00 | 64 20 62 79 20 79 6f 75 72 20 49 53 50 2e 00 4e 6f 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 | d.by.your.ISP..No.route.is.suppr |
dcb20 | 65 73 73 65 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 20 4d 61 78 69 6d 75 6d 2d 73 75 70 70 | essed.indefinitely..Maximum-supp |
dcb40 | 72 65 73 73 2d 74 69 6d 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 | ress-time.defines.the.maximum.ti |
dcb60 | 6d 65 20 61 20 72 6f 75 74 65 20 63 61 6e 20 62 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 | me.a.route.can.be.suppressed.bef |
dcb80 | 6f 72 65 20 69 74 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 00 4e 6f 20 73 75 70 70 | ore.it.is.re-advertised..No.supp |
dcba0 | 6f 72 74 20 66 6f 72 20 53 52 4c 42 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 62 69 6e 64 | ort.for.SRLB.No.support.for.bind |
dcbc0 | 69 6e 67 20 53 49 44 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 65 76 65 6c 20 72 65 64 | ing.SID.No.support.for.level.red |
dcbe0 | 69 73 74 72 69 62 75 74 69 6f 6e 20 28 4c 31 20 74 6f 20 4c 32 20 6f 72 20 4c 32 20 74 6f 20 4c | istribution.(L1.to.L2.or.L2.to.L |
dcc00 | 31 29 00 4e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 69 6e 67 20 72 65 71 75 | 1).Non-transparent.proxying.requ |
dcc20 | 69 72 65 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 20 62 65 | ires.that.the.client.browsers.be |
dcc40 | 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 | .configured.with.the.proxy.setti |
dcc60 | 6e 67 73 20 62 65 66 6f 72 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 64 69 72 65 63 74 | ngs.before.requests.are.redirect |
dcc80 | 65 64 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 | ed..The.advantage.of.this.is.tha |
dcca0 | 74 20 74 68 65 20 63 6c 69 65 6e 74 20 77 65 62 20 62 72 6f 77 73 65 72 20 63 61 6e 20 64 65 74 | t.the.client.web.browser.can.det |
dccc0 | 65 63 74 20 74 68 61 74 20 61 20 70 72 6f 78 79 20 69 73 20 69 6e 20 75 73 65 20 61 6e 64 20 63 | ect.that.a.proxy.is.in.use.and.c |
dcce0 | 61 6e 20 62 65 68 61 76 65 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 49 6e 20 61 64 64 69 74 69 | an.behave.accordingly..In.additi |
dcd00 | 6f 6e 2c 20 77 65 62 2d 74 72 61 6e 73 6d 69 74 74 65 64 20 6d 61 6c 77 61 72 65 20 63 61 6e 20 | on,.web-transmitted.malware.can. |
dcd20 | 73 6f 6d 65 74 69 6d 65 73 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 61 20 6e 6f 6e 2d 74 72 | sometimes.be.blocked.by.a.non-tr |
dcd40 | 61 6e 73 70 61 72 65 6e 74 20 77 65 62 20 70 72 6f 78 79 2c 20 73 69 6e 63 65 20 74 68 65 79 20 | ansparent.web.proxy,.since.they. |
dcd60 | 61 72 65 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 | are.not.aware.of.the.proxy.setti |
dcd80 | 6e 67 73 2e 00 4e 6f 6e 65 20 6f 66 20 74 68 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 | ngs..None.of.the.operating.syste |
dcda0 | 6d 73 20 68 61 76 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 69 6e 73 74 61 6c 6c 65 | ms.have.client.software.installe |
dcdc0 | 64 20 62 79 20 64 65 66 61 75 6c 74 00 4e 6f 72 6d 61 6c 20 62 75 74 20 73 69 67 6e 69 66 69 63 | d.by.default.Normal.but.signific |
dcde0 | 61 6e 74 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 61 74 | ant.conditions.-.conditions.that |
dce00 | 20 61 72 65 20 6e 6f 74 20 65 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 2c 20 62 75 74 20 74 | .are.not.error.conditions,.but.t |
dce20 | 68 61 74 20 6d 61 79 20 72 65 71 75 69 72 65 20 73 70 65 63 69 61 6c 20 68 61 6e 64 6c 69 6e 67 | hat.may.require.special.handling |
dce40 | 2e 00 4e 6f 74 20 61 6c 6c 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 | ..Not.all.transmit.policies.may. |
dce60 | 62 65 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2c 20 70 61 72 74 69 63 75 6c 61 72 | be.802.3ad.compliant,.particular |
dce80 | 6c 79 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 6d 69 73 6f | ly.in.regards.to.the.packet.miso |
dcea0 | 72 64 65 72 69 6e 67 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 6f 66 20 73 65 63 74 69 6f 6e 20 | rdering.requirements.of.section. |
dcec0 | 34 33 2e 32 2e 34 20 6f 66 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 74 61 6e 64 61 72 64 2e 00 | 43.2.4.of.the.802.3ad.standard.. |
dcee0 | 4e 6f 74 65 20 74 68 61 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 6c 6f 67 20 66 69 6c 65 20 | Note.that.deleting.the.log.file. |
dcf00 | 64 6f 65 73 20 6e 6f 74 20 73 74 6f 70 20 74 68 65 20 73 79 73 74 65 6d 20 66 72 6f 6d 20 6c 6f | does.not.stop.the.system.from.lo |
dcf20 | 67 67 69 6e 67 20 65 76 65 6e 74 73 2e 20 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 63 6f | gging.events..If.you.use.this.co |
dcf40 | 6d 6d 61 6e 64 20 77 68 69 6c 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 20 6c 6f 67 67 69 6e | mmand.while.the.system.is.loggin |
dcf60 | 67 20 65 76 65 6e 74 73 2c 20 6f 6c 64 20 6c 6f 67 20 65 76 65 6e 74 73 20 77 69 6c 6c 20 62 65 | g.events,.old.log.events.will.be |
dcf80 | 20 64 65 6c 65 74 65 64 2c 20 62 75 74 20 65 76 65 6e 74 73 20 61 66 74 65 72 20 74 68 65 20 64 | .deleted,.but.events.after.the.d |
dcfa0 | 65 6c 65 74 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 | elete.operation.will.be.recorded |
dcfc0 | 20 69 6e 20 74 68 65 20 6e 65 77 20 66 69 6c 65 2e 20 54 6f 20 64 65 6c 65 74 65 20 74 68 65 20 | .in.the.new.file..To.delete.the. |
dcfe0 | 66 69 6c 65 20 61 6c 74 6f 67 65 74 68 65 72 2c 20 66 69 72 73 74 20 64 65 6c 65 74 65 20 6c 6f | file.altogether,.first.delete.lo |
dd000 | 67 67 69 6e 67 20 74 6f 20 74 68 65 20 66 69 6c 65 20 75 73 69 6e 67 20 73 79 73 74 65 6d 20 73 | gging.to.the.file.using.system.s |
dd020 | 79 73 6c 6f 67 20 3a 72 65 66 3a 60 63 75 73 74 6f 6d 2d 66 69 6c 65 60 20 63 6f 6d 6d 61 6e 64 | yslog.:ref:`custom-file`.command |
dd040 | 2c 20 61 6e 64 20 74 68 65 6e 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c 65 2e 00 4e 6f 74 65 | ,.and.then.delete.the.file..Note |
dd060 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 | .the.command.with.the.public.key |
dd080 | 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 52 49 47 48 54 20 70 | .(set.pki.key-pair.ipsec-RIGHT.p |
dd0a0 | 75 62 6c 69 63 20 6b 65 79 20 27 46 41 41 4f 43 41 51 38 41 4d 49 49 2e 2e 2e 27 29 2e 00 4e 6f | ublic.key.'FAAOCAQ8AMII...')..No |
dd0c0 | 74 65 3a 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 73 20 64 6f 6e 27 74 20 6d 61 74 74 | te:.certificate.names.don't.matt |
dd0e0 | 65 72 2c 20 77 65 20 75 73 65 20 27 6f 70 65 6e 76 70 6e 2d 6c 6f 63 61 6c 27 20 61 6e 64 20 27 | er,.we.use.'openvpn-local'.and.' |
dd100 | 6f 70 65 6e 76 70 6e 2d 72 65 6d 6f 74 65 27 20 62 75 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 | openvpn-remote'.but.they.can.be. |
dd120 | 61 72 62 69 74 72 61 72 79 2e 00 4e 6f 74 69 63 65 00 4e 6f 77 20 63 6f 6e 66 69 67 75 72 65 20 | arbitrary..Notice.Now.configure. |
dd140 | 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 73 65 72 76 69 63 65 20 6f 6e 20 60 60 72 6f 75 74 | conntrack-sync.service.on.``rout |
dd160 | 65 72 31 60 60 20 2a 2a 61 6e 64 2a 2a 20 60 60 72 6f 75 74 65 72 32 60 60 00 4e 6f 77 20 74 68 | er1``.**and**.``router2``.Now.th |
dd180 | 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e | e.noted.public.keys.should.be.en |
dd1a0 | 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 4e | tered.on.the.opposite.routers..N |
dd1c0 | 6f 77 20 77 65 20 61 64 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 63 6f 70 | ow.we.add.the.option.to.the.scop |
dd1e0 | 65 2c 20 61 64 61 70 74 20 74 6f 20 79 6f 75 72 20 73 65 74 75 70 00 4e 6f 77 20 77 65 20 6e 65 | e,.adapt.to.your.setup.Now.we.ne |
dd200 | 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 65 72 76 65 72 20 6e 65 74 77 6f 72 6b | ed.to.specify.the.server.network |
dd220 | 20 73 65 74 74 69 6e 67 73 2e 20 49 6e 20 61 6c 6c 20 63 61 73 65 73 20 77 65 20 6e 65 65 64 20 | .settings..In.all.cases.we.need. |
dd240 | 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 75 62 6e 65 74 20 66 6f 72 20 63 6c 69 65 6e 74 | to.specify.the.subnet.for.client |
dd260 | 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 2e 20 53 69 6e 63 65 20 77 65 20 77 61 6e 74 | .tunnel.endpoints..Since.we.want |
dd280 | 20 63 6c 69 65 6e 74 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 | .clients.to.access.a.specific.ne |
dd2a0 | 74 77 6f 72 6b 20 62 65 68 69 6e 64 20 6f 75 72 20 72 6f 75 74 65 72 2c 20 77 65 20 77 69 6c 6c | twork.behind.our.router,.we.will |
dd2c0 | 20 75 73 65 20 61 20 70 75 73 68 2d 72 6f 75 74 65 20 6f 70 74 69 6f 6e 20 66 6f 72 20 69 6e 73 | .use.a.push-route.option.for.ins |
dd2e0 | 74 61 6c 6c 69 6e 67 20 74 68 61 74 20 72 6f 75 74 65 20 6f 6e 20 63 6c 69 65 6e 74 73 2e 00 4e | talling.that.route.on.clients..N |
dd300 | 6f 77 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c | ow.when.connecting.the.user.will |
dd320 | 20 66 69 72 73 74 20 62 65 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 | .first.be.asked.for.the.password |
dd340 | 20 61 6e 64 20 74 68 65 6e 20 74 68 65 20 4f 54 50 20 6b 65 79 2e 00 4e 6f 77 20 79 6f 75 20 61 | .and.then.the.OTP.key..Now.you.a |
dd360 | 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 54 68 65 20 6b 65 79 | re.ready.to.setup.IPsec..The.key |
dd380 | 20 70 6f 69 6e 74 73 3a 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 | .points:.Now.you.are.ready.to.se |
dd3a0 | 74 75 70 20 49 50 73 65 63 2e 20 59 6f 75 27 6c 6c 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 6e | tup.IPsec..You'll.need.to.use.an |
dd3c0 | 20 49 44 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 70 | .ID.instead.of.address.for.the.p |
dd3e0 | 65 65 72 2e 00 4e 75 6d 62 65 72 20 6f 66 20 61 6e 74 65 6e 6e 61 73 20 6f 6e 20 74 68 69 73 20 | eer..Number.of.antennas.on.this. |
dd400 | 63 61 72 64 00 4e 75 6d 62 65 72 20 6f 66 20 62 69 74 73 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 | card.Number.of.bits.of.client.IP |
dd420 | 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 | v4.address.to.pass.when.sending. |
dd440 | 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 | EDNS.Client.Subnet.address.infor |
dd460 | 6d 61 74 69 6f 6e 2e 00 4e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 65 73 20 74 6f 20 62 65 20 64 69 | mation..Number.of.lines.to.be.di |
dd480 | 73 70 6c 61 79 65 64 2c 20 64 65 66 61 75 6c 74 20 31 30 00 4f 53 50 46 00 4f 53 50 46 20 53 52 | splayed,.default.10.OSPF.OSPF.SR |
dd4a0 | 20 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 53 50 46 20 69 73 20 61 20 77 69 64 65 6c 79 | ..Configuration.OSPF.is.a.widely |
dd4c0 | 20 75 73 65 64 20 49 47 50 20 69 6e 20 6c 61 72 67 65 20 65 6e 74 65 72 70 72 69 73 65 20 6e 65 | .used.IGP.in.large.enterprise.ne |
dd4e0 | 74 77 6f 72 6b 73 2e 00 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 6e 6f 72 | tworks..OSPF.routing.devices.nor |
dd500 | 6d 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 20 74 68 65 69 72 20 6e 65 69 67 68 62 6f 72 73 20 64 | mally.discover.their.neighbors.d |
dd520 | 79 6e 61 6d 69 63 61 6c 6c 79 20 62 79 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 74 68 65 20 62 | ynamically.by.listening.to.the.b |
dd540 | 72 6f 61 64 63 61 73 74 20 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 68 65 6c 6c 6f 20 70 61 63 6b | roadcast.or.multicast.hello.pack |
dd560 | 65 74 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 42 65 63 61 75 73 65 20 61 6e 20 4e | ets.on.the.network..Because.an.N |
dd580 | 42 4d 41 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 62 72 6f | BMA.network.does.not.support.bro |
dd5a0 | 61 64 63 61 73 74 20 28 6f 72 20 6d 75 6c 74 69 63 61 73 74 29 2c 20 74 68 65 20 64 65 76 69 63 | adcast.(or.multicast),.the.devic |
dd5c0 | 65 20 63 61 6e 6e 6f 74 20 64 69 73 63 6f 76 65 72 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 | e.cannot.discover.its.neighbors. |
dd5e0 | 64 79 6e 61 6d 69 63 61 6c 6c 79 2c 20 73 6f 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 | dynamically,.so.you.must.configu |
dd600 | 72 65 20 61 6c 6c 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 69 63 61 6c 6c 79 2e | re.all.the.neighbors.statically. |
dd620 | 00 4f 53 50 46 76 32 20 28 49 50 76 34 29 00 4f 53 50 46 76 33 20 28 49 50 76 36 29 00 4f 54 50 | .OSPFv2.(IPv4).OSPFv3.(IPv6).OTP |
dd640 | 2d 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 00 4f 66 66 6c 6f 61 64 69 6e 67 00 4f 66 66 73 65 | -key.generation.Offloading.Offse |
dd660 | 74 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 20 69 6e 20 73 65 63 6f | t.of.the.client's.subnet.in.seco |
dd680 | 6e 64 73 20 66 72 6f 6d 20 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 | nds.from.Coordinated.Universal.T |
dd6a0 | 69 6d 65 20 28 55 54 43 29 00 4f 66 74 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 | ime.(UTC).Often.we.need.to.embed |
dd6c0 | 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 2e 20 49 74 | .one.policy.into.another.one..It |
dd6e0 | 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 73 6f 20 6f 6e 20 63 6c 61 73 73 66 75 | .is.possible.to.do.so.on.classfu |
dd700 | 6c 20 70 6f 6c 69 63 69 65 73 2c 20 62 79 20 61 74 74 61 63 68 69 6e 67 20 61 20 6e 65 77 20 70 | l.policies,.by.attaching.a.new.p |
dd720 | 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 | olicy.into.a.class..For.instance |
dd740 | 2c 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 | ,.you.might.want.to.apply.differ |
dd760 | 65 6e 74 20 70 6f 6c 69 63 69 65 73 20 74 6f 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 63 6c | ent.policies.to.the.different.cl |
dd780 | 61 73 73 65 73 20 6f 66 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 79 6f | asses.of.a.Round-Robin.policy.yo |
dd7a0 | 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4f 66 74 65 6e 20 79 6f 75 20 77 69 6c | u.have.configured..Often.you.wil |
dd7c0 | 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 2a 64 | l.also.have.to.configure.your.*d |
dd7e0 | 65 66 61 75 6c 74 2a 20 74 72 61 66 66 69 63 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 | efault*.traffic.in.the.same.way. |
dd800 | 79 6f 75 20 64 6f 20 77 69 74 68 20 61 20 63 6c 61 73 73 2e 20 2a 44 65 66 61 75 6c 74 2a 20 63 | you.do.with.a.class..*Default*.c |
dd820 | 61 6e 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 6c 61 73 73 20 61 73 20 69 74 20 62 | an.be.considered.a.class.as.it.b |
dd840 | 65 68 61 76 65 73 20 6c 69 6b 65 20 74 68 61 74 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e | ehaves.like.that..It.contains.an |
dd860 | 79 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 69 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 | y.traffic.that.did.not.match.any |
dd880 | 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 63 6c 61 73 73 65 73 2c 20 73 6f 20 69 74 20 69 | .of.the.defined.classes,.so.it.i |
dd8a0 | 73 20 6c 69 6b 65 20 61 6e 20 6f 70 65 6e 20 63 6c 61 73 73 2c 20 61 20 63 6c 61 73 73 20 77 69 | s.like.an.open.class,.a.class.wi |
dd8c0 | 74 68 6f 75 74 20 6d 61 74 63 68 69 6e 67 20 66 69 6c 74 65 72 73 2e 00 4f 6e 20 61 63 74 69 76 | thout.matching.filters..On.activ |
dd8e0 | 65 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 62 6f 74 68 20 73 69 64 65 73 2c 20 79 6f 75 | e.router.run:.On.both.sides,.you |
dd900 | 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 | .need.to.generate.a.self-signed. |
dd920 | 63 65 72 74 69 66 69 63 61 74 65 2c 20 70 72 65 66 65 72 72 61 62 6c 79 20 75 73 69 6e 67 20 74 | certificate,.preferrably.using.t |
dd940 | 68 65 20 22 65 63 22 20 28 65 6c 6c 69 70 74 69 63 20 63 75 72 76 65 29 20 74 79 70 65 2e 20 59 | he."ec".(elliptic.curve).type..Y |
dd960 | 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 74 68 65 6d 20 62 79 20 65 78 65 63 75 74 69 6e | ou.can.generate.them.by.executin |
dd980 | 67 20 63 6f 6d 6d 61 6e 64 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 63 65 72 | g.command.``run.generate.pki.cer |
dd9a0 | 74 69 66 69 63 61 74 65 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 | tificate.self-signed.install.<na |
dd9c0 | 6d 65 3e 60 60 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e | me>``.in.the.configuration.mode. |
dd9e0 | 20 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 2c 20 69 | .Once.the.command.is.complete,.i |
dda00 | 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 | t.will.add.the.certificate.to.th |
dda20 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 | e.configuration.session,.to.the. |
dda40 | 60 60 70 6b 69 60 60 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 | ``pki``.subtree..You.can.then.re |
dda60 | 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f | view.the.proposed.changes.and.co |
dda80 | 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 20 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 34 | mmit.them..On.low.rates.(below.4 |
ddaa0 | 30 4d 62 69 74 29 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 60 71 75 61 | 0Mbit).you.may.want.to.tune.`qua |
ddac0 | 6e 74 75 6d 60 20 64 6f 77 6e 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 33 30 30 | ntum`.down.to.something.like.300 |
ddae0 | 20 62 79 74 65 73 2e 00 4f 6e 20 6d 6f 73 74 20 73 63 65 6e 61 72 69 6f 73 2c 20 74 68 65 72 65 | .bytes..On.most.scenarios,.there |
ddb00 | 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 73 70 65 63 69 66 69 63 20 70 61 | 's.no.need.to.change.specific.pa |
ddb20 | 72 61 6d 65 74 65 72 73 2c 20 61 6e 64 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 | rameters,.and.using.default.conf |
ddb40 | 69 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 6f 75 67 68 2e 20 42 75 74 20 74 68 65 72 65 20 61 | iguration.is.enough..But.there.a |
ddb60 | 72 65 20 63 61 73 65 73 20 77 65 72 65 20 65 78 74 72 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | re.cases.were.extra.configuratio |
ddb80 | 6e 20 69 73 20 6e 65 65 64 65 64 2e 00 4f 6e 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 20 72 | n.is.needed..On.standby.router.r |
ddba0 | 75 6e 3a 00 4f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 72 65 64 | un:.On.systems.with.multiple.red |
ddbc0 | 75 6e 64 61 6e 74 20 75 70 6c 69 6e 6b 73 20 61 6e 64 20 72 6f 75 74 65 73 2c 20 69 74 27 73 20 | undant.uplinks.and.routes,.it's. |
ddbe0 | 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 75 73 65 20 61 20 64 65 64 69 63 61 74 65 64 20 61 | a.good.idea.to.use.a.dedicated.a |
ddc00 | 64 64 72 65 73 73 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 6e 64 20 64 79 6e 61 6d 69 | ddress.for.management.and.dynami |
ddc20 | 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 73 | c.routing.protocols..However,.as |
ddc40 | 73 69 67 6e 69 6e 67 20 74 68 61 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 70 68 79 73 69 63 | signing.that.address.to.a.physic |
ddc60 | 61 6c 20 6c 69 6e 6b 20 69 73 20 72 69 73 6b 79 3a 20 69 66 20 74 68 61 74 20 6c 69 6e 6b 20 67 | al.link.is.risky:.if.that.link.g |
ddc80 | 6f 65 73 20 64 6f 77 6e 2c 20 74 68 61 74 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 63 6f | oes.down,.that.address.will.beco |
ddca0 | 6d 65 20 69 6e 61 63 63 65 73 73 69 62 6c 65 2e 20 41 20 63 6f 6d 6d 6f 6e 20 73 6f 6c 75 74 69 | me.inaccessible..A.common.soluti |
ddcc0 | 6f 6e 20 69 73 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 | on.is.to.assign.the.management.a |
ddce0 | 64 64 72 65 73 73 20 74 6f 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 61 20 64 75 6d 6d 79 20 | ddress.to.a.loopback.or.a.dummy. |
ddd00 | 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 64 76 65 72 74 69 73 65 20 74 68 61 74 20 61 64 64 | interface.and.advertise.that.add |
ddd20 | 72 65 73 73 20 76 69 61 20 61 6c 6c 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 2c 20 73 6f 20 | ress.via.all.physical.links,.so. |
ddd40 | 74 68 61 74 20 69 74 27 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 68 20 61 6e 79 20 | that.it's.reachable.through.any. |
ddd60 | 6f 66 20 74 68 65 6d 2e 20 53 69 6e 63 65 20 69 6e 20 4c 69 6e 75 78 2d 62 61 73 65 64 20 73 79 | of.them..Since.in.Linux-based.sy |
ddd80 | 73 74 65 6d 73 2c 20 74 68 65 72 65 20 63 61 6e 20 62 65 20 6f 6e 6c 79 20 6f 6e 65 20 6c 6f 6f | stems,.there.can.be.only.one.loo |
ddda0 | 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 27 73 20 62 65 74 74 65 72 20 74 6f 20 | pback.interface,.it's.better.to. |
dddc0 | 75 73 65 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 61 74 20 70 | use.a.dummy.interface.for.that.p |
ddde0 | 75 72 70 6f 73 65 2c 20 73 69 6e 63 65 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c | urpose,.since.they.can.be.added, |
dde00 | 20 72 65 6d 6f 76 65 64 2c 20 61 6e 64 20 74 61 6b 65 6e 20 75 70 20 61 6e 64 20 64 6f 77 6e 20 | .removed,.and.taken.up.and.down. |
dde20 | 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 2e 00 4f 6e 20 74 68 65 20 4c 45 46 54 20 28 73 74 61 74 | independently..On.the.LEFT.(stat |
dde40 | 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 4c 45 46 54 3a 00 4f 6e 20 74 68 65 | ic.address):.On.the.LEFT:.On.the |
dde60 | 20 52 49 47 48 54 20 28 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 | .RIGHT.(dynamic.address):.On.the |
dde80 | 20 52 49 47 48 54 2c 20 73 65 74 75 70 20 62 79 20 61 6e 61 6c 6f 67 79 20 61 6e 64 20 73 77 61 | .RIGHT,.setup.by.analogy.and.swa |
ddea0 | 70 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 65 73 2e 00 4f 6e | p.local.and.remote.addresses..On |
ddec0 | 20 74 68 65 20 52 49 47 48 54 3a 00 4f 6e 20 74 68 65 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 | .the.RIGHT:.On.the.active.router |
ddee0 | 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 68 61 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e | ,.you.should.have.information.in |
ddf00 | 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b | .the.internal-cache.of.conntrack |
ddf20 | 2d 73 79 6e 63 2e 20 54 68 65 20 73 61 6d 65 20 63 75 72 72 65 6e 74 20 61 63 74 69 76 65 20 63 | -sync..The.same.current.active.c |
ddf40 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 | onnections.number.should.be.show |
ddf60 | 6e 20 69 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 74 68 65 20 73 | n.in.the.external-cache.of.the.s |
ddf80 | 74 61 6e 64 62 79 20 72 6f 75 74 65 72 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 | tandby.router.On.the.initiator,. |
ddfa0 | 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 20 6f 70 74 | we.need.to.set.the.remote-id.opt |
ddfc0 | 69 6f 6e 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 49 4b 45 20 | ion.so.that.it.can.identify.IKE. |
ddfe0 | 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 72 72 65 | traffic.from.the.responder.corre |
de000 | 63 74 6c 79 2e 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 73 65 74 20 74 | ctly..On.the.initiator,.we.set.t |
de020 | 68 65 20 70 65 65 72 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 70 75 62 6c 69 63 20 61 64 | he.peer.address.to.its.public.ad |
de040 | 64 72 65 73 73 2c 20 62 75 74 20 6f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 77 65 20 6f | dress,.but.on.the.responder.we.o |
de060 | 6e 6c 79 20 73 65 74 20 74 68 65 20 69 64 2e 00 4f 6e 20 74 68 65 20 6c 61 73 74 20 68 6f 70 20 | nly.set.the.id..On.the.last.hop. |
de080 | 72 6f 75 74 65 72 20 69 66 20 69 74 20 69 73 20 64 65 73 69 72 65 64 20 74 6f 20 6e 6f 74 20 73 | router.if.it.is.desired.to.not.s |
de0a0 | 77 69 74 63 68 20 6f 76 65 72 20 74 6f 20 74 68 65 20 53 50 54 20 74 72 65 65 20 63 6f 6e 66 69 | witch.over.to.the.SPT.tree.confi |
de0c0 | 67 75 72 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 4f 6e 20 74 68 65 20 72 65 73 70 6f 6e | gure.this.command..On.the.respon |
de0e0 | 64 65 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 20 69 64 | der,.we.need.to.set.the.local.id |
de100 | 20 73 6f 20 74 68 61 74 20 69 6e 69 74 69 61 74 6f 72 20 63 61 6e 20 6b 6e 6f 77 20 77 68 6f 27 | .so.that.initiator.can.know.who' |
de120 | 73 20 74 61 6c 6b 69 6e 67 20 74 6f 20 69 74 20 66 6f 72 20 74 68 65 20 70 6f 69 6e 74 20 23 33 | s.talking.to.it.for.the.point.#3 |
de140 | 20 74 6f 20 77 6f 72 6b 2e 00 4f 6e 63 65 20 61 20 63 6c 61 73 73 20 68 61 73 20 61 20 66 69 6c | .to.work..Once.a.class.has.a.fil |
de160 | 74 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 | ter.configured,.you.will.also.ha |
de180 | 76 65 20 74 6f 20 64 65 66 69 6e 65 20 77 68 61 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f | ve.to.define.what.you.want.to.do |
de1a0 | 20 77 69 74 68 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 61 74 20 63 6c 61 73 73 2c | .with.the.traffic.of.that.class, |
de1c0 | 20 77 68 61 74 20 73 70 65 63 69 66 69 63 20 54 72 61 66 66 69 63 2d 43 6f 6e 74 72 6f 6c 20 74 | .what.specific.Traffic-Control.t |
de1e0 | 72 65 61 74 6d 65 6e 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 69 76 65 20 69 74 2e 20 59 6f | reatment.you.want.to.give.it..Yo |
de200 | 75 20 77 69 6c 6c 20 68 61 76 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 73 73 69 62 69 6c 69 74 | u.will.have.different.possibilit |
de220 | 69 65 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 54 72 61 66 66 69 63 20 50 6f 6c | ies.depending.on.the.Traffic.Pol |
de240 | 69 63 79 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 2e 00 4f 6e 63 65 20 61 20 | icy.you.are.configuring..Once.a. |
de260 | 6e 65 69 67 68 62 6f 72 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2c 20 74 68 65 20 65 6e 74 | neighbor.has.been.found,.the.ent |
de280 | 72 79 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 76 61 6c 69 64 20 66 6f 72 | ry.is.considered.to.be.valid.for |
de2a0 | 20 61 74 20 6c 65 61 73 74 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 74 69 6d 65 | .at.least.for.this.specific.time |
de2c0 | 2e 20 41 6e 20 65 6e 74 72 79 27 73 20 76 61 6c 69 64 69 74 79 20 77 69 6c 6c 20 62 65 20 65 78 | ..An.entry's.validity.will.be.ex |
de2e0 | 74 65 6e 64 65 64 20 69 66 20 69 74 20 72 65 63 65 69 76 65 73 20 70 6f 73 69 74 69 76 65 20 66 | tended.if.it.receives.positive.f |
de300 | 65 65 64 62 61 63 6b 20 66 72 6f 6d 20 68 69 67 68 65 72 20 6c 65 76 65 6c 20 70 72 6f 74 6f 63 | eedback.from.higher.level.protoc |
de320 | 6f 6c 73 2e 00 4f 6e 63 65 20 61 20 72 6f 75 74 65 20 69 73 20 61 73 73 65 73 73 65 64 20 61 20 | ols..Once.a.route.is.assessed.a. |
de340 | 70 65 6e 61 6c 74 79 2c 20 74 68 65 20 70 65 6e 61 6c 74 79 20 69 73 20 64 65 63 72 65 61 73 65 | penalty,.the.penalty.is.decrease |
de360 | 64 20 62 79 20 68 61 6c 66 20 65 61 63 68 20 74 69 6d 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 | d.by.half.each.time.a.predefined |
de380 | 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 65 6c 61 70 73 65 73 20 28 68 61 6c 66 2d 6c 69 | .amount.of.time.elapses.(half-li |
de3a0 | 66 65 2d 74 69 6d 65 29 2e 20 57 68 65 6e 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 | fe-time)..When.the.accumulated.p |
de3c0 | 65 6e 61 6c 74 69 65 73 20 66 61 6c 6c 20 62 65 6c 6f 77 20 61 20 70 72 65 64 65 66 69 6e 65 64 | enalties.fall.below.a.predefined |
de3e0 | 20 74 68 72 65 73 68 6f 6c 64 20 28 72 65 75 73 65 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f | .threshold.(reuse-value),.the.ro |
de400 | 75 74 65 20 69 73 20 75 6e 73 75 70 70 72 65 73 73 65 64 20 61 6e 64 20 61 64 64 65 64 20 62 61 | ute.is.unsuppressed.and.added.ba |
de420 | 63 6b 20 69 6e 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 4f | ck.into.the.BGP.routing.table..O |
de440 | 6e 63 65 20 61 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 20 69 73 20 63 72 65 61 74 65 64 2c | nce.a.traffic-policy.is.created, |
de460 | 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 69 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 | .you.can.apply.it.to.an.interfac |
de480 | 65 3a 00 4f 6e 63 65 20 63 72 65 61 74 65 64 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 50 | e:.Once.created.in.the.system,.P |
de4a0 | 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 | seudo-Ethernet.interfaces.can.be |
de4c0 | 20 72 65 66 65 72 65 6e 63 65 64 20 69 6e 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 77 61 | .referenced.in.the.exact.same.wa |
de4e0 | 79 20 61 73 20 6f 74 68 65 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | y.as.other.Ethernet.interfaces.. |
de500 | 4e 6f 74 65 73 20 61 62 6f 75 74 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e | Notes.about.using.Pseudo-.Ethern |
de520 | 65 74 20 69 6e 74 65 72 66 61 63 65 73 3a 00 4f 6e 63 65 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 | et.interfaces:.Once.flow.account |
de540 | 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 | ing.is.configured.on.an.interfac |
de560 | 65 73 20 69 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 64 69 | es.it.provides.the.ability.to.di |
de580 | 73 70 6c 61 79 20 63 61 70 74 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 69 | splay.captured.network.traffic.i |
de5a0 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | nformation.for.all.configured.in |
de5c0 | 74 65 72 66 61 63 65 73 2e 00 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f | terfaces..Once.the.command.is.co |
de5e0 | 6d 70 6c 65 74 65 64 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 | mpleted,.it.will.add.the.certifi |
de600 | 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f | cate.to.the.configuration.sessio |
de620 | 6e 2c 20 74 6f 20 74 68 65 20 70 6b 69 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 | n,.to.the.pki.subtree..You.can.t |
de640 | 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 | hen.review.the.proposed.changes. |
de660 | 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 63 65 20 74 68 65 20 66 69 72 73 74 20 | and.commit.them..Once.the.first. |
de680 | 70 61 63 6b 65 74 20 6f 66 20 74 68 65 20 66 6c 6f 77 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 | packet.of.the.flow.successfully. |
de6a0 | 67 6f 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 | goes.through.the.IP.forwarding.p |
de6c0 | 61 74 68 20 28 62 6c 61 63 6b 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2c 20 66 72 6f 6d 20 74 | ath.(black.circles.path),.from.t |
de6e0 | 68 65 20 73 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 6f 6e 2c 20 79 6f 75 20 6d 69 67 68 74 20 64 | he.second.packet.on,.you.might.d |
de700 | 65 63 69 64 65 20 74 6f 20 6f 66 66 6c 6f 61 64 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 74 68 65 | ecide.to.offload.the.flow.to.the |
de720 | 20 66 6c 6f 77 74 61 62 6c 65 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 72 75 6c 65 73 65 74 2e | .flowtable.through.your.ruleset. |
de740 | 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 70 72 | .The.flowtable.infrastructure.pr |
de760 | 6f 76 69 64 65 73 20 61 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 61 6c 6c 6f 77 73 | ovides.a.rule.action.that.allows |
de780 | 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 77 68 65 6e 20 74 6f 20 61 64 64 20 61 20 66 6c | .you.to.specify.when.to.add.a.fl |
de7a0 | 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 4f 6e 20 66 6f 72 77 61 72 64 20 | ow.to.the.flowtable.(On.forward. |
de7c0 | 66 69 6c 74 65 72 69 6e 67 2c 20 72 65 64 20 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 00 | filtering,.red.circle.number.6). |
de7e0 | 4f 6e 63 65 20 74 68 65 20 6c 6f 63 61 6c 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 60 | Once.the.local.tunnel.endpoint.` |
de800 | 60 73 65 74 20 73 65 72 76 69 63 65 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 67 61 74 65 77 61 | `set.service.pppoe-server.gatewa |
de820 | 79 2d 61 64 64 72 65 73 73 20 27 31 30 2e 31 2e 31 2e 32 27 60 60 20 68 61 73 20 62 65 65 6e 20 | y-address.'10.1.1.2'``.has.been. |
de840 | 64 65 66 69 6e 65 64 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 63 61 6e 20 | defined,.the.client.IP.pool.can. |
de860 | 62 65 20 65 69 74 68 65 72 20 64 65 66 69 6e 65 64 20 61 73 20 61 20 72 61 6e 67 65 20 6f 72 20 | be.either.defined.as.a.range.or. |
de880 | 61 73 20 73 75 62 6e 65 74 20 75 73 69 6e 67 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 20 49 | as.subnet.using.CIDR.notation..I |
de8a0 | 66 20 74 68 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2c 20 6d 75 6c | f.the.CIDR.notation.is.used,.mul |
de8c0 | 74 69 70 6c 65 20 73 75 62 6e 65 74 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 68 69 63 68 | tiple.subnets.can.be.setup.which |
de8e0 | 20 61 72 65 20 75 73 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 4f 6e 63 65 20 74 68 65 | .are.used.sequentially..Once.the |
de900 | 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 61 72 65 20 73 65 74 20 66 6f 72 20 61 20 63 6c | .matching.rules.are.set.for.a.cl |
de920 | 61 73 73 2c 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 68 | ass,.you.can.start.configuring.h |
de940 | 6f 77 20 79 6f 75 20 77 61 6e 74 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 | ow.you.want.matching.traffic.to. |
de960 | 62 65 68 61 76 65 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 | behave..Once.the.user.is.connect |
de980 | 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 | ed,.the.user.session.is.using.th |
de9a0 | 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 | e.set.limits.and.can.be.displaye |
de9c0 | 64 20 76 69 61 20 27 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e | d.via.'show.pppoe-server.session |
de9e0 | 73 27 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | s'..Once.the.user.is.connected,. |
dea00 | 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 | the.user.session.is.using.the.se |
dea20 | 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 | t.limits.and.can.be.displayed.vi |
dea40 | 61 20 60 60 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 | a.``show.pppoe-server.sessions`` |
dea60 | 2e 00 4f 6e 63 65 20 79 6f 75 20 63 6f 6d 6d 69 74 20 74 68 65 20 61 62 6f 76 65 20 63 68 61 6e | ..Once.you.commit.the.above.chan |
dea80 | 67 65 73 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 20 63 6f 6e 66 69 67 20 66 69 6c 65 | ges.you.can.create.a.config.file |
deaa0 | 20 69 6e 20 74 68 65 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6f 63 73 65 72 76 2f 63 6f 6e 66 | .in.the./config/auth/ocserv/conf |
deac0 | 69 67 2d 70 65 72 2d 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 20 74 68 61 74 20 6d 61 74 63 68 | ig-per-user.directory.that.match |
deae0 | 65 73 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 66 20 61 20 75 73 65 72 20 79 6f 75 20 68 61 76 65 | es.a.username.of.a.user.you.have |
deb00 | 20 63 72 65 61 74 65 64 20 65 2e 67 2e 20 22 74 73 74 22 2e 20 4e 6f 77 20 77 68 65 6e 20 6c 6f | .created.e.g.."tst"..Now.when.lo |
deb20 | 67 67 69 6e 67 20 69 6e 20 77 69 74 68 20 74 68 65 20 22 74 73 74 22 20 75 73 65 72 20 74 68 65 | gging.in.with.the."tst".user.the |
deb40 | 20 63 6f 6e 66 69 67 20 6f 70 74 69 6f 6e 73 20 79 6f 75 20 73 65 74 20 69 6e 20 74 68 69 73 20 | .config.options.you.set.in.this. |
deb60 | 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 | file.will.be.loaded..Once.you.ha |
deb80 | 76 65 20 61 6e 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 65 64 2c | ve.an.Ethernet.device.connected, |
deba0 | 20 69 2e 65 2e 20 60 65 74 68 30 60 2c 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 | .i.e..`eth0`,.then.you.can.confi |
debc0 | 67 75 72 65 20 69 74 20 74 6f 20 6f 70 65 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f | gure.it.to.open.the.PPPoE.sessio |
debe0 | 6e 20 66 6f 72 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 | n.for.you.and.your.DSL.Transceiv |
dec00 | 65 72 20 28 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 29 20 6a 75 73 74 20 61 63 74 73 20 74 6f 20 74 | er.(Modem/Router).just.acts.to.t |
dec20 | 72 61 6e 73 6c 61 74 65 20 79 6f 75 72 20 6d 65 73 73 61 67 65 73 20 69 6e 20 61 20 77 61 79 20 | ranslate.your.messages.in.a.way. |
dec40 | 74 68 61 74 20 76 44 53 4c 2f 61 44 53 4c 20 75 6e 64 65 72 73 74 61 6e 64 73 2e 00 4f 6e 63 65 | that.vDSL/aDSL.understands..Once |
dec60 | 20 79 6f 75 20 68 61 76 65 20 73 65 74 75 70 20 79 6f 75 72 20 53 53 54 50 20 73 65 72 76 65 72 | .you.have.setup.your.SSTP.server |
dec80 | 20 74 68 65 72 65 20 63 6f 6d 65 73 20 74 68 65 20 74 69 6d 65 20 74 6f 20 64 6f 20 73 6f 6d 65 | .there.comes.the.time.to.do.some |
deca0 | 20 62 61 73 69 63 20 74 65 73 74 69 6e 67 2e 20 54 68 65 20 4c 69 6e 75 78 20 63 6c 69 65 6e 74 | .basic.testing..The.Linux.client |
decc0 | 20 75 73 65 64 20 66 6f 72 20 74 65 73 74 69 6e 67 20 69 73 20 63 61 6c 6c 65 64 20 73 73 74 70 | .used.for.testing.is.called.sstp |
dece0 | 63 5f 2e 20 73 73 74 70 63 5f 20 72 65 71 75 69 72 65 73 20 61 20 50 50 50 20 63 6f 6e 66 69 67 | c_..sstpc_.requires.a.PPP.config |
ded00 | 75 72 61 74 69 6f 6e 2f 70 65 65 72 20 66 69 6c 65 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 | uration/peer.file..Once.your.rou |
ded20 | 74 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 | ters.are.configured.to.reject.RP |
ded40 | 4b 49 2d 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 | KI-invalid.prefixes,.you.can.tes |
ded60 | 74 20 77 68 65 74 68 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 | t.whether.the.configuration.is.w |
ded80 | 6f 72 6b 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 75 73 69 6e 67 20 74 68 65 20 60 52 49 50 45 | orking.correctly.using.the.`RIPE |
deda0 | 20 4c 61 62 73 20 52 50 4b 49 20 54 65 73 74 60 5f 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 74 | .Labs.RPKI.Test`_.experimental.t |
dedc0 | 6f 6f 6c 2e 00 4f 6e 65 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 20 77 69 74 68 | ool..One.Type-3.summary-LSA.with |
dede0 | 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 20 3c 45 2e 46 2e 47 2e 48 2f 4d 3e 20 69 73 20 61 6e 6e | .routing.info.<E.F.G.H/M>.is.ann |
dee00 | 6f 75 6e 63 65 64 20 69 6e 74 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 66 20 64 65 66 | ounced.into.backbone.area.if.def |
dee20 | 69 6e 65 64 20 61 72 65 61 20 63 6f 6e 74 61 69 6e 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 | ined.area.contains.at.least.one. |
dee40 | 69 6e 74 72 61 2d 61 72 65 61 20 6e 65 74 77 6f 72 6b 20 28 69 2e 65 2e 20 64 65 73 63 72 69 62 | intra-area.network.(i.e..describ |
dee60 | 65 64 20 77 69 74 68 20 72 6f 75 74 65 72 2d 4c 53 41 20 6f 72 20 6e 65 74 77 6f 72 6b 2d 4c 53 | ed.with.router-LSA.or.network-LS |
dee80 | 41 29 20 66 72 6f 6d 20 72 61 6e 67 65 20 3c 41 2e 42 2e 43 2e 44 2f 4d 3e 2e 20 54 68 69 73 20 | A).from.range.<A.B.C.D/M>..This. |
deea0 | 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e | command.makes.sense.in.ABR.only. |
deec0 | 00 4f 6e 65 20 69 6d 70 6c 69 63 69 74 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 65 78 69 73 74 73 | .One.implicit.environment.exists |
deee0 | 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 69 6d 70 6f 72 74 61 6e 74 20 66 65 61 74 75 72 65 73 20 | ..One.of.the.important.features. |
def00 | 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 66 72 | built.on.top.of.the.Netfilter.fr |
def20 | 61 6d 65 77 6f 72 6b 20 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 2e 20 | amework.is.connection.tracking.. |
def40 | 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 20 6b | Connection.tracking.allows.the.k |
def60 | 65 72 6e 65 6c 20 74 6f 20 6b 65 65 70 20 74 72 61 63 6b 20 6f 66 20 61 6c 6c 20 6c 6f 67 69 63 | ernel.to.keep.track.of.all.logic |
def80 | 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 72 20 73 65 73 73 69 6f | al.network.connections.or.sessio |
defa0 | 6e 73 2c 20 61 6e 64 20 74 68 65 72 65 62 79 20 72 65 6c 61 74 65 20 61 6c 6c 20 6f 66 20 74 68 | ns,.and.thereby.relate.all.of.th |
defc0 | 65 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 6d 61 79 20 6d 61 6b 65 20 75 70 20 74 68 61 74 | e.packets.which.may.make.up.that |
defe0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 41 54 20 72 65 6c 69 65 73 20 6f 6e 20 74 68 69 73 20 | .connection..NAT.relies.on.this. |
df000 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 61 6c 6c 20 72 65 6c | information.to.translate.all.rel |
df020 | 61 74 65 64 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 2c 20 61 6e | ated.packets.in.the.same.way,.an |
df040 | 64 20 69 70 74 61 62 6c 65 73 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 | d.iptables.can.use.this.informat |
df060 | 69 6f 6e 20 74 6f 20 61 63 74 20 61 73 20 61 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c | ion.to.act.as.a.stateful.firewal |
df080 | 6c 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 75 73 65 73 20 6f 66 20 46 61 69 72 20 51 75 65 75 65 | l..One.of.the.uses.of.Fair.Queue |
df0a0 | 20 6d 69 67 68 74 20 62 65 20 74 68 65 20 6d 69 74 69 67 61 74 69 6f 6e 20 6f 66 20 44 65 6e 69 | .might.be.the.mitigation.of.Deni |
df0c0 | 61 6c 20 6f 66 20 53 65 72 76 69 63 65 20 61 74 74 61 63 6b 73 2e 00 4f 6e 6c 79 20 38 30 32 2e | al.of.Service.attacks..Only.802. |
df0e0 | 31 51 2d 74 61 67 67 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 63 63 65 70 74 65 64 20 6f | 1Q-tagged.packets.are.accepted.o |
df100 | 6e 20 45 74 68 65 72 6e 65 74 20 76 69 66 73 2e 00 4f 6e 6c 79 20 56 52 52 50 20 69 73 20 73 75 | n.Ethernet.vifs..Only.VRRP.is.su |
df120 | 70 70 6f 72 74 65 64 2e 20 52 65 71 75 69 72 65 64 20 6f 70 74 69 6f 6e 2e 00 4f 6e 6c 79 20 61 | pported..Required.option..Only.a |
df140 | 6c 6c 6f 77 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 | llow.certain.IP.addresses.or.pre |
df160 | 66 69 78 65 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 68 74 74 70 73 20 77 65 62 73 65 72 | fixes.to.access.the.https.webser |
df180 | 76 65 72 2e 00 4f 6e 6c 79 20 69 6e 20 74 68 65 20 73 6f 75 72 63 65 20 63 72 69 74 65 72 69 61 | ver..Only.in.the.source.criteria |
df1a0 | 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 6d 61 63 2d 61 64 64 72 65 73 73 2e | ,.you.can.specify.a.mac-address. |
df1c0 | 00 4f 6e 6c 79 20 6f 6e 65 20 53 52 47 42 20 61 6e 64 20 64 65 66 61 75 6c 74 20 53 50 46 20 41 | .Only.one.SRGB.and.default.SPF.A |
df1e0 | 6c 67 6f 72 69 74 68 6d 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 4f 6e 6c 79 20 72 65 71 75 65 | lgorithm.is.supported.Only.reque |
df200 | 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 20 73 65 72 76 | st.an.address.from.the.DHCP.serv |
df220 | 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 72 65 71 75 65 73 74 20 61 20 64 65 66 61 75 6c 74 20 | er.but.do.not.request.a.default. |
df240 | 67 61 74 65 77 61 79 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 | gateway..Only.request.an.address |
df260 | 20 66 72 6f 6d 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f | .from.the.PPPoE.server.but.do.no |
df280 | 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c | t.install.any.default.route..Onl |
df2a0 | 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 53 53 | y.request.an.address.from.the.SS |
df2c0 | 54 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 | TP.server.but.do.not.install.any |
df2e0 | 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 74 68 65 20 74 79 70 65 20 28 60 | .default.route..Only.the.type.(` |
df300 | 60 73 73 68 2d 72 73 61 60 60 29 20 61 6e 64 20 74 68 65 20 6b 65 79 20 28 60 60 41 41 41 42 33 | `ssh-rsa``).and.the.key.(``AAAB3 |
df320 | 4e 2e 2e 2e 60 60 29 20 61 72 65 20 75 73 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 | N...``).are.used..Note.that.the. |
df340 | 6b 65 79 20 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 62 65 20 73 65 76 65 72 61 6c 20 68 75 6e 64 | key.will.usually.be.several.hund |
df360 | 72 65 64 20 63 68 61 72 61 63 74 65 72 73 20 6c 6f 6e 67 2c 20 61 6e 64 20 79 6f 75 20 77 69 6c | red.characters.long,.and.you.wil |
df380 | 6c 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 20 69 74 2e 20 53 6f 6d | l.need.to.copy.and.paste.it..Som |
df3a0 | 65 20 74 65 72 6d 69 6e 61 6c 20 65 6d 75 6c 61 74 6f 72 73 20 6d 61 79 20 61 63 63 69 64 65 6e | e.terminal.emulators.may.acciden |
df3c0 | 74 61 6c 6c 79 20 73 70 6c 69 74 20 74 68 69 73 20 6f 76 65 72 20 73 65 76 65 72 61 6c 20 6c 69 | tally.split.this.over.several.li |
df3e0 | 6e 65 73 2e 20 42 65 20 61 74 74 65 6e 74 69 76 65 20 77 68 65 6e 20 79 6f 75 20 70 61 73 74 65 | nes..Be.attentive.when.you.paste |
df400 | 20 69 74 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 70 61 73 74 65 73 20 61 73 20 61 20 73 69 6e | .it.that.it.only.pastes.as.a.sin |
df420 | 67 6c 65 20 6c 69 6e 65 2e 20 54 68 65 20 74 68 69 72 64 20 70 61 72 74 20 69 73 20 73 69 6d 70 | gle.line..The.third.part.is.simp |
df440 | 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 2c 20 61 6e 64 20 69 73 20 66 6f 72 20 79 6f 75 | ly.an.identifier,.and.is.for.you |
df460 | 72 20 6f 77 6e 20 72 65 66 65 72 65 6e 63 65 2e 00 4f 6e 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 | r.own.reference..Only.works.with |
df480 | 20 61 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 66 6c | .a.VXLAN.device.with.external.fl |
df4a0 | 61 67 20 73 65 74 2e 00 4f 70 2d 6d 6f 64 65 20 63 68 65 63 6b 20 76 69 72 74 75 61 6c 2d 73 65 | ag.set..Op-mode.check.virtual-se |
df4c0 | 72 76 65 72 20 73 74 61 74 75 73 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 00 4f 70 65 6e 43 6f 6e 6e | rver.status.OpenConnect.OpenConn |
df4e0 | 65 63 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 73 65 6e 64 20 61 63 | ect.can.be.configured.to.send.ac |
df500 | 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 20 52 41 44 49 55 53 | counting.information.to.a.RADIUS |
df520 | 20 73 65 72 76 65 72 20 74 6f 20 63 61 70 74 75 72 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 | .server.to.capture.user.session. |
df540 | 64 61 74 61 20 73 75 63 68 20 61 73 20 74 69 6d 65 20 6f 66 20 63 6f 6e 6e 65 63 74 2f 64 69 73 | data.such.as.time.of.connect/dis |
df560 | 63 6f 6e 6e 65 63 74 2c 20 64 61 74 61 20 74 72 61 6e 73 66 65 72 72 65 64 2c 20 61 6e 64 20 73 | connect,.data.transferred,.and.s |
df580 | 6f 20 6f 6e 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 73 65 72 76 65 72 20 6d 61 74 63 68 65 73 | o.on..OpenConnect.server.matches |
df5a0 | 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 69 6e 20 61 20 63 61 73 65 20 73 65 6e 73 69 74 69 76 | .the.filename.in.a.case.sensitiv |
df5c0 | 65 20 6d 61 6e 6e 65 72 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 | e.manner,.make.sure.the.username |
df5e0 | 2f 67 72 6f 75 70 20 6e 61 6d 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 6d 61 74 63 68 65 | /group.name.you.configure.matche |
df600 | 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 65 78 61 63 74 6c 79 2e 00 4f 70 65 6e 43 6f 6e 6e | s.the.filename.exactly..OpenConn |
df620 | 65 63 74 20 73 75 70 70 6f 72 74 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 69 74 27 73 20 63 6f | ect.supports.a.subset.of.it's.co |
df640 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 | nfiguration.options.to.be.applie |
df660 | 64 20 6f 6e 20 61 20 70 65 72 20 75 73 65 72 2f 67 72 6f 75 70 20 62 61 73 69 73 2c 20 66 6f 72 | d.on.a.per.user/group.basis,.for |
df680 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 20 77 65 20 72 65 66 65 72 | .configuration.purposes.we.refer |
df6a0 | 20 74 6f 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 20 22 49 64 65 6e 74 | .to.this.functionality.as."Ident |
df6c0 | 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 22 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ity.based.config"..The.following |
df6e0 | 20 60 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 53 65 72 76 65 72 20 4d 61 6e 75 61 6c 20 3c 68 74 74 | .`OpenConnect.Server.Manual.<htt |
df700 | 70 73 3a 2f 2f 6f 63 73 65 72 76 2e 67 69 74 6c 61 62 2e 69 6f 2f 77 77 77 2f 6d 61 6e 75 61 6c | ps://ocserv.gitlab.io/www/manual |
df720 | 2e 68 74 6d 6c 23 3a 7e 3a 74 65 78 74 3d 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 25 32 30 66 69 | .html#:~:text=Configuration%20fi |
df740 | 6c 65 73 25 32 30 74 68 61 74 25 20 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 61 70 70 6c 69 65 | les%20that%.20will%20be%20applie |
df760 | 64 25 32 30 70 65 72 25 32 30 75 73 65 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 6f 72 | d%20per%20user%20connection%20or |
df780 | 25 30 41 25 32 33 25 32 30 70 65 72 25 32 30 67 72 6f 75 70 3e 60 5f 20 6f 75 74 6c 69 6e 65 73 | %0A%23%20per%20group>`_.outlines |
df7a0 | 20 74 68 65 20 73 65 74 20 6f 66 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e | .the.set.of.configuration.option |
df7c0 | 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 | s.that.are.allowed..This.can.be. |
df7e0 | 6c 65 76 65 72 61 67 65 64 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 | leveraged.to.apply.different.set |
df800 | 73 20 6f 66 20 63 6f 6e 66 69 67 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 73 20 | s.of.configs.to.different.users. |
df820 | 6f 72 20 67 72 6f 75 70 73 20 6f 66 20 75 73 65 72 73 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 2d | or.groups.of.users..OpenConnect- |
df840 | 63 6f 6d 70 61 74 69 62 6c 65 20 73 65 72 76 65 72 20 66 65 61 74 75 72 65 20 69 73 20 61 76 61 | compatible.server.feature.is.ava |
df860 | 69 6c 61 62 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 72 65 6c 65 61 73 65 2e 20 4f 70 65 6e 63 6f | ilable.from.this.release..Openco |
df880 | 6e 6e 65 63 74 20 56 50 4e 20 73 75 70 70 6f 72 74 73 20 53 53 4c 20 63 6f 6e 6e 65 63 74 69 6f | nnect.VPN.supports.SSL.connectio |
df8a0 | 6e 20 61 6e 64 20 6f 66 66 65 72 73 20 66 75 6c 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 | n.and.offers.full.network.access |
df8c0 | 2e 20 53 53 4c 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 65 78 74 65 6e 73 69 6f 6e 20 63 6f 6e 6e | ..SSL.VPN.network.extension.conn |
df8e0 | 65 63 74 73 20 74 68 65 20 65 6e 64 2d 75 73 65 72 20 73 79 73 74 65 6d 20 74 6f 20 74 68 65 20 | ects.the.end-user.system.to.the. |
df900 | 63 6f 72 70 6f 72 61 74 65 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 63 63 65 73 73 20 63 6f | corporate.network.with.access.co |
df920 | 6e 74 72 6f 6c 73 20 62 61 73 65 64 20 6f 6e 6c 79 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6c 61 79 | ntrols.based.only.on.network.lay |
df940 | 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 64 65 73 74 69 6e 61 74 | er.information,.such.as.destinat |
df960 | 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 | ion.IP.address.and.port.number.. |
df980 | 53 6f 2c 20 69 74 20 70 72 6f 76 69 64 65 73 20 73 61 66 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 | So,.it.provides.safe.communicati |
df9a0 | 6f 6e 20 66 6f 72 20 61 6c 6c 20 74 79 70 65 73 20 6f 66 20 64 65 76 69 63 65 20 74 72 61 66 66 | on.for.all.types.of.device.traff |
df9c0 | 69 63 20 61 63 72 6f 73 73 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 72 | ic.across.public.networks.and.pr |
df9e0 | 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 61 6c 73 6f 20 65 6e 63 72 79 70 74 73 20 74 68 | ivate.networks,.also.encrypts.th |
dfa00 | 65 20 74 72 61 66 66 69 63 20 77 69 74 68 20 53 53 4c 20 70 72 6f 74 6f 63 6f 6c 2e 00 4f 70 65 | e.traffic.with.SSL.protocol..Ope |
dfa20 | 6e 56 50 4e 00 4f 70 65 6e 56 50 4e 20 2a 2a 77 69 6c 6c 20 6e 6f 74 2a 2a 20 61 75 74 6f 6d 61 | nVPN.OpenVPN.**will.not**.automa |
dfa40 | 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 69 6e 20 74 68 65 20 6b 65 72 | tically.create.routes.in.the.ker |
dfa60 | 6e 65 6c 20 66 6f 72 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 77 68 65 6e 20 74 68 65 79 | nel.for.client.subnets.when.they |
dfa80 | 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 75 73 65 20 63 6c 69 65 6e | .connect.and.will.only.use.clien |
dfaa0 | 74 2d 73 75 62 6e 65 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 69 6e 74 65 72 6e 61 6c 6c 79 2c | t-subnet.association.internally, |
dfac0 | 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 6f 75 74 65 20 74 6f | .so.we.need.to.create.a.route.to |
dfae0 | 20 74 68 65 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 20 6e 65 74 77 6f 72 6b 20 6f 75 72 73 65 6c | .the.10.23.0.0/20.network.oursel |
dfb00 | 76 65 73 3a 00 4f 70 65 6e 56 50 4e 20 44 43 4f 20 69 73 20 6e 6f 74 20 66 75 6c 6c 20 4f 70 65 | ves:.OpenVPN.DCO.is.not.full.Ope |
dfb20 | 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 73 75 70 70 6f 72 74 65 64 20 2c 20 69 73 20 63 75 72 | nVPN.features.supported.,.is.cur |
dfb40 | 72 65 6e 74 6c 79 20 63 6f 6e 73 69 64 65 72 65 64 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 2e 20 | rently.considered.experimental.. |
dfb60 | 46 75 72 74 68 65 72 6d 6f 72 65 2c 20 74 68 65 72 65 20 61 72 65 20 63 65 72 74 61 69 6e 20 4f | Furthermore,.there.are.certain.O |
dfb80 | 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 75 73 65 20 63 61 73 65 73 20 74 68 | penVPN.features.and.use.cases.th |
dfba0 | 61 74 20 72 65 6d 61 69 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 44 43 4f 2e | at.remain.incompatible.with.DCO. |
dfbc0 | 20 54 6f 20 67 65 74 20 61 20 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 75 6e 64 65 72 73 74 61 | .To.get.a.comprehensive.understa |
dfbe0 | 6e 64 69 6e 67 20 6f 66 20 74 68 65 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 61 73 73 6f 63 69 61 | nding.of.the.limitations.associa |
dfc00 | 74 65 64 20 77 69 74 68 20 44 43 4f 2c 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 6c 69 73 74 20 | ted.with.DCO,.refer.to.the.list. |
dfc20 | 6f 66 20 6b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 64 6f 63 75 | of.known.limitations.in.the.docu |
dfc40 | 6d 65 6e 74 61 74 69 6f 6e 2e 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 | mentation..OpenVPN.Data.Channel. |
dfc60 | 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e | Offload.(DCO).OpenVPN.Data.Chann |
dfc80 | 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 20 65 6e 61 62 6c 65 73 20 73 69 67 6e 69 66 69 | el.Offload.(DCO).enables.signifi |
dfca0 | 63 61 6e 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 65 6e 68 61 6e 63 65 6d 65 6e 74 20 69 6e 20 | cant.performance.enhancement.in. |
dfcc0 | 65 6e 63 72 79 70 74 65 64 20 4f 70 65 6e 56 50 4e 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 6e | encrypted.OpenVPN.data.processin |
dfce0 | 67 2e 20 42 79 20 6d 69 6e 69 6d 69 7a 69 6e 67 20 63 6f 6e 74 65 78 74 20 73 77 69 74 63 68 69 | g..By.minimizing.context.switchi |
dfd00 | 6e 67 20 66 6f 72 20 65 61 63 68 20 70 61 63 6b 65 74 2c 20 44 43 4f 20 65 66 66 65 63 74 69 76 | ng.for.each.packet,.DCO.effectiv |
dfd20 | 65 6c 79 20 72 65 64 75 63 65 73 20 6f 76 65 72 68 65 61 64 2e 20 54 68 69 73 20 6f 70 74 69 6d | ely.reduces.overhead..This.optim |
dfd40 | 69 7a 61 74 69 6f 6e 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 6b 65 65 70 69 6e 67 20 6d | ization.is.achieved.by.keeping.m |
dfd60 | 6f 73 74 20 64 61 74 61 20 68 61 6e 64 6c 69 6e 67 20 74 61 73 6b 73 20 77 69 74 68 69 6e 20 74 | ost.data.handling.tasks.within.t |
dfd80 | 68 65 20 6b 65 72 6e 65 6c 2c 20 61 76 6f 69 64 69 6e 67 20 66 72 65 71 75 65 6e 74 20 73 77 69 | he.kernel,.avoiding.frequent.swi |
dfda0 | 74 63 68 65 73 20 62 65 74 77 65 65 6e 20 6b 65 72 6e 65 6c 20 61 6e 64 20 75 73 65 72 20 73 70 | tches.between.kernel.and.user.sp |
dfdc0 | 61 63 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 70 61 63 6b 65 74 20 68 61 | ace.for.encryption.and.packet.ha |
dfde0 | 6e 64 6c 69 6e 67 2e 00 4f 70 65 6e 56 50 4e 20 61 6c 6c 6f 77 73 20 66 6f 72 20 65 69 74 68 65 | ndling..OpenVPN.allows.for.eithe |
dfe00 | 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 55 44 50 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 74 | r.TCP.or.UDP..UDP.will.provide.t |
dfe20 | 68 65 20 6c 6f 77 65 73 74 20 6c 61 74 65 6e 63 79 2c 20 77 68 69 6c 65 20 54 43 50 20 77 69 6c | he.lowest.latency,.while.TCP.wil |
dfe40 | 6c 20 77 6f 72 6b 20 62 65 74 74 65 72 20 66 6f 72 20 6c 6f 73 73 79 20 63 6f 6e 6e 65 63 74 69 | l.work.better.for.lossy.connecti |
dfe60 | 6f 6e 73 3b 20 67 65 6e 65 72 61 6c 6c 79 20 55 44 50 20 69 73 20 70 72 65 66 65 72 72 65 64 20 | ons;.generally.UDP.is.preferred. |
dfe80 | 77 68 65 6e 20 70 6f 73 73 69 62 6c 65 2e 00 4f 70 65 6e 56 50 4e 20 69 73 20 70 6f 70 75 6c 61 | when.possible..OpenVPN.is.popula |
dfea0 | 72 20 66 6f 72 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 73 65 74 75 70 73 2c 20 62 75 74 20 | r.for.client-server.setups,.but. |
dfec0 | 69 74 73 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 72 65 6d 61 69 6e 73 20 61 20 | its.site-to-site.mode.remains.a. |
dfee0 | 72 65 6c 61 74 69 76 65 6c 79 20 6f 62 73 63 75 72 65 20 66 65 61 74 75 72 65 2c 20 61 6e 64 20 | relatively.obscure.feature,.and. |
dff00 | 6d 61 6e 79 20 72 6f 75 74 65 72 20 61 70 70 6c 69 61 6e 63 65 73 20 73 74 69 6c 6c 20 64 6f 6e | many.router.appliances.still.don |
dff20 | 27 74 20 73 75 70 70 6f 72 74 20 69 74 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 27 73 20 76 65 72 | 't.support.it..However,.it's.ver |
dff40 | 79 20 75 73 65 66 75 6c 20 66 6f 72 20 71 75 69 63 6b 6c 79 20 73 65 74 74 69 6e 67 20 75 70 20 | y.useful.for.quickly.setting.up. |
dff60 | 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 4f 70 65 6e 56 50 4e | tunnels.between.routers..OpenVPN |
dff80 | 20 73 74 61 74 75 73 20 63 61 6e 20 62 65 20 76 65 72 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 | .status.can.be.verified.using.th |
dffa0 | 65 20 60 73 68 6f 77 20 6f 70 65 6e 76 70 6e 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d | e.`show.openvpn`.operational.com |
dffc0 | 6d 61 6e 64 73 2e 20 53 65 65 20 74 68 65 20 62 75 69 6c 74 2d 69 6e 20 68 65 6c 70 20 66 6f 72 | mands..See.the.built-in.help.for |
dffe0 | 20 61 20 63 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 20 6f 70 74 69 6f 6e 73 2e 00 4f 70 65 | .a.complete.list.of.options..Ope |
e0000 | 6e 63 6f 6e 6e 65 63 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6e 67 | nconnect.Configuration.Operating |
e0020 | 20 4d 6f 64 65 73 00 4f 70 65 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6f 6e 20 43 6f 6d 6d 61 | .Modes.Operation.Operation.Comma |
e0040 | 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 20 4d 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 | nds.Operation.Mode.Operation.mod |
e0060 | 65 20 6f 66 20 77 69 72 65 6c 65 73 73 20 72 61 64 69 6f 2e 00 4f 70 65 72 61 74 69 6f 6e 2d 6d | e.of.wireless.radio..Operation-m |
e0080 | 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 20 46 69 72 65 77 61 6c 6c 00 4f 70 65 72 | ode.Operation-mode.Firewall.Oper |
e00a0 | 61 74 69 6f 6e 61 6c 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 4d 6f 64 | ational.Commands.Operational.Mod |
e00c0 | 65 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 00 | e.Commands.Operational.commands. |
e00e0 | 4f 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 34 33 20 66 6f 72 20 55 6e 69 46 49 00 4f 70 74 69 6f | Option.Option.43.for.UniFI.Optio |
e0100 | 6e 20 64 65 73 63 72 69 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 6e 75 6d 62 65 72 00 4f 70 74 69 | n.description.Option.number.Opti |
e0120 | 6f 6e 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 61 74 65 20 69 6e 20 77 68 69 63 68 20 | on.specifying.the.rate.in.which. |
e0140 | 77 65 27 6c 6c 20 61 73 6b 20 6f 75 72 20 6c 69 6e 6b 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 | we'll.ask.our.link.partner.to.tr |
e0160 | 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 20 70 61 63 6b 65 74 73 20 69 6e 20 38 30 32 2e 33 61 64 | ansmit.LACPDU.packets.in.802.3ad |
e0180 | 20 6d 6f 64 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 64 69 73 61 62 6c 65 20 72 75 6c 65 2e 00 4f | .mode..Option.to.disable.rule..O |
e01a0 | 70 74 69 6f 6e 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 20 6d | ption.to.enable.or.disable.log.m |
e01c0 | 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 6c 6f 67 20 70 61 63 6b | atching.rule..Option.to.log.pack |
e01e0 | 65 74 73 20 68 69 74 74 69 6e 67 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2e 00 4f 70 74 69 | ets.hitting.default-action..Opti |
e0200 | 6f 6e 61 6c 00 4f 70 74 69 6f 6e 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 74 69 | onal.Optional.Configuration.Opti |
e0220 | 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 70 72 65 66 69 78 2d 6c 69 73 74 20 63 61 6e 20 62 | onal.parameter.prefix-list.can.b |
e0240 | 65 20 75 73 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 67 72 6f 75 70 73 20 74 6f | e.use.to.control.which.groups.to |
e0260 | 20 73 77 69 74 63 68 20 6f 72 20 6e 6f 74 20 73 77 69 74 63 68 2e 20 49 66 20 61 20 67 72 6f 75 | .switch.or.not.switch..If.a.grou |
e0280 | 70 20 69 73 20 50 45 52 4d 49 54 20 61 73 20 70 65 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 | p.is.PERMIT.as.per.the.prefix-li |
e02a0 | 73 74 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 65 72 20 64 6f 65 73 | st,.then.the.SPT.switchover.does |
e02c0 | 20 6e 6f 74 20 68 61 70 70 65 6e 20 66 6f 72 20 69 74 20 61 6e 64 20 69 66 20 69 74 20 69 73 20 | .not.happen.for.it.and.if.it.is. |
e02e0 | 44 45 4e 59 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 65 72 20 68 61 | DENY,.then.the.SPT.switchover.ha |
e0300 | 70 70 65 6e 73 2e 00 4f 70 74 69 6f 6e 61 6c 2c 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 | ppens..Optional,.if.you.want.to. |
e0320 | 65 6e 61 62 6c 65 20 75 70 6c 6f 61 64 73 2c 20 65 6c 73 65 20 54 46 54 50 20 73 65 72 76 65 72 | enable.uploads,.else.TFTP.server |
e0340 | 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 72 65 61 64 2d 6f 6e 6c 79 20 73 65 72 76 65 72 2e | .will.act.as.a.read-only.server. |
e0360 | 00 4f 70 74 69 6f 6e 61 6c 2f 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 00 4f 70 74 69 6f | .Optional/default.settings.Optio |
e0380 | 6e 61 6c 6c 79 20 73 65 74 20 61 20 73 70 65 63 69 66 69 63 20 73 74 61 74 69 63 20 49 50 76 34 | nally.set.a.specific.static.IPv4 |
e03a0 | 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e | .or.IPv6.address.for.the.contain |
e03c0 | 65 72 2e 20 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 | er..This.address.must.be.within. |
e03e0 | 74 68 65 20 6e 61 6d 65 64 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 2e 00 4f 70 74 69 6f 6e | the.named.network.prefix..Option |
e0400 | 73 00 4f 70 74 69 6f 6e 73 20 28 47 6c 6f 62 61 6c 20 49 50 73 65 63 20 73 65 74 74 69 6e 67 73 | s.Options.(Global.IPsec.settings |
e0420 | 29 20 41 74 74 72 69 62 75 74 65 73 00 4f 70 74 69 6f 6e 73 20 75 73 65 64 20 66 6f 72 20 71 75 | ).Attributes.Options.used.for.qu |
e0440 | 65 75 65 20 74 61 72 67 65 74 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 | eue.target..Action.queue.must.be |
e0460 | 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 00 4f 72 20 | .defined.to.use.this.setting.Or. |
e0480 | 2a 2a 62 69 6e 61 72 79 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 4f 72 2c 20 66 6f 72 20 65 78 61 | **binary**.prefixes..Or,.for.exa |
e04a0 | 6d 70 6c 65 20 66 74 70 2c 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 | mple.ftp,.`delete.system.conntra |
e04c0 | 63 6b 20 6d 6f 64 75 6c 65 73 20 66 74 70 60 2e 00 4f 72 69 67 69 6e 61 74 65 20 61 6e 20 41 53 | ck.modules.ftp`..Originate.an.AS |
e04e0 | 2d 45 78 74 65 72 6e 61 6c 20 28 74 79 70 65 2d 35 29 20 4c 53 41 20 64 65 73 63 72 69 62 69 6e | -External.(type-5).LSA.describin |
e0500 | 67 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 61 6c 6c 20 65 78 74 65 72 | g.a.default.route.into.all.exter |
e0520 | 6e 61 6c 2d 72 6f 75 74 69 6e 67 20 63 61 70 61 62 6c 65 20 61 72 65 61 73 2c 20 6f 66 20 74 68 | nal-routing.capable.areas,.of.th |
e0540 | 65 20 73 70 65 63 69 66 69 65 64 20 6d 65 74 72 69 63 20 61 6e 64 20 6d 65 74 72 69 63 20 74 79 | e.specified.metric.and.metric.ty |
e0560 | 70 65 2e 20 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 6c 77 61 79 73 60 20 6b 65 79 77 | pe..If.the.:cfgcmd:`always`.keyw |
e0580 | 6f 72 64 20 69 73 20 67 69 76 65 6e 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 | ord.is.given.then.the.default.is |
e05a0 | 20 61 6c 77 61 79 73 20 61 64 76 65 72 74 69 73 65 64 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 | .always.advertised,.even.when.th |
e05c0 | 65 72 65 20 69 73 20 6e 6f 20 64 65 66 61 75 6c 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 | ere.is.no.default.present.in.the |
e05e0 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 | .routing.table..The.argument.:cf |
e0600 | 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 73 70 65 63 69 66 69 65 73 20 74 6f 20 61 64 | gcmd:`route-map`.specifies.to.ad |
e0620 | 76 65 72 74 69 73 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 66 20 74 68 65 | vertise.the.default.route.if.the |
e0640 | 20 72 6f 75 74 65 20 6d 61 70 20 69 73 20 73 61 74 69 73 66 69 65 64 2e 00 4f 74 68 65 72 20 61 | .route.map.is.satisfied..Other.a |
e0660 | 74 74 72 69 62 75 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 2c 20 62 75 74 20 74 68 65 79 20 | ttributes.can.be.used,.but.they. |
e0680 | 68 61 76 65 20 74 6f 20 62 65 20 69 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 64 69 63 74 69 6f 6e | have.to.be.in.one.of.the.diction |
e06a0 | 61 72 69 65 73 20 69 6e 20 2a 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 | aries.in.*/usr/share/accel-ppp/r |
e06c0 | 61 64 69 75 73 2a 2e 00 4f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e | adius*..Our.configuration.comman |
e06e0 | 64 73 20 77 6f 75 6c 64 20 62 65 3a 00 4f 75 72 20 72 65 6d 6f 74 65 20 65 6e 64 20 6f 66 20 74 | ds.would.be:.Our.remote.end.of.t |
e0700 | 68 65 20 74 75 6e 6e 65 6c 20 66 6f 72 20 70 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 69 73 20 | he.tunnel.for.peer.`to-wg02`.is. |
e0720 | 72 65 61 63 68 61 62 6c 65 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 20 70 6f 72 74 20 35 31 38 32 | reachable.at.192.0.2.1.port.5182 |
e0740 | 30 00 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 62 61 6c 61 6e 63 | 0.Outbound.traffic.can.be.balanc |
e0760 | 65 64 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 6f 75 74 62 6f 75 6e 64 20 | ed.between.two.or.more.outbound. |
e0780 | 69 6e 74 65 72 66 61 63 65 73 2e 20 49 66 20 61 20 70 61 74 68 20 66 61 69 6c 73 2c 20 74 72 61 | interfaces..If.a.path.fails,.tra |
e07a0 | 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 | ffic.is.balanced.across.the.rema |
e07c0 | 69 6e 69 6e 67 20 68 65 61 6c 74 68 79 20 70 61 74 68 73 2c 20 61 20 72 65 63 6f 76 65 72 65 64 | ining.healthy.paths,.a.recovered |
e07e0 | 20 70 61 74 68 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 62 61 63 | .path.is.automatically.added.bac |
e0800 | 6b 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 75 73 65 64 20 | k.to.the.routing.table.and.used. |
e0820 | 62 79 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 2e 20 54 68 65 20 6c 6f 61 64 20 62 | by.the.load.balancer..The.load.b |
e0840 | 61 6c 61 6e 63 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 73 20 72 6f 75 74 65 | alancer.automatically.adds.route |
e0860 | 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 | s.for.each.path.to.the.routing.t |
e0880 | 61 62 6c 65 20 61 6e 64 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 | able.and.balances.traffic.across |
e08a0 | 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 64 65 74 65 | .the.configured.interfaces,.dete |
e08c0 | 72 6d 69 6e 65 64 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 68 65 61 6c 74 68 20 61 6e 64 20 77 | rmined.by.interface.health.and.w |
e08e0 | 65 69 67 68 74 2e 00 4f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e | eight..Outgoing.traffic.is.balan |
e0900 | 63 65 64 20 69 6e 20 61 20 66 6c 6f 77 2d 62 61 73 65 64 20 6d 61 6e 6e 65 72 2e 20 41 20 63 6f | ced.in.a.flow-based.manner..A.co |
e0920 | 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 69 73 20 75 73 65 64 20 | nnection.tracking.table.is.used. |
e0940 | 74 6f 20 74 72 61 63 6b 20 66 6c 6f 77 73 20 62 79 20 74 68 65 69 72 20 73 6f 75 72 63 65 20 61 | to.track.flows.by.their.source.a |
e0960 | 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 | ddress,.destination.address.and. |
e0980 | 70 6f 72 74 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 | port..Each.flow.is.assigned.to.a |
e09a0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 64 65 66 | n.interface.according.to.the.def |
e09c0 | 69 6e 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 73 75 62 73 65 71 75 | ined.balancing.rules.and.subsequ |
e09e0 | 65 6e 74 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 65 | ent.packets.are.sent.through.the |
e0a00 | 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 68 61 73 20 74 68 65 20 61 64 | .same.interface..This.has.the.ad |
e0a20 | 76 61 6e 74 61 67 65 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 61 6c 77 61 79 73 20 61 72 72 69 | vantage.that.packets.always.arri |
e0a40 | 76 65 20 69 6e 20 6f 72 64 65 72 20 69 66 20 6c 69 6e 6b 73 20 77 69 74 68 20 64 69 66 66 65 72 | ve.in.order.if.links.with.differ |
e0a60 | 65 6e 74 20 73 70 65 65 64 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 4f 75 74 70 75 74 20 66 72 | ent.speeds.are.in.use..Output.fr |
e0a80 | 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 4f 75 74 70 | om.`eth0`.network.interface.Outp |
e0aa0 | 75 74 20 70 6c 75 67 69 6e 20 50 72 6f 6d 65 74 68 65 75 73 20 63 6c 69 65 6e 74 00 4f 76 65 72 | ut.plugin.Prometheus.client.Over |
e0ac0 | 20 49 50 00 4f 76 65 72 20 49 50 53 65 63 2c 20 4c 32 20 56 50 4e 20 28 62 72 69 64 67 65 29 00 | .IP.Over.IPSec,.L2.VPN.(bridge). |
e0ae0 | 4f 76 65 72 20 55 44 50 00 4f 76 65 72 72 69 64 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 | Over.UDP.Override.static-mapping |
e0b00 | 27 73 20 6e 61 6d 65 2d 73 65 72 76 65 72 20 77 69 74 68 20 61 20 63 75 73 74 6f 6d 20 6f 6e 65 | 's.name-server.with.a.custom.one |
e0b20 | 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 6f 6e 6c 79 20 74 6f 20 74 68 69 73 20 | .that.will.be.sent.only.to.this. |
e0b40 | 68 6f 73 74 2e 00 4f 76 65 72 76 69 65 77 00 4f 76 65 72 76 69 65 77 20 61 6e 64 20 62 61 73 69 | host..Overview.Overview.and.basi |
e0b60 | 63 20 63 6f 6e 63 65 70 74 73 00 4f 76 65 72 76 69 65 77 20 6f 66 20 64 65 66 69 6e 65 64 20 67 | c.concepts.Overview.of.defined.g |
e0b80 | 72 6f 75 70 73 2e 20 59 6f 75 20 73 65 65 20 74 68 65 20 74 79 70 65 2c 20 74 68 65 20 6d 65 6d | roups..You.see.the.type,.the.mem |
e0ba0 | 62 65 72 73 2c 20 61 6e 64 20 77 68 65 72 65 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 75 73 65 | bers,.and.where.the.group.is.use |
e0bc0 | 64 2e 00 50 42 52 20 6d 75 6c 74 69 70 6c 65 20 75 70 6c 69 6e 6b 73 00 50 43 31 20 69 73 20 69 | d..PBR.multiple.uplinks.PC1.is.i |
e0be0 | 6e 20 74 68 65 20 60 60 64 65 66 61 75 6c 74 60 60 20 56 52 46 20 61 6e 64 20 61 63 74 69 6e 67 | n.the.``default``.VRF.and.acting |
e0c00 | 20 61 73 20 65 2e 67 2e 20 61 20 22 66 69 6c 65 73 65 72 76 65 72 22 00 50 43 32 20 69 73 20 69 | .as.e.g..a."fileserver".PC2.is.i |
e0c20 | 6e 20 56 52 46 20 60 60 62 6c 75 65 60 60 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 76 65 | n.VRF.``blue``.which.is.the.deve |
e0c40 | 6c 6f 70 6d 65 6e 74 20 64 65 70 61 72 74 6d 65 6e 74 00 50 43 33 20 61 6e 64 20 50 43 34 20 61 | lopment.department.PC3.and.PC4.a |
e0c60 | 72 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 72 69 64 67 65 20 64 65 76 69 63 65 20 | re.connected.to.a.bridge.device. |
e0c80 | 6f 6e 20 72 6f 75 74 65 72 20 60 60 52 31 60 60 20 77 68 69 63 68 20 69 73 20 69 6e 20 56 52 46 | on.router.``R1``.which.is.in.VRF |
e0ca0 | 20 60 60 72 65 64 60 60 2e 20 53 61 79 20 74 68 69 73 20 69 73 20 74 68 65 20 48 52 20 64 65 70 | .``red``..Say.this.is.the.HR.dep |
e0cc0 | 61 72 74 6d 65 6e 74 2e 00 50 43 34 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 34 2f 32 34 20 | artment..PC4.has.IP.10.0.0.4/24. |
e0ce0 | 61 6e 64 20 50 43 35 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 35 2f 32 34 2c 20 73 6f 20 74 | and.PC5.has.IP.10.0.0.5/24,.so.t |
e0d00 | 68 65 79 20 62 65 6c 69 65 76 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 74 68 65 20 73 61 6d 65 | hey.believe.they.are.in.the.same |
e0d20 | 20 62 72 6f 61 64 63 61 73 74 20 64 6f 6d 61 69 6e 2e 00 50 43 35 20 72 65 63 65 69 76 65 73 20 | .broadcast.domain..PC5.receives. |
e0d40 | 74 68 65 20 70 69 6e 67 20 65 63 68 6f 2c 20 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 61 6e 20 | the.ping.echo,.responds.with.an. |
e0d60 | 65 63 68 6f 20 72 65 70 6c 79 20 74 68 61 74 20 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 61 | echo.reply.that.Leaf3.receives.a |
e0d80 | 6e 64 20 74 68 69 73 20 74 69 6d 65 20 66 6f 72 77 61 72 64 73 20 74 6f 20 4c 65 61 66 32 27 73 | nd.this.time.forwards.to.Leaf2's |
e0da0 | 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 62 65 63 61 75 73 | .unicast.address.directly.becaus |
e0dc0 | 65 20 69 74 20 6c 65 61 72 6e 65 64 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 50 43 34 | e.it.learned.the.location.of.PC4 |
e0de0 | 20 61 62 6f 76 65 2e 20 57 68 65 6e 20 4c 65 61 66 32 20 72 65 63 65 69 76 65 73 20 74 68 65 20 | .above..When.Leaf2.receives.the. |
e0e00 | 65 63 68 6f 20 72 65 70 6c 79 20 66 72 6f 6d 20 50 43 35 20 69 74 20 73 65 65 73 20 74 68 61 74 | echo.reply.from.PC5.it.sees.that |
e0e20 | 20 69 74 20 63 61 6d 65 20 66 72 6f 6d 20 4c 65 61 66 33 20 61 6e 64 20 73 6f 20 72 65 6d 65 6d | .it.came.from.Leaf3.and.so.remem |
e0e40 | 62 65 72 73 20 74 68 61 74 20 50 43 35 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 4c | bers.that.PC5.is.reachable.via.L |
e0e60 | 65 61 66 33 2e 00 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 | eaf3..PIM.(Protocol.Independent. |
e0e80 | 4d 75 6c 74 69 63 61 73 74 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | Multicast).must.be.configured.in |
e0ea0 | 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 | .every.interface.of.every.partic |
e0ec0 | 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 | ipating.router..Every.router.mus |
e0ee0 | 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 | t.also.have.the.location.of.the. |
e0f00 | 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 | Rendevouz.Point.manually.configu |
e0f20 | 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 | red..Then,.unidirectional.shared |
e0f40 | 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 | .trees.rooted.at.the.Rendevouz.P |
e0f60 | 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 | oint.will.automatically.be.built |
e0f80 | 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 49 4d | .for.multicast.distribution..PIM |
e0fa0 | 20 61 6e 64 20 49 47 4d 50 00 50 49 4d 20 e2 80 93 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 | .and.IGMP.PIM.....Protocol.Indep |
e0fc0 | 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 00 50 49 4d 2d 53 4d 20 2d 20 50 49 4d 20 53 70 | endent.Multicast.PIM-SM.-.PIM.Sp |
e0fe0 | 61 72 73 65 20 4d 6f 64 65 00 50 49 4d 36 20 2d 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 | arse.Mode.PIM6.-.Protocol.Indepe |
e1000 | 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 00 50 49 4d 76 36 20 28 | ndent.Multicast.for.IPv6.PIMv6.( |
e1020 | 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 | Protocol.Independent.Multicast.f |
e1040 | 6f 72 20 49 50 76 36 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 | or.IPv6).must.be.configured.in.e |
e1060 | 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 | very.interface.of.every.particip |
e1080 | 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 | ating.router..Every.router.must. |
e10a0 | 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 | also.have.the.location.of.the.Re |
e10c0 | 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 | ndevouz.Point.manually.configure |
e10e0 | 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 | d..Then,.unidirectional.shared.t |
e1100 | 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 | rees.rooted.at.the.Rendevouz.Poi |
e1120 | 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 | nt.will.automatically.be.built.f |
e1140 | 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 4b 49 00 50 | or.multicast.distribution..PKI.P |
e1160 | 50 44 55 00 50 50 50 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 50 50 50 20 53 65 74 | PDU.PPP.Advanced.Options.PPP.Set |
e1180 | 74 69 6e 67 73 00 50 50 50 6f 45 00 50 50 50 6f 45 20 53 65 72 76 65 72 00 50 50 50 6f 45 20 6f | tings.PPPoE.PPPoE.Server.PPPoE.o |
e11a0 | 70 74 69 6f 6e 73 00 50 50 54 50 2d 53 65 72 76 65 72 00 50 61 63 6b 65 74 2d 62 61 73 65 64 20 | ptions.PPTP-Server.Packet-based. |
e11c0 | 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 62 65 74 74 65 72 20 62 | balancing.can.lead.to.a.better.b |
e11e0 | 61 6c 61 6e 63 65 20 61 63 72 6f 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 6e 20 6f 75 | alance.across.interfaces.when.ou |
e1200 | 74 20 6f 66 20 6f 72 64 65 72 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 20 69 73 73 75 65 2e | t.of.order.packets.are.no.issue. |
e1220 | 20 50 65 72 2d 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 | .Per-packet-based.balancing.can. |
e1240 | 62 65 20 73 65 74 20 66 6f 72 20 61 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 20 77 69 74 68 | be.set.for.a.balancing.rule.with |
e1260 | 3a 00 50 61 72 74 69 63 75 6c 61 72 6c 79 20 6c 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 20 6d 61 | :.Particularly.large.networks.ma |
e1280 | 79 20 77 69 73 68 20 74 6f 20 72 75 6e 20 74 68 65 69 72 20 6f 77 6e 20 52 50 4b 49 20 63 65 72 | y.wish.to.run.their.own.RPKI.cer |
e12a0 | 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 61 6e 64 20 70 75 62 6c 69 63 61 74 69 | tificate.authority.and.publicati |
e12c0 | 6f 6e 20 73 65 72 76 65 72 20 69 6e 73 74 65 61 64 20 6f 66 20 70 75 62 6c 69 73 68 69 6e 67 20 | on.server.instead.of.publishing. |
e12e0 | 52 4f 41 73 20 76 69 61 20 74 68 65 69 72 20 52 49 52 2e 20 54 68 69 73 20 69 73 20 61 20 73 75 | ROAs.via.their.RIR..This.is.a.su |
e1300 | 62 6a 65 63 74 20 66 61 72 20 62 65 79 6f 6e 64 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 56 79 | bject.far.beyond.the.scope.of.Vy |
e1320 | 4f 53 27 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 72 65 61 64 | OS'.documentation..Consider.read |
e1340 | 69 6e 67 20 61 62 6f 75 74 20 4b 72 69 6c 6c 5f 20 69 66 20 74 68 69 73 20 69 73 20 61 20 72 61 | ing.about.Krill_.if.this.is.a.ra |
e1360 | 62 62 69 74 20 68 6f 6c 65 20 79 6f 75 20 6e 65 65 64 20 6f 72 20 65 73 70 65 63 69 61 6c 6c 79 | bbit.hole.you.need.or.especially |
e1380 | 20 77 61 6e 74 20 74 6f 20 64 69 76 65 20 64 6f 77 6e 2e 00 50 61 74 68 20 60 3c 63 6f 73 74 3e | .want.to.dive.down..Path.`<cost> |
e13a0 | 60 20 76 61 6c 75 65 20 66 6f 72 20 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 | `.value.for.Spanning.Tree.Protoc |
e13c0 | 6f 6c 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 61 20 62 72 69 64 67 65 20 63 | ol..Each.interface.in.a.bridge.c |
e13e0 | 6f 75 6c 64 20 68 61 76 65 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 70 65 65 64 20 61 6e 64 20 | ould.have.a.different.speed.and. |
e1400 | 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 64 65 63 69 64 69 6e 67 | this.value.is.used.when.deciding |
e1420 | 20 77 68 69 63 68 20 6c 69 6e 6b 20 74 6f 20 75 73 65 2e 20 46 61 73 74 65 72 20 69 6e 74 65 72 | .which.link.to.use..Faster.inter |
e1440 | 66 61 63 65 73 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6c 6f 77 65 72 20 63 6f 73 74 73 2e 00 50 | faces.should.have.lower.costs..P |
e1460 | 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 | ath.to.`<file>`.pointing.to.the. |
e1480 | 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 | certificate.authority.certificat |
e14a0 | 65 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 | e..Path.to.`<file>`.pointing.to. |
e14c0 | 74 68 65 20 73 65 72 76 65 72 73 20 63 65 72 74 69 66 69 63 61 74 65 20 28 70 75 62 6c 69 63 20 | the.servers.certificate.(public. |
e14e0 | 70 6f 72 74 69 6f 6e 29 2e 00 50 65 65 72 20 2d 20 50 65 65 72 00 50 65 65 72 20 47 72 6f 75 70 | portion)..Peer.-.Peer.Peer.Group |
e1500 | 73 00 50 65 65 72 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 50 65 65 72 | s.Peer.IP.address.to.match..Peer |
e1520 | 20 50 61 72 61 6d 65 74 65 72 73 00 50 65 65 72 20 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 | .Parameters.Peer.groups.are.used |
e1540 | 20 74 6f 20 68 65 6c 70 20 69 6d 70 72 6f 76 65 20 73 63 61 6c 69 6e 67 20 62 79 20 67 65 6e 65 | .to.help.improve.scaling.by.gene |
e1560 | 72 61 74 69 6e 67 20 74 68 65 20 73 61 6d 65 20 75 70 64 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 | rating.the.same.update.informati |
e1580 | 6f 6e 20 74 6f 20 61 6c 6c 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 | on.to.all.members.of.a.peer.grou |
e15a0 | 70 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 74 68 65 | p..Note.that.this.means.that.the |
e15c0 | 20 72 6f 75 74 65 73 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 | .routes.generated.by.a.member.of |
e15e0 | 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 20 | .a.peer.group.will.be.sent.back. |
e1600 | 74 6f 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 20 77 69 74 68 20 74 68 | to.that.originating.peer.with.th |
e1620 | 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 | e.originator.identifier.attribut |
e1640 | 65 20 73 65 74 20 74 6f 20 69 6e 64 69 63 61 74 65 64 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 | e.set.to.indicated.the.originati |
e1660 | 6e 67 20 70 65 65 72 2e 20 41 6c 6c 20 70 65 65 72 73 20 6e 6f 74 20 61 73 73 6f 63 69 61 74 65 | ng.peer..All.peers.not.associate |
e1680 | 64 20 77 69 74 68 20 61 20 73 70 65 63 69 66 69 63 20 70 65 65 72 20 67 72 6f 75 70 20 61 72 65 | d.with.a.specific.peer.group.are |
e16a0 | 20 74 72 65 61 74 65 64 20 61 73 20 62 65 6c 6f 6e 67 69 6e 67 20 74 6f 20 61 20 64 65 66 61 75 | .treated.as.belonging.to.a.defau |
e16c0 | 6c 74 20 70 65 65 72 20 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 6c 6c 20 73 68 61 72 65 20 75 70 | lt.peer.group,.and.will.share.up |
e16e0 | 64 61 74 65 73 2e 00 50 65 65 72 20 74 6f 20 73 65 6e 64 20 75 6e 69 63 61 73 74 20 55 44 50 20 | dates..Peer.to.send.unicast.UDP. |
e1700 | 63 6f 6e 6e 74 72 61 63 6b 20 73 79 6e 63 20 65 6e 74 69 72 65 73 20 74 6f 2c 20 69 66 20 6e 6f | conntrack.sync.entires.to,.if.no |
e1720 | 74 20 75 73 69 6e 67 20 4d 75 6c 74 69 63 61 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | t.using.Multicast.configuration. |
e1740 | 66 72 6f 6d 20 61 62 6f 76 65 20 61 62 6f 76 65 2e 00 50 65 65 72 73 20 43 6f 6e 66 69 67 75 72 | from.above.above..Peers.Configur |
e1760 | 61 74 69 6f 6e 00 50 65 72 20 64 65 66 61 75 6c 74 20 56 79 4f 53 73 20 68 61 73 20 6d 69 6e 69 | ation.Per.default.VyOSs.has.mini |
e1780 | 6d 61 6c 20 73 79 73 6c 6f 67 20 6c 6f 67 67 69 6e 67 20 65 6e 61 62 6c 65 64 20 77 68 69 63 68 | mal.syslog.logging.enabled.which |
e17a0 | 20 69 73 20 73 74 6f 72 65 64 20 61 6e 64 20 72 6f 74 61 74 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 | .is.stored.and.rotated.locally.. |
e17c0 | 45 72 72 6f 72 73 20 77 69 6c 6c 20 62 65 20 61 6c 77 61 79 73 20 6c 6f 67 67 65 64 20 74 6f 20 | Errors.will.be.always.logged.to. |
e17e0 | 61 20 6c 6f 63 61 6c 20 66 69 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 60 6c 6f | a.local.file,.which.includes.`lo |
e1800 | 63 61 6c 37 60 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 2c 20 65 6d 65 72 67 65 6e 63 79 20 | cal7`.error.messages,.emergency. |
e1820 | 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 74 68 65 20 63 6f 6e | messages.will.be.sent.to.the.con |
e1840 | 73 6f 6c 65 2c 20 74 6f 6f 2e 00 50 65 72 20 64 65 66 61 75 6c 74 20 65 76 65 72 79 20 70 61 63 | sole,.too..Per.default.every.pac |
e1860 | 6b 65 74 20 69 73 20 73 61 6d 70 6c 65 64 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 73 61 6d | ket.is.sampled.(that.is,.the.sam |
e1880 | 70 6c 69 6e 67 20 72 61 74 65 20 69 73 20 31 29 2e 00 50 65 72 20 64 65 66 61 75 6c 74 20 74 68 | pling.rate.is.1)..Per.default.th |
e18a0 | 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 70 6c 61 63 65 64 | e.user.session.is.being.replaced |
e18c0 | 20 69 66 20 61 20 73 65 63 6f 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 | .if.a.second.authentication.requ |
e18e0 | 65 73 74 20 73 75 63 63 65 65 64 73 2e 20 53 75 63 68 20 73 65 73 73 69 6f 6e 20 72 65 71 75 65 | est.succeeds..Such.session.reque |
e1900 | 73 74 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 65 6e 69 65 64 20 6f 72 20 61 6c 6c 6f | sts.can.be.either.denied.or.allo |
e1920 | 77 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 77 68 69 63 68 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 | wed.entirely,.which.would.allow. |
e1940 | 6d 75 6c 74 69 70 6c 65 20 73 65 73 73 69 6f 6e 73 20 66 6f 72 20 61 20 75 73 65 72 20 69 6e 20 | multiple.sessions.for.a.user.in. |
e1960 | 74 68 65 20 6c 61 74 74 65 72 20 63 61 73 65 2e 20 49 66 20 69 74 20 69 73 20 64 65 6e 69 65 64 | the.latter.case..If.it.is.denied |
e1980 | 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 | ,.the.second.session.is.being.re |
e19a0 | 6a 65 63 74 65 64 20 65 76 65 6e 20 69 66 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | jected.even.if.the.authenticatio |
e19c0 | 6e 20 73 75 63 63 65 65 64 73 2c 20 74 68 65 20 75 73 65 72 20 68 61 73 20 74 6f 20 74 65 72 6d | n.succeeds,.the.user.has.to.term |
e19e0 | 69 6e 61 74 65 20 69 74 73 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 63 61 6e 20 | inate.its.first.session.and.can. |
e1a00 | 74 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 67 61 69 6e 2e 00 50 65 72 20 64 | then.authentication.again..Per.d |
e1a20 | 65 66 61 75 6c 74 2c 20 69 6e 74 65 72 66 61 63 65 73 20 75 73 65 64 20 69 6e 20 61 20 6c 6f 61 | efault,.interfaces.used.in.a.loa |
e1a40 | 64 20 62 61 6c 61 6e 63 69 6e 67 20 70 6f 6f 6c 20 72 65 70 6c 61 63 65 20 74 68 65 20 73 6f 75 | d.balancing.pool.replace.the.sou |
e1a60 | 72 63 65 20 49 50 20 6f 66 20 65 61 63 68 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 20 77 | rce.IP.of.each.outgoing.packet.w |
e1a80 | 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 20 74 6f 20 65 6e 73 75 72 65 20 74 68 | ith.its.own.address.to.ensure.th |
e1aa0 | 61 74 20 72 65 70 6c 69 65 73 20 61 72 72 69 76 65 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e | at.replies.arrive.on.the.same.in |
e1ac0 | 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 77 6f 72 6b 73 20 74 68 72 6f 75 67 68 20 61 75 74 6f | terface..This.works.through.auto |
e1ae0 | 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 73 6f 75 72 63 65 20 4e 41 54 20 28 | matically.generated.source.NAT.( |
e1b00 | 53 4e 41 54 29 20 72 75 6c 65 73 2c 20 74 68 65 73 65 20 72 75 6c 65 73 20 61 72 65 20 6f 6e 6c | SNAT).rules,.these.rules.are.onl |
e1b20 | 79 20 61 70 70 6c 69 65 64 20 74 6f 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 69 63 2e 20 49 | y.applied.to.balanced.traffic..I |
e1b40 | 6e 20 63 61 73 65 73 20 77 68 65 72 65 20 74 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 69 73 20 | n.cases.where.this.behaviour.is. |
e1b60 | 6e 6f 74 20 64 65 73 69 72 65 64 2c 20 74 68 65 20 61 75 74 6f 6d 61 74 69 63 20 67 65 6e 65 72 | not.desired,.the.automatic.gener |
e1b80 | 61 74 69 6f 6e 20 6f 66 20 53 4e 41 54 20 72 75 6c 65 73 20 63 61 6e 20 62 65 20 64 69 73 61 62 | ation.of.SNAT.rules.can.be.disab |
e1ba0 | 6c 65 64 3a 00 50 65 72 66 6f 72 6d 61 6e 63 65 00 50 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 61 | led:.Performance.Periodically,.a |
e1bc0 | 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 6f 75 74 20 62 79 20 74 68 65 | .hello.packet.is.sent.out.by.the |
e1be0 | 20 52 6f 6f 74 20 42 72 69 64 67 65 20 61 6e 64 20 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 | .Root.Bridge.and.the.Designated. |
e1c00 | 42 72 69 64 67 65 73 2e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 20 75 73 65 64 20 | Bridges..Hello.packets.are.used. |
e1c20 | 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 | to.communicate.information.about |
e1c40 | 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 65 6e 74 | .the.topology.throughout.the.ent |
e1c60 | 69 72 65 20 42 72 69 64 67 65 64 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 2e 00 | ire.Bridged.Local.Area.Network.. |
e1c80 | 50 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 69 6e 74 65 72 72 75 70 74 65 64 20 | Ping.command.can.be.interrupted. |
e1ca0 | 61 74 20 61 6e 79 20 67 69 76 65 6e 20 74 69 6d 65 20 75 73 69 6e 67 20 60 60 3c 43 74 72 6c 3e | at.any.given.time.using.``<Ctrl> |
e1cc0 | 2b 63 60 60 2e 20 41 20 62 72 69 65 66 20 73 74 61 74 69 73 74 69 63 20 69 73 20 73 68 6f 77 6e | +c``..A.brief.statistic.is.shown |
e1ce0 | 20 61 66 74 65 72 77 61 72 64 73 2e 00 50 69 6e 67 20 75 73 65 73 20 49 43 4d 50 20 70 72 6f 74 | .afterwards..Ping.uses.ICMP.prot |
e1d00 | 6f 63 6f 6c 27 73 20 6d 61 6e 64 61 74 6f 72 79 20 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 | ocol's.mandatory.ECHO_REQUEST.da |
e1d20 | 74 61 67 72 61 6d 20 74 6f 20 65 6c 69 63 69 74 20 61 6e 20 49 43 4d 50 20 45 43 48 4f 5f 52 45 | tagram.to.elicit.an.ICMP.ECHO_RE |
e1d40 | 53 50 4f 4e 53 45 20 66 72 6f 6d 20 61 20 68 6f 73 74 20 6f 72 20 67 61 74 65 77 61 79 2e 20 45 | SPONSE.from.a.host.or.gateway..E |
e1d60 | 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 6d 73 20 28 70 69 6e 67 73 29 20 77 69 | CHO_REQUEST.datagrams.(pings).wi |
e1d80 | 6c 6c 20 68 61 76 65 20 61 6e 20 49 50 20 61 6e 64 20 49 43 4d 50 20 68 65 61 64 65 72 2c 20 66 | ll.have.an.IP.and.ICMP.header,.f |
e1da0 | 6f 6c 6c 6f 77 65 64 20 62 79 20 22 73 74 72 75 63 74 20 74 69 6d 65 76 61 6c 22 20 61 6e 64 20 | ollowed.by."struct.timeval".and. |
e1dc0 | 61 6e 20 61 72 62 69 74 72 61 72 79 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 64 20 62 79 74 65 73 | an.arbitrary.number.of.pad.bytes |
e1de0 | 20 75 73 65 64 20 74 6f 20 66 69 6c 6c 20 6f 75 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 50 69 | .used.to.fill.out.the.packet..Pi |
e1e00 | 6e 67 69 6e 67 20 28 49 50 76 36 29 20 74 68 65 20 6f 74 68 65 72 20 68 6f 73 74 20 61 6e 64 20 | nging.(IPv6).the.other.host.and. |
e1e20 | 69 6e 74 65 72 63 65 70 74 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 20 60 60 65 74 | intercepting.the.traffic.in.``et |
e1e40 | 68 31 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 69 | h1``.will.show.you.the.content.i |
e1e60 | 73 20 65 6e 63 72 79 70 74 65 64 2e 00 50 6c 61 63 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 | s.encrypted..Place.interface.in. |
e1e80 | 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 50 6c 61 79 20 61 6e 20 61 75 64 69 | given.VRF.instance..Play.an.audi |
e1ea0 | 62 6c 65 20 62 65 65 70 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 73 70 65 61 6b 65 72 20 77 | ble.beep.to.the.system.speaker.w |
e1ec0 | 68 65 6e 20 73 79 73 74 65 6d 20 69 73 20 72 65 61 64 79 2e 00 50 6c 65 61 73 65 20 62 65 20 61 | hen.system.is.ready..Please.be.a |
e1ee0 | 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f | ware,.due.to.an.upstream.bug,.co |
e1f00 | 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 | nfig.changes/commits.will.restar |
e1f20 | 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 | t.the.ppp.daemon.and.will.reset. |
e1f40 | 65 78 69 73 74 69 6e 67 20 49 50 6f 45 20 73 65 73 73 69 6f 6e 73 2c 20 69 6e 20 6f 72 64 65 72 | existing.IPoE.sessions,.in.order |
e1f60 | 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 62 65 20 | .to.become.effective..Please.be. |
e1f80 | 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 | aware,.due.to.an.upstream.bug,.c |
e1fa0 | 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 | onfig.changes/commits.will.resta |
e1fc0 | 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 | rt.the.ppp.daemon.and.will.reset |
e1fe0 | 20 65 78 69 73 74 69 6e 67 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d | .existing.PPPoE.connections.from |
e2000 | 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 | .connected.users,.in.order.to.be |
e2020 | 63 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 | come.effective..Please.refer.to. |
e2040 | 74 68 65 20 3a 72 65 66 3a 60 69 70 73 65 63 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 | the.:ref:`ipsec`.documentation.f |
e2060 | 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 50 53 65 63 20 72 65 6c 61 74 65 64 20 | or.the.individual.IPSec.related. |
e2080 | 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 | options..Please.refer.to.the.:re |
e20a0 | 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 | f:`tunnel-interface`.documentati |
e20c0 | 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 74 75 6e 6e 65 6c 20 72 65 6c | on.for.the.individual.tunnel.rel |
e20e0 | 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 3a 72 65 | ated.options..Please.see.the.:re |
e2100 | 66 3a 60 64 68 63 70 2d 64 6e 73 2d 71 75 69 63 6b 2d 73 74 61 72 74 60 20 63 6f 6e 66 69 67 75 | f:`dhcp-dns-quick-start`.configu |
e2120 | 72 61 74 69 6f 6e 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 | ration..Please.take.a.look.at.th |
e2140 | 65 20 3a 72 65 66 3a 60 76 79 6f 73 61 70 69 60 20 70 61 67 65 20 66 6f 72 20 61 6e 20 64 65 74 | e.:ref:`vyosapi`.page.for.an.det |
e2160 | 61 69 6c 65 64 20 68 6f 77 2d 74 6f 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b | ailed.how-to..Please.take.a.look |
e2180 | 20 61 74 20 74 68 65 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 47 75 69 64 65 20 66 6f 72 20 6f | .at.the.Contributing.Guide.for.o |
e21a0 | 75 72 20 3a 72 65 66 3a 60 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 60 2e 00 50 6c 65 61 73 65 20 | ur.:ref:`documentation`..Please. |
e21c0 | 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 69 6e 20 74 68 65 20 41 75 74 6f 6d 61 74 69 6f 6e 20 73 65 | take.a.look.in.the.Automation.se |
e21e0 | 63 74 69 6f 6e 20 74 6f 20 66 69 6e 64 20 73 6f 6d 65 20 75 73 65 66 75 6c 6c 20 45 78 61 6d 70 | ction.to.find.some.usefull.Examp |
e2200 | 6c 65 73 2e 00 50 6c 65 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 6f 70 69 61 74 65 | les..Please,.refer.to.appropiate |
e2220 | 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 | .section.for.more.information.ab |
e2240 | 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6c 65 61 | out.firewall.configuration:.Plea |
e2260 | 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 6f 70 72 69 61 74 65 20 73 65 63 74 69 6f 6e | se,.refer.to.appropriate.section |
e2280 | 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 | .for.more.information.about.fire |
e22a0 | 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6f 6c 69 63 69 65 73 20 61 72 65 | wall.configuration:.Policies.are |
e22c0 | 20 75 73 65 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 74 72 61 66 66 69 63 20 | .used.for.filtering.and.traffic. |
e22e0 | 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 57 69 74 68 20 70 6f 6c 69 63 69 65 73 2c 20 6e 65 74 77 6f | management..With.policies,.netwo |
e2300 | 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 63 6f 75 6c 64 20 66 69 6c 74 65 72 20 61 | rk.administrators.could.filter.a |
e2320 | 6e 64 20 74 72 65 61 74 20 74 72 61 66 66 69 63 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 | nd.treat.traffic.according.to.th |
e2340 | 65 69 72 20 6e 65 65 64 73 2e 00 50 6f 6c 69 63 69 65 73 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 | eir.needs..Policies.for.local.tr |
e2360 | 61 66 66 69 63 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f | affic.are.defined.in.this.sectio |
e2380 | 6e 2e 00 50 6f 6c 69 63 69 65 73 2c 20 69 6e 20 56 79 4f 53 2c 20 61 72 65 20 69 6d 70 6c 65 6d | n..Policies,.in.VyOS,.are.implem |
e23a0 | 65 6e 74 65 64 20 75 73 69 6e 67 20 46 52 52 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 72 6f | ented.using.FRR.filtering.and.ro |
e23c0 | 75 74 65 20 6d 61 70 73 2e 20 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f | ute.maps..Detailed.information.o |
e23e0 | 66 20 46 52 52 20 63 6f 75 6c 64 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 68 74 74 70 3a 2f 2f 64 | f.FRR.could.be.found.in.http://d |
e2400 | 6f 63 73 2e 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 00 50 6f 6c 69 63 79 00 50 6f 6c 69 63 79 | ocs.frrouting.org/.Policy.Policy |
e2420 | 20 53 65 63 74 69 6f 6e 73 00 50 6f 6c 69 63 79 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 74 61 | .Sections.Policy.for.checking.ta |
e2440 | 72 67 65 74 73 00 50 6f 6c 69 63 79 20 74 6f 20 74 72 61 63 6b 20 70 72 65 76 69 6f 75 73 6c 79 | rgets.Policy.to.track.previously |
e2460 | 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 50 6f 6c 69 63 79 | .established.connections..Policy |
e2480 | 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 | -Based.Routing.with.multiple.ISP |
e24a0 | 20 75 70 6c 69 6e 6b 73 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f 2f 70 62 72 5f 65 | .uplinks.(source../draw.io/pbr_e |
e24c0 | 78 61 6d 70 6c 65 5f 31 2e 64 72 61 77 69 6f 29 00 50 6f 72 74 20 47 72 6f 75 70 73 00 50 6f 72 | xample_1.drawio).Port.Groups.Por |
e24e0 | 74 20 4d 69 72 72 6f 72 20 28 53 50 41 4e 29 00 50 6f 72 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 | t.Mirror.(SPAN).Port.for.Dynamic |
e2500 | 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 | .Authorization.Extension.server. |
e2520 | 28 44 4d 2f 43 6f 41 29 00 50 6f 72 74 20 6e 61 6d 65 20 61 6e 64 20 64 65 73 63 72 69 70 74 69 | (DM/CoA).Port.name.and.descripti |
e2540 | 6f 6e 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f | on.Port.number.used.by.connectio |
e2560 | 6e 2c 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 39 32 37 33 60 60 00 50 6f 72 74 20 6e 75 6d 62 | n,.default.is.``9273``.Port.numb |
e2580 | 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 50 6f 72 74 20 74 6f 20 6c | er.used.by.connection..Port.to.l |
e25a0 | 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c | isten.for.HTTPS.requests;.defaul |
e25c0 | 74 20 34 34 33 00 50 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 77 68 | t.443.Portions.of.the.network.wh |
e25e0 | 69 63 68 20 61 72 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 28 69 2e 65 2e 2c 20 49 45 45 45 20 38 | ich.are.VLAN-aware.(i.e.,.IEEE.8 |
e2600 | 30 32 2e 31 71 5f 20 63 6f 6e 66 6f 72 6d 61 6e 74 29 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 56 | 02.1q_.conformant).can.include.V |
e2620 | 4c 41 4e 20 74 61 67 73 2e 20 57 68 65 6e 20 61 20 66 72 61 6d 65 20 65 6e 74 65 72 73 20 74 68 | LAN.tags..When.a.frame.enters.th |
e2640 | 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 | e.VLAN-aware.portion.of.the.netw |
e2660 | 6f 72 6b 2c 20 61 20 74 61 67 20 69 73 20 61 64 64 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 | ork,.a.tag.is.added.to.represent |
e2680 | 20 74 68 65 20 56 4c 41 4e 20 6d 65 6d 62 65 72 73 68 69 70 2e 20 45 61 63 68 20 66 72 61 6d 65 | .the.VLAN.membership..Each.frame |
e26a0 | 20 6d 75 73 74 20 62 65 20 64 69 73 74 69 6e 67 75 69 73 68 61 62 6c 65 20 61 73 20 62 65 69 6e | .must.be.distinguishable.as.bein |
e26c0 | 67 20 77 69 74 68 69 6e 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 56 4c 41 4e 2e 20 41 20 66 72 61 | g.within.exactly.one.VLAN..A.fra |
e26e0 | 6d 65 20 69 6e 20 74 68 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 | me.in.the.VLAN-aware.portion.of. |
e2700 | 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 | the.network.that.does.not.contai |
e2720 | 6e 20 61 20 56 4c 41 4e 20 74 61 67 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 66 6c | n.a.VLAN.tag.is.assumed.to.be.fl |
e2740 | 6f 77 69 6e 67 20 6f 6e 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 2e 00 50 72 65 2d 73 68 | owing.on.the.native.VLAN..Pre-sh |
e2760 | 61 72 65 64 20 6b 65 79 73 00 50 72 65 63 65 64 65 6e 63 65 00 50 72 65 65 6d 70 74 69 6f 6e 00 | ared.keys.Precedence.Preemption. |
e2780 | 50 72 65 66 65 72 20 61 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | Prefer.a.specific.routing.protoc |
e27a0 | 6f 6c 20 72 6f 75 74 65 73 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 | ol.routes.over.another.routing.p |
e27c0 | 72 6f 74 6f 63 6f 6c 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 | rotocol.running.on.the.same.rout |
e27e0 | 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e | er..Prefer.higher.local.preferen |
e2800 | 63 65 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 | ce.routes.to.lower..Prefer.highe |
e2820 | 72 20 6c 6f 63 61 6c 20 77 65 69 67 68 74 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 20 72 | r.local.weight.routes.to.lower.r |
e2840 | 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 28 73 74 61 74 | outes..Prefer.local.routes.(stat |
e2860 | 69 63 73 2c 20 61 67 67 72 65 67 61 74 65 73 2c 20 72 65 64 69 73 74 72 69 62 75 74 65 64 29 20 | ics,.aggregates,.redistributed). |
e2880 | 74 6f 20 72 65 63 65 69 76 65 64 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 73 68 6f 72 74 | to.received.routes..Prefer.short |
e28a0 | 65 73 74 20 68 6f 70 2d 63 6f 75 6e 74 20 41 53 5f 50 41 54 48 73 2e 00 50 72 65 66 65 72 20 74 | est.hop-count.AS_PATHs..Prefer.t |
e28c0 | 68 65 20 6c 6f 77 65 73 74 20 6f 72 69 67 69 6e 20 74 79 70 65 20 72 6f 75 74 65 2e 20 54 68 61 | he.lowest.origin.type.route..Tha |
e28e0 | 74 20 69 73 2c 20 70 72 65 66 65 72 20 49 47 50 20 6f 72 69 67 69 6e 20 72 6f 75 74 65 73 20 74 | t.is,.prefer.IGP.origin.routes.t |
e2900 | 6f 20 45 47 50 2c 20 74 6f 20 49 6e 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 65 73 2e 00 50 72 65 | o.EGP,.to.Incomplete.routes..Pre |
e2920 | 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 61 6e 20 65 | fer.the.route.received.from.an.e |
e2940 | 78 74 65 72 6e 61 6c 2c 20 65 42 47 50 20 70 65 65 72 20 6f 76 65 72 20 72 6f 75 74 65 73 20 72 | xternal,.eBGP.peer.over.routes.r |
e2960 | 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 72 20 74 79 70 65 73 20 6f 66 20 70 65 65 72 | eceived.from.other.types.of.peer |
e2980 | 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f | s..Prefer.the.route.received.fro |
e29a0 | 6d 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 72 20 74 72 61 6e 73 | m.the.peer.with.the.higher.trans |
e29c0 | 70 6f 72 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 61 73 20 61 20 6c 61 73 74 2d 72 65 | port.layer.address,.as.a.last-re |
e29e0 | 73 6f 72 74 20 74 69 65 2d 62 72 65 61 6b 65 72 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 | sort.tie-breaker..Prefer.the.rou |
e2a00 | 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 72 20 49 47 50 20 63 6f 73 74 2e 00 50 72 65 66 | te.with.the.lower.IGP.cost..Pref |
e2a20 | 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 60 72 6f | er.the.route.with.the.lowest.`ro |
e2a40 | 75 74 65 72 2d 49 44 60 2e 20 49 66 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 61 6e 20 60 4f | uter-ID`..If.the.route.has.an.`O |
e2a60 | 52 49 47 49 4e 41 54 4f 52 5f 49 44 60 20 61 74 74 72 69 62 75 74 65 2c 20 74 68 72 6f 75 67 68 | RIGINATOR_ID`.attribute,.through |
e2a80 | 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 2c 20 74 68 65 6e 20 74 68 61 74 20 72 6f 75 74 | .iBGP.reflection,.then.that.rout |
e2aa0 | 65 72 20 49 44 20 69 73 20 75 73 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 60 72 6f | er.ID.is.used,.otherwise.the.`ro |
e2ac0 | 75 74 65 72 2d 49 44 60 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 | uter-ID`.of.the.peer.the.route.w |
e2ae0 | 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 69 73 20 75 73 65 64 2e 00 50 72 65 66 65 72 | as.received.from.is.used..Prefer |
e2b00 | 65 6e 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 | ence.associated.with.the.default |
e2b20 | 20 72 6f 75 74 65 72 00 50 72 65 66 69 78 20 43 6f 6e 76 65 72 73 69 6f 6e 00 50 72 65 66 69 78 | .router.Prefix.Conversion.Prefix |
e2b40 | 20 44 65 6c 65 67 61 74 69 6f 6e 00 50 72 65 66 69 78 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 50 | .Delegation.Prefix.List.Policy.P |
e2b60 | 72 65 66 69 78 20 4c 69 73 74 73 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 | refix.Lists.Prefix.can.not.be.us |
e2b80 | 65 64 20 66 6f 72 20 6f 6e 2d 6c 69 6e 6b 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e 00 50 72 65 | ed.for.on-link.determination.Pre |
e2ba0 | 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 74 61 74 65 6c 65 73 | fix.can.not.be.used.for.stateles |
e2bc0 | 73 20 61 64 64 72 65 73 73 20 61 75 74 6f 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 72 65 | s.address.auto-configuration.Pre |
e2be0 | 66 69 78 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 | fix.filtering.can.be.done.using. |
e2c00 | 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 70 72 65 66 69 78 2d 6c 69 73 74 36 2e 00 50 72 | prefix-list.and.prefix-list6..Pr |
e2c20 | 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 20 62 65 | efix.length.in.interface.must.be |
e2c40 | 20 65 71 75 61 6c 20 6f 72 20 62 69 67 67 65 72 20 28 69 2e 65 2e 20 73 6d 61 6c 6c 65 72 20 6e | .equal.or.bigger.(i.e..smaller.n |
e2c60 | 65 74 77 6f 72 6b 29 20 74 68 61 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 6e 65 | etwork).than.prefix.length.in.ne |
e2c80 | 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 73 74 61 | twork.statement..For.example.sta |
e2ca0 | 74 65 6d 65 6e 74 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 65 6e 61 62 6c 65 20 6f 73 70 66 | tement.above.doesn't.enable.ospf |
e2cc0 | 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 | .on.interface.with.address.192.1 |
e2ce0 | 36 38 2e 31 2e 31 2f 32 33 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6f 6e 20 69 6e 74 65 72 66 | 68.1.1/23,.but.it.does.on.interf |
e2d00 | 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 32 39 2f 32 | ace.with.address.192.168.1.129/2 |
e2d20 | 35 2e 00 50 72 65 66 69 78 20 6c 69 73 74 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 6d 6f 73 | 5..Prefix.lists.provides.the.mos |
e2d40 | 74 20 70 6f 77 65 72 66 75 6c 20 70 72 65 66 69 78 20 62 61 73 65 64 20 66 69 6c 74 65 72 69 6e | t.powerful.prefix.based.filterin |
e2d60 | 67 20 6d 65 63 68 61 6e 69 73 6d 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 61 63 63 65 | g.mechanism..In.addition.to.acce |
e2d80 | 73 73 2d 6c 69 73 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 69 70 20 70 72 65 66 69 78 | ss-list.functionality,.ip.prefix |
e2da0 | 2d 6c 69 73 74 20 68 61 73 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 72 61 6e 67 65 20 73 70 | -list.has.prefix.length.range.sp |
e2dc0 | 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 50 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 20 61 67 61 | ecification..Prefix.to.match.aga |
e2de0 | 69 6e 73 74 2e 00 50 72 65 66 69 78 65 73 00 50 72 65 70 65 6e 64 20 74 68 65 20 65 78 69 73 74 | inst..Prefixes.Prepend.the.exist |
e2e00 | 69 6e 67 20 6c 61 73 74 20 41 53 20 6e 75 6d 62 65 72 20 28 74 68 65 20 6c 65 66 74 6d 6f 73 74 | ing.last.AS.number.(the.leftmost |
e2e20 | 20 41 53 4e 29 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 2e 00 50 72 65 70 65 6e 64 20 74 68 | .ASN).to.the.AS_PATH..Prepend.th |
e2e40 | 65 20 67 69 76 65 6e 20 73 74 72 69 6e 67 20 6f 66 20 41 53 20 6e 75 6d 62 65 72 73 20 74 6f 20 | e.given.string.of.AS.numbers.to. |
e2e60 | 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c | the.AS_PATH.of.the.BGP.path's.NL |
e2e80 | 52 49 2e 00 50 72 69 6e 63 69 70 6c 65 20 6f 66 20 53 4e 4d 50 20 43 6f 6d 6d 75 6e 69 63 61 74 | RI..Principle.of.SNMP.Communicat |
e2ea0 | 69 6f 6e 00 50 72 69 6e 74 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 6e 65 69 67 68 62 6f 72 20 | ion.Print.a.summary.of.neighbor. |
e2ec0 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 41 46 | connections.for.the.specified.AF |
e2ee0 | 49 2f 53 41 46 49 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 2e 00 50 72 69 6e 74 20 61 63 74 69 76 65 | I/SAFI.combination..Print.active |
e2f00 | 20 49 50 56 34 20 6f 72 20 49 50 56 36 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 | .IPV4.or.IPV6.routes.advertised. |
e2f20 | 76 69 61 20 74 68 65 20 56 50 4e 20 53 41 46 49 2e 00 50 72 69 6f 72 69 74 79 00 50 72 69 6f 72 | via.the.VPN.SAFI..Priority.Prior |
e2f40 | 69 74 79 20 51 75 65 75 65 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 2c 20 61 73 20 6f 74 68 | ity.Queue.Priority.Queue,.as.oth |
e2f60 | 65 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 69 65 73 2c 20 69 73 20 6f 6e 6c 79 | er.non-shaping.policies,.is.only |
e2f80 | 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 | .useful.if.your.outgoing.interfa |
e2fa0 | 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c | ce.is.really.full..If.it.is.not, |
e2fc0 | 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 | .VyOS.will.not.own.the.queue.and |
e2fe0 | 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 | .Priority.Queue.will.have.no.eff |
e3000 | 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c | ect..If.there.is.bandwidth.avail |
e3020 | 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 | able.on.the.physical.link,.you.c |
e3040 | 61 6e 20 65 6d 62 65 64 5f 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 6e 74 6f 20 61 20 | an.embed_.Priority.Queue.into.a. |
e3060 | 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 | classful.shaping.policy.to.make. |
e3080 | 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 6e 20 74 68 61 74 20 | sure.it.owns.the.queue..In.that. |
e30a0 | 63 61 73 65 20 70 61 63 6b 65 74 73 20 63 61 6e 20 62 65 20 70 72 69 6f 72 69 74 69 7a 65 64 20 | case.packets.can.be.prioritized. |
e30c0 | 62 61 73 65 64 20 6f 6e 20 44 53 43 50 2e 00 50 72 69 76 61 74 65 20 56 4c 41 4e 20 70 72 6f 78 | based.on.DSCP..Private.VLAN.prox |
e30e0 | 79 20 61 72 70 2e 20 42 61 73 69 63 61 6c 6c 79 20 61 6c 6c 6f 77 20 70 72 6f 78 79 20 61 72 70 | y.arp..Basically.allow.proxy.arp |
e3100 | 20 72 65 70 6c 69 65 73 20 62 61 63 6b 20 74 6f 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 | .replies.back.to.the.same.interf |
e3120 | 61 63 65 20 28 66 72 6f 6d 20 77 68 69 63 68 20 74 68 65 20 41 52 50 20 72 65 71 75 65 73 74 2f | ace.(from.which.the.ARP.request/ |
e3140 | 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 77 61 73 20 72 65 63 65 69 76 65 64 29 2e 00 50 72 6f 66 | solicitation.was.received)..Prof |
e3160 | 69 6c 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 66 72 6f 6d 20 74 68 65 20 | ile.generation.happens.from.the. |
e3180 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 61 6e 64 20 69 73 20 61 73 20 73 69 6d 70 | operational.level.and.is.as.simp |
e31a0 | 6c 65 20 61 73 20 69 73 73 75 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d | le.as.issuing.the.following.comm |
e31c0 | 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 74 6f 20 63 6f 6e 6e 65 | and.to.create.a.profile.to.conne |
e31e0 | 63 74 20 74 6f 20 74 68 65 20 49 4b 45 76 32 20 61 63 63 65 73 73 20 73 65 72 76 65 72 20 61 74 | ct.to.the.IKEv2.access.server.at |
e3200 | 20 60 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 60 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 | .``vpn.vyos.net``.with.the.confi |
e3220 | 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 60 60 72 77 60 60 20 72 65 6d 6f 74 65 2d 61 | guration.for.the.``rw``.remote-a |
e3240 | 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 67 72 6f 75 70 2e 00 50 72 6f 6d 65 74 68 65 | ccess.connection.group..Promethe |
e3260 | 75 73 2d 63 6c 69 65 6e 74 00 50 72 6f 74 65 63 74 73 20 68 6f 73 74 20 66 72 6f 6d 20 62 72 75 | us-client.Protects.host.from.bru |
e3280 | 74 65 2d 66 6f 72 63 65 20 61 74 74 61 63 6b 73 20 61 67 61 69 6e 73 74 20 53 53 48 2e 20 4c 6f | te-force.attacks.against.SSH..Lo |
e32a0 | 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 70 61 72 73 65 64 2c 20 6c 69 6e 65 2d 62 79 2d 6c | g.messages.are.parsed,.line-by-l |
e32c0 | 69 6e 65 2c 20 66 6f 72 20 72 65 63 6f 67 6e 69 7a 65 64 20 70 61 74 74 65 72 6e 73 2e 20 49 66 | ine,.for.recognized.patterns..If |
e32e0 | 20 61 6e 20 61 74 74 61 63 6b 2c 20 73 75 63 68 20 61 73 20 73 65 76 65 72 61 6c 20 6c 6f 67 69 | .an.attack,.such.as.several.logi |
e3300 | 6e 20 66 61 69 6c 75 72 65 73 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 2c | n.failures.within.a.few.seconds, |
e3320 | 20 69 73 20 64 65 74 65 63 74 65 64 2c 20 74 68 65 20 6f 66 66 65 6e 64 69 6e 67 20 49 50 20 69 | .is.detected,.the.offending.IP.i |
e3340 | 73 20 62 6c 6f 63 6b 65 64 2e 20 4f 66 66 65 6e 64 65 72 73 20 61 72 65 20 75 6e 62 6c 6f 63 6b | s.blocked..Offenders.are.unblock |
e3360 | 65 64 20 61 66 74 65 72 20 61 20 73 65 74 20 69 6e 74 65 72 76 61 6c 2e 00 50 72 6f 74 6f 63 6f | ed.after.a.set.interval..Protoco |
e3380 | 6c 20 66 6f 72 20 77 68 69 63 68 20 65 78 70 65 63 74 20 65 6e 74 72 69 65 73 20 6e 65 65 64 20 | l.for.which.expect.entries.need. |
e33a0 | 74 6f 20 62 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 2e 00 50 72 6f 74 6f 63 6f 6c 73 00 50 72 | to.be.synchronized..Protocols.Pr |
e33c0 | 6f 74 6f 63 6f 6c 73 20 61 72 65 3a 20 74 63 70 2c 20 73 63 74 70 2c 20 64 63 63 70 2c 20 75 64 | otocols.are:.tcp,.sctp,.dccp,.ud |
e33e0 | 70 2c 20 69 63 6d 70 20 61 6e 64 20 69 70 76 36 2d 69 63 6d 70 2e 00 50 72 6f 76 69 64 65 20 54 | p,.icmp.and.ipv6-icmp..Provide.T |
e3400 | 46 54 50 20 73 65 72 76 65 72 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 62 6f 74 68 20 49 50 76 | FTP.server.listening.on.both.IPv |
e3420 | 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 | 4.and.IPv6.addresses.``192.0.2.1 |
e3440 | 60 60 20 61 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 60 20 73 65 72 76 69 6e 67 20 74 | ``.and.``2001:db8::1``.serving.t |
e3460 | 68 65 20 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 60 60 2f 63 6f 6e 66 69 67 2f 74 66 74 70 62 6f | he.content.from.``/config/tftpbo |
e3480 | 6f 74 60 60 2e 20 55 70 6c 6f 61 64 69 6e 67 20 76 69 61 20 54 46 54 50 20 74 6f 20 74 68 69 73 | ot``..Uploading.via.TFTP.to.this |
e34a0 | 20 73 65 72 76 65 72 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 50 72 6f 76 69 64 65 20 61 20 49 | .server.is.disabled..Provide.a.I |
e34c0 | 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 20 64 65 73 63 72 69 | Pv4.or.IPv6.address.group.descri |
e34e0 | 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 | ption.Provide.a.IPv4.or.IPv6.net |
e3500 | 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 | work.group.description..Provide. |
e3520 | 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 72 75 6c 65 2e 00 50 72 6f | a.description.for.each.rule..Pro |
e3540 | 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 66 6c 6f 77 20 74 | vide.a.description.to.the.flow.t |
e3560 | 61 62 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 20 64 65 73 | able..Provide.a.domain.group.des |
e3580 | 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 6d 61 63 20 67 72 6f 75 70 20 64 65 | cription..Provide.a.mac.group.de |
e35a0 | 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 20 | scription..Provide.a.port.group. |
e35c0 | 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 | description..Provide.a.rule-set. |
e35e0 | 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c | description.to.a.custom.firewall |
e3600 | 20 63 68 61 69 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 | .chain..Provide.a.rule-set.descr |
e3620 | 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 | iption..Provide.an.IPv4.or.IPv6. |
e3640 | 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 | network.group.description..Provi |
e3660 | 64 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f | de.an.interface.group.descriptio |
e3680 | 6e 00 50 72 6f 76 69 64 65 72 20 2d 20 43 75 73 74 6f 6d 65 72 00 50 72 6f 76 69 64 65 73 20 61 | n.Provider.-.Customer.Provides.a |
e36a0 | 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 63 6f 68 65 72 65 6e 63 65 20 62 79 20 76 69 72 74 | .backbone.area.coherence.by.virt |
e36c0 | 75 61 6c 20 6c 69 6e 6b 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 2e 00 50 72 6f 76 69 64 65 73 | ual.link.establishment..Provides |
e36e0 | 20 61 20 70 65 72 2d 64 65 76 69 63 65 20 63 6f 6e 74 72 6f 6c 20 74 6f 20 65 6e 61 62 6c 65 2f | .a.per-device.control.to.enable/ |
e3700 | 64 69 73 61 62 6c 65 20 74 68 65 20 74 68 72 65 61 64 65 64 20 6d 6f 64 65 20 66 6f 72 20 61 6c | disable.the.threaded.mode.for.al |
e3720 | 6c 20 74 68 65 20 4e 41 50 49 20 69 6e 73 74 61 6e 63 65 73 20 6f 66 20 74 68 65 20 67 69 76 65 | l.the.NAPI.instances.of.the.give |
e3740 | 6e 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 2c 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 | n.network.device,.without.the.ne |
e3760 | 65 64 20 66 6f 72 20 61 20 64 65 76 69 63 65 20 75 70 2f 64 6f 77 6e 2e 00 50 72 6f 78 79 20 61 | ed.for.a.device.up/down..Proxy.a |
e3780 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 74 68 6f 64 2c 20 63 75 72 72 65 6e 74 6c 79 20 | uthentication.method,.currently. |
e37a0 | 6f 6e 6c 79 20 4c 44 41 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 00 50 73 65 75 64 6f 20 45 | only.LDAP.is.supported..Pseudo.E |
e37c0 | 74 68 65 72 6e 65 74 2f 4d 41 43 56 4c 41 4e 20 6f 70 74 69 6f 6e 73 00 50 73 65 75 64 6f 2d 45 | thernet/MACVLAN.options.Pseudo-E |
e37e0 | 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 6e 6f 74 20 62 65 20 72 65 | thernet.interfaces.can.not.be.re |
e3800 | 61 63 68 65 64 20 66 72 6f 6d 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 2e 20 54 | ached.from.your.internal.host..T |
e3820 | 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 74 72 79 20 74 | his.means.that.you.can.not.try.t |
e3840 | 6f 20 70 69 6e 67 20 61 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 | o.ping.a.Pseudo-Ethernet.interfa |
e3860 | 63 65 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 73 79 73 74 65 6d 20 6f 6e 20 77 68 69 63 68 | ce.from.the.host.system.on.which |
e3880 | 20 69 74 20 69 73 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 70 69 6e 67 20 77 69 6c 6c 20 62 65 | .it.is.defined..The.ping.will.be |
e38a0 | 20 6c 6f 73 74 2e 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 | .lost..Pseudo-Ethernet.interface |
e38c0 | 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 | s.may.not.work.in.environments.w |
e38e0 | 68 69 63 68 20 65 78 70 65 63 74 20 61 20 3a 61 62 62 72 3a 60 4e 49 43 20 28 4e 65 74 77 6f 72 | hich.expect.a.:abbr:`NIC.(Networ |
e3900 | 6b 20 49 6e 74 65 72 66 61 63 65 20 43 61 72 64 29 60 20 74 6f 20 6f 6e 6c 79 20 68 61 76 65 20 | k.Interface.Card)`.to.only.have. |
e3920 | 61 20 73 69 6e 67 6c 65 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 61 70 70 6c 69 65 73 20 74 | a.single.address..This.applies.t |
e3940 | 6f 3a 20 2d 20 56 4d 77 61 72 65 20 6d 61 63 68 69 6e 65 73 20 75 73 69 6e 67 20 64 65 66 61 75 | o:.-.VMware.machines.using.defau |
e3960 | 6c 74 20 73 65 74 74 69 6e 67 73 20 2d 20 4e 65 74 77 6f 72 6b 20 73 77 69 74 63 68 65 73 20 77 | lt.settings.-.Network.switches.w |
e3980 | 69 74 68 20 73 65 63 75 72 69 74 79 20 73 65 74 74 69 6e 67 73 20 61 6c 6c 6f 77 69 6e 67 20 6f | ith.security.settings.allowing.o |
e39a0 | 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 2d 20 78 44 53 4c 20 | nly.a.single.MAC.address.-.xDSL. |
e39c0 | 6d 6f 64 65 6d 73 20 74 68 61 74 20 74 72 79 20 74 6f 20 6c 65 61 72 6e 20 74 68 65 20 4d 41 43 | modems.that.try.to.learn.the.MAC |
e39e0 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4e 49 43 00 50 73 65 75 64 6f 2d 45 74 68 65 72 | .address.of.the.NIC.Pseudo-Ether |
e3a00 | 6e 65 74 20 6f 72 20 4d 41 43 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 | net.or.MACVLAN.interfaces.can.be |
e3a20 | 20 73 65 65 6e 20 61 73 20 73 75 62 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 72 65 67 75 6c 61 | .seen.as.subinterfaces.to.regula |
e3a40 | 72 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 45 61 63 68 20 61 6e 64 20 | r.ethernet.interfaces..Each.and. |
e3a60 | 65 76 65 72 79 20 73 75 62 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 64 20 61 20 | every.subinterface.is.created.a. |
e3a80 | 64 69 66 66 65 72 65 6e 74 20 6d 65 64 69 61 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 28 | different.media.access.control.( |
e3aa0 | 4d 41 43 29 20 61 64 64 72 65 73 73 2c 20 66 6f 72 20 61 20 73 69 6e 67 6c 65 20 70 68 79 73 69 | MAC).address,.for.a.single.physi |
e3ac0 | 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 | cal.Ethernet.port..Pseudo-.Ether |
e3ae0 | 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 68 61 76 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 | net.interfaces.have.most.of.thei |
e3b00 | 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 6e 20 76 69 72 74 75 61 6c 69 7a 65 64 20 65 6e 76 | r.application.in.virtualized.env |
e3b20 | 69 72 6f 6e 6d 65 6e 74 73 2c 00 50 75 62 6c 69 73 68 20 61 20 70 6f 72 74 20 66 6f 72 20 74 68 | ironments,.Publish.a.port.for.th |
e3b40 | 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 50 75 6c 6c 20 61 20 6e 65 77 20 69 6d 61 67 65 20 66 6f | e.container..Pull.a.new.image.fo |
e3b60 | 72 20 63 6f 6e 74 61 69 6e 65 72 00 51 69 6e 51 20 28 38 30 32 2e 31 61 64 29 00 51 6f 53 00 51 | r.container.QinQ.(802.1ad).QoS.Q |
e3b80 | 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 6c 6f 63 61 6c | ueue.size.for.listening.to.local |
e3ba0 | 20 63 6f 6e 6e 74 72 61 63 6b 20 65 76 65 6e 74 73 20 69 6e 20 4d 42 2e 00 51 75 65 75 65 20 73 | .conntrack.events.in.MB..Queue.s |
e3bc0 | 69 7a 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 | ize.for.syncing.conntrack.entrie |
e3be0 | 73 20 69 6e 20 4d 42 2e 00 51 75 6f 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 69 | s.in.MB..Quotes.can.be.used.insi |
e3c00 | 64 65 20 70 61 72 61 6d 65 74 65 72 20 76 61 6c 75 65 73 20 62 79 20 72 65 70 6c 61 63 69 6e 67 | de.parameter.values.by.replacing |
e3c20 | 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 | .all.quote.characters.with.the.s |
e3c40 | 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 60 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 72 | tring.``"``..They.will.be.r |
e3c60 | 65 70 6c 61 63 65 64 20 77 69 74 68 20 6c 69 74 65 72 61 6c 20 71 75 6f 74 65 20 63 68 61 72 61 | eplaced.with.literal.quote.chara |
e3c80 | 63 74 65 72 73 20 77 68 65 6e 20 67 65 6e 65 72 61 74 69 6e 67 20 64 68 63 70 64 2e 63 6f 6e 66 | cters.when.generating.dhcpd.conf |
e3ca0 | 2e 00 52 31 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 | ..R1.has.192.0.2.1/24.&.2001:db8 |
e3cc0 | 3a 3a 31 2f 36 34 00 52 31 20 69 73 20 6d 61 6e 61 67 65 64 20 74 68 72 6f 75 67 68 20 61 6e 20 | ::1/64.R1.is.managed.through.an. |
e3ce0 | 6f 75 74 2d 6f 66 2d 62 61 6e 64 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 72 65 73 69 64 65 73 | out-of-band.network.that.resides |
e3d00 | 20 69 6e 20 56 52 46 20 60 60 6d 67 6d 74 60 60 00 52 31 3a 00 52 32 20 68 61 73 20 31 39 32 2e | .in.VRF.``mgmt``.R1:.R2.has.192. |
e3d20 | 30 2e 32 2e 32 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 32 2f 36 34 00 52 32 3a 00 52 41 | 0.2.2/24.&.2001:db8::2/64.R2:.RA |
e3d40 | 44 49 55 53 00 52 41 44 49 55 53 20 53 65 74 75 70 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 | DIUS.RADIUS.Setup.RADIUS.advance |
e3d60 | 64 20 66 65 61 74 75 72 65 73 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 6f 70 74 69 6f | d.features.RADIUS.advanced.optio |
e3d80 | 6e 73 00 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 52 41 44 49 55 53 20 | ns.RADIUS.authentication.RADIUS. |
e3da0 | 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 61 74 74 72 69 62 75 74 65 00 52 41 44 49 | bandwidth.shaping.attribute.RADI |
e3dc0 | 55 53 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 | US.provides.the.IP.addresses.in. |
e3de0 | 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 20 76 69 61 20 46 72 61 6d 65 64 2d 49 50 2d | the.example.above.via.Framed-IP- |
e3e00 | 41 64 64 72 65 73 73 2e 00 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 20 60 60 31 39 32 2e | Address..RADIUS.server.at.``192. |
e3e20 | 31 36 38 2e 33 2e 31 30 60 60 20 77 69 74 68 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 60 60 | 168.3.10``.with.shared-secret.`` |
e3e40 | 56 79 4f 53 50 61 73 73 77 6f 72 64 60 60 00 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f | VyOSPassword``.RADIUS.servers.co |
e3e60 | 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 | uld.be.hardened.by.only.allowing |
e3e80 | 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 | .certain.IP.addresses.to.connect |
e3ea0 | 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | ..As.of.this.the.source.address. |
e3ec0 | 6f 66 20 65 61 63 68 20 52 41 44 49 55 53 20 71 75 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 | of.each.RADIUS.query.can.be.conf |
e3ee0 | 69 67 75 72 65 64 2e 00 52 41 44 49 55 53 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 00 52 46 | igured..RADIUS.source.address.RF |
e3f00 | 43 20 33 37 36 38 20 64 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 4d 41 43 20 61 64 64 | C.3768.defines.a.virtual.MAC.add |
e3f20 | 72 65 73 73 20 74 6f 20 65 61 63 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 | ress.to.each.VRRP.virtual.router |
e3f40 | 2e 20 54 68 69 73 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 20 4d 41 43 20 61 64 64 72 65 73 | ..This.virtual.router.MAC.addres |
e3f60 | 73 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 69 6e 20 | s.will.be.used.as.the.source.in. |
e3f80 | 61 6c 6c 20 70 65 72 69 6f 64 69 63 20 56 52 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 | all.periodic.VRRP.messages.sent. |
e3fa0 | 62 79 20 74 68 65 20 61 63 74 69 76 65 20 6e 6f 64 65 2e 20 57 68 65 6e 20 74 68 65 20 72 66 63 | by.the.active.node..When.the.rfc |
e3fc0 | 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 | 3768-compatibility.option.is.set |
e3fe0 | 2c 20 61 20 6e 65 77 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 | ,.a.new.VRRP.interface.is.create |
e4000 | 64 2c 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 61 6e 64 20 | d,.to.which.the.MAC.address.and. |
e4020 | 74 68 65 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 75 74 6f 6d 61 | the.virtual.IP.address.is.automa |
e4040 | 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 2e 00 52 46 43 20 38 36 38 20 74 69 6d 65 20 73 | tically.assigned..RFC.868.time.s |
e4060 | 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 52 49 50 00 52 49 50 76 31 20 61 73 20 | erver.IPv4.address.RIP.RIPv1.as. |
e4080 | 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 30 35 38 60 00 52 49 50 76 32 20 61 | described.in.:rfc:`1058`.RIPv2.a |
e40a0 | 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 35 33 60 00 52 50 4b 49 00 | s.described.in.:rfc:`2453`.RPKI. |
e40c0 | 52 53 2d 53 65 72 76 65 72 20 2d 20 52 53 2d 43 6c 69 65 6e 74 00 52 53 41 20 63 61 6e 20 62 65 | RS-Server.-.RS-Client.RSA.can.be |
e40e0 | 20 75 73 65 64 20 66 6f 72 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 6b 65 79 20 65 | .used.for.services.such.as.key.e |
e4100 | 78 63 68 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 70 75 72 70 | xchanges.and.for.encryption.purp |
e4120 | 6f 73 65 73 2e 20 54 6f 20 6d 61 6b 65 20 49 50 53 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 | oses..To.make.IPSec.work.with.dy |
e4140 | 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 2f 62 6f 74 68 20 73 69 64 65 73 2c | namic.address.on.one/both.sides, |
e4160 | 20 77 65 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 20 66 6f | .we.will.have.to.use.RSA.keys.fo |
e4180 | 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 79 20 61 72 65 20 76 65 72 79 20 | r.authentication..They.are.very. |
e41a0 | 66 61 73 74 20 61 6e 64 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 2e 00 52 53 41 2d 4b 65 79 73 | fast.and.easy.to.setup..RSA-Keys |
e41c0 | 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 63 6f 75 | .Random-Detect.Random-Detect.cou |
e41e0 | 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 68 65 61 76 79 20 74 72 61 66 66 69 63 2e 20 | ld.be.useful.for.heavy.traffic.. |
e4200 | 4f 6e 65 20 75 73 65 20 6f 66 20 74 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 6d 69 67 68 74 20 | One.use.of.this.algorithm.might. |
e4220 | 62 65 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 62 61 63 6b 62 6f 6e 65 20 6f 76 65 72 6c 6f 61 | be.to.prevent.a.backbone.overloa |
e4240 | 64 2e 20 42 75 74 20 6f 6e 6c 79 20 66 6f 72 20 54 43 50 20 28 62 65 63 61 75 73 65 20 64 72 6f | d..But.only.for.TCP.(because.dro |
e4260 | 70 70 65 64 20 70 61 63 6b 65 74 73 20 63 6f 75 6c 64 20 62 65 20 72 65 74 72 61 6e 73 6d 69 74 | pped.packets.could.be.retransmit |
e4280 | 74 65 64 29 2c 20 6e 6f 74 20 66 6f 72 20 55 44 50 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f | ted),.not.for.UDP..Range.is.1.to |
e42a0 | 20 32 35 35 2c 20 64 65 66 61 75 6c 74 20 69 73 20 31 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 | .255,.default.is.1..Range.is.1.t |
e42c0 | 6f 20 33 30 30 2c 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 2e 00 52 61 74 65 20 43 6f 6e 74 72 | o.300,.default.is.10..Rate.Contr |
e42e0 | 6f 6c 00 52 61 74 65 20 6c 69 6d 69 74 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 | ol.Rate.limit.Rate-Control.is.a. |
e4300 | 43 50 55 2d 66 72 69 65 6e 64 6c 79 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 6d 69 67 68 74 20 63 | CPU-friendly.policy..You.might.c |
e4320 | 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 69 74 20 77 68 65 6e 20 79 6f 75 20 6a 75 73 74 20 73 | onsider.using.it.when.you.just.s |
e4340 | 69 6d 70 6c 79 20 77 61 6e 74 20 74 6f 20 73 6c 6f 77 20 74 72 61 66 66 69 63 20 64 6f 77 6e 2e | imply.want.to.slow.traffic.down. |
e4360 | 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c | .Rate-Control.is.a.classless.pol |
e4380 | 69 63 79 20 74 68 61 74 20 6c 69 6d 69 74 73 20 74 68 65 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 | icy.that.limits.the.packet.flow. |
e43a0 | 74 6f 20 61 20 73 65 74 20 72 61 74 65 2e 20 49 74 20 69 73 20 61 20 70 75 72 65 20 73 68 61 70 | to.a.set.rate..It.is.a.pure.shap |
e43c0 | 65 72 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 63 68 65 64 75 6c 65 20 74 72 61 66 66 69 63 | er,.it.does.not.schedule.traffic |
e43e0 | 2e 20 54 72 61 66 66 69 63 20 69 73 20 66 69 6c 74 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 74 | ..Traffic.is.filtered.based.on.t |
e4400 | 68 65 20 65 78 70 65 6e 64 69 74 75 72 65 20 6f 66 20 74 6f 6b 65 6e 73 2e 20 54 6f 6b 65 6e 73 | he.expenditure.of.tokens..Tokens |
e4420 | 20 72 6f 75 67 68 6c 79 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 62 79 74 65 73 2e 00 52 61 | .roughly.correspond.to.bytes..Ra |
e4440 | 77 20 50 61 72 61 6d 65 74 65 72 73 00 52 61 77 20 70 61 72 61 6d 65 74 65 72 73 20 63 61 6e 20 | w.Parameters.Raw.parameters.can. |
e4460 | 62 65 20 70 61 73 73 65 64 20 74 6f 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 | be.passed.to.shared-network-name |
e4480 | 2c 20 73 75 62 6e 65 74 20 61 6e 64 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 3a 00 52 65 2d | ,.subnet.and.static-mapping:.Re- |
e44a0 | 67 65 6e 65 72 61 74 65 64 20 61 20 6b 6e 6f 77 6e 20 70 75 62 2f 70 72 69 76 61 74 65 20 6b 65 | generated.a.known.pub/private.ke |
e44c0 | 79 66 69 6c 65 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 | yfile.which.can.be.used.to.conne |
e44e0 | 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 69 63 65 73 20 28 65 2e 67 2e 20 52 50 4b 49 20 | ct.to.other.services.(e.g..RPKI. |
e4500 | 63 61 63 68 65 29 2e 00 52 65 2d 67 65 6e 65 72 61 74 65 64 20 74 68 65 20 70 75 62 6c 69 63 2f | cache)..Re-generated.the.public/ |
e4520 | 70 72 69 76 61 74 65 20 6b 65 79 70 6f 72 74 69 6f 6e 20 77 68 69 63 68 20 53 53 48 20 75 73 65 | private.keyportion.which.SSH.use |
e4540 | 73 20 74 6f 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 52 65 61 63 68 61 62 | s.to.secure.connections..Reachab |
e4560 | 6c 65 20 54 69 6d 65 00 52 65 61 6c 20 73 65 72 76 65 72 00 52 65 61 6c 20 73 65 72 76 65 72 20 | le.Time.Real.server.Real.server. |
e4580 | 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 00 52 65 61 6c 20 73 65 72 76 65 72 20 | IP.address.and.port.Real.server. |
e45a0 | 69 73 20 61 75 74 6f 2d 65 78 63 6c 75 64 65 64 20 69 66 20 70 6f 72 74 20 63 68 65 63 6b 20 77 | is.auto-excluded.if.port.check.w |
e45c0 | 69 74 68 20 74 68 69 73 20 73 65 72 76 65 72 20 66 61 69 6c 2e 00 52 65 63 65 69 76 65 20 74 72 | ith.this.server.fail..Receive.tr |
e45e0 | 61 66 66 69 63 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 63 72 65 61 74 65 64 20 62 | affic.from.connections.created.b |
e4600 | 79 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 61 6c 73 6f 20 62 61 6c 61 6e 63 65 64 2e 20 57 | y.the.server.is.also.balanced..W |
e4620 | 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 73 65 6e 64 73 20 61 6e 20 41 52 | hen.the.local.system.sends.an.AR |
e4640 | 50 20 52 65 71 75 65 73 74 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 63 6f 70 | P.Request.the.bonding.driver.cop |
e4660 | 69 65 73 20 61 6e 64 20 73 61 76 65 73 20 74 68 65 20 70 65 65 72 27 73 20 49 50 20 69 6e 66 6f | ies.and.saves.the.peer's.IP.info |
e4680 | 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 70 61 63 6b 65 74 2e 20 57 68 65 | rmation.from.the.ARP.packet..Whe |
e46a0 | 6e 20 74 68 65 20 41 52 50 20 52 65 70 6c 79 20 61 72 72 69 76 65 73 20 66 72 6f 6d 20 74 68 65 | n.the.ARP.Reply.arrives.from.the |
e46c0 | 20 70 65 65 72 2c 20 69 74 73 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 69 73 20 72 | .peer,.its.hardware.address.is.r |
e46e0 | 65 74 72 69 65 76 65 64 20 61 6e 64 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 | etrieved.and.the.bonding.driver. |
e4700 | 69 6e 69 74 69 61 74 65 73 20 61 6e 20 41 52 50 20 72 65 70 6c 79 20 74 6f 20 74 68 69 73 20 70 | initiates.an.ARP.reply.to.this.p |
e4720 | 65 65 72 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 | eer.assigning.it.to.one.of.the.s |
e4740 | 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 2e 20 41 20 70 72 6f 62 6c 65 6d 61 74 69 63 | laves.in.the.bond..A.problematic |
e4760 | 20 6f 75 74 63 6f 6d 65 20 6f 66 20 75 73 69 6e 67 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f | .outcome.of.using.ARP.negotiatio |
e4780 | 6e 20 66 6f 72 20 62 61 6c 61 6e 63 69 6e 67 20 69 73 20 74 68 61 74 20 65 61 63 68 20 74 69 6d | n.for.balancing.is.that.each.tim |
e47a0 | 65 20 74 68 61 74 20 61 6e 20 41 52 50 20 72 65 71 75 65 73 74 20 69 73 20 62 72 6f 61 64 63 61 | e.that.an.ARP.request.is.broadca |
e47c0 | 73 74 20 69 74 20 75 73 65 73 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 | st.it.uses.the.hardware.address. |
e47e0 | 6f 66 20 74 68 65 20 62 6f 6e 64 2e 20 48 65 6e 63 65 2c 20 70 65 65 72 73 20 6c 65 61 72 6e 20 | of.the.bond..Hence,.peers.learn. |
e4800 | 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 | the.hardware.address.of.the.bond |
e4820 | 20 61 6e 64 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 20 6f 66 20 72 65 63 65 69 76 65 20 74 72 | .and.the.balancing.of.receive.tr |
e4840 | 61 66 66 69 63 20 63 6f 6c 6c 61 70 73 65 73 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 | affic.collapses.to.the.current.s |
e4860 | 6c 61 76 65 2e 20 54 68 69 73 20 69 73 20 68 61 6e 64 6c 65 64 20 62 79 20 73 65 6e 64 69 6e 67 | lave..This.is.handled.by.sending |
e4880 | 20 75 70 64 61 74 65 73 20 28 41 52 50 20 52 65 70 6c 69 65 73 29 20 74 6f 20 61 6c 6c 20 74 68 | .updates.(ARP.Replies).to.all.th |
e48a0 | 65 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 69 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 | e.peers.with.their.individually. |
e48c0 | 61 73 73 69 67 6e 65 64 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 73 75 63 68 20 74 | assigned.hardware.address.such.t |
e48e0 | 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 | hat.the.traffic.is.redistributed |
e4900 | 2e 20 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 69 73 20 61 6c 73 6f 20 72 65 64 69 73 74 | ..Receive.traffic.is.also.redist |
e4920 | 72 69 62 75 74 65 64 20 77 68 65 6e 20 61 20 6e 65 77 20 73 6c 61 76 65 20 69 73 20 61 64 64 65 | ributed.when.a.new.slave.is.adde |
e4940 | 64 20 74 6f 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 77 68 65 6e 20 61 6e 20 69 6e 61 63 74 69 | d.to.the.bond.and.when.an.inacti |
e4960 | 76 65 20 73 6c 61 76 65 20 69 73 20 72 65 2d 61 63 74 69 76 61 74 65 64 2e 20 54 68 65 20 72 65 | ve.slave.is.re-activated..The.re |
e4980 | 63 65 69 76 65 20 6c 6f 61 64 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 73 65 71 75 65 6e | ceive.load.is.distributed.sequen |
e49a0 | 74 69 61 6c 6c 79 20 28 72 6f 75 6e 64 20 72 6f 62 69 6e 29 20 61 6d 6f 6e 67 20 74 68 65 20 67 | tially.(round.robin).among.the.g |
e49c0 | 72 6f 75 70 20 6f 66 20 68 69 67 68 65 73 74 20 73 70 65 65 64 20 73 6c 61 76 65 73 20 69 6e 20 | roup.of.highest.speed.slaves.in. |
e49e0 | 74 68 65 20 62 6f 6e 64 2e 00 52 65 63 65 69 76 65 64 20 52 41 44 49 55 53 20 61 74 74 72 69 62 | the.bond..Received.RADIUS.attrib |
e4a00 | 75 74 65 73 20 68 61 76 65 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 74 68 61 6e | utes.have.a.higher.priority.than |
e4a20 | 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 43 | .parameters.defined.within.the.C |
e4a40 | 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 65 | LI.configuration,.refer.to.the.e |
e4a60 | 78 70 6c 61 6e 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 00 52 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f | xplanation.below..Recommended.fo |
e4a80 | 72 20 6c 61 72 67 65 72 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 52 65 64 69 72 65 63 74 | r.larger.installations..Redirect |
e4aa0 | 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 | .HTTP.to.HTTPS.Redirect.Microsof |
e4ac0 | 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 | t.RDP.traffic.from.the.internal. |
e4ae0 | 28 4c 41 4e 2c 20 70 72 69 76 61 74 65 29 20 6e 65 74 77 6f 72 6b 20 76 69 61 20 3a 72 65 66 3a | (LAN,.private).network.via.:ref: |
e4b00 | 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 31 30 20 74 6f | `destination-nat`.in.rule.110.to |
e4b20 | 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e | .the.internal,.private.host.192. |
e4b40 | 30 2e 32 2e 34 30 2e 20 57 65 20 61 6c 73 6f 20 6e 65 65 64 20 61 20 3a 72 65 66 3a 60 73 6f 75 | 0.2.40..We.also.need.a.:ref:`sou |
e4b60 | 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 20 31 31 30 20 66 6f 72 20 74 68 65 20 72 65 76 65 72 73 | rce-nat`.rule.110.for.the.revers |
e4b80 | 65 20 70 61 74 68 20 6f 66 20 74 68 65 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 69 6e 74 65 72 | e.path.of.the.traffic..The.inter |
e4ba0 | 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 69 73 20 72 65 61 63 | nal.network.192.0.2.0/24.is.reac |
e4bc0 | 68 61 62 6c 65 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 30 2e 31 30 60 2e 00 52 | hable.via.interface.`eth0.10`..R |
e4be0 | 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 | edirect.Microsoft.RDP.traffic.fr |
e4c00 | 6f 6d 20 74 68 65 20 6f 75 74 73 69 64 65 20 28 57 41 4e 2c 20 65 78 74 65 72 6e 61 6c 29 20 77 | om.the.outside.(WAN,.external).w |
e4c20 | 6f 72 6c 64 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 | orld.via.:ref:`destination-nat`. |
e4c40 | 69 6e 20 72 75 6c 65 20 31 30 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 | in.rule.100.to.the.internal,.pri |
e4c60 | 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 00 52 65 64 69 72 65 63 74 20 55 | vate.host.192.0.2.40..Redirect.U |
e4c80 | 52 4c 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 00 52 65 64 69 73 74 72 69 62 75 74 | RL.to.a.new.location.Redistribut |
e4ca0 | 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 65 64 75 6e 64 61 6e 63 79 20 61 6e 64 | ion.Configuration.Redundancy.and |
e4cc0 | 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 2e 20 54 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c | .load.sharing..There.are.multipl |
e4ce0 | 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 20 61 74 20 74 68 65 20 65 64 67 65 20 6f 66 20 61 | e.NAT66.devices.at.the.edge.of.a |
e4d00 | 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e | n.IPv6.network.to.another.IPv6.n |
e4d20 | 65 74 77 6f 72 6b 2e 20 54 68 65 20 70 61 74 68 20 74 68 72 6f 75 67 68 20 74 68 65 20 4e 41 54 | etwork..The.path.through.the.NAT |
e4d40 | 36 36 20 64 65 76 69 63 65 20 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 | 66.device.to.another.IPv6.networ |
e4d60 | 6b 20 66 6f 72 6d 73 20 61 6e 20 65 71 75 69 76 61 6c 65 6e 74 20 72 6f 75 74 65 2c 20 61 6e 64 | k.forms.an.equivalent.route,.and |
e4d80 | 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 6c 6f 61 64 2d 73 68 61 72 65 64 20 6f 6e 20 74 | .traffic.can.be.load-shared.on.t |
e4da0 | 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 | hese.NAT66.devices..In.this.case |
e4dc0 | 2c 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 65 20 73 6f 75 | ,.you.can.configure.the.same.sou |
e4de0 | 72 63 65 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 73 20 6f 6e | rce.address.translation.rules.on |
e4e00 | 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 73 6f 20 74 68 61 74 20 61 6e | .these.NAT66.devices,.so.that.an |
e4e20 | 79 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 61 6e 20 68 61 6e 64 6c 65 20 49 50 76 36 20 74 | y.NAT66.device.can.handle.IPv6.t |
e4e40 | 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 64 69 66 66 65 72 65 6e 74 20 73 69 74 65 73 2e 00 | raffic.between.different.sites.. |
e4e60 | 52 65 67 69 73 74 65 72 20 44 4e 53 20 72 65 63 6f 72 64 20 60 60 65 78 61 6d 70 6c 65 2e 76 79 | Register.DNS.record.``example.vy |
e4e80 | 6f 73 2e 69 6f 60 60 20 6f 6e 20 44 4e 53 20 73 65 72 76 65 72 20 60 60 6e 73 31 2e 76 79 6f 73 | os.io``.on.DNS.server.``ns1.vyos |
e4ea0 | 2e 69 6f 60 60 00 52 65 67 75 6c 61 72 20 56 4c 41 4e 73 20 28 38 30 32 2e 31 71 29 00 52 65 67 | .io``.Regular.VLANs.(802.1q).Reg |
e4ec0 | 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 | ular.expression.to.match.against |
e4ee0 | 20 61 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 | .a.community-list..Regular.expre |
e4f00 | 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 6c 61 72 67 65 20 63 | ssion.to.match.against.a.large.c |
e4f20 | 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f | ommunity.list..Regular.expressio |
e4f40 | 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 41 53 20 70 61 74 68 2e 20 46 | n.to.match.against.an.AS.path..F |
e4f60 | 6f 72 20 65 78 61 6d 70 6c 65 20 22 36 34 35 30 31 20 36 34 35 30 32 22 2e 00 52 65 67 75 6c 61 | or.example."64501.64502"..Regula |
e4f80 | 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 6e | r.expression.to.match.against.an |
e4fa0 | 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2c 20 77 68 65 72 65 20 | .extended.community.list,.where. |
e4fc0 | 74 65 78 74 20 63 6f 75 6c 64 20 62 65 3a 00 52 65 6a 65 63 74 20 44 48 43 50 20 6c 65 61 73 65 | text.could.be:.Reject.DHCP.lease |
e4fe0 | 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 61 64 64 72 65 73 73 20 6f 72 20 72 61 6e 67 65 2e | s.from.a.given.address.or.range. |
e5000 | 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 6d 6f 64 65 6d 20 67 69 76 | .This.is.useful.when.a.modem.giv |
e5020 | 65 73 20 61 20 6c 6f 63 61 6c 20 49 50 20 77 68 65 6e 20 66 69 72 73 74 20 73 74 61 72 74 69 6e | es.a.local.IP.when.first.startin |
e5040 | 67 2e 00 52 65 6d 65 6d 62 65 72 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 | g..Remember.source.IP.in.seconds |
e5060 | 20 62 65 66 6f 72 65 20 72 65 73 65 74 20 74 68 65 69 72 20 73 63 6f 72 65 2e 20 54 68 65 20 64 | .before.reset.their.score..The.d |
e5080 | 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 2e 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 00 52 65 | efault.is.1800..Remote.Access.Re |
e50a0 | 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f 61 64 57 61 72 72 69 6f 72 22 20 45 78 61 6d 70 6c | mote.Access."RoadWarrior".Exampl |
e50c0 | 65 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f 61 64 57 61 72 72 69 6f 72 22 20 63 6c | e.Remote.Access."RoadWarrior".cl |
e50e0 | 69 65 6e 74 73 00 52 65 6d 6f 74 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e | ients.Remote.Configuration.-.Ann |
e5100 | 6f 74 61 74 65 64 3a 00 52 65 6d 6f 74 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 52 65 | otated:.Remote.Configuration:.Re |
e5120 | 6d 6f 74 65 20 48 6f 73 74 00 52 65 6d 6f 74 65 20 55 52 4c 00 52 65 6d 6f 74 65 20 55 52 4c 20 | mote.Host.Remote.URL.Remote.URL. |
e5140 | 74 6f 20 53 70 6c 75 6e 6b 20 63 6f 6c 6c 65 63 74 6f 72 00 52 65 6d 6f 74 65 20 55 52 4c 2e 00 | to.Splunk.collector.Remote.URL.. |
e5160 | 52 65 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 60 60 20 62 75 63 6b 65 74 20 6e 61 6d 65 00 | Remote.``InfluxDB``.bucket.name. |
e5180 | 52 65 6d 6f 74 65 20 64 61 74 61 62 61 73 65 20 6e 61 6d 65 2e 00 52 65 6d 6f 74 65 20 70 65 65 | Remote.database.name..Remote.pee |
e51a0 | 72 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 | r.IP.`<address>`.of.the.second.D |
e51c0 | 48 43 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 69 73 20 66 61 69 6c 6f 76 65 72 20 63 6c 75 73 | HCP.server.in.this.failover.clus |
e51e0 | 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 6f 72 74 00 52 65 6d 6f 74 65 20 74 72 61 6e 73 6d 69 73 | ter..Remote.port.Remote.transmis |
e5200 | 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 77 69 6c 6c 20 62 65 20 6d 75 6c 74 69 70 6c 69 65 64 | sion.interval.will.be.multiplied |
e5220 | 20 62 79 20 74 68 69 73 20 76 61 6c 75 65 00 52 65 6e 61 6d 69 6e 67 20 63 6c 69 65 6e 74 73 20 | .by.this.value.Renaming.clients. |
e5240 | 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 52 41 44 49 55 53 00 52 65 70 65 61 74 20 74 68 65 20 | interfaces.by.RADIUS.Repeat.the. |
e5260 | 70 72 6f 63 65 64 75 72 65 20 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 52 | procedure.on.the.other.router..R |
e5280 | 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 52 65 71 75 65 73 74 20 6f 6e 6c 79 20 61 20 | eplay.protection.Request.only.a. |
e52a0 | 74 65 6d 70 6f 72 61 72 79 20 61 64 64 72 65 73 73 20 61 6e 64 20 6e 6f 74 20 66 6f 72 6d 20 61 | temporary.address.and.not.form.a |
e52c0 | 6e 20 49 41 5f 4e 41 20 28 49 64 65 6e 74 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 66 6f | n.IA_NA.(Identity.Association.fo |
e52e0 | 72 20 4e 6f 6e 2d 74 65 6d 70 6f 72 61 72 79 20 41 64 64 72 65 73 73 65 73 29 20 70 61 72 74 6e | r.Non-temporary.Addresses).partn |
e5300 | 65 72 73 68 69 70 2e 00 52 65 71 75 65 73 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 74 | ership..Requests.are.forwarded.t |
e5320 | 68 72 6f 75 67 68 20 60 60 65 74 68 32 60 60 20 61 73 20 74 68 65 20 60 75 70 73 74 72 65 61 6d | hrough.``eth2``.as.the.`upstream |
e5340 | 20 69 6e 74 65 72 66 61 63 65 60 00 52 65 71 75 69 72 65 20 74 68 65 20 70 65 65 72 20 74 6f 20 | .interface`.Require.the.peer.to. |
e5360 | 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 74 73 65 6c 66 20 75 73 69 6e 67 20 6f 6e 65 20 6f 66 | authenticate.itself.using.one.of |
e5380 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 70 61 70 2c 20 63 | .the.following.protocols:.pap,.c |
e53a0 | 68 61 70 2c 20 6d 73 63 68 61 70 2c 20 6d 73 63 68 61 70 2d 76 32 2e 00 52 65 71 75 69 72 65 6d | hap,.mschap,.mschap-v2..Requirem |
e53c0 | 65 6e 74 73 00 52 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 79 6e 70 | ents.Requirements.to.enable.synp |
e53e0 | 72 6f 78 79 3a 00 52 65 71 75 69 72 65 6d 65 6e 74 73 3a 00 52 65 73 65 74 00 52 65 73 65 74 20 | roxy:.Requirements:.Reset.Reset. |
e5400 | 4f 70 65 6e 56 50 4e 00 52 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 52 65 73 65 74 73 20 74 68 | OpenVPN.Reset.commands.Resets.th |
e5420 | 65 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 20 64 61 74 | e.local.DNS.forwarding.cache.dat |
e5440 | 61 62 61 73 65 2e 20 59 6f 75 20 63 61 6e 20 72 65 73 65 74 20 74 68 65 20 63 61 63 68 65 20 66 | abase..You.can.reset.the.cache.f |
e5460 | 6f 72 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 6f 72 20 6f 6e 6c 79 20 66 6f 72 20 65 6e 74 72 69 | or.all.entries.or.only.for.entri |
e5480 | 65 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2e 00 52 65 73 74 61 72 74 | es.to.a.specific.domain..Restart |
e54a0 | 00 52 65 73 74 61 72 74 20 44 48 43 50 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 00 52 65 73 74 | .Restart.DHCP.relay.service.Rest |
e54c0 | 61 72 74 20 44 48 43 50 76 36 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 | art.DHCPv6.relay.agent.immediate |
e54e0 | 6c 79 2e 00 52 65 73 74 61 72 74 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 52 65 | ly..Restart.a.given.container.Re |
e5500 | 73 74 61 72 74 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 52 65 73 | start.mDNS.repeater.service..Res |
e5520 | 74 61 72 74 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 00 52 65 73 74 61 72 74 20 74 68 65 | tart.the.DHCP.server.Restart.the |
e5540 | 20 49 47 4d 50 20 70 72 6f 78 79 20 70 72 6f 63 65 73 73 2e 00 52 65 73 74 61 72 74 20 74 68 65 | .IGMP.proxy.process..Restart.the |
e5560 | 20 53 53 48 20 64 61 65 6d 6f 6e 20 70 72 6f 63 65 73 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 | .SSH.daemon.process,.the.current |
e5580 | 20 73 65 73 73 69 6f 6e 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2c 20 6f 6e 6c 79 20 74 | .session.is.not.affected,.only.t |
e55a0 | 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 64 61 65 6d 6f 6e 20 69 73 20 72 65 73 74 61 72 74 65 | he.background.daemon.is.restarte |
e55c0 | 64 2e 00 52 65 73 74 61 72 74 73 20 74 68 65 20 44 4e 53 20 72 65 63 75 72 73 6f 72 20 70 72 6f | d..Restarts.the.DNS.recursor.pro |
e55e0 | 63 65 73 73 2e 20 54 68 69 73 20 61 6c 73 6f 20 69 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 20 | cess..This.also.invalidates.the. |
e5600 | 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 2e 00 52 65 73 75 | local.DNS.forwarding.cache..Resu |
e5620 | 6c 74 69 6e 67 20 69 6e 00 52 65 73 75 6c 74 73 20 69 6e 3a 00 52 65 74 72 61 6e 73 6d 69 74 20 | lting.in.Results.in:.Retransmit. |
e5640 | 54 69 6d 65 72 00 52 65 74 72 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 69 73 74 69 63 | Timer.Retrieve.current.statistic |
e5660 | 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 | s.of.connection.tracking.subsyst |
e5680 | 65 6d 2e 00 52 65 74 72 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 63 | em..Retrieve.current.status.of.c |
e56a0 | 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 | onnection.tracking.subsystem..Re |
e56c0 | 74 72 69 65 76 65 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 72 6f 6d 20 63 | trieve.public.key.portion.from.c |
e56e0 | 6f 6e 66 69 67 75 72 65 64 20 57 49 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 00 52 | onfigured.WIreGuard.interface..R |
e5700 | 65 76 65 72 73 65 2d 70 72 6f 78 79 00 52 6f 75 6e 64 20 52 6f 62 69 6e 00 52 6f 75 74 65 20 41 | everse-proxy.Round.Robin.Route.A |
e5720 | 67 67 72 65 67 61 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 44 | ggregation.Configuration.Route.D |
e5740 | 61 6d 70 65 6e 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 00 52 6f 75 74 65 20 46 | ampening.Route.Filtering.Route.F |
e5760 | 69 6c 74 65 72 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 4d 61 70 | iltering.Configuration.Route.Map |
e5780 | 00 52 6f 75 74 65 20 4d 61 70 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 52 65 64 69 73 74 72 69 | .Route.Map.Policy.Route.Redistri |
e57a0 | 62 75 74 69 6f 6e 00 52 6f 75 74 65 20 52 65 66 6c 65 63 74 6f 72 20 43 6f 6e 66 69 67 75 72 61 | bution.Route.Reflector.Configura |
e57c0 | 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 | tion.Route.Selection.Route.Selec |
e57e0 | 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 61 6e 64 20 52 6f 75 | tion.Configuration.Route.and.Rou |
e5800 | 74 65 36 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 77 69 63 68 20 | te6.Policy.Route.dampening.wich. |
e5820 | 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 33 39 60 20 65 6e 61 62 6c 65 73 | described.in.:rfc:`2439`.enables |
e5840 | 20 79 6f 75 20 74 6f 20 69 64 65 6e 74 69 66 79 20 72 6f 75 74 65 73 20 74 68 61 74 20 72 65 70 | .you.to.identify.routes.that.rep |
e5860 | 65 61 74 65 64 6c 79 20 66 61 69 6c 20 61 6e 64 20 72 65 74 75 72 6e 2e 20 49 66 20 72 6f 75 74 | eatedly.fail.and.return..If.rout |
e5880 | 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 61 6e 20 75 6e 73 74 61 | e.dampening.is.enabled,.an.unsta |
e58a0 | 62 6c 65 20 72 6f 75 74 65 20 61 63 63 75 6d 75 6c 61 74 65 73 20 70 65 6e 61 6c 74 69 65 73 20 | ble.route.accumulates.penalties. |
e58c0 | 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c 73 20 61 6e 64 20 72 65 | each.time.the.route.fails.and.re |
e58e0 | 74 75 72 6e 73 2e 20 49 66 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 | turns..If.the.accumulated.penalt |
e5900 | 69 65 73 20 65 78 63 65 65 64 20 61 20 74 68 72 65 73 68 6f 6c 64 2c 20 74 68 65 20 72 6f 75 74 | ies.exceed.a.threshold,.the.rout |
e5920 | 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 69 73 20 | e.is.no.longer.advertised..This. |
e5940 | 69 73 20 72 6f 75 74 65 20 73 75 70 70 72 65 73 73 69 6f 6e 2e 20 52 6f 75 74 65 73 20 74 68 61 | is.route.suppression..Routes.tha |
e5960 | 74 20 68 61 76 65 20 62 65 65 6e 20 73 75 70 70 72 65 73 73 65 64 20 61 72 65 20 72 65 2d 65 6e | t.have.been.suppressed.are.re-en |
e5980 | 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6f 6e 6c | tered.into.the.routing.table.onl |
e59a0 | 79 20 77 68 65 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 68 65 69 72 20 70 65 6e 61 6c | y.when.the.amount.of.their.penal |
e59c0 | 74 79 20 66 61 6c 6c 73 20 62 65 6c 6f 77 20 61 20 74 68 72 65 73 68 6f 6c 64 2e 00 52 6f 75 74 | ty.falls.below.a.threshold..Rout |
e59e0 | 65 20 66 69 6c 74 65 72 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 75 73 69 6e 67 20 61 20 | e.filter.can.be.applied.using.a. |
e5a00 | 72 6f 75 74 65 2d 6d 61 70 3a 00 52 6f 75 74 65 20 6d 61 70 20 69 73 20 61 20 70 6f 77 65 72 66 | route-map:.Route.map.is.a.powerf |
e5a20 | 75 6c 6c 20 63 6f 6d 6d 61 6e 64 2c 20 74 68 61 74 20 67 69 76 65 73 20 6e 65 74 77 6f 72 6b 20 | ull.command,.that.gives.network. |
e5a40 | 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 61 6e 64 | administrators.a.very.useful.and |
e5a60 | 20 66 6c 65 78 69 62 6c 65 20 74 6f 6f 6c 20 66 6f 72 20 74 72 61 66 66 69 63 20 6d 61 6e 69 70 | .flexible.tool.for.traffic.manip |
e5a80 | 75 6c 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 61 70 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 | ulation..Route.maps.can.be.confi |
e5aa0 | 67 75 72 65 64 20 74 6f 20 6d 61 74 63 68 20 61 20 73 70 65 63 69 66 69 63 20 52 50 4b 49 20 76 | gured.to.match.a.specific.RPKI.v |
e5ac0 | 61 6c 69 64 61 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 | alidation.state..This.allows.the |
e5ae0 | 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 6c 6f 63 61 6c 20 70 6f 6c 69 63 69 65 73 2c 20 77 68 69 | .creation.of.local.policies,.whi |
e5b00 | 63 68 20 68 61 6e 64 6c 65 20 42 47 50 20 72 6f 75 74 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 | ch.handle.BGP.routes.based.on.th |
e5b20 | 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 74 68 65 20 50 72 65 66 69 78 20 4f 72 69 67 69 6e 20 56 | e.outcome.of.the.Prefix.Origin.V |
e5b40 | 61 6c 69 64 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 65 74 72 69 63 00 52 6f 75 74 65 20 74 61 | alidation..Route.metric.Route.ta |
e5b60 | 67 20 74 6f 20 6d 61 74 63 68 2e 00 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 | g.to.match..Router.Advertisement |
e5b80 | 73 00 52 6f 75 74 65 72 20 4c 69 66 65 74 69 6d 65 00 52 6f 75 74 65 72 20 72 65 63 65 69 76 65 | s.Router.Lifetime.Router.receive |
e5ba0 | 73 20 44 48 43 50 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 6f 6e 20 60 60 65 74 68 31 | s.DHCP.client.requests.on.``eth1 |
e5bc0 | 60 60 20 61 6e 64 20 72 65 6c 61 79 73 20 74 68 65 6d 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 | ``.and.relays.them.to.the.server |
e5be0 | 20 61 74 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 52 6f 75 74 65 73 | .at.10.0.1.4.on.``eth2``..Routes |
e5c00 | 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 | .exported.from.a.unicast.VRF.to. |
e5c20 | 74 68 65 20 56 50 4e 20 52 49 42 20 6d 75 73 74 20 62 65 20 61 75 67 6d 65 6e 74 65 64 20 62 79 | the.VPN.RIB.must.be.augmented.by |
e5c40 | 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 3a 00 52 6f 75 74 65 73 20 6f 6e 20 4e 6f 64 65 20 | .two.parameters:.Routes.on.Node. |
e5c60 | 32 3a 00 52 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 73 65 6e 74 20 66 72 6f 6d 20 70 72 6f | 2:.Routes.that.are.sent.from.pro |
e5c80 | 76 69 64 65 72 2c 20 72 73 2d 73 65 72 76 65 72 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f | vider,.rs-server,.or.the.peer.lo |
e5ca0 | 63 61 6c 2d 72 6f 6c 65 20 28 6f 72 20 69 66 20 72 65 63 65 69 76 65 64 20 62 79 20 63 75 73 74 | cal-role.(or.if.received.by.cust |
e5cc0 | 6f 6d 65 72 2c 20 72 73 2d 63 6c 69 65 6e 74 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 | omer,.rs-client,.or.the.peer.loc |
e5ce0 | 61 6c 2d 72 6f 6c 65 29 20 77 69 6c 6c 20 62 65 20 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 6e | al-role).will.be.marked.with.a.n |
e5d00 | 65 77 20 4f 6e 6c 79 20 74 6f 20 43 75 73 74 6f 6d 65 72 20 28 4f 54 43 29 20 61 74 74 72 69 62 | ew.Only.to.Customer.(OTC).attrib |
e5d20 | 75 74 65 2e 00 52 6f 75 74 65 73 20 77 69 74 68 20 61 20 64 69 73 74 61 6e 63 65 20 6f 66 20 32 | ute..Routes.with.a.distance.of.2 |
e5d40 | 35 35 20 61 72 65 20 65 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 64 20 61 6e 64 20 | 55.are.effectively.disabled.and. |
e5d60 | 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 52 | not.installed.into.the.kernel..R |
e5d80 | 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 6f 6e | outes.with.this.attribute.can.on |
e5da0 | 6c 79 20 62 65 20 73 65 6e 74 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 69 66 20 79 | ly.be.sent.to.your.neighbor.if.y |
e5dc0 | 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 70 72 6f 76 69 64 65 72 20 6f 72 20 72 73 | our.local-role.is.provider.or.rs |
e5de0 | 2d 73 65 72 76 65 72 2e 20 52 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 | -server..Routes.with.this.attrib |
e5e00 | 75 74 65 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 79 6f 75 72 | ute.can.be.received.only.if.your |
e5e20 | 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 63 75 73 74 6f 6d 65 72 20 6f 72 20 72 73 2d 63 6c | .local-role.is.customer.or.rs-cl |
e5e40 | 69 65 6e 74 2e 00 52 6f 75 74 69 6e 65 00 52 6f 75 74 69 6e 67 00 52 6f 75 74 69 6e 67 20 74 61 | ient..Routine.Routing.Routing.ta |
e5e60 | 62 6c 65 73 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 | bles.that.will.be.used.in.this.e |
e5e80 | 78 61 6d 70 6c 65 20 61 72 65 3a 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 | xample.are:.Rule.10.matches.requ |
e5ea0 | 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 | ests.with.the.domain.name.``node |
e5ec0 | 31 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 | 1.example.com``.forwards.to.the. |
e5ee0 | 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d 30 31 60 60 00 52 75 6c 65 20 31 30 20 6d 61 | backend.``bk-api-01``.Rule.10.ma |
e5f00 | 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 65 78 61 63 74 20 55 52 | tches.requests.with.the.exact.UR |
e5f20 | 4c 20 70 61 74 68 20 60 60 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 78 78 78 60 60 20 61 6e 64 20 | L.path.``/.well-known/xxx``.and. |
e5f40 | 72 65 64 69 72 65 63 74 73 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 63 65 72 74 73 2f 60 | redirects.to.location.``/certs/` |
e5f60 | 60 2e 00 52 75 6c 65 20 31 31 30 20 69 73 20 68 69 74 2c 20 73 6f 20 63 6f 6e 6e 65 63 74 69 6f | `..Rule.110.is.hit,.so.connectio |
e5f80 | 6e 20 69 73 20 61 63 63 65 70 74 65 64 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 | n.is.accepted..Rule.20.matches.r |
e5fa0 | 65 71 75 65 73 74 73 20 77 69 74 68 20 55 52 4c 20 70 61 74 68 73 20 65 6e 64 69 6e 67 20 69 6e | equests.with.URL.paths.ending.in |
e5fc0 | 20 60 60 2f 6d 61 69 6c 60 60 20 6f 72 20 65 78 61 63 74 20 70 61 74 68 20 60 60 2f 65 6d 61 69 | .``/mail``.or.exact.path.``/emai |
e5fe0 | 6c 2f 62 61 72 60 60 20 72 65 64 69 72 65 63 74 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f | l/bar``.redirect.to.location.``/ |
e6000 | 70 6f 73 74 66 69 78 2f 60 60 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 | postfix/``..Rule.20.matches.requ |
e6020 | 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 | ests.with.the.domain.name.``node |
e6040 | 32 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 | 2.example.com``.forwards.to.the. |
e6060 | 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d 30 32 60 60 00 52 75 6c 65 20 53 74 61 74 75 | backend.``bk-api-02``.Rule.Statu |
e6080 | 73 00 52 75 6c 65 2d 53 65 74 73 00 52 75 6c 65 2d 73 65 74 20 6f 76 65 72 76 69 65 77 00 52 75 | s.Rule-Sets.Rule-set.overview.Ru |
e60a0 | 6c 65 73 00 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 | les.Rules.allow.to.control.and.r |
e60c0 | 6f 75 74 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 | oute.incoming.traffic.to.specifi |
e60e0 | 63 20 62 61 63 6b 65 6e 64 20 62 61 73 65 64 20 6f 6e 20 70 72 65 64 65 66 69 6e 65 64 20 63 6f | c.backend.based.on.predefined.co |
e6100 | 6e 64 69 74 69 6f 6e 73 2e 20 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 64 65 66 69 6e 65 20 | nditions..Rules.allow.to.define. |
e6120 | 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 63 | matching.criteria.and.perform.ac |
e6140 | 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 52 75 6c 65 73 20 77 69 6c 6c 20 62 65 20 | tion.accordingly..Rules.will.be. |
e6160 | 63 72 65 61 74 65 64 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 | created.for.both.:ref:`source-na |
e6180 | 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 00 52 | t`.and.:ref:`destination-nat`..R |
e61a0 | 75 6e 6e 69 6e 67 20 42 65 68 69 6e 64 20 4e 41 54 00 53 4e 41 54 00 53 4e 41 54 36 34 00 53 4e | unning.Behind.NAT.SNAT.SNAT64.SN |
e61c0 | 41 54 36 36 00 53 4e 4d 50 00 53 4e 4d 50 20 45 78 74 65 6e 73 69 6f 6e 73 00 53 4e 4d 50 20 50 | AT66.SNMP.SNMP.Extensions.SNMP.P |
e61e0 | 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 73 00 53 4e 4d 50 20 63 61 6e 20 77 6f 72 6b 20 73 | rotocol.Versions.SNMP.can.work.s |
e6200 | 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 6f 72 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 2e 20 | ynchronously.or.asynchronously.. |
e6220 | 49 6e 20 73 79 6e 63 68 72 6f 6e 6f 75 73 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 74 68 | In.synchronous.communication,.th |
e6240 | 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 79 73 74 65 6d 20 71 75 65 72 69 65 73 20 74 68 65 20 | e.monitoring.system.queries.the. |
e6260 | 72 6f 75 74 65 72 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2e 20 49 6e 20 61 73 79 6e 63 68 72 6f | router.periodically..In.asynchro |
e6280 | 6e 6f 75 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 65 6e 64 73 20 6e 6f 74 69 66 69 63 61 74 | nous,.the.router.sends.notificat |
e62a0 | 69 6f 6e 20 74 6f 20 74 68 65 20 22 74 72 61 70 22 20 28 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e | ion.to.the."trap".(the.monitorin |
e62c0 | 67 20 68 6f 73 74 29 2e 00 53 4e 4d 50 20 69 73 20 61 20 63 6f 6d 70 6f 6e 65 6e 74 20 6f 66 20 | g.host)..SNMP.is.a.component.of. |
e62e0 | 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 61 73 20 64 | the.Internet.Protocol.Suite.as.d |
e6300 | 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 | efined.by.the.Internet.Engineeri |
e6320 | 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 20 28 49 45 54 46 29 2e 20 49 74 20 63 6f 6e 73 69 73 74 | ng.Task.Force.(IETF)..It.consist |
e6340 | 73 20 6f 66 20 61 20 73 65 74 20 6f 66 20 73 74 61 6e 64 61 72 64 73 20 66 6f 72 20 6e 65 74 77 | s.of.a.set.of.standards.for.netw |
e6360 | 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 61 70 70 | ork.management,.including.an.app |
e6380 | 6c 69 63 61 74 69 6f 6e 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 20 64 61 74 61 62 | lication.layer.protocol,.a.datab |
e63a0 | 61 73 65 20 73 63 68 65 6d 61 2c 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 64 61 74 61 20 6f 62 | ase.schema,.and.a.set.of.data.ob |
e63c0 | 6a 65 63 74 73 2e 00 53 4e 4d 50 20 69 73 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 20 6e 65 | jects..SNMP.is.widely.used.in.ne |
e63e0 | 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 6f 6e | twork.management.for.network.mon |
e6400 | 69 74 6f 72 69 6e 67 2e 20 53 4e 4d 50 20 65 78 70 6f 73 65 73 20 6d 61 6e 61 67 65 6d 65 6e 74 | itoring..SNMP.exposes.management |
e6420 | 20 64 61 74 61 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 76 61 72 69 61 62 6c 65 73 20 6f | .data.in.the.form.of.variables.o |
e6440 | 6e 20 74 68 65 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 6d 73 20 6f 72 67 61 6e 69 7a 65 64 20 | n.the.managed.systems.organized. |
e6460 | 69 6e 20 61 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 65 | in.a.management.information.base |
e6480 | 20 28 4d 49 42 5f 29 20 77 68 69 63 68 20 64 65 73 63 72 69 62 65 20 74 68 65 20 73 79 73 74 65 | .(MIB_).which.describe.the.syste |
e64a0 | 6d 20 73 74 61 74 75 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 73 | m.status.and.configuration..Thes |
e64c0 | 65 20 76 61 72 69 61 62 6c 65 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 72 65 6d 6f 74 65 6c 79 | e.variables.can.then.be.remotely |
e64e0 | 20 71 75 65 72 69 65 64 20 28 61 6e 64 2c 20 69 6e 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 61 | .queried.(and,.in.some.circumsta |
e6500 | 6e 63 65 73 2c 20 6d 61 6e 69 70 75 6c 61 74 65 64 29 20 62 79 20 6d 61 6e 61 67 69 6e 67 20 61 | nces,.manipulated).by.managing.a |
e6520 | 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 53 4e 4d 50 76 32 00 53 4e 4d 50 76 32 20 64 6f 65 73 20 | pplications..SNMPv2.SNMPv2.does. |
e6540 | 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 6e 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d | not.support.any.authentication.m |
e6560 | 65 63 68 61 6e 69 73 6d 73 2c 20 6f 74 68 65 72 20 74 68 61 6e 20 63 6c 69 65 6e 74 20 73 6f 75 | echanisms,.other.than.client.sou |
e6580 | 72 63 65 20 61 64 64 72 65 73 73 2c 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 | rce.address,.so.you.should.speci |
e65a0 | 66 79 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 61 6c 6c 6f 77 65 64 20 | fy.addresses.of.clients.allowed. |
e65c0 | 74 6f 20 6d 6f 6e 69 74 6f 72 20 74 68 65 20 72 6f 75 74 65 72 2e 20 4e 6f 74 65 20 74 68 61 74 | to.monitor.the.router..Note.that |
e65e0 | 20 53 4e 4d 50 76 32 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 6e 6f 20 65 6e 63 72 79 70 74 | .SNMPv2.also.supports.no.encrypt |
e6600 | 69 6f 6e 20 61 6e 64 20 61 6c 77 61 79 73 20 73 65 6e 64 73 20 64 61 74 61 20 69 6e 20 70 6c 61 | ion.and.always.sends.data.in.pla |
e6620 | 69 6e 20 74 65 78 74 2e 00 53 4e 4d 50 76 32 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 | in.text..SNMPv2.is.the.original. |
e6640 | 61 6e 64 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 76 65 72 73 69 6f 6e 2e 20 | and.most.commonly.used.version.. |
e6660 | 46 6f 72 20 61 75 74 68 6f 72 69 7a 69 6e 67 20 63 6c 69 65 6e 74 73 2c 20 53 4e 4d 50 20 75 73 | For.authorizing.clients,.SNMP.us |
e6680 | 65 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 43 | es.the.concept.of.communities..C |
e66a0 | 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 79 20 68 61 76 65 20 61 75 74 68 6f 72 69 7a 61 74 69 6f | ommunities.may.have.authorizatio |
e66c0 | 6e 20 73 65 74 20 74 6f 20 72 65 61 64 20 6f 6e 6c 79 20 28 74 68 69 73 20 69 73 20 6d 6f 73 74 | n.set.to.read.only.(this.is.most |
e66e0 | 20 63 6f 6d 6d 6f 6e 29 20 6f 72 20 74 6f 20 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 20 28 74 | .common).or.to.read.and.write.(t |
e6700 | 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 61 63 74 69 76 65 6c 79 20 75 73 65 64 20 | his.option.is.not.actively.used. |
e6720 | 69 6e 20 56 79 4f 53 29 2e 00 53 4e 4d 50 76 33 00 53 4e 4d 50 76 33 20 28 76 65 72 73 69 6f 6e | in.VyOS)..SNMPv3.SNMPv3.(version |
e6740 | 20 33 20 6f 66 20 74 68 65 20 53 4e 4d 50 20 70 72 6f 74 6f 63 6f 6c 29 20 69 6e 74 72 6f 64 75 | .3.of.the.SNMP.protocol).introdu |
e6760 | 63 65 64 20 61 20 77 68 6f 6c 65 20 73 6c 65 77 20 6f 66 20 6e 65 77 20 73 65 63 75 72 69 74 79 | ced.a.whole.slew.of.new.security |
e6780 | 20 72 65 6c 61 74 65 64 20 66 65 61 74 75 72 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e | .related.features.that.have.been |
e67a0 | 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 76 65 72 73 69 | .missing.from.the.previous.versi |
e67c0 | 6f 6e 73 2e 20 53 65 63 75 72 69 74 79 20 77 61 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 69 67 | ons..Security.was.one.of.the.big |
e67e0 | 67 65 73 74 20 77 65 61 6b 6e 65 73 73 20 6f 66 20 53 4e 4d 50 20 75 6e 74 69 6c 20 76 33 2e 20 | gest.weakness.of.SNMP.until.v3.. |
e6800 | 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 6e 20 53 4e 4d 50 20 56 65 72 73 69 6f 6e 73 20 | Authentication.in.SNMP.Versions. |
e6820 | 31 20 61 6e 64 20 32 20 61 6d 6f 75 6e 74 73 20 74 6f 20 6e 6f 74 68 69 6e 67 20 6d 6f 72 65 20 | 1.and.2.amounts.to.nothing.more. |
e6840 | 74 68 61 6e 20 61 20 70 61 73 73 77 6f 72 64 20 28 63 6f 6d 6d 75 6e 69 74 79 20 73 74 72 69 6e | than.a.password.(community.strin |
e6860 | 67 29 20 73 65 6e 74 20 69 6e 20 63 6c 65 61 72 20 74 65 78 74 20 62 65 74 77 65 65 6e 20 61 20 | g).sent.in.clear.text.between.a. |
e6880 | 6d 61 6e 61 67 65 72 20 61 6e 64 20 61 67 65 6e 74 2e 20 45 61 63 68 20 53 4e 4d 50 76 33 20 6d | manager.and.agent..Each.SNMPv3.m |
e68a0 | 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 73 20 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 | essage.contains.security.paramet |
e68c0 | 65 72 73 20 77 68 69 63 68 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 61 6e 20 6f 63 74 65 | ers.which.are.encoded.as.an.octe |
e68e0 | 74 20 73 74 72 69 6e 67 2e 20 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 73 65 20 73 | t.string..The.meaning.of.these.s |
e6900 | 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 | ecurity.parameters.depends.on.th |
e6920 | 65 20 73 65 63 75 72 69 74 79 20 6d 6f 64 65 6c 20 62 65 69 6e 67 20 75 73 65 64 2e 00 53 50 41 | e.security.model.being.used..SPA |
e6940 | 4e 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 63 61 6e 20 63 6f 70 79 20 74 68 65 20 69 6e | N.port.mirroring.can.copy.the.in |
e6960 | 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 65 20 69 6e | bound/outbound.traffic.of.the.in |
e6980 | 74 65 72 66 61 63 65 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 | terface.to.the.specified.interfa |
e69a0 | 63 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 | ce,.usually.the.interface.can.be |
e69c0 | 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 73 6f 6d 65 20 73 70 65 63 69 61 6c 20 65 71 75 69 70 | .connected.to.some.special.equip |
e69e0 | 6d 65 6e 74 2c 20 73 75 63 68 20 61 73 20 62 65 68 61 76 69 6f 72 20 63 6f 6e 74 72 6f 6c 20 73 | ment,.such.as.behavior.control.s |
e6a00 | 79 73 74 65 6d 2c 20 69 6e 74 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 73 79 73 74 65 | ystem,.intrusion.detection.syste |
e6a20 | 6d 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 6f 6c 6c 65 63 74 6f 72 2c 20 61 6e 64 20 63 61 6e | m.and.traffic.collector,.and.can |
e6a40 | 20 63 6f 70 79 20 61 6c 6c 20 72 65 6c 61 74 65 64 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 | .copy.all.related.traffic.from.t |
e6a60 | 68 69 73 20 70 6f 72 74 2e 20 54 68 65 20 62 65 6e 65 66 69 74 20 6f 66 20 6d 69 72 72 6f 72 69 | his.port..The.benefit.of.mirrori |
e6a80 | 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 74 68 61 74 20 74 68 65 20 61 70 70 6c 69 | ng.the.traffic.is.that.the.appli |
e6aa0 | 63 61 74 69 6f 6e 20 69 73 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 6f 75 72 | cation.is.isolated.from.the.sour |
e6ac0 | 63 65 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 6f 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 72 | ce.traffic.and.so.application.pr |
e6ae0 | 6f 63 65 73 73 69 6e 67 20 64 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 74 68 65 20 74 72 61 | ocessing.does.not.affect.the.tra |
e6b00 | 66 66 69 63 20 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 | ffic.or.the.system.performance.. |
e6b20 | 53 53 48 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 | SSH.SSH.:ref:`ssh_key_based_auth |
e6b40 | 65 6e 74 69 63 61 74 69 6f 6e 60 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6f 70 65 72 61 74 | entication`.SSH.:ref:`ssh_operat |
e6b60 | 69 6f 6e 60 00 53 53 48 20 63 6c 69 65 6e 74 00 53 53 48 20 70 72 6f 76 69 64 65 73 20 61 20 73 | ion`.SSH.client.SSH.provides.a.s |
e6b80 | 65 63 75 72 65 20 63 68 61 6e 6e 65 6c 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 | ecure.channel.over.an.unsecured. |
e6ba0 | 6e 65 74 77 6f 72 6b 20 69 6e 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 61 72 63 68 69 | network.in.a.client-server.archi |
e6bc0 | 74 65 63 74 75 72 65 2c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 61 6e 20 53 53 48 20 63 6c 69 65 6e | tecture,.connecting.an.SSH.clien |
e6be0 | 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 77 69 74 68 20 61 6e 20 53 53 48 20 73 65 72 76 65 72 | t.application.with.an.SSH.server |
e6c00 | 2e 20 43 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 69 6e 63 6c 75 64 65 20 72 65 | ..Common.applications.include.re |
e6c20 | 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 20 6c 6f 67 69 6e 20 61 6e 64 20 72 65 6d 6f | mote.command-line.login.and.remo |
e6c40 | 74 65 20 63 6f 6d 6d 61 6e 64 20 65 78 65 63 75 74 69 6f 6e 2c 20 62 75 74 20 61 6e 79 20 6e 65 | te.command.execution,.but.any.ne |
e6c60 | 74 77 6f 72 6b 20 73 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 73 65 63 75 72 65 64 20 77 69 74 | twork.service.can.be.secured.wit |
e6c80 | 68 20 53 53 48 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 73 70 65 63 69 66 69 63 61 74 69 6f | h.SSH..The.protocol.specificatio |
e6ca0 | 6e 20 64 69 73 74 69 6e 67 75 69 73 68 65 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 61 6a 6f | n.distinguishes.between.two.majo |
e6cc0 | 72 20 76 65 72 73 69 6f 6e 73 2c 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 53 53 48 2d 31 | r.versions,.referred.to.as.SSH-1 |
e6ce0 | 20 61 6e 64 20 53 53 48 2d 32 2e 00 53 53 48 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 65 73 74 61 | .and.SSH-2..SSH.username.to.esta |
e6d00 | 62 6c 69 73 68 20 61 6e 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 | blish.an.SSH.connection.to.the.c |
e6d20 | 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 53 48 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 61 73 | ache.server..SSH.was.designed.as |
e6d40 | 20 61 20 72 65 70 6c 61 63 65 6d 65 6e 74 20 66 6f 72 20 54 65 6c 6e 65 74 20 61 6e 64 20 66 6f | .a.replacement.for.Telnet.and.fo |
e6d60 | 72 20 75 6e 73 65 63 75 72 65 64 20 72 65 6d 6f 74 65 20 73 68 65 6c 6c 20 70 72 6f 74 6f 63 6f | r.unsecured.remote.shell.protoco |
e6d80 | 6c 73 20 73 75 63 68 20 61 73 20 74 68 65 20 42 65 72 6b 65 6c 65 79 20 72 6c 6f 67 69 6e 2c 20 | ls.such.as.the.Berkeley.rlogin,. |
e6da0 | 72 73 68 2c 20 61 6e 64 20 72 65 78 65 63 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 54 68 6f 73 65 20 | rsh,.and.rexec.protocols..Those. |
e6dc0 | 70 72 6f 74 6f 63 6f 6c 73 20 73 65 6e 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 6e 6f 74 61 | protocols.send.information,.nota |
e6de0 | 62 6c 79 20 70 61 73 73 77 6f 72 64 73 2c 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2c 20 72 65 6e | bly.passwords,.in.plaintext,.ren |
e6e00 | 64 65 72 69 6e 67 20 74 68 65 6d 20 73 75 73 63 65 70 74 69 62 6c 65 20 74 6f 20 69 6e 74 65 72 | dering.them.susceptible.to.inter |
e6e20 | 63 65 70 74 69 6f 6e 20 61 6e 64 20 64 69 73 63 6c 6f 73 75 72 65 20 75 73 69 6e 67 20 70 61 63 | ception.and.disclosure.using.pac |
e6e40 | 6b 65 74 20 61 6e 61 6c 79 73 69 73 2e 20 54 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 65 | ket.analysis..The.encryption.use |
e6e60 | 64 20 62 79 20 53 53 48 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 | d.by.SSH.is.intended.to.provide. |
e6e80 | 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f 66 | confidentiality.and.integrity.of |
e6ea0 | 20 64 61 74 61 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2c | .data.over.an.unsecured.network, |
e6ec0 | 20 73 75 63 68 20 61 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 00 53 53 49 44 20 74 6f 20 62 | .such.as.the.Internet..SSID.to.b |
e6ee0 | 65 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 31 20 6d 61 6e 61 67 65 6d 65 6e 74 | e.used.in.IEEE.802.11.management |
e6f00 | 20 66 72 61 6d 65 73 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 00 53 53 4c 20 43 65 72 | .frames.SSL.Certificates.SSL.Cer |
e6f20 | 74 69 66 69 63 61 74 65 73 20 67 65 6e 65 72 61 74 69 6f 6e 00 53 53 4c 20 6d 61 74 63 68 20 53 | tificates.generation.SSL.match.S |
e6f40 | 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 6f 70 74 69 | erver.Name.Indication.(SNI).opti |
e6f60 | 6f 6e 3a 00 53 53 54 50 20 43 6c 69 65 6e 74 00 53 53 54 50 20 43 6c 69 65 6e 74 20 4f 70 74 69 | on:.SSTP.Client.SSTP.Client.Opti |
e6f80 | 6f 6e 73 00 53 53 54 50 20 53 65 72 76 65 72 00 53 53 54 50 20 69 73 20 61 76 61 69 6c 61 62 6c | ons.SSTP.Server.SSTP.is.availabl |
e6fa0 | 65 20 66 6f 72 20 4c 69 6e 75 78 2c 20 42 53 44 2c 20 61 6e 64 20 57 69 6e 64 6f 77 73 2e 00 53 | e.for.Linux,.BSD,.and.Windows..S |
e6fc0 | 53 54 50 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e | STP.remote.server.to.connect.to. |
e6fe0 | 20 43 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 | .Can.be.either.an.IP.address.or. |
e7000 | 46 51 44 4e 2e 00 53 54 50 20 50 61 72 61 6d 65 74 65 72 00 53 61 6c 74 2d 4d 69 6e 69 6f 6e 00 | FQDN..STP.Parameter.Salt-Minion. |
e7020 | 53 61 6c 74 53 74 61 63 6b 5f 20 69 73 20 50 79 74 68 6f 6e 2d 62 61 73 65 64 2c 20 6f 70 65 6e | SaltStack_.is.Python-based,.open |
e7040 | 2d 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 65 76 65 6e 74 2d 64 72 69 76 65 | -source.software.for.event-drive |
e7060 | 6e 20 49 54 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 72 65 6d 6f 74 65 20 74 61 73 6b 20 65 78 65 | n.IT.automation,.remote.task.exe |
e7080 | 63 75 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 61 6e 61 67 65 | cution,.and.configuration.manage |
e70a0 | 6d 65 6e 74 2e 20 53 75 70 70 6f 72 74 69 6e 67 20 74 68 65 20 22 69 6e 66 72 61 73 74 72 75 63 | ment..Supporting.the."infrastruc |
e70c0 | 74 75 72 65 20 61 73 20 63 6f 64 65 22 20 61 70 70 72 6f 61 63 68 20 74 6f 20 64 61 74 61 20 63 | ture.as.code".approach.to.data.c |
e70e0 | 65 6e 74 65 72 20 73 79 73 74 65 6d 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 64 65 70 6c 6f 79 6d | enter.system.and.network.deploym |
e7100 | 65 6e 74 20 61 6e 64 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | ent.and.management,.configuratio |
e7120 | 6e 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 53 65 63 4f 70 73 20 6f 72 63 68 65 73 74 72 61 74 69 | n.automation,.SecOps.orchestrati |
e7140 | 6f 6e 2c 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 20 72 65 6d 65 64 69 61 74 69 6f 6e 2c 20 61 | on,.vulnerability.remediation,.a |
e7160 | 6e 64 20 68 79 62 72 69 64 20 63 6c 6f 75 64 20 63 6f 6e 74 72 6f 6c 2e 00 53 61 6d 65 20 61 73 | nd.hybrid.cloud.control..Same.as |
e7180 | 20 65 78 70 6f 72 74 2d 6c 69 73 74 2c 20 62 75 74 20 69 74 20 61 70 70 6c 69 65 73 20 74 6f 20 | .export-list,.but.it.applies.to. |
e71a0 | 70 61 74 68 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 73 70 65 63 69 66 69 65 64 20 61 | paths.announced.into.specified.a |
e71c0 | 72 65 61 20 61 73 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 2e 20 54 68 69 73 | rea.as.Type-3.summary-LSAs..This |
e71e0 | 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 | .command.makes.sense.in.ABR.only |
e7200 | 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 53 56 44 20 77 69 | ..Sample.configuration.of.SVD.wi |
e7220 | 74 68 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 69 73 20 73 68 6f 77 6e | th.VLAN.to.VNI.mappings.is.shown |
e7240 | 20 62 65 6c 6f 77 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 | .below..Sample.configuration.to. |
e7260 | 73 65 74 75 70 20 4c 44 50 20 6f 6e 20 56 79 4f 53 00 53 63 61 6e 6e 69 6e 67 20 69 73 20 6e 6f | setup.LDP.on.VyOS.Scanning.is.no |
e7280 | 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 64 72 69 76 | t.supported.on.all.wireless.driv |
e72a0 | 65 72 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 2e 20 52 65 66 65 72 | ers.and.wireless.hardware..Refer |
e72c0 | 20 74 6f 20 79 6f 75 72 20 64 72 69 76 65 72 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 | .to.your.driver.and.wireless.har |
e72e0 | 64 77 61 72 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 66 75 72 74 68 65 72 20 | dware.documentation.for.further. |
e7300 | 64 65 74 61 69 6c 73 2e 00 53 63 72 69 70 74 20 65 78 65 63 75 74 69 6f 6e 00 53 63 72 69 70 74 | details..Script.execution.Script |
e7320 | 20 74 6f 20 72 75 6e 20 62 65 66 6f 72 65 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 | .to.run.before.session.interface |
e7340 | 20 63 6f 6d 65 73 20 75 70 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 | .comes.up.Script.to.run.when.ses |
e7360 | 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 68 61 6e 67 65 64 20 62 79 20 52 41 44 49 55 53 | sion.interface.changed.by.RADIUS |
e7380 | 20 43 6f 41 20 68 61 6e 64 6c 69 6e 67 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e | .CoA.handling.Script.to.run.when |
e73a0 | 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 69 6e 67 20 74 6f 20 74 65 72 6d | .session.interface.going.to.term |
e73c0 | 69 6e 61 74 65 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e | inate.Script.to.run.when.session |
e73e0 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 63 6f 6e 66 69 67 75 | .interface.is.completely.configu |
e7400 | 72 65 64 20 61 6e 64 20 73 74 61 72 74 65 64 00 53 63 72 69 70 74 69 6e 67 00 53 65 63 6f 6e 64 | red.and.started.Scripting.Second |
e7420 | 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 4e 41 54 20 66 6f 72 20 | .scenario:.apply.source.NAT.for. |
e7440 | 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 4c 41 | all.outgoing.connections.from.LA |
e7460 | 4e 20 31 30 2e 30 2e 30 2e 30 2f 38 2c 20 75 73 69 6e 67 20 33 20 70 75 62 6c 69 63 20 61 64 64 | N.10.0.0.0/8,.using.3.public.add |
e7480 | 72 65 73 73 65 73 20 61 6e 64 20 65 71 75 61 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 57 | resses.and.equal.distribution..W |
e74a0 | 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d 6c | e.will.generate.the.hash.randoml |
e74c0 | 79 2e 00 53 65 63 72 65 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 | y..Secret.for.Dynamic.Authorizat |
e74e0 | 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 65 | ion.Extension.server.(DM/CoA).Se |
e7500 | 63 75 72 69 74 79 00 53 65 63 75 72 69 74 79 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d | curity.Security/authentication.m |
e7520 | 65 73 73 61 67 65 73 00 53 65 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 | essages.See.:rfc:`7761#section-4 |
e7540 | 2e 31 60 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 00 53 65 65 20 62 65 6c 6f 77 20 74 68 65 20 64 | .1`.for.details..See.below.the.d |
e7560 | 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | ifferent.parameters.available.fo |
e7580 | 72 20 74 68 65 20 49 50 76 34 20 2a 2a 73 68 6f 77 2a 2a 20 63 6f 6d 6d 61 6e 64 3a 00 53 65 67 | r.the.IPv4.**show**.command:.Seg |
e75a0 | 6d 65 6e 74 20 52 6f 75 74 69 6e 67 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 53 52 | ment.Routing.Segment.Routing.(SR |
e75c0 | 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 74 68 61 74 | ).is.a.network.architecture.that |
e75e0 | 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 6f 75 72 63 65 2d 72 6f 75 74 69 6e 67 20 2e 20 | .is.similar.to.source-routing... |
e7600 | 49 6e 20 74 68 69 73 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 74 68 65 20 69 6e 67 72 65 73 | In.this.architecture,.the.ingres |
e7620 | 73 20 72 6f 75 74 65 72 20 61 64 64 73 20 61 20 6c 69 73 74 20 6f 66 20 73 65 67 6d 65 6e 74 73 | s.router.adds.a.list.of.segments |
e7640 | 2c 20 6b 6e 6f 77 6e 20 61 73 20 53 49 44 73 2c 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 61 | ,.known.as.SIDs,.to.the.packet.a |
e7660 | 73 20 69 74 20 65 6e 74 65 72 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 73 65 20 73 | s.it.enters.the.network..These.s |
e7680 | 65 67 6d 65 6e 74 73 20 72 65 70 72 65 73 65 6e 74 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 | egments.represent.different.port |
e76a0 | 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 68 61 74 20 74 68 | ions.of.the.network.path.that.th |
e76c0 | 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 74 61 6b 65 2e 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 | e.packet.will.take..Segment.Rout |
e76e0 | 69 6e 67 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e | ing.can.be.applied.to.an.existin |
e7700 | 67 20 4d 50 4c 53 2d 62 61 73 65 64 20 64 61 74 61 20 70 6c 61 6e 65 20 61 6e 64 20 64 65 66 69 | g.MPLS-based.data.plane.and.defi |
e7720 | 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 | nes.a.control.plane.network.arch |
e7740 | 69 74 65 63 74 75 72 65 2e 20 49 6e 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d | itecture..In.MPLS.networks,.segm |
e7760 | 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 | ents.are.encoded.as.MPLS.labels. |
e7780 | 61 6e 64 20 61 72 65 20 61 64 64 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 | and.are.added.at.the.ingress.rou |
e77a0 | 74 65 72 2e 20 54 68 65 73 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 74 68 65 6e 20 | ter..These.MPLS.labels.are.then. |
e77c0 | 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 6e 74 65 72 | exchanged.and.populated.by.Inter |
e77e0 | 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 20 6c 69 6b | ior.Gateway.Protocols.(IGPs).lik |
e7800 | 65 20 49 53 2d 49 53 20 6f 72 20 4f 53 50 46 20 77 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 6e | e.IS-IS.or.OSPF.which.are.runnin |
e7820 | 67 20 6f 6e 20 6d 6f 73 74 20 49 53 50 73 2e 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 | g.on.most.ISPs..Segment.routing. |
e7840 | 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c | (SR).is.used.by.the.IGP.protocol |
e7860 | 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 | s.to.interconnect.network.device |
e7880 | 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 | s,.below.configuration.shows.how |
e78a0 | 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 49 53 2d 49 53 3a 00 53 65 67 6d 65 6e 74 20 | .to.enable.SR.on.IS-IS:.Segment. |
e78c0 | 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 | routing.(SR).is.used.by.the.IGP. |
e78e0 | 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 | protocols.to.interconnect.networ |
e7900 | 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 | k.devices,.below.configuration.s |
e7920 | 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 4f 53 50 46 3a 00 53 | hows.how.to.enable.SR.on.OSPF:.S |
e7940 | 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c | egment.routing.defines.a.control |
e7960 | 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 61 6e 64 20 | .plane.network.architecture.and. |
e7980 | 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 | can.be.applied.to.an.existing.MP |
e79a0 | 4c 53 20 62 61 73 65 64 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 6e 20 74 68 65 20 4d 50 4c 53 20 | LS.based.dataplane..In.the.MPLS. |
e79c0 | 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 | networks,.segments.are.encoded.a |
e79e0 | 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 69 6d 70 6f 73 65 64 20 61 74 | s.MPLS.labels.and.are.imposed.at |
e7a00 | 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 4d 50 4c 53 20 6c 61 62 65 6c 73 | .the.ingress.router..MPLS.labels |
e7a20 | 20 61 72 65 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 | .are.exchanged.and.populated.by. |
e7a40 | 49 47 50 73 20 6c 69 6b 65 20 49 53 2d 49 53 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 | IGPs.like.IS-IS.Segment.Routing. |
e7a60 | 61 73 20 70 65 72 20 52 46 43 38 36 36 37 20 66 6f 72 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e | as.per.RFC8667.for.MPLS.dataplan |
e7a80 | 65 2e 20 49 74 20 73 75 70 70 6f 72 74 73 20 49 50 76 34 2c 20 49 50 76 36 20 61 6e 64 20 45 43 | e..It.supports.IPv4,.IPv6.and.EC |
e7aa0 | 4d 50 20 61 6e 64 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 43 | MP.and.has.been.tested.against.C |
e7ac0 | 69 73 63 6f 20 26 20 4a 75 6e 69 70 65 72 20 72 6f 75 74 65 72 73 2e 68 6f 77 65 76 65 72 2c 74 | isco.&.Juniper.routers.however,t |
e7ae0 | 68 69 73 20 64 65 70 6c 6f 79 6d 65 6e 74 20 69 73 20 73 74 69 6c 6c 20 45 58 50 45 52 49 4d 45 | his.deployment.is.still.EXPERIME |
e7b00 | 4e 54 41 4c 20 66 6f 72 20 46 52 52 2e 00 53 65 6c 65 63 74 20 54 4c 53 20 76 65 72 73 69 6f 6e | NTAL.for.FRR..Select.TLS.version |
e7b20 | 20 75 73 65 64 2e 00 53 65 6c 65 63 74 20 63 69 70 68 65 72 20 73 75 69 74 65 20 75 73 65 64 20 | .used..Select.cipher.suite.used. |
e7b40 | 66 6f 72 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 54 68 | for.cryptographic.operations..Th |
e7b60 | 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 2e 00 53 65 6c 65 63 74 20 | is.setting.is.mandatory..Select. |
e7b80 | 68 6f 77 20 6c 61 62 65 6c 73 20 61 72 65 20 61 6c 6c 6f 63 61 74 65 64 20 69 6e 20 74 68 65 20 | how.labels.are.allocated.in.the. |
e7ba0 | 67 69 76 65 6e 20 56 52 46 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 70 65 72 2d 76 | given.VRF..By.default,.the.per-v |
e7bc0 | 72 66 20 6d 6f 64 65 20 69 73 20 73 65 6c 65 63 74 65 64 2c 20 61 6e 64 20 6f 6e 65 20 6c 61 62 | rf.mode.is.selected,.and.one.lab |
e7be0 | 65 6c 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d | el.is.used.for.all.prefixes.from |
e7c00 | 20 74 68 65 20 56 52 46 2e 20 54 68 65 20 70 65 72 2d 6e 65 78 74 68 6f 70 20 77 69 6c 6c 20 75 | .the.VRF..The.per-nexthop.will.u |
e7c20 | 73 65 20 61 20 75 6e 69 71 75 65 20 6c 61 62 65 6c 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 | se.a.unique.label.for.all.prefix |
e7c40 | 65 73 20 74 68 61 74 20 61 72 65 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 65 20 73 61 | es.that.are.reachable.via.the.sa |
e7c60 | 6d 65 20 6e 65 78 74 68 6f 70 2e 00 53 65 6c 66 20 53 69 67 6e 65 64 20 43 41 00 53 65 6e 64 20 | me.nexthop..Self.Signed.CA.Send. |
e7c80 | 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 31 20 68 65 61 64 65 | a.Proxy.Protocol.version.1.heade |
e7ca0 | 72 20 28 74 65 78 74 20 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 6f | r.(text.format).Send.a.Proxy.Pro |
e7cc0 | 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 68 65 61 64 65 72 20 28 62 69 6e 61 72 79 20 66 | tocol.version.2.header.(binary.f |
e7ce0 | 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 6c 6c 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 | ormat).Send.all.DNS.queries.to.t |
e7d00 | 68 65 20 49 50 76 34 2f 49 50 76 36 20 44 4e 53 20 73 65 72 76 65 72 20 73 70 65 63 69 66 69 65 | he.IPv4/IPv6.DNS.server.specifie |
e7d20 | 64 20 75 6e 64 65 72 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 6e 20 6f 70 74 69 6f 6e 61 6c 20 | d.under.`<address>`.on.optional. |
e7d40 | 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 6f 72 74 3e 60 2e 20 54 | port.specified.under.`<port>`..T |
e7d60 | 68 65 20 70 6f 72 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 33 2e 20 59 6f 75 20 63 61 6e 20 | he.port.defaults.to.53..You.can. |
e7d80 | 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 68 | configure.multiple.nameservers.h |
e7da0 | 65 72 65 2e 00 53 65 6e 64 20 65 6d 70 74 79 20 53 53 49 44 20 69 6e 20 62 65 61 63 6f 6e 73 20 | ere..Send.empty.SSID.in.beacons. |
e7dc0 | 61 6e 64 20 69 67 6e 6f 72 65 20 70 72 6f 62 65 20 72 65 71 75 65 73 74 20 66 72 61 6d 65 73 20 | and.ignore.probe.request.frames. |
e7de0 | 74 68 61 74 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 66 75 6c 6c 20 53 53 49 44 2c 20 69 | that.do.not.specify.full.SSID,.i |
e7e00 | 2e 65 2e 2c 20 72 65 71 75 69 72 65 20 73 74 61 74 69 6f 6e 73 20 74 6f 20 6b 6e 6f 77 20 53 53 | .e.,.require.stations.to.know.SS |
e7e20 | 49 44 2e 00 53 65 6e 74 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 20 69 6e 20 | ID..Sent.to.the.client.(LAC).in. |
e7e40 | 74 68 65 20 48 6f 73 74 2d 4e 61 6d 65 20 61 74 74 72 69 62 75 74 65 00 53 65 72 69 61 6c 20 43 | the.Host-Name.attribute.Serial.C |
e7e60 | 6f 6e 73 6f 6c 65 00 53 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 | onsole.Serial.interfaces.can.be. |
e7e80 | 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 64 69 72 65 63 74 6c 79 20 | any.interface.which.is.directly. |
e7ea0 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 43 50 55 20 6f 72 20 63 68 69 70 73 65 74 20 | connected.to.the.CPU.or.chipset. |
e7ec0 | 28 6d 6f 73 74 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 61 20 74 74 79 53 20 69 6e 74 65 72 66 61 63 | (mostly.known.as.a.ttyS.interfac |
e7ee0 | 65 20 69 6e 20 4c 69 6e 75 78 29 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 55 53 42 20 74 6f 20 | e.in.Linux).or.any.other.USB.to. |
e7f00 | 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 28 50 72 6f 6c 69 66 69 63 20 50 4c 32 33 30 | serial.converter.(Prolific.PL230 |
e7f20 | 33 20 6f 72 20 46 54 44 49 20 46 54 32 33 32 2f 46 54 34 32 33 32 20 62 61 73 65 64 20 63 68 69 | 3.or.FTDI.FT232/FT4232.based.chi |
e7f40 | 70 73 29 2e 00 53 65 72 76 65 72 00 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 00 53 | ps)..Server.Server.Certificate.S |
e7f60 | 65 72 76 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 53 69 64 65 00 | erver.Configuration.Server.Side. |
e7f80 | 53 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 6e 61 6d 65 | Server.configuration.Server.name |
e7fa0 | 73 20 66 6f 72 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 20 69 74 20 63 61 6e 20 62 65 20 65 78 | s.for.virtual.hosts.it.can.be.ex |
e7fc0 | 61 63 74 2c 20 77 69 6c 64 63 61 72 64 20 6f 72 20 72 65 67 65 78 2e 00 53 65 72 76 65 72 3a 00 | act,.wildcard.or.regex..Server:. |
e7fe0 | 53 65 72 76 69 63 65 00 53 65 72 76 69 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 | Service.Service.configuration.is |
e8000 | 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 74 6f 20 61 20 73 70 | .responsible.for.binding.to.a.sp |
e8020 | 65 63 69 66 69 63 20 70 6f 72 74 2c 20 77 68 69 6c 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 63 | ecific.port,.while.the.backend.c |
e8040 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 74 79 70 65 | onfiguration.determines.the.type |
e8060 | 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 | .of.load.balancing.to.be.applied |
e8080 | 20 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 | .and.specifies.the.real.servers. |
e80a0 | 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 53 65 74 20 42 46 44 20 70 65 65 72 20 49 50 76 | to.be.utilized..Set.BFD.peer.IPv |
e80c0 | 34 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 53 65 74 20 42 47 | 4.address.or.IPv6.address.Set.BG |
e80e0 | 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 65 78 61 63 74 6c 79 20 6d 61 74 63 | P.community-list.to.exactly.matc |
e8100 | 68 2e 00 53 65 74 20 42 47 50 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 61 74 74 72 | h..Set.BGP.local.preference.attr |
e8120 | 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e 20 63 6f 64 65 2e 00 53 65 74 20 | ibute..Set.BGP.origin.code..Set. |
e8140 | 42 47 50 20 6f 72 69 67 69 6e 61 74 6f 72 20 49 44 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 | BGP.originator.ID.attribute..Set |
e8160 | 20 42 47 50 20 77 65 69 67 68 74 20 61 74 74 72 69 62 75 74 65 00 53 65 74 20 44 4e 41 54 20 72 | .BGP.weight.attribute.Set.DNAT.r |
e8180 | 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 | ule.20.to.only.NAT.UDP.packets.S |
e81a0 | 65 74 20 49 50 20 66 72 61 67 6d 65 6e 74 20 6d 61 74 63 68 2c 20 77 68 65 72 65 3a 00 53 65 74 | et.IP.fragment.match,.where:.Set |
e81c0 | 20 49 50 53 65 63 20 69 6e 62 6f 75 6e 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 73 2c 20 | .IPSec.inbound.match.criterias,. |
e81e0 | 77 68 65 72 65 3a 00 53 65 74 20 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 6d 65 74 72 69 63 2d | where:.Set.OSPF.external.metric- |
e8200 | 74 79 70 65 2e 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e | type..Set.SNAT.rule.20.to.only.N |
e8220 | 41 54 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 53 4e 41 54 20 | AT.TCP.and.UDP.packets.Set.SNAT. |
e8240 | 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 69 | rule.20.to.only.NAT.packets.arri |
e8260 | 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f | ving.from.the.192.0.2.0/24.netwo |
e8280 | 72 6b 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 33 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 | rk.Set.SNAT.rule.30.to.only.NAT. |
e82a0 | 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 32 30 33 2e 30 2e | packets.arriving.from.the.203.0. |
e82c0 | 31 31 33 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 70 | 113.0/24.network.with.a.source.p |
e82e0 | 6f 72 74 20 6f 66 20 38 30 20 61 6e 64 20 34 34 33 00 53 65 74 20 53 53 4c 20 63 65 72 74 65 66 | ort.of.80.and.443.Set.SSL.certef |
e8300 | 69 63 61 74 65 20 3c 6e 61 6d 65 3e 20 66 6f 72 20 73 65 72 76 69 63 65 20 3c 6e 61 6d 65 3e 00 | icate.<name>.for.service.<name>. |
e8320 | 53 65 74 20 54 43 50 2d 4d 53 53 20 28 6d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a | Set.TCP-MSS.(maximum.segment.siz |
e8340 | 65 29 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 53 65 74 20 54 54 4c 20 74 6f | e).for.the.connection.Set.TTL.to |
e8360 | 20 33 30 30 20 73 65 63 6f 6e 64 73 00 53 65 74 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 | .300.seconds.Set.Virtual.Tunnel. |
e8380 | 49 6e 74 65 72 66 61 63 65 00 53 65 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 64 65 73 63 72 69 | Interface.Set.a.container.descri |
e83a0 | 70 74 69 6f 6e 00 53 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 | ption.Set.a.destination.and/or.s |
e83c0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 20 66 6f | ource.address..Accepted.input.fo |
e83e0 | 72 20 69 70 76 34 3a 00 53 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 | r.ipv4:.Set.a.destination.and/or |
e8400 | 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 53 65 | .source.port..Accepted.input:.Se |
e8420 | 74 20 61 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 | t.a.human.readable,.descriptive. |
e8440 | 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 6c 69 61 73 | alias.for.this.connection..Alias |
e8460 | 20 69 73 20 75 73 65 64 20 62 79 20 65 2e 67 2e 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 73 68 6f | .is.used.by.e.g..the.:opcmd:`sho |
e8480 | 77 20 69 6e 74 65 72 66 61 63 65 73 60 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 53 4e 4d 50 20 62 61 | w.interfaces`.command.or.SNMP.ba |
e84a0 | 73 65 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f 6f 6c 73 2e 00 53 65 74 20 61 20 6c 69 6d 69 | sed.monitoring.tools..Set.a.limi |
e84c0 | 74 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 | t.on.the.maximum.number.of.concu |
e84e0 | 72 72 65 6e 74 20 6c 6f 67 67 65 64 2d 69 6e 20 75 73 65 72 73 20 6f 6e 20 74 68 65 20 73 79 73 | rrent.logged-in.users.on.the.sys |
e8500 | 74 65 6d 2e 00 53 65 74 20 61 20 6d 65 61 6e 69 6e 67 66 75 6c 20 64 65 73 63 72 69 70 74 69 6f | tem..Set.a.meaningful.descriptio |
e8520 | 6e 2e 00 53 65 74 20 61 20 6e 61 6d 65 64 20 61 70 69 20 6b 65 79 2e 20 45 76 65 72 79 20 6b 65 | n..Set.a.named.api.key..Every.ke |
e8540 | 79 20 68 61 73 20 74 68 65 20 73 61 6d 65 2c 20 66 75 6c 6c 20 70 65 72 6d 69 73 73 69 6f 6e 73 | y.has.the.same,.full.permissions |
e8560 | 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 74 20 61 20 72 75 6c 65 20 64 65 73 63 72 | .on.the.system..Set.a.rule.descr |
e8580 | 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6f 6e 6e 65 63 74 69 6f | iption..Set.a.specific.connectio |
e85a0 | 6e 20 6d 61 72 6b 2e 00 53 65 74 20 61 20 73 70 65 63 69 66 69 63 20 70 61 63 6b 65 74 20 6d 61 | n.mark..Set.a.specific.packet.ma |
e85c0 | 72 6b 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 | rk..Set.action.for.the.route-map |
e85e0 | 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 6f 6e 20 65 | .policy..Set.action.to.take.on.e |
e8600 | 6e 74 72 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 20 72 75 6c 65 2e 00 53 65 74 20 61 | ntries.matching.this.rule..Set.a |
e8620 | 6e 20 41 50 49 2d 4b 45 59 20 69 73 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 | n.API-KEY.is.the.minimal.configu |
e8640 | 72 61 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 77 6f 72 6b 69 6e 67 20 41 50 49 20 45 6e 64 70 | ration.to.get.a.working.API.Endp |
e8660 | 6f 69 6e 74 2e 00 53 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 | oint..Set.authentication.backend |
e8680 | 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | ..The.configured.authentication. |
e86a0 | 62 61 63 6b 65 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 71 75 65 72 69 65 73 2e | backend.is.used.for.all.queries. |
e86c0 | 00 53 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 72 20 70 | .Set.container.capabilities.or.p |
e86e0 | 65 72 6d 69 73 73 69 6f 6e 73 2e 00 53 65 74 20 64 65 6c 61 79 20 62 65 74 77 65 65 6e 20 67 72 | ermissions..Set.delay.between.gr |
e8700 | 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 6f 6e 20 61 6e | atuitous.ARP.messages.sent.on.an |
e8720 | 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 64 65 6c 61 79 20 66 6f 72 20 73 65 63 6f 6e 64 | .interface..Set.delay.for.second |
e8740 | 20 73 65 74 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 61 66 74 65 72 20 74 72 | .set.of.gratuitous.ARPs.after.tr |
e8760 | 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 | ansition.to.MASTER..Set.descript |
e8780 | 69 6f 6e 20 60 3c 74 65 78 74 3e 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 73 65 72 | ion.`<text>`.for.dynamic.DNS.ser |
e87a0 | 76 69 63 65 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 65 74 20 64 65 73 63 72 | vice.being.configured..Set.descr |
e87c0 | 69 70 74 69 6f 6e 20 66 6f 72 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 | iption.for.as-path-list.policy.. |
e87e0 | 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 | Set.description.for.community-li |
e8800 | 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 | st.policy..Set.description.for.e |
e8820 | 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 | xtcommunity-list.policy..Set.des |
e8840 | 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 | cription.for.large-community-lis |
e8860 | 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 | t.policy..Set.description.for.ru |
e8880 | 6c 65 20 69 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 | le.in.IPv6.prefix-list..Set.desc |
e88a0 | 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c | ription.for.rule.in.the.prefix-l |
e88c0 | 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 2e 00 53 | ist..Set.description.for.rule..S |
e88e0 | 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 61 63 63 65 | et.description.for.the.IPv6.acce |
e8900 | 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 | ss.list..Set.description.for.the |
e8920 | 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 | .IPv6.prefix-list.policy..Set.de |
e8940 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 | scription.for.the.access.list..S |
e8960 | 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 | et.description.for.the.prefix-li |
e8980 | 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 | st.policy..Set.description.for.t |
e89a0 | 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 | he.route-map.policy..Set.descrip |
e89c0 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 75 6c 65 20 69 6e 20 74 68 65 20 72 6f 75 74 65 2d 6d | tion.for.the.rule.in.the.route-m |
e89e0 | 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 74 68 | ap.policy..Set.description.of.th |
e8a00 | 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 53 65 74 20 64 65 73 63 72 69 | e.peer.or.peer.group..Set.descri |
e8a20 | 70 74 69 6f 6e 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f | ption..Set.destination.address.o |
e8a40 | 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 | r.prefix.to.match..Set.destinati |
e8a60 | 6f 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 6d 65 74 72 69 63 2e 20 41 64 64 20 | on.routing.protocol.metric..Add. |
e8a80 | 6f 72 20 73 75 62 74 72 61 63 74 20 6d 65 74 72 69 63 2c 20 6f 72 20 73 65 74 20 6d 65 74 72 69 | or.subtract.metric,.or.set.metri |
e8aa0 | 63 20 76 61 6c 75 65 2e 00 53 65 74 20 65 74 68 31 20 74 6f 20 62 65 20 74 68 65 20 6c 69 73 74 | c.value..Set.eth1.to.be.the.list |
e8ac0 | 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 44 48 43 50 76 36 20 72 | ening.interface.for.the.DHCPv6.r |
e8ae0 | 65 6c 61 79 2e 00 53 65 74 20 65 78 65 63 75 74 69 6f 6e 20 74 69 6d 65 20 69 6e 20 63 6f 6d 6d | elay..Set.execution.time.in.comm |
e8b00 | 6f 6e 20 63 72 6f 6e 5f 20 74 69 6d 65 20 66 6f 72 6d 61 74 2e 20 41 20 63 72 6f 6e 20 60 3c 73 | on.cron_.time.format..A.cron.`<s |
e8b20 | 70 65 63 3e 60 20 6f 66 20 60 60 33 30 20 2a 2f 36 20 2a 20 2a 20 2a 60 60 20 77 6f 75 6c 64 20 | pec>`.of.``30.*/6.*.*.*``.would. |
e8b40 | 65 78 65 63 75 74 65 20 74 68 65 20 60 3c 74 61 73 6b 3e 60 20 61 74 20 6d 69 6e 75 74 65 20 33 | execute.the.`<task>`.at.minute.3 |
e8b60 | 30 20 70 61 73 74 20 65 76 65 72 79 20 36 74 68 20 68 6f 75 72 2e 00 53 65 74 20 65 78 74 63 6f | 0.past.every.6th.hour..Set.extco |
e8b80 | 6d 6d 75 6e 69 74 79 20 62 61 6e 64 77 69 64 74 68 00 53 65 74 20 69 66 20 61 6e 74 65 6e 6e 61 | mmunity.bandwidth.Set.if.antenna |
e8ba0 | 20 70 61 74 74 65 72 6e 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 64 75 72 69 6e 67 20 | .pattern.does.not.change.during. |
e8bc0 | 74 68 65 20 6c 69 66 65 74 69 6d 65 20 6f 66 20 61 6e 20 61 73 73 6f 63 69 61 74 69 6f 6e 00 53 | the.lifetime.of.an.association.S |
e8be0 | 65 74 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6d 61 74 63 68 2e 00 53 | et.inbound.interface.to.match..S |
e8c00 | 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 61 20 7a 6f 6e 65 2e 20 41 20 7a 6f 6e 65 20 | et.interfaces.to.a.zone..A.zone. |
e8c20 | 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 42 75 | can.have.multiple.interfaces..Bu |
e8c40 | 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 20 6d 65 6d | t.an.interface.can.only.be.a.mem |
e8c60 | 62 65 72 20 69 6e 20 6f 6e 65 20 7a 6f 6e 65 2e 00 53 65 74 20 6c 6f 63 61 6c 20 3a 61 62 62 72 | ber.in.one.zone..Set.local.:abbr |
e8c80 | 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 | :`ASN.(Autonomous.System.Number) |
e8ca0 | 60 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 | `.that.this.router.represents..T |
e8cc0 | 68 69 73 20 69 73 20 61 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 | his.is.a.a.mandatory.option!.Set |
e8ce0 | 20 6c 6f 63 61 6c 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 6e 75 6d 62 65 72 20 | .local.autonomous.system.number. |
e8d00 | 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 | that.this.router.represents..Thi |
e8d20 | 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6d 61 74 | s.is.a.mandatory.option!.Set.mat |
e8d40 | 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | ch.criteria.based.on.connection. |
e8d60 | 6d 61 72 6b 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f | mark..Set.match.criteria.based.o |
e8d80 | 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 | n.destination.port,.where.<match |
e8da0 | 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 | _criteria>.could.be:.Set.match.c |
e8dc0 | 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 65 73 73 69 6f 6e 20 73 74 61 74 65 2e 00 | riteria.based.on.session.state.. |
e8de0 | 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 | Set.match.criteria.based.on.sour |
e8e00 | 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 67 72 6f 75 70 73 2c 20 77 68 65 72 65 20 | ce.or.destination.groups,.where. |
e8e20 | 3c 74 65 78 74 3e 20 77 6f 75 6c 64 20 62 65 20 74 68 65 20 67 72 6f 75 70 20 6e 61 6d 65 2f 69 | <text>.would.be.the.group.name/i |
e8e40 | 64 65 6e 74 69 66 69 65 72 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 27 21 27 | dentifier..Prepend.character.'!' |
e8e60 | 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e | .for.inverted.matching.criteria. |
e8e80 | 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 | .Set.match.criteria.based.on.sou |
e8ea0 | 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 70 76 34 7c 69 70 76 36 20 61 64 64 | rce.or.destination.ipv4|ipv6.add |
e8ec0 | 72 65 73 73 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 | ress,.where.<match_criteria>.cou |
e8ee0 | 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 | ld.be:.Set.match.criteria.based. |
e8f00 | 6f 6e 20 74 63 70 20 66 6c 61 67 73 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 6f 72 | on.tcp.flags..Allowed.values.for |
e8f20 | 20 54 43 50 20 66 6c 61 67 73 3a 20 53 59 4e 20 41 43 4b 20 46 49 4e 20 52 53 54 20 55 52 47 20 | .TCP.flags:.SYN.ACK.FIN.RST.URG. |
e8f40 | 50 53 48 20 41 4c 4c 2e 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 | PSH.ALL..When.specifying.more.th |
e8f60 | 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d | an.one.flag,.flags.should.be.com |
e8f80 | 6d 61 2d 73 65 70 61 72 61 74 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 3a 20 76 61 6c 75 | ma-separated..For.example.:.valu |
e8fa0 | 65 20 6f 66 20 27 53 59 4e 2c 21 41 43 4b 2c 21 46 49 4e 2c 21 52 53 54 27 20 77 69 6c 6c 20 6f | e.of.'SYN,!ACK,!FIN,!RST'.will.o |
e8fc0 | 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 74 68 65 20 53 59 4e 20 66 | nly.match.packets.with.the.SYN.f |
e8fe0 | 6c 61 67 20 73 65 74 2c 20 61 6e 64 20 74 68 65 20 41 43 4b 2c 20 46 49 4e 20 61 6e 64 20 52 53 | lag.set,.and.the.ACK,.FIN.and.RS |
e9000 | 54 20 66 6c 61 67 73 20 75 6e 73 65 74 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 60 3c 73 69 7a | T.flags.unset..Set.maximum.`<siz |
e9020 | 65 3e 60 20 6f 66 20 44 48 43 50 20 70 61 63 6b 65 74 73 20 69 6e 63 6c 75 64 69 6e 67 20 72 65 | e>`.of.DHCP.packets.including.re |
e9040 | 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 20 44 48 43 50 | lay.agent.information..If.a.DHCP |
e9060 | 20 70 61 63 6b 65 74 20 73 69 7a 65 20 73 75 72 70 61 73 73 65 73 20 74 68 69 73 20 76 61 6c 75 | .packet.size.surpasses.this.valu |
e9080 | 65 20 69 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 77 69 74 68 6f 75 74 20 61 | e.it.will.be.forwarded.without.a |
e90a0 | 70 70 65 6e 64 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | ppending.relay.agent.information |
e90c0 | 2e 20 52 61 6e 67 65 20 36 34 2e 2e 2e 31 34 30 30 2c 20 64 65 66 61 75 6c 74 20 35 37 36 2e 00 | ..Range.64...1400,.default.576.. |
e90e0 | 53 65 74 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 67 65 20 6d 61 74 63 68 69 6e 67 20 72 61 74 | Set.maximum.average.matching.rat |
e9100 | 65 2e 20 46 6f 72 6d 61 74 20 66 6f 72 20 72 61 74 65 3a 20 69 6e 74 65 67 65 72 2f 74 69 6d 65 | e..Format.for.rate:.integer/time |
e9120 | 5f 75 6e 69 74 2c 20 77 68 65 72 65 20 74 69 6d 65 5f 75 6e 69 74 20 63 6f 75 6c 64 20 62 65 20 | _unit,.where.time_unit.could.be. |
e9140 | 61 6e 79 20 6f 6e 65 20 6f 66 20 73 65 63 6f 6e 64 2c 20 6d 69 6e 75 74 65 2c 20 68 6f 75 72 20 | any.one.of.second,.minute,.hour. |
e9160 | 6f 72 20 64 61 79 2e 46 6f 72 20 65 78 61 6d 70 6c 65 20 31 2f 73 65 63 6f 6e 64 20 69 6d 70 6c | or.day.For.example.1/second.impl |
e9180 | 69 65 73 20 72 75 6c 65 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 61 74 20 61 6e 20 61 76 65 | ies.rule.to.be.matched.at.an.ave |
e91a0 | 72 61 67 65 20 6f 66 20 6f 6e 63 65 20 70 65 72 20 73 65 63 6f 6e 64 2e 00 53 65 74 20 6d 61 78 | rage.of.once.per.second..Set.max |
e91c0 | 69 6d 75 6d 20 68 6f 70 20 63 6f 75 6e 74 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 72 | imum.hop.count.before.packets.ar |
e91e0 | 65 20 64 69 73 63 61 72 64 65 64 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 00 53 65 74 20 6d 61 78 | e.discarded,.default:.10.Set.max |
e9200 | 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6f 77 20 69 | imum.number.of.packets.to.alow.i |
e9220 | 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 53 65 74 20 6d 69 6e 69 6d 75 6d 20 74 69 | n.excess.of.rate..Set.minimum.ti |
e9240 | 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 72 65 66 72 65 73 68 69 6e 67 20 67 72 61 74 75 | me.interval.for.refreshing.gratu |
e9260 | 69 74 6f 75 73 20 41 52 50 73 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6d 6f 64 | itous.ARPs.while.MASTER..Set.mod |
e9280 | 65 20 66 6f 72 20 49 50 73 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 | e.for.IPsec.authentication.betwe |
e92a0 | 65 6e 20 56 79 4f 53 20 61 6e 64 20 4c 32 54 50 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 20 6e 75 | en.VyOS.and.L2TP.clients..Set.nu |
e92c0 | 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 | mber.of.gratuitous.ARP.messages. |
e92e0 | 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 | to.send.at.a.time.after.transiti |
e9300 | 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 74 | on.to.MASTER..Set.number.of.grat |
e9320 | 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 61 | uitous.ARP.messages.to.send.at.a |
e9340 | 20 74 69 6d 65 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f | .time.while.MASTER..Set.number.o |
e9360 | 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 48 65 6c 6c 6f 20 49 6e 74 65 72 76 61 6c 20 74 69 6d | f.seconds.for.Hello.Interval.tim |
e9380 | 65 72 20 76 61 6c 75 65 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 76 61 6c 75 65 2c 20 48 65 | er.value..Setting.this.value,.He |
e93a0 | 6c 6c 6f 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 74 69 | llo.packet.will.be.sent.every.ti |
e93c0 | 6d 65 72 20 76 61 6c 75 65 20 73 65 63 6f 6e 64 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 | mer.value.seconds.on.the.specifi |
e93e0 | 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 | ed.interface..This.value.must.be |
e9400 | 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 | .the.same.for.all.routers.attach |
e9420 | 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 | ed.to.a.common.network..The.defa |
e9440 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 | ult.value.is.10.seconds..The.int |
e9460 | 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 6e | erval.range.is.1.to.65535..Set.n |
e9480 | 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 72 6f 75 74 65 72 20 44 65 61 64 | umber.of.seconds.for.router.Dead |
e94a0 | 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 20 75 73 65 64 20 66 6f 72 20 57 | .Interval.timer.value.used.for.W |
e94c0 | 61 69 74 20 54 69 6d 65 72 20 61 6e 64 20 49 6e 61 63 74 69 76 69 74 79 20 54 69 6d 65 72 2e 20 | ait.Timer.and.Inactivity.Timer.. |
e94e0 | 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 | This.value.must.be.the.same.for. |
e9500 | 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e | all.routers.attached.to.a.common |
e9520 | 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 34 | .network..The.default.value.is.4 |
e9540 | 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 | 0.seconds..The.interval.range.is |
e9560 | 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 | .1.to.65535..Set.packet.modifica |
e9580 | 74 69 6f 6e 73 3a 20 45 78 70 6c 69 63 69 74 6c 79 20 73 65 74 20 54 43 50 20 4d 61 78 69 6d 75 | tions:.Explicitly.set.TCP.Maximu |
e95a0 | 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 20 76 61 6c 75 65 2e 00 53 65 74 20 70 61 63 6b 65 74 | m.segment.size.value..Set.packet |
e95c0 | 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 50 61 63 6b 65 74 20 44 69 66 66 65 72 65 6e 74 | .modifications:.Packet.Different |
e95e0 | 69 61 74 65 64 20 53 65 72 76 69 63 65 73 20 43 6f 64 65 70 6f 69 6e 74 20 28 44 53 43 50 29 00 | iated.Services.Codepoint.(DSCP). |
e9600 | 53 65 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 72 65 63 65 | Set.parameters.for.matching.rece |
e9620 | 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 2e 20 54 68 69 73 20 6d 61 74 63 68 20 63 6f | ntly.seen.sources..This.match.co |
e9640 | 75 6c 64 20 62 65 20 75 73 65 64 20 62 79 20 73 65 65 74 69 6e 67 20 63 6f 75 6e 74 20 28 73 6f | uld.be.used.by.seeting.count.(so |
e9660 | 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 6e 20 6d 6f 72 65 20 74 68 61 6e 20 3c 31 2d 32 | urce.address.seen.more.than.<1-2 |
e9680 | 35 35 3e 20 74 69 6d 65 73 29 20 61 6e 64 2f 6f 72 20 74 69 6d 65 20 28 73 6f 75 72 63 65 20 61 | 55>.times).and/or.time.(source.a |
e96a0 | 64 64 72 65 73 73 20 73 65 65 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 3c 30 2d 34 32 39 34 39 | ddress.seen.in.the.last.<0-42949 |
e96c0 | 36 37 32 39 35 3e 20 73 65 63 6f 6e 64 73 29 2e 00 53 65 74 20 70 72 65 64 65 66 69 6e 65 64 20 | 67295>.seconds)..Set.predefined. |
e96e0 | 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 65 2e 00 53 65 74 20 70 72 65 66 69 78 | shared.secret.phrase..Set.prefix |
e9700 | 65 73 20 74 6f 20 74 61 62 6c 65 2e 00 53 65 74 20 70 72 6f 78 79 20 66 6f 72 20 61 6c 6c 20 63 | es.to.table..Set.proxy.for.all.c |
e9720 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 69 74 69 61 74 65 64 20 62 79 20 56 79 4f 53 2c 20 69 6e | onnections.initiated.by.VyOS,.in |
e9740 | 63 6c 75 64 69 6e 67 20 48 54 54 50 2c 20 48 54 54 50 53 2c 20 61 6e 64 20 46 54 50 20 28 61 6e | cluding.HTTP,.HTTPS,.and.FTP.(an |
e9760 | 6f 6e 79 6d 6f 75 73 20 66 74 70 29 2e 00 53 65 74 20 72 6f 75 74 65 20 74 61 72 67 65 74 20 76 | onymous.ftp)..Set.route.target.v |
e9780 | 61 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 | alue.in.format.``<0-65535:0-4294 |
e97a0 | 39 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 | 967295>``.or.``<IP:0-65535>``..S |
e97c0 | 65 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b | et.routing.table.to.forward.pack |
e97e0 | 65 74 20 74 6f 2e 00 53 65 74 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 64 72 6f 70 2e 00 | et.to..Set.rule.action.to.drop.. |
e9800 | 53 65 74 20 73 65 72 76 69 63 65 20 74 6f 20 62 69 6e 64 20 6f 6e 20 49 50 20 61 64 64 72 65 73 | Set.service.to.bind.on.IP.addres |
e9820 | 73 2c 20 62 79 20 64 65 66 61 75 6c 74 20 6c 69 73 74 65 6e 20 6f 6e 20 61 6e 79 20 49 50 76 34 | s,.by.default.listen.on.any.IPv4 |
e9840 | 20 61 6e 64 20 49 50 76 36 00 53 65 74 20 73 69 74 65 20 6f 66 20 6f 72 69 67 69 6e 20 76 61 6c | .and.IPv6.Set.site.of.origin.val |
e9860 | 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 | ue.in.format.``<0-65535:0-429496 |
e9880 | 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 | 7295>``.or.``<IP:0-65535>``..Set |
e98a0 | 20 73 6f 6d 65 20 61 74 74 72 69 62 75 74 65 73 20 28 6c 69 6b 65 20 41 53 20 50 41 54 48 20 6f | .some.attributes.(like.AS.PATH.o |
e98c0 | 72 20 43 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 29 20 74 6f 20 61 64 76 65 72 74 69 73 65 64 | r.Community.value).to.advertised |
e98e0 | 20 72 6f 75 74 65 73 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 00 53 65 74 20 73 6f 6d 65 20 6d | .routes.to.neighbors..Set.some.m |
e9900 | 65 74 72 69 63 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 61 20 70 | etric.to.routes.learned.from.a.p |
e9920 | 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 73 6f 75 72 63 65 20 49 | articular.neighbor..Set.source.I |
e9940 | 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 72 6f 75 74 65 2e 00 53 65 74 20 73 6f | P/IPv6.address.for.route..Set.so |
e9960 | 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e | urce.address.or.prefix.to.match. |
e9980 | 00 53 65 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 74 6f 20 79 6f 75 72 20 6c 6f 63 61 | .Set.source-address.to.your.loca |
e99a0 | 6c 20 49 50 20 28 4c 41 4e 29 2e 00 53 65 74 20 74 61 67 20 76 61 6c 75 65 20 66 6f 72 20 72 6f | l.IP.(LAN)..Set.tag.value.for.ro |
e99c0 | 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 65 74 20 74 68 65 20 22 72 65 63 75 72 73 69 | uting.protocol..Set.the."recursi |
e99e0 | 6f 6e 20 64 65 73 69 72 65 64 22 20 62 69 74 20 69 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 | on.desired".bit.in.requests.to.t |
e9a00 | 68 65 20 75 70 73 74 72 65 61 6d 20 6e 61 6d 65 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 | he.upstream.nameserver..Set.the. |
e9a20 | 3a 61 62 62 72 3a 60 44 52 20 28 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 29 60 20 50 | :abbr:`DR.(Designated.Router)`.P |
e9a40 | 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 | riority.for.the.interface..This. |
e9a60 | 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 75 | command.is.useful.to.allow.the.u |
e9a80 | 73 65 72 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 77 68 61 74 20 6e 6f 64 65 20 62 65 63 6f 6d | ser.to.influence.what.node.becom |
e9aa0 | 65 73 20 74 68 65 20 44 52 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 00 53 65 74 | es.the.DR.for.a.LAN.segment..Set |
e9ac0 | 20 74 68 65 20 3a 61 62 62 72 3a 60 4d 52 55 20 28 4d 61 78 69 6d 75 6d 20 52 65 63 65 69 76 65 | .the.:abbr:`MRU.(Maximum.Receive |
e9ae0 | 20 55 6e 69 74 29 60 20 74 6f 20 60 6d 72 75 60 2e 20 50 50 50 64 20 77 69 6c 6c 20 61 73 6b 20 | .Unit)`.to.`mru`..PPPd.will.ask. |
e9b00 | 74 68 65 20 70 65 65 72 20 74 6f 20 73 65 6e 64 20 70 61 63 6b 65 74 73 20 6f 66 20 6e 6f 20 6d | the.peer.to.send.packets.of.no.m |
e9b20 | 6f 72 65 20 74 68 61 6e 20 60 6d 72 75 60 20 62 79 74 65 73 2e 20 54 68 65 20 76 61 6c 75 65 20 | ore.than.`mru`.bytes..The.value. |
e9b40 | 6f 66 20 60 6d 72 75 60 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 32 38 20 61 6e 64 | of.`mru`.must.be.between.128.and |
e9b60 | 20 31 36 33 38 34 2e 00 53 65 74 20 74 68 65 20 42 47 50 20 6e 65 78 74 68 6f 70 20 61 64 64 72 | .16384..Set.the.BGP.nexthop.addr |
e9b80 | 65 73 73 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 65 72 2e 20 | ess.to.the.address.of.the.peer.. |
e9ba0 | 46 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d | For.an.incoming.route-map.this.m |
e9bc0 | 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 70 65 65 72 20 | eans.the.ip.address.of.our.peer. |
e9be0 | 69 73 20 75 73 65 64 2e 20 46 6f 72 20 61 6e 20 6f 75 74 67 6f 69 6e 67 20 72 6f 75 74 65 2d 6d | is.used..For.an.outgoing.route-m |
e9c00 | 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 | ap.this.means.the.ip.address.of. |
e9c20 | 6f 75 72 20 73 65 6c 66 20 69 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 | our.self.is.used.to.establish.th |
e9c40 | 65 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6f 75 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 | e.peering.with.our.neighbor..Set |
e9c60 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 74 | .the.IP.address.of.the.local.int |
e9c80 | 65 72 66 61 63 65 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 74 75 6e 6e 65 6c | erface.to.be.used.for.the.tunnel |
e9ca0 | 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f | ..Set.the.IP.address.of.the.remo |
e9cc0 | 74 65 20 70 65 65 72 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 | te.peer..It.may.be.specified.as. |
e9ce0 | 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 | an.IPv4.address.or.an.IPv6.addre |
e9d00 | 73 73 2e 00 53 65 74 20 74 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 | ss..Set.the.IPv4.source.validati |
e9d20 | 6f 6e 20 6d 6f 64 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 | on.mode..The.following.system.pa |
e9d40 | 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 53 65 74 20 74 68 65 | rameter.will.be.altered:.Set.the |
e9d60 | 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 72 79 20 63 6f 75 6e 74 2e 20 54 68 | .MLD.last.member.query.count..Th |
e9d80 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 4c | e.default.value.is.2..Set.the.ML |
e9da0 | 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 | D.last.member.query.interval.in. |
e9dc0 | 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 | milliseconds.(100-6553500)..The. |
e9de0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e | default.value.is.1000.millisecon |
e9e00 | 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 | ds..Set.the.MLD.query.response.t |
e9e20 | 69 6d 65 6f 75 74 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 | imeout.in.milliseconds.(100-6553 |
e9e40 | 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 | 500)..The.default.value.is.10000 |
e9e60 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 76 65 72 73 69 | .milliseconds..Set.the.MLD.versi |
e9e80 | 6f 6e 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 | on.used.on.this.interface..The.d |
e9ea0 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 61 78 69 6d | efault.value.is.2..Set.the.Maxim |
e9ec0 | 75 6d 20 53 74 61 63 6b 20 44 65 70 74 68 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 | um.Stack.Depth.supported.by.the. |
e9ee0 | 72 6f 75 74 65 72 2e 20 54 68 65 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 6f 66 20 74 68 65 20 | router..The.value.depend.of.the. |
e9f00 | 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 00 53 65 74 20 74 68 65 20 50 49 4d 20 68 65 6c 6c | MPLS.dataplane..Set.the.PIM.hell |
e9f20 | 6f 20 61 6e 64 20 68 6f 6c 64 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 61 20 69 6e 74 65 72 66 | o.and.hold.interval.for.a.interf |
e9f40 | 61 63 65 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f | ace..Set.the.Segment.Routing.Glo |
e9f60 | 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 | bal.Block.i.e..the.label.range.u |
e9f80 | 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 | sed.by.MPLS.to.store.label.in.th |
e9fa0 | 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 | e.MPLS.FIB.for.Prefix.SID..Note. |
e9fc0 | 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 | that.the.block.size.may.not.exce |
e9fe0 | 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e | ed.65535..Set.the.Segment.Routin |
ea000 | 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 | g.Global.Block.i.e..the.low.labe |
ea020 | 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 | l.range.used.by.MPLS.to.store.la |
ea040 | 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 | bel.in.the.MPLS.FIB.for.Prefix.S |
ea060 | 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 | ID..Note.that.the.block.size.may |
ea080 | 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 | .not.exceed.65535..Set.the.Segme |
ea0a0 | 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 | nt.Routing.Local.Block.i.e..the. |
ea0c0 | 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 | label.range.used.by.MPLS.to.stor |
ea0e0 | 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 | e.label.in.the.MPLS.FIB.for.Pref |
ea100 | 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 | ix.SID..Note.that.the.block.size |
ea120 | 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f | .may.not.exceed.65535.Segment.Ro |
ea140 | 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 | uting.Local.Block,.The.negative. |
ea160 | 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 | command.always.unsets.both..Set. |
ea180 | 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 | the.Segment.Routing.Local.Block. |
ea1a0 | 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 | i.e..the.low.label.range.used.by |
ea1c0 | 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 | .MPLS.to.store.label.in.the.MPLS |
ea1e0 | 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 | .FIB.for.Prefix.SID..Note.that.t |
ea200 | 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 | he.block.size.may.not.exceed.655 |
ea220 | 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 | 35.Segment.Routing.Local.Block,. |
ea240 | 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 | The.negative.command.always.unse |
ea260 | 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 55 73 65 72 20 49 44 20 6f 72 20 47 72 6f 75 | ts.both..Set.the.User.ID.or.Grou |
ea280 | 70 20 49 44 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 53 65 74 20 74 68 65 20 60 60 | p.ID.of.the.container.Set.the.`` |
ea2a0 | 73 73 68 64 60 60 20 6c 6f 67 20 6c 65 76 65 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | sshd``.log.level..The.default.is |
ea2c0 | 20 60 60 69 6e 66 6f 60 60 2e 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | .``info``..Set.the.address.of.th |
ea2e0 | 65 20 62 61 63 6b 65 6e 64 20 70 6f 72 74 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f | e.backend.port.Set.the.address.o |
ea300 | 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 77 68 69 63 68 20 74 68 | f.the.backend.server.to.which.th |
ea320 | 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 | e.incoming.traffic.will.be.forwa |
ea340 | 72 64 65 64 00 53 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 76 65 72 73 69 6f | rded.Set.the.default.VRRP.versio |
ea360 | 6e 20 74 6f 20 75 73 65 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 2c 20 62 75 | n.to.use..This.defaults.to.2,.bu |
ea380 | 74 20 49 50 76 36 20 69 6e 73 74 61 6e 63 65 73 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 75 73 65 | t.IPv6.instances.will.always.use |
ea3a0 | 20 76 65 72 73 69 6f 6e 20 33 2e 00 53 65 74 20 74 68 65 20 64 65 76 69 63 65 27 73 20 74 72 61 | .version.3..Set.the.device's.tra |
ea3c0 | 6e 73 6d 69 74 20 28 54 58 29 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 6d 75 73 74 20 62 65 | nsmit.(TX).key..This.key.must.be |
ea3e0 | 20 61 20 68 65 78 20 73 74 72 69 6e 67 20 74 68 61 74 20 69 73 20 31 36 2d 62 79 74 65 73 20 28 | .a.hex.string.that.is.16-bytes.( |
ea400 | 47 43 4d 2d 41 45 53 2d 31 32 38 29 20 6f 72 20 33 32 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 | GCM-AES-128).or.32-bytes.(GCM-AE |
ea420 | 53 2d 32 35 36 29 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 | S-256)..Set.the.distance.for.the |
ea440 | 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 44 48 43 | .default.gateway.sent.by.the.DHC |
ea460 | 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 | P.server..Set.the.distance.for.t |
ea480 | 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 50 | he.default.gateway.sent.by.the.P |
ea4a0 | 50 50 6f 45 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f | PPoE.server..Set.the.distance.fo |
ea4c0 | 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 | r.the.default.gateway.sent.by.th |
ea4e0 | 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 | e.SSTP.server..Set.the.encapsula |
ea500 | 74 69 6f 6e 20 74 79 70 65 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 56 61 6c 69 64 20 76 | tion.type.of.the.tunnel..Valid.v |
ea520 | 61 6c 75 65 73 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 72 65 3a 20 75 64 70 | alues.for.encapsulation.are:.udp |
ea540 | 2c 20 69 70 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 | ,.ip..Set.the.global.setting.for |
ea560 | 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 53 65 74 20 | .an.established.connection..Set. |
ea580 | 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 70 | the.global.setting.for.invalid.p |
ea5a0 | 61 63 6b 65 74 73 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 | ackets..Set.the.global.setting.f |
ea5c0 | 6f 72 20 72 65 6c 61 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 | or.related.connections..Set.the. |
ea5e0 | 6c 69 73 74 65 6e 20 70 6f 72 74 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 2c 20 74 68 | listen.port.of.the.local.API,.th |
ea600 | 69 73 20 68 61 73 20 6e 6f 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 65 62 73 65 72 76 65 | is.has.no.effect.on.the.webserve |
ea620 | 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 70 6f 72 74 20 38 30 38 30 00 53 65 74 20 | r..The.default.is.port.8080.Set. |
ea640 | 74 68 65 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 60 3c 63 6f 75 6e 74 3e 60 20 62 65 66 6f 72 65 | the.maximum.hop.`<count>`.before |
ea660 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e 20 52 61 6e 67 65 20 30 2e | .packets.are.discarded..Range.0. |
ea680 | 2e 2e 32 35 35 2c 20 64 65 66 61 75 6c 74 20 31 30 2e 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d | ..255,.default.10..Set.the.maxim |
ea6a0 | 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 41 2d 4d 50 44 55 20 70 72 65 2d 45 4f 46 20 70 61 64 64 | um.length.of.A-MPDU.pre-EOF.padd |
ea6c0 | 69 6e 67 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 72 65 63 65 69 76 65 | ing.that.the.station.can.receive |
ea6e0 | 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 68 | .Set.the.maximum.number.of.TCP.h |
ea700 | 61 6c 66 2d 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6e 61 | alf-open.connections..Set.the.na |
ea720 | 6d 65 20 6f 66 20 74 68 65 20 53 53 4c 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 | me.of.the.SSL.:abbr:`CA.(Certifi |
ea740 | 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 50 4b 49 20 65 6e 74 72 79 20 75 73 65 64 20 | cate.Authority)`.PKI.entry.used. |
ea760 | 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 | for.authentication.of.the.remote |
ea780 | 20 73 69 64 65 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 20 63 65 72 | .side..If.an.intermediate.CA.cer |
ea7a0 | 74 69 66 69 63 61 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 61 6c 6c 20 | tificate.is.specified,.then.all. |
ea7c0 | 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 61 74 20 65 78 69 73 | parent.CA.certificates.that.exis |
ea7e0 | 74 20 69 6e 20 74 68 65 20 50 4b 49 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 72 6f 6f 74 20 43 | t.in.the.PKI,.such.as.the.root.C |
ea800 | 41 20 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 73 | A.or.additional.intermediate.CAs |
ea820 | 2c 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 75 73 65 64 20 64 75 72 | ,.will.automatically.be.used.dur |
ea840 | 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 65 6e | ing.certificate.validation.to.en |
ea860 | 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 75 6c 6c 20 63 68 61 69 6e 20 6f 66 20 74 72 75 73 | sure.that.the.full.chain.of.trus |
ea880 | 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 | t.is.available..Set.the.name.of. |
ea8a0 | 74 68 65 20 78 35 30 39 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 65 64 20 74 6f 20 | the.x509.client.keypair.used.to. |
ea8c0 | 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 38 30 32 2e 31 78 20 | authenticate.against.the.802.1x. |
ea8e0 | 73 79 73 74 65 6d 2e 20 41 6c 6c 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 | system..All.parent.CA.certificat |
ea900 | 65 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 73 75 | es.of.the.client.certificate,.su |
ea920 | 63 68 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 61 6e 64 20 72 6f 6f 74 20 43 41 73 2c | ch.as.intermediate.and.root.CAs, |
ea940 | 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 45 41 50 | .will.be.sent.as.part.of.the.EAP |
ea960 | 2d 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 65 74 20 74 68 65 20 6e 61 74 69 76 65 20 56 | -TLS.handshake..Set.the.native.V |
ea980 | 4c 41 4e 20 49 44 20 66 6c 61 67 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 | LAN.ID.flag.of.the.interface..Wh |
ea9a0 | 65 6e 20 61 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 74 68 6f 75 74 20 61 20 56 4c 41 4e 20 | en.a.data.packet.without.a.VLAN. |
ea9c0 | 74 61 67 20 65 6e 74 65 72 73 20 74 68 65 20 70 6f 72 74 2c 20 74 68 65 20 64 61 74 61 20 70 61 | tag.enters.the.port,.the.data.pa |
ea9e0 | 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 63 65 64 20 74 6f 20 61 64 64 20 61 20 74 61 67 | cket.will.be.forced.to.add.a.tag |
eaa00 | 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 76 6c 61 6e 20 69 64 2e 20 57 68 65 6e 20 74 68 65 | .of.a.specific.vlan.id..When.the |
eaa20 | 20 76 6c 61 6e 20 69 64 20 66 6c 61 67 20 66 6c 6f 77 73 20 6f 75 74 2c 20 74 68 65 20 74 61 67 | .vlan.id.flag.flows.out,.the.tag |
eaa40 | 20 6f 66 20 74 68 65 20 76 6c 61 6e 20 69 64 20 77 69 6c 6c 20 62 65 20 73 74 72 69 70 70 65 64 | .of.the.vlan.id.will.be.stripped |
eaa60 | 00 53 65 74 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 61 73 20 75 6e 63 68 61 6e 67 65 64 2e 20 | .Set.the.next-hop.as.unchanged.. |
eaa80 | 50 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 77 69 74 68 6f | Pass.through.the.route-map.witho |
eaaa0 | 75 74 20 63 68 61 6e 67 69 6e 67 20 69 74 73 20 76 61 6c 75 65 00 53 65 74 20 74 68 65 20 6e 75 | ut.changing.its.value.Set.the.nu |
eaac0 | 6d 62 65 72 20 6f 66 20 54 43 50 20 6d 61 78 69 6d 75 6d 20 72 65 74 72 61 6e 73 6d 69 74 20 61 | mber.of.TCP.maximum.retransmit.a |
eaae0 | 74 74 65 6d 70 74 73 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 65 61 6c 74 | ttempts..Set.the.number.of.healt |
eab00 | 68 20 63 68 65 63 6b 20 66 61 69 6c 75 72 65 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 | h.check.failures.before.an.inter |
eab20 | 66 61 63 65 20 69 73 20 6d 61 72 6b 65 64 20 61 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2c 20 72 | face.is.marked.as.unavailable,.r |
eab40 | 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 | ange.for.number.is.1.to.10,.defa |
eab60 | 75 6c 74 20 31 2e 20 4f 72 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 63 63 | ult.1..Or.set.the.number.of.succ |
eab80 | 65 73 73 66 75 6c 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 62 65 66 6f 72 65 20 61 6e 20 69 | essful.health.checks.before.an.i |
eaba0 | 6e 74 65 72 66 61 63 65 20 69 73 20 61 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 69 6e | nterface.is.added.back.to.the.in |
eabc0 | 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 | terface.pool,.range.for.number.i |
eabe0 | 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e 00 53 65 74 20 74 68 65 20 6e 75 | s.1.to.10,.default.1..Set.the.nu |
eac00 | 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 | mber.of.seconds.the.router.waits |
eac20 | 20 75 6e 74 69 6c 20 72 65 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 | .until.retrying.to.connect.to.th |
eac40 | 65 20 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f | e.cache.server..Set.the.number.o |
eac60 | 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c | f.seconds.the.router.waits.until |
eac80 | 20 74 68 65 20 72 6f 75 74 65 72 20 65 78 70 69 72 65 73 20 74 68 65 20 63 61 63 68 65 2e 00 53 | .the.router.expires.the.cache..S |
eaca0 | 65 74 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 70 75 62 6c 69 63 20 6b | et.the.options.for.this.public.k |
eacc0 | 65 79 2e 20 53 65 65 20 74 68 65 20 73 73 68 20 60 60 61 75 74 68 6f 72 69 7a 65 64 5f 6b 65 79 | ey..See.the.ssh.``authorized_key |
eace0 | 73 60 60 20 6d 61 6e 20 70 61 67 65 20 66 6f 72 20 64 65 74 61 69 6c 73 20 6f 66 20 77 68 61 74 | s``.man.page.for.details.of.what |
ead00 | 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 65 72 65 2e 20 54 6f 20 70 6c 61 63 65 20 | .you.can.specify.here..To.place. |
ead20 | 61 20 60 60 22 60 60 20 63 68 61 72 61 63 74 65 72 20 69 6e 20 74 68 65 20 6f 70 74 69 6f 6e 73 | a.``"``.character.in.the.options |
ead40 | 20 66 69 65 6c 64 2c 20 75 73 65 20 60 60 26 71 75 6f 74 3b 60 60 2c 20 66 6f 72 20 65 78 61 6d | .field,.use.``"``,.for.exam |
ead60 | 70 6c 65 20 60 60 66 72 6f 6d 3d 26 71 75 6f 74 3b 31 30 2e 30 2e 30 2e 30 2f 32 34 26 71 75 6f | ple.``from="10.0.0.0/24&quo |
ead80 | 74 3b 60 60 20 74 6f 20 72 65 73 74 72 69 63 74 20 77 68 65 72 65 20 74 68 65 20 75 73 65 72 20 | t;``.to.restrict.where.the.user. |
eada0 | 6d 61 79 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 | may.connect.from.when.using.this |
eadc0 | 20 6b 65 79 2e 00 53 65 74 20 74 68 65 20 70 61 72 69 74 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 | .key..Set.the.parity.option.for. |
eade0 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 49 66 20 75 6e 73 65 74 20 74 68 69 73 20 77 69 6c 6c 20 | the.console..If.unset.this.will. |
eae00 | 64 65 66 61 75 6c 74 20 74 6f 20 6e 6f 6e 65 2e 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 | default.to.none..Set.the.peer's. |
eae20 | 4d 41 43 20 61 64 64 72 65 73 73 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 6b 65 79 20 75 | MAC.address.Set.the.peer's.key.u |
eae40 | 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 28 52 58 29 20 74 72 61 66 66 69 63 00 53 65 74 20 | sed.to.receive.(RX).traffic.Set. |
eae60 | 74 68 65 20 70 65 65 72 2d 73 65 73 73 69 6f 6e 2d 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 | the.peer-session-id,.which.is.a. |
eae80 | 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 20 61 73 73 69 67 6e 65 64 20 74 6f | 32-bit.integer.value.assigned.to |
eaea0 | 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 79 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 76 61 | .the.session.by.the.peer..The.va |
eaec0 | 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 5f | lue.used.must.match.the.session_ |
eaee0 | 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e | id.value.being.used.at.the.peer. |
eaf00 | 00 53 65 74 20 74 68 65 20 72 65 73 74 61 72 74 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 | .Set.the.restart.behavior.of.the |
eaf20 | 20 63 6f 6e 74 61 69 6e 65 72 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 65 20 6d 65 74 72 69 63 | .container..Set.the.route.metric |
eaf40 | 2e 20 57 68 65 6e 20 75 73 65 64 20 77 69 74 68 20 42 47 50 2c 20 73 65 74 20 74 68 65 20 42 47 | ..When.used.with.BGP,.set.the.BG |
eaf60 | 50 20 61 74 74 72 69 62 75 74 65 20 4d 45 44 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 61 | P.attribute.MED.to.a.specific.va |
eaf80 | 6c 75 65 2e 20 55 73 65 20 60 60 2b 2f 2d 60 60 20 74 6f 20 61 64 64 20 6f 72 20 73 75 62 74 72 | lue..Use.``+/-``.to.add.or.subtr |
eafa0 | 61 63 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 74 6f 2f 66 72 6f 6d 20 | act.the.specified.value.to/from. |
eafc0 | 74 68 65 20 65 78 69 73 74 69 6e 67 2f 4d 45 44 2e 20 55 73 65 20 60 60 72 74 74 60 60 20 74 6f | the.existing/MED..Use.``rtt``.to |
eafe0 | 20 73 65 74 20 74 68 65 20 4d 45 44 20 74 6f 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 | .set.the.MED.to.the.round.trip.t |
eb000 | 69 6d 65 20 6f 72 20 60 60 2b 72 74 74 2f 2d 72 74 74 60 60 20 74 6f 20 61 64 64 2f 73 75 62 74 | ime.or.``+rtt/-rtt``.to.add/subt |
eb020 | 72 61 63 74 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 74 6f 2f 66 72 6f 6d | ract.the.round.trip.time.to/from |
eb040 | 20 74 68 65 20 4d 45 44 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 | .the.MED..Set.the.routing.table. |
eb060 | 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 77 69 74 68 2e 00 53 65 74 20 74 68 65 20 | to.forward.packet.with..Set.the. |
eb080 | 73 65 73 73 69 6f 6e 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e | session.id,.which.is.a.32-bit.in |
eb0a0 | 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 | teger.value..Uniquely.identifies |
eb0c0 | 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 65 69 6e 67 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 | .the.session.being.created..The. |
eb0e0 | 76 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 70 65 65 72 5f 73 | value.used.must.match.the.peer_s |
eb100 | 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 | ession_id.value.being.used.at.th |
eb120 | 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 68 61 73 68 | e.peer..Set.the.size.of.the.hash |
eb140 | 20 74 61 62 6c 65 2e 20 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 | .table..The.connection.tracking. |
eb160 | 68 61 73 68 20 74 61 62 6c 65 20 6d 61 6b 65 73 20 73 65 61 72 63 68 69 6e 67 20 74 68 65 20 63 | hash.table.makes.searching.the.c |
eb180 | 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 66 61 73 74 65 72 2e | onnection.tracking.table.faster. |
eb1a0 | 20 54 68 65 20 68 61 73 68 20 74 61 62 6c 65 20 75 73 65 73 20 e2 80 9c 62 75 63 6b 65 74 73 e2 | .The.hash.table.uses....buckets. |
eb1c0 | 80 9d 20 74 6f 20 72 65 63 6f 72 64 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 63 6f 6e 6e | ...to.record.entries.in.the.conn |
eb1e0 | 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 73 | ection.tracking.table..Set.the.s |
eb200 | 6f 75 72 63 65 20 49 50 20 6f 66 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 2c 20 6f | ource.IP.of.forwarded.packets,.o |
eb220 | 74 68 65 72 77 69 73 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 73 20 61 64 64 72 65 73 | therwise.original.senders.addres |
eb240 | 73 20 69 73 20 75 73 65 64 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 | s.is.used..Set.the.timeout.in.se |
eb260 | 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 20 69 | counds.for.a.protocol.or.state.i |
eb280 | 6e 20 61 20 63 75 73 74 6f 6d 20 72 75 6c 65 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 | n.a.custom.rule..Set.the.timeout |
eb2a0 | 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 | .in.secounds.for.a.protocol.or.s |
eb2c0 | 74 61 74 65 2e 00 53 65 74 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 64 2c 20 77 68 69 63 68 20 69 | tate..Set.the.tunnel.id,.which.i |
eb2e0 | 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 | s.a.32-bit.integer.value..Unique |
eb300 | 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 6f 20 77 68 | ly.identifies.the.tunnel.into.wh |
eb320 | 69 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e | ich.the.session.will.be.created. |
eb340 | 00 53 65 74 20 74 68 65 20 77 69 6e 64 6f 77 20 73 63 61 6c 65 20 66 61 63 74 6f 72 20 66 6f 72 | .Set.the.window.scale.factor.for |
eb360 | 20 54 43 50 20 77 69 6e 64 6f 77 20 73 63 61 6c 69 6e 67 00 53 65 74 20 77 69 6e 64 6f 77 20 6f | .TCP.window.scaling.Set.window.o |
eb380 | 66 20 63 6f 6e 63 75 72 72 65 6e 74 6c 79 20 76 61 6c 69 64 20 63 6f 64 65 73 2e 00 53 65 74 73 | f.concurrently.valid.codes..Sets |
eb3a0 | 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 68 75 62 20 72 65 67 69 73 | .the.image.name.in.the.hub.regis |
eb3c0 | 74 72 79 00 53 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6c 69 73 74 65 6e | try.Sets.the.interface.to.listen |
eb3e0 | 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 2e 20 43 6f 75 6c 64 | .for.multicast.packets.on..Could |
eb400 | 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 2c 20 6e 6f 74 20 79 65 74 20 74 65 73 74 65 64 2e 00 | .be.a.loopback,.not.yet.tested.. |
eb420 | 53 65 74 73 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 70 6f 72 74 20 66 6f 72 20 61 20 6c 69 | Sets.the.listening.port.for.a.li |
eb440 | 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6f 76 65 72 72 69 64 65 73 20 | stening.address..This.overrides. |
eb460 | 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 33 31 32 38 20 6f 6e 20 74 68 65 20 | the.default.port.of.3128.on.the. |
eb480 | 73 70 65 63 69 66 69 63 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 2e 00 53 65 74 73 20 74 68 | specific.listen.address..Sets.th |
eb4a0 | 65 20 75 6e 69 71 75 65 20 69 64 20 66 6f 72 20 74 68 69 73 20 76 78 6c 61 6e 2d 69 6e 74 65 72 | e.unique.id.for.this.vxlan-inter |
eb4c0 | 66 61 63 65 2e 20 4e 6f 74 20 73 75 72 65 20 68 6f 77 20 69 74 20 63 6f 72 72 65 6c 61 74 65 73 | face..Not.sure.how.it.correlates |
eb4e0 | 20 77 69 74 68 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 2e 00 53 65 74 74 69 6e 67 | .with.multicast-address..Setting |
eb500 | 20 56 52 52 50 20 67 72 6f 75 70 20 70 72 69 6f 72 69 74 79 00 53 65 74 74 69 6e 67 20 6e 61 6d | .VRRP.group.priority.Setting.nam |
eb520 | 65 00 53 65 74 74 69 6e 67 20 74 68 69 73 20 75 70 20 6f 6e 20 41 57 53 20 77 69 6c 6c 20 72 65 | e.Setting.this.up.on.AWS.will.re |
eb540 | 71 75 69 72 65 20 61 20 22 43 75 73 74 6f 6d 20 50 72 6f 74 6f 63 6f 6c 20 52 75 6c 65 22 20 66 | quire.a."Custom.Protocol.Rule".f |
eb560 | 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 22 34 37 22 20 28 47 52 45 29 20 41 6c | or.protocol.number."47".(GRE).Al |
eb580 | 6c 6f 77 20 52 75 6c 65 20 69 6e 20 54 57 4f 20 70 6c 61 63 65 73 2e 20 46 69 72 73 74 6c 79 20 | low.Rule.in.TWO.places..Firstly. |
eb5a0 | 6f 6e 20 74 68 65 20 56 50 43 20 4e 65 74 77 6f 72 6b 20 41 43 4c 2c 20 61 6e 64 20 73 65 63 6f | on.the.VPC.Network.ACL,.and.seco |
eb5c0 | 6e 64 6c 79 20 6f 6e 20 74 68 65 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 6e 65 74 77 6f | ndly.on.the.security.group.netwo |
eb5e0 | 72 6b 20 41 43 4c 20 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 45 43 32 20 69 6e 73 74 61 | rk.ACL.attached.to.the.EC2.insta |
eb600 | 6e 63 65 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 73 20 77 6f 72 | nce..This.has.been.tested.as.wor |
eb620 | 6b 69 6e 67 20 66 6f 72 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 41 4d 49 20 69 6d 61 67 65 20 | king.for.the.official.AMI.image. |
eb640 | 6f 6e 20 74 68 65 20 41 57 53 20 4d 61 72 6b 65 74 70 6c 61 63 65 2e 20 28 4c 6f 63 61 74 65 20 | on.the.AWS.Marketplace..(Locate. |
eb660 | 74 68 65 20 63 6f 72 72 65 63 74 20 56 50 43 20 61 6e 64 20 73 65 63 75 72 69 74 79 20 67 72 6f | the.correct.VPC.and.security.gro |
eb680 | 75 70 20 62 79 20 6e 61 76 69 67 61 74 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 74 | up.by.navigating.through.the.det |
eb6a0 | 61 69 6c 73 20 70 61 6e 65 20 62 65 6c 6f 77 20 79 6f 75 72 20 45 43 32 20 69 6e 73 74 61 6e 63 | ails.pane.below.your.EC2.instanc |
eb6c0 | 65 20 69 6e 20 74 68 65 20 41 57 53 20 63 6f 6e 73 6f 6c 65 29 2e 00 53 65 74 74 69 6e 67 20 75 | e.in.the.AWS.console)..Setting.u |
eb6e0 | 70 20 49 50 53 65 63 3a 00 53 65 74 74 69 6e 67 20 75 70 20 4f 70 65 6e 56 50 4e 00 53 65 74 74 | p.IPSec:.Setting.up.OpenVPN.Sett |
eb700 | 69 6e 67 20 75 70 20 61 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 50 4b 49 20 77 69 74 68 20 61 20 43 | ing.up.a.full-blown.PKI.with.a.C |
eb720 | 41 20 63 65 72 74 69 66 69 63 61 74 65 20 77 6f 75 6c 64 20 61 72 67 75 61 62 6c 79 20 64 65 66 | A.certificate.would.arguably.def |
eb740 | 65 61 74 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | eat.the.purpose.of.site-to-site. |
eb760 | 4f 70 65 6e 56 50 4e 2c 20 73 69 6e 63 65 20 69 74 73 20 6d 61 69 6e 20 67 6f 61 6c 20 69 73 20 | OpenVPN,.since.its.main.goal.is. |
eb780 | 73 75 70 70 6f 73 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 69 6d | supposed.to.be.configuration.sim |
eb7a0 | 70 6c 69 63 69 74 79 2c 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 73 65 72 76 65 72 20 73 65 74 75 | plicity,.compared.to.server.setu |
eb7c0 | 70 73 20 74 68 61 74 20 6e 65 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 70 6c 65 | ps.that.need.to.support.multiple |
eb7e0 | 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 | .clients..Setting.up.certificate |
eb800 | 73 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 3a 00 53 65 74 74 69 | s.Setting.up.certificates:.Setti |
eb820 | 6e 67 20 75 70 20 74 75 6e 6e 65 6c 3a 00 53 65 74 74 69 6e 67 20 77 69 6c 6c 20 6f 6e 6c 79 20 | ng.up.tunnel:.Setting.will.only. |
eb840 | 62 65 63 6f 6d 65 20 61 63 74 69 76 65 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 72 65 62 6f | become.active.with.the.next.rebo |
eb860 | 6f 74 21 00 53 65 74 75 70 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 66 6f 72 20 6e 65 74 77 | ot!.Setup.DHCP.failover.for.netw |
eb880 | 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 74 75 70 20 65 6e 63 72 79 70 74 65 64 | ork.192.0.2.0/24.Setup.encrypted |
eb8a0 | 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 67 69 76 65 6e 20 75 73 65 72 6e 61 6d 65 2e 20 54 68 | .password.for.given.username..Th |
eb8c0 | 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 74 72 61 6e 73 66 65 72 72 69 6e 67 20 61 20 | is.is.useful.for.transferring.a. |
eb8e0 | 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 66 72 6f 6d 20 73 79 73 74 65 6d 20 74 6f 20 73 | hashed.password.from.system.to.s |
eb900 | 79 73 74 65 6d 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 | ystem..Setup.the.`<timeout>`.in. |
eb920 | 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 | seconds.when.querying.the.RADIUS |
eb940 | 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 | .server..Setup.the.`<timeout>`.i |
eb960 | 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 65 20 54 41 43 41 | n.seconds.when.querying.the.TACA |
eb980 | 43 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 | CS.server..Setup.the.dynamic.DNS |
eb9a0 | 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 | .hostname.`<hostname>`.associate |
eb9c0 | 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 | d.with.the.DynDNS.provider.ident |
eb9e0 | 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 53 65 74 75 70 | ified.by.`<service-name>`..Setup |
eba00 | 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 | .the.dynamic.DNS.hostname.`<host |
eba20 | 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e | name>`.associated.with.the.DynDN |
eba40 | 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | S.provider.identified.by.`<servi |
eba60 | 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 61 64 64 72 | ce>`.when.the.IP.address.on.addr |
eba80 | 65 73 73 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 74 75 70 | ess.`<interface>`.changes..Setup |
ebaa0 | 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 | .the.dynamic.DNS.hostname.`<host |
ebac0 | 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e | name>`.associated.with.the.DynDN |
ebae0 | 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | S.provider.identified.by.`<servi |
ebb00 | 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 69 6e 74 65 | ce>`.when.the.IP.address.on.inte |
ebb20 | 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 76 | rface.`<interface>`.changes..Sev |
ebb40 | 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 55 52 4c 20 74 6f 20 69 6e | eral.commands.utilize.cURL.to.in |
ebb60 | 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | itiate.transfers..Configure.the. |
ebb80 | 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 75 | local.source.IPv4/IPv6.address.u |
ebba0 | 73 65 64 20 66 6f 72 20 61 6c 6c 20 63 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 | sed.for.all.cURL.operations..Sev |
ebbc0 | 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 75 72 6c 20 74 6f 20 69 6e | eral.commands.utilize.curl.to.in |
ebbe0 | 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | itiate.transfers..Configure.the. |
ebc00 | 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 20 | local.source.interface.used.for. |
ebc20 | 61 6c 6c 20 43 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 65 72 69 74 79 00 53 65 | all.CURL.operations..Severity.Se |
ebc40 | 76 65 72 69 74 79 20 4c 65 76 65 6c 00 53 68 61 70 65 72 00 53 68 6f 72 74 20 47 49 20 63 61 70 | verity.Level.Shaper.Short.GI.cap |
ebc60 | 61 62 69 6c 69 74 69 65 73 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 | abilities.Short.GI.capabilities. |
ebc80 | 66 6f 72 20 32 30 20 61 6e 64 20 34 30 20 4d 48 7a 00 53 68 6f 72 74 20 62 75 72 73 74 73 20 63 | for.20.and.40.MHz.Short.bursts.c |
ebca0 | 61 6e 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 65 78 63 65 65 64 20 74 68 65 20 6c 69 6d 69 | an.be.allowed.to.exceed.the.limi |
ebcc0 | 74 2e 20 4f 6e 20 63 72 65 61 74 69 6f 6e 2c 20 74 68 65 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c | t..On.creation,.the.Rate-Control |
ebce0 | 20 74 72 61 66 66 69 63 20 69 73 20 73 74 6f 63 6b 65 64 20 77 69 74 68 20 74 6f 6b 65 6e 73 20 | .traffic.is.stocked.with.tokens. |
ebd00 | 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f | which.correspond.to.the.amount.o |
ebd20 | 66 20 74 72 61 66 66 69 63 20 74 68 61 74 20 63 61 6e 20 62 65 20 62 75 72 73 74 20 69 6e 20 6f | f.traffic.that.can.be.burst.in.o |
ebd40 | 6e 65 20 67 6f 2e 20 54 6f 6b 65 6e 73 20 61 72 72 69 76 65 20 61 74 20 61 20 73 74 65 61 64 79 | ne.go..Tokens.arrive.at.a.steady |
ebd60 | 20 72 61 74 65 2c 20 75 6e 74 69 6c 20 74 68 65 20 62 75 63 6b 65 74 20 69 73 20 66 75 6c 6c 2e | .rate,.until.the.bucket.is.full. |
ebd80 | 00 53 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 66 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 | .Shortcut.syntax.for.specifying. |
ebda0 | 61 75 74 6f 6d 61 74 69 63 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 76 72 66 20 56 52 46 4e 41 | automatic.leaking.from.vrf.VRFNA |
ebdc0 | 4d 45 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 | ME.to.the.current.VRF.using.the. |
ebde0 | 56 50 4e 20 52 49 42 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 72 79 2e 20 54 68 65 20 52 44 20 | VPN.RIB.as.intermediary..The.RD. |
ebe00 | 61 6e 64 20 52 54 20 61 72 65 20 61 75 74 6f 20 64 65 72 69 76 65 64 20 61 6e 64 20 73 68 6f 75 | and.RT.are.auto.derived.and.shou |
ebe20 | 6c 64 20 6e 6f 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 66 | ld.not.be.specified.explicitly.f |
ebe40 | 6f 72 20 65 69 74 68 65 72 20 74 68 65 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 | or.either.the.source.or.destinat |
ebe60 | 69 6f 6e 20 56 52 46 e2 80 99 73 2e 00 53 68 6f 77 00 53 68 6f 77 20 44 48 43 50 20 73 65 72 76 | ion.VRF...s..Show.Show.DHCP.serv |
ebe80 | 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 44 48 43 50 76 36 20 73 | er.daemon.log.file.Show.DHCPv6.s |
ebea0 | 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 46 69 72 65 77 | erver.daemon.log.file.Show.Firew |
ebec0 | 61 6c 6c 20 6c 6f 67 00 53 68 6f 77 20 4c 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 20 63 6f 6e 6e | all.log.Show.LLDP.neighbors.conn |
ebee0 | 65 63 74 65 64 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | ected.via.interface.`<interface> |
ebf00 | 60 2e 00 53 68 6f 77 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c | `..Show.SSH.dynamic-protection.l |
ebf20 | 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 | og..Show.SSH.server.log..Show.SS |
ebf40 | 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 | H.server.public.key.fingerprints |
ebf60 | 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 20 76 69 73 75 61 6c 20 41 53 43 49 49 20 61 72 74 20 72 | ,.including.a.visual.ASCII.art.r |
ebf80 | 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 | epresentation..Show.SSH.server.p |
ebfa0 | 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 53 68 6f 77 20 57 41 4e | ublic.key.fingerprints..Show.WAN |
ebfc0 | 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 63 6c 75 | .load.balancer.information.inclu |
ebfe0 | 64 69 6e 67 20 74 65 73 74 20 74 79 70 65 73 20 61 6e 64 20 74 61 72 67 65 74 73 2e 20 41 20 63 | ding.test.types.and.targets..A.c |
ec000 | 68 61 72 61 63 74 65 72 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 65 61 63 68 20 6c 69 | haracter.at.the.start.of.each.li |
ec020 | 6e 65 20 64 65 70 69 63 74 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 74 65 73 74 | ne.depicts.the.state.of.the.test |
ec040 | 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 45 49 2e 00 53 68 6f 77 20 57 57 41 | .Show.WWAN.module.IMEI..Show.WWA |
ec060 | 4e 20 6d 6f 64 75 6c 65 20 49 4d 53 49 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 | N.module.IMSI..Show.WWAN.module. |
ec080 | 4d 53 49 53 44 4e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 53 49 4d 20 63 61 72 | MSISDN..Show.WWAN.module.SIM.car |
ec0a0 | 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 | d.information..Show.WWAN.module. |
ec0c0 | 66 69 72 6d 77 61 72 65 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 | firmware..Show.WWAN.module.hardw |
ec0e0 | 61 72 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 | are.capabilities..Show.WWAN.modu |
ec100 | 6c 65 20 68 61 72 64 77 61 72 65 20 72 65 76 69 73 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 | le.hardware.revision..Show.WWAN. |
ec120 | 6d 6f 64 75 6c 65 20 6d 6f 64 65 6c 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 73 | module.model..Show.WWAN.module.s |
ec140 | 69 67 6e 61 6c 20 73 74 72 65 6e 67 74 68 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 61 76 61 69 | ignal.strength..Show.a.list.avai |
ec160 | 6c 61 62 6c 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 73 00 53 68 6f 77 20 61 20 | lable.container.networks.Show.a. |
ec180 | 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 | list.of.installed.:abbr:`CA.(Cer |
ec1a0 | 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 63 65 72 74 69 66 69 63 61 74 65 | tificate.Authority)`.certificate |
ec1c0 | 73 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 | s..Show.a.list.of.installed.:abb |
ec1e0 | 72 3a 60 43 52 4c 73 20 28 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 | r:`CRLs.(Certificate.Revocation. |
ec200 | 4c 69 73 74 29 60 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 | List)`..Show.a.list.of.installed |
ec220 | 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 68 6f 77 20 61 6c 6c 20 42 46 44 20 70 65 65 72 73 | .certificates.Show.all.BFD.peers |
ec240 | 00 53 68 6f 77 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 6f 61 64 69 6e 67 20 66 75 6e 63 74 | .Show.available.offloading.funct |
ec260 | 69 6f 6e 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 | ions.on.given.`<interface>`.Show |
ec280 | 20 62 69 6e 64 65 64 20 71 61 74 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 73 20 74 6f | .binded.qat.device.interrupts.to |
ec2a0 | 20 63 65 72 74 61 69 6e 20 63 6f 72 65 2e 00 53 68 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d | .certain.core..Show.bridge.`<nam |
ec2c0 | 65 3e 60 20 66 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 6f 72 | e>`.fdb.displays.the.current.for |
ec2e0 | 77 61 72 64 69 6e 67 20 74 61 62 6c 65 3a 00 53 68 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d | warding.table:.Show.bridge.`<nam |
ec300 | 65 3e 60 20 6d 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 6d 75 6c | e>`.mdb.displays.the.current.mul |
ec320 | 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 20 74 61 62 6c 65 2e 54 68 | ticast.group.membership.table.Th |
ec340 | 65 20 74 61 62 6c 65 20 69 73 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 47 4d 50 20 61 6e 64 | e.table.is.populated.by.IGMP.and |
ec360 | 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 20 69 6e 20 74 68 65 20 62 72 69 64 67 65 20 64 72 69 76 | .MLD.snooping.in.the.bridge.driv |
ec380 | 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 00 53 68 6f 77 20 62 72 69 65 66 20 69 6e 74 | er.automatically..Show.brief.int |
ec3a0 | 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6d 6d 61 6e 64 | erface.information..Show.command |
ec3c0 | 73 00 53 68 6f 77 20 63 6f 6e 66 69 67 75 72 65 64 20 73 65 72 69 61 6c 20 70 6f 72 74 73 20 61 | s.Show.configured.serial.ports.a |
ec3e0 | 6e 64 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f | nd.their.respective.interface.co |
ec400 | 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 61 74 | nfiguration..Show.connection.dat |
ec420 | 61 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 69 63 3a 00 53 68 6f 77 | a.of.load.balanced.traffic:.Show |
ec440 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 65 78 74 65 72 6e 61 6c 20 63 61 63 | .connection.syncing.external.cac |
ec460 | 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 | he.entries.Show.connection.synci |
ec480 | 6e 67 20 69 6e 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 | ng.internal.cache.entries.Show.c |
ec4a0 | 75 72 72 65 6e 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2e 00 53 68 6f 77 20 64 | urrently.connected.users..Show.d |
ec4c0 | 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6c 65 | etailed.information.about.all.le |
ec4e0 | 61 72 6e 65 64 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4e 6f 64 65 73 00 53 68 6f 77 | arned.Segment.Routing.Nodes.Show |
ec500 | 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 70 72 65 66 | .detailed.information.about.pref |
ec520 | 69 78 2d 73 69 64 20 61 6e 64 20 6c 61 62 65 6c 20 6c 65 61 72 6e 65 64 00 53 68 6f 77 20 64 65 | ix-sid.and.label.learned.Show.de |
ec540 | 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 6e 64 | tailed.information.about.the.und |
ec560 | 65 72 6c 61 79 69 6e 67 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 20 6f 6e 20 67 69 76 65 6e | erlaying.physical.links.on.given |
ec580 | 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c | .bond.`<interface>`..Show.detail |
ec5a0 | 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 | ed.information.on.given.`<interf |
ec5c0 | 61 63 65 3e 60 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | ace>`.Show.detailed.information. |
ec5e0 | 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 | on.the.given.loopback.interface. |
ec600 | 60 6c 6f 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | `lo`..Show.detailed.information. |
ec620 | 73 75 6d 6d 61 72 79 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 | summary.on.given.`<interface>`.S |
ec640 | 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | how.flow.accounting.information. |
ec660 | 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 6f 72 20 61 20 73 70 | for.given.`<interface>`.for.a.sp |
ec680 | 65 63 69 66 69 63 20 68 6f 73 74 20 6f 6e 6c 79 2e 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f | ecific.host.only..Show.flow.acco |
ec6a0 | 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 | unting.information.for.given.`<i |
ec6c0 | 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 67 65 6e 65 72 61 6c 20 69 6e 66 6f 72 6d 61 | nterface>`..Show.general.informa |
ec6e0 | 74 69 6f 6e 20 61 62 6f 75 74 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e | tion.about.specific.WireGuard.in |
ec700 | 74 65 72 66 61 63 65 00 53 68 6f 77 20 69 6e 66 6f 20 61 62 6f 75 74 20 74 68 65 20 57 69 72 65 | terface.Show.info.about.the.Wire |
ec720 | 67 75 61 72 64 20 73 65 72 76 69 63 65 2e 20 49 74 20 61 6c 73 6f 20 73 68 6f 77 73 20 74 68 65 | guard.service..It.also.shows.the |
ec740 | 20 6c 61 74 65 73 74 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 68 6f 77 20 69 6e 66 6f 72 6d 61 74 | .latest.handshake..Show.informat |
ec760 | 69 6f 6e 20 61 62 6f 75 74 20 70 68 79 73 69 63 61 6c 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | ion.about.physical.`<interface>` |
ec780 | 00 53 68 6f 77 20 6c 69 73 74 20 6f 66 20 49 50 73 20 63 75 72 72 65 6e 74 6c 79 20 62 6c 6f 63 | .Show.list.of.IPs.currently.bloc |
ec7a0 | 6b 65 64 20 62 79 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 53 | ked.by.SSH.dynamic-protection..S |
ec7c0 | 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 | how.logs.for.mDNS.repeater.servi |
ec7e0 | 63 65 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 | ce..Show.logs.from.a.given.conta |
ec800 | 69 6e 65 72 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 44 48 43 50 20 63 6c 69 | iner.Show.logs.from.all.DHCP.cli |
ec820 | 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c | ent.processes..Show.logs.from.al |
ec840 | 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 | l.DHCPv6.client.processes..Show. |
ec860 | 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 | logs.from.specific.`interface`.D |
ec880 | 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 | HCP.client.process..Show.logs.fr |
ec8a0 | 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 48 43 50 76 36 20 63 | om.specific.`interface`.DHCPv6.c |
ec8c0 | 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 | lient.process..Show.only.informa |
ec8e0 | 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 43 65 72 74 69 66 69 63 61 74 65 20 41 | tion.for.specified.Certificate.A |
ec900 | 75 74 68 6f 72 69 74 79 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | uthority..Show.only.information. |
ec920 | 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 53 68 6f 77 20 | for.specified.certificate..Show. |
ec940 | 6f 6e 6c 79 20 6c 65 61 73 65 73 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f | only.leases.in.the.specified.poo |
ec960 | 6c 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 | l..Show.only.leases.with.the.spe |
ec980 | 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 | cified.state..Possible.states:.a |
ec9a0 | 62 61 6e 64 6f 6e 65 64 2c 20 61 63 74 69 76 65 2c 20 61 6c 6c 2c 20 62 61 63 6b 75 70 2c 20 65 | bandoned,.active,.all,.backup,.e |
ec9c0 | 78 70 69 72 65 64 2c 20 66 72 65 65 2c 20 72 65 6c 65 61 73 65 64 2c 20 72 65 73 65 74 20 28 64 | xpired,.free,.released,.reset.(d |
ec9e0 | 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 | efault.=.active).Show.only.lease |
eca00 | 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 | s.with.the.specified.state..Poss |
eca20 | 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 6c 6c 2c 20 61 63 74 69 76 65 2c 20 66 72 65 65 2c 20 | ible.states:.all,.active,.free,. |
eca40 | 65 78 70 69 72 65 64 2c 20 72 65 6c 65 61 73 65 64 2c 20 61 62 61 6e 64 6f 6e 65 64 2c 20 72 65 | expired,.released,.abandoned,.re |
eca60 | 73 65 74 2c 20 62 61 63 6b 75 70 20 28 64 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 | set,.backup.(default.=.active).S |
eca80 | 68 6f 77 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 65 6e 74 72 79 20 66 6f 72 20 74 68 65 20 | how.routing.table.entry.for.the. |
ecaa0 | 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 53 68 6f 77 20 73 70 65 63 69 66 69 63 20 4d 41 43 | default.route..Show.specific.MAC |
ecac0 | 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 53 68 6f 77 20 73 | sec.interface.information.Show.s |
ecae0 | 74 61 74 75 73 20 6f 66 20 6e 65 77 20 73 65 74 75 70 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 | tatus.of.new.setup:.Show.statuse |
ecb00 | 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 20 67 72 61 6e 74 65 64 20 62 | s.of.all.active.leases.granted.b |
ecb20 | 79 20 6c 6f 63 61 6c 20 28 74 68 69 73 20 73 65 72 76 65 72 29 20 6f 72 20 72 65 6d 6f 74 65 20 | y.local.(this.server).or.remote. |
ecb40 | 28 66 61 69 6c 6f 76 65 72 20 73 65 72 76 65 72 29 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 | (failover.server):.Show.statuses |
ecb60 | 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 3a 00 53 68 6f 77 20 74 68 65 20 | .of.all.active.leases:.Show.the. |
ecb80 | 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 20 66 6f 72 20 74 68 65 20 73 | DHCP.server.statistics.for.the.s |
ecba0 | 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 | pecified.pool..Show.the.DHCP.ser |
ecbc0 | 76 65 72 20 73 74 61 74 69 73 74 69 63 73 3a 00 53 68 6f 77 20 74 68 65 20 63 6f 6e 73 6f 6c 65 | ver.statistics:.Show.the.console |
ecbe0 | 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 74 68 65 20 66 75 6c 6c 20 63 6f 6e 66 69 | .server.log..Show.the.full.confi |
ecc00 | 67 20 75 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 20 51 41 54 20 64 65 76 69 63 65 2e 00 53 68 | g.uploaded.to.the.QAT.device..Sh |
ecc20 | 6f 77 20 74 68 65 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 63 6f 6e 74 61 69 | ow.the.list.of.all.active.contai |
ecc40 | 6e 65 72 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 63 61 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 | ners..Show.the.local.container.i |
ecc60 | 6d 61 67 65 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 20 73 70 65 63 69 66 | mages..Show.the.logs.of.a.specif |
ecc80 | 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c | ic.Rule-Set..Show.the.logs.of.al |
ecca0 | 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 62 72 69 64 67 65 20 66 69 72 65 | l.firewall;.show.all.bridge.fire |
eccc0 | 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 | wall.logs;.show.all.logs.for.for |
ecce0 | 77 61 72 64 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 | ward.hook;.show.all.logs.for.for |
ecd00 | 77 61 72 64 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 20 66 69 6c 74 65 72 3b 20 73 | ward.hook.and.priority.filter;.s |
ecd20 | 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 | how.all.logs.for.particular.cust |
ecd40 | 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 | om.chain;.show.logs.for.specific |
ecd60 | 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 | .Rule-Set..Show.the.logs.of.all. |
ecd80 | 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 34 20 66 69 72 65 77 61 6c 6c | firewall;.show.all.ipv4.firewall |
ecda0 | 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 | .logs;.show.all.logs.for.particu |
ecdc0 | 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 | lar.hook;.show.all.logs.for.part |
ecde0 | 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 | icular.hook.and.priority;.show.a |
ece00 | 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 | ll.logs.for.particular.custom.ch |
ece20 | 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 | ain;.show.logs.for.specific.Rule |
ece40 | 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 | -Set..Show.the.logs.of.all.firew |
ece60 | 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 36 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 | all;.show.all.ipv6.firewall.logs |
ece80 | 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 | ;.show.all.logs.for.particular.h |
ecea0 | 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 | ook;.show.all.logs.for.particula |
ecec0 | 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f | r.hook.and.priority;.show.all.lo |
ecee0 | 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 | gs.for.particular.custom.chain;. |
ecf00 | 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e | show.logs.for.specific.Rule-Set. |
ecf20 | 00 53 68 6f 77 20 74 68 65 20 72 6f 75 74 65 00 53 68 6f 77 20 74 72 61 6e 73 63 65 69 76 65 72 | .Show.the.route.Show.transceiver |
ecf40 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 70 6c 75 67 69 6e 20 6d 6f 64 75 6c 65 73 | .information.from.plugin.modules |
ecf60 | 2c 20 65 2e 67 20 53 46 50 2b 2c 20 51 53 46 50 00 53 68 6f 77 69 6e 67 20 42 46 44 20 6d 6f 6e | ,.e.g.SFP+,.QSFP.Showing.BFD.mon |
ecf80 | 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 00 53 68 6f 77 73 20 73 74 61 74 75 | itored.static.routes.Shows.statu |
ecfa0 | 73 20 6f 66 20 61 6c 6c 20 61 73 73 69 67 6e 65 64 20 6c 65 61 73 65 73 3a 00 53 69 64 65 20 41 | s.of.all.assigned.leases:.Side.A |
ecfc0 | 3a 00 53 69 64 65 20 42 3a 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 | :.Side.B:.Sierra.Wireless.AirPri |
ecfe0 | 6d 65 20 4d 43 37 33 30 34 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 | me.MC7304.miniPCIe.card.(LTE).Si |
ed000 | 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 33 30 20 6d 69 | erra.Wireless.AirPrime.MC7430.mi |
ed020 | 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 | niPCIe.card.(LTE).Sierra.Wireles |
ed040 | 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 35 35 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 | s.AirPrime.MC7455.miniPCIe.card. |
ed060 | 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d | (LTE).Sierra.Wireless.AirPrime.M |
ed080 | 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 6d 69 6c 61 | C7710.miniPCIe.card.(LTE).Simila |
ed0a0 | 72 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 20 61 72 65 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f | r.combinations.are.applicable.fo |
ed0c0 | 72 20 74 68 65 20 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 2e 00 53 69 6d 70 6c | r.the.dead-peer-detection..Simpl |
ed0e0 | 65 20 42 61 62 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f | e.Babel.configuration.using.2.no |
ed100 | 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 | des.and.redistributing.connected |
ed120 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 20 52 49 50 20 63 6f 6e 66 69 67 75 72 | .interfaces..Simple.RIP.configur |
ed140 | 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 | ation.using.2.nodes.and.redistri |
ed160 | 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d | buting.connected.interfaces..Sim |
ed180 | 70 6c 65 20 73 65 74 75 70 20 77 69 74 68 20 6f 6e 65 20 75 73 65 72 20 61 64 64 65 64 20 61 6e | ple.setup.with.one.user.added.an |
ed1a0 | 64 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3a 00 53 69 6d 70 6c | d.password.authentication:.Simpl |
ed1c0 | 65 20 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 | e.text.password.authentication.i |
ed1e0 | 73 20 69 6e 73 65 63 75 72 65 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 20 69 6e 20 66 61 76 | s.insecure.and.deprecated.in.fav |
ed200 | 6f 75 72 20 6f 66 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 | our.of.MD5.HMAC.authentication.. |
ed220 | 53 69 6e 63 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 | Since.both.routers.do.not.know.t |
ed240 | 68 65 69 72 20 65 66 66 65 63 74 69 76 65 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 2c | heir.effective.public.addresses, |
ed260 | 20 77 65 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 | .we.set.the.local-address.of.the |
ed280 | 20 70 65 65 72 20 74 6f 20 22 61 6e 79 22 2e 00 53 69 6e 63 65 20 69 74 27 73 20 61 20 48 51 20 | .peer.to."any"..Since.it's.a.HQ. |
ed2a0 | 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 20 73 65 74 75 70 2c 20 77 65 20 77 69 6c | and.branch.offices.setup,.we.wil |
ed2c0 | 6c 20 77 61 6e 74 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 74 6f 20 68 61 76 65 20 66 69 78 65 64 | l.want.all.clients.to.have.fixed |
ed2e0 | 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 77 65 20 77 69 6c 6c 20 72 6f 75 74 65 20 74 72 61 | .addresses.and.we.will.route.tra |
ed300 | 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 73 75 62 6e 65 74 73 20 74 68 72 6f 75 67 68 | ffic.to.specific.subnets.through |
ed320 | 20 74 68 65 6d 2e 20 57 65 20 6e 65 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 | .them..We.need.configuration.for |
ed340 | 20 65 61 63 68 20 63 6c 69 65 6e 74 20 74 6f 20 61 63 68 69 65 76 65 20 74 68 69 73 2e 00 53 69 | .each.client.to.achieve.this..Si |
ed360 | 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 | nce.the.RADIUS.server.would.be.a |
ed380 | 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 | .single.point.of.failure,.multip |
ed3a0 | 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 | le.RADIUS.servers.can.be.setup.a |
ed3c0 | 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e | nd.will.be.used.subsequentially. |
ed3e0 | 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 | .Since.the.RADIUS.server.would.b |
ed400 | 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c | e.a.single.point.of.failure,.mul |
ed420 | 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 | tiple.RADIUS.servers.can.be.setu |
ed440 | 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c | p.and.will.be.used.subsequential |
ed460 | 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 | ly..For.example:.Since.the.mDNS. |
ed480 | 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 3a 61 62 62 72 3a 60 41 41 28 41 75 74 | protocol.sends.the.:abbr:`AA(Aut |
ed4a0 | 68 6f 72 69 74 61 74 69 76 65 20 41 6e 73 77 65 72 29 60 20 72 65 63 6f 72 64 73 20 69 6e 20 74 | horitative.Answer)`.records.in.t |
ed4c0 | 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 65 72 20 64 | he.packet.itself,.the.repeater.d |
ed4e0 | 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 65 | oes.not.need.to.forge.the.source |
ed500 | 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | .address..Instead,.the.source.ad |
ed520 | 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 72 | dress.is.of.the.interface.that.r |
ed540 | 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e | epeats.the.packet..Since.the.mDN |
ed560 | 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 41 41 20 72 65 63 6f 72 64 73 20 | S.protocol.sends.the.AA.records. |
ed580 | 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 | in.the.packet.itself,.the.repeat |
ed5a0 | 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f | er.does.not.need.to.forge.the.so |
ed5c0 | 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 | urce.address..Instead,.the.sourc |
ed5e0 | 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 | e.address.is.of.the.interface.th |
ed600 | 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 20 77 65 20 | at.repeats.the.packet..Since.we. |
ed620 | 61 72 65 20 61 6e 61 6c 79 7a 69 6e 67 20 61 74 74 61 63 6b 73 20 74 6f 20 61 6e 64 20 66 72 6f | are.analyzing.attacks.to.and.fro |
ed640 | 6d 20 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 77 6f 20 74 79 70 65 | m.our.internal.network,.two.type |
ed660 | 73 20 6f 66 20 61 74 74 61 63 6b 73 20 63 61 6e 20 62 65 20 69 64 65 6e 74 69 66 69 65 64 2c 20 | s.of.attacks.can.be.identified,. |
ed680 | 61 6e 64 20 64 69 66 66 65 72 65 6e 74 73 20 61 63 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 | and.differents.actions.are.neede |
ed6a0 | 64 3a 00 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 28 53 56 44 29 00 53 69 74 | d:.Single.VXLAN.device.(SVD).Sit |
ed6c0 | 65 20 74 6f 20 53 69 74 65 20 56 50 4e 00 53 69 74 65 2d 74 6f 2d 53 69 74 65 00 53 69 74 65 2d | e.to.Site.VPN.Site-to-Site.Site- |
ed6e0 | 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 61 20 77 61 79 20 74 6f 20 61 | to-site.mode.provides.a.way.to.a |
ed700 | 64 64 20 72 65 6d 6f 74 65 20 70 65 65 72 73 2c 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 | dd.remote.peers,.which.could.be. |
ed720 | 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 65 78 63 68 61 6e 67 65 20 65 6e 63 72 79 70 74 65 64 | configured.to.exchange.encrypted |
ed740 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 61 6e 64 20 56 79 | .information.between.them.and.Vy |
ed760 | 4f 53 20 69 74 73 65 6c 66 20 6f 72 20 63 6f 6e 6e 65 63 74 65 64 2f 72 6f 75 74 65 64 20 6e 65 | OS.itself.or.connected/routed.ne |
ed780 | 74 77 6f 72 6b 73 2e 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 73 75 70 70 6f 72 | tworks..Site-to-site.mode.suppor |
ed7a0 | 74 73 20 78 2e 35 30 39 20 62 75 74 20 64 6f 65 73 6e 27 74 20 72 65 71 75 69 72 65 20 69 74 20 | ts.x.509.but.doesn't.require.it. |
ed7c0 | 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 77 6f 72 6b 20 77 69 74 68 20 73 74 61 74 69 63 20 6b 65 | and.can.also.work.with.static.ke |
ed7e0 | 79 73 2c 20 77 68 69 63 68 20 69 73 20 73 69 6d 70 6c 65 72 20 69 6e 20 6d 61 6e 79 20 63 61 73 | ys,.which.is.simpler.in.many.cas |
ed800 | 65 73 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 27 6c 6c 20 63 6f 6e 66 69 | es..In.this.example,.we'll.confi |
ed820 | 67 75 72 65 20 61 20 73 69 6d 70 6c 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 | gure.a.simple.site-to-site.OpenV |
ed840 | 50 4e 20 74 75 6e 6e 65 6c 20 75 73 69 6e 67 20 61 20 32 30 34 38 2d 62 69 74 20 70 72 65 2d 73 | PN.tunnel.using.a.2048-bit.pre-s |
ed860 | 68 61 72 65 64 20 6b 65 79 2e 00 53 69 7a 65 20 6f 66 20 74 68 65 20 52 53 41 20 6b 65 79 2e 00 | hared.key..Size.of.the.RSA.key.. |
ed880 | 53 6c 61 76 65 20 73 65 6c 65 63 74 69 6f 6e 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 | Slave.selection.for.outgoing.tra |
ed8a0 | 66 66 69 63 20 69 73 20 64 6f 6e 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 74 72 | ffic.is.done.according.to.the.tr |
ed8c0 | 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 6d 61 79 20 62 65 | ansmit.hash.policy,.which.may.be |
ed8e0 | 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 69 6d 70 6c 65 | .changed.from.the.default.simple |
ed900 | 20 58 4f 52 20 70 6f 6c 69 63 79 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 | .XOR.policy.via.the.:cfgcmd:`has |
ed920 | 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c | h-policy`.option,.documented.bel |
ed940 | 6f 77 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2c 20 77 | ow..So.in.our.firewall.policy,.w |
ed960 | 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 63 6f 6d 69 6e 67 20 69 | e.want.to.allow.traffic.coming.i |
ed980 | 6e 20 6f 6e 20 74 68 65 20 6f 75 74 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 64 65 73 74 | n.on.the.outside.interface,.dest |
ed9a0 | 69 6e 65 64 20 66 6f 72 20 54 43 50 20 70 6f 72 74 20 38 30 20 61 6e 64 20 74 68 65 20 49 50 20 | ined.for.TCP.port.80.and.the.IP. |
ed9c0 | 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 53 6f 20 69 6e 20 | address.of.192.168.0.100..So.in. |
ed9e0 | 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 77 65 20 77 61 6e 74 20 74 6f | our.firewall.ruleset,.we.want.to |
eda00 | 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 77 68 69 63 68 20 70 72 65 76 69 6f 75 73 6c 79 20 | .allow.traffic.which.previously. |
eda20 | 6d 61 74 63 68 65 64 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2e 20 | matched.a.destination.nat.rule.. |
eda40 | 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 76 6f 69 64 20 63 72 65 61 74 69 6e 67 20 6d 61 6e 79 20 | In.order.to.avoid.creating.many. |
eda60 | 72 75 6c 65 73 2c 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | rules,.one.for.each.destination. |
eda80 | 6e 61 74 20 72 75 6c 65 2c 20 77 65 20 63 61 6e 20 61 63 63 65 70 74 20 61 6c 6c 20 2a 2a 27 64 | nat.rule,.we.can.accept.all.**'d |
edaa0 | 6e 61 74 27 2a 2a 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 74 68 20 6f 6e 65 20 73 69 6d 70 | nat'**.connections.with.one.simp |
edac0 | 6c 65 20 72 75 6c 65 2c 20 75 73 69 6e 67 20 60 60 63 6f 6e 6e 65 63 74 69 6f 6e 2d 73 74 61 74 | le.rule,.using.``connection-stat |
edae0 | 75 73 60 60 20 6d 61 74 63 68 65 72 3a 00 53 6f 2c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 | us``.matcher:.So,.firewall.confi |
edb00 | 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 66 6f 72 20 74 68 69 73 20 73 65 74 75 70 3a 00 | guration.needed.for.this.setup:. |
edb20 | 53 6f 6c 61 72 57 69 6e 64 73 00 53 6f 6d 65 20 49 53 50 73 20 62 79 20 64 65 66 61 75 6c 74 20 | SolarWinds.Some.ISPs.by.default. |
edb40 | 6f 6e 6c 79 20 64 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 2e 20 54 6f 20 72 | only.delegate.a./64.prefix..To.r |
edb60 | 65 71 75 65 73 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 70 72 65 66 69 78 20 73 69 7a | equest.for.a.specific.prefix.siz |
edb80 | 65 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 72 65 71 75 65 73 74 20 66 6f 72 | e.use.this.option.to.request.for |
edba0 | 20 61 20 62 69 67 67 65 72 20 64 65 6c 65 67 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 64 | .a.bigger.delegation.for.this.pd |
edbc0 | 20 60 3c 69 64 3e 60 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 69 6e 20 74 68 65 20 72 61 | .`<id>`..This.value.is.in.the.ra |
edbe0 | 6e 67 65 20 66 72 6f 6d 20 33 32 20 2d 20 36 34 20 73 6f 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 | nge.from.32.-.64.so.you.could.re |
edc00 | 71 75 65 73 74 20 75 70 20 74 6f 20 61 20 2f 33 32 20 70 72 65 66 69 78 20 28 69 66 20 79 6f 75 | quest.up.to.a./32.prefix.(if.you |
edc20 | 72 20 49 53 50 20 61 6c 6c 6f 77 73 20 74 68 69 73 29 20 64 6f 77 6e 20 74 6f 20 61 20 2f 36 34 | r.ISP.allows.this).down.to.a./64 |
edc40 | 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 53 6f 6d 65 20 49 54 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | .delegation..Some.IT.environment |
edc60 | 73 20 72 65 71 75 69 72 65 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 70 72 6f 78 79 20 74 6f 20 | s.require.the.use.of.a.proxy.to. |
edc80 | 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 20 57 69 74 68 6f 75 74 | connect.to.the.Internet..Without |
edca0 | 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 56 79 4f 53 20 75 70 64 61 74 65 73 | .this.configuration.VyOS.updates |
edcc0 | 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 72 65 63 74 6c 79 | .could.not.be.installed.directly |
edce0 | 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 61 64 64 20 73 79 73 74 65 6d | .by.using.the.:opcmd:`add.system |
edd00 | 20 69 6d 61 67 65 60 20 63 6f 6d 6d 61 6e 64 20 28 3a 72 65 66 3a 60 75 70 64 61 74 65 5f 76 79 | .image`.command.(:ref:`update_vy |
edd20 | 6f 73 60 29 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 | os`)..Some.RADIUS.severs.use.an. |
edd40 | 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 | access.control.list.which.allows |
edd60 | 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f | .or.denies.queries,.make.sure.to |
edd80 | 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c | .add.your.VyOS.router.to.the.all |
edda0 | 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 5f 20 73 | owed.client.list..Some.RADIUS_.s |
eddc0 | 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 | evers.use.an.access.control.list |
edde0 | 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c | .which.allows.or.denies.queries, |
ede00 | 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 | .make.sure.to.add.your.VyOS.rout |
ede20 | 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 | er.to.the.allowed.client.list..S |
ede40 | 6f 6d 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 | ome.application.service.provider |
ede60 | 73 20 28 41 53 50 73 29 20 6f 70 65 72 61 74 65 20 61 20 56 50 4e 20 67 61 74 65 77 61 79 20 74 | s.(ASPs).operate.a.VPN.gateway.t |
ede80 | 6f 20 70 72 6f 76 69 64 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 69 72 20 69 6e 74 65 72 6e | o.provide.access.to.their.intern |
edea0 | 61 6c 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 72 65 71 75 69 72 65 20 74 68 61 74 20 61 | al.resources,.and.require.that.a |
edec0 | 20 63 6f 6e 6e 65 63 74 69 6e 67 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 74 72 61 6e 73 6c 61 | .connecting.organisation.transla |
edee0 | 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 | te.all.traffic.to.the.service.pr |
edf00 | 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 | ovider.network.to.a.source.addre |
edf20 | 73 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 41 53 50 2e 00 53 6f 6d 65 20 63 6f 6e | ss.provided.by.the.ASP..Some.con |
edf40 | 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 69 65 73 20 72 65 71 75 69 72 65 20 63 72 65 64 65 6e | tainer.registries.require.creden |
edf60 | 74 69 61 6c 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 | tials.to.be.used..Some.firewall. |
edf80 | 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 | settings.are.global.and.have.an. |
edfa0 | 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 65 6d 2e 00 53 6f 6d 65 | affect.on.the.whole.system..Some |
edfc0 | 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e | .firewall.settings.are.global.an |
edfe0 | 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 | d.have.an.affect.on.the.whole.sy |
ee000 | 73 74 65 6d 2e 20 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 | stem..In.this.section.there's.us |
ee020 | 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 73 65 20 67 6c 6f | eful.information.about.these.glo |
ee040 | 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 | bal-options.that.can.be.configur |
ee060 | 65 64 20 75 73 69 6e 67 20 76 79 6f 73 20 63 6c 69 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 | ed.using.vyos.cli..Some.policies |
ee080 | 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 65 20 6f 74 68 65 72 20 65 6d 62 65 64 64 65 64 20 | .already.include.other.embedded. |
ee0a0 | 70 6f 6c 69 63 69 65 73 20 69 6e 73 69 64 65 2e 20 54 68 61 74 20 69 73 20 74 68 65 20 63 61 73 | policies.inside..That.is.the.cas |
ee0c0 | 65 20 6f 66 20 53 68 61 70 65 72 5f 3a 20 65 61 63 68 20 6f 66 20 69 74 73 20 63 6c 61 73 73 65 | e.of.Shaper_:.each.of.its.classe |
ee0e0 | 73 20 75 73 65 20 66 61 69 72 2d 71 75 65 75 65 20 75 6e 6c 65 73 73 20 79 6f 75 20 63 68 61 6e | s.use.fair-queue.unless.you.chan |
ee100 | 67 65 20 69 74 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e 20 62 65 20 63 6f 6d 62 | ge.it..Some.policies.can.be.comb |
ee120 | 69 6e 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 65 6d 62 65 64 5f | ined,.you.will.be.able.to.embed_ |
ee140 | 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 77 69 6c 6c 20 62 65 | .a.different.policy.that.will.be |
ee160 | 20 61 70 70 6c 69 65 64 20 74 6f 20 61 20 63 6c 61 73 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 | .applied.to.a.class.of.the.main. |
ee180 | 70 6f 6c 69 63 79 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 | policy..Some.proxys.require/supp |
ee1a0 | 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 | ort.the."basic".HTTP.authenticat |
ee1c0 | 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 | ion.scheme.as.per.:rfc:`7617`,.t |
ee1e0 | 68 75 73 20 61 20 70 61 73 73 77 6f 72 64 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | hus.a.password.can.be.configured |
ee200 | 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 | ..Some.proxys.require/support.th |
ee220 | 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 | e."basic".HTTP.authentication.sc |
ee240 | 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 | heme.as.per.:rfc:`7617`,.thus.a. |
ee260 | 75 73 65 72 6e 61 6d 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 | username.can.be.configured..Some |
ee280 | 20 72 65 63 65 6e 74 20 49 53 50 73 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 62 75 69 6c | .recent.ISPs.require.you.to.buil |
ee2a0 | 64 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 | d.the.PPPoE.connection.through.a |
ee2c0 | 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 4f 6e 65 20 6f 66 20 74 68 6f 73 65 20 49 53 | .VLAN.interface..One.of.those.IS |
ee2e0 | 50 73 20 69 73 20 65 2e 67 2e 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 69 6e 20 47 | Ps.is.e.g..Deutsche.Telekom.in.G |
ee300 | 65 72 6d 61 6e 79 2e 20 56 79 4f 53 20 63 61 6e 20 65 61 73 69 6c 79 20 63 72 65 61 74 65 20 61 | ermany..VyOS.can.easily.create.a |
ee320 | 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 6e 20 65 6e 63 61 70 73 | .PPPoE.session.through.an.encaps |
ee340 | 75 6c 61 74 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 66 6f 6c 6c 6f | ulated.VLAN.interface..The.follo |
ee360 | 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 72 75 6e 20 79 6f 75 72 | wing.configuration.will.run.your |
ee380 | 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 56 4c 41 4e 37 20 | .PPPoE.connection.through.VLAN7. |
ee3a0 | 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 4e 20 66 6f 72 20 44 65 | which.is.the.default.VLAN.for.De |
ee3c0 | 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 3a 00 53 6f 6d 65 20 73 65 72 76 69 63 65 73 20 64 6f | utsche.Telekom:.Some.services.do |
ee3e0 | 6e 27 74 20 77 6f 72 6b 20 63 6f 72 72 65 63 74 6c 79 20 77 68 65 6e 20 62 65 69 6e 67 20 68 61 | n't.work.correctly.when.being.ha |
ee400 | 6e 64 6c 65 64 20 76 69 61 20 61 20 77 65 62 20 70 72 6f 78 79 2e 20 53 6f 20 73 6f 6d 65 74 69 | ndled.via.a.web.proxy..So.someti |
ee420 | 6d 65 73 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 62 79 70 61 73 73 20 61 20 74 72 61 | mes.it.is.useful.to.bypass.a.tra |
ee440 | 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 53 6f 6d 65 20 75 73 65 72 73 20 74 65 6e 64 20 | nsparent.proxy:.Some.users.tend. |
ee460 | 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 69 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 | to.connect.their.mobile.devices. |
ee480 | 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 20 74 6f 20 74 68 65 69 72 20 56 79 4f 53 20 72 6f | using.WireGuard.to.their.VyOS.ro |
ee4a0 | 75 74 65 72 2e 20 54 6f 20 65 61 73 65 20 64 65 70 6c 6f 79 6d 65 6e 74 20 6f 6e 65 20 63 61 6e | uter..To.ease.deployment.one.can |
ee4c0 | 20 67 65 6e 65 72 61 74 65 20 61 20 22 70 65 72 20 6d 6f 62 69 6c 65 22 20 63 6f 6e 66 69 67 75 | .generate.a."per.mobile".configu |
ee4e0 | 72 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 53 6f 6d 65 74 69 | ration.from.the.VyOS.CLI..Someti |
ee500 | 6d 65 73 20 6f 70 74 69 6f 6e 20 6c 69 6e 65 73 20 69 6e 20 74 68 65 20 67 65 6e 65 72 61 74 65 | mes.option.lines.in.the.generate |
ee520 | 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 20 | d.OpenVPN.configuration.require. |
ee540 | 71 75 6f 74 65 73 2e 20 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 68 72 6f 75 67 68 20 61 20 68 | quotes..This.is.done.through.a.h |
ee560 | 61 63 6b 20 6f 6e 20 6f 75 72 20 63 6f 6e 66 69 67 20 67 65 6e 65 72 61 74 6f 72 2e 20 59 6f 75 | ack.on.our.config.generator..You |
ee580 | 20 63 61 6e 20 70 61 73 73 20 71 75 6f 74 65 73 20 75 73 69 6e 67 20 74 68 65 20 60 60 26 71 75 | .can.pass.quotes.using.the.``&qu |
ee5a0 | 6f 74 3b 60 60 20 73 74 61 74 65 6d 65 6e 74 2e 00 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 74 | ot;``.statement..Sort.the.output |
ee5c0 | 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 | .by.the.specified.key..Possible. |
ee5e0 | 6b 65 79 73 3a 20 65 78 70 69 72 65 73 2c 20 69 61 69 64 5f 64 75 69 64 2c 20 69 70 2c 20 6c 61 | keys:.expires,.iaid_duid,.ip,.la |
ee600 | 73 74 5f 63 6f 6d 6d 2c 20 70 6f 6f 6c 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 73 74 61 74 65 2c | st_comm,.pool,.remaining,.state, |
ee620 | 20 74 79 70 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 72 74 20 74 68 65 20 6f 75 | .type.(default.=.ip).Sort.the.ou |
ee640 | 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 | tput.by.the.specified.key..Possi |
ee660 | 62 6c 65 20 6b 65 79 73 3a 20 69 70 2c 20 68 61 72 64 77 61 72 65 5f 61 64 64 72 65 73 73 2c 20 | ble.keys:.ip,.hardware_address,. |
ee680 | 73 74 61 74 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 70 6f | state,.start,.end,.remaining,.po |
ee6a0 | 6f 6c 2c 20 68 6f 73 74 6e 61 6d 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 75 72 | ol,.hostname.(default.=.ip).Sour |
ee6c0 | 63 65 20 41 64 64 72 65 73 73 00 53 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 | ce.Address.Source.IP.address.use |
ee6e0 | 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 | d.for.VXLAN.underlay..This.is.ma |
ee700 | 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 69 61 20 4c 32 56 | ndatory.when.using.VXLAN.via.L2V |
ee720 | 50 4e 2f 45 56 50 4e 2e 00 53 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 75 73 65 | PN/EVPN..Source.IPv4.address.use |
ee740 | 64 20 69 6e 20 61 6c 6c 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 71 75 65 69 72 65 73 2e 00 | d.in.all.RADIUS.server.queires.. |
ee760 | 53 6f 75 72 63 65 20 4e 41 54 20 72 75 6c 65 73 00 53 6f 75 72 63 65 20 50 72 65 66 69 78 00 53 | Source.NAT.rules.Source.Prefix.S |
ee780 | 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 | ource.all.connections.to.the.RAD |
ee7a0 | 49 55 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d | IUS.servers.from.given.VRF.`<nam |
ee7c0 | 65 3e 60 2e 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 | e>`..Source.all.connections.to.t |
ee7e0 | 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 | he.TACACS.servers.from.given.VRF |
ee800 | 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 6d 61 | .`<name>`..Source.protocol.to.ma |
ee820 | 74 63 68 2e 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 64 75 6d 6d 79 20 69 6e | tch..Source.tunnel.from.dummy.in |
ee840 | 74 65 72 66 61 63 65 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 6c 6f 6f 70 62 | terface.Source.tunnel.from.loopb |
ee860 | 61 63 6b 73 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 77 | acks.Spanning.Tree.Protocol.forw |
ee880 | 61 72 64 69 6e 67 20 60 3c 64 65 6c 61 79 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 | arding.`<delay>`.in.seconds.(def |
ee8a0 | 61 75 6c 74 3a 20 31 35 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f | ault:.15)..Spanning.Tree.Protoco |
ee8c0 | 6c 20 68 65 6c 6c 6f 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 60 3c 69 6e 74 65 72 76 61 6c | l.hello.advertisement.`<interval |
ee8e0 | 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 32 29 2e 00 53 70 61 6e | >`.in.seconds.(default:.2)..Span |
ee900 | 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 | ning.Tree.Protocol.is.not.enable |
ee920 | 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 56 79 4f 53 2e 20 3a 72 65 66 3a 60 73 74 70 60 | d.by.default.in.VyOS..:ref:`stp` |
ee940 | 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 65 6e 61 62 6c 65 64 20 69 66 20 6e 65 65 64 65 64 | .can.be.easily.enabled.if.needed |
ee960 | 2e 00 53 70 61 74 69 61 6c 20 4d 75 6c 74 69 70 6c 65 78 69 6e 67 20 50 6f 77 65 72 20 53 61 76 | ..Spatial.Multiplexing.Power.Sav |
ee980 | 65 20 28 53 4d 50 53 29 20 73 65 74 74 69 6e 67 73 00 53 70 65 63 66 79 69 6e 67 20 6e 68 73 20 | e.(SMPS).settings.Specfying.nhs. |
ee9a0 | 6d 61 6b 65 73 20 61 6c 6c 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 74 6f 20 62 | makes.all.multicast.packets.to.b |
ee9c0 | 65 20 72 65 70 65 61 74 65 64 20 74 6f 20 65 61 63 68 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f | e.repeated.to.each.statically.co |
ee9e0 | 6e 66 69 67 75 72 65 64 20 6e 65 78 74 20 68 6f 70 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 | nfigured.next.hop..Specifies.:ab |
eea00 | 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 | br:`MPPE.(Microsoft.Point-to-Poi |
eea20 | 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 | nt.Encryption)`.negotiation.pref |
eea40 | 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d | erence..Specifies.:abbr:`MPPE.(M |
eea60 | 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 | icrosoft.Point-to-Point.Encrypti |
eea80 | 6f 6e 29 60 20 6e 65 67 6f 74 69 6f 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 | on)`.negotioation.preference..Sp |
eeaa0 | 65 63 69 66 69 65 73 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 | ecifies.IP.address.for.Dynamic.A |
eeac0 | 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 | uthorization.Extension.server.(D |
eeae0 | 4d 2f 43 6f 41 29 00 53 70 65 63 69 66 69 65 73 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f | M/CoA).Specifies.IPv4.negotiatio |
eeb00 | 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 49 50 76 36 20 6e 65 67 | n.preference..Specifies.IPv6.neg |
eeb20 | 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 53 | otiation.preference..Specifies.S |
eeb40 | 65 72 76 69 63 65 2d 4e 61 6d 65 20 74 6f 20 72 65 73 70 6f 6e 64 2e 20 49 66 20 61 62 73 65 6e | ervice-Name.to.respond..If.absen |
eeb60 | 74 20 61 6e 79 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 69 73 20 61 63 63 65 70 74 61 62 6c 65 | t.any.Service-Name.is.acceptable |
eeb80 | 20 61 6e 64 20 63 6c 69 65 6e 74 e2 80 99 73 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 77 69 6c | .and.client...s.Service-Name.wil |
eeba0 | 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 2e 20 41 6c 73 6f 20 70 6f 73 73 69 62 6c 65 20 73 65 | l.be.sent.back..Also.possible.se |
eebc0 | 74 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 2d 6e 61 6d 65 73 3a 20 60 73 6e 31 2c 73 | t.multiple.service-names:.`sn1,s |
eebe0 | 6e 32 2c 73 6e 33 60 00 53 70 65 63 69 66 69 65 73 20 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 | n2,sn3`.Specifies.address.to.be. |
eec00 | 75 73 65 64 20 61 73 20 73 65 72 76 65 72 20 69 70 20 61 64 64 72 65 73 73 20 69 66 20 72 61 64 | used.as.server.ip.address.if.rad |
eec20 | 69 75 73 20 63 61 6e 20 61 73 73 69 67 6e 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 20 61 64 64 72 65 | ius.can.assign.only.client.addre |
eec40 | 73 73 2e 20 49 6e 20 73 75 63 68 20 63 61 73 65 20 69 66 20 63 6c 69 65 6e 74 20 61 64 64 72 65 | ss..In.such.case.if.client.addre |
eec60 | 73 73 20 69 73 20 6d 61 74 63 68 65 64 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 6d 61 73 6b 20 74 | ss.is.matched.network.and.mask.t |
eec80 | 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 61 6e 64 20 6d 61 73 6b 20 77 | hen.specified.address.and.mask.w |
eeca0 | 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 6d 75 6c | ill.be.used..You.can.specify.mul |
eecc0 | 74 69 70 6c 65 20 73 75 63 68 20 6f 70 74 69 6f 6e 73 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e | tiple.such.options..Specifies.an |
eece0 | 20 6f 70 74 69 6f 6e 61 6c 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 62 65 20 61 70 70 6c 69 65 | .optional.route-map.to.be.applie |
eed00 | 64 20 74 6f 20 72 6f 75 74 65 73 20 69 6d 70 6f 72 74 65 64 20 6f 72 20 65 78 70 6f 72 74 65 64 | d.to.routes.imported.or.exported |
eed20 | 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 | .between.the.current.unicast.VRF |
eed40 | 20 61 6e 64 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 75 70 73 74 72 65 61 6d 20 | .and.VPN..Specifies.an.upstream. |
eed60 | 6e 65 74 77 6f 72 6b 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 72 6f 6d 20 77 68 69 63 68 | network.`<interface>`.from.which |
eed80 | 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 6f 74 68 | .replies.from.`<server>`.and.oth |
eeda0 | 65 72 20 72 65 6c 61 79 20 61 67 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 61 63 63 65 70 74 65 64 | er.relay.agents.will.be.accepted |
eedc0 | 2e 00 53 70 65 63 69 66 69 65 73 20 66 69 78 65 64 20 6f 72 20 72 61 6e 64 6f 6d 20 69 6e 74 65 | ..Specifies.fixed.or.random.inte |
eede0 | 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 | rface.identifier.for.IPv6..By.de |
eee00 | 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 68 6f 77 20 6c 6f | fault.is.fixed..Specifies.how.lo |
eee20 | 6e 67 20 73 71 75 69 64 20 61 73 73 75 6d 65 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 | ng.squid.assumes.an.externally.v |
eee40 | 61 6c 69 64 61 74 65 64 20 75 73 65 72 6e 61 6d 65 3a 70 61 73 73 77 6f 72 64 20 70 61 69 72 20 | alidated.username:password.pair. |
eee60 | 69 73 20 76 61 6c 69 64 20 66 6f 72 20 2d 20 69 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 20 68 6f | is.valid.for.-.in.other.words.ho |
eee80 | 77 20 6f 66 74 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 70 72 6f 67 72 61 6d 20 69 73 20 63 61 | w.often.the.helper.program.is.ca |
eeea0 | 6c 6c 65 64 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 20 53 65 74 20 74 68 69 73 20 6c 6f 77 | lled.for.that.user..Set.this.low |
eeec0 | 20 74 6f 20 66 6f 72 63 65 20 72 65 76 61 6c 69 64 61 74 69 6f 6e 20 77 69 74 68 20 73 68 6f 72 | .to.force.revalidation.with.shor |
eeee0 | 74 20 6c 69 76 65 64 20 70 61 73 73 77 6f 72 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 69 66 20 | t.lived.passwords..Specifies.if. |
eef00 | 75 6e 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 | unknown.source.link.layer.addres |
eef20 | 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 65 6e 74 65 72 65 64 | ses.and.IP.addresses.are.entered |
eef40 | 20 69 6e 74 6f 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 66 6f 72 77 61 72 64 69 6e | .into.the.VXLAN.device.forwardin |
eef60 | 67 20 64 61 74 61 62 61 73 65 2e 00 53 70 65 63 69 66 69 65 73 20 6e 75 6d 62 65 72 20 6f 66 20 | g.database..Specifies.number.of. |
eef80 | 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 63 61 63 68 65 2e 20 49 74 20 | interfaces.to.keep.in.cache..It. |
eefa0 | 6d 65 61 6e 73 20 74 68 61 74 20 64 6f 6e e2 80 99 74 20 64 65 73 74 72 6f 79 20 69 6e 74 65 72 | means.that.don...t.destroy.inter |
eefc0 | 66 61 63 65 20 61 66 74 65 72 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 65 73 73 69 6f 6e | face.after.corresponding.session |
eefe0 | 20 69 73 20 64 65 73 74 72 6f 79 65 64 2c 20 69 6e 73 74 65 61 64 20 70 6c 61 63 65 20 69 74 20 | .is.destroyed,.instead.place.it. |
ef000 | 74 6f 20 63 61 63 68 65 20 61 6e 64 20 75 73 65 20 69 74 20 6c 61 74 65 72 20 66 6f 72 20 6e 65 | to.cache.and.use.it.later.for.ne |
ef020 | 77 20 73 65 73 73 69 6f 6e 73 20 72 65 70 65 61 74 65 64 6c 79 2e 20 54 68 69 73 20 73 68 6f 75 | w.sessions.repeatedly..This.shou |
ef040 | 6c 64 20 72 65 64 75 63 65 20 6b 65 72 6e 65 6c 2d 6c 65 76 65 6c 20 69 6e 74 65 72 66 61 63 65 | ld.reduce.kernel-level.interface |
ef060 | 20 63 72 65 61 74 69 6f 6e 2f 64 65 6c 65 74 69 6f 6e 20 72 61 74 65 20 6c 61 63 6b 2e 20 44 65 | .creation/deletion.rate.lack..De |
ef080 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 | fault.value.is.**0**..Specifies. |
ef0a0 | 6f 6e 65 20 6f 66 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 | one.of.the.bonding.policies..The |
ef0c0 | 20 64 65 66 61 75 6c 74 20 69 73 20 38 30 32 2e 33 61 64 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 | .default.is.802.3ad..Possible.va |
ef0e0 | 6c 75 65 73 20 61 72 65 3a 00 53 70 65 63 69 66 69 65 73 20 70 65 65 72 20 69 6e 74 65 72 66 61 | lues.are:.Specifies.peer.interfa |
ef100 | 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 | ce.identifier.for.IPv6..By.defau |
ef120 | 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 70 72 6f 78 79 20 73 65 72 | lt.is.fixed..Specifies.proxy.ser |
ef140 | 76 69 63 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 6c 69 73 74 | vice.listening.address..The.list |
ef160 | 65 6e 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 | en.address.is.the.IP.address.on. |
ef180 | 77 68 69 63 68 20 74 68 65 20 77 65 62 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 | which.the.web.proxy.service.list |
ef1a0 | 65 6e 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 2e 00 53 70 65 63 69 66 69 | ens.for.client.requests..Specifi |
ef1c0 | 65 73 20 72 65 6c 61 79 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 00 53 70 65 63 69 66 69 65 | es.relay.agent.IP.addre.Specifie |
ef1e0 | 73 20 73 69 6e 67 6c 65 20 60 3c 67 61 74 65 77 61 79 3e 60 20 49 50 20 61 64 64 72 65 73 73 20 | s.single.`<gateway>`.IP.address. |
ef200 | 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 66 20 50 | to.be.used.as.local.address.of.P |
ef220 | 50 50 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 | PP.interfaces..Specifies.that.th |
ef240 | 65 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c | e.:abbr:`NBMA.(Non-broadcast.mul |
ef260 | 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 73 73 65 73 | tiple-access.network)`.addresses |
ef280 | 20 6f 66 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 73 20 61 72 65 20 64 65 66 | .of.the.next.hop.servers.are.def |
ef2a0 | 69 6e 65 64 20 69 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 6e 62 6d 61 2d 64 6f 6d | ined.in.the.domain.name.nbma-dom |
ef2c0 | 61 69 6e 2d 6e 61 6d 65 2e 20 46 6f 72 20 65 61 63 68 20 41 20 72 65 63 6f 72 64 20 6f 70 65 6e | ain-name..For.each.A.record.open |
ef2e0 | 6e 68 72 70 20 63 72 65 61 74 65 73 20 61 20 64 79 6e 61 6d 69 63 20 4e 48 53 20 65 6e 74 72 79 | nhrp.creates.a.dynamic.NHS.entry |
ef300 | 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 41 52 50 20 6c 69 6e 6b 20 6d 6f 6e 69 74 6f 72 | ..Specifies.the.ARP.link.monitor |
ef320 | 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 | ing.`<time>`.in.seconds..Specifi |
ef340 | 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 41 52 | es.the.IP.addresses.to.use.as.AR |
ef360 | 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 70 65 65 72 73 20 77 68 65 6e 20 3a 63 66 67 63 6d 64 3a | P.monitoring.peers.when.:cfgcmd: |
ef380 | 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 69 6e 74 65 72 76 61 6c 60 20 6f 70 74 69 6f 6e 20 69 73 | `arp-monitor.interval`.option.is |
ef3a0 | 20 3e 20 30 2e 20 54 68 65 73 65 20 61 72 65 20 74 68 65 20 74 61 72 67 65 74 73 20 6f 66 20 74 | .>.0..These.are.the.targets.of.t |
ef3c0 | 68 65 20 41 52 50 20 72 65 71 75 65 73 74 20 73 65 6e 74 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 | he.ARP.request.sent.to.determine |
ef3e0 | 20 74 68 65 20 68 65 61 6c 74 68 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 74 | .the.health.of.the.link.to.the.t |
ef400 | 61 72 67 65 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 | argets..Specifies.the.available. |
ef420 | 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 73 73 61 67 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 | :abbr:`MAC.(Message.Authenticati |
ef440 | 6f 6e 20 43 6f 64 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 54 68 65 20 4d 41 43 20 61 6c | on.Code)`.algorithms..The.MAC.al |
ef460 | 67 6f 72 69 74 68 6d 20 69 73 20 75 73 65 64 20 69 6e 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 | gorithm.is.used.in.protocol.vers |
ef480 | 69 6f 6e 20 32 20 66 6f 72 20 64 61 74 61 20 69 6e 74 65 67 72 69 74 79 20 70 72 6f 74 65 63 74 | ion.2.for.data.integrity.protect |
ef4a0 | 69 6f 6e 2e 20 4d 75 6c 74 69 70 6c 65 20 61 6c 67 6f 72 69 74 68 6d 73 20 63 61 6e 20 62 65 20 | ion..Multiple.algorithms.can.be. |
ef4c0 | 70 72 6f 76 69 64 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 44 4e 20 | provided..Specifies.the.base.DN. |
ef4e0 | 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 | under.which.the.users.are.locate |
ef500 | 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 75 62 6e 65 74 20 | d..Specifies.the.clients.subnet. |
ef520 | 6d 61 73 6b 20 61 73 20 70 65 72 20 52 46 43 20 39 35 30 2e 20 49 66 20 75 6e 73 65 74 2c 20 73 | mask.as.per.RFC.950..If.unset,.s |
ef540 | 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2e 00 53 70 65 63 69 | ubnet.declaration.is.used..Speci |
ef560 | 66 69 65 73 20 74 68 65 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 66 6f 72 20 4e 48 52 50 20 52 | fies.the.holding.time.for.NHRP.R |
ef580 | 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 61 6e 64 20 52 65 73 6f 6c 75 74 | egistration.Requests.and.Resolut |
ef5a0 | 69 6f 6e 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 66 72 6f 6d 20 74 68 69 73 20 69 6e 74 65 72 | ion.Replies.sent.from.this.inter |
ef5c0 | 66 61 63 65 20 6f 72 20 73 68 6f 72 74 63 75 74 2d 74 61 72 67 65 74 2e 20 54 68 65 20 68 6f 6c | face.or.shortcut-target..The.hol |
ef5e0 | 64 74 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 20 61 6e | dtime.is.specified.in.seconds.an |
ef600 | 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 74 77 6f 20 68 6f 75 72 73 2e 00 53 70 65 63 69 66 69 | d.defaults.to.two.hours..Specifi |
ef620 | 65 73 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 61 74 20 77 68 69 63 68 20 4e 65 74 66 6c 6f 77 | es.the.interval.at.which.Netflow |
ef640 | 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f | .data.will.be.sent.to.a.collecto |
ef660 | 72 2e 20 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 2c 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 | r..As.per.default,.Netflow.data. |
ef680 | 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 53 | will.be.sent.every.60.seconds..S |
ef6a0 | 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 61 20 72 | pecifies.the.maximum.size.of.a.r |
ef6c0 | 65 70 6c 79 20 62 6f 64 79 20 69 6e 20 4b 42 2c 20 75 73 65 64 20 74 6f 20 6c 69 6d 69 74 20 74 | eply.body.in.KB,.used.to.limit.t |
ef6e0 | 68 65 20 72 65 70 6c 79 20 73 69 7a 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e | he.reply.size..Specifies.the.min |
ef700 | 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 6b 73 20 74 68 61 74 20 6d 75 73 74 20 62 | imum.number.of.links.that.must.b |
ef720 | 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 61 73 73 65 72 74 69 6e 67 20 63 61 72 72 69 65 | e.active.before.asserting.carrie |
ef740 | 72 2e 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 43 69 73 63 6f 20 45 74 | r..It.is.similar.to.the.Cisco.Et |
ef760 | 68 65 72 43 68 61 6e 6e 65 6c 20 6d 69 6e 2d 6c 69 6e 6b 73 20 66 65 61 74 75 72 65 2e 20 54 68 | herChannel.min-links.feature..Th |
ef780 | 69 73 20 61 6c 6c 6f 77 73 20 73 65 74 74 69 6e 67 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 | is.allows.setting.the.minimum.nu |
ef7a0 | 6d 62 65 72 20 6f 66 20 6d 65 6d 62 65 72 20 70 6f 72 74 73 20 74 68 61 74 20 6d 75 73 74 20 62 | mber.of.member.ports.that.must.b |
ef7c0 | 65 20 75 70 20 28 6c 69 6e 6b 2d 75 70 20 73 74 61 74 65 29 20 62 65 66 6f 72 65 20 6d 61 72 6b | e.up.(link-up.state).before.mark |
ef7e0 | 69 6e 67 20 74 68 65 20 62 6f 6e 64 20 64 65 76 69 63 65 20 61 73 20 75 70 20 28 63 61 72 72 69 | ing.the.bond.device.as.up.(carri |
ef800 | 65 72 20 6f 6e 29 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 73 69 74 75 61 | er.on)..This.is.useful.for.situa |
ef820 | 74 69 6f 6e 73 20 77 68 65 72 65 20 68 69 67 68 65 72 20 6c 65 76 65 6c 20 73 65 72 76 69 63 65 | tions.where.higher.level.service |
ef840 | 73 20 73 75 63 68 20 61 73 20 63 6c 75 73 74 65 72 69 6e 67 20 77 61 6e 74 20 74 6f 20 65 6e 73 | s.such.as.clustering.want.to.ens |
ef860 | 75 72 65 20 61 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 6f 77 20 62 61 6e 64 | ure.a.minimum.number.of.low.band |
ef880 | 77 69 64 74 68 20 6c 69 6e 6b 73 20 61 72 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 73 77 | width.links.are.active.before.sw |
ef8a0 | 69 74 63 68 6f 76 65 72 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 | itchover..Specifies.the.name.of. |
ef8c0 | 74 68 65 20 44 4e 20 61 74 74 72 69 62 75 74 65 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 | the.DN.attribute.that.contains.t |
ef8e0 | 68 65 20 75 73 65 72 6e 61 6d 65 2f 6c 6f 67 69 6e 2e 20 43 6f 6d 62 69 6e 65 64 20 77 69 74 68 | he.username/login..Combined.with |
ef900 | 20 74 68 65 20 62 61 73 65 20 44 4e 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 74 68 65 20 75 73 | .the.base.DN.to.construct.the.us |
ef920 | 65 72 73 20 44 4e 20 77 68 65 6e 20 6e 6f 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 69 73 20 | ers.DN.when.no.search.filter.is. |
ef940 | 73 70 65 63 69 66 69 65 64 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e | specified.(`filter-expression`). |
ef960 | 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 60 3c 65 74 68 58 3e 60 | .Specifies.the.physical.`<ethX>` |
ef980 | 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 | .Ethernet.interface.associated.w |
ef9a0 | 69 74 68 20 61 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 20 60 3c 69 6e 74 65 72 66 61 63 | ith.a.Pseudo.Ethernet.`<interfac |
ef9c0 | 65 3e 60 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 | e>`..Specifies.the.port.`<port>` |
ef9e0 | 20 74 68 61 74 20 74 68 65 20 53 53 54 50 20 70 6f 72 74 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 | .that.the.SSTP.port.will.listen. |
efa00 | 6f 6e 20 28 64 65 66 61 75 6c 74 20 34 34 33 29 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | on.(default.443)..Specifies.the. |
efa20 | 70 72 6f 74 65 63 74 69 6f 6e 20 73 63 6f 70 65 20 28 61 6b 61 20 72 65 61 6c 6d 20 6e 61 6d 65 | protection.scope.(aka.realm.name |
efa40 | 29 20 77 68 69 63 68 20 69 73 20 74 6f 20 62 65 20 72 65 70 6f 72 74 65 64 20 74 6f 20 74 68 65 | ).which.is.to.be.reported.to.the |
efa60 | 20 63 6c 69 65 6e 74 20 66 6f 72 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 | .client.for.the.authentication.s |
efa80 | 63 68 65 6d 65 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 70 61 72 74 20 6f 66 20 74 68 | cheme..It.is.commonly.part.of.th |
efaa0 | 65 20 74 65 78 74 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 73 65 65 20 77 68 65 6e 20 70 72 | e.text.the.user.will.see.when.pr |
efac0 | 6f 6d 70 74 65 64 20 66 6f 72 20 74 68 65 69 72 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 | ompted.for.their.username.and.pa |
efae0 | 73 73 77 6f 72 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 20 64 69 73 74 | ssword..Specifies.the.route.dist |
efb00 | 69 6e 67 75 69 73 68 65 72 20 74 6f 20 62 65 20 61 64 64 65 64 20 74 6f 20 61 20 72 6f 75 74 65 | inguisher.to.be.added.to.a.route |
efb20 | 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 | .exported.from.the.current.unica |
efb40 | 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 | st.VRF.to.VPN..Specifies.the.rou |
efb60 | 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f | te-target.list.to.be.attached.to |
efb80 | 20 61 20 72 6f 75 74 65 20 28 65 78 70 6f 72 74 29 20 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 74 | .a.route.(export).or.the.route-t |
efba0 | 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 28 69 6d 70 | arget.list.to.match.against.(imp |
efbc0 | 6f 72 74 29 20 77 68 65 6e 20 65 78 70 6f 72 74 69 6e 67 2f 69 6d 70 6f 72 74 69 6e 67 20 62 65 | ort).when.exporting/importing.be |
efbe0 | 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e | tween.the.current.unicast.VRF.an |
efc00 | 64 20 56 50 4e 2e 54 68 65 20 52 54 4c 49 53 54 20 69 73 20 61 20 73 70 61 63 65 2d 73 65 70 61 | d.VPN.The.RTLIST.is.a.space-sepa |
efc20 | 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 72 6f 75 74 65 2d 74 61 72 67 65 74 73 2c 20 77 68 69 | rated.list.of.route-targets,.whi |
efc40 | 63 68 20 61 72 65 20 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 76 61 | ch.are.BGP.extended.community.va |
efc60 | 6c 75 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 45 78 74 65 6e 64 65 64 20 43 6f | lues.as.described.in.Extended.Co |
efc80 | 6d 6d 75 6e 69 74 69 65 73 20 41 74 74 72 69 62 75 74 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 | mmunities.Attribute..Specifies.t |
efca0 | 68 65 20 76 65 6e 64 6f 72 20 64 69 63 74 69 6f 6e 61 72 79 2c 20 64 69 63 74 69 6f 6e 61 72 79 | he.vendor.dictionary,.dictionary |
efcc0 | 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 6e 20 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c | .needs.to.be.in./usr/share/accel |
efce0 | 2d 70 70 70 2f 72 61 64 69 75 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 6f 75 74 20 69 | -ppp/radius..Specifies.timeout.i |
efd00 | 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 65 65 72 20 61 | n.seconds.to.wait.for.any.peer.a |
efd20 | 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 | ctivity..If.this.option.specifie |
efd40 | 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 65 63 68 6f 20 | d.it.turns.on.adaptive.lcp.echo. |
efd60 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c | functionality.and."lcp-echo-fail |
efd80 | 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 | ure".is.not.used..Specifies.time |
efda0 | 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 | out.in.seconds.to.wait.for.any.p |
efdc0 | 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 | eer.activity..If.this.option.spe |
efde0 | 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 | cified.it.turns.on.adaptive.lcp. |
efe00 | 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f | echo.functionality.and."lcp-echo |
efe20 | 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 44 65 66 61 75 6c 74 20 76 | -failure".is.not.used..Default.v |
efe40 | 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 | alue.is.**0**..Specifies.whether |
efe60 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 28 65 2e 67 2e | .an.external.control.plane.(e.g. |
efe80 | 20 42 47 50 20 4c 32 56 50 4e 2f 45 56 50 4e 29 20 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c | .BGP.L2VPN/EVPN).or.the.internal |
efea0 | 20 46 44 42 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 77 | .FDB.should.be.used..Specifies.w |
efec0 | 68 65 74 68 65 72 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 69 73 20 63 61 70 61 62 | hether.the.VXLAN.device.is.capab |
efee0 | 6c 65 20 6f 66 20 76 6e 69 20 66 69 6c 74 65 72 69 6e 67 2e 00 53 70 65 63 69 66 69 65 73 20 77 | le.of.vni.filtering..Specifies.w |
eff00 | 68 65 74 68 65 72 20 74 68 69 73 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 74 65 72 20 77 | hether.this.NSSA.border.router.w |
eff20 | 69 6c 6c 20 75 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 20 74 72 61 6e 73 6c 61 74 65 20 54 79 | ill.unconditionally.translate.Ty |
eff40 | 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 20 57 68 65 6e | pe-7.LSAs.into.Type-5.LSAs..When |
eff60 | 20 72 6f 6c 65 20 69 73 20 41 6c 77 61 79 73 2c 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 | .role.is.Always,.Type-7.LSAs.are |
eff80 | 20 74 72 61 6e 73 6c 61 74 65 64 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 20 72 65 67 | .translated.into.Type-5.LSAs.reg |
effa0 | 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 20 73 74 61 74 65 20 | ardless.of.the.translator.state. |
effc0 | 6f 66 20 6f 74 68 65 72 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 74 65 72 73 2e 20 57 68 | of.other.NSSA.border.routers..Wh |
effe0 | 65 6e 20 72 6f 6c 65 20 69 73 20 43 61 6e 64 69 64 61 74 65 2c 20 74 68 69 73 20 72 6f 75 74 65 | en.role.is.Candidate,.this.route |
f0000 | 72 20 70 61 72 74 69 63 69 70 61 74 65 73 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 | r.participates.in.the.translator |
f0020 | 20 65 6c 65 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 69 74 20 77 69 6c | .election.to.determine.if.it.wil |
f0040 | 6c 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 64 75 74 69 65 | l.perform.the.translations.dutie |
f0060 | 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 4e 65 76 65 72 2c 20 74 68 69 73 20 72 6f 75 74 | s..When.role.is.Never,.this.rout |
f0080 | 65 72 20 77 69 6c 6c 20 6e 65 76 65 72 20 74 72 61 6e 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c | er.will.never.translate.Type-7.L |
f00a0 | 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 00 53 70 65 63 69 66 69 65 73 20 | SAs.into.Type-5.LSAs..Specifies. |
f00c0 | 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f | which.RADIUS.server.attribute.co |
f00e0 | 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f | ntains.the.rate.limit.informatio |
f0100 | 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 46 69 6c | n..The.default.attribute.is.`Fil |
f0120 | 74 65 72 2d 49 64 60 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 | ter-Id`..Specifies.which.RADIUS. |
f0140 | 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 | server.attribute.contains.the.ra |
f0160 | 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c | te.limit.information..The.defaul |
f0180 | 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 2e 00 53 70 | t.attribute.is.``Filter-Id``..Sp |
f01a0 | 65 63 69 66 79 20 44 48 43 50 76 34 20 72 65 6c 61 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f | ecify.DHCPv4.relay.IP.address.to |
f01c0 | 20 70 61 73 73 20 72 65 71 75 65 73 74 73 20 74 6f 2e 20 49 66 20 73 70 65 63 69 66 69 65 64 20 | .pass.requests.to..If.specified. |
f01e0 | 67 69 61 64 64 72 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 | giaddr.is.also.needed..Specify.I |
f0200 | 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 68 61 74 20 73 68 | Pv4.and/or.IPv6.networks.that.sh |
f0220 | 6f 75 6c 64 20 62 65 20 70 72 6f 74 65 63 74 65 64 2f 6d 6f 6e 69 74 6f 72 65 64 2e 00 53 70 65 | ould.be.protected/monitored..Spe |
f0240 | 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 77 | cify.IPv4.and/or.IPv6.networks.w |
f0260 | 68 69 63 68 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 65 78 63 6c 75 64 65 64 2e 00 53 | hich.are.going.to.be.excluded..S |
f0280 | 70 65 63 69 66 79 20 49 50 76 34 2f 49 50 76 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 | pecify.IPv4/IPv6.listen.address. |
f02a0 | 6f 66 20 53 53 48 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 | of.SSH.server..Multiple.addresse |
f02c0 | 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 53 70 65 63 69 66 79 20 61 20 3a 61 62 62 | s.can.be.defined..Specify.a.:abb |
f02e0 | 72 3a 60 53 49 50 20 28 53 65 73 73 69 6f 6e 20 49 6e 69 74 69 61 74 69 6f 6e 20 50 72 6f 74 6f | r:`SIP.(Session.Initiation.Proto |
f0300 | 63 6f 6c 29 60 20 73 65 72 76 65 72 20 62 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 | col)`.server.by.IPv6.address.of. |
f0320 | 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 20 66 6f 72 20 | Fully.Qualified.Domain.Name.for. |
f0340 | 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 46 75 | all.DHCPv6.clients..Specify.a.Fu |
f0360 | 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 20 61 73 20 73 6f 75 | lly.Qualified.Domain.Name.as.sou |
f0380 | 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 45 6e 73 75 72 65 20 | rce/destination.matcher..Ensure. |
f03a0 | 72 6f 75 74 65 72 20 69 73 20 61 62 6c 65 20 74 6f 20 72 65 73 6f 6c 76 65 20 73 75 63 68 20 64 | router.is.able.to.resolve.such.d |
f03c0 | 6e 73 20 71 75 65 72 79 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 20 73 65 72 76 65 72 20 61 | ns.query..Specify.a.NIS.server.a |
f03e0 | 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 | ddress.for.DHCPv6.clients..Speci |
f0400 | 66 79 20 61 20 4e 49 53 2b 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 | fy.a.NIS+.server.address.for.DHC |
f0420 | 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 72 61 6e 67 65 20 6f 66 20 | Pv6.clients..Specify.a.range.of. |
f0440 | 67 72 6f 75 70 20 61 64 64 72 65 73 73 65 73 20 76 69 61 20 61 20 70 72 65 66 69 78 2d 6c 69 73 | group.addresses.via.a.prefix-lis |
f0460 | 74 20 74 68 61 74 20 66 6f 72 63 65 73 20 50 49 4d 20 74 6f 20 6e 65 76 65 72 20 64 6f 20 3a 61 | t.that.forces.PIM.to.never.do.:a |
f0480 | 62 62 72 3a 60 53 53 4d 20 28 53 6f 75 72 63 65 2d 53 70 65 63 69 66 69 63 20 4d 75 6c 74 69 63 | bbr:`SSM.(Source-Specific.Multic |
f04a0 | 61 73 74 29 60 20 6f 76 65 72 2e 00 53 70 65 63 69 66 79 20 61 62 73 6f 6c 75 74 65 20 60 3c 70 | ast)`.over..Specify.absolute.`<p |
f04c0 | 61 74 68 3e 60 20 74 6f 20 73 63 72 69 70 74 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 | ath>`.to.script.which.will.be.ru |
f04e0 | 6e 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 69 73 20 65 78 65 63 75 74 65 64 2e 00 53 70 65 | n.when.`<task>`.is.executed..Spe |
f0500 | 63 69 66 79 20 61 6c 6c 6f 77 65 64 20 3a 61 62 62 72 3a 60 4b 45 58 20 28 4b 65 79 20 45 78 63 | cify.allowed.:abbr:`KEX.(Key.Exc |
f0520 | 68 61 6e 67 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 | hange)`.algorithms..Specify.an.a |
f0540 | 6c 74 65 72 6e 61 74 65 20 41 53 20 66 6f 72 20 74 68 69 73 20 42 47 50 20 70 72 6f 63 65 73 73 | lternate.AS.for.this.BGP.process |
f0560 | 20 77 68 65 6e 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 | .when.interacting.with.the.speci |
f0580 | 66 69 65 64 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 6e 6f | fied.peer.or.peer.group..With.no |
f05a0 | 20 6d 6f 64 69 66 69 65 72 73 2c 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 2d | .modifiers,.the.specified.local- |
f05c0 | 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 76 65 64 20 | as.is.prepended.to.the.received. |
f05e0 | 41 53 5f 50 41 54 48 20 77 68 65 6e 20 72 65 63 65 69 76 69 6e 67 20 72 6f 75 74 69 6e 67 20 75 | AS_PATH.when.receiving.routing.u |
f0600 | 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 61 6e 64 20 70 72 65 70 65 6e | pdates.from.the.peer,.and.prepen |
f0620 | 64 65 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 41 53 5f 50 41 54 48 20 28 61 66 74 | ded.to.the.outgoing.AS_PATH.(aft |
f0640 | 65 72 20 74 68 65 20 70 72 6f 63 65 73 73 20 6c 6f 63 61 6c 20 41 53 29 20 77 68 65 6e 20 74 72 | er.the.process.local.AS).when.tr |
f0660 | 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 | ansmitting.local.routes.to.the.p |
f0680 | 65 65 72 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 65 20 54 43 50 20 70 6f | eer..Specify.an.alternate.TCP.po |
f06a0 | 72 74 20 77 68 65 72 65 20 74 68 65 20 6c 64 61 70 20 73 65 72 76 65 72 20 69 73 20 6c 69 73 74 | rt.where.the.ldap.server.is.list |
f06c0 | 65 6e 69 6e 67 20 69 66 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 | ening.if.other.than.the.default. |
f06e0 | 4c 44 41 50 20 70 6f 72 74 20 33 38 39 2e 00 53 70 65 63 69 66 79 20 69 6e 74 65 72 76 61 6c 20 | LDAP.port.389..Specify.interval. |
f0700 | 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 62 65 74 77 65 65 6e 20 44 79 6e 61 6d | in.seconds.to.wait.between.Dynam |
f0720 | 69 63 20 44 4e 53 20 75 70 64 61 74 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 20 | ic.DNS.updates..The.default.is.. |
f0740 | 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 6c 6f 63 61 6c 20 72 61 6e 67 65 | 300.seconds..Specify.local.range |
f0760 | 20 6f 66 20 69 70 20 61 64 64 72 65 73 73 20 74 6f 20 67 69 76 65 20 74 6f 20 64 68 63 70 20 63 | .of.ip.address.to.give.to.dhcp.c |
f0780 | 6c 69 65 6e 74 73 2e 20 46 69 72 73 74 20 49 50 20 69 6e 20 72 61 6e 67 65 20 69 73 20 72 6f 75 | lients..First.IP.in.range.is.rou |
f07a0 | 74 65 72 20 49 50 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 6f 72 65 20 63 75 73 74 6f 6d 69 | ter.IP..If.you.need.more.customi |
f07c0 | 7a 61 74 69 6f 6e 20 75 73 65 20 60 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f 6c 60 00 53 70 65 63 | zation.use.`client-ip-pool`.Spec |
f07e0 | 69 66 79 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 | ify.name.of.the.:abbr:`VRF.(Virt |
f0800 | 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 69 6e 73 | ual.Routing.and.Forwarding)`.ins |
f0820 | 74 61 6e 63 65 2e 00 53 70 65 63 69 66 79 20 6e 65 78 74 68 6f 70 20 6f 6e 20 74 68 65 20 70 61 | tance..Specify.nexthop.on.the.pa |
f0840 | 74 68 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 60 60 69 70 76 34 2d 61 64 | th.to.the.destination,.``ipv4-ad |
f0860 | 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 60 60 64 68 63 70 60 60 00 53 | dress``.can.be.set.to.``dhcp``.S |
f0880 | 70 65 63 69 66 79 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 | pecify.static.route.into.the.rou |
f08a0 | 74 69 6e 67 20 74 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6c 6c 20 6e 6f 6e 20 6c 6f 63 61 6c | ting.table.sending.all.non.local |
f08c0 | 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 | .traffic.to.the.nexthop.address. |
f08e0 | 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 20 60 3c 61 64 | `<address>`..Specify.the.IP.`<ad |
f0900 | 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 | dress>`.of.the.RADIUS.server.use |
f0920 | 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 67 69 76 | r.with.the.pre-shared-secret.giv |
f0940 | 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 | en.in.`<secret>`..Specify.the.IP |
f0960 | 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 | .`<address>`.of.the.TACACS.serve |
f0980 | 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 | r.user.with.the.pre-shared-secre |
f09a0 | 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 | t.given.in.`<secret>`..Specify.t |
f09c0 | 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 6f 20 75 73 65 20 66 6f | he.IPv4.source.address.to.use.fo |
f09e0 | 72 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 69 73 20 6e 65 69 67 68 62 | r.the.BGP.session.to.this.neighb |
f0a00 | 6f 72 2c 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 65 69 74 68 65 72 20 61 | or,.may.be.specified.as.either.a |
f0a20 | 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 6f 72 20 61 73 20 61 6e | n.IPv4.address.directly.or.as.an |
f0a40 | 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 4c 44 41 | .interface.name..Specify.the.LDA |
f0a60 | 50 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 00 53 70 65 63 69 66 79 20 | P.server.to.connect.to..Specify. |
f0a80 | 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 73 69 74 65 | the.identifier.value.of.the.site |
f0aa0 | 2d 6c 65 76 65 6c 20 61 67 67 72 65 67 61 74 6f 72 20 28 53 4c 41 29 20 6f 6e 20 74 68 65 20 69 | -level.aggregator.(SLA).on.the.i |
f0ac0 | 6e 74 65 72 66 61 63 65 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 6e | nterface..ID.must.be.a.decimal.n |
f0ae0 | 75 6d 62 65 72 20 67 72 65 61 74 65 72 20 74 68 65 6e 20 30 20 77 68 69 63 68 20 66 69 74 73 20 | umber.greater.then.0.which.fits. |
f0b00 | 69 6e 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 53 4c 41 20 49 44 73 20 28 73 65 65 20 62 65 | in.the.length.of.SLA.IDs.(see.be |
f0b20 | 6c 6f 77 29 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 | low)..Specify.the.interface.addr |
f0b40 | 65 73 73 20 75 73 65 64 20 6c 6f 63 61 6c 6c 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 | ess.used.locally.on.the.interfac |
f0b60 | 65 20 77 68 65 72 65 20 74 68 65 20 70 72 65 66 69 78 20 68 61 73 20 62 65 65 6e 20 64 65 6c 65 | e.where.the.prefix.has.been.dele |
f0b80 | 67 61 74 65 64 20 74 6f 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 69 | gated.to..ID.must.be.a.decimal.i |
f0ba0 | 6e 74 65 67 65 72 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 65 71 75 | nteger..Specify.the.minimum.requ |
f0bc0 | 69 72 65 64 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 31 2e 32 20 6f 72 20 31 2e 33 00 53 70 65 63 | ired.TLS.version.1.2.or.1.3.Spec |
f0be0 | 69 66 79 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 75 73 65 72 20 | ify.the.plaintext.password.user. |
f0c00 | 62 79 20 75 73 65 72 20 60 3c 6e 61 6d 65 3e 60 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e | by.user.`<name>`.on.this.system. |
f0c20 | 20 54 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 | .The.plaintext.password.will.be. |
f0c40 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 72 61 6e 73 66 65 72 72 65 64 20 69 6e 74 6f 20 61 | automatically.transferred.into.a |
f0c60 | 20 73 65 63 75 72 65 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 6e 6f 74 20 | .secure.hashed.password.and.not. |
f0c80 | 73 61 76 65 64 20 61 6e 79 77 68 65 72 65 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2e 00 53 70 65 | saved.anywhere.in.plaintext..Spe |
f0ca0 | 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 75 73 65 64 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 | cify.the.port.used.on.which.the. |
f0cc0 | 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 73 20 6c 69 73 74 65 6e 69 6e 67 20 66 6f 72 20 72 | proxy.service.is.listening.for.r |
f0ce0 | 65 71 75 65 73 74 73 2e 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 74 68 65 20 64 65 66 61 75 6c | equests..This.port.is.the.defaul |
f0d00 | 74 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 69 | t.port.used.for.the.specified.li |
f0d20 | 73 74 65 6e 2d 61 64 64 72 65 73 73 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 73 79 73 74 65 6d | sten-address..Specify.the.system |
f0d40 | 73 20 60 3c 74 69 6d 65 7a 6f 6e 65 3e 60 20 61 73 20 74 68 65 20 52 65 67 69 6f 6e 2f 4c 6f 63 | s.`<timezone>`.as.the.Region/Loc |
f0d60 | 61 74 69 6f 6e 20 74 68 61 74 20 62 65 73 74 20 64 65 66 69 6e 65 73 20 79 6f 75 72 20 6c 6f 63 | ation.that.best.defines.your.loc |
f0d80 | 61 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 55 | ation..For.example,.specifying.U |
f0da0 | 53 2f 50 61 63 69 66 69 63 20 73 65 74 73 20 74 68 65 20 74 69 6d 65 20 7a 6f 6e 65 20 74 6f 20 | S/Pacific.sets.the.time.zone.to. |
f0dc0 | 55 53 20 50 61 63 69 66 69 63 20 74 69 6d 65 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 74 69 6d | US.Pacific.time..Specify.the.tim |
f0de0 | 65 20 69 6e 74 65 72 76 61 6c 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 73 68 6f 75 6c 64 20 | e.interval.when.`<task>`.should. |
f0e00 | 62 65 20 65 78 65 63 75 74 65 64 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 69 73 20 73 70 65 | be.executed..The.interval.is.spe |
f0e20 | 63 69 66 69 65 64 20 61 73 20 6e 75 6d 62 65 72 20 77 69 74 68 20 6f 6e 65 20 6f 66 20 74 68 65 | cified.as.number.with.one.of.the |
f0e40 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 75 66 66 69 78 65 73 3a 00 53 70 65 63 69 66 79 20 74 69 6d | .following.suffixes:.Specify.tim |
f0e60 | 65 6f 75 74 20 2f 20 75 70 64 61 74 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 63 68 65 63 6b 20 | eout./.update.interval.to.check. |
f0e80 | 69 66 20 49 50 20 61 64 64 72 65 73 73 20 63 68 61 6e 67 65 64 2e 00 53 70 65 63 69 66 79 20 74 | if.IP.address.changed..Specify.t |
f0ea0 | 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 6b 65 65 70 61 6c 69 76 65 20 6d 65 | imeout.interval.for.keepalive.me |
f0ec0 | 73 73 61 67 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 77 68 65 72 65 20 | ssage.in.seconds..Specify.where. |
f0ee0 | 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 68 61 72 65 64 20 62 79 20 6d 75 6c 74 69 70 6c 65 20 | interface.is.shared.by.multiple. |
f0f00 | 75 73 65 72 73 20 6f 72 20 69 74 20 69 73 20 76 6c 61 6e 2d 70 65 72 2d 75 73 65 72 2e 00 53 70 | users.or.it.is.vlan-per-user..Sp |
f0f20 | 69 6e 65 31 20 69 73 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 | ine1.is.a.Cisco.IOS.router.runni |
f0f40 | 6e 67 20 76 65 72 73 69 6f 6e 20 31 35 2e 34 2c 20 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 | ng.version.15.4,.Leaf2.and.Leaf3 |
f0f60 | 20 69 73 20 65 61 63 68 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 31 | .is.each.a.VyOS.router.running.1 |
f0f80 | 2e 32 2e 00 53 70 6c 75 6e 6b 00 53 70 6f 6b 65 00 53 71 75 69 64 5f 20 69 73 20 61 20 63 61 63 | .2..Splunk.Spoke.Squid_.is.a.cac |
f0fa0 | 68 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 48 54 54 50 20 77 65 62 20 70 72 6f | hing.and.forwarding.HTTP.web.pro |
f0fc0 | 78 79 2e 20 49 74 20 68 61 73 20 61 20 77 69 64 65 20 76 61 72 69 65 74 79 20 6f 66 20 75 73 65 | xy..It.has.a.wide.variety.of.use |
f0fe0 | 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 70 65 65 64 69 6e 67 20 75 70 20 61 20 77 65 62 20 73 | s,.including.speeding.up.a.web.s |
f1000 | 65 72 76 65 72 20 62 79 20 63 61 63 68 69 6e 67 20 72 65 70 65 61 74 65 64 20 72 65 71 75 65 73 | erver.by.caching.repeated.reques |
f1020 | 74 73 2c 20 63 61 63 68 69 6e 67 20 77 65 62 2c 20 44 4e 53 20 61 6e 64 20 6f 74 68 65 72 20 63 | ts,.caching.web,.DNS.and.other.c |
f1040 | 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 61 20 67 72 | omputer.network.lookups.for.a.gr |
f1060 | 6f 75 70 20 6f 66 20 70 65 6f 70 6c 65 20 73 68 61 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 72 65 | oup.of.people.sharing.network.re |
f1080 | 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 61 69 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 62 79 20 | sources,.and.aiding.security.by. |
f10a0 | 66 69 6c 74 65 72 69 6e 67 20 74 72 61 66 66 69 63 2e 20 41 6c 74 68 6f 75 67 68 20 70 72 69 6d | filtering.traffic..Although.prim |
f10c0 | 61 72 69 6c 79 20 75 73 65 64 20 66 6f 72 20 48 54 54 50 20 61 6e 64 20 46 54 50 2c 20 53 71 75 | arily.used.for.HTTP.and.FTP,.Squ |
f10e0 | 69 64 20 69 6e 63 6c 75 64 65 73 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 | id.includes.limited.support.for. |
f1100 | 73 65 76 65 72 61 6c 20 6f 74 68 65 72 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 69 6e | several.other.protocols.includin |
f1120 | 67 20 49 6e 74 65 72 6e 65 74 20 47 6f 70 68 65 72 2c 20 53 53 4c 2c 5b 36 5d 20 54 4c 53 20 61 | g.Internet.Gopher,.SSL,[6].TLS.a |
f1140 | 6e 64 20 48 54 54 50 53 2e 20 53 71 75 69 64 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 | nd.HTTPS..Squid.does.not.support |
f1160 | 20 74 68 65 20 53 4f 43 4b 53 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 74 61 72 74 20 57 65 62 73 65 | .the.SOCKS.protocol..Start.Webse |
f1180 | 72 76 65 72 20 69 6e 20 67 69 76 65 6e 20 20 56 52 46 2e 00 53 74 61 72 74 20 62 79 20 63 68 65 | rver.in.given..VRF..Start.by.che |
f11a0 | 63 6b 69 6e 67 20 66 6f 72 20 49 50 53 65 63 20 53 41 73 20 28 53 65 63 75 72 69 74 79 20 41 73 | cking.for.IPSec.SAs.(Security.As |
f11c0 | 73 6f 63 69 61 74 69 6f 6e 73 29 20 77 69 74 68 3a 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 | sociations).with:.Starting.from. |
f11e0 | 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 | VyOS.1.4-rolling-202308040557,.a |
f1200 | 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 | .new.firewall.structure.can.be.f |
f1220 | 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2c 20 61 | ound.on.all.vyos.instalations,.a |
f1240 | 6e 64 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 69 73 20 6e 6f 20 6c 6f 6e | nd.zone.based.firewall.is.no.lon |
f1260 | 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 | ger.supported..Documentation.for |
f1280 | 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 | .most.of.the.new.firewall.CLI.ca |
f12a0 | 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 | n.be.found.in.the.`firewall.<htt |
f12c0 | 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 | ps://docs.vyos.io/en/latest/conf |
f12e0 | 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e | iguration/firewall/general.html> |
f1300 | 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 | `_.chapter..The.legacy.firewall. |
f1320 | 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 | is.still.available.for.versions. |
f1340 | 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 | before.1.4-rolling-202308040557. |
f1360 | 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 3a 72 65 66 3a 60 66 69 | and.can.be.found.in.the.:ref:`fi |
f1380 | 72 65 77 61 6c 6c 2d 6c 65 67 61 63 79 60 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 65 78 61 6d | rewall-legacy`.chapter..The.exam |
f13a0 | 70 6c 65 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 75 73 65 20 74 68 65 20 6c 65 67 | ples.in.this.section.use.the.leg |
f13c0 | 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 | acy.firewall.configuration.comma |
f13e0 | 6e 64 73 2c 20 73 69 6e 63 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 62 65 65 6e | nds,.since.this.feature.has.been |
f1400 | 20 72 65 6d 6f 76 65 64 20 69 6e 20 65 61 72 6c 69 65 72 20 72 65 6c 65 61 73 65 73 2e 00 53 74 | .removed.in.earlier.releases..St |
f1420 | 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 | arting.from.VyOS.1.4-rolling-202 |
f1440 | 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 | 308040557,.a.new.firewall.struct |
f1460 | 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 | ure.can.be.found.on.all.vyos.ins |
f1480 | 74 61 6c 61 74 69 6f 6e 73 2e 20 5a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 77 | talations..Zone.based.firewall.w |
f14a0 | 61 73 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 61 74 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 | as.removed.in.that.version,.but. |
f14c0 | 72 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 31 2e | re.introduced.in.VyOS.1.4.and.1. |
f14e0 | 35 2e 20 41 6c 6c 20 76 65 72 73 69 6f 6e 73 20 62 75 69 6c 74 20 61 66 74 65 72 20 32 30 32 33 | 5..All.versions.built.after.2023 |
f1500 | 2d 31 30 2d 32 32 20 68 61 73 20 74 68 69 73 20 66 65 61 74 75 72 65 2e 20 44 6f 63 75 6d 65 6e | -10-22.has.this.feature..Documen |
f1520 | 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 | tation.for.most.of.the.new.firew |
f1540 | 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 | all.CLI.can.be.found.in.the.`fir |
f1560 | 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c | ewall.<https://docs.vyos.io/en/l |
f1580 | 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e | atest/configuration/firewall/gen |
f15a0 | 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 | eral.html>`_.chapter..The.legacy |
f15c0 | 20 66 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | .firewall.is.still.available.for |
f15e0 | 20 76 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 | .versions.before.1.4-rolling-202 |
f1600 | 33 30 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 | 308040557.and.can.be.found.in.th |
f1620 | 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 | e.:doc:`legacy.firewall.configur |
f1640 | 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 | ation.</configuration/firewall/g |
f1660 | 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 20 63 68 61 70 74 65 72 2e 00 53 74 61 72 74 69 6e | eneral-legacy>`.chapter..Startin |
f1680 | 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 | g.from.VyOS.1.4-rolling-20230804 |
f16a0 | 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 | 0557,.a.new.firewall.structure.c |
f16c0 | 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 | an.be.found.on.all.vyos.installa |
f16e0 | 74 69 6f 6e 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f | tions..Starting.from.VyOS.1.4-ro |
f1700 | 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 | lling-202308040557,.a.new.firewa |
f1720 | 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c | ll.structure.can.be.found.on.all |
f1740 | 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 | .vyos.installations..Documentati |
f1760 | 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 63 61 6e | on.for.most.new.firewall.cli.can |
f1780 | 20 62 65 20 66 6f 75 6e 64 20 68 65 72 65 3a 00 53 74 61 72 74 69 6e 67 20 6f 66 20 77 69 74 68 | .be.found.here:.Starting.of.with |
f17a0 | 20 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 77 65 20 61 64 64 65 64 20 73 75 | .VyOS.1.3.(equuleus).we.added.su |
f17c0 | 70 70 6f 72 74 20 66 6f 72 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 61 73 20 61 6e 20 4f 75 74 | pport.for.running.VyOS.as.an.Out |
f17e0 | 2d 6f 66 2d 42 61 6e 64 20 4d 61 6e 61 67 65 6d 65 6e 74 20 64 65 76 69 63 65 20 77 68 69 63 68 | -of-Band.Management.device.which |
f1800 | 20 70 72 6f 76 69 64 65 73 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 62 79 20 6d 65 61 6e 73 | .provides.remote.access.by.means |
f1820 | 20 6f 66 20 53 53 48 20 74 6f 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 73 65 72 | .of.SSH.to.directly.attached.ser |
f1840 | 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 74 61 72 74 69 6e 67 20 77 69 74 68 20 56 79 | ial.interfaces..Starting.with.Vy |
f1860 | 4f 53 20 31 2e 32 20 61 20 3a 61 62 62 72 3a 60 6d 44 4e 53 20 28 4d 75 6c 74 69 63 61 73 74 20 | OS.1.2.a.:abbr:`mDNS.(Multicast. |
f1880 | 44 4e 53 29 60 20 72 65 70 65 61 74 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 | DNS)`.repeater.functionality.is. |
f18a0 | 70 72 6f 76 69 64 65 64 2e 20 41 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | provided..Additional.information |
f18c0 | 20 63 61 6e 20 62 65 20 6f 62 74 61 69 6e 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e | .can.be.obtained.from.https://en |
f18e0 | 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4d 75 6c 74 69 63 61 73 74 5f 44 4e | .wikipedia.org/wiki/Multicast_DN |
f1900 | 53 2e 00 53 74 61 74 69 63 00 53 74 61 74 69 63 20 3a 61 62 62 72 3a 60 53 41 4b 20 28 53 65 63 | S..Static.Static.:abbr:`SAK.(Sec |
f1920 | 75 72 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 4b 65 79 29 60 20 6d 6f 64 65 20 63 61 | ure.Authentication.Key)`.mode.ca |
f1940 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 61 6e 75 61 6c 6c 79 20 6f 6e 20 65 61 63 68 | n.be.configured.manually.on.each |
f1960 | 20 64 65 76 69 63 65 20 77 69 73 68 69 6e 67 20 74 6f 20 75 73 65 20 4d 41 43 73 65 63 2e 20 4b | .device.wishing.to.use.MACsec..K |
f1980 | 65 79 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 73 74 61 74 69 63 61 6c 6c 79 20 6f 6e 20 61 6c | eys.must.be.set.statically.on.al |
f19a0 | 6c 20 64 65 76 69 63 65 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 66 6c 6f 77 20 70 72 | l.devices.for.traffic.to.flow.pr |
f19c0 | 6f 70 65 72 6c 79 2e 20 4b 65 79 20 72 6f 74 61 74 69 6f 6e 20 69 73 20 64 65 70 65 6e 64 65 6e | operly..Key.rotation.is.dependen |
f19e0 | 74 20 6f 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 75 70 64 61 74 69 6e 67 20 | t.on.the.administrator.updating. |
f1a00 | 61 6c 6c 20 6b 65 79 73 20 6d 61 6e 75 61 6c 6c 79 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 | all.keys.manually.across.connect |
f1a20 | 65 64 20 64 65 76 69 63 65 73 2e 20 53 74 61 74 69 63 20 53 41 4b 20 6d 6f 64 65 20 63 61 6e 20 | ed.devices..Static.SAK.mode.can. |
f1a40 | 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 4d 4b 41 2e 00 53 74 61 74 69 63 20 44 48 43 | not.be.used.with.MKA..Static.DHC |
f1a60 | 50 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 20 74 6f 20 68 6f 73 74 20 69 64 65 6e | P.IP.address.assign.to.host.iden |
f1a80 | 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 2e 20 49 50 20 61 64 | tified.by.`<description>`..IP.ad |
f1aa0 | 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 60 3c 73 75 62 6e 65 | dress.must.be.inside.the.`<subne |
f1ac0 | 74 3e 60 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 62 75 74 20 63 61 6e 20 62 65 20 | t>`.which.is.defined.but.can.be. |
f1ae0 | 6f 75 74 73 69 64 65 20 74 68 65 20 64 79 6e 61 6d 69 63 20 72 61 6e 67 65 20 63 72 65 61 74 65 | outside.the.dynamic.range.create |
f1b00 | 64 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 64 68 63 70 | d.with.:cfgcmd:`set.service.dhcp |
f1b20 | 2d 73 65 72 76 65 72 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 20 3c 6e 61 6d | -server.shared-network-name.<nam |
f1b40 | 65 3e 20 73 75 62 6e 65 74 20 3c 73 75 62 6e 65 74 3e 20 72 61 6e 67 65 20 3c 6e 3e 60 2e 20 49 | e>.subnet.<subnet>.range.<n>`..I |
f1b60 | 66 20 6e 6f 20 69 70 2d 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e | f.no.ip-address.is.specified,.an |
f1b80 | 20 49 50 20 66 72 6f 6d 20 74 68 65 20 64 79 6e 61 6d 69 63 20 70 6f 6f 6c 20 69 73 20 75 73 65 | .IP.from.the.dynamic.pool.is.use |
f1ba0 | 64 2e 00 53 74 61 74 69 63 20 48 6f 73 74 6e 61 6d 65 20 4d 61 70 70 69 6e 67 00 53 74 61 74 69 | d..Static.Hostname.Mapping.Stati |
f1bc0 | 63 20 4b 65 79 73 00 53 74 61 74 69 63 20 52 6f 75 74 65 73 00 53 74 61 74 69 63 20 52 6f 75 74 | c.Keys.Static.Routes.Static.Rout |
f1be0 | 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f | ing.or.other.dynamic.routing.pro |
f1c00 | 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 76 65 72 20 74 68 65 20 76 74 75 6e | tocols.can.be.used.over.the.vtun |
f1c20 | 20 69 6e 74 65 72 66 61 63 65 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e 67 3a 00 53 74 61 74 69 | .interface.Static.Routing:.Stati |
f1c40 | 63 20 6d 61 70 70 69 6e 67 73 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 61 72 65 6e 27 | c.mappings.Static.mappings.aren' |
f1c60 | 74 20 73 68 6f 77 6e 2e 20 54 6f 20 73 68 6f 77 20 61 6c 6c 20 73 74 61 74 65 73 2c 20 75 73 65 | t.shown..To.show.all.states,.use |
f1c80 | 20 60 60 73 68 6f 77 20 64 68 63 70 20 73 65 72 76 65 72 20 6c 65 61 73 65 73 20 73 74 61 74 65 | .``show.dhcp.server.leases.state |
f1ca0 | 20 61 6c 6c 60 60 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c | .all``..Static.routes.are.manual |
f1cc0 | 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 77 68 69 63 68 2c 20 69 6e 20 | ly.configured.routes,.which,.in. |
f1ce0 | 67 65 6e 65 72 61 6c 2c 20 63 61 6e 6e 6f 74 20 62 65 20 75 70 64 61 74 65 64 20 64 79 6e 61 6d | general,.cannot.be.updated.dynam |
f1d00 | 69 63 61 6c 6c 79 20 66 72 6f 6d 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 56 79 4f 53 20 6c 65 61 | ically.from.information.VyOS.lea |
f1d20 | 72 6e 73 20 61 62 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 66 | rns.about.the.network.topology.f |
f1d40 | 72 6f 6d 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 | rom.other.routing.protocols..How |
f1d60 | 65 76 65 72 2c 20 69 66 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 2c 20 74 68 65 20 72 6f 75 74 65 | ever,.if.a.link.fails,.the.route |
f1d80 | 72 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 72 6f 75 74 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 | r.will.remove.routes,.including. |
f1da0 | 73 74 61 74 69 63 20 72 6f 75 74 65 73 2c 20 66 72 6f 6d 20 74 68 65 20 3a 61 62 62 72 3a 60 52 | static.routes,.from.the.:abbr:`R |
f1dc0 | 49 50 42 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 29 60 20 | IPB.(Routing.Information.Base)`. |
f1de0 | 74 68 61 74 20 75 73 65 64 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 65 61 63 | that.used.this.interface.to.reac |
f1e00 | 68 20 74 68 65 20 6e 65 78 74 20 68 6f 70 2e 20 49 6e 20 67 65 6e 65 72 61 6c 2c 20 73 74 61 74 | h.the.next.hop..In.general,.stat |
f1e20 | 69 63 20 72 6f 75 74 65 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 66 6f | ic.routes.should.only.be.used.fo |
f1e40 | 72 20 76 65 72 79 20 73 69 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 | r.very.simple.network.topologies |
f1e60 | 2c 20 6f 72 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 | ,.or.to.override.the.behavior.of |
f1e80 | 20 61 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 | .a.dynamic.routing.protocol.for. |
f1ea0 | 61 20 73 6d 61 6c 6c 20 6e 75 6d 62 65 72 20 6f 66 20 72 6f 75 74 65 73 2e 20 54 68 65 20 63 6f | a.small.number.of.routes..The.co |
f1ec0 | 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 72 6f 75 74 65 73 20 74 68 65 20 72 6f 75 74 65 | llection.of.all.routes.the.route |
f1ee0 | 72 20 68 61 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 | r.has.learned.from.its.configura |
f1f00 | 74 69 6f 6e 20 6f 72 20 66 72 6f 6d 20 69 74 73 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 | tion.or.from.its.dynamic.routing |
f1f20 | 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 52 49 42 2e | .protocols.is.stored.in.the.RIB. |
f1f40 | 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 61 72 65 20 64 69 72 65 63 74 6c 79 20 75 73 65 | .Unicast.routes.are.directly.use |
f1f60 | 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 | d.to.determine.the.forwarding.ta |
f1f80 | 62 6c 65 20 75 73 65 64 20 66 6f 72 20 75 6e 69 63 61 73 74 20 70 61 63 6b 65 74 20 66 6f 72 77 | ble.used.for.unicast.packet.forw |
f1fa0 | 61 72 64 69 6e 67 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 6f 6e | arding..Static.routes.can.be.con |
f1fc0 | 66 69 67 75 72 65 64 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 | figured.referencing.the.tunnel.i |
f1fe0 | 6e 74 65 72 66 61 63 65 3b 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 6c 6f 63 61 6c | nterface;.for.example,.the.local |
f2000 | 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 73 65 20 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 | .router.will.use.a.network.of.10 |
f2020 | 2e 30 2e 30 2e 30 2f 31 36 2c 20 77 68 69 6c 65 20 74 68 65 20 72 65 6d 6f 74 65 20 68 61 73 20 | .0.0.0/16,.while.the.remote.has. |
f2040 | 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 3a 00 53 74 61 74 69 6f | a.network.of.10.1.0.0/16:.Statio |
f2060 | 6e 20 73 75 70 70 6f 72 74 73 20 72 65 63 65 69 76 69 6e 67 20 56 48 54 20 76 61 72 69 61 6e 74 | n.supports.receiving.VHT.variant |
f2080 | 20 48 54 20 43 6f 6e 74 72 6f 6c 20 66 69 65 6c 64 00 53 74 61 74 75 73 00 53 74 69 63 6b 79 20 | .HT.Control.field.Status.Sticky. |
f20a0 | 43 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 74 6f 72 61 67 65 20 6f 66 20 72 6f 75 74 65 20 75 70 64 | Connections.Storage.of.route.upd |
f20c0 | 61 74 65 73 20 75 73 65 73 20 6d 65 6d 6f 72 79 2e 20 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 | ates.uses.memory..If.you.enable. |
f20e0 | 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 62 6f 75 6e 64 20 66 6f 72 | soft.reconfiguration.inbound.for |
f2100 | 20 6d 75 6c 74 69 70 6c 65 20 6e 65 69 67 68 62 6f 72 73 2c 20 74 68 65 20 61 6d 6f 75 6e 74 20 | .multiple.neighbors,.the.amount. |
f2120 | 6f 66 20 6d 65 6d 6f 72 79 20 75 73 65 64 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 69 67 6e 69 66 | of.memory.used.can.become.signif |
f2140 | 69 63 61 6e 74 2e 00 53 75 66 66 69 78 65 73 00 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 73 74 | icant..Suffixes.Summarisation.st |
f2160 | 61 72 74 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 74 68 69 73 20 64 65 6c 61 79 20 74 69 6d 65 72 | arts.only.after.this.delay.timer |
f2180 | 20 65 78 70 69 72 79 2e 00 53 75 70 70 6f 72 74 65 64 20 4d 6f 64 75 6c 65 73 00 53 75 70 70 6f | .expiry..Supported.Modules.Suppo |
f21a0 | 72 74 65 64 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 73 65 74 2e 00 53 75 70 70 6f 72 74 65 | rted.channel.width.set..Supporte |
f21c0 | 64 20 64 61 65 6d 6f 6e 73 3a 00 53 75 70 70 6f 72 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 | d.daemons:.Supported.interface.t |
f21e0 | 79 70 65 73 3a 00 53 75 70 70 6f 72 74 65 64 20 72 65 6d 6f 74 65 20 70 72 6f 74 6f 63 6f 6c 73 | ypes:.Supported.remote.protocols |
f2200 | 20 61 72 65 20 46 54 50 2c 20 46 54 50 53 2c 20 48 54 54 50 2c 20 48 54 54 50 53 2c 20 53 43 50 | .are.FTP,.FTPS,.HTTP,.HTTPS,.SCP |
f2220 | 2f 53 46 54 50 20 61 6e 64 20 54 46 54 50 2e 00 53 75 70 70 6f 72 74 65 64 20 76 65 72 73 69 6f | /SFTP.and.TFTP..Supported.versio |
f2240 | 6e 73 20 6f 66 20 52 49 50 20 61 72 65 3a 00 53 75 70 70 6f 72 74 73 20 61 73 20 48 45 4c 50 45 | ns.of.RIP.are:.Supports.as.HELPE |
f2260 | 52 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 61 63 65 20 70 65 72 69 6f 64 2e 00 53 | R.for.configured.grace.period..S |
f2280 | 75 70 70 6f 73 65 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 65 78 74 65 72 | uppose.the.LEFT.router.has.exter |
f22a0 | 6e 61 6c 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 20 6f 6e 20 69 74 73 20 65 74 | nal.address.192.0.2.10.on.its.et |
f22c0 | 68 30 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 | h0.interface,.and.the.RIGHT.rout |
f22e0 | 65 72 20 69 73 20 32 30 33 2e 30 2e 31 31 33 2e 34 35 00 53 75 70 70 6f 73 65 20 79 6f 75 20 77 | er.is.203.0.113.45.Suppose.you.w |
f2300 | 61 6e 74 20 74 6f 20 75 73 65 20 31 30 2e 32 33 2e 31 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 | ant.to.use.10.23.1.0/24.network. |
f2320 | 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 20 61 6e 64 20 | for.client.tunnel.endpoints.and. |
f2340 | 61 6c 6c 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 62 65 6c 6f 6e 67 20 74 6f 20 31 30 2e | all.client.subnets.belong.to.10. |
f2360 | 32 33 2e 30 2e 30 2f 32 30 2e 20 41 6c 6c 20 63 6c 69 65 6e 74 73 20 6e 65 65 64 20 61 63 63 65 | 23.0.0/20..All.clients.need.acce |
f2380 | 73 73 20 74 6f 20 74 68 65 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 20 6e 65 74 77 6f 72 6b | ss.to.the.192.168.0.0/16.network |
f23a0 | 2e 00 53 75 70 70 72 65 73 73 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 | ..Suppress.sending.Capability.Ne |
f23c0 | 67 6f 74 69 61 74 69 6f 6e 20 61 73 20 4f 50 45 4e 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e | gotiation.as.OPEN.message.option |
f23e0 | 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 72 2e 20 54 68 69 73 20 63 | al.parameter.to.the.peer..This.c |
f2400 | 6f 6d 6d 61 6e 64 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 74 68 65 20 70 65 65 72 20 69 73 20 | ommand.only.affects.the.peer.is. |
f2420 | 63 6f 6e 66 69 67 75 72 65 64 20 6f 74 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 | configured.other.than.IPv4.unica |
f2440 | 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 79 6e 61 6d 69 63 20 69 6e 73 74 72 75 | st.configuration..Synamic.instru |
f2460 | 63 74 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 6f 20 61 6c 6c 20 70 65 65 72 73 20 77 68 69 63 | cts.to.forward.to.all.peers.whic |
f2480 | 68 20 77 65 20 68 61 76 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 | h.we.have.a.direct.connection.wi |
f24a0 | 74 68 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 | th..Alternatively,.you.can.speci |
f24c0 | 66 79 20 74 68 65 20 64 69 72 65 63 74 69 76 65 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 | fy.the.directive.multiple.times. |
f24e0 | 66 6f 72 20 65 61 63 68 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 68 65 20 6d 75 | for.each.protocol-address.the.mu |
f2500 | 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 | lticast.traffic.should.be.sent.t |
f2520 | 6f 2e 00 53 79 6e 63 20 67 72 6f 75 70 73 00 53 79 6e 70 72 6f 78 79 00 53 79 6e 70 72 6f 78 79 | o..Sync.groups.Synproxy.Synproxy |
f2540 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 79 6e 70 72 6f 78 79 20 72 65 6c 69 65 73 20 6f 6e 20 | .connections.Synproxy.relies.on. |
f2560 | 73 79 6e 63 6f 6f 6b 69 65 73 20 61 6e 64 20 54 43 50 20 74 69 6d 65 73 74 61 6d 70 73 2c 20 65 | syncookies.and.TCP.timestamps,.e |
f2580 | 6e 73 75 72 65 20 74 68 65 73 65 20 61 72 65 20 65 6e 61 62 6c 65 64 00 53 79 6e 74 61 78 20 68 | nsure.these.are.enabled.Syntax.h |
f25a0 | 61 73 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 32 20 28 63 72 75 78 29 20 | as.changed.from.VyOS.1.2.(crux). |
f25c0 | 61 6e 64 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6d 69 67 | and.it.will.be.automatically.mig |
f25e0 | 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 6e 20 75 70 67 72 61 64 65 2e 00 53 79 73 63 74 6c 00 | rated.during.an.upgrade..Sysctl. |
f2600 | 53 79 73 6c 6f 67 00 53 79 73 6c 6f 67 20 73 75 70 70 6f 72 74 73 20 6c 6f 67 67 69 6e 67 20 74 | Syslog.Syslog.supports.logging.t |
f2620 | 6f 20 6d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 73 2c 20 74 68 6f 73 65 20 74 61 72 67 65 74 | o.multiple.targets,.those.target |
f2640 | 73 20 63 6f 75 6c 64 20 62 65 20 61 20 70 6c 61 69 6e 20 66 69 6c 65 20 6f 6e 20 79 6f 75 72 20 | s.could.be.a.plain.file.on.your. |
f2660 | 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 20 73 65 72 69 | VyOS.installation.itself,.a.seri |
f2680 | 61 6c 20 63 6f 6e 73 6f 6c 65 20 6f 72 20 61 20 72 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 73 65 | al.console.or.a.remote.syslog.se |
f26a0 | 72 76 65 72 20 77 68 69 63 68 20 69 73 20 72 65 61 63 68 65 64 20 76 69 61 20 3a 61 62 62 72 3a | rver.which.is.reached.via.:abbr: |
f26c0 | 60 49 50 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 55 44 50 2f 54 43 50 | `IP.(Internet.Protocol)`.UDP/TCP |
f26e0 | 2e 00 53 79 73 6c 6f 67 20 75 73 65 73 20 6c 6f 67 72 6f 74 61 74 65 20 74 6f 20 72 6f 74 61 74 | ..Syslog.uses.logrotate.to.rotat |
f2700 | 65 20 6c 6f 67 69 6c 65 73 20 61 66 74 65 72 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 67 69 76 65 | e.logiles.after.a.number.of.give |
f2720 | 73 20 62 79 74 65 73 2e 20 57 65 20 6b 65 65 70 20 61 73 20 6d 61 6e 79 20 61 73 20 60 3c 6e 75 | s.bytes..We.keep.as.many.as.`<nu |
f2740 | 6d 62 65 72 3e 60 20 72 6f 74 61 74 65 64 20 66 69 6c 65 20 62 65 66 6f 72 65 20 74 68 65 79 20 | mber>`.rotated.file.before.they. |
f2760 | 61 72 65 20 64 65 6c 65 74 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 79 73 6c 6f | are.deleted.on.the.system..Syslo |
f2780 | 67 20 77 69 6c 6c 20 77 72 69 74 65 20 60 3c 73 69 7a 65 3e 60 20 6b 69 6c 6f 62 79 74 65 73 20 | g.will.write.`<size>`.kilobytes. |
f27a0 | 69 6e 74 6f 20 74 68 65 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c | into.the.file.specified.by.`<fil |
f27c0 | 65 6e 61 6d 65 3e 60 2e 20 41 66 74 65 72 20 74 68 69 73 20 6c 69 6d 69 74 20 68 61 73 20 62 65 | ename>`..After.this.limit.has.be |
f27e0 | 65 6e 20 72 65 61 63 68 65 64 2c 20 74 68 65 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 22 | en.reached,.the.custom.file.is." |
f2800 | 72 6f 74 61 74 65 64 22 20 62 79 20 6c 6f 67 72 6f 74 61 74 65 20 61 6e 64 20 61 20 6e 65 77 20 | rotated".by.logrotate.and.a.new. |
f2820 | 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 63 72 65 61 74 65 64 2e 00 53 79 73 74 65 6d 00 53 | custom.file.is.created..System.S |
f2840 | 79 73 74 65 6d 20 44 4e 53 00 53 79 73 74 65 6d 20 44 69 73 70 6c 61 79 20 28 4c 43 44 29 00 53 | ystem.DNS.System.Display.(LCD).S |
f2860 | 79 73 74 65 6d 20 4e 61 6d 65 20 61 6e 64 20 44 65 73 63 72 69 70 74 69 6f 6e 00 53 79 73 74 65 | ystem.Name.and.Description.Syste |
f2880 | 6d 20 50 72 6f 78 79 00 53 79 73 74 65 6d 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 73 77 69 | m.Proxy.System.capabilities.(swi |
f28a0 | 74 63 68 69 6e 67 2c 20 72 6f 75 74 69 6e 67 2c 20 65 74 63 2e 29 00 53 79 73 74 65 6d 20 63 6f | tching,.routing,.etc.).System.co |
f28c0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 00 53 79 73 74 65 6d 20 64 61 65 6d | nfiguration.commands.System.daem |
f28e0 | 6f 6e 73 00 53 79 73 74 65 6d 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 31 39 32 31 2e 36 38 | ons.System.identifier:.``1921.68 |
f2900 | 30 30 2e 31 30 30 32 60 60 20 2d 20 66 6f 72 20 73 79 73 74 65 6d 20 69 64 65 74 69 66 69 65 72 | 00.1002``.-.for.system.idetifier |
f2920 | 73 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 6f 20 75 73 65 20 49 50 20 61 64 64 72 65 73 73 | s.we.recommend.to.use.IP.address |
f2940 | 20 6f 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 | .or.MAC.address.of.the.router.it |
f2960 | 73 65 6c 66 2e 20 54 68 65 20 77 61 79 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 74 68 69 73 20 | self..The.way.to.construct.this. |
f2980 | 69 73 20 74 6f 20 6b 65 65 70 20 61 6c 6c 20 6f 66 20 74 68 65 20 7a 65 72 6f 65 73 20 6f 66 20 | is.to.keep.all.of.the.zeroes.of. |
f29a0 | 74 68 65 20 72 6f 75 74 65 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 6e 20 | the.router.IP.address,.and.then. |
f29c0 | 63 68 61 6e 67 65 20 74 68 65 20 70 65 72 69 6f 64 73 20 66 72 6f 6d 20 62 65 69 6e 67 20 65 76 | change.the.periods.from.being.ev |
f29e0 | 65 72 79 20 74 68 72 65 65 20 6e 75 6d 62 65 72 73 20 74 6f 20 65 76 65 72 79 20 66 6f 75 72 20 | ery.three.numbers.to.every.four. |
f2a00 | 6e 75 6d 62 65 72 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6c 69 73 | numbers..The.address.that.is.lis |
f2a20 | 74 65 64 20 68 65 72 65 20 69 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 32 60 60 2c 20 77 68 69 | ted.here.is.``192.168.1.2``,.whi |
f2a40 | 63 68 20 69 66 20 65 78 70 61 6e 64 65 64 20 77 69 6c 6c 20 74 75 72 6e 20 69 6e 74 6f 20 60 60 | ch.if.expanded.will.turn.into.`` |
f2a60 | 31 39 32 2e 31 36 38 2e 30 30 31 2e 30 30 32 60 60 2e 20 54 68 65 6e 20 61 6c 6c 20 6f 6e 65 20 | 192.168.001.002``..Then.all.one. |
f2a80 | 68 61 73 20 74 6f 20 64 6f 20 69 73 20 6d 6f 76 65 20 74 68 65 20 64 6f 74 73 20 74 6f 20 68 61 | has.to.do.is.move.the.dots.to.ha |
f2aa0 | 76 65 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 72 65 65 | ve.four.numbers.instead.of.three |
f2ac0 | 2e 20 54 68 69 73 20 67 69 76 65 73 20 75 73 20 60 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 | ..This.gives.us.``1921.6800.1002 |
f2ae0 | 60 60 2e 00 53 79 73 74 65 6d 20 69 73 20 75 6e 75 73 61 62 6c 65 20 2d 20 61 20 70 61 6e 69 63 | ``..System.is.unusable.-.a.panic |
f2b00 | 20 63 6f 6e 64 69 74 69 6f 6e 00 54 41 43 41 43 53 20 45 78 61 6d 70 6c 65 00 54 41 43 41 43 53 | .condition.TACACS.Example.TACACS |
f2b20 | 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 30 37 60 2e 00 54 41 43 41 | .is.defined.in.:rfc:`8907`..TACA |
f2b40 | 43 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 | CS.servers.could.be.hardened.by. |
f2b60 | 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 | only.allowing.certain.IP.address |
f2b80 | 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f | es.to.connect..As.of.this.the.so |
f2ba0 | 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 54 41 43 41 43 53 20 71 75 65 72 | urce.address.of.each.TACACS.quer |
f2bc0 | 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 41 43 41 43 53 2b 00 54 42 44 | y.can.be.configured..TACACS+.TBD |
f2be0 | 00 54 43 50 20 26 20 55 44 50 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e 69 6e 67 20 69 6e 20 74 | .TCP.&.UDP.services.running.in.t |
f2c00 | 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 63 6f 6e 74 65 78 74 20 28 69 65 2e 2c 20 6e 6f 74 | he.default.VRF.context.(ie.,.not |
f2c20 | 20 62 6f 75 6e 64 20 74 6f 20 61 6e 79 20 56 52 46 20 64 65 76 69 63 65 29 20 63 61 6e 20 77 6f | .bound.to.any.VRF.device).can.wo |
f2c40 | 72 6b 20 61 63 72 6f 73 73 20 61 6c 6c 20 56 52 46 20 64 6f 6d 61 69 6e 73 20 62 79 20 65 6e 61 | rk.across.all.VRF.domains.by.ena |
f2c60 | 62 6c 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 2e 00 54 46 54 50 20 53 65 72 76 65 72 00 54 | bling.this.option..TFTP.Server.T |
f2c80 | 61 67 20 69 73 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 2e 20 49 66 | ag.is.the.optional.parameter..If |
f2ca0 | 20 74 61 67 20 63 6f 6e 66 69 67 75 72 65 64 20 53 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 77 69 | .tag.configured.Summary.route.wi |
f2cc0 | 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 | ll.be.originated.with.the.config |
f2ce0 | 75 72 65 64 20 74 61 67 2e 00 54 61 73 6b 20 53 63 68 65 64 75 6c 65 72 00 54 65 6c 65 67 72 61 | ured.tag..Task.Scheduler.Telegra |
f2d00 | 66 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 61 7a 75 72 65 2d 64 | f.Telegraf.output.plugin.azure-d |
f2d20 | 61 74 61 2d 65 78 70 6c 6f 72 65 72 5f 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c | ata-explorer_.Telegraf.output.pl |
f2d40 | 75 67 69 6e 20 70 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 5f 00 54 65 6c 65 67 72 61 66 | ugin.prometheus-client_.Telegraf |
f2d60 | 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 73 70 6c 75 6e 6b 5f 2e 20 48 54 54 50 20 45 76 65 | .output.plugin.splunk_..HTTP.Eve |
f2d80 | 6e 74 20 43 6f 6c 6c 65 63 74 6f 72 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 | nt.Collector..Tell.PIM.that.we.w |
f2da0 | 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 | ould.not.like.to.use.this.interf |
f2dc0 | 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 | ace.to.process.bootstrap.message |
f2de0 | 73 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 | s..Tell.PIM.that.we.would.not.li |
f2e00 | 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 | ke.to.use.this.interface.to.proc |
f2e20 | 65 73 73 20 75 6e 69 63 61 73 74 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 | ess.unicast.bootstrap.messages.. |
f2e40 | 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 | Tell.hosts.to.use.the.administer |
f2e60 | 65 64 20 28 73 74 61 74 65 66 75 6c 29 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 | ed.(stateful).protocol.(i.e..DHC |
f2e80 | 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 6f 74 68 65 | P).for.autoconfiguration.of.othe |
f2ea0 | 72 20 28 6e 6f 6e 2d 61 64 64 72 65 73 73 29 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 65 6c 6c | r.(non-address).information.Tell |
f2ec0 | 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 73 | .hosts.to.use.the.administered.s |
f2ee0 | 74 61 74 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 | tateful.protocol.(i.e..DHCP).for |
f2f00 | 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 | .autoconfiguration.Temporary.dis |
f2f20 | 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 54 65 6d 70 6f 72 61 | able.this.RADIUS.server..Tempora |
f2f40 | 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 49 | ry.disable.this.RADIUS.server..I |
f2f60 | 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 | t.won't.be.queried..Temporary.di |
f2f80 | 73 61 62 6c 65 20 74 68 69 73 20 54 41 43 41 43 53 20 73 65 72 76 65 72 2e 20 49 74 20 77 6f 6e | sable.this.TACACS.server..It.won |
f2fa0 | 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 72 6d 69 6e 61 74 65 20 53 53 4c 00 54 65 73 | 't.be.queried..Terminate.SSL.Tes |
f2fc0 | 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 | t.connecting.given.connection-or |
f2fe0 | 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 | iented.interface..`<interface>`. |
f3000 | 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 | can.be.``pppoe0``.as.the.example |
f3020 | 2e 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 | ..Test.connecting.given.connecti |
f3040 | 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 | on-oriented.interface..`<interfa |
f3060 | 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 | ce>`.can.be.``sstpc0``.as.the.ex |
f3080 | 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 | ample..Test.disconnecting.given. |
f30a0 | 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 | connection-oriented.interface..` |
f30c0 | 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 | <interface>`.can.be.``pppoe0``.a |
f30e0 | 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e | s.the.example..Test.disconnectin |
f3100 | 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 | g.given.connection-oriented.inte |
f3120 | 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 | rface..`<interface>`.can.be.``ss |
f3140 | 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 66 72 6f 6d | tpc0``.as.the.example..Test.from |
f3160 | 20 74 68 65 20 49 50 76 36 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 3a 00 54 65 73 74 69 6e 67 20 53 | .the.IPv6.only.client:.Testing.S |
f3180 | 53 54 50 00 54 65 73 74 69 6e 67 20 61 6e 64 20 56 61 6c 69 64 61 74 69 6f 6e 00 54 68 61 6e 6b | STP.Testing.and.Validation.Thank |
f31a0 | 73 20 74 6f 20 74 68 69 73 20 64 69 73 63 6f 76 65 72 79 2c 20 61 6e 79 20 73 75 62 73 65 71 75 | s.to.this.discovery,.any.subsequ |
f31c0 | 65 6e 74 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 50 43 34 20 61 6e 64 20 50 43 35 20 | ent.traffic.between.PC4.and.PC5. |
f31e0 | 77 69 6c 6c 20 6e 6f 74 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 2d | will.not.be.using.the.multicast- |
f3200 | 61 64 64 72 65 73 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 6c 65 61 76 65 73 20 61 73 20 74 68 | address.between.the.leaves.as.th |
f3220 | 65 79 20 62 6f 74 68 20 6b 6e 6f 77 20 62 65 68 69 6e 64 20 77 68 69 63 68 20 4c 65 61 66 20 74 | ey.both.know.behind.which.Leaf.t |
f3240 | 68 65 20 50 43 73 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 2e 20 54 68 69 73 20 73 61 76 65 73 | he.PCs.are.connected..This.saves |
f3260 | 20 74 72 61 66 66 69 63 20 61 73 20 6c 65 73 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 | .traffic.as.less.multicast.packe |
f3280 | 74 73 20 73 65 6e 74 20 72 65 64 75 63 65 73 20 74 68 65 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 | ts.sent.reduces.the.load.on.the. |
f32a0 | 6e 65 74 77 6f 72 6b 2c 20 77 68 69 63 68 20 69 6d 70 72 6f 76 65 73 20 73 63 61 6c 61 62 69 6c | network,.which.improves.scalabil |
f32c0 | 69 74 79 20 77 68 65 6e 20 6d 6f 72 65 20 6c 65 61 76 65 73 20 61 72 65 20 61 64 64 65 64 2e 00 | ity.when.more.leaves.are.added.. |
f32e0 | 54 68 61 74 20 69 73 20 68 6f 77 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f | That.is.how.it.is.possible.to.do |
f3300 | 20 74 68 65 20 73 6f 2d 63 61 6c 6c 65 64 20 22 69 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 22 | .the.so-called."ingress.shaping" |
f3320 | 2e 00 54 68 61 74 20 6c 6f 6f 6b 73 20 67 6f 6f 64 20 2d 20 77 65 20 64 65 66 69 6e 65 64 20 32 | ..That.looks.good.-.we.defined.2 |
f3340 | 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 74 68 65 79 27 72 65 20 62 6f 74 68 20 75 70 20 61 6e 64 | .tunnels.and.they're.both.up.and |
f3360 | 20 72 75 6e 6e 69 6e 67 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f | .running..The.:abbr:`ASN.(Autono |
f3380 | 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 | mous.System.Number)`.is.one.of.t |
f33a0 | 68 65 20 65 73 73 65 6e 74 69 61 6c 20 65 6c 65 6d 65 6e 74 73 20 6f 66 20 42 47 50 2e 20 42 47 | he.essential.elements.of.BGP..BG |
f33c0 | 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 72 6f 75 74 69 6e 67 20 70 | P.is.a.distance.vector.routing.p |
f33e0 | 72 6f 74 6f 63 6f 6c 2c 20 61 6e 64 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 72 61 6d 65 77 6f | rotocol,.and.the.AS-Path.framewo |
f3400 | 72 6b 20 70 72 6f 76 69 64 65 73 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 6d 65 74 72 | rk.provides.distance.vector.metr |
f3420 | 69 63 20 61 6e 64 20 6c 6f 6f 70 20 64 65 74 65 63 74 69 6f 6e 20 74 6f 20 42 47 50 2e 00 54 68 | ic.and.loop.detection.to.BGP..Th |
f3440 | 65 20 3a 61 62 62 72 3a 60 44 4e 50 54 76 36 20 28 44 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 76 | e.:abbr:`DNPTv6.(Destination.IPv |
f3460 | 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 | 6-to-IPv6.Network.Prefix.Transla |
f3480 | 74 69 6f 6e 29 60 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 | tion)`.destination.address.trans |
f34a0 | 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 6e 20 73 63 65 6e 61 | lation.function.is.used.in.scena |
f34c0 | 72 69 6f 73 20 77 68 65 72 65 20 74 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 69 6e 74 | rios.where.the.server.in.the.int |
f34e0 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 73 65 72 76 69 63 65 73 20 | ernal.network.provides.services. |
f3500 | 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 | to.the.external.network,.such.as |
f3520 | 20 70 72 6f 76 69 64 69 6e 67 20 57 65 62 20 73 65 72 76 69 63 65 73 20 6f 72 20 46 54 50 20 73 | .providing.Web.services.or.FTP.s |
f3540 | 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e | ervices.to.the.external.network. |
f3560 | 20 42 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 6d 61 70 70 69 6e 67 20 72 65 6c 61 | .By.configuring.the.mapping.rela |
f3580 | 74 69 6f 6e 73 68 69 70 20 62 65 74 77 65 65 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 65 | tionship.between.the.internal.se |
f35a0 | 72 76 65 72 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 | rver.address.and.the.external.ne |
f35c0 | 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 | twork.address.on.the.external.ne |
f35e0 | 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 | twork.side.interface.of.the.NAT6 |
f3600 | 36 20 64 65 76 69 63 65 2c 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 72 73 | 6.device,.external.network.users |
f3620 | 20 63 61 6e 20 61 63 63 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b | .can.access.the.internal.network |
f3640 | 20 73 65 72 76 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 73 69 67 6e 61 74 65 64 20 65 | .server.through.the.designated.e |
f3660 | 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 3a 61 62 | xternal.network.address..The.:ab |
f3680 | 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 | br:`MPLS.(Multi-Protocol.Label.S |
f36a0 | 77 69 74 63 68 69 6e 67 29 60 20 61 72 63 68 69 74 65 63 74 75 72 65 20 64 6f 65 73 20 6e 6f 74 | witching)`.architecture.does.not |
f36c0 | 20 61 73 73 75 6d 65 20 61 20 73 69 6e 67 6c 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 63 72 65 | .assume.a.single.protocol.to.cre |
f36e0 | 61 74 65 20 4d 50 4c 53 20 70 61 74 68 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 | ate.MPLS.paths..VyOS.supports.th |
f3700 | 65 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 4c | e.Label.Distribution.Protocol.(L |
f3720 | 44 50 29 20 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 46 52 52 2c 20 62 61 73 65 64 | DP).as.implemented.by.FRR,.based |
f3740 | 20 6f 6e 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 54 68 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 | .on.:rfc:`5036`..The.:ref:`sourc |
f3760 | 65 2d 6e 61 74 36 36 60 20 72 75 6c 65 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 73 6f 75 72 63 | e-nat66`.rule.replaces.the.sourc |
f3780 | 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 61 6e 64 20 63 61 6c 63 | e.address.of.the.packet.and.calc |
f37a0 | 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 76 65 72 74 65 64 20 61 64 64 72 65 73 73 20 75 73 69 | ulates.the.converted.address.usi |
f37c0 | 6e 67 20 74 68 65 20 70 72 65 66 69 78 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 72 | ng.the.prefix.specified.in.the.r |
f37e0 | 75 6c 65 2e 00 54 68 65 20 41 52 50 20 6d 6f 6e 69 74 6f 72 20 77 6f 72 6b 73 20 62 79 20 70 65 | ule..The.ARP.monitor.works.by.pe |
f3800 | 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 69 6e 67 20 74 68 65 20 73 6c 61 76 65 20 64 65 | riodically.checking.the.slave.de |
f3820 | 76 69 63 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 74 68 65 79 20 | vices.to.determine.whether.they. |
f3840 | 68 61 76 65 20 73 65 6e 74 20 6f 72 20 72 65 63 65 69 76 65 64 20 74 72 61 66 66 69 63 20 72 65 | have.sent.or.received.traffic.re |
f3860 | 63 65 6e 74 6c 79 20 28 74 68 65 20 70 72 65 63 69 73 65 20 63 72 69 74 65 72 69 61 20 64 65 70 | cently.(the.precise.criteria.dep |
f3880 | 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 6f 64 65 2c 20 61 6e 64 20 | ends.upon.the.bonding.mode,.and. |
f38a0 | 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 29 2e 20 52 65 67 75 6c 61 72 | the.state.of.the.slave)..Regular |
f38c0 | 20 74 72 61 66 66 69 63 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 76 69 61 20 41 52 50 20 70 72 | .traffic.is.generated.via.ARP.pr |
f38e0 | 6f 62 65 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 70 | obes.issued.for.the.addresses.sp |
f3900 | 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 | ecified.by.the.:cfgcmd:`arp-moni |
f3920 | 74 6f 72 20 74 61 72 67 65 74 60 20 6f 70 74 69 6f 6e 2e 00 54 68 65 20 41 53 50 20 68 61 73 20 | tor.target`.option..The.ASP.has. |
f3940 | 64 6f 63 75 6d 65 6e 74 65 64 20 74 68 65 69 72 20 49 50 53 65 63 20 72 65 71 75 69 72 65 6d 65 | documented.their.IPSec.requireme |
f3960 | 6e 74 73 3a 00 54 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 | nts:.The.BGP.router.can.connect. |
f3980 | 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 | to.one.or.more.RPKI.cache.server |
f39a0 | 73 20 74 6f 20 72 65 63 65 69 76 65 20 76 61 6c 69 64 61 74 65 64 20 70 72 65 66 69 78 20 74 6f | s.to.receive.validated.prefix.to |
f39c0 | 20 6f 72 69 67 69 6e 20 41 53 20 6d 61 70 70 69 6e 67 73 2e 20 41 64 76 61 6e 63 65 64 20 66 61 | .origin.AS.mappings..Advanced.fa |
f39e0 | 69 6c 6f 76 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 73 65 72 | ilover.can.be.implemented.by.ser |
f3a00 | 76 65 72 20 73 6f 63 6b 65 74 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 65 | ver.sockets.with.different.prefe |
f3a20 | 72 65 6e 63 65 20 76 61 6c 75 65 73 2e 00 54 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 | rence.values..The.CLI.configurat |
f3a40 | 69 6f 6e 20 69 73 20 73 61 6d 65 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 69 6e 20 61 62 6f 76 | ion.is.same.as.mentioned.in.abov |
f3a60 | 65 20 61 72 74 69 63 6c 65 73 2e 20 54 68 65 20 6f 6e 6c 79 20 64 69 66 66 65 72 65 6e 63 65 20 | e.articles..The.only.difference. |
f3a80 | 69 73 2c 20 74 68 61 74 20 65 61 63 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 75 | is,.that.each.routing.protocol.u |
f3aa0 | 73 65 64 2c 20 6d 75 73 74 20 62 65 20 70 72 65 66 69 78 65 64 20 77 69 74 68 20 74 68 65 20 60 | sed,.must.be.prefixed.with.the.` |
f3ac0 | 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 43 4c | vrf.name.<name>`.command..The.CL |
f3ae0 | 4e 53 20 61 64 64 72 65 73 73 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f | NS.address.consists.of.the.follo |
f3b00 | 77 69 6e 67 20 70 61 72 74 73 3a 00 54 68 65 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e | wing.parts:.The.DHCP.unique.iden |
f3b20 | 74 69 66 69 65 72 20 28 44 55 49 44 29 20 69 73 20 75 73 65 64 20 62 79 20 61 20 63 6c 69 65 6e | tifier.(DUID).is.used.by.a.clien |
f3b40 | 74 20 74 6f 20 67 65 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 20 44 48 | t.to.get.an.IP.address.from.a.DH |
f3b60 | 43 50 76 36 20 73 65 72 76 65 72 2e 20 49 74 20 68 61 73 20 61 20 32 2d 62 79 74 65 20 44 55 49 | CPv6.server..It.has.a.2-byte.DUI |
f3b80 | 44 20 74 79 70 65 20 66 69 65 6c 64 2c 20 61 6e 64 20 61 20 76 61 72 69 61 62 6c 65 2d 6c 65 6e | D.type.field,.and.a.variable-len |
f3ba0 | 67 74 68 20 69 64 65 6e 74 69 66 69 65 72 20 66 69 65 6c 64 20 75 70 20 74 6f 20 31 32 38 20 62 | gth.identifier.field.up.to.128.b |
f3bc0 | 79 74 65 73 2e 20 49 74 73 20 61 63 74 75 61 6c 20 6c 65 6e 67 74 68 20 64 65 70 65 6e 64 73 20 | ytes..Its.actual.length.depends. |
f3be0 | 6f 6e 20 69 74 73 20 74 79 70 65 2e 20 54 68 65 20 73 65 72 76 65 72 20 63 6f 6d 70 61 72 65 73 | on.its.type..The.server.compares |
f3c00 | 20 74 68 65 20 44 55 49 44 20 77 69 74 68 20 69 74 73 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 | .the.DUID.with.its.database.and. |
f3c20 | 64 65 6c 69 76 65 72 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 61 74 61 20 28 61 64 64 | delivers.configuration.data.(add |
f3c40 | 72 65 73 73 2c 20 6c 65 61 73 65 20 74 69 6d 65 73 2c 20 44 4e 53 20 73 65 72 76 65 72 73 2c 20 | ress,.lease.times,.DNS.servers,. |
f3c60 | 65 74 63 2e 29 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 | etc.).to.the.client..The.DN.and. |
f3c80 | 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 | password.to.bind.as.while.perfor |
f3ca0 | 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f | ming.searches..The.DN.and.passwo |
f3cc0 | 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 | rd.to.bind.as.while.performing.s |
f3ce0 | 65 61 72 63 68 65 73 2e 20 41 73 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 6e 65 65 64 73 20 74 | earches..As.the.password.needs.t |
f3d00 | 6f 20 62 65 20 70 72 69 6e 74 65 64 20 69 6e 20 70 6c 61 69 6e 20 74 65 78 74 20 69 6e 20 79 6f | o.be.printed.in.plain.text.in.yo |
f3d20 | 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 20 69 73 20 73 74 72 | ur.Squid.configuration.it.is.str |
f3d40 | 6f 6e 67 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 61 20 61 63 63 6f 75 | ongly.recommended.to.use.a.accou |
f3d60 | 6e 74 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 61 73 73 6f 63 69 61 74 65 64 20 70 72 69 76 69 | nt.with.minimal.associated.privi |
f3d80 | 6c 65 67 65 73 2e 20 54 68 69 73 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 64 61 6d 61 67 65 20 | leges..This.to.limit.the.damage. |
f3da0 | 69 6e 20 63 61 73 65 20 73 6f 6d 65 6f 6e 65 20 63 6f 75 6c 64 20 67 65 74 20 68 6f 6c 64 20 6f | in.case.someone.could.get.hold.o |
f3dc0 | 66 20 61 20 63 6f 70 79 20 6f 66 20 79 6f 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 | f.a.copy.of.your.Squid.configura |
f3de0 | 74 69 6f 6e 20 66 69 6c 65 2e 00 54 68 65 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 64 | tion.file..The.FQ-CoDel.policy.d |
f3e00 | 69 73 74 72 69 62 75 74 65 73 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 31 30 32 34 | istributes.the.traffic.into.1024 |
f3e20 | 20 46 49 46 4f 20 71 75 65 75 65 73 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 70 72 6f 76 69 64 | .FIFO.queues.and.tries.to.provid |
f3e40 | 65 20 67 6f 6f 64 20 73 65 72 76 69 63 65 20 62 65 74 77 65 65 6e 20 61 6c 6c 20 6f 66 20 74 68 | e.good.service.between.all.of.th |
f3e60 | 65 6d 2e 20 49 74 20 61 6c 73 6f 20 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 74 68 65 20 6c 65 | em..It.also.tries.to.keep.the.le |
f3e80 | 6e 67 74 68 20 6f 66 20 61 6c 6c 20 74 68 65 20 71 75 65 75 65 73 20 73 68 6f 72 74 2e 00 54 68 | ngth.of.all.the.queues.short..Th |
f3ea0 | 65 20 48 54 54 50 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 20 6f 6e 20 54 43 50 20 70 6f 72 | e.HTTP.service.listen.on.TCP.por |
f3ec0 | 74 20 38 30 2e 00 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 | t.80..The.IP.address.of.the.inte |
f3ee0 | 72 6e 61 6c 20 73 79 73 74 65 6d 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 64 20 74 | rnal.system.we.wish.to.forward.t |
f3f00 | 72 61 66 66 69 63 20 74 6f 2e 00 54 68 65 20 49 6e 74 65 6c 20 41 58 32 30 30 20 63 61 72 64 20 | raffic.to..The.Intel.AX200.card. |
f3f20 | 64 6f 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 75 74 20 6f 66 20 74 68 65 20 62 6f 78 20 69 6e 20 | does.not.work.out.of.the.box.in. |
f3f40 | 41 50 20 6d 6f 64 65 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 75 6e 69 78 2e 73 74 61 63 6b 65 | AP.mode,.see.https://unix.stacke |
f3f60 | 78 63 68 61 6e 67 65 2e 63 6f 6d 2f 71 75 65 73 74 69 6f 6e 73 2f 35 39 38 32 37 35 2f 69 6e 74 | xchange.com/questions/598275/int |
f3f80 | 65 6c 2d 61 78 32 30 30 2d 61 70 2d 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 73 74 69 6c 6c 20 | el-ax200-ap-mode..You.can.still. |
f3fa0 | 70 75 74 20 74 68 69 73 20 63 61 72 64 20 69 6e 74 6f 20 41 50 20 6d 6f 64 65 20 75 73 69 6e 67 | put.this.card.into.AP.mode.using |
f3fc0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 | .the.following.configuration:.Th |
f3fe0 | 65 20 4f 49 44 20 60 60 2e 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 38 30 37 32 2e 31 2e 33 2e 32 2e | e.OID.``.1.3.6.1.4.1.8072.1.3.2. |
f4000 | 33 2e 31 2e 31 2e 34 2e 31 31 36 2e 31 30 31 2e 31 31 35 2e 31 31 36 60 60 2c 20 6f 6e 63 65 20 | 3.1.1.4.116.101.115.116``,.once. |
f4020 | 63 61 6c 6c 65 64 2c 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 6f 75 74 70 75 74 20 | called,.will.contain.the.output. |
f4040 | 6f 66 20 74 68 65 20 65 78 74 65 6e 73 69 6f 6e 2e 00 54 68 65 20 50 6f 69 6e 74 2d 74 6f 2d 50 | of.the.extension..The.Point-to-P |
f4060 | 6f 69 6e 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 28 50 50 54 50 5f 29 20 | oint.Tunneling.Protocol.(PPTP_). |
f4080 | 68 61 73 20 62 65 65 6e 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 69 6e 20 56 79 4f 53 20 6f 6e 6c | has.been.implemented.in.VyOS.onl |
f40a0 | 79 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 50 | y.for.backwards.compatibility..P |
f40c0 | 50 54 50 20 68 61 73 20 6d 61 6e 79 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 73 65 63 75 72 69 74 79 | PTP.has.many.well.known.security |
f40e0 | 20 69 73 73 75 65 73 20 61 6e 64 20 79 6f 75 20 73 68 6f 75 6c 64 20 75 73 65 20 6f 6e 65 20 6f | .issues.and.you.should.use.one.o |
f4100 | 66 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 6e 65 77 20 56 50 4e 20 69 6d 70 6c 65 6d 65 | f.the.many.other.new.VPN.impleme |
f4120 | 6e 74 61 74 69 6f 6e 73 2e 00 54 68 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 20 | ntations..The.PowerDNS.recursor. |
f4140 | 68 61 73 20 35 20 64 69 66 66 65 72 65 6e 74 20 6c 65 76 65 6c 73 20 6f 66 20 44 4e 53 53 45 43 | has.5.different.levels.of.DNSSEC |
f4160 | 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 | .processing,.which.can.be.set.wi |
f4180 | 74 68 20 74 68 65 20 64 6e 73 73 65 63 20 73 65 74 74 69 6e 67 2e 20 49 6e 20 6f 72 64 65 72 20 | th.the.dnssec.setting..In.order. |
f41a0 | 66 72 6f 6d 20 6c 65 61 73 74 20 74 6f 20 6d 6f 73 74 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 74 | from.least.to.most.processing,.t |
f41c0 | 68 65 73 65 20 61 72 65 3a 00 54 68 65 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 | hese.are:.The.Priority.Queue.is. |
f41e0 | 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 69 6e 67 20 70 6f 6c 69 63 79 2e 20 49 74 | a.classful.scheduling.policy..It |
f4200 | 20 64 6f 65 73 20 6e 6f 74 20 64 65 6c 61 79 20 70 61 63 6b 65 74 73 20 28 50 72 69 6f 72 69 74 | .does.not.delay.packets.(Priorit |
f4220 | 79 20 51 75 65 75 65 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 29 | y.Queue.is.not.a.shaping.policy) |
f4240 | 2c 20 69 74 20 73 69 6d 70 6c 79 20 64 65 71 75 65 75 65 73 20 70 61 63 6b 65 74 73 20 61 63 63 | ,.it.simply.dequeues.packets.acc |
f4260 | 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 52 41 | ording.to.their.priority..The.RA |
f4280 | 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 65 61 74 75 72 65 20 6d 75 73 74 20 62 65 20 | DIUS.accounting.feature.must.be. |
f42a0 | 75 73 65 64 20 77 69 74 68 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e | used.with.the.OpenConnect.authen |
f42c0 | 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 2e 20 49 74 20 63 61 6e 6e 6f 74 20 | tication.mode.RADIUS..It.cannot. |
f42e0 | 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | be.used.with.local.authenticatio |
f4300 | 6e 2e 20 59 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 4f 70 65 6e 43 6f | n..You.must.configure.the.OpenCo |
f4320 | 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 74 6f 20 22 72 61 | nnect.authentication.mode.to."ra |
f4340 | 64 69 75 73 22 2e 00 54 68 65 20 52 41 44 49 55 53 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 | dius"..The.RADIUS.dictionaries.i |
f4360 | 6e 20 56 79 4f 53 20 61 72 65 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 2f 75 73 72 2f 73 68 61 | n.VyOS.are.located.at.``/usr/sha |
f4380 | 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2f 60 60 00 54 68 65 20 53 52 20 73 65 | re/accel-ppp/radius/``.The.SR.se |
f43a0 | 67 6d 65 6e 74 73 20 61 72 65 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f | gments.are.portions.of.the.netwo |
f43c0 | 72 6b 20 70 61 74 68 20 74 61 6b 65 6e 20 62 79 20 74 68 65 20 70 61 63 6b 65 74 2c 20 61 6e 64 | rk.path.taken.by.the.packet,.and |
f43e0 | 20 61 72 65 20 63 61 6c 6c 65 64 20 53 49 44 73 2e 20 41 74 20 65 61 63 68 20 6e 6f 64 65 2c 20 | .are.called.SIDs..At.each.node,. |
f4400 | 74 68 65 20 66 69 72 73 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 74 20 69 73 20 72 65 61 | the.first.SID.of.the.list.is.rea |
f4420 | 64 2c 20 65 78 65 63 75 74 65 64 20 61 73 20 61 20 66 6f 72 77 61 72 64 69 6e 67 20 66 75 6e 63 | d,.executed.as.a.forwarding.func |
f4440 | 74 69 6f 6e 2c 20 61 6e 64 20 6d 61 79 20 62 65 20 70 6f 70 70 65 64 20 74 6f 20 6c 65 74 20 74 | tion,.and.may.be.popped.to.let.t |
f4460 | 68 65 20 6e 65 78 74 20 6e 6f 64 65 20 72 65 61 64 20 74 68 65 20 6e 65 78 74 20 53 49 44 20 6f | he.next.node.read.the.next.SID.o |
f4480 | 66 20 74 68 65 20 6c 69 73 74 2e 20 54 68 65 20 53 49 44 20 6c 69 73 74 20 63 6f 6d 70 6c 65 74 | f.the.list..The.SID.list.complet |
f44a0 | 65 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 70 61 74 68 20 77 68 65 72 65 20 74 68 | ely.determines.the.path.where.th |
f44c0 | 65 20 70 61 63 6b 65 74 20 69 73 20 66 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 53 68 61 70 65 | e.packet.is.forwarded..The.Shape |
f44e0 | 72 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 20 61 20 6c 6f | r.policy.does.not.guarantee.a.lo |
f4500 | 77 20 64 65 6c 61 79 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 67 75 61 72 61 6e 74 65 65 20 62 | w.delay,.but.it.does.guarantee.b |
f4520 | 61 6e 64 77 69 64 74 68 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 66 66 69 63 20 63 6c | andwidth.to.different.traffic.cl |
f4540 | 61 73 73 65 73 20 61 6e 64 20 61 6c 73 6f 20 6c 65 74 73 20 79 6f 75 20 64 65 63 69 64 65 20 68 | asses.and.also.lets.you.decide.h |
f4560 | 6f 77 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6d 6f 72 65 20 74 72 61 66 66 69 63 20 6f 6e 63 65 | ow.to.allocate.more.traffic.once |
f4580 | 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 73 20 61 72 65 20 6d 65 74 2e 00 54 68 65 20 55 44 50 | .the.guarantees.are.met..The.UDP |
f45a0 | 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 79 6f 75 72 20 61 70 6c 6c 69 63 | .port.number.used.by.your.apllic |
f45c0 | 61 74 69 6f 6e 2e 20 49 74 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 74 68 69 73 20 | ation..It.is.mandatory.for.this. |
f45e0 | 6b 69 6e 64 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 2e 00 54 68 65 20 56 58 4c 41 4e 20 73 70 65 | kind.of.operation..The.VXLAN.spe |
f4600 | 63 69 66 69 63 61 74 69 6f 6e 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c 79 20 63 72 65 61 74 65 | cification.was.originally.create |
f4620 | 64 20 62 79 20 56 4d 77 61 72 65 2c 20 41 72 69 73 74 61 20 4e 65 74 77 6f 72 6b 73 20 61 6e 64 | d.by.VMware,.Arista.Networks.and |
f4640 | 20 43 69 73 63 6f 2e 20 4f 74 68 65 72 20 62 61 63 6b 65 72 73 20 6f 66 20 74 68 65 20 56 58 4c | .Cisco..Other.backers.of.the.VXL |
f4660 | 41 4e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 63 6c 75 64 65 20 48 75 61 77 65 69 2c 20 42 72 | AN.technology.include.Huawei,.Br |
f4680 | 6f 61 64 63 6f 6d 2c 20 43 69 74 72 69 78 2c 20 50 69 63 61 38 2c 20 42 69 67 20 53 77 69 74 63 | oadcom,.Citrix,.Pica8,.Big.Switc |
f46a0 | 68 20 4e 65 74 77 6f 72 6b 73 2c 20 43 75 6d 75 6c 75 73 20 4e 65 74 77 6f 72 6b 73 2c 20 44 65 | h.Networks,.Cumulus.Networks,.De |
f46c0 | 6c 6c 20 45 4d 43 2c 20 45 72 69 63 73 73 6f 6e 2c 20 4d 65 6c 6c 61 6e 6f 78 2c 20 46 72 65 65 | ll.EMC,.Ericsson,.Mellanox,.Free |
f46e0 | 42 53 44 2c 20 4f 70 65 6e 42 53 44 2c 20 52 65 64 20 48 61 74 2c 20 4a 6f 79 65 6e 74 2c 20 61 | BSD,.OpenBSD,.Red.Hat,.Joyent,.a |
f4700 | 6e 64 20 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 2e 00 54 68 65 20 56 79 4f 53 20 44 4e | nd.Juniper.Networks..The.VyOS.DN |
f4720 | 53 20 66 6f 72 77 61 72 64 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 20 | S.forwarder.does.not.require.an. |
f4740 | 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 20 49 74 20 63 61 6e 20 73 65 72 76 | upstream.DNS.server..It.can.serv |
f4760 | 65 20 61 73 20 61 20 66 75 6c 6c 20 72 65 63 75 72 73 69 76 65 20 44 4e 53 20 73 65 72 76 65 72 | e.as.a.full.recursive.DNS.server |
f4780 | 20 2d 20 62 75 74 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 66 6f 72 77 61 72 64 20 71 75 65 72 69 | .-.but.it.can.also.forward.queri |
f47a0 | 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 | es.to.configurable.upstream.DNS. |
f47c0 | 73 65 72 76 65 72 73 2e 20 42 79 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 20 | servers..By.not.configuring.any. |
f47e0 | 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 20 79 6f 75 20 61 6c 73 6f 20 61 76 | upstream.DNS.servers.you.also.av |
f4800 | 6f 69 64 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 70 72 6f 76 69 64 65 | oid.being.tracked.by.the.provide |
f4820 | 72 20 6f 66 20 79 6f 75 72 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 00 54 | r.of.your.upstream.DNS.server..T |
f4840 | 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 | he.VyOS.DNS.forwarder.will.only. |
f4860 | 61 63 63 65 70 74 20 6c 6f 6f 6b 75 70 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 74 68 65 20 | accept.lookup.requests.from.the. |
f4880 | 4c 41 4e 20 73 75 62 6e 65 74 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 20 61 6e 64 | LAN.subnets.-.192.168.1.0/24.and |
f48a0 | 20 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 | .2001:db8::/64.The.VyOS.DNS.forw |
f48c0 | 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 | arder.will.only.listen.for.reque |
f48e0 | 73 74 73 20 6f 6e 20 74 68 65 20 65 74 68 31 20 28 4c 41 4e 29 20 69 6e 74 65 72 66 61 63 65 20 | sts.on.the.eth1.(LAN).interface. |
f4900 | 61 64 64 72 65 73 73 65 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 32 35 34 20 66 6f 72 20 49 50 | addresses.-.192.168.1.254.for.IP |
f4920 | 76 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 20 66 6f 72 20 49 50 76 36 00 54 | v4.and.2001:db8::ffff.for.IPv6.T |
f4940 | 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 70 61 73 73 20 | he.VyOS.DNS.forwarder.will.pass. |
f4960 | 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 20 31 30 2e 69 6e 2d 61 64 64 72 2e | reverse.lookups.for..10.in-addr. |
f4980 | 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 | arpa,.168.192.in-addr.arpa,.16-3 |
f49a0 | 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 7a 6f 6e 65 73 20 74 6f 20 75 70 73 74 | 1.172.in-addr.arpa.zones.to.upst |
f49c0 | 72 65 61 6d 20 73 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 50 4b 49 20 73 75 62 73 79 73 | ream.server..The.VyOS.PKI.subsys |
f49e0 | 74 65 6d 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 | tem.can.also.be.used.to.automati |
f4a00 | 63 61 6c 6c 79 20 72 65 74 72 69 65 76 65 20 43 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e | cally.retrieve.Certificates.usin |
f4a20 | 67 20 74 68 65 20 3a 61 62 62 72 3a 60 41 43 4d 45 20 28 41 75 74 6f 6d 61 74 69 63 20 43 65 72 | g.the.:abbr:`ACME.(Automatic.Cer |
f4a40 | 74 69 66 69 63 61 74 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 | tificate.Management.Environment) |
f4a60 | 60 20 70 72 6f 74 6f 63 6f 6c 2e 00 54 68 65 20 56 79 4f 53 20 63 6f 6e 74 61 69 6e 65 72 20 69 | `.protocol..The.VyOS.container.i |
f4a80 | 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 62 61 73 65 64 20 6f 6e 20 60 50 6f 64 6d 61 | mplementation.is.based.on.`Podma |
f4aa0 | 6e 3c 68 74 74 70 73 3a 2f 2f 70 6f 64 6d 61 6e 2e 69 6f 2f 3e 60 20 61 73 20 61 20 64 65 61 6d | n<https://podman.io/>`.as.a.deam |
f4ac0 | 6f 6e 6c 65 73 73 20 63 6f 6e 74 61 69 6e 65 72 20 65 6e 67 69 6e 65 2e 00 54 68 65 20 57 41 50 | onless.container.engine..The.WAP |
f4ae0 | 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 68 61 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | .in.this.example.has.the.followi |
f4b00 | 6e 67 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 3a 00 54 68 65 20 57 69 72 65 6c 65 73 73 | ng.characteristics:.The.Wireless |
f4b20 | 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f | .Wide-Area-Network.interface.pro |
f4b40 | 76 69 64 65 73 20 61 63 63 65 73 73 20 28 74 68 72 6f 75 67 68 20 61 20 77 69 72 65 6c 65 73 73 | vides.access.(through.a.wireless |
f4b60 | 20 6d 6f 64 65 6d 2f 77 77 61 6e 29 20 74 6f 20 77 69 72 65 6c 65 73 73 20 6e 65 74 77 6f 72 6b | .modem/wwan).to.wireless.network |
f4b80 | 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 76 61 72 69 6f 75 73 20 63 65 6c 6c 75 6c 61 72 20 70 | s.provided.by.various.cellular.p |
f4ba0 | 72 6f 76 69 64 65 72 73 2e 00 54 68 65 20 60 60 43 44 60 60 2d 62 69 74 20 69 73 20 68 6f 6e 6f | roviders..The.``CD``-bit.is.hono |
f4bc0 | 72 65 64 20 63 6f 72 72 65 63 74 6c 79 20 66 6f 72 20 70 72 6f 63 65 73 73 20 61 6e 64 20 76 61 | red.correctly.for.process.and.va |
f4be0 | 6c 69 64 61 74 65 2e 20 46 6f 72 20 6c 6f 67 2d 66 61 69 6c 2c 20 66 61 69 6c 75 72 65 73 20 77 | lidate..For.log-fail,.failures.w |
f4c00 | 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 74 6f 6f 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 | ill.be.logged.too..The.``address |
f4c20 | 60 60 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 69 74 68 65 72 20 6f 6e 20 74 | ``.can.be.configured.either.on.t |
f4c40 | 68 65 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 6f 6e 20 6e 6f 74 20 56 52 52 50 | he.VRRP.interface.or.on.not.VRRP |
f4c60 | 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 70 61 72 61 | .interface..The.``address``.para |
f4c80 | 6d 65 74 65 72 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 20 6f 72 20 49 | meter.can.be.either.an.IPv4.or.I |
f4ca0 | 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 6d 69 78 | Pv6.address,.but.you.can.not.mix |
f4cc0 | 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 69 6e 20 74 68 65 20 73 61 6d 65 20 67 72 6f 75 70 | .IPv4.and.IPv6.in.the.same.group |
f4ce0 | 2c 20 61 6e 64 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 67 72 6f 75 70 73 | ,.and.will.need.to.create.groups |
f4d00 | 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 56 52 49 44 73 20 73 70 65 63 69 61 6c 6c 79 20 | .with.different.VRIDs.specially. |
f4d20 | 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 | for.IPv4.and.IPv6..If.you.want.t |
f4d40 | 6f 20 75 73 65 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 20 79 6f 75 20 63 61 | o.use.IPv4.+.IPv6.address.you.ca |
f4d60 | 6e 20 75 73 65 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 | n.use.option.``excluded-address` |
f4d80 | 60 00 54 68 65 20 60 60 68 74 74 70 60 60 20 73 65 72 76 69 63 65 20 69 73 20 6c 65 73 74 65 6e | `.The.``http``.service.is.lesten |
f4da0 | 73 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 66 6f 72 63 65 20 72 65 64 69 72 65 63 74 73 | s.on.port.80.and.force.redirects |
f4dc0 | 20 66 72 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 2e 00 54 68 65 20 60 60 68 74 74 70 73 | .from.HTTP.to.HTTPS..The.``https |
f4de0 | 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 | ``.service.listens.on.port.443.w |
f4e00 | 69 74 68 20 62 61 63 6b 65 6e 64 20 60 62 6b 2d 64 65 66 61 75 6c 74 60 20 74 6f 20 68 61 6e 64 | ith.backend.`bk-default`.to.hand |
f4e20 | 6c 65 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 | le.HTTPS.traffic..It.uses.certif |
f4e40 | 69 63 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 | icate.named.``cert``.for.SSL.ter |
f4e60 | 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 | mination..The.``persistent-tunne |
f4e80 | 6c 60 60 20 64 69 72 65 63 74 69 76 65 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 | l``.directive.will.allow.us.to.c |
f4ea0 | 6f 6e 66 69 67 75 72 65 20 74 75 6e 6e 65 6c 2d 72 65 6c 61 74 65 64 20 61 74 74 72 69 62 75 74 | onfigure.tunnel-related.attribut |
f4ec0 | 65 73 2c 20 73 75 63 68 20 61 73 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 61 73 20 77 | es,.such.as.firewall.policy.as.w |
f4ee0 | 65 20 77 6f 75 6c 64 20 6f 6e 20 61 6e 79 20 6e 6f 72 6d 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e | e.would.on.any.normal.network.in |
f4f00 | 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 | terface..The.``source-address``. |
f4f20 | 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 6f 6e 65 20 6f 66 20 56 79 4f | must.be.configured.on.one.of.VyO |
f4f40 | 53 20 69 6e 74 65 72 66 61 63 65 2e 20 42 65 73 74 20 70 72 61 63 74 69 63 65 20 77 6f 75 6c 64 | S.interface..Best.practice.would |
f4f60 | 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 | .be.a.loopback.or.dummy.interfac |
f4f80 | 65 2e 00 54 68 65 20 60 73 68 6f 77 20 62 72 69 64 67 65 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c | e..The.`show.bridge`.operational |
f4fa0 | 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 | .command.can.be.used.to.display. |
f4fc0 | 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 73 3a 00 54 68 65 20 61 62 6f 76 65 20 64 69 | configured.bridges:.The.above.di |
f4fe0 | 72 65 63 74 6f 72 79 20 61 6e 64 20 64 65 66 61 75 6c 74 2d 63 6f 6e 66 69 67 20 6d 75 73 74 20 | rectory.and.default-config.must. |
f5000 | 62 65 20 61 20 63 68 69 6c 64 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 2f 63 6f 6e 66 69 67 2f | be.a.child.directory.of./config/ |
f5020 | 61 75 74 68 2c 20 73 69 6e 63 65 20 66 69 6c 65 73 20 6f 75 74 73 69 64 65 20 74 68 69 73 20 64 | auth,.since.files.outside.this.d |
f5040 | 69 72 65 63 74 6f 72 79 20 61 72 65 20 6e 6f 74 20 70 65 72 73 69 73 74 65 64 20 61 66 74 65 72 | irectory.are.not.persisted.after |
f5060 | 20 61 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 2e 00 54 68 65 20 61 63 74 69 6f 6e 20 63 61 | .an.image.upgrade..The.action.ca |
f5080 | 6e 20 62 65 20 3a 00 54 68 65 20 61 64 64 72 65 73 73 20 74 68 65 20 73 65 72 76 65 72 20 6c 69 | n.be.:.The.address.the.server.li |
f50a0 | 73 74 65 6e 73 20 74 6f 20 64 75 72 69 6e 67 20 68 74 74 70 2d 30 31 20 63 68 61 6c 6c 65 6e 67 | stens.to.during.http-01.challeng |
f50c0 | 65 00 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 | e.The.advantage.of.this.is.that. |
f50e0 | 74 68 65 20 72 6f 75 74 65 2d 73 65 6c 65 63 74 69 6f 6e 20 28 61 74 20 74 68 69 73 20 70 6f 69 | the.route-selection.(at.this.poi |
f5100 | 6e 74 29 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 64 65 74 65 72 6d 69 6e 69 73 74 69 63 2e 20 | nt).will.be.more.deterministic.. |
f5120 | 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 20 61 20 66 65 77 20 6f | The.disadvantage.is.that.a.few.o |
f5140 | 72 20 65 76 65 6e 20 6f 6e 65 20 6c 6f 77 65 73 74 2d 49 44 20 72 6f 75 74 65 72 20 6d 61 79 20 | r.even.one.lowest-ID.router.may. |
f5160 | 61 74 74 72 61 63 74 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 6f 74 68 65 72 77 69 73 65 | attract.all.traffic.to.otherwise |
f5180 | 2d 65 71 75 61 6c 20 70 61 74 68 73 20 62 65 63 61 75 73 65 20 6f 66 20 74 68 69 73 20 63 68 65 | -equal.paths.because.of.this.che |
f51a0 | 63 6b 2e 20 49 74 20 6d 61 79 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c | ck..It.may.increase.the.possibil |
f51c0 | 69 74 79 20 6f 66 20 4d 45 44 20 6f 72 20 49 47 50 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2c 20 75 | ity.of.MED.or.IGP.oscillation,.u |
f51e0 | 6e 6c 65 73 73 20 6f 74 68 65 72 20 6d 65 61 73 75 72 65 73 20 77 65 72 65 20 74 61 6b 65 6e 20 | nless.other.measures.were.taken. |
f5200 | 74 6f 20 61 76 6f 69 64 20 74 68 65 73 65 2e 20 54 68 65 20 65 78 61 63 74 20 62 65 68 61 76 69 | to.avoid.these..The.exact.behavi |
f5220 | 6f 75 72 20 77 69 6c 6c 20 62 65 20 73 65 6e 73 69 74 69 76 65 20 74 6f 20 74 68 65 20 69 42 47 | our.will.be.sensitive.to.the.iBG |
f5240 | 50 20 61 6e 64 20 72 65 66 6c 65 63 74 69 6f 6e 20 74 6f 70 6f 6c 6f 67 79 2e 00 54 68 65 20 61 | P.and.reflection.topology..The.a |
f5260 | 6c 6c 6f 63 61 74 65 64 20 61 64 64 72 65 73 73 20 62 6c 6f 63 6b 20 69 73 20 31 30 30 2e 36 34 | llocated.address.block.is.100.64 |
f5280 | 2e 30 2e 30 2f 31 30 2e 00 54 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 44 75 70 6c 69 63 61 74 65 | .0.0/10..The.amount.of.Duplicate |
f52a0 | 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 62 65 73 20 74 6f 20 73 65 6e | .Address.Detection.probes.to.sen |
f52c0 | 64 2e 00 54 68 65 20 61 74 74 72 69 62 75 74 65 73 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 | d..The.attributes.:cfgcmd:`prefi |
f52e0 | 78 2d 6c 69 73 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 74 72 69 62 75 74 65 2d | x-list`.and.:cfgcmd:`distribute- |
f5300 | 6c 69 73 74 60 20 61 72 65 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 2c 20 61 6e | list`.are.mutually.exclusive,.an |
f5320 | 64 20 6f 6e 6c 79 20 6f 6e 65 20 63 6f 6d 6d 61 6e 64 20 28 64 69 73 74 72 69 62 75 74 65 2d 6c | d.only.one.command.(distribute-l |
f5340 | 69 73 74 20 6f 72 20 70 72 65 66 69 78 2d 6c 69 73 74 29 20 63 61 6e 20 62 65 20 61 70 70 6c 69 | ist.or.prefix-list).can.be.appli |
f5360 | 65 64 20 74 6f 20 65 61 63 68 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 64 | ed.to.each.inbound.or.outbound.d |
f5380 | 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 | irection.for.a.particular.neighb |
f53a0 | 6f 72 2e 00 54 68 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 3c 6d | or..The.available.options.for.<m |
f53c0 | 61 74 63 68 3e 20 61 72 65 3a 00 54 68 65 20 62 65 6c 6f 77 20 72 65 66 65 72 65 6e 63 65 64 20 | atch>.are:.The.below.referenced. |
f53e0 | 49 50 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 30 2e 32 2e 31 60 20 69 73 20 75 73 65 64 20 61 | IP.address.`192.0.2.1`.is.used.a |
f5400 | 73 20 65 78 61 6d 70 6c 65 20 61 64 64 72 65 73 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 | s.example.address.representing.a |
f5420 | 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 75 6e 64 65 72 20 77 68 | .global.unicast.address.under.wh |
f5440 | 69 63 68 20 74 68 65 20 48 55 42 20 63 61 6e 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 62 79 20 | ich.the.HUB.can.be.contacted.by. |
f5460 | 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 2e | each.and.every.individual.spoke. |
f5480 | 00 54 68 65 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 | .The.bonding.interface.provides. |
f54a0 | 61 20 6d 65 74 68 6f 64 20 66 6f 72 20 61 67 67 72 65 67 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c | a.method.for.aggregating.multipl |
f54c0 | 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 | e.network.interfaces.into.a.sing |
f54e0 | 6c 65 20 6c 6f 67 69 63 61 6c 20 22 62 6f 6e 64 65 64 22 20 69 6e 74 65 72 66 61 63 65 2c 20 6f | le.logical."bonded".interface,.o |
f5500 | 72 20 4c 41 47 2c 20 6f 72 20 65 74 68 65 72 2d 63 68 61 6e 6e 65 6c 2c 20 6f 72 20 70 6f 72 74 | r.LAG,.or.ether-channel,.or.port |
f5520 | 2d 63 68 61 6e 6e 65 6c 2e 20 54 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 62 6f | -channel..The.behavior.of.the.bo |
f5540 | 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 | nded.interfaces.depends.upon.the |
f5560 | 20 6d 6f 64 65 3b 20 67 65 6e 65 72 61 6c 6c 79 20 73 70 65 61 6b 69 6e 67 2c 20 6d 6f 64 65 73 | .mode;.generally.speaking,.modes |
f5580 | 20 70 72 6f 76 69 64 65 20 65 69 74 68 65 72 20 68 6f 74 20 73 74 61 6e 64 62 79 20 6f 72 20 6c | .provide.either.hot.standby.or.l |
f55a0 | 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 73 65 72 76 69 63 65 73 2e 20 41 64 64 69 74 69 6f 6e | oad.balancing.services..Addition |
f55c0 | 61 6c 6c 79 2c 20 6c 69 6e 6b 20 69 6e 74 65 67 72 69 74 79 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 | ally,.link.integrity.monitoring. |
f55e0 | 6d 61 79 20 62 65 20 70 65 72 66 6f 72 6d 65 64 2e 00 54 68 65 20 63 61 73 65 20 6f 66 20 69 6e | may.be.performed..The.case.of.in |
f5600 | 67 72 65 73 73 20 73 68 61 70 69 6e 67 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 | gress.shaping.The.client,.once.s |
f5620 | 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 | uccessfully.authenticated,.will. |
f5640 | 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 | receive.an.IPv4.and.an.IPv6./64. |
f5660 | 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 | address.to.terminate.the.PPPoE.e |
f5680 | 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 | ndpoint.on.the.client.side.and.a |
f56a0 | 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 | ./56.subnet.for.the.clients.inte |
f56c0 | 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 | rnal.use..The.client,.once.succe |
f56e0 | 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 | ssfully.authenticated,.will.rece |
f5700 | 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 | ive.an.IPv4.and.an.IPv6./64.addr |
f5720 | 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 70 70 70 6f 65 20 65 6e 64 70 6f | ess.to.terminate.the.pppoe.endpo |
f5740 | 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 | int.on.the.client.side.and.a./56 |
f5760 | 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c | .subnet.for.the.clients.internal |
f5780 | 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 73 20 3a 61 62 62 72 3a 60 43 50 45 20 28 43 75 | .use..The.clients.:abbr:`CPE.(Cu |
f57a0 | 73 74 6f 6d 65 72 20 50 72 65 6d 69 73 65 73 20 45 71 75 69 70 6d 65 6e 74 29 60 20 63 61 6e 20 | stomer.Premises.Equipment)`.can. |
f57c0 | 6e 6f 77 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 76 69 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 | now.communicate.via.IPv4.or.IPv6 |
f57e0 | 2e 20 41 6c 6c 20 64 65 76 69 63 65 73 20 62 65 68 69 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a | ..All.devices.behind.``2001:db8: |
f5800 | 3a 61 30 30 3a 32 37 66 66 3a 66 65 32 66 3a 64 38 30 36 2f 36 34 60 60 20 63 61 6e 20 75 73 65 | :a00:27ff:fe2f:d806/64``.can.use |
f5820 | 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 32 30 30 31 3a 64 62 38 3a 31 3a 3a 2f 35 | .addresses.from.``2001:db8:1::/5 |
f5840 | 36 60 60 20 61 6e 64 20 63 61 6e 20 67 6c 6f 62 61 6c 6c 79 20 63 6f 6d 6d 75 6e 69 63 61 74 65 | 6``.and.can.globally.communicate |
f5860 | 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 61 6e 79 20 4e 41 54 20 72 75 6c | .without.the.need.of.any.NAT.rul |
f5880 | 65 73 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 | es..The.command.:opcmd:`show.int |
f58a0 | 65 72 66 61 63 65 73 20 77 69 72 65 67 75 61 72 64 20 77 67 30 31 20 70 75 62 6c 69 63 2d 6b 65 | erfaces.wireguard.wg01.public-ke |
f58c0 | 79 60 20 77 69 6c 6c 20 74 68 65 6e 20 73 68 6f 77 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 | y`.will.then.show.the.public.key |
f58e0 | 2c 20 77 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 | ,.which.needs.to.be.shared.with. |
f5900 | 74 68 65 20 70 65 65 72 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 67 65 6e 65 72 | the.peer..The.command.also.gener |
f5920 | 61 74 65 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 6e 69 70 70 65 64 20 77 68 69 | ates.a.configuration.snipped.whi |
f5940 | 63 68 20 63 61 6e 20 62 65 20 63 6f 70 79 2f 70 61 73 74 65 64 20 69 6e 74 6f 20 74 68 65 20 56 | ch.can.be.copy/pasted.into.the.V |
f5960 | 79 4f 53 20 43 4c 49 20 69 66 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 75 70 70 6c 69 65 64 20 | yOS.CLI.if.needed..The.supplied. |
f5980 | 60 60 3c 6e 61 6d 65 3e 60 60 20 6f 6e 20 74 68 65 20 43 4c 49 20 77 69 6c 6c 20 62 65 63 6f 6d | ``<name>``.on.the.CLI.will.becom |
f59a0 | 65 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 73 6e 69 70 70 65 74 2e 00 | e.the.peer.name.in.the.snippet.. |
f59c0 | 54 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 20 65 6e 61 62 6c 65 73 20 69 74 2c 20 61 73 | The.command.below.enables.it,.as |
f59e0 | 73 75 6d 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 68 61 73 | suming.the.RADIUS.connection.has |
f5a00 | 20 62 65 65 6e 20 73 65 74 75 70 20 61 6e 64 20 69 73 20 77 6f 72 6b 69 6e 67 2e 00 54 68 65 20 | .been.setup.and.is.working..The. |
f5a20 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 63 75 72 72 65 6e 74 20 52 49 50 20 73 74 61 | command.displays.current.RIP.sta |
f5a40 | 74 75 73 2e 20 49 74 20 69 6e 63 6c 75 64 65 73 20 52 49 50 20 74 69 6d 65 72 2c 20 66 69 6c 74 | tus..It.includes.RIP.timer,.filt |
f5a60 | 65 72 69 6e 67 2c 20 76 65 72 73 69 6f 6e 2c 20 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 | ering,.version,.RIP.enabled.inte |
f5a80 | 72 66 61 63 65 20 61 6e 64 20 52 49 50 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 | rface.and.RIP.peer.information.. |
f5aa0 | 54 68 65 20 63 6f 6d 6d 61 6e 64 20 70 6f 6e 20 54 45 53 54 55 4e 4e 45 4c 20 65 73 74 61 62 6c | The.command.pon.TESTUNNEL.establ |
f5ac0 | 69 73 68 65 73 20 74 68 65 20 50 50 54 50 20 74 75 6e 6e 65 6c 20 74 6f 20 74 68 65 20 72 65 6d | ishes.the.PPTP.tunnel.to.the.rem |
f5ae0 | 6f 74 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 6f 6d 70 75 74 65 72 73 20 6f 6e 20 61 6e 20 | ote.system..The.computers.on.an. |
f5b00 | 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6f 66 20 | internal.network.can.use.any.of. |
f5b20 | 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 65 74 20 61 73 69 64 65 20 62 79 20 74 68 65 20 3a | the.addresses.set.aside.by.the.: |
f5b40 | 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 | abbr:`IANA.(Internet.Assigned.Nu |
f5b60 | 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 | mbers.Authority)`.for.private.ad |
f5b80 | 64 72 65 73 73 69 6e 67 20 28 73 65 65 20 3a 72 66 63 3a 60 31 39 31 38 60 29 2e 20 54 68 65 73 | dressing.(see.:rfc:`1918`)..Thes |
f5ba0 | 65 20 72 65 73 65 72 76 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6e 6f 74 20 | e.reserved.IP.addresses.are.not. |
f5bc0 | 69 6e 20 75 73 65 20 6f 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 73 6f 20 61 6e 20 65 78 | in.use.on.the.Internet,.so.an.ex |
f5be0 | 74 65 72 6e 61 6c 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 | ternal.machine.will.not.directly |
f5c00 | 20 72 6f 75 74 65 20 74 6f 20 74 68 65 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 64 | .route.to.them..The.following.ad |
f5c20 | 64 72 65 73 73 65 73 20 61 72 65 20 72 65 73 65 72 76 65 64 20 66 6f 72 20 70 72 69 76 61 74 65 | dresses.are.reserved.for.private |
f5c40 | 20 75 73 65 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f | .use:.The.configuration.will.loo |
f5c60 | 6b 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 | k.as.follows:.The.configurations |
f5c80 | 20 61 62 6f 76 65 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f 20 75 73 69 6e 67 20 32 35 36 | .above.will.default.to.using.256 |
f5ca0 | 2d 62 69 74 20 41 45 53 20 69 6e 20 47 43 4d 20 6d 6f 64 65 20 66 6f 72 20 65 6e 63 72 79 70 74 | -bit.AES.in.GCM.mode.for.encrypt |
f5cc0 | 69 6f 6e 20 28 69 66 20 62 6f 74 68 20 73 69 64 65 73 20 73 75 70 70 6f 72 74 20 4e 43 50 29 20 | ion.(if.both.sides.support.NCP). |
f5ce0 | 61 6e 64 20 53 48 41 2d 31 20 66 6f 72 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | and.SHA-1.for.HMAC.authenticatio |
f5d00 | 6e 2e 20 53 48 41 2d 31 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 77 65 61 6b 2c 20 62 75 74 | n..SHA-1.is.considered.weak,.but |
f5d20 | 20 6f 74 68 65 72 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 61 72 65 20 61 76 | .other.hashing.algorithms.are.av |
f5d40 | 61 69 6c 61 62 6c 65 2c 20 61 73 20 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 | ailable,.as.are.encryption.algor |
f5d60 | 69 74 68 6d 73 3a 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 68 6f 77 65 | ithms:.The.connection.state.howe |
f5d80 | 76 65 72 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6f 66 | ver.is.completely.independent.of |
f5da0 | 20 61 6e 79 20 75 70 70 65 72 2d 6c 65 76 65 6c 20 73 74 61 74 65 2c 20 73 75 63 68 20 61 73 20 | .any.upper-level.state,.such.as. |
f5dc0 | 54 43 50 27 73 20 6f 72 20 53 43 54 50 27 73 20 73 74 61 74 65 2e 20 50 61 72 74 20 6f 66 20 74 | TCP's.or.SCTP's.state..Part.of.t |
f5de0 | 68 65 20 72 65 61 73 6f 6e 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 68 61 74 20 77 68 65 6e 20 | he.reason.for.this.is.that.when. |
f5e00 | 6d 65 72 65 6c 79 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 69 2e 65 2e 20 | merely.forwarding.packets,.i.e.. |
f5e20 | 6e 6f 20 6c 6f 63 61 6c 20 64 65 6c 69 76 65 72 79 2c 20 74 68 65 20 54 43 50 20 65 6e 67 69 6e | no.local.delivery,.the.TCP.engin |
f5e40 | 65 20 6d 61 79 20 6e 6f 74 20 6e 65 63 65 73 73 61 72 69 6c 79 20 62 65 20 69 6e 76 6f 6b 65 64 | e.may.not.necessarily.be.invoked |
f5e60 | 20 61 74 20 61 6c 6c 2e 20 45 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 2d 6d 6f 64 | .at.all..Even.connectionless-mod |
f5e80 | 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 73 75 63 68 20 61 73 20 55 44 50 2c 20 49 50 73 | e.transmissions.such.as.UDP,.IPs |
f5ea0 | 65 63 20 28 41 48 2f 45 53 50 29 2c 20 47 52 45 20 61 6e 64 20 6f 74 68 65 72 20 74 75 6e 6e 65 | ec.(AH/ESP),.GRE.and.other.tunne |
f5ec0 | 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 76 65 2c 20 61 74 20 6c 65 61 73 74 2c 20 61 | ling.protocols.have,.at.least,.a |
f5ee0 | 20 70 73 65 75 64 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 65 20 68 65 | .pseudo.connection.state..The.he |
f5f00 | 75 72 69 73 74 69 63 20 66 6f 72 20 73 75 63 68 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 6f 66 | uristic.for.such.protocols.is.of |
f5f20 | 74 65 6e 20 62 61 73 65 64 20 75 70 6f 6e 20 61 20 70 72 65 73 65 74 20 74 69 6d 65 6f 75 74 20 | ten.based.upon.a.preset.timeout. |
f5f40 | 76 61 6c 75 65 20 66 6f 72 20 69 6e 61 63 74 69 76 69 74 79 2c 20 61 66 74 65 72 20 77 68 6f 73 | value.for.inactivity,.after.whos |
f5f60 | 65 20 65 78 70 69 72 61 74 69 6f 6e 20 61 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 | e.expiration.a.Netfilter.connect |
f5f80 | 69 6f 6e 20 69 73 20 64 72 6f 70 70 65 64 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | ion.is.dropped..The.connection.t |
f5fa0 | 72 61 63 6b 69 6e 67 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e | racking.expect.table.contains.on |
f5fc0 | 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 65 78 70 65 63 74 65 64 20 63 6f 6e 6e 65 63 | e.entry.for.each.expected.connec |
f5fe0 | 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 6e | tion.related.to.an.existing.conn |
f6000 | 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 75 73 65 64 | ection..These.are.generally.used |
f6020 | 20 62 79 20 e2 80 9c 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 65 6c 70 65 | .by....connection.tracking.helpe |
f6040 | 72 e2 80 9d 20 6d 6f 64 75 6c 65 73 20 73 75 63 68 20 61 73 20 46 54 50 2e 20 54 68 65 20 64 65 | r....modules.such.as.FTP..The.de |
f6060 | 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 69 | fault.size.of.the.expect.table.i |
f6080 | 73 20 32 30 34 38 20 65 6e 74 72 69 65 73 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | s.2048.entries..The.connection.t |
f60a0 | 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 | racking.table.contains.one.entry |
f60c0 | 20 66 6f 72 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 69 6e 67 20 74 72 61 63 6b | .for.each.connection.being.track |
f60e0 | 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 | ed.by.the.system..The.current.at |
f6100 | 74 72 69 62 75 74 65 20 27 46 69 6c 74 65 72 2d 49 64 27 20 69 73 20 62 65 69 6e 67 20 75 73 65 | tribute.'Filter-Id'.is.being.use |
f6120 | 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 | d.as.default.and.can.be.setup.wi |
f6140 | 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 | thin.RADIUS:.The.current.attribu |
f6160 | 74 65 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 | te.``Filter-Id``.is.being.used.a |
f6180 | 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 | s.default.and.can.be.setup.withi |
f61a0 | 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 20 69 | n.RADIUS:.The.current.protocol.i |
f61c0 | 73 20 76 65 72 73 69 6f 6e 20 34 20 28 4e 54 50 76 34 29 2c 20 77 68 69 63 68 20 69 73 20 61 20 | s.version.4.(NTPv4),.which.is.a. |
f61e0 | 70 72 6f 70 6f 73 65 64 20 73 74 61 6e 64 61 72 64 20 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 | proposed.standard.as.documented. |
f6200 | 69 6e 20 3a 72 66 63 3a 60 35 39 30 35 60 2e 20 49 74 20 69 73 20 62 61 63 6b 77 61 72 64 20 63 | in.:rfc:`5905`..It.is.backward.c |
f6220 | 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 76 65 72 73 69 6f 6e 20 33 2c 20 73 70 65 63 69 66 | ompatible.with.version.3,.specif |
f6240 | 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 33 30 35 60 2e 00 54 68 65 20 64 61 65 6d 6f 6e 20 64 | ied.in.:rfc:`1305`..The.daemon.d |
f6260 | 6f 75 62 6c 65 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e 65 74 6c 69 6e 6b 20 65 | oubles.the.size.of.the.netlink.e |
f6280 | 76 65 6e 74 20 73 6f 63 6b 65 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 69 66 20 69 74 20 64 65 | vent.socket.buffer.size.if.it.de |
f62a0 | 74 65 63 74 73 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 6d 65 73 73 61 67 65 20 64 72 6f 70 | tects.netlink.event.message.drop |
f62c0 | 70 69 6e 67 2e 20 54 68 69 73 20 63 6c 61 75 73 65 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d | ping..This.clause.sets.the.maxim |
f62e0 | 75 6d 20 62 75 66 66 65 72 20 73 69 7a 65 20 67 72 6f 77 74 68 20 74 68 61 74 20 63 61 6e 20 62 | um.buffer.size.growth.that.can.b |
f6300 | 65 20 72 65 61 63 68 65 64 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 52 41 44 49 55 53 20 61 74 | e.reached..The.default.RADIUS.at |
f6320 | 74 72 69 62 75 74 65 20 66 6f 72 20 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 69 73 20 60 60 46 | tribute.for.rate.limiting.is.``F |
f6340 | 69 6c 74 65 72 2d 49 64 60 60 2c 20 62 75 74 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 72 65 64 | ilter-Id``,.but.you.may.also.red |
f6360 | 65 66 69 6e 65 20 69 74 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 56 79 4f 53 20 75 73 65 72 20 | efine.it..The.default.VyOS.user. |
f6380 | 61 63 63 6f 75 6e 74 20 28 60 76 79 6f 73 60 29 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 6e 65 77 | account.(`vyos`),.as.well.as.new |
f63a0 | 6c 79 20 63 72 65 61 74 65 64 20 75 73 65 72 20 61 63 63 6f 75 6e 74 73 2c 20 68 61 76 65 20 61 | ly.created.user.accounts,.have.a |
f63c0 | 6c 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | ll.capabilities.to.configure.the |
f63e0 | 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 61 63 63 6f 75 6e 74 73 20 68 61 76 65 20 73 75 64 6f 20 | .system..All.accounts.have.sudo. |
f6400 | 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 63 61 6e 20 6f | capabilities.and.therefore.can.o |
f6420 | 70 65 72 61 74 65 20 61 73 20 72 6f 6f 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 | perate.as.root.on.the.system..Th |
f6440 | 65 20 64 65 66 61 75 6c 74 20 68 6f 73 74 6e 61 6d 65 20 75 73 65 64 20 69 73 20 60 76 79 6f 73 | e.default.hostname.used.is.`vyos |
f6460 | 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 34 39 32 2e 00 54 68 65 20 64 65 66 61 | `..The.default.is.1492..The.defa |
f6480 | 75 6c 74 20 6c 65 61 73 65 20 74 69 6d 65 20 66 6f 72 20 44 48 43 50 76 36 20 6c 65 61 73 65 73 | ult.lease.time.for.DHCPv6.leases |
f64a0 | 20 69 73 20 32 34 20 68 6f 75 72 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 | .is.24.hours..This.can.be.change |
f64c0 | 64 20 62 79 20 73 75 70 70 6c 79 69 6e 67 20 61 20 60 60 64 65 66 61 75 6c 74 2d 74 69 6d 65 60 | d.by.supplying.a.``default-time` |
f64e0 | 60 2c 20 60 60 6d 61 78 69 6d 75 6d 2d 74 69 6d 65 60 60 20 61 6e 64 20 60 60 6d 69 6e 69 6d 75 | `,.``maximum-time``.and.``minimu |
f6500 | 6d 2d 74 69 6d 65 60 60 2e 20 41 6c 6c 20 76 61 6c 75 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 | m-time``..All.values.need.to.be. |
f6520 | 73 75 70 70 6c 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 | supplied.in.seconds..The.default |
f6540 | 20 70 6f 72 74 20 75 64 70 20 69 73 20 73 65 74 20 74 6f 20 38 34 37 32 2e 20 49 74 20 63 61 6e | .port.udp.is.set.to.8472..It.can |
f6560 | 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 68 20 60 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 | .be.changed.with.``set.interface |
f6580 | 20 76 78 6c 61 6e 20 3c 76 78 6c 61 6e 4e 3e 20 70 6f 72 74 20 3c 70 6f 72 74 3e 60 60 00 54 68 | .vxlan.<vxlanN>.port.<port>``.Th |
f65a0 | 65 20 64 65 66 61 75 6c 74 20 74 69 6d 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 | e.default.time.is.60.seconds..Th |
f65c0 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 36 | e.default.value.corresponds.to.6 |
f65e0 | 34 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 20 54 68 69 73 20 | 4..The.default.value.is.0..This. |
f6600 | 77 69 6c 6c 20 63 61 75 73 65 20 74 68 65 20 63 61 72 72 69 65 72 20 74 6f 20 62 65 20 61 73 73 | will.cause.the.carrier.to.be.ass |
f6620 | 65 72 74 65 64 20 28 66 6f 72 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 29 20 77 68 65 6e 65 76 65 | erted.(for.802.3ad.mode).wheneve |
f6640 | 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 2c | r.there.is.an.active.aggregator, |
f6660 | 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 76 61 | .regardless.of.the.number.of.ava |
f6680 | 69 6c 61 62 6c 65 20 6c 69 6e 6b 73 20 69 6e 20 74 68 61 74 20 61 67 67 72 65 67 61 74 6f 72 2e | ilable.links.in.that.aggregator. |
f66a0 | 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 20 70 61 63 6b 65 74 73 2e | .The.default.value.is.3.packets. |
f66c0 | 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 54 68 65 20 64 65 66 | .The.default.value.is.3..The.def |
f66e0 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 | ault.value.is.300.seconds..The.d |
f6700 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 | efault.value.is.600.seconds..The |
f6720 | 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 37 32 30 30 20 73 65 63 6f 6e 64 73 2e 00 | .default.value.is.7200.seconds.. |
f6740 | 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 38 36 34 30 30 20 73 65 63 6f 6e | The.default.value.is.86400.secon |
f6760 | 64 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 6f 6e 65 20 64 61 79 2e | ds.which.corresponds.to.one.day. |
f6780 | 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 73 6c 6f 77 2e 00 54 68 65 20 | .The.default.value.is.slow..The. |
f67a0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 73 20 66 6f 72 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2d 74 | default.values.for.the.minimum-t |
f67c0 | 68 72 65 73 68 6f 6c 64 20 64 65 70 65 6e 64 20 6f 6e 20 49 50 20 70 72 65 63 65 64 65 6e 63 65 | hreshold.depend.on.IP.precedence |
f67e0 | 3a 00 54 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 | :.The.destination.port.used.for. |
f6800 | 63 72 65 61 74 69 6e 67 20 61 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 | creating.a.VXLAN.interface.in.Li |
f6820 | 6e 75 78 20 64 65 66 61 75 6c 74 73 20 74 6f 20 69 74 73 20 70 72 65 2d 73 74 61 6e 64 61 72 64 | nux.defaults.to.its.pre-standard |
f6840 | 20 76 61 6c 75 65 20 6f 66 20 38 34 37 32 20 74 6f 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 | .value.of.8472.to.preserve.backw |
f6860 | 61 72 64 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 41 20 63 6f 6e 66 69 67 75 72 61 74 69 | ard.compatibility..A.configurati |
f6880 | 6f 6e 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 73 75 70 70 6f 72 74 20 61 20 75 73 65 72 2d 73 | on.directive.to.support.a.user-s |
f68a0 | 70 65 63 69 66 69 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 74 6f 20 6f 76 65 | pecified.destination.port.to.ove |
f68c0 | 72 72 69 64 65 20 74 68 61 74 20 62 65 68 61 76 69 6f 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 | rride.that.behavior.is.available |
f68e0 | 20 75 73 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 64 65 | .using.the.above.command..The.de |
f6900 | 76 69 63 65 20 63 61 6e 20 6f 6e 6c 79 20 72 65 63 65 69 76 65 20 70 61 63 6b 65 74 73 20 77 69 | vice.can.only.receive.packets.wi |
f6920 | 74 68 20 56 4e 49 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 74 68 65 20 56 4e 49 20 66 69 | th.VNIs.configured.in.the.VNI.fi |
f6940 | 6c 74 65 72 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 | ltering.table..The.dialogue.betw |
f6960 | 65 65 6e 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 | een.failover.partners.is.neither |
f6980 | 20 65 6e 63 72 79 70 74 65 64 20 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 | .encrypted.nor.authenticated..Si |
f69a0 | 6e 63 65 20 6d 6f 73 74 20 44 48 43 50 20 73 65 72 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 | nce.most.DHCP.servers.exist.with |
f69c0 | 69 6e 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 | in.an.organisation's.own.secure. |
f69e0 | 49 6e 74 72 61 6e 65 74 2c 20 74 68 69 73 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 | Intranet,.this.would.be.an.unnec |
f6a00 | 65 73 73 61 72 79 20 6f 76 65 72 68 65 61 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 | essary.overhead..However,.if.you |
f6a20 | 20 68 61 76 65 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 73 20 77 68 6f 73 65 20 | .have.DHCP.failover.peers.whose. |
f6a40 | 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 | communications.traverse.insecure |
f6a60 | 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 | .networks,.then.we.recommend.tha |
f6a80 | 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 | t.you.consider.the.use.of.VPN.tu |
f6aa0 | 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 | nneling.between.them.to.ensure.t |
f6ac0 | 68 61 74 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 | hat.the.failover.partnership.is. |
f6ae0 | 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c | immune.to.disruption.(accidental |
f6b00 | 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 | .or.otherwise).via.third.parties |
f6b20 | 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 | ..The.domain-name.parameter.shou |
f6b40 | 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 68 61 74 20 77 69 6c 6c 20 | ld.be.the.domain.name.that.will. |
f6b60 | 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 68 6f 73 74 | be.appended.to.the.client's.host |
f6b80 | 6e 61 6d 65 20 74 6f 20 66 6f 72 6d 20 61 20 66 75 6c 6c 79 2d 71 75 61 6c 69 66 69 65 64 20 64 | name.to.form.a.fully-qualified.d |
f6ba0 | 6f 6d 61 69 6e 2d 6e 61 6d 65 20 28 46 51 44 4e 29 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 30 | omain-name.(FQDN).(DHCP.Option.0 |
f6bc0 | 31 35 29 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 | 15)..The.domain-name.parameter.s |
f6be0 | 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 75 73 65 64 20 77 68 | hould.be.the.domain.name.used.wh |
f6c00 | 65 6e 20 63 6f 6d 70 6c 65 74 69 6e 67 20 44 4e 53 20 72 65 71 75 65 73 74 20 77 68 65 72 65 20 | en.completing.DNS.request.where. |
f6c20 | 6e 6f 20 66 75 6c 6c 20 46 51 44 4e 20 69 73 20 70 61 73 73 65 64 2e 20 54 68 69 73 20 6f 70 74 | no.full.FQDN.is.passed..This.opt |
f6c40 | 69 6f 6e 20 63 61 6e 20 62 65 20 67 69 76 65 6e 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 | ion.can.be.given.multiple.times. |
f6c60 | 69 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 73 65 61 72 63 68 20 64 6f 6d 61 | if.you.need.multiple.search.doma |
f6c80 | 69 6e 73 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 31 31 39 29 2e 00 54 68 65 20 64 75 6d 6d 79 | ins.(DHCP.Option.119)..The.dummy |
f6ca0 | 20 69 6e 74 65 72 66 61 63 65 20 61 6c 6c 6f 77 73 20 75 73 20 74 6f 20 68 61 76 65 20 61 6e 20 | .interface.allows.us.to.have.an. |
f6cc0 | 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 43 69 73 63 6f 20 49 4f 53 20 4c 6f 6f 70 | equivalent.of.the.Cisco.IOS.Loop |
f6ce0 | 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 2d 20 61 20 72 6f 75 74 65 72 2d 69 6e 74 65 72 6e | back.interface.-.a.router-intern |
f6d00 | 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 65 20 63 61 6e 20 75 73 65 20 66 6f 72 20 49 50 20 61 | al.interface.we.can.use.for.IP.a |
f6d20 | 64 64 72 65 73 73 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 6d 75 73 74 20 6b 6e 6f 77 20 61 62 | ddresses.the.router.must.know.ab |
f6d40 | 6f 75 74 2c 20 62 75 74 20 77 68 69 63 68 20 61 72 65 20 6e 6f 74 20 61 63 74 75 61 6c 6c 79 20 | out,.but.which.are.not.actually. |
f6d60 | 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 | assigned.to.a.real.network..The. |
f6d80 | 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 61 20 6c 69 74 74 | dummy.interface.is.really.a.litt |
f6da0 | 6c 65 20 65 78 6f 74 69 63 2c 20 62 75 74 20 72 61 74 68 65 72 20 75 73 65 66 75 6c 20 6e 65 76 | le.exotic,.but.rather.useful.nev |
f6dc0 | 65 72 74 68 65 6c 65 73 73 2e 20 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 | ertheless..Dummy.interfaces.are. |
f6de0 | 6d 75 63 68 20 6c 69 6b 65 20 74 68 65 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 | much.like.the.:ref:`loopback-int |
f6e00 | 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2c 20 65 78 63 65 70 74 20 79 6f 75 20 63 61 | erface`.interface,.except.you.ca |
f6e20 | 6e 20 68 61 76 65 20 61 73 20 6d 61 6e 79 20 61 73 20 79 6f 75 20 77 61 6e 74 2e 00 54 68 65 20 | n.have.as.many.as.you.want..The. |
f6e40 | 65 6d 62 65 64 64 65 64 20 53 71 75 69 64 20 70 72 6f 78 79 20 63 61 6e 20 75 73 65 20 4c 44 41 | embedded.Squid.proxy.can.use.LDA |
f6e60 | 50 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 61 67 61 69 6e 73 74 20 | P.to.authenticate.users.against. |
f6e80 | 61 20 63 6f 6d 70 61 6e 79 20 77 69 64 65 20 64 69 72 65 63 74 6f 72 79 2e 20 54 68 65 20 66 6f | a.company.wide.directory..The.fo |
f6ea0 | 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6e 20 65 78 61 6d | llowing.configuration.is.an.exam |
f6ec0 | 70 6c 65 20 6f 66 20 68 6f 77 20 74 6f 20 75 73 65 20 41 63 74 69 76 65 20 44 69 72 65 63 74 6f | ple.of.how.to.use.Active.Directo |
f6ee0 | 72 79 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 51 75 | ry.as.authentication.backend..Qu |
f6f00 | 65 72 69 65 73 20 61 72 65 20 64 6f 6e 65 20 76 69 61 20 4c 44 41 50 2e 00 54 68 65 20 65 78 61 | eries.are.done.via.LDAP..The.exa |
f6f20 | 6d 70 6c 65 20 61 62 6f 76 65 20 75 73 65 73 20 31 39 32 2e 30 2e 32 2e 32 20 61 73 20 65 78 74 | mple.above.uses.192.0.2.2.as.ext |
f6f40 | 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e 20 41 20 4c 41 43 20 6e 6f 72 6d 61 6c 6c 79 | ernal.IP.address..A.LAC.normally |
f6f60 | 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 | .requires.an.authentication.pass |
f6f80 | 77 6f 72 64 2c 20 77 68 69 63 68 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c | word,.which.is.set.in.the.exampl |
f6fa0 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 60 60 6c 6e 73 20 73 68 61 72 65 64 2d | e.configuration.to.``lns.shared- |
f6fc0 | 73 65 63 72 65 74 20 27 73 65 63 72 65 74 27 60 60 2e 20 54 68 69 73 20 73 65 74 75 70 20 72 65 | secret.'secret'``..This.setup.re |
f6fe0 | 71 75 69 72 65 73 20 74 68 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 | quires.the.Compression.Control.P |
f7000 | 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 20 62 65 69 6e 67 20 64 69 73 61 62 6c 65 64 2c 20 74 68 | rotocol.(CCP).being.disabled,.th |
f7020 | 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 76 70 6e 20 6c 32 74 70 20 72 65 6d 6f 74 65 2d | e.command.``set.vpn.l2tp.remote- |
f7040 | 61 63 63 65 73 73 20 63 63 70 2d 64 69 73 61 62 6c 65 60 60 20 61 63 63 6f 6d 70 6c 69 73 68 65 | access.ccp-disable``.accomplishe |
f7060 | 73 20 74 68 61 74 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 | s.that..The.example.below.covers |
f7080 | 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 | .a.dual-stack.configuration.via. |
f70a0 | 70 70 70 6f 65 2d 73 65 72 76 65 72 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 | pppoe-server..The.example.below. |
f70c0 | 63 6f 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | covers.a.dual-stack.configuratio |
f70e0 | 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 75 73 65 73 20 41 43 4e 20 61 73 | n..The.example.below.uses.ACN.as |
f7100 | 20 61 63 63 65 73 73 2d 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 6e 61 6d 65 2c 20 61 73 73 69 67 | .access-concentrator.name,.assig |
f7120 | 6e 73 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 31 30 2e 31 | ns.an.address.from.the.pool.10.1 |
f7140 | 2e 31 2e 31 30 30 2d 31 31 31 2c 20 74 65 72 6d 69 6e 61 74 65 73 20 61 74 20 74 68 65 20 6c 6f | .1.100-111,.terminates.at.the.lo |
f7160 | 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 31 30 2e 31 2e 31 2e 31 20 61 6e 64 20 73 65 72 76 65 73 | cal.endpoint.10.1.1.1.and.serves |
f7180 | 20 72 65 71 75 65 73 74 73 20 6f 6e 6c 79 20 6f 6e 20 65 74 68 31 2e 00 54 68 65 20 65 78 61 6d | .requests.only.on.eth1..The.exam |
f71a0 | 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 20 77 69 6c 6c 20 61 73 73 | ple.configuration.below.will.ass |
f71c0 | 69 67 6e 20 61 6e 20 49 50 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 69 | ign.an.IP.to.the.client.on.the.i |
f71e0 | 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 32 20 77 69 74 68 20 74 68 65 20 | ncoming.interface.eth2.with.the. |
f7200 | 63 6c 69 65 6e 74 20 6d 61 63 20 61 64 64 72 65 73 73 20 30 38 3a 30 30 3a 32 37 3a 32 66 3a 64 | client.mac.address.08:00:27:2f:d |
f7220 | 38 3a 30 36 2e 20 4f 74 68 65 72 20 44 48 43 50 20 64 69 73 63 6f 76 65 72 79 20 72 65 71 75 65 | 8:06..Other.DHCP.discovery.reque |
f7240 | 73 74 73 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 | sts.will.be.ignored,.unless.the. |
f7260 | 63 6c 69 65 6e 74 20 6d 61 63 20 68 61 73 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 | client.mac.has.been.enabled.in.t |
f7280 | 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 72 | he.configuration..The.example.cr |
f72a0 | 65 61 74 65 73 20 61 20 77 69 72 65 6c 65 73 73 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d 6d 6f 6e | eates.a.wireless.station.(common |
f72c0 | 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 29 20 | ly.referred.to.as.Wi-Fi.client). |
f72e0 | 74 68 61 74 20 61 63 63 65 73 73 65 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 | that.accesses.the.network.throug |
f7300 | 68 20 74 68 65 20 57 41 50 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 61 62 6f 76 65 20 65 | h.the.WAP.defined.in.the.above.e |
f7320 | 78 61 6d 70 6c 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 68 79 73 69 63 61 6c 20 64 65 76 | xample..The.default.physical.dev |
f7340 | 69 63 65 20 28 60 60 70 68 79 30 60 60 29 20 69 73 20 75 73 65 64 2e 00 54 68 65 20 65 78 74 65 | ice.(``phy0``).is.used..The.exte |
f7360 | 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 00 | rnal.IP.address.to.translate.to. |
f7380 | 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 | The.firewall.supports.the.creati |
f73a0 | 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f 72 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 | on.of.groups.for.addresses,.doma |
f73c0 | 69 6e 73 2c 20 69 6e 74 65 72 66 61 63 65 73 2c 20 6d 61 63 2d 61 64 64 72 65 73 73 65 73 2c 20 | ins,.interfaces,.mac-addresses,. |
f73e0 | 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 6f 72 74 20 67 72 6f 75 70 73 2e 20 54 68 69 73 20 67 | networks.and.port.groups..This.g |
f7400 | 72 6f 75 70 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6c 61 74 65 72 20 69 6e 20 66 69 72 65 77 | roups.can.be.used.later.in.firew |
f7420 | 61 6c 6c 20 72 75 6c 65 73 65 74 20 61 73 20 64 65 73 69 72 65 64 2e 00 54 68 65 20 66 69 72 65 | all.ruleset.as.desired..The.fire |
f7440 | 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 | wall.supports.the.creation.of.gr |
f7460 | 6f 75 70 73 20 66 6f 72 20 70 6f 72 74 73 2c 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 6e | oups.for.ports,.addresses,.and.n |
f7480 | 65 74 77 6f 72 6b 73 20 28 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 6e 65 74 66 69 | etworks.(implemented.using.netfi |
f74a0 | 6c 74 65 72 20 69 70 73 65 74 29 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 69 6e | lter.ipset).and.the.option.of.in |
f74c0 | 74 65 72 66 61 63 65 20 6f 72 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 70 | terface.or.zone.based.firewall.p |
f74e0 | 6f 6c 69 63 79 2e 00 54 68 65 20 66 69 72 73 74 20 49 50 20 69 6e 20 74 68 65 20 63 6f 6e 74 61 | olicy..The.first.IP.in.the.conta |
f7500 | 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 69 73 20 72 65 73 65 72 76 65 64 20 62 79 20 74 68 65 20 | iner.network.is.reserved.by.the. |
f7520 | 65 6e 67 69 6e 65 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 00 54 68 65 20 66 69 | engine.and.cannot.be.used.The.fi |
f7540 | 72 73 74 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 20 60 60 63 | rst.address.of.the.parameter.``c |
f7560 | 6c 69 65 6e 74 2d 73 75 62 6e 65 74 60 60 2c 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 | lient-subnet``,.will.be.used.as. |
f7580 | 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 2e 20 43 6f 6e 6e 65 63 74 65 64 20 73 | the.default.gateway..Connected.s |
f75a0 | 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 20 74 68 65 20 60 | essions.can.be.checked.via.the.` |
f75c0 | 60 73 68 6f 77 20 69 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 20 63 6f 6d | `show.ipoe-server.sessions``.com |
f75e0 | 6d 61 6e 64 2e 00 54 68 65 20 66 69 72 73 74 20 61 6e 64 20 61 72 67 75 61 62 6c 79 20 63 6c 65 | mand..The.first.and.arguably.cle |
f7600 | 61 6e 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 49 50 73 65 | aner.option.is.to.make.your.IPse |
f7620 | 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 20 47 52 45 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 | c.policy.match.GRE.packets.betwe |
f7640 | 65 6e 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 79 6f 75 72 20 72 6f | en.external.addresses.of.your.ro |
f7660 | 75 74 65 72 73 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 62 65 73 74 20 6f 70 74 69 6f 6e 20 69 | uters..This.is.the.best.option.i |
f7680 | 66 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 68 61 76 65 20 73 74 61 74 69 63 20 65 78 74 65 72 | f.both.routers.have.static.exter |
f76a0 | 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 69 72 73 74 20 66 6c 6f 77 20 63 6f | nal.addresses..The.first.flow.co |
f76c0 | 6e 74 72 6f 6c 20 6d 65 63 68 61 6e 69 73 6d 2c 20 74 68 65 20 70 61 75 73 65 20 66 72 61 6d 65 | ntrol.mechanism,.the.pause.frame |
f76e0 | 2c 20 77 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 45 45 45 20 38 30 32 2e 33 78 | ,.was.defined.by.the.IEEE.802.3x |
f7700 | 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 66 69 72 73 74 20 69 70 20 61 64 64 72 65 73 73 20 | .standard..The.first.ip.address. |
f7720 | 69 73 20 74 68 65 20 52 50 27 73 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 73 65 63 6f | is.the.RP's.address.and.the.seco |
f7740 | 6e 64 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 | nd.value.is.the.matching.prefix. |
f7760 | 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 00 54 68 65 20 66 69 72 | of.group.ranges.covered..The.fir |
f7780 | 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 69 73 20 73 65 6e 74 20 | st.registration.request.is.sent. |
f77a0 | 74 6f 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 62 72 6f 61 64 63 61 73 74 20 61 64 64 72 65 73 | to.the.protocol.broadcast.addres |
f77c0 | 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 27 73 20 72 65 61 6c 20 70 72 6f 74 6f 63 6f | s,.and.the.server's.real.protoco |
f77e0 | 6c 20 61 64 64 72 65 73 73 20 69 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 64 65 74 65 63 74 65 | l.address.is.dynamically.detecte |
f7800 | 64 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 | d.from.the.first.registration.re |
f7820 | 70 6c 79 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 | ply..The.following.PPP.configura |
f7840 | 74 69 6f 6e 20 74 65 73 74 73 20 4d 53 43 48 41 50 2d 76 32 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 | tion.tests.MSCHAP-v2:.The.follow |
f7860 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 67 65 6e 65 72 | ing.command.can.be.used.to.gener |
f7880 | 61 74 65 20 74 68 65 20 4f 54 50 20 6b 65 79 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 43 | ate.the.OTP.key.as.well.as.the.C |
f78a0 | 4c 49 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 3a 00 54 | LI.commands.to.configure.them:.T |
f78c0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 68 65 20 65 78 | he.following.command.uses.the.ex |
f78e0 | 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 66 6f 72 20 61 6c 6c 20 | plicit-null.label.value.for.all. |
f7900 | 74 68 65 20 42 47 50 20 69 6e 73 74 61 6e 63 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | the.BGP.instances..The.following |
f7920 | 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 20 63 68 65 63 6b 20 74 75 6e 6e 65 6c 20 73 | .commands.let.you.check.tunnel.s |
f7940 | 74 61 74 75 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 | tatus..The.following.commands.le |
f7960 | 74 20 79 6f 75 20 72 65 73 65 74 20 4f 70 65 6e 56 50 4e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | t.you.reset.OpenVPN..The.followi |
f7980 | 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 2d 6e 65 74 20 | ng.commands.translate.to."--net. |
f79a0 | 68 6f 73 74 22 20 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 | host".when.the.container.is.crea |
f79c0 | 74 65 64 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 | ted.The.following.commands.would |
f79e0 | 20 62 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 74 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 | .be.required.to.set.options.for. |
f7a00 | 61 20 67 69 76 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | a.given.dynamic.routing.protocol |
f7a20 | 20 69 6e 73 69 64 65 20 61 20 67 69 76 65 6e 20 76 72 66 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | .inside.a.given.vrf:.The.followi |
f7a40 | 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 6d 6f 6e 73 74 72 61 74 65 73 20 68 6f | ng.configuration.demonstrates.ho |
f7a60 | 77 20 74 6f 20 75 73 65 20 56 79 4f 53 20 74 6f 20 61 63 68 69 65 76 65 20 6c 6f 61 64 20 62 61 | w.to.use.VyOS.to.achieve.load.ba |
f7a80 | 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 | lancing.based.on.the.domain.name |
f7aa0 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 | ..The.following.configuration.ex |
f7ac0 | 70 6c 69 63 69 74 6c 79 20 6a 6f 69 6e 73 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 | plicitly.joins.multicast.group.` |
f7ae0 | 66 66 31 35 3a 3a 31 32 33 34 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 | ff15::1234`.on.interface.`eth1`. |
f7b00 | 61 6e 64 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 | and.source-specific.multicast.gr |
f7b20 | 6f 75 70 20 60 66 66 31 35 3a 3a 35 36 37 38 60 20 77 69 74 68 20 73 6f 75 72 63 65 20 61 64 64 | oup.`ff15::5678`.with.source.add |
f7b40 | 72 65 73 73 20 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 | ress.`2001:db8::1`.on.interface. |
f7b60 | 60 65 74 68 31 60 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 | `eth1`:.The.following.configurat |
f7b80 | 69 6f 6e 20 6f 6e 20 56 79 4f 53 20 61 70 70 6c 69 65 73 20 74 6f 20 61 6c 6c 20 66 6f 6c 6c 6f | ion.on.VyOS.applies.to.all.follo |
f7ba0 | 77 69 6e 67 20 33 72 64 20 70 61 72 74 79 20 76 65 6e 64 6f 72 73 2e 20 49 74 20 63 72 65 61 74 | wing.3rd.party.vendors..It.creat |
f7bc0 | 65 73 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 6c 69 6e 6b 73 20 61 6e 64 20 56 4c 41 | es.a.bond.with.two.links.and.VLA |
f7be0 | 4e 20 31 30 2c 20 31 30 30 20 6f 6e 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 | N.10,.100.on.the.bonded.interfac |
f7c00 | 65 73 20 77 69 74 68 20 61 20 70 65 72 20 56 49 46 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 | es.with.a.per.VIF.IPv4.address.. |
f7c20 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 76 65 | The.following.configuration.reve |
f7c40 | 72 73 65 2d 70 72 6f 78 79 20 74 65 72 6d 69 6e 61 74 65 20 53 53 4c 2e 00 54 68 65 20 66 6f 6c | rse-proxy.terminate.SSL..The.fol |
f7c60 | 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 61 73 73 69 67 6e | lowing.configuration.will.assign |
f7c80 | 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 67 | .a./64.prefix.out.of.a./56.deleg |
f7ca0 | 61 74 69 6f 6e 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | ation.to.eth0..The.IPv6.address. |
f7cc0 | 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 | assigned.to.eth0.will.be.<prefix |
f7ce0 | 3e 3a 3a 66 66 66 66 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 | >::ffff/64..If.you.do.not.know.t |
f7d00 | 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c | he.prefix.size.delegated.to.you, |
f7d20 | 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f | .start.with.sla-len.0..The.follo |
f7d40 | 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 73 65 74 75 70 20 61 20 | wing.configuration.will.setup.a. |
f7d60 | 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 73 6f 75 72 63 65 20 66 72 6f 6d 20 65 74 68 31 20 61 | PPPoE.session.source.from.eth1.a |
f7d80 | 6e 64 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 | nd.assign.a./64.prefix.out.of.a. |
f7da0 | 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 28 72 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 74 | /56.delegation.(requested.from.t |
f7dc0 | 68 65 20 49 53 50 29 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 | he.ISP).to.eth0..The.IPv6.addres |
f7de0 | 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 | s.assigned.to.eth0.will.be.<pref |
f7e00 | 69 78 3e 3a 3a 31 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 | ix>::1/64..If.you.do.not.know.th |
f7e20 | 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 | e.prefix.size.delegated.to.you,. |
f7e40 | 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 | start.with.sla-len.0..The.follow |
f7e60 | 69 6e 67 20 65 78 61 6d 70 6c 65 20 61 6c 6c 6f 77 73 20 56 79 4f 53 20 74 6f 20 75 73 65 20 3a | ing.example.allows.VyOS.to.use.: |
f7e80 | 61 62 62 72 3a 60 50 42 52 20 28 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 29 | abbr:`PBR.(Policy-Based.Routing) |
f7ea0 | 60 20 66 6f 72 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 6f 72 69 67 69 6e 61 74 65 64 20 | `.for.traffic,.which.originated. |
f7ec0 | 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 61 74 20 73 6f 6c | from.the.router.itself..That.sol |
f7ee0 | 75 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 27 73 20 61 6e 64 20 56 79 4f | ution.for.multiple.ISP's.and.VyO |
f7f00 | 53 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 66 72 6f 6d 20 74 68 65 20 73 | S.router.will.respond.from.the.s |
f7f20 | 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 | ame.interface.that.the.packet.wa |
f7f40 | 73 20 72 65 63 65 69 76 65 64 2e 20 41 6c 73 6f 2c 20 69 74 20 75 73 65 64 2c 20 69 66 20 77 65 | s.received..Also,.it.used,.if.we |
f7f60 | 20 77 61 6e 74 20 74 68 61 74 20 6f 6e 65 20 56 50 4e 20 74 75 6e 6e 65 6c 20 74 6f 20 62 65 20 | .want.that.one.VPN.tunnel.to.be. |
f7f80 | 74 68 72 6f 75 67 68 20 6f 6e 65 20 70 72 6f 76 69 64 65 72 2c 20 61 6e 64 20 74 68 65 20 73 65 | through.one.provider,.and.the.se |
f7fa0 | 63 6f 6e 64 20 74 68 72 6f 75 67 68 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 | cond.through.another..The.follow |
f7fc0 | 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 20 57 41 50 2e 20 57 68 65 6e 20 | ing.example.creates.a.WAP..When. |
f7fe0 | 63 6f 6e 66 69 67 75 72 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 57 41 50 20 69 6e 74 65 72 66 61 | configuring.multiple.WAP.interfa |
f8000 | 63 65 73 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 75 6e 69 71 75 65 20 49 50 20 | ces,.you.must.specify.unique.IP. |
f8020 | 61 64 64 72 65 73 73 65 73 2c 20 63 68 61 6e 6e 65 6c 73 2c 20 4e 65 74 77 6f 72 6b 20 49 44 73 | addresses,.channels,.Network.IDs |
f8040 | 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 | .commonly.referred.to.as.:abbr:` |
f8060 | 53 53 49 44 20 28 53 65 72 76 69 63 65 20 53 65 74 20 49 64 65 6e 74 69 66 69 65 72 29 60 2c 20 | SSID.(Service.Set.Identifier)`,. |
f8080 | 61 6e 64 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | and.MAC.addresses..The.following |
f80a0 | 20 65 78 61 6d 70 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 53 69 65 72 72 61 20 57 69 | .example.is.based.on.a.Sierra.Wi |
f80c0 | 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 6f 6e 6c | reless.MC7710.miniPCIe.card.(onl |
f80e0 | 79 20 74 68 65 20 66 6f 72 6d 20 66 61 63 74 6f 72 20 69 6e 20 72 65 61 6c 69 74 79 20 69 74 20 | y.the.form.factor.in.reality.it. |
f8100 | 72 75 6e 73 20 55 42 53 29 20 61 6e 64 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 61 | runs.UBS).and.Deutsche.Telekom.a |
f8120 | 73 20 49 53 50 2e 20 54 68 65 20 63 61 72 64 20 69 73 20 61 73 73 65 6d 62 6c 65 64 20 69 6e 74 | s.ISP..The.card.is.assembled.int |
f8140 | 6f 20 61 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 2e 00 54 68 65 20 | o.a.:ref:`pc-engines-apu4`..The. |
f8160 | 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 | following.example.topology.was.b |
f8180 | 75 69 6c 74 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | uilt.using.EVE-NG..The.following |
f81a0 | 20 65 78 61 6d 70 6c 65 20 77 69 6c 6c 20 73 68 6f 77 20 68 6f 77 20 56 79 4f 53 20 63 61 6e 20 | .example.will.show.how.VyOS.can. |
f81c0 | 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 69 72 65 63 74 20 77 65 62 20 74 72 61 66 66 69 63 20 | be.used.to.redirect.web.traffic. |
f81e0 | 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 | to.an.external.transparent.proxy |
f8200 | 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 73 20 73 68 6f 77 20 68 6f | :.The.following.examples.show.ho |
f8220 | 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 4e 41 54 36 34 20 6f 6e 20 61 20 56 79 4f 53 20 72 | w.to.configure.NAT64.on.a.VyOS.r |
f8240 | 6f 75 74 65 72 2e 20 54 68 65 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 69 73 | outer..The.192.0.2.10.address.is |
f8260 | 20 75 73 65 64 20 61 73 20 74 68 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 | .used.as.the.IPv4.address.for.th |
f8280 | 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 6f 6c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | e.translation.pool..The.followin |
f82a0 | 67 20 68 61 72 64 77 61 72 65 20 6d 6f 64 75 6c 65 73 20 68 61 76 65 20 62 65 65 6e 20 74 65 73 | g.hardware.modules.have.been.tes |
f82c0 | 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 69 6e 20 61 6e 20 3a 72 65 66 3a 60 70 63 2d | ted.successfully.in.an.:ref:`pc- |
f82e0 | 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 20 62 6f 61 72 64 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | engines-apu4`.board:.The.followi |
f8300 | 6e 67 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 20 66 6f 72 20 74 68 65 20 69 50 68 6f 6e 65 20 | ng.is.the.config.for.the.iPhone. |
f8320 | 70 65 65 72 20 61 62 6f 76 65 2e 20 49 74 27 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f | peer.above..It's.important.to.no |
f8340 | 74 65 20 74 68 61 74 20 74 68 65 20 60 60 41 6c 6c 6f 77 65 64 49 50 73 60 60 20 77 69 6c 64 63 | te.that.the.``AllowedIPs``.wildc |
f8360 | 61 72 64 20 73 65 74 74 69 6e 67 20 64 69 72 65 63 74 73 20 61 6c 6c 20 49 50 76 34 20 61 6e 64 | ard.setting.directs.all.IPv4.and |
f8380 | 20 49 50 76 36 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 65 20 63 6f 6e 6e 65 63 | .IPv6.traffic.through.the.connec |
f83a0 | 74 69 6f 6e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 | tion..The.following.protocols.ca |
f83c0 | 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e | n.be.used:.any,.babel,.bgp,.conn |
f83e0 | 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 | ected,.eigrp,.isis,.kernel,.ospf |
f8400 | 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | ,.rip,.static,.table.The.followi |
f8420 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 | ng.protocols.can.be.used:.any,.b |
f8440 | 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e | abel,.bgp,.connected,.isis,.kern |
f8460 | 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 | el,.ospfv3,.ripng,.static,.table |
f8480 | 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 72 75 63 74 75 72 65 20 72 65 73 70 72 65 73 | .The.following.structure.respres |
f84a0 | 65 6e 74 20 74 68 65 20 63 6c 69 20 73 74 72 75 63 74 75 72 65 2e 00 54 68 65 20 66 6f 72 6d 75 | ent.the.cli.structure..The.formu |
f84c0 | 6c 61 20 66 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 61 6e 64 20 55 44 50 20 | la.for.unfragmented.TCP.and.UDP. |
f84e0 | 70 61 63 6b 65 74 73 20 69 73 00 54 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 | packets.is.The.forwarding.delay. |
f8500 | 74 69 6d 65 20 69 73 20 74 68 65 20 74 69 6d 65 20 73 70 65 6e 74 20 69 6e 20 65 61 63 68 20 6f | time.is.the.time.spent.in.each.o |
f8520 | 66 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 6e 64 20 6c 65 61 72 6e 69 6e 67 20 73 74 61 | f.the.listening.and.learning.sta |
f8540 | 74 65 73 20 62 65 66 6f 72 65 20 74 68 65 20 46 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 65 20 | tes.before.the.Forwarding.state. |
f8560 | 69 73 20 65 6e 74 65 72 65 64 2e 20 54 68 69 73 20 64 65 6c 61 79 20 69 73 20 73 6f 20 74 68 61 | is.entered..This.delay.is.so.tha |
f8580 | 74 20 77 68 65 6e 20 61 20 6e 65 77 20 62 72 69 64 67 65 20 63 6f 6d 65 73 20 6f 6e 74 6f 20 61 | t.when.a.new.bridge.comes.onto.a |
f85a0 | 20 62 75 73 79 20 6e 65 74 77 6f 72 6b 20 69 74 20 6c 6f 6f 6b 73 20 61 74 20 73 6f 6d 65 20 74 | .busy.network.it.looks.at.some.t |
f85c0 | 72 61 66 66 69 63 20 62 65 66 6f 72 65 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 2e 00 54 68 65 | raffic.before.participating..The |
f85e0 | 20 67 65 6e 65 72 61 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f | .generated.configuration.will.lo |
f8600 | 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 70 61 72 61 6d 65 74 65 72 | ok.like:.The.generated.parameter |
f8620 | 73 20 61 72 65 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 | s.are.then.output.to.the.console |
f8640 | 2e 00 54 68 65 20 67 65 6e 65 72 69 63 20 6e 61 6d 65 20 6f 66 20 51 75 61 6c 69 74 79 20 6f 66 | ..The.generic.name.of.Quality.of |
f8660 | 20 53 65 72 76 69 63 65 20 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 69 6e 76 6f | .Service.or.Traffic.Control.invo |
f8680 | 6c 76 65 73 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 73 68 61 70 69 6e 67 20 74 72 61 66 66 69 63 | lves.things.like.shaping.traffic |
f86a0 | 2c 20 73 63 68 65 64 75 6c 69 6e 67 20 6f 72 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 | ,.scheduling.or.dropping.packets |
f86c0 | 2c 20 77 68 69 63 68 20 61 72 65 20 74 68 65 20 6b 69 6e 64 20 6f 66 20 74 68 69 6e 67 73 20 79 | ,.which.are.the.kind.of.things.y |
f86e0 | 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 70 6c 61 79 20 77 69 74 68 20 77 68 65 6e 20 79 6f | ou.may.want.to.play.with.when.yo |
f8700 | 75 20 68 61 76 65 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 62 61 6e 64 77 69 64 74 | u.have,.for.instance,.a.bandwidt |
f8720 | 68 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 6e 20 61 20 6c 69 6e 6b 20 61 6e 64 20 79 6f 75 20 77 | h.bottleneck.in.a.link.and.you.w |
f8740 | 61 6e 74 20 74 6f 20 73 6f 6d 65 68 6f 77 20 70 72 69 6f 72 69 74 69 7a 65 20 73 6f 6d 65 20 74 | ant.to.somehow.prioritize.some.t |
f8760 | 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 | ype.of.traffic.over.another..The |
f8780 | 20 68 61 73 68 20 74 79 70 65 20 75 73 65 64 20 77 68 65 6e 20 64 69 73 63 6f 76 65 72 69 6e 67 | .hash.type.used.when.discovering |
f87a0 | 20 66 69 6c 65 20 6f 6e 20 6d 61 73 74 65 72 20 73 65 72 76 65 72 20 28 64 65 66 61 75 6c 74 3a | .file.on.master.server.(default: |
f87c0 | 20 73 68 61 32 35 36 29 00 54 68 65 20 68 65 61 6c 74 68 20 6f 66 20 69 6e 74 65 72 66 61 63 65 | .sha256).The.health.of.interface |
f87e0 | 73 20 61 6e 64 20 70 61 74 68 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 6c 6f 61 64 | s.and.paths.assigned.to.the.load |
f8800 | 20 62 61 6c 61 6e 63 65 72 20 69 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 65 | .balancer.is.periodically.checke |
f8820 | 64 20 62 79 20 73 65 6e 64 69 6e 67 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 28 70 69 6e 67 29 | d.by.sending.ICMP.packets.(ping) |
f8840 | 20 74 6f 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2c 20 61 20 54 54 4c 20 74 | .to.remote.destinations,.a.TTL.t |
f8860 | 65 73 74 20 6f 72 20 74 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 61 20 75 73 65 72 20 64 | est.or.the.execution.of.a.user.d |
f8880 | 65 66 69 6e 65 64 20 73 63 72 69 70 74 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 66 | efined.script..If.an.interface.f |
f88a0 | 61 69 6c 73 20 74 68 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 74 20 69 73 20 72 65 6d 6f | ails.the.health.check.it.is.remo |
f88c0 | 76 65 64 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 70 6f 6f | ved.from.the.load.balancer's.poo |
f88e0 | 6c 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 65 6e 61 62 6c 65 20 68 65 61 6c 74 | l.of.interfaces..To.enable.healt |
f8900 | 68 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 | h.checking.for.an.interface:.The |
f8920 | 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 73 70 65 63 69 66 69 65 73 20 68 6f 77 20 | .hello-multiplier.specifies.how. |
f8940 | 6d 61 6e 79 20 48 65 6c 6c 6f 73 20 74 6f 20 73 65 6e 64 20 70 65 72 20 73 65 63 6f 6e 64 2c 20 | many.Hellos.to.send.per.second,. |
f8960 | 66 72 6f 6d 20 31 20 28 65 76 65 72 79 20 73 65 63 6f 6e 64 29 20 74 6f 20 31 30 20 28 65 76 65 | from.1.(every.second).to.10.(eve |
f8980 | 72 79 20 31 30 30 6d 73 29 2e 20 54 68 75 73 20 6f 6e 65 20 63 61 6e 20 68 61 76 65 20 31 73 20 | ry.100ms)..Thus.one.can.have.1s. |
f89a0 | 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 20 66 6f 72 20 4f 53 50 46 2e 20 49 66 20 74 68 | convergence.time.for.OSPF..If.th |
f89c0 | 69 73 20 66 6f 72 6d 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 68 | is.form.is.specified,.then.the.h |
f89e0 | 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 20 48 65 6c 6c | ello-interval.advertised.in.Hell |
f8a00 | 6f 20 70 61 63 6b 65 74 73 20 69 73 20 73 65 74 20 74 6f 20 30 20 61 6e 64 20 74 68 65 20 68 65 | o.packets.is.set.to.0.and.the.he |
f8a20 | 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 6f 6e 20 72 65 63 65 69 76 65 64 20 48 65 6c 6c 6f 20 70 | llo-interval.on.received.Hello.p |
f8a40 | 61 63 6b 65 74 73 20 69 73 20 6e 6f 74 20 63 68 65 63 6b 65 64 2c 20 74 68 75 73 20 74 68 65 20 | ackets.is.not.checked,.thus.the. |
f8a60 | 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 6e 65 65 64 20 4e 4f 54 20 62 65 20 74 68 65 | hello-multiplier.need.NOT.be.the |
f8a80 | 20 73 61 6d 65 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 72 73 20 6f 6e | .same.across.multiple.routers.on |
f8aa0 | 20 61 20 63 6f 6d 6d 6f 6e 20 6c 69 6e 6b 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 63 61 6e | .a.common.link..The.hostname.can |
f8ac0 | 20 62 65 20 75 70 20 74 6f 20 36 33 20 63 68 61 72 61 63 74 65 72 73 2e 20 41 20 68 6f 73 74 6e | .be.up.to.63.characters..A.hostn |
f8ae0 | 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 | ame.must.start.and.end.with.a.le |
f8b00 | 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 | tter.or.digit,.and.have.as.inter |
f8b20 | 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 | ior.characters.only.letters,.dig |
f8b40 | 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 6f | its,.or.a.hyphen..The.hostname.o |
f8b60 | 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6d 61 73 74 65 72 00 54 68 65 20 69 | r.IP.address.of.the.master.The.i |
f8b80 | 64 65 6e 74 69 66 69 65 72 20 69 73 20 74 68 65 20 64 65 76 69 63 65 27 73 20 44 55 49 44 3a 20 | dentifier.is.the.device's.DUID:. |
f8ba0 | 63 6f 6c 6f 6e 2d 73 65 70 61 72 61 74 65 64 20 68 65 78 20 6c 69 73 74 20 28 61 73 20 75 73 65 | colon-separated.hex.list.(as.use |
f8bc0 | 64 20 62 79 20 69 73 63 2d 64 68 63 70 20 6f 70 74 69 6f 6e 20 64 68 63 70 76 36 2e 63 6c 69 65 | d.by.isc-dhcp.option.dhcpv6.clie |
f8be0 | 6e 74 2d 69 64 29 2e 20 49 66 20 74 68 65 20 64 65 76 69 63 65 20 61 6c 72 65 61 64 79 20 68 61 | nt-id)..If.the.device.already.ha |
f8c00 | 73 20 61 20 64 79 6e 61 6d 69 63 20 6c 65 61 73 65 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 76 | s.a.dynamic.lease.from.the.DHCPv |
f8c20 | 36 20 73 65 72 76 65 72 2c 20 69 74 73 20 44 55 49 44 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 | 6.server,.its.DUID.can.be.found. |
f8c40 | 77 69 74 68 20 60 60 73 68 6f 77 20 73 65 72 76 69 63 65 20 64 68 63 70 76 36 20 73 65 72 76 65 | with.``show.service.dhcpv6.serve |
f8c60 | 72 20 6c 65 61 73 65 73 60 60 2e 20 54 68 65 20 44 55 49 44 20 62 65 67 69 6e 73 20 61 74 20 74 | r.leases``..The.DUID.begins.at.t |
f8c80 | 68 65 20 35 74 68 20 6f 63 74 65 74 20 28 61 66 74 65 72 20 74 68 65 20 34 74 68 20 63 6f 6c 6f | he.5th.octet.(after.the.4th.colo |
f8ca0 | 6e 29 20 6f 66 20 49 41 49 44 5f 44 55 49 44 2e 00 54 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 | n).of.IAID_DUID..The.individual. |
f8cc0 | 73 70 6f 6b 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 6f 6e 6c 79 20 64 69 66 66 65 72 | spoke.configurations.only.differ |
f8ce0 | 20 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 | .in.the.local.IP.address.on.the. |
f8d00 | 60 60 74 75 6e 31 30 60 60 20 69 6e 74 65 72 66 61 63 65 2e 20 53 65 65 20 74 68 65 20 61 62 6f | ``tun10``.interface..See.the.abo |
f8d20 | 76 65 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 50 | ve.diagram.for.the.individual.IP |
f8d40 | 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 69 6e 6e 65 72 20 74 61 67 20 69 73 20 74 68 65 | .addresses..The.inner.tag.is.the |
f8d60 | 20 74 61 67 20 77 68 69 63 68 20 69 73 20 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 70 61 79 | .tag.which.is.closest.to.the.pay |
f8d80 | 6c 6f 61 64 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 66 72 61 6d 65 2e 20 49 74 20 69 73 | load.portion.of.the.frame..It.is |
f8da0 | 20 6f 66 66 69 63 69 61 6c 6c 79 20 63 61 6c 6c 65 64 20 43 2d 54 41 47 20 28 63 75 73 74 6f 6d | .officially.called.C-TAG.(custom |
f8dc0 | 65 72 20 74 61 67 2c 20 77 69 74 68 20 65 74 68 65 72 74 79 70 65 20 30 78 38 31 30 30 29 2e 20 | er.tag,.with.ethertype.0x8100).. |
f8de0 | 54 68 65 20 6f 75 74 65 72 20 74 61 67 20 69 73 20 74 68 65 20 6f 6e 65 20 63 6c 6f 73 65 72 2f | The.outer.tag.is.the.one.closer/ |
f8e00 | 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 68 65 61 64 65 72 2c 20 | closest.to.the.Ethernet.header,. |
f8e20 | 69 74 73 20 6e 61 6d 65 20 69 73 20 53 2d 54 41 47 20 28 73 65 72 76 69 63 65 20 74 61 67 20 77 | its.name.is.S-TAG.(service.tag.w |
f8e40 | 69 74 68 20 45 74 68 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 38 61 38 29 2e 00 54 68 65 | ith.Ethernet.Type.=.0x88a8)..The |
f8e60 | 20 69 6e 74 65 72 66 61 63 65 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 63 6f 6d 69 6e | .interface.traffic.will.be.comin |
f8e80 | 67 20 69 6e 20 6f 6e 3b 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 72 | g.in.on;.The.interface.used.to.r |
f8ea0 | 65 63 65 69 76 65 20 61 6e 64 20 72 65 6c 61 79 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 6f 61 | eceive.and.relay.individual.broa |
f8ec0 | 64 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 | dcast.packets..If.you.want.to.re |
f8ee0 | 63 65 69 76 65 2f 72 65 6c 61 79 20 70 61 63 6b 65 74 73 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 | ceive/relay.packets.on.both.`eth |
f8f00 | 31 60 20 61 6e 64 20 60 65 74 68 32 60 20 62 6f 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 | 1`.and.`eth2`.both.interfaces.ne |
f8f20 | 65 64 20 74 6f 20 62 65 20 61 64 64 65 64 2e 00 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 | ed.to.be.added..The.internal.IP. |
f8f40 | 61 64 64 72 65 73 73 65 73 20 77 65 20 77 61 6e 74 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 00 54 | addresses.we.want.to.translate.T |
f8f60 | 68 65 20 69 6e 76 65 72 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 68 61 73 20 74 6f 20 | he.inverse.configuration.has.to. |
f8f80 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 54 | be.applied.to.the.remote.side..T |
f8fa0 | 68 65 20 6c 61 72 67 65 73 74 20 4d 54 55 20 73 69 7a 65 20 79 6f 75 20 63 61 6e 20 75 73 65 20 | he.largest.MTU.size.you.can.use. |
f8fc0 | 77 69 74 68 20 44 53 4c 20 69 73 20 31 34 39 32 20 64 75 65 20 74 6f 20 50 50 50 6f 45 20 6f 76 | with.DSL.is.1492.due.to.PPPoE.ov |
f8fe0 | 65 72 68 65 61 64 2e 20 49 66 20 79 6f 75 20 61 72 65 20 73 77 69 74 63 68 69 6e 67 20 66 72 6f | erhead..If.you.are.switching.fro |
f9000 | 6d 20 61 20 44 48 43 50 20 62 61 73 65 64 20 49 53 50 20 6c 69 6b 65 20 63 61 62 6c 65 20 74 68 | m.a.DHCP.based.ISP.like.cable.th |
f9020 | 65 6e 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 56 50 4e | en.be.aware.that.things.like.VPN |
f9040 | 20 6c 69 6e 6b 73 20 6d 61 79 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 74 68 65 69 72 20 4d 54 | .links.may.need.to.have.their.MT |
f9060 | 55 20 73 69 7a 65 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 69 6e 20 | U.sizes.adjusted.to.work.within. |
f9080 | 74 68 69 73 20 6c 69 6d 69 74 2e 00 54 68 65 20 6c 61 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 | this.limit..The.last.step.is.to. |
f90a0 | 64 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 6f 75 74 65 20 66 6f 72 20 31 39 | define.an.interface.route.for.19 |
f90c0 | 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 74 6f 20 67 65 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 | 2.168.2.0/24.to.get.through.the. |
f90e0 | 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 2e 20 4d 75 6c 74 | WireGuard.interface.`wg01`..Mult |
f9100 | 69 70 6c 65 20 49 50 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 63 61 6e 20 62 65 20 64 65 66 69 | iple.IPs.or.networks.can.be.defi |
f9120 | 6e 65 64 20 61 6e 64 20 72 6f 75 74 65 64 2e 20 54 68 65 20 6c 61 73 74 20 63 68 65 63 6b 20 69 | ned.and.routed..The.last.check.i |
f9140 | 73 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 77 68 69 63 68 20 65 69 74 68 65 72 20 70 72 65 76 65 | s.allowed-ips.which.either.preve |
f9160 | 6e 74 73 20 6f 72 20 61 6c 6c 6f 77 73 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 54 68 65 20 6c | nts.or.allows.the.traffic..The.l |
f9180 | 65 67 61 63 79 20 61 6e 64 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f | egacy.and.zone-based.firewall.co |
f91a0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 69 73 20 6e 6f 74 20 6c 6f 6e 67 65 | nfiguration.options.is.not.longe |
f91c0 | 72 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 79 20 61 72 65 20 68 65 72 65 20 66 6f 72 20 72 | r.supported..They.are.here.for.r |
f91e0 | 65 66 65 72 65 6e 63 65 20 70 75 72 70 6f 73 65 73 20 6f 6e 6c 79 2e 00 54 68 65 20 6c 69 6d 69 | eference.purposes.only..The.limi |
f9200 | 74 65 72 20 70 65 72 66 6f 72 6d 73 20 62 61 73 69 63 20 69 6e 67 72 65 73 73 20 70 6f 6c 69 63 | ter.performs.basic.ingress.polic |
f9220 | 69 6e 67 20 6f 66 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2e 20 4d 75 6c 74 69 70 6c 65 20 63 | ing.of.traffic.flows..Multiple.c |
f9240 | 6c 61 73 73 65 73 20 6f 66 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 | lasses.of.traffic.can.be.defined |
f9260 | 20 61 6e 64 20 74 72 61 66 66 69 63 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 | .and.traffic.limits.can.be.appli |
f9280 | 65 64 20 74 6f 20 65 61 63 68 20 63 6c 61 73 73 2e 20 41 6c 74 68 6f 75 67 68 20 74 68 65 20 70 | ed.to.each.class..Although.the.p |
f92a0 | 6f 6c 69 63 65 72 20 75 73 65 73 20 61 20 74 6f 6b 65 6e 20 62 75 63 6b 65 74 20 6d 65 63 68 61 | olicer.uses.a.token.bucket.mecha |
f92c0 | 6e 69 73 6d 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 | nism.internally,.it.does.not.hav |
f92e0 | 65 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 74 6f 20 64 65 6c 61 79 20 61 20 70 61 63 6b | e.the.capability.to.delay.a.pack |
f9300 | 65 74 20 61 73 20 61 20 73 68 61 70 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 64 6f 65 73 2e 20 | et.as.a.shaping.mechanism.does.. |
f9320 | 54 72 61 66 66 69 63 20 65 78 63 65 65 64 69 6e 67 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 | Traffic.exceeding.the.defined.ba |
f9340 | 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 73 20 69 73 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 | ndwidth.limits.is.directly.dropp |
f9360 | 65 64 2e 20 41 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 75 72 73 74 20 63 61 6e 20 | ed..A.maximum.allowed.burst.can. |
f9380 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 6f 2e 00 54 68 65 20 6c 69 6e 6b 20 62 61 6e 64 | be.configured.too..The.link.band |
f93a0 | 77 69 64 74 68 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 69 73 20 65 6e 63 6f | width.extended.community.is.enco |
f93c0 | 64 65 64 20 61 73 20 6e 6f 6e 2d 74 72 61 6e 73 69 74 69 76 65 00 54 68 65 20 6c 6f 63 61 6c 20 | ded.as.non-transitive.The.local. |
f93e0 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 69 6e 64 20 74 | IPv4.or.IPv6.addresses.to.bind.t |
f9400 | 68 65 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 74 6f 2e 20 54 68 65 20 66 6f 72 77 61 72 64 | he.DNS.forwarder.to..The.forward |
f9420 | 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 | er.will.listen.on.this.address.f |
f9440 | 6f 72 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 6c 6f 63 | or.incoming.connections..The.loc |
f9460 | 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 | al.IPv4.or.IPv6.addresses.to.use |
f9480 | 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 | .as.a.source.address.for.sending |
f94a0 | 20 71 75 65 72 69 65 73 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 73 65 6e | .queries..The.forwarder.will.sen |
f94c0 | 64 20 66 6f 72 77 61 72 64 65 64 20 6f 75 74 62 6f 75 6e 64 20 44 4e 53 20 72 65 71 75 65 73 74 | d.forwarded.outbound.DNS.request |
f94e0 | 73 20 66 72 6f 6d 20 74 68 69 73 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 73 | s.from.this.address..The.local.s |
f9500 | 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 30 2e 30 | ite.will.have.a.subnet.of.10.0.0 |
f9520 | 2e 30 2f 31 36 2e 00 54 68 65 20 6c 6f 6f 70 62 61 63 6b 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 | .0/16..The.loopback.networking.i |
f9540 | 6e 74 65 72 66 61 63 65 20 69 73 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 | nterface.is.a.virtual.network.de |
f9560 | 76 69 63 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 65 6e 74 69 72 65 6c 79 20 69 6e 20 73 6f 66 | vice.implemented.entirely.in.sof |
f9580 | 74 77 61 72 65 2e 20 41 6c 6c 20 74 72 61 66 66 69 63 20 73 65 6e 74 20 74 6f 20 69 74 20 22 6c | tware..All.traffic.sent.to.it."l |
f95a0 | 6f 6f 70 73 20 62 61 63 6b 22 20 61 6e 64 20 6a 75 73 74 20 74 61 72 67 65 74 73 20 73 65 72 76 | oops.back".and.just.targets.serv |
f95c0 | 69 63 65 73 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2e 00 54 68 65 20 | ices.on.your.local.machine..The. |
f95e0 | 6d 61 69 6e 20 70 6f 69 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 | main.points.regarding.this.packe |
f9600 | 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 | t.flow.and.terminology.used.in.V |
f9620 | 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 61 72 65 20 63 6f 76 65 72 65 64 20 62 65 6c 6f 77 3a 00 | yOS.firewall.are.covered.below:. |
f9640 | 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c | The.main.structure.VyOS.firewall |
f9660 | 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 | .cli.is.shown.next:.The.main.str |
f9680 | 75 63 74 75 72 65 20 6f 66 20 74 68 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 | ucture.of.the.VyOS.firewall.CLI. |
f96a0 | 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 | is.shown.next:.The.maximum.numbe |
f96c0 | 72 20 6f 66 20 74 61 72 67 65 74 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 | r.of.targets.that.can.be.specifi |
f96e0 | 65 64 20 69 73 20 31 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 6e | ed.is.16..The.default.value.is.n |
f9700 | 6f 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 | o.IP.address..The.meaning.of.the |
f9720 | 20 43 6c 61 73 73 20 49 44 20 69 73 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 65 76 | .Class.ID.is.not.the.same.for.ev |
f9740 | 65 72 79 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 2e 20 4e 6f 72 6d 61 6c 6c 79 20 70 6f 6c | ery.type.of.policy..Normally.pol |
f9760 | 69 63 69 65 73 20 6a 75 73 74 20 6e 65 65 64 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 6e 75 | icies.just.need.a.meaningless.nu |
f9780 | 6d 62 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 63 6c 61 73 73 20 28 43 6c 61 73 73 20 | mber.to.identify.a.class.(Class. |
f97a0 | 49 44 29 2c 20 62 75 74 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 | ID),.but.that.does.not.apply.to. |
f97c0 | 65 76 65 72 79 20 70 6f 6c 69 63 79 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 20 63 6c | every.policy..The.number.of.a.cl |
f97e0 | 61 73 73 20 69 6e 20 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 74 20 64 6f 65 73 20 | ass.in.a.Priority.Queue.it.does. |
f9800 | 6e 6f 74 20 6f 6e 6c 79 20 69 64 65 6e 74 69 66 79 20 69 74 2c 20 69 74 20 61 6c 73 6f 20 64 65 | not.only.identify.it,.it.also.de |
f9820 | 66 69 6e 65 73 20 69 74 73 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 6d 65 6d 62 65 72 20 69 | fines.its.priority..The.member.i |
f9840 | 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 69 73 20 61 20 74 72 75 6e 6b 20 74 68 61 74 20 | nterface.`eth1`.is.a.trunk.that. |
f9860 | 61 6c 6c 6f 77 73 20 56 4c 41 4e 20 31 30 20 74 6f 20 70 61 73 73 00 54 68 65 20 6d 65 74 72 69 | allows.VLAN.10.to.pass.The.metri |
f9880 | 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 20 28 4d 61 78 20 76 61 | c.range.is.1.to.16777215.(Max.va |
f98a0 | 6c 75 65 20 64 65 70 65 6e 64 20 69 66 20 6d 65 74 72 69 63 20 73 75 70 70 6f 72 74 20 6e 61 72 | lue.depend.if.metric.support.nar |
f98c0 | 72 6f 77 20 6f 72 20 77 69 64 65 20 76 61 6c 75 65 29 2e 00 54 68 65 20 6d 69 6e 69 6d 61 6c 20 | row.or.wide.value)..The.minimal. |
f98e0 | 65 63 68 6f 20 72 65 63 65 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 76 | echo.receive.transmission.interv |
f9900 | 61 6c 20 74 68 61 74 20 74 68 69 73 20 73 79 73 74 65 6d 20 69 73 20 63 61 70 61 62 6c 65 20 6f | al.that.this.system.is.capable.o |
f9920 | 66 20 68 61 6e 64 6c 69 6e 67 00 54 68 65 20 6d 6f 73 74 20 76 69 73 69 62 6c 65 20 61 70 70 6c | f.handling.The.most.visible.appl |
f9940 | 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 20 61 | ication.of.the.protocol.is.for.a |
f9960 | 63 63 65 73 73 20 74 6f 20 73 68 65 6c 6c 20 61 63 63 6f 75 6e 74 73 20 6f 6e 20 55 6e 69 78 2d | ccess.to.shell.accounts.on.Unix- |
f9980 | 6c 69 6b 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 2c 20 62 75 74 20 69 74 20 73 | like.operating.systems,.but.it.s |
f99a0 | 65 65 73 20 73 6f 6d 65 20 6c 69 6d 69 74 65 64 20 75 73 65 20 6f 6e 20 57 69 6e 64 6f 77 73 20 | ees.some.limited.use.on.Windows. |
f99c0 | 61 73 20 77 65 6c 6c 2e 20 49 6e 20 32 30 31 35 2c 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 6e 6f | as.well..In.2015,.Microsoft.anno |
f99e0 | 75 6e 63 65 64 20 74 68 61 74 20 74 68 65 79 20 77 6f 75 6c 64 20 69 6e 63 6c 75 64 65 20 6e 61 | unced.that.they.would.include.na |
f9a00 | 74 69 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 6e 20 61 20 66 75 74 75 72 65 | tive.support.for.SSH.in.a.future |
f9a20 | 20 72 65 6c 65 61 73 65 2e 00 54 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 20 75 73 | .release..The.multicast-group.us |
f9a40 | 65 64 20 62 79 20 61 6c 6c 20 6c 65 61 76 65 73 20 66 6f 72 20 74 68 69 73 20 76 6c 61 6e 20 65 | ed.by.all.leaves.for.this.vlan.e |
f9a60 | 78 74 65 6e 73 69 6f 6e 2e 20 48 61 73 20 74 6f 20 62 65 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 | xtension..Has.to.be.the.same.on. |
f9a80 | 61 6c 6c 20 6c 65 61 76 65 73 20 74 68 61 74 20 68 61 73 20 74 68 69 73 20 69 6e 74 65 72 66 61 | all.leaves.that.has.this.interfa |
f9aa0 | 63 65 2e 00 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 73 65 72 76 69 63 65 20 63 61 6e 20 | ce..The.name.of.the.service.can. |
f9ac0 | 62 65 20 64 69 66 66 65 72 65 6e 74 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 69 74 | be.different,.in.this.example.it |
f9ae0 | 20 69 73 20 6f 6e 6c 79 20 66 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 00 54 68 65 20 6e 65 | .is.only.for.convenience..The.ne |
f9b00 | 74 6d 61 73 6b 20 6f 72 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 45 44 4e 53 20 43 6c 69 65 6e 74 | tmask.or.domain.that.EDNS.Client |
f9b20 | 20 53 75 62 6e 65 74 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 69 6e | .Subnet.should.be.enabled.for.in |
f9b40 | 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 6e 65 74 77 6f 72 6b 20 74 | .outgoing.queries..The.network.t |
f9b60 | 6f 70 6f 6c 6f 67 79 20 69 73 20 64 65 63 6c 61 72 65 64 20 62 79 20 73 68 61 72 65 64 2d 6e 65 | opology.is.declared.by.shared-ne |
f9b80 | 74 77 6f 72 6b 2d 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 | twork-name.and.the.subnet.declar |
f9ba0 | 61 74 69 6f 6e 73 2e 20 54 68 65 20 44 48 43 50 20 73 65 72 76 69 63 65 20 63 61 6e 20 73 65 72 | ations..The.DHCP.service.can.ser |
f9bc0 | 76 65 20 6d 75 6c 74 69 70 6c 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 73 2c 20 77 69 74 | ve.multiple.shared.networks,.wit |
f9be0 | 68 20 65 61 63 68 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 68 61 76 69 6e 67 20 31 20 6f | h.each.shared.network.having.1.o |
f9c00 | 72 20 6d 6f 72 65 20 73 75 62 6e 65 74 73 2e 20 45 61 63 68 20 73 75 62 6e 65 74 20 6d 75 73 74 | r.more.subnets..Each.subnet.must |
f9c20 | 20 62 65 20 70 72 65 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 72 | .be.present.on.an.interface..A.r |
f9c40 | 61 6e 67 65 20 63 61 6e 20 62 65 20 64 65 63 6c 61 72 65 64 20 69 6e 73 69 64 65 20 61 20 73 75 | ange.can.be.declared.inside.a.su |
f9c60 | 62 6e 65 74 20 74 6f 20 64 65 66 69 6e 65 20 61 20 70 6f 6f 6c 20 6f 66 20 64 79 6e 61 6d 69 63 | bnet.to.define.a.pool.of.dynamic |
f9c80 | 20 61 64 64 72 65 73 73 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 72 61 6e 67 65 73 20 63 61 6e 20 | .addresses..Multiple.ranges.can. |
f9ca0 | 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 68 6f 6c 65 73 | be.defined.and.can.contain.holes |
f9cc0 | 2e 20 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 | ..Static.mappings.can.be.set.to. |
f9ce0 | 61 73 73 69 67 6e 20 22 73 74 61 74 69 63 22 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6c 69 | assign."static".addresses.to.cli |
f9d00 | 65 6e 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 69 72 20 4d 41 43 20 61 64 64 72 65 73 73 2e | ents.based.on.their.MAC.address. |
f9d20 | 00 54 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 63 6f | .The.next.example.is.a.simple.co |
f9d40 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 54 | nfiguration.of.conntrack-sync..T |
f9d60 | 68 65 20 6e 65 78 74 20 73 74 65 70 20 69 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 | he.next.step.is.to.configure.you |
f9d80 | 72 20 6c 6f 63 61 6c 20 73 69 64 65 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 70 6f 6c 69 | r.local.side.as.well.as.the.poli |
f9da0 | 63 79 20 62 61 73 65 64 20 74 72 75 73 74 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 | cy.based.trusted.destination.add |
f9dc0 | 72 65 73 73 65 73 2e 20 49 66 20 79 6f 75 20 6f 6e 6c 79 20 69 6e 69 74 69 61 74 65 20 61 20 63 | resses..If.you.only.initiate.a.c |
f9de0 | 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 61 6e 64 20 61 | onnection,.the.listen.port.and.a |
f9e00 | 64 64 72 65 73 73 2f 70 6f 72 74 20 69 73 20 6f 70 74 69 6f 6e 61 6c 3b 20 68 6f 77 65 76 65 72 | ddress/port.is.optional;.however |
f9e20 | 2c 20 69 66 20 79 6f 75 20 61 63 74 20 6c 69 6b 65 20 61 20 73 65 72 76 65 72 20 61 6e 64 20 65 | ,.if.you.act.like.a.server.and.e |
f9e40 | 6e 64 70 6f 69 6e 74 73 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | ndpoints.initiate.the.connection |
f9e60 | 73 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 64 65 | s.to.your.system,.you.need.to.de |
f9e80 | 66 69 6e 65 20 61 20 70 6f 72 74 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 63 61 6e 20 63 6f 6e | fine.a.port.your.clients.can.con |
f9ea0 | 6e 65 63 74 20 74 6f 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 70 6f 72 74 20 69 73 20 72 | nect.to,.otherwise.the.port.is.r |
f9ec0 | 61 6e 64 6f 6d 6c 79 20 63 68 6f 73 65 6e 20 61 6e 64 20 6d 61 79 20 6d 61 6b 65 20 63 6f 6e 6e | andomly.chosen.and.may.make.conn |
f9ee0 | 65 63 74 69 6f 6e 20 64 69 66 66 69 63 75 6c 74 20 77 69 74 68 20 66 69 72 65 77 61 6c 6c 20 72 | ection.difficult.with.firewall.r |
f9f00 | 75 6c 65 73 2c 20 73 69 6e 63 65 20 74 68 65 20 70 6f 72 74 20 6d 61 79 20 62 65 20 64 69 66 66 | ules,.since.the.port.may.be.diff |
f9f20 | 65 72 65 6e 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 20 72 65 | erent.each.time.the.system.is.re |
f9f40 | 62 6f 6f 74 65 64 2e 00 54 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 | booted..The.noted.public.keys.sh |
f9f60 | 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 | ould.be.entered.on.the.opposite. |
f9f80 | 72 6f 75 74 65 72 73 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f | routers..The.number.of.milliseco |
f9fa0 | 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 20 72 65 6d 6f 74 65 20 61 75 74 68 6f 72 69 | nds.to.wait.for.a.remote.authori |
f9fc0 | 74 61 74 69 76 65 20 73 65 72 76 65 72 20 74 6f 20 72 65 73 70 6f 6e 64 20 62 65 66 6f 72 65 20 | tative.server.to.respond.before. |
f9fe0 | 74 69 6d 69 6e 67 20 6f 75 74 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 77 69 74 68 20 53 | timing.out.and.responding.with.S |
fa000 | 45 52 56 46 41 49 4c 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 70 61 72 61 6d 65 74 65 72 20 28 31 | ERVFAIL..The.number.parameter.(1 |
fa020 | 2d 31 30 29 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 61 63 | -10).configures.the.amount.of.ac |
fa040 | 63 65 70 74 65 64 20 6f 63 63 75 72 65 6e 63 65 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 | cepted.occurences.of.the.system. |
fa060 | 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 41 53 20 70 61 74 68 2e 00 54 68 65 20 6f 66 66 69 63 69 | AS.number.in.AS.path..The.offici |
fa080 | 61 6c 20 70 6f 72 74 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 69 73 20 31 31 39 34 2c 20 77 68 69 | al.port.for.OpenVPN.is.1194,.whi |
fa0a0 | 63 68 20 77 65 20 72 65 73 65 72 76 65 20 66 6f 72 20 63 6c 69 65 6e 74 20 56 50 4e 3b 20 77 65 | ch.we.reserve.for.client.VPN;.we |
fa0c0 | 20 77 69 6c 6c 20 75 73 65 20 31 31 39 35 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | .will.use.1195.for.site-to-site. |
fa0e0 | 56 50 4e 2e 00 54 68 65 20 6f 6e 6c 79 20 73 74 61 67 65 73 20 56 79 4f 53 20 77 69 6c 6c 20 70 | VPN..The.only.stages.VyOS.will.p |
fa100 | 72 6f 63 65 73 73 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 63 | rocess.as.part.of.the.firewall.c |
fa120 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 74 68 65 20 60 66 6f 72 77 61 72 64 60 20 28 46 | onfiguration.is.the.`forward`.(F |
fa140 | 34 20 73 74 61 67 65 29 2c 20 60 69 6e 70 75 74 60 20 28 4c 34 20 73 74 61 67 65 29 2c 20 61 6e | 4.stage),.`input`.(L4.stage),.an |
fa160 | 64 20 60 6f 75 74 70 75 74 60 20 28 4c 35 20 73 74 61 67 65 29 2e 20 41 6c 6c 20 74 68 65 20 6f | d.`output`.(L5.stage)..All.the.o |
fa180 | 74 68 65 72 20 73 74 61 67 65 73 20 61 6e 64 20 73 74 65 70 73 20 61 72 65 20 66 6f 72 20 72 65 | ther.stages.and.steps.are.for.re |
fa1a0 | 66 65 72 65 6e 63 65 20 61 6e 64 20 63 61 6e 74 20 62 65 20 6d 61 6e 69 70 75 6c 61 74 65 64 20 | ference.and.cant.be.manipulated. |
fa1c0 | 74 68 72 6f 75 67 68 20 56 79 4f 53 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 60 64 69 73 61 | through.VyOS..The.optional.`disa |
fa1e0 | 62 6c 65 60 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 65 78 63 6c 75 64 65 20 69 6e | ble`.option.allows.to.exclude.in |
fa200 | 74 65 72 66 61 63 65 20 66 72 6f 6d 20 70 61 73 73 69 76 65 20 73 74 61 74 65 2e 20 54 68 69 73 | terface.from.passive.state..This |
fa220 | 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 69 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 | .command.is.used.if.the.command. |
fa240 | 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 20 64 65 66 61 75 | :cfgcmd:`passive-interface.defau |
fa260 | 6c 74 60 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c | lt`.was.configured..The.optional |
fa280 | 20 70 61 72 61 6d 65 74 65 72 20 72 65 67 69 73 74 65 72 20 73 70 65 63 69 66 69 65 73 20 74 68 | .parameter.register.specifies.th |
fa2a0 | 61 74 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 | at.Registration.Request.should.b |
fa2c0 | 65 20 73 65 6e 74 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 6f 6e 20 73 74 61 72 74 75 70 2e 00 | e.sent.to.this.peer.on.startup.. |
fa2e0 | 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 38 30 32 2e 31 71 5f 20 73 70 65 63 69 66 69 63 61 74 69 | The.original.802.1q_.specificati |
fa300 | 6f 6e 20 61 6c 6c 6f 77 73 20 61 20 73 69 6e 67 6c 65 20 56 69 72 74 75 61 6c 20 4c 6f 63 61 6c | on.allows.a.single.Virtual.Local |
fa320 | 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 20 28 56 4c 41 4e 29 20 68 65 61 64 65 72 20 74 6f 20 62 | .Area.Network.(VLAN).header.to.b |
fa340 | 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d | e.inserted.into.an.Ethernet.fram |
fa360 | 65 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 | e..QinQ.allows.multiple.VLAN.tag |
fa380 | 73 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 66 | s.to.be.inserted.into.a.single.f |
fa3a0 | 72 61 6d 65 2c 20 61 6e 20 65 73 73 65 6e 74 69 61 6c 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f | rame,.an.essential.capability.fo |
fa3c0 | 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 6e 65 | r.implementing.Metro.Ethernet.ne |
fa3e0 | 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 20 4a 75 73 74 20 61 73 20 51 69 6e 51 20 65 | twork.topologies..Just.as.QinQ.e |
fa400 | 78 74 65 6e 64 73 20 38 30 32 2e 31 51 2c 20 51 69 6e 51 20 69 74 73 65 6c 66 20 69 73 20 65 78 | xtends.802.1Q,.QinQ.itself.is.ex |
fa420 | 74 65 6e 64 65 64 20 62 79 20 6f 74 68 65 72 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 70 | tended.by.other.Metro.Ethernet.p |
fa440 | 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 | rotocols..The.outgoing.interface |
fa460 | 20 74 6f 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 6e 00 54 | .to.perform.the.translation.on.T |
fa480 | 68 65 20 70 65 65 72 20 6e 61 6d 65 20 6d 75 73 74 20 62 65 20 61 6e 20 61 6c 70 68 61 6e 75 6d | he.peer.name.must.be.an.alphanum |
fa4a0 | 65 72 69 63 20 61 6e 64 20 63 61 6e 20 68 61 76 65 20 68 79 70 65 6e 20 6f 72 20 75 6e 64 65 72 | eric.and.can.have.hypen.or.under |
fa4c0 | 73 63 6f 72 65 20 61 73 20 73 70 65 63 69 61 6c 20 63 68 61 72 61 63 74 65 72 73 2e 20 49 74 20 | score.as.special.characters..It. |
fa4e0 | 69 73 20 70 75 72 65 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 2e 00 54 68 65 20 70 65 65 | is.purely.informational..The.pee |
fa500 | 72 20 6e 61 6d 65 73 20 52 49 47 48 54 20 61 6e 64 20 4c 45 46 54 20 61 72 65 20 75 73 65 64 20 | r.names.RIGHT.and.LEFT.are.used. |
fa520 | 61 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 74 65 78 74 2e 00 54 68 65 20 70 65 65 72 20 | as.informational.text..The.peer. |
fa540 | 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 | with.lower.priority.will.become. |
fa560 | 74 68 65 20 6b 65 79 20 73 65 72 76 65 72 20 61 6e 64 20 73 74 61 72 74 20 64 69 73 74 72 69 62 | the.key.server.and.start.distrib |
fa580 | 75 74 69 6e 67 20 53 41 4b 73 2e 00 54 68 65 20 70 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | uting.SAKs..The.ping.command.is. |
fa5a0 | 75 73 65 64 20 74 6f 20 74 65 73 74 20 77 68 65 74 68 65 72 20 61 20 6e 65 74 77 6f 72 6b 20 68 | used.to.test.whether.a.network.h |
fa5c0 | 6f 73 74 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 6f 72 20 6e 6f 74 2e 00 54 68 65 20 70 6f 70 | ost.is.reachable.or.not..The.pop |
fa5e0 | 75 6c 61 72 20 55 6e 69 78 2f 4c 69 6e 75 78 20 60 60 64 69 67 60 60 20 74 6f 6f 6c 20 73 65 74 | ular.Unix/Linux.``dig``.tool.set |
fa600 | 73 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 2e 20 54 68 69 73 20 | s.the.AD-bit.in.the.query..This. |
fa620 | 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 71 75 65 72 79 20 72 | might.lead.to.unexpected.query.r |
fa640 | 65 73 75 6c 74 73 20 77 68 65 6e 20 74 65 73 74 69 6e 67 2e 20 53 65 74 20 60 60 2b 6e 6f 61 64 | esults.when.testing..Set.``+noad |
fa660 | 60 60 20 6f 6e 20 74 68 65 20 60 60 64 69 67 60 60 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 77 | ``.on.the.``dig``.command.line.w |
fa680 | 68 65 6e 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 2e 00 54 68 65 20 70 72 65 2d 73 68 | hen.this.is.the.case..The.pre-sh |
fa6a0 | 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 | ared.key.mode.is.deprecated.and. |
fa6c0 | 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 66 75 74 75 72 65 20 4f 70 65 6e | will.be.removed.from.future.Open |
fa6e0 | 56 50 4e 20 76 65 72 73 69 6f 6e 73 2c 20 73 6f 20 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 | VPN.versions,.so.VyOS.will.have. |
fa700 | 74 6f 20 72 65 6d 6f 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 61 74 20 6f 70 74 69 6f | to.remove.support.for.that.optio |
fa720 | 6e 20 61 73 20 77 65 6c 6c 2e 20 54 68 65 20 72 65 61 73 6f 6e 20 69 73 20 74 68 61 74 20 75 73 | n.as.well..The.reason.is.that.us |
fa740 | 69 6e 67 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 20 69 73 20 73 69 67 6e 69 66 69 63 61 | ing.pre-shared.keys.is.significa |
fa760 | 6e 74 6c 79 20 6c 65 73 73 20 73 65 63 75 72 65 20 74 68 61 6e 20 75 73 69 6e 67 20 54 4c 53 2e | ntly.less.secure.than.using.TLS. |
fa780 | 00 54 68 65 20 70 72 65 66 69 78 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 | .The.prefix.and.ASN.that.origina |
fa7a0 | 74 65 64 20 69 74 20 6d 61 74 63 68 20 61 20 73 69 67 6e 65 64 20 52 4f 41 2e 20 54 68 65 73 65 | ted.it.match.a.signed.ROA..These |
fa7c0 | 20 61 72 65 20 70 72 6f 62 61 62 6c 79 20 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 | .are.probably.trustworthy.route. |
fa7e0 | 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 65 66 69 78 20 6f 72 20 70 72 65 | announcements..The.prefix.or.pre |
fa800 | 66 69 78 20 6c 65 6e 67 74 68 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 | fix.length.and.ASN.that.originat |
fa820 | 65 64 20 69 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 65 78 69 73 74 69 6e 67 | ed.it.doesn't.match.any.existing |
fa840 | 20 52 4f 41 2e 20 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f | .ROA..This.could.be.the.result.o |
fa860 | 66 20 61 20 70 72 65 66 69 78 20 68 69 6a 61 63 6b 2c 20 6f 72 20 6d 65 72 65 6c 79 20 61 20 6d | f.a.prefix.hijack,.or.merely.a.m |
fa880 | 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 62 75 74 20 73 68 6f 75 6c 64 20 70 72 6f 62 | isconfiguration,.but.should.prob |
fa8a0 | 61 62 6c 79 20 62 65 20 74 72 65 61 74 65 64 20 61 73 20 75 6e 74 72 75 73 74 77 6f 72 74 68 79 | ably.be.treated.as.untrustworthy |
fa8c0 | 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 69 6d 61 72 | .route.announcements..The.primar |
fa8e0 | 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e | y.DHCP.server.uses.address.`192. |
fa900 | 31 36 38 2e 31 38 39 2e 32 35 32 60 00 54 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 | 168.189.252`.The.primary.and.sec |
fa920 | 6f 6e 64 61 72 79 20 73 74 61 74 65 6d 65 6e 74 73 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 65 | ondary.statements.determines.whe |
fa940 | 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 70 72 69 6d 61 72 79 20 6f 72 20 73 65 | ther.the.server.is.primary.or.se |
fa960 | 63 6f 6e 64 61 72 79 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 6f 70 74 69 6f 6e 20 69 73 20 6f | condary..The.primary.option.is.o |
fa980 | 6e 6c 79 20 76 61 6c 69 64 20 66 6f 72 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 2c 20 74 72 61 | nly.valid.for.active-backup,.tra |
fa9a0 | 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 2c 20 61 6e 64 20 61 64 61 70 74 69 76 65 | nsmit-load-balance,.and.adaptive |
fa9c0 | 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 6d 6f 64 65 2e 00 54 68 65 20 70 72 69 6f 72 69 74 79 | -load-balance.mode..The.priority |
fa9e0 | 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 | .must.be.an.integer.number.from. |
faa00 | 31 20 74 6f 20 32 35 35 2e 20 48 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 | 1.to.255..Higher.priority.value. |
faa20 | 69 6e 63 72 65 61 73 65 73 20 72 6f 75 74 65 72 27 73 20 70 72 65 63 65 64 65 6e 63 65 20 69 6e | increases.router's.precedence.in |
faa40 | 20 74 68 65 20 6d 61 73 74 65 72 20 65 6c 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 70 72 6f 63 65 | .the.master.elections..The.proce |
faa60 | 64 75 72 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 4e 49 53 2b 20 28 4e | dure.to.specify.a.:abbr:`NIS+.(N |
faa80 | 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 20 50 6c 75 73 29 | etwork.Information.Service.Plus) |
faaa0 | 60 20 64 6f 6d 61 69 6e 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 4e 49 53 20 64 | `.domain.is.similar.to.the.NIS.d |
faac0 | 6f 6d 61 69 6e 20 6f 6e 65 3a 00 54 68 65 20 70 72 6f 6d 70 74 20 69 73 20 61 64 6a 75 73 74 65 | omain.one:.The.prompt.is.adjuste |
faae0 | 64 20 74 6f 20 72 65 66 6c 65 63 74 20 74 68 69 73 20 63 68 61 6e 67 65 20 69 6e 20 62 6f 74 68 | d.to.reflect.this.change.in.both |
fab00 | 20 63 6f 6e 66 69 67 20 61 6e 64 20 6f 70 2d 6d 6f 64 65 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f | .config.and.op-mode..The.protoco |
fab20 | 6c 20 61 6e 64 20 70 6f 72 74 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 64 3b 00 54 | l.and.port.we.wish.to.forward;.T |
fab40 | 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 63 72 69 62 65 64 | he.protocol.is.usually.described |
fab60 | 20 69 6e 20 74 65 72 6d 73 20 6f 66 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 6d 6f 64 | .in.terms.of.a.client-server.mod |
fab80 | 65 6c 2c 20 62 75 74 20 63 61 6e 20 61 73 20 65 61 73 69 6c 79 20 62 65 20 75 73 65 64 20 69 6e | el,.but.can.as.easily.be.used.in |
faba0 | 20 70 65 65 72 2d 74 6f 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 20 77 68 65 72 | .peer-to-peer.relationships.wher |
fabc0 | 65 20 62 6f 74 68 20 70 65 65 72 73 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 6f 74 68 65 72 20 | e.both.peers.consider.the.other. |
fabe0 | 74 6f 20 62 65 20 61 20 70 6f 74 65 6e 74 69 61 6c 20 74 69 6d 65 20 73 6f 75 72 63 65 2e 20 49 | to.be.a.potential.time.source..I |
fac00 | 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 6e 64 20 72 65 63 65 69 76 65 20 | mplementations.send.and.receive. |
fac20 | 74 69 6d 65 73 74 61 6d 70 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 55 44 50 20 28 55 73 65 | timestamps.using.:abbr:`UDP.(Use |
fac40 | 72 20 44 61 74 61 67 72 61 6d 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 6e 20 70 6f 72 74 20 6e 75 | r.Datagram.Protocol)`.on.port.nu |
fac60 | 6d 62 65 72 20 31 32 33 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 | mber.123..The.protocol.overhead. |
fac80 | 6f 66 20 4c 32 54 50 76 33 20 69 73 20 61 6c 73 6f 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 | of.L2TPv3.is.also.significantly. |
faca0 | 62 69 67 67 65 72 20 74 68 61 6e 20 4d 50 4c 53 2e 00 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 | bigger.than.MPLS..The.proxy.serv |
facc0 | 69 63 65 20 69 6e 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 53 71 75 69 64 5f 20 61 | ice.in.VyOS.is.based.on.Squid_.a |
face0 | 6e 64 20 73 6f 6d 65 20 72 65 6c 61 74 65 64 20 6d 6f 64 75 6c 65 73 2e 00 54 68 65 20 70 75 62 | nd.some.related.modules..The.pub |
fad00 | 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 73 69 64 65 | lic.IP.address.of.the.local.side |
fad20 | 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 31 39 38 2e 35 31 2e 31 30 30 2e 31 | .of.the.VPN.will.be.198.51.100.1 |
fad40 | 30 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | 0..The.public.IP.address.of.the. |
fad60 | 72 65 6d 6f 74 65 20 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 32 | remote.side.of.the.VPN.will.be.2 |
fad80 | 30 33 2e 30 2e 31 31 33 2e 31 31 2e 00 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 | 03.0.113.11..The.rate-limit.is.s |
fada0 | 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 54 68 65 20 72 65 67 75 6c 61 72 20 65 78 70 72 | et.in.kbit/sec..The.regular.expr |
fadc0 | 65 73 73 69 6f 6e 20 6d 61 74 63 68 65 73 20 69 66 20 61 6e 64 20 6f 6e 6c 79 20 69 66 20 74 68 | ession.matches.if.and.only.if.th |
fade0 | 65 20 65 6e 74 69 72 65 20 73 74 72 69 6e 67 20 6d 61 74 63 68 65 73 20 74 68 65 20 70 61 74 74 | e.entire.string.matches.the.patt |
fae00 | 65 72 6e 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 75 | ern..The.remote.peer.`to-wg02`.u |
fae20 | 73 65 73 20 58 4d 72 6c 50 79 6b 61 78 68 64 41 41 69 53 6a 68 74 50 6c 76 69 33 30 4e 56 6b 76 | ses.XMrlPykaxhdAAiSjhtPlvi30NVkv |
fae40 | 4c 51 6c 69 51 75 4b 50 37 41 49 37 43 79 49 3d 20 61 73 20 69 74 73 20 70 75 62 6c 69 63 20 6b | LQliQuKP7AI7CyI=.as.its.public.k |
fae60 | 65 79 20 70 6f 72 74 69 6f 6e 00 54 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 77 69 6c 6c 20 | ey.portion.The.remote.site.will. |
fae80 | 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 2e 00 54 68 | have.a.subnet.of.10.1.0.0/16..Th |
faea0 | 65 20 72 65 6d 6f 74 65 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6f 70 65 6e 63 | e.remote.user.will.use.the.openc |
faec0 | 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 | onnect.client.to.connect.to.the. |
faee0 | 72 6f 75 74 65 72 20 61 6e 64 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 20 61 64 | router.and.will.receive.an.IP.ad |
faf00 | 64 72 65 73 73 20 66 72 6f 6d 20 61 20 56 50 4e 20 70 6f 6f 6c 2c 20 61 6c 6c 6f 77 69 6e 67 20 | dress.from.a.VPN.pool,.allowing. |
faf20 | 66 75 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 | full.access.to.the.network..The. |
faf40 | 72 65 71 75 65 73 74 6f 72 20 6e 65 74 6d 61 73 6b 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 | requestor.netmask.for.which.the. |
faf60 | 72 65 71 75 65 73 74 6f 72 20 49 50 20 41 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 62 65 20 75 | requestor.IP.Address.should.be.u |
faf80 | 73 65 64 20 61 73 20 74 68 65 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 66 6f | sed.as.the.EDNS.Client.Subnet.fo |
fafa0 | 72 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 72 65 71 75 69 72 65 64 | r.outgoing.queries..The.required |
fafc0 | 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 6d 61 79 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 69 73 3a | .config.file.may.look.like.this: |
fafe0 | 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 | .The.required.configuration.can. |
fb000 | 62 65 20 62 72 6f 6b 65 6e 20 64 6f 77 6e 20 69 6e 74 6f 20 34 20 6d 61 6a 6f 72 20 70 69 65 63 | be.broken.down.into.4.major.piec |
fb020 | 65 73 3a 00 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | es:.The.resulting.configuration. |
fb040 | 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 72 6f 6f 74 20 63 61 75 73 65 20 6f | will.look.like:.The.root.cause.o |
fb060 | 66 20 74 68 65 20 70 72 6f 62 6c 65 6d 20 69 73 20 74 68 61 74 20 66 6f 72 20 56 54 49 20 74 75 | f.the.problem.is.that.for.VTI.tu |
fb080 | 6e 6e 65 6c 73 20 74 6f 20 77 6f 72 6b 2c 20 74 68 65 69 72 20 74 72 61 66 66 69 63 20 73 65 6c | nnels.to.work,.their.traffic.sel |
fb0a0 | 65 63 74 6f 72 73 20 68 61 76 65 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 30 2e 30 2e 30 2e 30 | ectors.have.to.be.set.to.0.0.0.0 |
fb0c0 | 2f 30 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 74 75 6e 6e | /0.for.traffic.to.match.the.tunn |
fb0e0 | 65 6c 2c 20 65 76 65 6e 20 74 68 6f 75 67 68 20 61 63 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 | el,.even.though.actual.routing.d |
fb100 | 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 6e 65 74 | ecision.is.made.according.to.net |
fb120 | 66 69 6c 74 65 72 20 6d 61 72 6b 73 2e 20 55 6e 6c 65 73 73 20 72 6f 75 74 65 20 69 6e 73 65 72 | filter.marks..Unless.route.inser |
fb140 | 74 69 6f 6e 20 69 73 20 64 69 73 61 62 6c 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 53 74 72 6f 6e | tion.is.disabled.entirely,.Stron |
fb160 | 67 53 57 41 4e 20 74 68 75 73 20 6d 69 73 74 61 6b 65 6e 6c 79 20 69 6e 73 65 72 74 73 20 61 20 | gSWAN.thus.mistakenly.inserts.a. |
fb180 | 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 56 54 49 20 70 65 | default.route.through.the.VTI.pe |
fb1a0 | 65 72 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 61 6c 6c 20 74 72 61 66 | er.address,.which.makes.all.traf |
fb1c0 | 66 69 63 20 72 6f 75 74 65 64 20 74 6f 20 6e 6f 77 68 65 72 65 2e 00 54 68 65 20 72 6f 75 6e 64 | fic.routed.to.nowhere..The.round |
fb1e0 | 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 | -robin.policy.is.a.classful.sche |
fb200 | 64 75 6c 65 72 20 74 68 61 74 20 64 69 76 69 64 65 73 20 74 72 61 66 66 69 63 20 69 6e 20 64 69 | duler.that.divides.traffic.in.di |
fb220 | 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 5f 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 | fferent.classes_.you.can.configu |
fb240 | 72 65 20 28 75 70 20 74 6f 20 34 30 39 36 29 2e 20 59 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 | re.(up.to.4096)..You.can.embed_. |
fb260 | 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 65 61 63 68 20 6f 66 20 74 68 6f 73 65 20 | a.new.policy.into.each.of.those. |
fb280 | 63 6c 61 73 73 65 73 20 28 64 65 66 61 75 6c 74 20 69 6e 63 6c 75 64 65 64 29 2e 00 54 68 65 20 | classes.(default.included)..The. |
fb2a0 | 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 75 73 65 64 20 62 79 20 | route.selection.process.used.by. |
fb2c0 | 46 52 52 27 73 20 42 47 50 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 75 73 65 73 20 74 68 | FRR's.BGP.implementation.uses.th |
fb2e0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 63 72 69 74 65 72 69 6f 6e 2c 20 | e.following.decision.criterion,. |
fb300 | 73 74 61 72 74 69 6e 67 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 6c 69 73 74 20 | starting.at.the.top.of.the.list. |
fb320 | 61 6e 64 20 67 6f 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 62 6f 74 74 6f 6d 20 75 6e 74 | and.going.towards.the.bottom.unt |
fb340 | 69 6c 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 61 63 74 6f 72 73 20 63 61 6e 20 62 65 20 75 73 65 | il.one.of.the.factors.can.be.use |
fb360 | 64 2e 00 54 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 63 | d..The.route.with.the.shortest.c |
fb380 | 6c 75 73 74 65 72 2d 6c 69 73 74 20 6c 65 6e 67 74 68 20 69 73 20 75 73 65 64 2e 20 54 68 65 20 | luster-list.length.is.used..The. |
fb3a0 | 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 72 65 66 6c 65 63 74 73 20 74 68 65 20 69 42 47 50 20 72 | cluster-list.reflects.the.iBGP.r |
fb3c0 | 65 66 6c 65 63 74 69 6f 6e 20 70 61 74 68 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 74 61 6b | eflection.path.the.route.has.tak |
fb3e0 | 65 6e 2e 00 54 68 65 20 72 6f 75 74 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 | en..The.router.automatically.upd |
fb400 | 61 74 65 73 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 | ates.link-state.information.with |
fb420 | 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 2e 20 4f 6e 6c 79 20 61 6e 20 6f 62 73 6f 6c 65 74 65 | .its.neighbors..Only.an.obsolete |
fb440 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 77 68 69 63 68 20 61 67 | .information.is.updated.which.ag |
fb460 | 65 20 68 61 73 20 65 78 63 65 65 64 65 64 20 61 20 73 70 65 63 69 66 69 63 20 74 68 72 65 73 68 | e.has.exceeded.a.specific.thresh |
fb480 | 6f 6c 64 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 63 68 61 6e 67 65 73 20 61 20 74 68 | old..This.parameter.changes.a.th |
fb4a0 | 72 65 73 68 6f 6c 64 20 76 61 6c 75 65 2c 20 77 68 69 63 68 20 62 79 20 64 65 66 61 75 6c 74 20 | reshold.value,.which.by.default. |
fb4c0 | 69 73 20 31 38 30 30 20 73 65 63 6f 6e 64 73 20 28 68 61 6c 66 20 61 6e 20 68 6f 75 72 29 2e 20 | is.1800.seconds.(half.an.hour).. |
fb4e0 | 54 68 65 20 76 61 6c 75 65 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 77 68 6f 6c | The.value.is.applied.to.the.whol |
fb500 | 65 20 4f 53 50 46 20 72 6f 75 74 65 72 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 | e.OSPF.router..The.timer.range.i |
fb520 | 73 20 31 30 20 74 6f 20 31 38 30 30 2e 00 54 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 | s.10.to.1800..The.router.should. |
fb540 | 64 69 73 63 61 72 64 20 44 48 43 50 20 70 61 63 6b 61 67 65 73 20 61 6c 72 65 61 64 79 20 63 6f | discard.DHCP.packages.already.co |
fb560 | 6e 74 61 69 6e 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | ntaining.relay.agent.information |
fb580 | 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 6f 6e 6c 79 20 72 65 71 75 65 73 74 73 20 66 72 | .to.ensure.that.only.requests.fr |
fb5a0 | 6f 6d 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2e 00 54 | om.DHCP.clients.are.forwarded..T |
fb5c0 | 68 65 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 68 73 66 | he.sFlow.accounting.based.on.hsf |
fb5e0 | 6c 6f 77 64 20 68 74 74 70 73 3a 2f 2f 73 66 6c 6f 77 2e 6e 65 74 2f 00 54 68 65 20 73 61 6d 65 | lowd.https://sflow.net/.The.same |
fb600 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 61 70 70 6c 79 20 77 68 65 | .configuration.options.apply.whe |
fb620 | 6e 20 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 20 69 73 20 63 6f 6e 66 69 | n.Identity.based.config.is.confi |
fb640 | 67 75 72 65 64 20 69 6e 20 67 72 6f 75 70 20 6d 6f 64 65 20 65 78 63 65 70 74 20 74 68 61 74 20 | gured.in.group.mode.except.that. |
fb660 | 67 72 6f 75 70 20 6d 6f 64 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 77 69 74 68 | group.mode.can.only.be.used.with |
fb680 | 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 54 68 65 20 73 63 68 65 | .RADIUS.authentication..The.sche |
fb6a0 | 6d 65 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 68 65 6e 20 6f 6e 65 20 6f | me.above.doesn't.work.when.one.o |
fb6c0 | 66 20 74 68 65 20 72 6f 75 74 65 72 73 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 65 78 74 65 | f.the.routers.has.a.dynamic.exte |
fb6e0 | 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 68 6f 75 67 68 2e 20 54 68 65 20 63 6c 61 73 73 69 63 | rnal.address.though..The.classic |
fb700 | 20 77 6f 72 6b 61 72 6f 75 6e 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 6f 20 73 65 74 75 70 | .workaround.for.this.is.to.setup |
fb720 | 20 61 6e 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 | .an.address.on.a.loopback.interf |
fb740 | 61 63 65 20 61 6e 64 20 75 73 65 20 69 74 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 | ace.and.use.it.as.a.source.addre |
fb760 | 73 73 20 66 6f 72 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2c 20 74 68 65 6e 20 73 65 74 75 | ss.for.the.GRE.tunnel,.then.setu |
fb780 | 70 20 61 6e 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 74 63 68 20 74 68 6f 73 65 | p.an.IPsec.policy.to.match.those |
fb7a0 | 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 73 65 61 72 63 68 20 | .loopback.addresses..The.search. |
fb7c0 | 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 75 70 20 74 6f 20 31 35 20 6f 63 63 75 | filter.can.contain.up.to.15.occu |
fb7e0 | 72 72 65 6e 63 65 73 20 6f 66 20 25 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 65 70 6c | rrences.of.%s.which.will.be.repl |
fb800 | 61 63 65 64 20 62 79 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2c 20 61 73 20 69 6e 20 22 75 69 64 | aced.by.the.username,.as.in."uid |
fb820 | 3d 25 73 22 20 66 6f 72 20 3a 72 66 63 3a 60 32 30 33 37 60 20 64 69 72 65 63 74 6f 72 69 65 73 | =%s".for.:rfc:`2037`.directories |
fb840 | 2e 20 46 6f 72 20 61 20 64 65 74 61 69 6c 65 64 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 | ..For.a.detailed.description.of. |
fb860 | 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 73 79 6e 74 61 78 20 73 65 65 20 3a 72 | LDAP.search.filter.syntax.see.:r |
fb880 | 66 63 3a 60 32 32 35 34 60 2e 00 54 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 | fc:`2254`..The.secondary.DHCP.se |
fb8a0 | 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 | rver.uses.address.`192.168.189.2 |
fb8c0 | 35 33 60 00 54 68 65 20 73 65 63 75 72 69 74 79 20 61 70 70 72 6f 61 63 68 20 69 6e 20 53 4e 4d | 53`.The.security.approach.in.SNM |
fb8e0 | 50 76 33 20 74 61 72 67 65 74 73 3a 00 54 68 65 20 73 65 71 75 65 6e 63 65 20 60 60 5e 45 63 3f | Pv3.targets:.The.sequence.``^Ec? |
fb900 | 60 60 20 74 72 61 6e 73 6c 61 74 65 73 20 74 6f 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 3f 60 60 | ``.translates.to:.``Ctrl+E.c.?`` |
fb920 | 2e 20 54 6f 20 71 75 69 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 75 73 65 3a 20 60 60 43 74 72 | ..To.quit.the.session.use:.``Ctr |
fb940 | 6c 2b 45 20 63 20 2e 60 60 00 54 68 65 20 73 65 74 75 70 20 69 73 20 74 68 69 73 3a 20 4c 65 61 | l+E.c..``.The.setup.is.this:.Lea |
fb960 | 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 00 54 68 65 20 73 69 7a 65 20 6f 66 20 | f2.-.Spine1.-.Leaf3.The.size.of. |
fb980 | 74 68 65 20 6f 6e 2d 64 69 73 6b 20 50 72 6f 78 79 20 63 61 63 68 65 20 69 73 20 75 73 65 72 20 | the.on-disk.Proxy.cache.is.user. |
fb9a0 | 63 6f 6e 66 69 67 75 72 61 62 6c 65 2e 20 54 68 65 20 50 72 6f 78 69 65 73 20 64 65 66 61 75 6c | configurable..The.Proxies.defaul |
fb9c0 | 74 20 63 61 63 68 65 2d 73 69 7a 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 31 30 | t.cache-size.is.configured.to.10 |
fb9e0 | 30 20 4d 42 2e 00 54 68 65 20 73 70 65 65 64 20 28 62 61 75 64 72 61 74 65 29 20 6f 66 20 74 68 | 0.MB..The.speed.(baudrate).of.th |
fba00 | 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 2e 20 53 75 70 70 6f 72 74 65 64 20 76 61 6c 75 | e.console.device..Supported.valu |
fba20 | 65 73 20 61 72 65 3a 00 54 68 65 20 73 74 61 6e 64 61 72 64 20 77 61 73 20 64 65 76 65 6c 6f 70 | es.are:.The.standard.was.develop |
fba40 | 65 64 20 62 79 20 49 45 45 45 20 38 30 32 2e 31 2c 20 61 20 77 6f 72 6b 69 6e 67 20 67 72 6f 75 | ed.by.IEEE.802.1,.a.working.grou |
fba60 | 70 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 30 32 20 73 74 61 6e 64 61 72 64 73 20 63 6f 6d 6d | p.of.the.IEEE.802.standards.comm |
fba80 | 69 74 74 65 65 2c 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 62 65 20 61 63 74 69 76 | ittee,.and.continues.to.be.activ |
fbaa0 | 65 6c 79 20 72 65 76 69 73 65 64 2e 20 4f 6e 65 20 6f 66 20 74 68 65 20 6e 6f 74 61 62 6c 65 20 | ely.revised..One.of.the.notable. |
fbac0 | 72 65 76 69 73 69 6f 6e 73 20 69 73 20 38 30 32 2e 31 51 2d 32 30 31 34 20 77 68 69 63 68 20 69 | revisions.is.802.1Q-2014.which.i |
fbae0 | 6e 63 6f 72 70 6f 72 61 74 65 64 20 49 45 45 45 20 38 30 32 2e 31 61 71 20 28 53 68 6f 72 74 65 | ncorporated.IEEE.802.1aq.(Shorte |
fbb00 | 73 74 20 50 61 74 68 20 42 72 69 64 67 69 6e 67 29 20 61 6e 64 20 6d 75 63 68 20 6f 66 20 74 68 | st.Path.Bridging).and.much.of.th |
fbb20 | 65 20 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 73 79 73 74 | e.IEEE.802.1d.standard..The.syst |
fbb40 | 65 6d 20 4c 43 44 20 3a 61 62 62 72 3a 60 4c 43 44 20 28 4c 69 71 75 69 64 2d 63 72 79 73 74 61 | em.LCD.:abbr:`LCD.(Liquid-crysta |
fbb60 | 6c 20 64 69 73 70 6c 61 79 29 60 20 6f 70 74 69 6f 6e 20 69 73 20 66 6f 72 20 75 73 65 72 73 20 | l.display)`.option.is.for.users. |
fbb80 | 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 6f 6e 20 68 61 72 64 77 61 72 65 20 74 68 61 74 20 66 65 | running.VyOS.on.hardware.that.fe |
fbba0 | 61 74 75 72 65 73 20 61 6e 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 68 69 73 20 69 73 20 74 | atures.an.LCD.display..This.is.t |
fbbc0 | 79 70 69 63 61 6c 6c 79 20 61 20 73 6d 61 6c 6c 20 64 69 73 70 6c 61 79 20 62 75 69 6c 74 20 69 | ypically.a.small.display.built.i |
fbbe0 | 6e 20 61 6e 20 31 39 20 69 6e 63 68 20 72 61 63 6b 2d 6d 6f 75 6e 74 61 62 6c 65 20 61 70 70 6c | n.an.19.inch.rack-mountable.appl |
fbc00 | 69 61 6e 63 65 2e 20 54 68 6f 73 65 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 75 73 65 64 20 74 | iance..Those.displays.are.used.t |
fbc20 | 6f 20 73 68 6f 77 20 72 75 6e 74 69 6d 65 20 64 61 74 61 2e 00 54 68 65 20 73 79 73 74 65 6d 20 | o.show.runtime.data..The.system. |
fbc40 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 61 74 74 65 6d 70 74 20 64 6f 6d 61 69 6e 20 | is.configured.to.attempt.domain. |
fbc60 | 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 | completion.in.the.following.orde |
fbc80 | 72 3a 20 76 79 6f 73 2e 69 6f 20 28 66 69 72 73 74 29 2c 20 76 79 6f 73 2e 6e 65 74 20 28 73 65 | r:.vyos.io.(first),.vyos.net.(se |
fbca0 | 63 6f 6e 64 29 20 61 6e 64 20 76 79 6f 73 2e 6e 65 74 77 6f 72 6b 20 28 6c 61 73 74 29 3a 00 54 | cond).and.vyos.network.(last):.T |
fbcc0 | 68 65 20 74 61 62 6c 65 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 | he.table.consists.of.following.d |
fbce0 | 61 74 61 3a 00 54 68 65 20 74 61 73 6b 20 73 63 68 65 64 75 6c 65 72 20 61 6c 6c 6f 77 73 20 79 | ata:.The.task.scheduler.allows.y |
fbd00 | 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 74 61 73 6b 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 73 | ou.to.execute.tasks.on.a.given.s |
fbd20 | 63 68 65 64 75 6c 65 2e 20 49 74 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 55 4e 49 58 20 63 72 | chedule..It.makes.use.of.UNIX.cr |
fbd40 | 6f 6e 5f 2e 00 54 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6d 75 73 | on_..The.translation.address.mus |
fbd60 | 74 20 62 65 20 73 65 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 | t.be.set.to.one.of.the.available |
fbd80 | 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 6f 75 | .addresses.on.the.configured.`ou |
fbda0 | 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 6f 72 20 69 74 20 6d 75 73 74 20 62 65 20 | tbound-interface`.or.it.must.be. |
fbdc0 | 73 65 74 20 74 6f 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 77 68 69 63 68 20 77 69 6c 6c 20 75 | set.to.`masquerade`.which.will.u |
fbde0 | 73 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 | se.the.primary.IP.address.of.the |
fbe00 | 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 61 73 20 69 74 73 20 74 72 61 | .`outbound-interface`.as.its.tra |
fbe20 | 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c | nslation.address..The.tunnel.wil |
fbe40 | 6c 20 75 73 65 20 31 30 2e 32 35 35 2e 31 2e 31 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 49 | l.use.10.255.1.1.for.the.local.I |
fbe60 | 50 20 61 6e 64 20 31 30 2e 32 35 35 2e 31 2e 32 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 2e | P.and.10.255.1.2.for.the.remote. |
fbe80 | 00 54 68 65 20 74 79 70 65 20 63 61 6e 20 62 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 | .The.type.can.be.the.following:. |
fbea0 | 61 73 62 72 2d 73 75 6d 6d 61 72 79 2c 20 65 78 74 65 72 6e 61 6c 2c 20 6e 65 74 77 6f 72 6b 2c | asbr-summary,.external,.network, |
fbec0 | 20 6e 73 73 61 2d 65 78 74 65 72 6e 61 6c 2c 20 6f 70 61 71 75 65 2d 61 72 65 61 2c 20 6f 70 61 | .nssa-external,.opaque-area,.opa |
fbee0 | 71 75 65 2d 61 73 2c 20 6f 70 61 71 75 65 2d 6c 69 6e 6b 2c 20 72 6f 75 74 65 72 2c 20 73 75 6d | que-as,.opaque-link,.router,.sum |
fbf00 | 6d 61 72 79 2e 00 54 68 65 20 75 6c 74 69 6d 61 74 65 20 67 6f 61 6c 20 6f 66 20 63 6c 61 73 73 | mary..The.ultimate.goal.of.class |
fbf20 | 69 66 79 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 74 6f 20 67 69 76 65 20 65 61 63 68 20 63 | ifying.traffic.is.to.give.each.c |
fbf40 | 6c 61 73 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 74 72 65 61 74 6d 65 6e 74 2e 00 54 68 65 20 | lass.a.different.treatment..The. |
fbf60 | 75 73 65 20 6f 66 20 49 50 6f 45 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 64 69 73 61 64 76 | use.of.IPoE.addresses.the.disadv |
fbf80 | 61 6e 74 61 67 65 20 74 68 61 74 20 50 50 50 20 69 73 20 75 6e 73 75 69 74 65 64 20 66 6f 72 20 | antage.that.PPP.is.unsuited.for. |
fbfa0 | 6d 75 6c 74 69 63 61 73 74 20 64 65 6c 69 76 65 72 79 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 75 | multicast.delivery.to.multiple.u |
fbfc0 | 73 65 72 73 2e 20 54 79 70 69 63 61 6c 6c 79 2c 20 49 50 6f 45 20 75 73 65 73 20 44 79 6e 61 6d | sers..Typically,.IPoE.uses.Dynam |
fbfe0 | 69 63 20 48 6f 73 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 61 | ic.Host.Configuration.Protocol.a |
fc000 | 6e 64 20 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f | nd.Extensible.Authentication.Pro |
fc020 | 74 6f 63 6f 6c 20 74 6f 20 70 72 6f 76 69 64 65 20 74 68 65 20 73 61 6d 65 20 66 75 6e 63 74 69 | tocol.to.provide.the.same.functi |
fc040 | 6f 6e 61 6c 69 74 79 20 61 73 20 50 50 50 6f 45 2c 20 62 75 74 20 69 6e 20 61 20 6c 65 73 73 20 | onality.as.PPPoE,.but.in.a.less. |
fc060 | 72 6f 62 75 73 74 20 6d 61 6e 6e 65 72 2e 00 54 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 | robust.manner..The.value.of.the. |
fc080 | 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 20 6d 75 73 74 20 62 | attribute.``NAS-Port-Id``.must.b |
fc0a0 | 65 20 6c 65 73 73 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2c 20 6f 74 68 65 72 | e.less.than.16.characters,.other |
fc0c0 | 77 69 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 6f 6e 27 74 20 62 65 20 72 65 6e 61 | wise.the.interface.won't.be.rena |
fc0e0 | 6d 65 64 2e 00 54 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 20 6f 70 74 69 6f 6e 20 | med..The.vendor-class-id.option. |
fc100 | 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 71 75 65 73 74 20 61 20 73 70 65 63 69 66 69 | can.be.used.to.request.a.specifi |
fc120 | 63 20 63 6c 61 73 73 20 6f 66 20 76 65 6e 64 6f 72 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 74 | c.class.of.vendor.options.from.t |
fc140 | 68 65 20 73 65 72 76 65 72 2e 00 54 68 65 20 76 65 74 68 20 64 65 76 69 63 65 73 20 61 72 65 20 | he.server..The.veth.devices.are. |
fc160 | 76 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 73 2e 20 54 68 65 79 20 63 | virtual.Ethernet.devices..They.c |
fc180 | 61 6e 20 61 63 74 20 61 73 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 6e 65 74 77 6f 72 | an.act.as.tunnels.between.networ |
fc1a0 | 6b 20 6e 61 6d 65 73 70 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 62 72 69 64 67 65 20 | k.namespaces.to.create.a.bridge. |
fc1c0 | 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6e 20 | to.a.physical.network.device.in. |
fc1e0 | 61 6e 6f 74 68 65 72 20 6e 61 6d 65 73 70 61 63 65 20 6f 72 20 56 52 46 2c 20 62 75 74 20 63 61 | another.namespace.or.VRF,.but.ca |
fc200 | 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 74 61 6e 64 61 6c 6f 6e 65 20 6e 65 74 | n.also.be.used.as.standalone.net |
fc220 | 77 6f 72 6b 20 64 65 76 69 63 65 73 2e 00 54 68 65 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 4e 41 54 | work.devices..The.well.known.NAT |
fc240 | 36 34 20 70 72 65 66 69 78 20 69 73 20 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 60 00 54 68 | 64.prefix.is.``64:ff9b::/96``.Th |
fc260 | 65 20 77 69 6e 64 6f 77 20 73 69 7a 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 | e.window.size.must.be.between.1. |
fc280 | 61 6e 64 20 32 31 2e 00 54 68 65 20 77 69 72 65 6c 65 73 73 20 63 6c 69 65 6e 74 20 28 73 75 70 | and.21..The.wireless.client.(sup |
fc2a0 | 70 6c 69 63 61 6e 74 29 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 61 67 61 69 6e 73 74 20 74 | plicant).authenticates.against.t |
fc2c0 | 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 28 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | he.RADIUS.server.(authentication |
fc2e0 | 20 73 65 72 76 65 72 29 20 75 73 69 6e 67 20 61 6e 20 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 | .server).using.an.:abbr:`EAP.(Ex |
fc300 | 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c | tensible.Authentication.Protocol |
fc320 | 29 60 20 20 6d 65 74 68 6f 64 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 52 41 44 | )`..method.configured.on.the.RAD |
fc340 | 49 55 53 20 73 65 72 76 65 72 2e 20 54 68 65 20 57 41 50 20 28 61 6c 73 6f 20 72 65 66 65 72 72 | IUS.server..The.WAP.(also.referr |
fc360 | 65 64 20 74 6f 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 29 20 72 6f 6c 65 20 69 73 20 | ed.to.as.authenticator).role.is. |
fc380 | 74 6f 20 73 65 6e 64 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 | to.send.all.authentication.messa |
fc3a0 | 67 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 75 70 70 6c 69 63 61 6e 74 20 61 6e 64 20 74 | ges.between.the.supplicant.and.t |
fc3c0 | 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 | he.configured.authentication.ser |
fc3e0 | 76 65 72 2c 20 74 68 75 73 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 72 | ver,.thus.the.RADIUS.server.is.r |
fc400 | 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 | esponsible.for.authenticating.th |
fc420 | 65 20 75 73 65 72 73 2e 00 54 68 65 6e 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 53 4e | e.users..Then.a.corresponding.SN |
fc440 | 41 54 20 72 75 6c 65 20 69 73 20 63 72 65 61 74 65 64 20 74 6f 20 4e 41 54 20 6f 75 74 67 6f 69 | AT.rule.is.created.to.NAT.outgoi |
fc460 | 6e 67 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 74 | ng.traffic.for.the.internal.IP.t |
fc480 | 6f 20 61 20 72 65 73 65 72 76 65 64 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 54 68 69 73 20 64 | o.a.reserved.external.IP..This.d |
fc4a0 | 65 64 69 63 61 74 65 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 | edicates.an.external.IP.address. |
fc4c0 | 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 73 | to.an.internal.IP.address.and.is |
fc4e0 | 20 75 73 65 66 75 6c 20 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 73 20 77 68 69 63 68 20 64 6f 6e 27 | .useful.for.protocols.which.don' |
fc500 | 74 20 68 61 76 65 20 74 68 65 20 6e 6f 74 69 6f 6e 20 6f 66 20 70 6f 72 74 73 2c 20 73 75 63 68 | t.have.the.notion.of.ports,.such |
fc520 | 20 61 73 20 47 52 45 2e 00 54 68 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 | .as.GRE..Then.we.need.to.generat |
fc540 | 65 2c 20 61 64 64 20 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 | e,.add.and.specify.the.names.of. |
fc560 | 74 68 65 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6d 61 74 65 72 69 61 6c 73 2e 20 45 61 63 | the.cryptographic.materials..Eac |
fc580 | 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 | h.of.the.install.command.should. |
fc5a0 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | be.applied.to.the.configuration. |
fc5c0 | 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 | and.commited.before.using.under. |
fc5e0 | 74 68 65 20 6f 70 65 6e 76 70 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 | the.openvpn.interface.configurat |
fc600 | 69 6f 6e 2e 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 | ion..Then.you.need.to.install.th |
fc620 | 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 3a 00 54 68 65 6e | e.key.on.the.remote.router:.Then |
fc640 | 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6b 65 79 20 69 6e 20 79 6f 75 72 | .you.need.to.set.the.key.in.your |
fc660 | 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 73 65 74 74 69 6e 67 73 3a 00 54 68 65 | .OpenVPN.interface.settings:.The |
fc680 | 6e 2c 20 46 61 73 74 4e 65 74 4d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 | n,.FastNetMon.configuration:.The |
fc6a0 | 72 65 20 61 72 65 20 33 20 64 65 66 61 75 6c 74 20 4e 54 50 20 73 65 72 76 65 72 20 73 65 74 2e | re.are.3.default.NTP.server.set. |
fc6c0 | 20 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 6d 2e 00 54 68 | .You.are.able.to.change.them..Th |
fc6e0 | 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 | ere.are.a.lot.of.matching.criter |
fc700 | 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 61 67 65 20 63 61 6e | ia.against.which.the.package.can |
fc720 | 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d | .be.tested..There.are.a.lot.of.m |
fc740 | 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 | atching.criteria.against.which.t |
fc760 | 68 65 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 | he.packet.can.be.tested..There.a |
fc780 | 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 6f 70 | re.a.lot.of.matching.criteria.op |
fc7a0 | 74 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 2c 20 62 6f 74 68 20 66 6f 72 20 60 60 70 6f 6c 69 | tions.available,.both.for.``poli |
fc7c0 | 63 79 20 72 6f 75 74 65 60 60 20 61 6e 64 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 65 36 60 60 | cy.route``.and.``policy.route6`` |
fc7e0 | 2e 20 54 68 65 73 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 6c 69 73 74 65 64 20 69 6e 20 74 68 | ..These.options.are.listed.in.th |
fc800 | 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 72 65 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 | is.section..There.are.different. |
fc820 | 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 67 65 74 74 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 | parameters.for.getting.prefix-li |
fc840 | 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 6c 69 6d 69 74 73 | st.information:.There.are.limits |
fc860 | 20 6f 6e 20 77 68 69 63 68 20 63 68 61 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 | .on.which.channels.can.be.used.w |
fc880 | 69 74 68 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 2b 2e 20 46 6f 6c 6c 6f 77 69 6e 67 20 74 | ith.HT40-.and.HT40+..Following.t |
fc8a0 | 61 62 6c 65 20 73 68 6f 77 73 20 74 68 65 20 63 68 61 6e 6e 65 6c 73 20 74 68 61 74 20 6d 61 79 | able.shows.the.channels.that.may |
fc8c0 | 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 | .be.available.for.HT40-.and.HT40 |
fc8e0 | 2b 20 75 73 65 20 70 65 72 20 49 45 45 45 20 38 30 32 2e 31 31 6e 20 41 6e 6e 65 78 20 4a 3a 00 | +.use.per.IEEE.802.11n.Annex.J:. |
fc900 | 54 68 65 72 65 20 61 72 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 77 69 | There.are.many.parameters.you.wi |
fc920 | 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 | ll.be.able.to.use.in.order.to.ma |
fc940 | 74 63 68 20 74 68 65 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 66 6f 72 20 61 20 63 | tch.the.traffic.you.want.for.a.c |
fc960 | 6c 61 73 73 3a 00 54 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 76 65 72 73 69 6f 6e | lass:.There.are.multiple.version |
fc980 | 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 | s.available.for.the.NetFlow.data |
fc9a0 | 2e 20 54 68 65 20 60 3c 76 65 72 73 69 6f 6e 3e 60 20 75 73 65 64 20 69 6e 20 74 68 65 20 65 78 | ..The.`<version>`.used.in.the.ex |
fc9c0 | 70 6f 72 74 65 64 20 66 6c 6f 77 20 64 61 74 61 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 | ported.flow.data.can.be.configur |
fc9e0 | 65 64 20 68 65 72 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 76 65 72 73 69 6f 6e 73 20 | ed.here..The.following.versions. |
fca00 | 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 54 68 65 72 65 20 61 72 65 20 72 61 74 65 2d 6c 69 | are.supported:.There.are.rate-li |
fca20 | 6d 69 74 65 64 20 61 6e 64 20 6e 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 75 73 65 72 73 | mited.and.non.rate-limited.users |
fca40 | 20 28 4d 41 43 73 29 00 54 68 65 72 65 20 61 72 65 20 73 6f 6d 65 20 73 63 65 6e 61 72 69 6f 73 | .(MACs).There.are.some.scenarios |
fca60 | 20 77 68 65 72 65 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 75 73 65 66 75 | .where.serial.consoles.are.usefu |
fca80 | 6c 2e 20 53 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 72 65 6d 6f | l..System.administration.of.remo |
fcaa0 | 74 65 20 63 6f 6d 70 75 74 65 72 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 6f 6e 65 20 75 73 69 | te.computers.is.usually.done.usi |
fcac0 | 6e 67 20 3a 72 65 66 3a 60 73 73 68 60 2c 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 74 69 6d | ng.:ref:`ssh`,.but.there.are.tim |
fcae0 | 65 73 20 77 68 65 6e 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 73 | es.when.access.to.the.console.is |
fcb00 | 20 74 68 65 20 6f 6e 6c 79 20 77 61 79 20 74 6f 20 64 69 61 67 6e 6f 73 65 20 61 6e 64 20 63 6f | .the.only.way.to.diagnose.and.co |
fcb20 | 72 72 65 63 74 20 73 6f 66 74 77 61 72 65 20 66 61 69 6c 75 72 65 73 2e 20 4d 61 6a 6f 72 20 75 | rrect.software.failures..Major.u |
fcb40 | 70 67 72 61 64 65 73 20 74 6f 20 74 68 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 73 74 72 69 62 | pgrades.to.the.installed.distrib |
fcb60 | 75 74 69 6f 6e 20 6d 61 79 20 61 6c 73 6f 20 72 65 71 75 69 72 65 20 63 6f 6e 73 6f 6c 65 20 61 | ution.may.also.require.console.a |
fcb80 | 63 63 65 73 73 2e 00 54 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 6f 66 20 | ccess..There.are.three.modes.of. |
fcba0 | 6f 70 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 | operation.for.a.wireless.interfa |
fcbc0 | 63 65 3a 00 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 74 79 70 65 73 20 6f 66 20 4e 65 74 77 6f | ce:.There.are.two.types.of.Netwo |
fcbe0 | 72 6b 20 41 64 6d 69 6e 73 20 77 68 6f 20 64 65 61 6c 20 77 69 74 68 20 42 47 50 2c 20 74 68 6f | rk.Admins.who.deal.with.BGP,.tho |
fcc00 | 73 65 20 77 68 6f 20 68 61 76 65 20 63 72 65 61 74 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 74 69 | se.who.have.created.an.internati |
fcc20 | 6f 6e 61 6c 20 69 6e 63 69 64 65 6e 74 20 61 6e 64 2f 6f 72 20 6f 75 74 61 67 65 2c 20 61 6e 64 | onal.incident.and/or.outage,.and |
fcc40 | 20 74 68 6f 73 65 20 77 68 6f 20 61 72 65 20 6c 79 69 6e 67 00 54 68 65 72 65 20 61 72 65 20 74 | .those.who.are.lying.There.are.t |
fcc60 | 77 6f 20 77 61 79 73 20 74 68 61 74 20 68 65 6c 70 20 75 73 20 74 6f 20 6d 69 74 69 67 61 74 65 | wo.ways.that.help.us.to.mitigate |
fcc80 | 20 74 68 65 20 42 47 50 73 20 66 75 6c 6c 2d 6d 65 73 68 20 72 65 71 75 69 72 65 6d 65 6e 74 20 | .the.BGPs.full-mesh.requirement. |
fcca0 | 69 6e 20 61 20 6e 65 74 77 6f 72 6b 3a 00 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 | in.a.network:.There.can.only.be. |
fccc0 | 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 60 60 6c 6f 60 60 20 69 6e 74 65 72 66 61 63 65 20 6f 6e | one.loopback.``lo``.interface.on |
fcce0 | 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c | .the.system..If.you.need.multipl |
fcd00 | 65 20 69 6e 74 65 72 66 61 63 65 73 2c 20 70 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 3a 72 65 | e.interfaces,.please.use.the.:re |
fcd20 | 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 20 74 79 | f:`dummy-interface`.interface.ty |
fcd40 | 70 65 2e 00 54 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 77 69 64 65 20 72 61 6e 67 65 20 | pe..There.could.be.a.wide.range. |
fcd60 | 6f 66 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 53 6f 6d 65 20 65 78 61 6d 70 6c | of.routing.policies..Some.exampl |
fcd80 | 65 73 20 61 72 65 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 72 65 20 69 73 20 61 20 | es.are.listed.below:.There.is.a. |
fcda0 | 76 65 72 79 20 6e 69 63 65 20 70 69 63 74 75 72 65 2f 65 78 70 6c 61 6e 61 74 69 6f 6e 20 69 6e | very.nice.picture/explanation.in |
fcdc0 | 20 74 68 65 20 56 79 61 74 74 61 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 77 68 69 63 68 20 | .the.Vyatta.documentation.which. |
fcde0 | 73 68 6f 75 6c 64 20 62 65 20 72 65 77 72 69 74 74 65 6e 20 68 65 72 65 2e 00 54 68 65 72 65 20 | should.be.rewritten.here..There. |
fce00 | 69 73 20 61 6c 73 6f 20 61 20 47 52 45 20 6f 76 65 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c | is.also.a.GRE.over.IPv6.encapsul |
fce20 | 61 74 69 6f 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 69 74 20 69 73 20 63 61 6c 6c 65 64 3a 20 60 | ation.available,.it.is.called:.` |
fce40 | 60 69 70 36 67 72 65 60 60 2e 00 54 68 65 72 65 20 69 73 20 61 6e 20 65 6e 74 69 72 65 20 63 68 | `ip6gre``..There.is.an.entire.ch |
fce60 | 61 70 74 65 72 20 61 62 6f 75 74 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a | apter.about.how.to.configure.a.: |
fce80 | 72 65 66 3a 60 76 72 66 60 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 69 73 20 66 6f 72 | ref:`vrf`,.please.check.this.for |
fcea0 | 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 72 65 27 73 | .additional.information..There's |
fcec0 | 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 63 6c 69 65 6e 74 20 47 55 49 20 66 72 6f 6e 74 65 6e | .a.variety.of.client.GUI.fronten |
fcee0 | 64 73 20 66 6f 72 20 61 6e 79 20 70 6c 61 74 66 6f 72 6d 00 54 68 65 73 65 20 61 72 65 20 74 68 | ds.for.any.platform.These.are.th |
fcf00 | 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 61 20 62 61 73 69 63 20 73 65 74 75 70 2e 00 54 68 | e.commands.for.a.basic.setup..Th |
fcf20 | 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 61 6c 6c 6f 77 20 74 68 65 20 56 4c 41 4e 31 30 20 61 6e | ese.commands.allow.the.VLAN10.an |
fcf40 | 64 20 56 4c 41 4e 31 31 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 | d.VLAN11.hosts.to.communicate.wi |
fcf60 | 74 68 20 65 61 63 68 20 6f 74 68 65 72 20 75 73 69 6e 67 20 74 68 65 20 6d 61 69 6e 20 72 6f 75 | th.each.other.using.the.main.rou |
fcf80 | 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ting.table..These.configuration. |
fcfa0 | 69 73 20 6e 6f 74 20 6d 61 6e 64 61 74 6f 72 79 20 61 6e 64 20 69 6e 20 6d 6f 73 74 20 63 61 73 | is.not.mandatory.and.in.most.cas |
fcfc0 | 65 73 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | es.there's.no.need.to.configure. |
fcfe0 | 69 74 2e 20 42 75 74 20 69 66 20 6e 65 63 65 73 73 61 72 79 2c 20 47 72 61 74 75 69 74 6f 75 73 | it..But.if.necessary,.Gratuitous |
fd000 | 20 41 52 50 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 60 60 67 6c 6f 62 | .ARP.can.be.configured.in.``glob |
fd020 | 61 6c 2d 70 61 72 61 6d 65 74 65 72 73 60 60 20 61 6e 64 2f 6f 72 20 69 6e 20 60 60 67 72 6f 75 | al-parameters``.and/or.in.``grou |
fd040 | 70 60 60 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 | p``.section..These.parameters.ar |
fd060 | 65 20 70 61 73 73 65 64 20 61 73 2d 69 73 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 | e.passed.as-is.to.isc-dhcp's.dhc |
fd080 | 70 64 2e 63 6f 6e 66 20 75 6e 64 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | pd.conf.under.the.configuration. |
fd0a0 | 6e 6f 64 65 20 74 68 65 79 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 2e 20 54 68 65 79 20 61 | node.they.are.defined.in..They.a |
fd0c0 | 72 65 20 6e 6f 74 20 76 61 6c 69 64 61 74 65 64 20 73 6f 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 | re.not.validated.so.an.error.in. |
fd0e0 | 74 68 65 20 72 61 77 20 70 61 72 61 6d 65 74 65 72 73 20 77 6f 6e 27 74 20 62 65 20 63 61 75 67 | the.raw.parameters.won't.be.caug |
fd100 | 68 74 20 62 79 20 76 79 6f 73 27 73 20 73 63 72 69 70 74 73 20 61 6e 64 20 77 69 6c 6c 20 63 61 | ht.by.vyos's.scripts.and.will.ca |
fd120 | 75 73 65 20 64 68 63 70 64 20 74 6f 20 66 61 69 6c 20 74 6f 20 73 74 61 72 74 2e 20 41 6c 77 61 | use.dhcpd.to.fail.to.start..Alwa |
fd140 | 79 73 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 | ys.verify.that.the.parameters.ar |
fd160 | 65 20 63 6f 72 72 65 63 74 20 62 65 66 6f 72 65 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 | e.correct.before.committing.the. |
fd180 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 52 65 66 65 72 20 74 6f 20 69 73 63 2d 64 68 63 70 | configuration..Refer.to.isc-dhcp |
fd1a0 | 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 6d 61 6e 75 61 6c 20 66 6f 72 20 6d 6f 72 65 20 69 6e | 's.dhcpd.conf.manual.for.more.in |
fd1c0 | 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6b 62 2e 69 73 63 2e 6f 72 67 2f 64 6f | formation:.https://kb.isc.org/do |
fd1e0 | 63 73 2f 69 73 63 2d 64 68 63 70 2d 34 34 2d 6d 61 6e 75 61 6c 2d 70 61 67 65 73 2d 64 68 63 70 | cs/isc-dhcp-44-manual-pages-dhcp |
fd200 | 64 63 6f 6e 66 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 6e 65 65 64 20 74 6f 20 62 | dconf.These.parameters.need.to.b |
fd220 | 65 20 70 61 72 74 20 6f 66 20 74 68 65 20 44 48 43 50 20 67 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e | e.part.of.the.DHCP.global.option |
fd240 | 73 2e 20 54 68 65 79 20 73 74 61 79 20 75 6e 63 68 61 6e 67 65 64 2e 00 54 68 65 79 20 63 61 6e | s..They.stay.unchanged..They.can |
fd260 | 20 62 65 20 2a 2a 64 65 63 69 6d 61 6c 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 6e 67 73 | .be.**decimal**.prefixes..Things |
fd280 | 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 74 75 70 3a 00 | .to.be.considred.in.this.setup:. |
fd2a0 | 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 74 68 65 20 61 64 64 72 65 73 73 | This.address.must.be.the.address |
fd2c0 | 20 6f 66 20 61 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 6d 61 79 20 62 65 | .of.a.local.interface..It.may.be |
fd2e0 | 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 | .specified.as.an.IPv4.address.or |
fd300 | 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d | .an.IPv6.address..This.algorithm |
fd320 | 20 69 73 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 00 54 68 69 73 20 61 6c 67 6f | .is.802.3ad.compliant..This.algo |
fd340 | 72 69 74 68 6d 20 69 73 20 6e 6f 74 20 66 75 6c 6c 79 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c | rithm.is.not.fully.802.3ad.compl |
fd360 | 69 61 6e 74 2e 20 41 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f 6e 76 65 72 | iant..A.single.TCP.or.UDP.conver |
fd380 | 73 61 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 69 6e 67 20 62 6f 74 68 20 66 72 61 67 6d 65 6e 74 65 | sation.containing.both.fragmente |
fd3a0 | 64 20 61 6e 64 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 | d.and.unfragmented.packets.will. |
fd3c0 | 73 65 65 20 70 61 63 6b 65 74 73 20 73 74 72 69 70 65 64 20 61 63 72 6f 73 73 20 74 77 6f 20 69 | see.packets.striped.across.two.i |
fd3e0 | 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e 20 6f 75 | nterfaces..This.may.result.in.ou |
fd400 | 74 20 6f 66 20 6f 72 64 65 72 20 64 65 6c 69 76 65 72 79 2e 20 4d 6f 73 74 20 74 72 61 66 66 69 | t.of.order.delivery..Most.traffi |
fd420 | 63 20 74 79 70 65 73 20 77 69 6c 6c 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 73 65 20 63 72 69 74 | c.types.will.not.meet.these.crit |
fd440 | 65 72 69 61 2c 20 61 73 20 54 43 50 20 72 61 72 65 6c 79 20 66 72 61 67 6d 65 6e 74 73 20 74 72 | eria,.as.TCP.rarely.fragments.tr |
fd460 | 61 66 66 69 63 2c 20 61 6e 64 20 6d 6f 73 74 20 55 44 50 20 74 72 61 66 66 69 63 20 69 73 20 6e | affic,.and.most.UDP.traffic.is.n |
fd480 | 6f 74 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6e 76 65 72 73 61 | ot.involved.in.extended.conversa |
fd4a0 | 74 69 6f 6e 73 2e 20 4f 74 68 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6f 66 20 | tions..Other.implementations.of. |
fd4c0 | 38 30 32 2e 33 61 64 20 6d 61 79 20 6f 72 20 6d 61 79 20 6e 6f 74 20 74 6f 6c 65 72 61 74 65 20 | 802.3ad.may.or.may.not.tolerate. |
fd4e0 | 74 68 69 73 20 6e 6f 6e 63 6f 6d 70 6c 69 61 6e 63 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 | this.noncompliance..This.algorit |
fd500 | 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 | hm.will.place.all.traffic.to.a.p |
fd520 | 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 | articular.network.peer.on.the.sa |
fd540 | 6d 65 20 73 6c 61 76 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c | me.slave..This.algorithm.will.pl |
fd560 | 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 | ace.all.traffic.to.a.particular. |
fd580 | 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 20 | network.peer.on.the.same.slave.. |
fd5a0 | 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 | For.non-IP.traffic,.the.formula. |
fd5c0 | 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 | is.the.same.as.for.the.layer2.tr |
fd5e0 | 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 | ansmit.hash.policy..This.allows. |
fd600 | 61 76 6f 69 64 69 6e 67 20 74 68 65 20 74 69 6d 65 72 73 20 64 65 66 69 6e 65 64 20 69 6e 20 42 | avoiding.the.timers.defined.in.B |
fd620 | 47 50 20 61 6e 64 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 65 78 70 69 72 65 73 2e | GP.and.OSPF.protocol.to.expires. |
fd640 | 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f 20 63 6f 6e | .This.allows.the.operator.to.con |
fd660 | 74 72 6f 6c 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 66 69 6c 65 20 64 65 73 | trol.the.number.of.open.file.des |
fd680 | 63 72 69 70 74 6f 72 73 20 65 61 63 68 20 64 61 65 6d 6f 6e 20 69 73 20 61 6c 6c 6f 77 65 64 20 | criptors.each.daemon.is.allowed. |
fd6a0 | 74 6f 20 73 74 61 72 74 20 77 69 74 68 2e 20 49 66 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 70 | to.start.with..If.the.operator.p |
fd6c0 | 6c 61 6e 73 20 74 6f 20 72 75 6e 20 62 67 70 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 74 68 6f | lans.to.run.bgp.with.several.tho |
fd6e0 | 75 73 61 6e 64 73 20 6f 66 20 70 65 65 72 73 20 74 68 65 6e 20 74 68 69 73 20 69 73 20 77 68 65 | usands.of.peers.then.this.is.whe |
fd700 | 72 65 20 77 65 20 77 6f 75 6c 64 20 6d 6f 64 69 66 79 20 46 52 52 20 74 6f 20 61 6c 6c 6f 77 20 | re.we.would.modify.FRR.to.allow. |
fd720 | 74 68 69 73 20 74 6f 20 68 61 70 70 65 6e 2e 00 54 68 69 73 20 61 6c 73 6f 20 77 6f 72 6b 73 20 | this.to.happen..This.also.works. |
fd740 | 66 6f 72 20 72 65 76 65 72 73 65 2d 6c 6f 6f 6b 75 70 20 7a 6f 6e 65 73 20 28 60 60 31 38 2e 31 | for.reverse-lookup.zones.(``18.1 |
fd760 | 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 60 60 29 2e 00 54 68 69 73 20 61 72 74 69 63 6c 65 | 72.in-addr.arpa``)..This.article |
fd780 | 20 74 6f 75 63 68 65 73 20 6f 6e 20 27 63 6c 61 73 73 69 63 27 20 49 50 20 74 75 6e 6e 65 6c 69 | .touches.on.'classic'.IP.tunneli |
fd7a0 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 69 73 20 62 6c 75 65 70 72 69 6e 74 20 75 73 65 | ng.protocols..This.blueprint.use |
fd7c0 | 73 20 56 79 4f 53 20 61 73 20 74 68 65 20 44 4d 56 50 4e 20 48 75 62 20 61 6e 64 20 43 69 73 63 | s.VyOS.as.the.DMVPN.Hub.and.Cisc |
fd7e0 | 6f 20 28 37 32 30 36 56 58 52 29 20 61 6e 64 20 56 79 4f 53 20 61 73 20 6d 75 6c 74 69 70 6c 65 | o.(7206VXR).and.VyOS.as.multiple |
fd800 | 20 73 70 6f 6b 65 20 73 69 74 65 73 2e 20 54 68 65 20 6c 61 62 20 77 61 73 20 62 75 69 6c 64 20 | .spoke.sites..The.lab.was.build. |
fd820 | 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 45 56 45 2d 4e 47 20 28 45 6d 75 6c 61 74 65 64 20 56 69 | using.:abbr:`EVE-NG.(Emulated.Vi |
fd840 | 72 74 75 61 6c 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 20 4e 47 29 60 2e 00 54 68 69 73 20 63 61 6e | rtual.Environment.NG)`..This.can |
fd860 | 20 62 65 20 63 6f 6e 66 69 72 6d 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 73 68 6f 77 20 69 | .be.confirmed.using.the.``show.i |
fd880 | 70 20 72 6f 75 74 65 20 74 61 62 6c 65 20 31 30 30 60 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 | p.route.table.100``.operational. |
fd8a0 | 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 64 6f 6e 65 20 69 | command..This.can.only.be.done.i |
fd8c0 | 66 20 61 6c 6c 20 79 6f 75 72 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 64 69 72 | f.all.your.users.are.located.dir |
fd8e0 | 65 63 74 6c 79 20 75 6e 64 65 72 20 74 68 65 20 73 61 6d 65 20 70 6f 73 69 74 69 6f 6e 20 69 6e | ectly.under.the.same.position.in |
fd900 | 20 74 68 65 20 4c 44 41 50 20 74 72 65 65 20 61 6e 64 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d | .the.LDAP.tree.and.the.login.nam |
fd920 | 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 6e 61 6d 69 6e 67 20 65 61 63 68 20 75 73 65 72 20 6f | e.is.used.for.naming.each.user.o |
fd940 | 62 6a 65 63 74 2e 20 49 66 20 79 6f 75 72 20 4c 44 41 50 20 74 72 65 65 20 64 6f 65 73 20 6e 6f | bject..If.your.LDAP.tree.does.no |
fd960 | 74 20 6d 61 74 63 68 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 73 20 6f 72 20 69 66 20 79 6f | t.match.these.criterias.or.if.yo |
fd980 | 75 20 77 61 6e 74 20 74 6f 20 66 69 6c 74 65 72 20 77 68 6f 20 61 72 65 20 76 61 6c 69 64 20 75 | u.want.to.filter.who.are.valid.u |
fd9a0 | 73 65 72 73 20 74 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 20 73 65 61 72 | sers.then.you.need.to.use.a.sear |
fd9c0 | 63 68 20 66 69 6c 74 65 72 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 20 79 6f 75 72 20 75 73 65 | ch.filter.to.search.for.your.use |
fd9e0 | 72 73 20 44 4e 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e 00 54 68 69 | rs.DN.(`filter-expression`)..Thi |
fda00 | 73 20 63 68 61 70 65 74 65 72 20 64 65 73 63 72 69 62 65 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 | s.chapeter.describes.how.to.conf |
fda20 | 69 67 75 72 65 20 6b 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 | igure.kernel.parameters.at.runti |
fda40 | 6d 65 2e 00 54 68 69 73 20 63 68 61 70 74 65 72 20 64 65 73 63 72 69 62 65 20 74 68 65 20 70 6f | me..This.chapter.describe.the.po |
fda60 | 73 73 69 62 69 6c 69 74 69 65 73 20 6f 66 20 61 64 76 61 6e 63 65 64 20 73 79 73 74 65 6d 20 62 | ssibilities.of.advanced.system.b |
fda80 | 65 68 61 76 69 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 64 20 73 65 74 73 20 6e 65 74 77 6f 72 | ehavior..This.commad.sets.networ |
fdaa0 | 6b 20 65 6e 74 69 74 79 20 74 69 74 6c 65 20 28 4e 45 54 29 20 70 72 6f 76 69 64 65 64 20 69 6e | k.entity.title.(NET).provided.in |
fdac0 | 20 49 53 4f 20 66 6f 72 6d 61 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 | .ISO.format..This.command.accept |
fdae0 | 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 73 20 77 69 74 68 20 41 53 20 70 61 74 68 20 63 6f | .incoming.routes.with.AS.path.co |
fdb00 | 6e 74 61 69 6e 69 6e 67 20 41 53 20 6e 75 6d 62 65 72 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 | ntaining.AS.number.with.the.same |
fdb20 | 20 76 61 6c 75 65 20 61 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 79 73 74 65 6d 20 41 53 2e | .value.as.the.current.system.AS. |
fdb40 | 20 54 68 69 73 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 | .This.is.used.when.you.want.to.u |
fdb60 | 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 79 6f 75 72 20 73 69 | se.the.same.AS.number.in.your.si |
fdb80 | 74 65 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e e2 80 99 74 20 63 6f 6e 6e 65 63 74 20 74 68 65 | tes,.but.you.can...t.connect.the |
fdba0 | 6d 20 64 69 72 65 63 74 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 20 6f | m.directly..This.command.allow.o |
fdbc0 | 76 65 72 72 69 64 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 43 61 70 61 62 69 6c 69 74 79 | verride.the.result.of.Capability |
fdbe0 | 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 74 68 20 6c 6f 63 61 6c 20 63 6f 6e 66 69 67 75 72 | .Negotiation.with.local.configur |
fdc00 | 61 74 69 6f 6e 2e 20 49 67 6e 6f 72 65 20 72 65 6d 6f 74 65 20 70 65 65 72 e2 80 99 73 20 63 61 | ation..Ignore.remote.peer...s.ca |
fdc20 | 70 61 62 69 6c 69 74 79 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | pability.value..This.command.all |
fdc40 | 6f 77 73 20 70 65 65 72 69 6e 67 73 20 62 65 74 77 65 65 6e 20 64 69 72 65 63 74 6c 79 20 63 6f | ows.peerings.between.directly.co |
fdc60 | 6e 6e 65 63 74 65 64 20 65 42 47 50 20 70 65 65 72 73 20 75 73 69 6e 67 20 6c 6f 6f 70 62 61 63 | nnected.eBGP.peers.using.loopbac |
fdc80 | 6b 20 61 64 64 72 65 73 73 65 73 20 77 69 74 68 6f 75 74 20 61 64 6a 75 73 74 69 6e 67 20 74 68 | k.addresses.without.adjusting.th |
fdca0 | 65 20 64 65 66 61 75 6c 74 20 54 54 4c 20 6f 66 20 31 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.default.TTL.of.1..This.command |
fdcc0 | 20 61 6c 6c 6f 77 73 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 62 65 20 65 73 74 61 62 6c 69 73 68 | .allows.sessions.to.be.establish |
fdce0 | 65 64 20 77 69 74 68 20 65 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 77 68 65 6e 20 74 68 65 79 | ed.with.eBGP.neighbors.when.they |
fdd00 | 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 68 6f 70 73 20 61 77 61 79 2e 20 57 68 65 6e 20 74 68 | .are.multiple.hops.away..When.th |
fdd20 | 65 20 6e 65 69 67 68 62 6f 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 | e.neighbor.is.not.directly.conne |
fdd40 | 63 74 65 64 20 61 6e 64 20 74 68 69 73 20 6b 6e 6f 62 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 | cted.and.this.knob.is.not.enable |
fdd60 | 64 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 65 73 74 61 62 6c 69 73 | d,.the.session.will.not.establis |
fdd80 | 68 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 | h..The.number.of.hops.range.is.1 |
fdda0 | 20 74 6f 20 32 35 35 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c | .to.255..This.command.is.mutuall |
fddc0 | 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 74 74 6c 2d 73 65 | y.exclusive.with.:cfgcmd:`ttl-se |
fdde0 | 63 75 72 69 74 79 20 68 6f 70 73 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 | curity.hops`..This.command.allow |
fde00 | 73 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 70 72 65 66 65 72 20 72 6f 75 74 65 20 74 6f 20 | s.the.router.to.prefer.route.to. |
fde20 | 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 20 49 47 50 | specified.prefix.learned.via.IGP |
fde40 | 20 74 68 72 6f 75 67 68 20 62 61 63 6b 64 6f 6f 72 20 6c 69 6e 6b 20 69 6e 73 74 65 61 64 20 6f | .through.backdoor.link.instead.o |
fde60 | 66 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 72 65 66 69 78 20 6c 65 61 | f.a.route.to.the.same.prefix.lea |
fde80 | 72 6e 65 64 20 76 69 61 20 45 42 47 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f | rned.via.EBGP..This.command.allo |
fdea0 | 77 73 20 74 6f 20 6c 6f 67 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 2e 20 | ws.to.log.changes.in.adjacency.. |
fdec0 | 57 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 | With.the.optional.:cfgcmd:`detai |
fdee0 | 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 61 6c 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 | l`.argument,.all.changes.in.adja |
fdf00 | 63 65 6e 63 79 20 73 74 61 74 75 73 20 61 72 65 20 73 68 6f 77 6e 2e 20 57 69 74 68 6f 75 74 20 | cency.status.are.shown..Without. |
fdf20 | 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 2c 20 6f 6e 6c 79 20 63 68 61 6e 67 65 73 20 74 | :cfgcmd:`detail`,.only.changes.t |
fdf40 | 6f 20 66 75 6c 6c 20 6f 72 20 72 65 67 72 65 73 73 69 6f 6e 73 20 61 72 65 20 73 68 6f 77 6e 2e | o.full.or.regressions.are.shown. |
fdf60 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 73 70 65 63 69 66 79 20 | .This.command.allows.to.specify. |
fdf80 | 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 74 79 70 65 20 66 6f 72 20 74 68 65 20 6e 65 | the.distribution.type.for.the.ne |
fdfa0 | 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | twork.connected.to.this.interfac |
fdfc0 | 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f | e:.This.command.allows.to.use.ro |
fdfe0 | 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | ute.map.to.filter.redistributed. |
fe000 | 72 6f 75 74 65 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 | routes.from.given.route.source.. |
fe020 | 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | There.are.five.modes.available.f |
fe040 | 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c | or.route.source:.bgp,.connected, |
fe060 | 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d | .kernel,.ripng,.static..This.com |
fe080 | 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 | mand.allows.to.use.route.map.to. |
fe0a0 | 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d | filter.redistributed.routes.from |
fe0c0 | 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 | .the.given.route.source..There.a |
fe0e0 | 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 | re.five.modes.available.for.rout |
fe100 | 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c | e.source:.bgp,.connected,.kernel |
fe120 | 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | ,.ospf,.static..This.command.all |
fe140 | 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 | ows.to.use.route.map.to.filter.r |
fe160 | 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 | edistributed.routes.from.the.giv |
fe180 | 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 | en.route.source..There.are.five. |
fe1a0 | 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | modes.available.for.route.source |
fe1c0 | 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 | :.bgp,.connected,.kernel,.rip,.s |
fe1e0 | 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 | tatic..This.command.allows.to.us |
fe200 | 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 | e.route.map.to.filter.redistribu |
fe220 | 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 | ted.routes.from.the.given.route. |
fe240 | 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 | source..There.are.six.modes.avai |
fe260 | 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e | lable.for.route.source:.bgp,.con |
fe280 | 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 | nected,.kernel,.ospf,.rip,.stati |
fe2a0 | 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f | c..This.command.allows.to.use.ro |
fe2c0 | 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | ute.map.to.filter.redistributed. |
fe2e0 | 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 | routes..There.are.six.modes.avai |
fe300 | 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 | lable.for.route.source:.connecte |
fe320 | 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 | d,.kernel,.ospf,.rip,.static,.ta |
fe340 | 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 | ble..This.command.allows.you.app |
fe360 | 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 | ly.access.lists.to.a.chosen.inte |
fe380 | 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 | rface.to.filter.the.Babel.routes |
fe3a0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 | ..This.command.allows.you.apply. |
fe3c0 | 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 | access.lists.to.a.chosen.interfa |
fe3e0 | 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 | ce.to.filter.the.RIP.path..This. |
fe400 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 | command.allows.you.apply.prefix. |
fe420 | 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 | lists.to.a.chosen.interface.to.f |
fe440 | 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d | ilter.the.Babel.routes..This.com |
fe460 | 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 | mand.allows.you.apply.prefix.lis |
fe480 | 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 | ts.to.a.chosen.interface.to.filt |
fe4a0 | 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | er.the.RIP.path..This.command.al |
fe4c0 | 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 65 6c 65 63 74 20 61 20 73 70 65 63 69 66 69 63 20 61 63 | lows.you.to.select.a.specific.ac |
fe4e0 | 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 77 68 65 6e 20 79 6f 75 20 6b 6e 6f 77 20 | cess.concentrator.when.you.know. |
fe500 | 74 68 65 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 60 3c 6e 61 6d 65 3e | the.access.concentrators.`<name> |
fe520 | 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 72 6f 75 74 65 2d 6d 61 | `..This.command.applies.route-ma |
fe540 | 70 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 75 6e 73 75 70 70 72 65 73 73 20 70 72 65 66 | p.to.selectively.unsuppress.pref |
fe560 | 69 78 65 73 20 73 75 70 70 72 65 73 73 65 64 20 62 79 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e | ixes.suppressed.by.summarisation |
fe580 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 41 53 20 70 61 | ..This.command.applies.the.AS.pa |
fe5a0 | 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 | th.access.list.filters.named.in. |
fe5c0 | 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 | <name>.to.the.specified.BGP.neig |
fe5e0 | 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 | hbor.to.restrict.the.routing.inf |
fe600 | 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 | ormation.that.BGP.learns.and/or. |
fe620 | 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d | advertises..The.arguments.:cfgcm |
fe640 | 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 | d:`export`.and.:cfgcmd:`import`. |
fe660 | 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 | specify.the.direction.in.which.t |
fe680 | 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 | he.AS.path.access.list.are.appli |
fe6a0 | 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 61 63 63 | ed..This.command.applies.the.acc |
fe6c0 | 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 75 6d 62 65 | ess.list.filters.named.in.<numbe |
fe6e0 | 72 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 | r>.to.the.specified.BGP.neighbor |
fe700 | 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | .to.restrict.the.routing.informa |
fe720 | 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 | tion.that.BGP.learns.and/or.adve |
fe740 | 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 | rtises..The.arguments.:cfgcmd:`e |
fe760 | 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 | xport`.and.:cfgcmd:`import`.spec |
fe780 | 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 | ify.the.direction.in.which.the.a |
fe7a0 | 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d | ccess.list.are.applied..This.com |
fe7c0 | 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 70 72 66 65 66 69 78 20 6c 69 73 74 20 66 69 | mand.applies.the.prfefix.list.fi |
fe7e0 | 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 | lters.named.in.<name>.to.the.spe |
fe800 | 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 | cified.BGP.neighbor.to.restrict. |
fe820 | 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 | the.routing.information.that.BGP |
fe840 | 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 | .learns.and/or.advertises..The.a |
fe860 | 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 | rguments.:cfgcmd:`export`.and.:c |
fe880 | 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 | fgcmd:`import`.specify.the.direc |
fe8a0 | 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 20 61 72 | tion.in.which.the.prefix.list.ar |
fe8c0 | 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 | e.applied..This.command.applies. |
fe8e0 | 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f | the.route.map.named.in.<name>.to |
fe900 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 63 | .the.specified.BGP.neighbor.to.c |
fe920 | 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d | ontrol.and.modify.routing.inform |
fe940 | 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 | ation.that.is.exchanged.between. |
fe960 | 70 65 65 72 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 | peers..The.arguments.:cfgcmd:`ex |
fe980 | 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 | port`.and.:cfgcmd:`import`.speci |
fe9a0 | 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f | fy.the.direction.in.which.the.ro |
fe9c0 | 75 74 65 20 6d 61 70 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ute.map.are.applied..This.comman |
fe9e0 | 64 20 62 69 6e 64 20 73 70 65 63 69 66 69 63 20 70 65 65 72 20 74 6f 20 70 65 65 72 20 67 72 6f | d.bind.specific.peer.to.peer.gro |
fea00 | 75 70 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | up.with.a.given.name..This.comma |
fea20 | 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 | nd.can.be.used.to.filter.the.Bab |
fea40 | 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 | el.routes.using.access.lists..:c |
fea60 | 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 | fgcmd:`in`.and.:cfgcmd:`out`.thi |
fea80 | 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 | s.is.the.direction.in.which.the. |
feaa0 | 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 | access.lists.are.applied..This.c |
feac0 | 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 | ommand.can.be.used.to.filter.the |
feae0 | 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 | .Babel.routes.using.prefix.lists |
feb00 | 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 | ..:cfgcmd:`in`.and.:cfgcmd:`out` |
feb20 | 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 | .this.is.the.direction.in.which. |
feb40 | 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 | the.prefix.lists.are.applied..Th |
feb60 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 | is.command.can.be.used.to.filter |
feb80 | 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 | .the.RIP.path.using.access.lists |
feba0 | 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 | ..:cfgcmd:`in`.and.:cfgcmd:`out` |
febc0 | 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 | .this.is.the.direction.in.which. |
febe0 | 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 | the.access.lists.are.applied..Th |
fec00 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 | is.command.can.be.used.to.filter |
fec20 | 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 | .the.RIP.path.using.prefix.lists |
fec40 | 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 | ..:cfgcmd:`in`.and.:cfgcmd:`out` |
fec60 | 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 | .this.is.the.direction.in.which. |
fec80 | 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 | the.prefix.lists.are.applied..Th |
feca0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 70 72 65 76 | is.command.can.be.used.with.prev |
fecc0 | 69 6f 75 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 | ious.command.to.sets.default.RIP |
fece0 | 20 64 69 73 74 61 6e 63 65 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 | .distance.to.specified.value.whe |
fed00 | 6e 20 74 68 65 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 | n.the.route.source.IP.address.ma |
fed20 | 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 | tches.the.specified.prefix.and.t |
fed40 | 68 65 20 73 70 65 63 69 66 69 65 64 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 54 68 69 73 20 63 | he.specified.access-list..This.c |
fed60 | 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 | ommand.change.distance.value.of. |
fed80 | 42 47 50 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 | BGP..The.arguments.are.the.dista |
feda0 | 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 | nce.values.for.external.routes,. |
fedc0 | 69 6e 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 | internal.routes.and.local.routes |
fede0 | 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 | .respectively..The.distance.rang |
fee00 | 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e | e.is.1.to.255..This.command.chan |
fee20 | 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 20 67 6c 6f 62 61 6c | ge.distance.value.of.OSPF.global |
fee40 | 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 | ly..The.distance.range.is.1.to.2 |
fee60 | 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 | 55..This.command.change.distance |
fee80 | 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 | .value.of.OSPF..The.arguments.ar |
feea0 | 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e | e.the.distance.values.for.extern |
feec0 | 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 | al.routes,.inter-area.routes.and |
feee0 | 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e | .intra-area.routes.respectively. |
fef00 | 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e | .The.distance.range.is.1.to.255. |
fef20 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 | .This.command.change.distance.va |
fef40 | 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 | lue.of.OSPFv3.globally..The.dist |
fef60 | 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d | ance.range.is.1.to.255..This.com |
fef80 | 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 | mand.change.distance.value.of.OS |
fefa0 | 50 46 76 33 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 | PFv3..The.arguments.are.the.dist |
fefc0 | 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c | ance.values.for.external.routes, |
fefe0 | 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 | .inter-area.routes.and.intra-are |
ff000 | 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 | a.routes.respectively..The.dista |
ff020 | 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d | nce.range.is.1.to.255..This.comm |
ff040 | 61 6e 64 20 63 68 61 6e 67 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 | and.change.the.distance.value.of |
ff060 | 20 52 49 50 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f | .RIP..The.distance.range.is.1.to |
ff080 | 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 65 | .255..This.command.changes.the.e |
ff0a0 | 42 47 50 20 62 65 68 61 76 69 6f 72 20 6f 66 20 46 52 52 2e 20 42 79 20 64 65 66 61 75 6c 74 20 | BGP.behavior.of.FRR..By.default. |
ff0c0 | 46 52 52 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e | FRR.enables.:rfc:`8212`.function |
ff0e0 | 61 6c 69 74 79 20 77 68 69 63 68 20 61 66 66 65 63 74 73 20 68 6f 77 20 65 42 47 50 20 72 6f 75 | ality.which.affects.how.eBGP.rou |
ff100 | 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 2c 20 6e 61 6d 65 6c 79 20 6e 6f 20 72 6f | tes.are.advertised,.namely.no.ro |
ff120 | 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 20 61 63 72 6f 73 73 20 65 42 47 50 20 | utes.are.advertised.across.eBGP. |
ff140 | 73 65 73 73 69 6f 6e 73 20 77 69 74 68 6f 75 74 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 65 67 | sessions.without.some.sort.of.eg |
ff160 | 72 65 73 73 20 72 6f 75 74 65 2d 6d 61 70 2f 70 6f 6c 69 63 79 20 69 6e 20 70 6c 61 63 65 2e 20 | ress.route-map/policy.in.place.. |
ff180 | 49 6e 20 56 79 4f 53 20 68 6f 77 65 76 65 72 20 77 65 20 68 61 76 65 20 74 68 69 73 20 52 46 43 | In.VyOS.however.we.have.this.RFC |
ff1a0 | 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 | .functionality.disabled.by.defau |
ff1c0 | 6c 74 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 | lt.so.that.we.can.preserve.backw |
ff1e0 | 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 77 69 74 68 20 6f 6c 64 65 72 20 76 65 | ards.compatibility.with.older.ve |
ff200 | 72 73 69 6f 6e 73 20 6f 66 20 56 79 4f 53 2e 20 57 69 74 68 20 74 68 69 73 20 6f 70 74 69 6f 6e | rsions.of.VyOS..With.this.option |
ff220 | 20 6f 6e 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 | .one.can.enable.:rfc:`8212`.func |
ff240 | 74 69 6f 6e 61 6c 69 74 79 20 74 6f 20 6f 70 65 72 61 74 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | tionality.to.operate..This.comma |
ff260 | 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 70 61 64 64 69 6e 67 20 6f 6e 20 68 65 6c 6c 6f 20 70 | nd.configures.padding.on.hello.p |
ff280 | 61 63 6b 65 74 73 20 74 6f 20 61 63 63 6f 6d 6d 6f 64 61 74 65 20 61 73 79 6d 6d 65 74 72 69 63 | ackets.to.accommodate.asymmetric |
ff2a0 | 61 6c 20 6d 61 78 69 6d 75 6d 20 74 72 61 6e 73 66 65 72 20 75 6e 69 74 73 20 28 4d 54 55 73 29 | al.maximum.transfer.units.(MTUs) |
ff2c0 | 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 68 6f 73 74 73 20 61 73 20 64 65 73 63 72 69 62 | .from.different.hosts.as.describ |
ff2e0 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 31 39 60 2e 20 54 68 69 73 20 68 65 6c 70 73 20 74 6f | ed.in.:rfc:`3719`..This.helps.to |
ff300 | 20 70 72 65 76 65 6e 74 20 61 20 70 72 65 6d 61 74 75 72 65 20 61 64 6a 61 63 65 6e 63 79 20 55 | .prevent.a.premature.adjacency.U |
ff320 | 70 20 73 74 61 74 65 20 77 68 65 6e 20 6f 6e 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 | p.state.when.one.routing.devices |
ff340 | 20 4d 54 55 20 64 6f 65 73 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 | .MTU.does.not.meet.the.requireme |
ff360 | 6e 74 73 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 61 64 6a 61 63 65 6e 63 79 2e 00 | nts.to.establish.the.adjacency.. |
ff380 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 75 74 68 | This.command.configures.the.auth |
ff3a0 | 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 | entication.password.for.the.inte |
ff3c0 | 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 | rface..This.command.configures.t |
ff3e0 | 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 67 65 6e 65 72 61 74 65 64 20 3a 61 62 | he.maximum.size.of.generated.:ab |
ff400 | 62 72 3a 60 4c 53 50 73 20 28 4c 69 6e 6b 20 53 74 61 74 65 20 50 44 55 73 29 60 2c 20 69 6e 20 | br:`LSPs.(Link.State.PDUs)`,.in. |
ff420 | 62 79 74 65 73 2e 20 54 68 65 20 73 69 7a 65 20 72 61 6e 67 65 20 69 73 20 31 32 38 20 74 6f 20 | bytes..The.size.range.is.128.to. |
ff440 | 34 33 35 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 | 4352..This.command.configures.th |
ff460 | 65 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | e.passive.mode.for.this.interfac |
ff480 | 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 6e 65 | e..This.command.creates.a.new.ne |
ff4a0 | 69 67 68 62 6f 72 20 77 68 6f 73 65 20 72 65 6d 6f 74 65 2d 61 73 20 69 73 20 3c 6e 61 73 6e 3e | ighbor.whose.remote-as.is.<nasn> |
ff4c0 | 2e 20 54 68 65 20 6e 65 69 67 68 62 6f 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e | ..The.neighbor.address.can.be.an |
ff4e0 | 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 | .IPv4.address.or.an.IPv6.address |
ff500 | 20 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 | .or.an.interface.to.use.for.the. |
ff520 | 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 70 70 6c 69 | connection..The.command.is.appli |
ff540 | 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 61 6e 64 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 | cable.for.peer.and.peer.group..T |
ff560 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 6f 75 74 65 2d | his.command.creates.a.new.route- |
ff580 | 6d 61 70 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e | map.policy,.identified.by.<text> |
ff5a0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c | ..This.command.creates.a.new.rul |
ff5c0 | 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 | e.in.the.IPv6.access.list.and.de |
ff5e0 | 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 | fines.an.action..This.command.cr |
ff600 | 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 70 72 65 | eates.a.new.rule.in.the.IPv6.pre |
ff620 | 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 | fix-list.and.defines.an.action.. |
ff640 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 | This.command.creates.a.new.rule. |
ff660 | 69 6e 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 | in.the.access.list.and.defines.a |
ff680 | 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 | n.action..This.command.creates.a |
ff6a0 | 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 | .new.rule.in.the.prefix-list.and |
ff6c0 | 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .defines.an.action..This.command |
ff6e0 | 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 | .creates.the.new.IPv6.access.lis |
ff700 | 74 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 00 54 68 69 73 20 63 6f 6d | t,.identified.by.<text>.This.com |
ff720 | 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 70 72 65 66 69 78 | mand.creates.the.new.IPv6.prefix |
ff740 | 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 | -list.policy,.identified.by.<tex |
ff760 | 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 | t>..This.command.creates.the.new |
ff780 | 20 61 63 63 65 73 73 20 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 77 68 65 72 65 20 3c 61 63 6c 5f | .access.list.policy,.where.<acl_ |
ff7a0 | 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 | number>.must.be.a.number.from.1. |
ff7c0 | 74 6f 20 32 36 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 | to.2699..This.command.creates.th |
ff7e0 | 65 20 6e 65 77 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 | e.new.prefix-list.policy,.identi |
ff800 | 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 | fied.by.<text>..This.command.def |
ff820 | 69 6e 65 73 20 61 20 6e 65 77 20 70 65 65 72 20 67 72 6f 75 70 2e 20 59 6f 75 20 63 61 6e 20 73 | ines.a.new.peer.group..You.can.s |
ff840 | 70 65 63 69 66 79 20 74 6f 20 74 68 65 20 67 72 6f 75 70 20 74 68 65 20 73 61 6d 65 20 70 61 72 | pecify.to.the.group.the.same.par |
ff860 | 61 6d 65 74 65 72 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 66 6f 72 | ameters.that.you.can.specify.for |
ff880 | 20 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .specific.neighbors..This.comman |
ff8a0 | 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f | d.defines.matching.parameters.fo |
ff8c0 | 72 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e | r.IPv6.access.list.rule..Matchin |
ff8e0 | 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 | g.criteria.could.be.applied.to.s |
ff900 | 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | ource.parameters:.This.command.d |
ff920 | 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 61 | efines.matching.parameters.for.a |
ff940 | 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 | ccess.list.rule..Matching.criter |
ff960 | 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 64 65 73 74 69 6e 61 74 69 | ia.could.be.applied.to.destinati |
ff980 | 6f 6e 20 6f 72 20 73 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f | on.or.source.parameters:.This.co |
ff9a0 | 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 49 53 2d 49 53 20 72 6f 75 74 65 72 20 62 | mmand.defines.the.IS-IS.router.b |
ff9c0 | 65 68 61 76 69 6f 72 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 | ehavior:.This.command.defines.th |
ff9e0 | 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 | e.accumulated.penalty.amount.at. |
ffa00 | 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 | which.the.route.is.re-advertised |
ffa20 | 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 | ..The.penalty.range.is.1.to.2000 |
ffa40 | 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 | 0..This.command.defines.the.accu |
ffa60 | 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 | mulated.penalty.amount.at.which. |
ffa80 | 74 68 65 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 20 70 65 6e | the.route.is.suppressed..The.pen |
ffaa0 | 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 63 | alty.range.is.1.to.20000..This.c |
ffac0 | 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d | ommand.defines.the.amount.of.tim |
ffae0 | 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 20 70 65 6e 61 6c | e.in.minutes.after.which.a.penal |
ffb00 | 74 79 20 69 73 20 72 65 64 75 63 65 64 20 62 79 20 68 61 6c 66 2e 20 54 68 65 20 74 69 6d 65 72 | ty.is.reduced.by.half..The.timer |
ffb20 | 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 34 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 | .range.is.10.to.45.minutes..This |
ffb40 | 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d | .command.defines.the.maximum.num |
ffb60 | 62 65 72 20 6f 66 20 70 61 72 61 6c 6c 65 6c 20 72 6f 75 74 65 73 20 74 68 61 74 20 74 68 65 20 | ber.of.parallel.routes.that.the. |
ffb80 | 42 47 50 20 63 61 6e 20 73 75 70 70 6f 72 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 42 47 | BGP.can.support..In.order.for.BG |
ffba0 | 50 20 74 6f 20 75 73 65 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 74 68 2c 20 74 68 65 20 66 6f | P.to.use.the.second.path,.the.fo |
ffbc0 | 6c 6c 6f 77 69 6e 67 20 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 74 6f 20 6d 61 74 63 68 | llowing.attributes.have.to.match |
ffbe0 | 3a 20 57 65 69 67 68 74 2c 20 4c 6f 63 61 6c 20 50 72 65 66 65 72 65 6e 63 65 2c 20 41 53 20 50 | :.Weight,.Local.Preference,.AS.P |
ffc00 | 61 74 68 20 28 62 6f 74 68 20 41 53 20 6e 75 6d 62 65 72 20 61 6e 64 20 41 53 20 70 61 74 68 20 | ath.(both.AS.number.and.AS.path. |
ffc20 | 6c 65 6e 67 74 68 29 2c 20 4f 72 69 67 69 6e 20 63 6f 64 65 2c 20 4d 45 44 2c 20 49 47 50 20 6d | length),.Origin.code,.MED,.IGP.m |
ffc40 | 65 74 72 69 63 2e 20 41 6c 73 6f 2c 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 61 64 64 72 65 73 | etric..Also,.the.next.hop.addres |
ffc60 | 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 6d 75 73 74 20 62 65 20 64 69 66 66 65 72 65 6e | s.for.each.path.must.be.differen |
ffc80 | 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 | t..This.command.defines.the.maxi |
ffca0 | 6d 75 6d 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 | mum.time.in.minutes.that.a.route |
ffcc0 | 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 | .is.suppressed..The.timer.range. |
ffce0 | 69 73 20 31 20 74 6f 20 32 35 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | is.1.to.255.minutes..This.comman |
ffd00 | 64 20 64 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 | d.disable.the.peer.or.peer.group |
ffd20 | 2e 20 54 6f 20 72 65 65 6e 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 75 73 65 20 74 68 65 20 64 | ..To.reenable.the.peer.use.the.d |
ffd40 | 65 6c 65 74 65 20 66 6f 72 6d 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 | elete.form.of.this.command..This |
ffd60 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 20 66 | .command.disables.IGP-LDP.sync.f |
ffd80 | 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 | or.this.specific.interface..This |
ffda0 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 | .command.disables.Three-Way.Hand |
ffdc0 | 73 68 61 6b 65 20 66 6f 72 20 50 32 50 20 61 64 6a 61 63 65 6e 63 69 65 73 20 77 68 69 63 68 20 | shake.for.P2P.adjacencies.which. |
ffde0 | 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 33 30 33 60 2e 20 54 68 72 65 65 2d | described.in.:rfc:`5303`..Three- |
ffe00 | 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 | Way.Handshake.is.enabled.by.defa |
ffe20 | 75 6c 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 63 68 65 63 6b | ult..This.command.disables.check |
ffe40 | 20 6f 66 20 74 68 65 20 4d 54 55 20 76 61 6c 75 65 20 69 6e 20 74 68 65 20 4f 53 50 46 20 44 42 | .of.the.MTU.value.in.the.OSPF.DB |
ffe60 | 44 20 70 61 63 6b 65 74 73 2e 20 54 68 75 73 2c 20 75 73 65 20 6f 66 20 74 68 69 73 20 63 6f 6d | D.packets..Thus,.use.of.this.com |
ffe80 | 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 4f 53 50 46 20 61 64 6a 61 63 65 6e 63 79 20 74 | mand.allows.the.OSPF.adjacency.t |
ffea0 | 6f 20 72 65 61 63 68 20 74 68 65 20 46 55 4c 4c 20 73 74 61 74 65 20 65 76 65 6e 20 74 68 6f 75 | o.reach.the.FULL.state.even.thou |
ffec0 | 67 68 20 74 68 65 72 65 20 69 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 4d 54 55 20 6d 69 73 | gh.there.is.an.interface.MTU.mis |
ffee0 | 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 77 6f 20 4f 53 50 46 20 72 6f 75 74 65 72 73 2e 00 | match.between.two.OSPF.routers.. |
fff00 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 69 74 2e 00 54 68 69 73 20 63 | This.command.disables.it..This.c |
fff20 | 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e | ommand.disables.route.reflection |
fff40 | 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 73 | .between.route.reflector.clients |
fff60 | 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 63 6c 69 65 6e 74 73 20 6f 66 20 61 20 72 | ..By.default,.the.clients.of.a.r |
fff80 | 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 20 | oute.reflector.are.not.required. |
fffa0 | 74 6f 20 62 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 | to.be.fully.meshed.and.the.route |
fffc0 | 73 20 66 72 6f 6d 20 61 20 63 6c 69 65 6e 74 20 61 72 65 20 72 65 66 6c 65 63 74 65 64 20 74 6f | s.from.a.client.are.reflected.to |
fffe0 | 20 6f 74 68 65 72 20 63 6c 69 65 6e 74 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 74 68 65 20 | .other.clients..However,.if.the. |
100000 | 63 6c 69 65 6e 74 73 20 61 72 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 2c 20 72 6f 75 74 65 20 | clients.are.fully.meshed,.route. |
100020 | 72 65 66 6c 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 49 6e 20 74 | reflection.is.not.required..In.t |
100040 | 68 69 73 20 63 61 73 65 2c 20 75 73 65 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 63 6c | his.case,.use.the.:cfgcmd:`no-cl |
100060 | 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 2d 72 65 66 6c 65 63 74 69 6f 6e 60 20 63 6f 6d 6d 61 | ient-to-client-reflection`.comma |
100080 | 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 20 72 | nd.to.disable.client-to-client.r |
1000a0 | 65 66 6c 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 | eflection..This.command.disables |
1000c0 | 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e | .split-horizon.on.the.interface. |
1000e0 | 20 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 | .By.default,.VyOS.does.not.adver |
100100 | 74 69 73 65 20 52 49 50 20 72 6f 75 74 65 73 20 6f 75 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 | tise.RIP.routes.out.the.interfac |
100120 | 65 20 6f 76 65 72 20 77 68 69 63 68 20 74 68 65 79 20 77 65 72 65 20 6c 65 61 72 6e 65 64 20 28 | e.over.which.they.were.learned.( |
100140 | 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 29 2e 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 | split.horizon).3.This.command.di |
100160 | 73 61 62 6c 65 73 20 74 68 65 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 20 61 63 72 6f 73 73 20 6d | sables.the.load.sharing.across.m |
100180 | 75 6c 74 69 70 6c 65 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ultiple.LFA.backups..This.comman |
1001a0 | 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 2e 00 | d.displays.BGP.dampened.routes.. |
1001c0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 65 63 65 69 76 | This.command.displays.BGP.receiv |
1001e0 | 65 64 2d 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 63 63 65 70 74 65 64 20 61 66 74 65 | ed-routes.that.are.accepted.afte |
100200 | 72 20 66 69 6c 74 65 72 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | r.filtering..This.command.displa |
100220 | 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 | ys.BGP.routes.advertised.to.a.ne |
100240 | 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 | ighbor..This.command.displays.BG |
100260 | 50 20 72 6f 75 74 65 73 20 61 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 | P.routes.allowed.by.the.specifie |
100280 | 64 20 41 53 20 50 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d | d.AS.Path.access.list..This.comm |
1002a0 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 | and.displays.BGP.routes.originat |
1002c0 | 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 | ing.from.the.specified.BGP.neigh |
1002e0 | 62 6f 72 20 62 65 66 6f 72 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 | bor.before.inbound.policy.is.app |
100300 | 6c 69 65 64 2e 20 54 6f 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 62 6f 75 6e | lied..To.use.this.command.inboun |
100320 | 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 | d.soft.reconfiguration.must.be.e |
100340 | 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 4c 53 | nabled..This.command.displays.LS |
100360 | 41 73 20 69 6e 20 4d 61 78 41 67 65 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | As.in.MaxAge.list..This.command. |
100380 | 64 69 73 70 6c 61 79 73 20 52 49 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | displays.RIP.routes..This.comman |
1003a0 | 64 20 64 69 73 70 6c 61 79 73 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 66 | d.displays.a.database.contents.f |
1003c0 | 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 | or.a.specific.link.advertisement |
1003e0 | 20 74 79 70 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 73 | .type..This.command.displays.a.s |
100400 | 75 6d 6d 61 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e | ummary.table.with.a.database.con |
100420 | 74 65 6e 74 73 20 28 4c 53 41 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | tents.(LSA)..This.command.displa |
100440 | 79 73 20 61 20 74 61 62 6c 65 20 6f 66 20 70 61 74 68 73 20 74 6f 20 61 72 65 61 20 62 6f 75 6e | ys.a.table.of.paths.to.area.boun |
100460 | 64 61 72 79 20 61 6e 64 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 62 6f 75 6e 64 | dary.and.autonomous.system.bound |
100480 | 61 72 79 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | ary.routers..This.command.displa |
1004a0 | 79 73 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 69 6e 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 | ys.all.entries.in.BGP.routing.ta |
1004c0 | 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 64 61 6d 70 65 | ble..This.command.displays.dampe |
1004e0 | 6e 65 64 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 42 47 50 20 6e 65 69 | ned.routes.received.from.BGP.nei |
100500 | 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 65 78 74 | ghbor..This.command.displays.ext |
100520 | 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | ernal.information.redistributed. |
100540 | 69 6e 74 6f 20 4f 53 50 46 76 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 | into.OSPFv3.This.command.display |
100560 | 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 42 47 50 20 72 6f 75 74 65 73 20 77 | s.information.about.BGP.routes.w |
100580 | 68 6f 73 65 20 41 53 20 70 61 74 68 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 | hose.AS.path.matches.the.specifi |
1005a0 | 65 64 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d | ed.regular.expression..This.comm |
1005c0 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 | and.displays.information.about.f |
1005e0 | 6c 61 70 70 69 6e 67 20 42 47 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | lapping.BGP.routes..This.command |
100600 | 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 | .displays.information.about.the. |
100620 | 70 61 72 74 69 63 75 6c 61 72 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 42 47 50 20 72 6f 75 74 | particular.entry.in.the.BGP.rout |
100640 | 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | ing.table..This.command.displays |
100660 | 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 70 65 72 6d 69 74 74 65 64 20 62 79 20 74 68 | .routes.that.are.permitted.by.th |
100680 | 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | e.BGP.community.list..This.comma |
1006a0 | 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 62 65 6c 6f 6e 67 20 74 | nd.displays.routes.that.belong.t |
1006c0 | 6f 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 56 61 6c | o.specified.BGP.communities..Val |
1006e0 | 69 64 20 76 61 6c 75 65 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 20 69 | id.value.is.a.community.number.i |
100700 | 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 30 30 | n.the.range.from.1.to.4294967200 |
100720 | 2c 20 6f 72 20 41 41 3a 4e 4e 20 28 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2d 63 6f | ,.or.AA:NN.(autonomous.system-co |
100740 | 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 2f 32 2d 62 79 74 65 20 6e 75 6d 62 65 72 29 2c 20 6e | mmunity.number/2-byte.number),.n |
100760 | 6f 2d 65 78 70 6f 72 74 2c 20 6c 6f 63 61 6c 2d 61 73 2c 20 6f 72 20 6e 6f 2d 61 64 76 65 72 74 | o-export,.local-as,.or.no-advert |
100780 | 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 | ise..This.command.displays.route |
1007a0 | 73 20 77 69 74 68 20 63 6c 61 73 73 6c 65 73 73 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 | s.with.classless.interdomain.rou |
1007c0 | 74 69 6e 67 20 28 43 49 44 52 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | ting.(CIDR)..This.command.displa |
1007e0 | 79 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 | ys.state.and.configuration.of.OS |
100800 | 50 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 | PF.the.specified.interface,.or.a |
100820 | 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 | ll.interfaces.if.no.interface.is |
100840 | 20 67 69 76 65 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 | .given..This.command.displays.st |
100860 | 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 | ate.and.configuration.of.OSPF.th |
100880 | 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e | e.specified.interface,.or.all.in |
1008a0 | 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 | terfaces.if.no.interface.is.give |
1008c0 | 6e 2e 20 57 68 69 74 68 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 70 | n..Whith.the.argument.:cfgcmd:`p |
1008e0 | 72 65 66 69 78 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 63 6f 6e 6e 65 63 | refix`.this.command.shows.connec |
100900 | 74 65 64 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 | ted.prefixes.to.advertise..This. |
100920 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e | command.displays.the.OSPF.routin |
100940 | 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f | g.table,.as.determined.by.the.mo |
100960 | 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 00 54 68 69 73 20 | st.recent.SPF.calculation..This. |
100980 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e | command.displays.the.OSPF.routin |
1009a0 | 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f | g.table,.as.determined.by.the.mo |
1009c0 | 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 57 69 74 68 20 | st.recent.SPF.calculation..With. |
1009e0 | 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 | the.optional.:cfgcmd:`detail`.ar |
100a00 | 67 75 6d 65 6e 74 2c 20 65 61 63 68 20 72 6f 75 74 65 20 69 74 65 6d 27 73 20 61 64 76 65 72 74 | gument,.each.route.item's.advert |
100a20 | 69 73 65 72 20 72 6f 75 74 65 72 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 61 74 74 72 69 62 75 74 | iser.router.and.network.attribut |
100a40 | 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 | e.will.be.shown..This.command.di |
100a60 | 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 44 52 20 63 68 6f 69 63 65 20 69 6e | splays.the.neighbor.DR.choice.in |
100a80 | 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | formation..This.command.displays |
100aa0 | 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 | .the.neighbors.information.in.a. |
100ac0 | 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 20 77 68 6f | detailed.form.for.a.neighbor.who |
100ae0 | 73 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 00 54 68 69 73 | se.IP.address.is.specified..This |
100b00 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 | .command.displays.the.neighbors. |
100b20 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 2c 20 | information.in.a.detailed.form,. |
100b40 | 6e 6f 74 20 6a 75 73 74 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 | not.just.a.summary.table..This.c |
100b60 | 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 | ommand.displays.the.neighbors.st |
100b80 | 61 74 75 73 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 20 6f 6e 20 74 68 65 20 73 70 65 63 69 | atus.for.a.neighbor.on.the.speci |
100ba0 | 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | fied.interface..This.command.dis |
100bc0 | 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 2e 00 54 68 69 73 | plays.the.neighbors.status..This |
100be0 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 | .command.displays.the.status.of. |
100c00 | 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | all.BGP.connections..This.comman |
100c20 | 64 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 6e 65 69 67 68 62 6f 72 20 75 70 2f 64 6f 77 | d.enable.logging.neighbor.up/dow |
100c40 | 6e 20 63 68 61 6e 67 65 73 20 61 6e 64 20 72 65 73 65 74 20 72 65 61 73 6f 6e 2e 00 54 68 69 73 | n.changes.and.reset.reason..This |
100c60 | 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 73 20 73 75 6d 6d 61 72 69 | .command.enable/disables.summari |
100c80 | 73 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 64 64 72 65 73 | sation.for.the.configured.addres |
100ca0 | 73 20 72 61 6e 67 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 61 | s.range..This.command.enables.:a |
100cc0 | 62 62 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 | bbr:`BFD.(Bidirectional.Forwardi |
100ce0 | 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 60 20 6f 6e 20 74 68 69 73 20 4f 53 50 46 20 6c 69 6e 6b | ng.Detection)`.on.this.OSPF.link |
100d00 | 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 | .interface..This.command.enables |
100d20 | 20 3a 72 66 63 3a 60 36 32 33 32 60 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 | .:rfc:`6232`.purge.originator.id |
100d40 | 65 6e 74 69 66 69 63 61 74 69 6f 6e 2e 20 45 6e 61 62 6c 65 20 70 75 72 67 65 20 6f 72 69 67 69 | entification..Enable.purge.origi |
100d60 | 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 28 50 4f 49 29 20 62 79 20 61 64 | nator.identification.(POI).by.ad |
100d80 | 64 69 6e 67 20 74 68 65 20 74 79 70 65 2c 20 6c 65 6e 67 74 68 20 61 6e 64 20 76 61 6c 75 65 20 | ding.the.type,.length.and.value. |
100da0 | 28 54 4c 56 29 20 77 69 74 68 20 74 68 65 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 | (TLV).with.the.Intermediate.Syst |
100dc0 | 65 6d 20 28 49 53 29 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 4c 53 | em.(IS).identification.to.the.LS |
100de0 | 50 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 50 4f 49 20 69 6e 66 6f 72 | Ps.that.do.not.contain.POI.infor |
100e00 | 6d 61 74 69 6f 6e 2e 20 49 66 20 61 6e 20 49 53 20 67 65 6e 65 72 61 74 65 73 20 61 20 70 75 72 | mation..If.an.IS.generates.a.pur |
100e20 | 67 65 2c 20 56 79 4f 53 20 61 64 64 73 20 74 68 69 73 20 54 4c 56 20 77 69 74 68 20 74 68 65 20 | ge,.VyOS.adds.this.TLV.with.the. |
100e40 | 73 79 73 74 65 6d 20 49 44 20 6f 66 20 74 68 65 20 49 53 20 74 6f 20 74 68 65 20 70 75 72 67 65 | system.ID.of.the.IS.to.the.purge |
100e60 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 50 20 66 61 73 74 20 72 | ..This.command.enables.IP.fast.r |
100e80 | 65 2d 72 6f 75 74 69 6e 67 20 74 68 61 74 20 69 73 20 70 61 72 74 20 6f 66 20 3a 72 66 63 3a 60 | e-routing.that.is.part.of.:rfc:` |
100ea0 | 35 32 38 36 60 2e 20 53 70 65 63 69 66 69 63 61 6c 6c 79 20 74 68 69 73 20 69 73 20 61 20 70 72 | 5286`..Specifically.this.is.a.pr |
100ec0 | 65 66 69 78 20 6c 69 73 74 20 77 68 69 63 68 20 72 65 66 65 72 65 6e 63 65 73 20 61 20 70 72 65 | efix.list.which.references.a.pre |
100ee0 | 66 69 78 20 69 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 73 65 6c 65 63 74 20 65 6c 69 67 69 62 6c | fix.in.which.will.select.eligibl |
100f00 | 65 20 50 51 20 6e 6f 64 65 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 4c 46 41 20 62 61 63 6b 75 70 | e.PQ.nodes.for.remote.LFA.backup |
100f20 | 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 53 2d 49 53 20 6f 6e | s..This.command.enables.IS-IS.on |
100f40 | 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 | .this.interface,.and.allows.for. |
100f60 | 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 6f 63 63 75 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 | adjacency.to.occur..Note.that.th |
100f80 | 65 20 6e 61 6d 65 20 6f 66 20 49 53 2d 49 53 20 69 6e 73 74 61 6e 63 65 20 6d 75 73 74 20 62 65 | e.name.of.IS-IS.instance.must.be |
100fa0 | 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 6f 6e 65 20 75 73 65 64 20 74 6f 20 63 6f 6e | .the.same.as.the.one.used.to.con |
100fc0 | 66 69 67 75 72 65 20 74 68 65 20 49 53 2d 49 53 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 | figure.the.IS-IS.process..This.c |
100fe0 | 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 52 49 50 20 61 6e 64 20 73 65 74 73 20 74 68 65 20 | ommand.enables.RIP.and.sets.the. |
101000 | 52 49 50 20 65 6e 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 4e 45 54 57 4f 52 4b 2e | RIP.enable.interface.by.NETWORK. |
101020 | 20 54 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 68 61 76 65 20 61 64 64 72 65 | .The.interfaces.which.have.addre |
101040 | 73 73 65 73 20 6d 61 74 63 68 69 6e 67 20 77 69 74 68 20 4e 45 54 57 4f 52 4b 20 61 72 65 20 65 | sses.matching.with.NETWORK.are.e |
101060 | 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 70 6f 69 | nabled..This.command.enables.poi |
101080 | 73 6f 6e 2d 72 65 76 65 72 73 65 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 | son-reverse.on.the.interface..If |
1010a0 | 20 62 6f 74 68 20 70 6f 69 73 6f 6e 20 72 65 76 65 72 73 65 20 61 6e 64 20 73 70 6c 69 74 20 68 | .both.poison.reverse.and.split.h |
1010c0 | 6f 72 69 7a 6f 6e 20 61 72 65 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 56 79 4f 53 20 61 64 | orizon.are.enabled,.then.VyOS.ad |
1010e0 | 76 65 72 74 69 73 65 73 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 20 75 | vertises.the.learned.routes.as.u |
101100 | 6e 72 65 61 63 68 61 62 6c 65 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e | nreachable.over.the.interface.on |
101120 | 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 6c 65 61 72 6e 65 64 2e 00 54 68 | .which.the.route.was.learned..Th |
101140 | 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 72 6f 75 74 69 6e 67 20 75 73 69 6e 67 | is.command.enables.routing.using |
101160 | 20 72 61 64 69 6f 20 66 72 65 71 75 65 6e 63 79 20 64 69 76 65 72 73 69 74 79 2e 20 54 68 69 73 | .radio.frequency.diversity..This |
101180 | 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 69 6e 20 6e 65 74 77 6f 72 | .is.highly.recommended.in.networ |
1011a0 | 6b 73 20 77 69 74 68 20 6d 61 6e 79 20 77 69 72 65 6c 65 73 73 20 6e 6f 64 65 73 2e 00 54 68 69 | ks.with.many.wireless.nodes..Thi |
1011c0 | 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 65 6e 64 69 6e 67 20 74 69 6d 65 73 74 | s.command.enables.sending.timest |
1011e0 | 61 6d 70 73 20 77 69 74 68 20 65 61 63 68 20 48 65 6c 6c 6f 20 61 6e 64 20 49 48 55 20 6d 65 73 | amps.with.each.Hello.and.IHU.mes |
101200 | 73 61 67 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 75 74 65 20 52 54 54 20 76 61 6c | sage.in.order.to.compute.RTT.val |
101220 | 75 65 73 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 65 6e 61 62 6c 65 | ues..It.is.recommended.to.enable |
101240 | 20 74 69 6d 65 73 74 61 6d 70 73 20 6f 6e 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 73 | .timestamps.on.tunnel.interfaces |
101260 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 | ..This.command.enables.support.f |
101280 | 6f 72 20 64 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 54 4c 56 2e 20 44 79 6e 61 6d 69 63 | or.dynamic.hostname.TLV..Dynamic |
1012a0 | 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 20 64 65 74 65 72 6d 69 6e 65 64 20 61 73 20 | .hostname.mapping.determined.as. |
1012c0 | 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 37 36 33 60 2c 20 44 79 6e 61 6d 69 | described.in.:rfc:`2763`,.Dynami |
1012e0 | 63 20 48 6f 73 74 6e 61 6d 65 20 45 78 63 68 61 6e 67 65 20 4d 65 63 68 61 6e 69 73 6d 20 66 6f | c.Hostname.Exchange.Mechanism.fo |
101300 | 72 20 49 53 2d 49 53 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 74 68 | r.IS-IS..This.command.enables.th |
101320 | 65 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 28 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a | e.ORF.capability.(described.in.: |
101340 | 72 66 63 3a 60 35 32 39 31 60 29 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c | rfc:`5291`).on.the.local.router, |
101360 | 20 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 61 64 76 65 | .and.enables.ORF.capability.adve |
101380 | 72 74 69 73 65 6d 65 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 | rtisement.to.the.specified.BGP.p |
1013a0 | 65 65 72 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 63 65 69 76 65 60 20 6b 65 79 77 6f | eer..The.:cfgcmd:`receive`.keywo |
1013c0 | 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 | rd.configures.a.router.to.advert |
1013e0 | 69 73 65 20 4f 52 46 20 72 65 63 65 69 76 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 68 | ise.ORF.receive.capabilities..Th |
101400 | 65 20 3a 63 66 67 63 6d 64 3a 60 73 65 6e 64 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 | e.:cfgcmd:`send`.keyword.configu |
101420 | 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 20 73 65 | res.a.router.to.advertise.ORF.se |
101440 | 6e 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 6f 20 61 64 76 65 72 74 69 73 65 20 61 20 | nd.capabilities..To.advertise.a. |
101460 | 66 69 6c 74 65 72 20 66 72 6f 6d 20 61 20 73 65 6e 64 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 63 | filter.from.a.sender,.you.must.c |
101480 | 72 65 61 74 65 20 61 6e 20 49 50 20 70 72 65 66 69 78 20 6c 69 73 74 20 66 6f 72 20 74 68 65 20 | reate.an.IP.prefix.list.for.the. |
1014a0 | 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 72 20 61 70 70 6c 69 65 64 20 69 6e 20 69 6e | specified.BGP.peer.applied.in.in |
1014c0 | 62 6f 75 6e 64 20 64 65 72 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e | bound.derection..This.command.en |
1014e0 | 66 6f 72 63 65 73 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 54 54 4c 20 53 65 63 75 72 69 74 79 20 | forces.Generalized.TTL.Security. |
101500 | 4d 65 63 68 61 6e 69 73 6d 20 28 47 54 53 4d 29 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 | Mechanism.(GTSM),.as.specified.i |
101520 | 6e 20 3a 72 66 63 3a 60 35 30 38 32 60 2e 20 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | n.:rfc:`5082`..With.this.command |
101540 | 2c 20 6f 6e 6c 79 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 73 70 65 63 69 66 | ,.only.neighbors.that.are.specif |
101560 | 69 65 64 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 61 77 61 79 20 77 69 6c 6c 20 62 65 20 | ied.number.of.hops.away.will.be. |
101580 | 61 6c 6c 6f 77 65 64 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 | allowed.to.become.neighbors..The |
1015a0 | 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 | .number.of.hops.range.is.1.to.25 |
1015c0 | 34 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c | 4..This.command.is.mutually.excl |
1015e0 | 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 65 62 67 70 2d 6d 75 6c 74 69 68 6f | usive.with.:cfgcmd:`ebgp-multiho |
101600 | 70 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 73 74 72 69 63 74 6c 79 | p`..This.command.forces.strictly |
101620 | 20 63 6f 6d 70 61 72 65 20 72 65 6d 6f 74 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 | .compare.remote.capabilities.and |
101640 | 20 6c 6f 63 61 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 63 61 70 61 62 69 6c 69 | .local.capabilities..If.capabili |
101660 | 74 69 65 73 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 2c 20 73 65 6e 64 20 55 6e 73 75 70 70 6f | ties.are.different,.send.Unsuppo |
101680 | 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 74 68 65 6e 20 72 65 73 65 74 | rted.Capability.error.then.reset |
1016a0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 | .connection..This.command.forces |
1016c0 | 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 74 6f 20 72 65 70 6f 72 74 20 69 74 73 65 6c | .the.BGP.speaker.to.report.itsel |
1016e0 | 66 20 61 73 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 66 6f 72 20 61 6e 20 61 64 76 65 72 74 69 | f.as.the.next.hop.for.an.adverti |
101700 | 73 65 64 20 72 6f 75 74 65 20 69 74 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 | sed.route.it.advertised.to.a.nei |
101720 | 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 65 6e 65 72 61 74 65 20 61 20 64 | ghbor..This.command.generate.a.d |
101740 | 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 2e 00 54 68 69 73 20 | efault.route.into.the.RIP..This. |
101760 | 63 6f 6d 6d 61 6e 64 20 67 69 76 65 73 20 61 20 62 72 69 65 66 20 73 74 61 74 75 73 20 6f 76 65 | command.gives.a.brief.status.ove |
101780 | 72 76 69 65 77 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e | rview.of.a.specified.wireless.in |
1017a0 | 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 | terface..The.wireless.interface. |
1017c0 | 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 | identifier.can.range.from.wlan0. |
1017e0 | 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 65 73 20 68 61 | to.wlan999..This.command.goes.ha |
101800 | 6e 64 20 69 6e 20 68 61 6e 64 20 77 69 74 68 20 74 68 65 20 6c 69 73 74 65 6e 20 72 61 6e 67 65 | nd.in.hand.with.the.listen.range |
101820 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 | .command.to.limit.the.amount.of. |
101840 | 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 | BGP.neighbors.that.are.allowed.t |
101860 | 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 | o.connect.to.the.local.router..T |
101880 | 68 65 20 6c 69 6d 69 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 35 30 30 30 2e 00 54 68 69 | he.limit.range.is.1.to.5000..Thi |
1018a0 | 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 74 20 61 64 64 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 | s.command.got.added.in.VyOS.1.4. |
1018c0 | 61 6e 64 20 69 6e 76 65 72 74 73 20 74 68 65 20 6c 6f 67 69 63 20 66 72 6f 6d 20 74 68 65 20 6f | and.inverts.the.logic.from.the.o |
1018e0 | 6c 64 20 60 60 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e | ld.``default-route``.CLI.option. |
101900 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 73 74 65 61 64 20 6f 66 20 73 75 6d 6d 61 72 69 | .This.command.instead.of.summari |
101920 | 7a 69 6e 67 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 69 6c 74 65 72 20 74 68 65 | zing.intra.area.paths.filter.the |
101940 | 6d 20 2d 20 69 2e 65 2e 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 74 | m.-.i.e..intra.area.paths.from.t |
101960 | 68 69 73 20 72 61 6e 67 65 20 61 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 74 | his.range.are.not.advertised.int |
101980 | 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 | o.other.areas..This.command.make |
1019a0 | 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | s.sense.in.ABR.only..This.comman |
1019c0 | 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 | d.is.also.used.to.enable.the.OSP |
1019e0 | 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 | F.process..The.area.number.can.b |
101a00 | 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 | e.specified.in.decimal.notation. |
101a20 | 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 | in.the.range.from.0.to.429496729 |
101a40 | 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 | 5..Or.it.can.be.specified.in.dot |
101a60 | 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 | ted.decimal.notation.similar.to. |
101a80 | 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 | ip.address..This.command.is.only |
101aa0 | 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f | .allowed.for.eBGP.peers..This.co |
101ac0 | 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 | mmand.is.only.allowed.for.eBGP.p |
101ae0 | 65 65 72 73 2e 20 49 74 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 | eers..It.is.not.applicable.for.p |
101b00 | 65 65 72 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 | eer.groups..This.command.is.only |
101b20 | 20 75 73 65 66 75 6c 20 61 74 20 73 63 61 6c 65 20 77 68 65 6e 20 79 6f 75 20 63 61 6e 20 70 6f | .useful.at.scale.when.you.can.po |
101b40 | 73 73 69 62 6c 79 20 68 61 76 65 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 50 49 | ssibly.have.a.large.number.of.PI |
101b60 | 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 6c 6f 77 69 6e 67 2e 00 54 68 69 73 20 | M.control.packets.flowing..This. |
101b80 | 63 6f 6d 6d 61 6e 64 20 69 73 20 73 70 65 63 69 66 69 63 20 74 6f 20 46 52 52 20 61 6e 64 20 56 | command.is.specific.to.FRR.and.V |
101ba0 | 79 4f 53 2e 20 54 68 65 20 72 6f 75 74 65 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 61 20 73 | yOS..The.route.command.makes.a.s |
101bc0 | 74 61 74 69 63 20 72 6f 75 74 65 20 6f 6e 6c 79 20 69 6e 73 69 64 65 20 52 49 50 2e 20 54 68 69 | tatic.route.only.inside.RIP..Thi |
101be0 | 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 62 79 | s.command.should.be.used.only.by |
101c00 | 20 61 64 76 61 6e 63 65 64 20 75 73 65 72 73 20 77 68 6f 20 61 72 65 20 70 61 72 74 69 63 75 6c | .advanced.users.who.are.particul |
101c20 | 61 72 6c 79 20 6b 6e 6f 77 6c 65 64 67 65 61 62 6c 65 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 | arly.knowledgeable.about.the.RIP |
101c40 | 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 2c 20 77 65 20 72 65 63 | .protocol..In.most.cases,.we.rec |
101c60 | 6f 6d 6d 65 6e 64 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 | ommend.creating.a.static.route.i |
101c80 | 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 20 69 6e 20 | n.VyOS.and.redistributing.it.in. |
101ca0 | 52 49 50 20 75 73 69 6e 67 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 | RIP.using.:cfgcmd:`redistribute. |
101cc0 | 73 74 61 74 69 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f | static`..This.command.is.used.fo |
101ce0 | 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f | r.advertising.IPv4.or.IPv6.netwo |
101d00 | 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 74 | rks..This.command.is.used.to.ret |
101d20 | 72 69 65 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 57 41 50 20 77 69 74 68 | rieve.information.about.WAP.with |
101d40 | 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 79 6f 75 72 20 77 69 72 65 6c 65 73 73 20 69 6e | in.the.range.of.your.wireless.in |
101d60 | 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 | terface..This.command.is.useful. |
101d80 | 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 | on.wireless.interfaces.configure |
101da0 | 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | d.in.station.mode..This.command. |
101dc0 | 69 73 20 75 73 65 66 75 6c 20 69 66 20 6f 6e 65 20 64 65 73 69 72 65 73 20 74 6f 20 6c 6f 6f 73 | is.useful.if.one.desires.to.loos |
101de0 | 65 6e 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e 74 20 66 6f 72 20 42 47 50 20 74 6f 20 68 61 | en.the.requirement.for.BGP.to.ha |
101e00 | 76 65 20 73 74 72 69 63 74 6c 79 20 64 65 66 69 6e 65 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 53 | ve.strictly.defined.neighbors..S |
101e20 | 70 65 63 69 66 69 63 61 6c 6c 79 20 77 68 61 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 69 73 20 66 | pecifically.what.is.allowed.is.f |
101e40 | 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6c 69 73 74 65 6e 20 74 6f | or.the.local.router.to.listen.to |
101e60 | 20 61 20 72 61 6e 67 65 20 6f 66 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 | .a.range.of.IPv4.or.IPv6.address |
101e80 | 65 73 20 64 65 66 69 6e 65 64 20 62 79 20 61 20 70 72 65 66 69 78 20 61 6e 64 20 74 6f 20 61 63 | es.defined.by.a.prefix.and.to.ac |
101ea0 | 63 65 70 74 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e 20 61 20 54 | cept.BGP.open.messages..When.a.T |
101ec0 | 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 6c 79 20 | CP.connection.(and.subsequently. |
101ee0 | 61 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 29 20 66 72 6f 6d 20 77 69 74 68 69 6e 20 | a.BGP.open.message).from.within. |
101f00 | 74 68 69 73 20 72 61 6e 67 65 20 74 72 69 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 20 | this.range.tries.to.connect.the. |
101f20 | 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 | local.router.then.the.local.rout |
101f40 | 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 | er.will.respond.and.connect.with |
101f60 | 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 61 72 65 20 64 65 66 69 6e 65 64 | .the.parameters.that.are.defined |
101f80 | 20 77 69 74 68 69 6e 20 74 68 65 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4f 6e 65 20 6d 75 73 74 | .within.the.peer.group..One.must |
101fa0 | 20 64 65 66 69 6e 65 20 61 20 70 65 65 72 2d 67 72 6f 75 70 20 66 6f 72 20 65 61 63 68 20 72 61 | .define.a.peer-group.for.each.ra |
101fc0 | 6e 67 65 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 64 2e 20 49 66 20 6e 6f 20 70 65 65 72 2d 67 | nge.that.is.listed..If.no.peer-g |
101fe0 | 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 20 74 68 65 6e 20 61 6e 20 65 72 72 6f 72 20 77 69 | roup.is.defined.then.an.error.wi |
102000 | 6c 6c 20 6b 65 65 70 20 79 6f 75 20 66 72 6f 6d 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 | ll.keep.you.from.committing.the. |
102020 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 6f 64 69 | configuration..This.command.modi |
102040 | 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 28 68 6f 70 20 63 6f 75 | fies.the.default.metric.(hop.cou |
102060 | 6e 74 29 20 76 61 6c 75 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 | nt).value.for.redistributed.rout |
102080 | 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e | es..The.metric.range.is.1.to.16. |
1020a0 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 69 73 20 63 6f | .The.default.value.is.1..This.co |
1020c0 | 6d 6d 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 63 6f 6e 6e 65 63 74 65 64 20 | mmand.does.not.affect.connected. |
1020e0 | 72 6f 75 74 65 20 65 76 65 6e 20 69 66 20 69 74 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 | route.even.if.it.is.redistribute |
102100 | 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 | d.by.:cfgcmd:`redistribute.conne |
102120 | 63 74 65 64 60 2e 20 54 6f 20 6d 6f 64 69 66 79 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 | cted`..To.modify.connected.route |
102140 | 73 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2c 20 70 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 | s.metric.value,.please.use.:cfgc |
102160 | 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 20 6d 65 74 72 69 | md:`redistribute.connected.metri |
102180 | 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6f 76 65 72 72 69 64 65 20 41 53 20 6e 75 6d | c`..This.command.override.AS.num |
1021a0 | 62 65 72 20 6f 66 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 72 6f 75 74 65 72 20 77 69 | ber.of.the.originating.router.wi |
1021c0 | 74 68 20 74 68 65 20 6c 6f 63 61 6c 20 41 53 20 6e 75 6d 62 65 72 2e 00 54 68 69 73 20 63 6f 6d | th.the.local.AS.number..This.com |
1021e0 | 6d 61 6e 64 20 70 72 65 76 65 6e 74 73 20 66 72 6f 6d 20 73 65 6e 64 69 6e 67 20 62 61 63 6b 20 | mand.prevents.from.sending.back. |
102200 | 70 72 65 66 69 78 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 74 68 65 20 6e 65 69 67 68 62 | prefixes.learned.from.the.neighb |
102220 | 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d | or..This.command.provides.to.com |
102240 | 70 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 4d 45 44 20 76 61 6c 75 65 73 20 74 68 61 74 20 61 | pare.different.MED.values.that.a |
102260 | 64 76 65 72 74 69 73 65 64 20 62 79 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 | dvertised.by.neighbours.in.the.s |
102280 | 61 6d 65 20 41 53 20 66 6f 72 20 72 6f 75 74 65 73 20 73 65 6c 65 63 74 69 6f 6e 2e 20 57 68 65 | ame.AS.for.routes.selection..Whe |
1022a0 | 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 72 6f 75 74 65 | n.this.command.is.enabled,.route |
1022c0 | 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 | s.from.the.same.autonomous.syste |
1022e0 | 6d 20 61 72 65 20 67 72 6f 75 70 65 64 20 74 6f 67 65 74 68 65 72 2c 20 61 6e 64 20 74 68 65 20 | m.are.grouped.together,.and.the. |
102300 | 62 65 73 74 20 65 6e 74 72 69 65 73 20 6f 66 20 65 61 63 68 20 67 72 6f 75 70 20 61 72 65 20 63 | best.entries.of.each.group.are.c |
102320 | 6f 6d 70 61 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 | ompared..This.command.provides.t |
102340 | 6f 20 63 6f 6d 70 61 72 65 20 74 68 65 20 4d 45 44 20 6f 6e 20 72 6f 75 74 65 73 2c 20 65 76 65 | o.compare.the.MED.on.routes,.eve |
102360 | 6e 20 77 68 65 6e 20 74 68 65 79 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 64 | n.when.they.were.received.from.d |
102380 | 69 66 66 65 72 65 6e 74 20 6e 65 69 67 68 62 6f 75 72 69 6e 67 20 41 53 65 73 2e 20 53 65 74 74 | ifferent.neighbouring.ASes..Sett |
1023a0 | 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6d 61 6b 65 73 20 74 68 65 20 6f 72 64 65 72 20 | ing.this.option.makes.the.order. |
1023c0 | 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 6f 66 20 72 6f 75 74 65 73 20 6d 6f 72 65 20 64 65 66 | of.preference.of.routes.more.def |
1023e0 | 69 6e 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 65 6c 69 6d 69 6e 61 74 65 20 4d 45 44 20 69 | ined,.and.should.eliminate.MED.i |
102400 | 6e 64 75 63 65 64 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | nduced.oscillations..This.comman |
102420 | 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 | d.redistributes.routing.informat |
102440 | 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 | ion.from.the.given.route.source. |
102460 | 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c 2d | into.the.ISIS.database.as.Level- |
102480 | 31 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 | 1..There.are.six.modes.available |
1024a0 | 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 | .for.route.source:.bgp,.connecte |
1024c0 | 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 | d,.kernel,.ospf,.rip,.static..Th |
1024e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 | is.command.redistributes.routing |
102500 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 | .information.from.the.given.rout |
102520 | 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 | e.source.into.the.ISIS.database. |
102540 | 61 73 20 4c 65 76 65 6c 2d 32 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 | as.Level-2..There.are.six.modes. |
102560 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c | available.for.route.source:.bgp, |
102580 | 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 | .connected,.kernel,.ospf,.rip,.s |
1025a0 | 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 | tatic..This.command.redistribute |
1025c0 | 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 | s.routing.information.from.the.g |
1025e0 | 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 20 74 | iven.route.source.into.the.RIP.t |
102600 | 61 62 6c 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 | ables..There.are.five.modes.avai |
102620 | 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e | lable.for.route.source:.bgp,.con |
102640 | 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 | nected,.kernel,.ospf,.static..Th |
102660 | 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 | is.command.redistributes.routing |
102680 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 | .information.from.the.given.rout |
1026a0 | 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 | e.source.to.the.BGP.process..The |
1026c0 | 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 | re.are.six.modes.available.for.r |
1026e0 | 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 | oute.source:.connected,.kernel,. |
102700 | 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 | ospf,.rip,.static,.table..This.c |
102720 | 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 | ommand.redistributes.routing.inf |
102740 | 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f | ormation.from.the.given.route.so |
102760 | 75 72 63 65 20 74 6f 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 | urce.to.the.Babel.process..This. |
102780 | 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e | command.redistributes.routing.in |
1027a0 | 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 | formation.from.the.given.route.s |
1027c0 | 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 | ource.to.the.OSPF.process..There |
1027e0 | 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f | .are.five.modes.available.for.ro |
102800 | 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e | ute.source:.bgp,.connected,.kern |
102820 | 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 | el,.rip,.static..This.command.re |
102840 | 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | distributes.routing.information. |
102860 | 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 | from.the.given.route.source.to.t |
102880 | 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 | he.OSPFv3.process..There.are.fiv |
1028a0 | 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 | e.modes.available.for.route.sour |
1028c0 | 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e | ce:.bgp,.connected,.kernel,.ripn |
1028e0 | 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 6d 6f 76 65 73 20 | g,.static..This.command.removes. |
102900 | 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 6f 66 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 | the.private.ASN.of.routes.that.a |
102920 | 72 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | re.advertised.to.the.configured. |
102940 | 70 65 65 72 2e 20 49 74 20 72 65 6d 6f 76 65 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 | peer..It.removes.only.private.AS |
102960 | 4e 73 20 6f 6e 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 45 42 47 50 20 | Ns.on.routes.advertised.to.EBGP. |
102980 | 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 | peers..This.command.resets.BGP.c |
1029a0 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6e 65 69 67 | onnections.to.the.specified.neig |
1029c0 | 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a | hbor.IP.address..With.argument.: |
1029e0 | 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 | cfgcmd:`soft`.this.command.initi |
102a00 | 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 | ates.a.soft.reset..If.you.do.not |
102a20 | 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 | .specify.the.:cfgcmd:`in`.or.:cf |
102a40 | 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 | gcmd:`out`.options,.both.inbound |
102a60 | 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 | .and.outbound.soft.reconfigurati |
102a80 | 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 | on.are.triggered..This.command.r |
102aa0 | 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 | esets.BGP.connections.to.the.spe |
102ac0 | 63 69 66 69 65 64 20 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 | cified.peer.group..With.argument |
102ae0 | 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 | .:cfgcmd:`soft`.this.command.ini |
102b00 | 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e | tiates.a.soft.reset..If.you.do.n |
102b20 | 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a | ot.specify.the.:cfgcmd:`in`.or.: |
102b40 | 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 | cfgcmd:`out`.options,.both.inbou |
102b60 | 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 | nd.and.outbound.soft.reconfigura |
102b80 | 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | tion.are.triggered..This.command |
102ba0 | 20 72 65 73 65 74 73 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 66 20 67 | .resets.all.BGP.connections.of.g |
102bc0 | 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 | iven.router..This.command.resets |
102be0 | 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 42 47 50 20 70 65 65 72 73 20 6f 66 20 67 69 76 65 6e | .all.external.BGP.peers.of.given |
102c00 | 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 6c 65 63 74 73 20 41 42 | .router..This.command.selects.AB |
102c20 | 52 20 6d 6f 64 65 6c 2e 20 4f 53 50 46 20 72 6f 75 74 65 72 20 73 75 70 70 6f 72 74 73 20 66 6f | R.model..OSPF.router.supports.fo |
102c40 | 75 72 20 41 42 52 20 6d 6f 64 65 6c 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 | ur.ABR.models:.This.command.set. |
102c60 | 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 66 6f 72 20 63 69 72 63 75 69 74 2e 00 54 68 69 73 | default.metric.for.circuit..This |
102c80 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 74 68 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 | .command.set.the.channel.number. |
102ca0 | 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 20 75 73 65 73 20 66 6f 72 20 | that.diversity.routing.uses.for. |
102cc0 | 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 73 65 65 20 64 69 76 65 72 73 69 74 79 20 6f 70 | this.interface.(see.diversity.op |
102ce0 | 74 69 6f 6e 20 61 62 6f 76 65 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 41 | tion.above)..This.command.sets.A |
102d00 | 54 54 20 62 69 74 20 74 6f 20 31 20 69 6e 20 4c 65 76 65 6c 31 20 4c 53 50 73 2e 20 49 74 20 69 | TT.bit.to.1.in.Level1.LSPs..It.i |
102d20 | 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 | s.described.in.:rfc:`3787`..This |
102d40 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 6d 61 78 69 6d 75 6d 20 4c 53 50 20 6c 69 | .command.sets.LSP.maximum.LSP.li |
102d60 | 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 | fetime.in.seconds..The.interval. |
102d80 | 72 61 6e 67 65 20 69 73 20 33 35 30 20 74 6f 20 36 35 35 33 35 2e 20 4c 53 50 73 20 72 65 6d 61 | range.is.350.to.65535..LSPs.rema |
102da0 | 69 6e 20 69 6e 20 61 20 64 61 74 61 62 61 73 65 20 66 6f 72 20 31 32 30 30 20 73 65 63 6f 6e 64 | in.in.a.database.for.1200.second |
102dc0 | 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 72 65 | s.by.default..If.they.are.not.re |
102de0 | 66 72 65 73 68 65 64 20 62 79 20 74 68 61 74 20 74 69 6d 65 2c 20 74 68 65 79 20 61 72 65 20 64 | freshed.by.that.time,.they.are.d |
102e00 | 65 6c 65 74 65 64 2e 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 4c 53 50 20 72 | eleted..You.can.change.the.LSP.r |
102e20 | 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 6f 72 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 | efresh.interval.or.the.LSP.lifet |
102e40 | 69 6d 65 2e 20 54 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 73 68 | ime..The.LSP.refresh.interval.sh |
102e60 | 6f 75 6c 64 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 | ould.be.less.than.the.LSP.lifeti |
102e80 | 6d 65 20 6f 72 20 65 6c 73 65 20 4c 53 50 73 20 77 69 6c 6c 20 74 69 6d 65 20 6f 75 74 20 62 65 | me.or.else.LSPs.will.time.out.be |
102ea0 | 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 72 65 66 72 65 73 68 65 64 2e 00 54 68 69 73 20 63 6f | fore.they.are.refreshed..This.co |
102ec0 | 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 | mmand.sets.LSP.refresh.interval. |
102ee0 | 69 6e 20 73 65 63 6f 6e 64 73 2e 20 49 53 2d 49 53 20 67 65 6e 65 72 61 74 65 73 20 4c 53 50 73 | in.seconds..IS-IS.generates.LSPs |
102f00 | 20 77 68 65 6e 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 6c 69 6e 6b 20 63 68 61 6e 67 65 | .when.the.state.of.a.link.change |
102f20 | 73 2e 20 48 6f 77 65 76 65 72 2c 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 6f 75 74 69 | s..However,.to.ensure.that.routi |
102f40 | 6e 67 20 64 61 74 61 62 61 73 65 73 20 6f 6e 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 72 65 6d 61 | ng.databases.on.all.routers.rema |
102f60 | 69 6e 20 63 6f 6e 76 65 72 67 65 64 2c 20 4c 53 50 73 20 69 6e 20 73 74 61 62 6c 65 20 6e 65 74 | in.converged,.LSPs.in.stable.net |
102f80 | 77 6f 72 6b 73 20 61 72 65 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 61 20 72 65 67 75 6c 61 72 | works.are.generated.on.a.regular |
102fa0 | 20 62 61 73 69 73 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 20 68 61 73 20 62 65 65 | .basis.even.though.there.has.bee |
102fc0 | 6e 20 6e 6f 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 | n.no.change.to.the.state.of.the. |
102fe0 | 6c 69 6e 6b 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 | links..The.interval.range.is.1.t |
103000 | 6f 20 36 35 32 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 39 30 | o.65235..The.default.value.is.90 |
103020 | 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4f 53 50 | 0.seconds..This.command.sets.OSP |
103040 | 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 73 69 6d 70 6c 65 | F.authentication.key.to.a.simple |
103060 | 20 70 61 73 73 77 6f 72 64 2e 20 41 66 74 65 72 20 73 65 74 74 69 6e 67 2c 20 61 6c 6c 20 4f 53 | .password..After.setting,.all.OS |
103080 | 50 46 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 4b 65 | PF.packets.are.authenticated..Ke |
1030a0 | 79 20 68 61 73 20 6c 65 6e 67 74 68 20 75 70 20 74 6f 20 38 20 63 68 61 72 73 2e 00 54 68 69 73 | y.has.length.up.to.8.chars..This |
1030c0 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 50 53 4e 50 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 | .command.sets.PSNP.interval.in.s |
1030e0 | 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 | econds..The.interval.range.is.0. |
103100 | 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 52 6f 75 74 65 72 | to.127..This.command.sets.Router |
103120 | 20 50 72 69 6f 72 69 74 79 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 54 68 65 20 72 6f 75 | .Priority.integer.value..The.rou |
103140 | 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 77 69 | ter.with.the.highest.priority.wi |
103160 | 6c 6c 20 62 65 20 6d 6f 72 65 20 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 | ll.be.more.eligible.to.become.De |
103180 | 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 53 65 74 74 69 6e 67 20 74 68 65 20 76 61 6c | signated.Router..Setting.the.val |
1031a0 | 75 65 20 74 6f 20 30 2c 20 6d 61 6b 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 6e 65 6c 69 67 | ue.to.0,.makes.the.router.inelig |
1031c0 | 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 | ible.to.become.Designated.Router |
1031e0 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 65 20 69 6e | ..The.default.value.is.1..The.in |
103200 | 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 | terval.range.is.0.to.255..This.c |
103220 | 6f 6d 6d 61 6e 64 20 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 65 | ommand.sets.default.RIP.distance |
103240 | 20 74 6f 20 61 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 | .to.a.specified.value.when.the.r |
103260 | 6f 75 74 65 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 | outes.source.IP.address.matches. |
103280 | 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | the.specified.prefix..This.comma |
1032a0 | 6e 64 20 73 65 74 73 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 | nd.sets.hello.interval.in.second |
1032c0 | 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 | s.on.a.given.interface..The.rang |
1032e0 | 65 20 69 73 20 31 20 74 6f 20 36 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 | e.is.1.to.600..This.command.sets |
103300 | 20 6c 69 6e 6b 20 63 6f 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 | .link.cost.for.the.specified.int |
103320 | 65 72 66 61 63 65 2e 20 54 68 65 20 63 6f 73 74 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f | erface..The.cost.value.is.set.to |
103340 | 20 72 6f 75 74 65 72 2d 4c 53 41 e2 80 99 73 20 6d 65 74 72 69 63 20 66 69 65 6c 64 20 61 6e 64 | .router-LSA...s.metric.field.and |
103360 | 20 75 73 65 64 20 66 6f 72 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 63 | .used.for.SPF.calculation..The.c |
103380 | 6f 73 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f | ost.range.is.1.to.65535..This.co |
1033a0 | 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 62 65 74 77 | mmand.sets.minimum.interval.betw |
1033c0 | 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 | een.consecutive.SPF.calculations |
1033e0 | 20 69 6e 20 73 65 63 6f 6e 64 73 2e 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 | .in.seconds.The.interval.range.i |
103400 | 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 | s.1.to.120..This.command.sets.mi |
103420 | 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 | nimum.interval.in.seconds.betwee |
103440 | 6e 20 72 65 67 65 6e 65 72 61 74 69 6e 67 20 73 61 6d 65 20 4c 53 50 2e 20 54 68 65 20 69 6e 74 | n.regenerating.same.LSP..The.int |
103460 | 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f | erval.range.is.1.to.120..This.co |
103480 | 6d 6d 61 6e 64 20 73 65 74 73 20 6d 75 6c 74 69 70 6c 69 65 72 20 66 6f 72 20 68 65 6c 6c 6f 20 | mmand.sets.multiplier.for.hello. |
1034a0 | 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 | holding.time.on.a.given.interfac |
1034c0 | 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 32 20 74 6f 20 31 30 30 2e 00 54 68 69 73 20 63 | e..The.range.is.2.to.100..This.c |
1034e0 | 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f | ommand.sets.number.of.seconds.fo |
103500 | 72 20 49 6e 66 54 72 61 6e 73 44 65 6c 61 79 20 76 61 6c 75 65 2e 20 49 74 20 61 6c 6c 6f 77 73 | r.InfTransDelay.value..It.allows |
103520 | 20 74 6f 20 73 65 74 20 61 6e 64 20 61 64 6a 75 73 74 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 | .to.set.and.adjust.for.each.inte |
103540 | 72 66 61 63 65 20 74 68 65 20 64 65 6c 61 79 20 69 6e 74 65 72 76 61 6c 20 62 65 66 6f 72 65 20 | rface.the.delay.interval.before. |
103560 | 73 74 61 72 74 69 6e 67 20 74 68 65 20 73 79 6e 63 68 72 6f 6e 69 7a 69 6e 67 20 70 72 6f 63 65 | starting.the.synchronizing.proce |
103580 | 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 27 73 20 64 61 74 61 62 61 73 65 20 77 69 74 68 | ss.of.the.router's.database.with |
1035a0 | 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | .all.neighbors..The.default.valu |
1035c0 | 65 20 69 73 20 31 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e | e.is.1.seconds..The.interval.ran |
1035e0 | 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ge.is.3.to.65535..This.command.s |
103600 | 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 52 78 6d 74 49 6e | ets.number.of.seconds.for.RxmtIn |
103620 | 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 | terval.timer.value..This.value.i |
103640 | 73 20 75 73 65 64 20 77 68 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 44 61 74 61 62 | s.used.when.retransmitting.Datab |
103660 | 61 73 65 20 44 65 73 63 72 69 70 74 69 6f 6e 20 61 6e 64 20 4c 69 6e 6b 20 53 74 61 74 65 20 52 | ase.Description.and.Link.State.R |
103680 | 65 71 75 65 73 74 20 70 61 63 6b 65 74 73 20 69 66 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 77 61 | equest.packets.if.acknowledge.wa |
1036a0 | 73 20 6e 6f 74 20 72 65 63 65 69 76 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 | s.not.received..The.default.valu |
1036c0 | 65 20 69 73 20 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e | e.is.5.seconds..The.interval.ran |
1036e0 | 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ge.is.3.to.65535..This.command.s |
103700 | 65 74 73 20 6f 6c 64 2d 73 74 79 6c 65 20 28 49 53 4f 20 31 30 35 38 39 29 20 6f 72 20 6e 65 77 | ets.old-style.(ISO.10589).or.new |
103720 | 20 73 74 79 6c 65 20 70 61 63 6b 65 74 20 66 6f 72 6d 61 74 73 3a 00 54 68 69 73 20 63 6f 6d 6d | .style.packet.formats:.This.comm |
103740 | 61 6e 64 20 73 65 74 73 20 6f 74 68 65 72 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 73 20 3c 6e | and.sets.other.confederations.<n |
103760 | 73 75 62 61 73 6e 3e 20 61 73 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 | subasn>.as.members.of.autonomous |
103780 | 20 73 79 73 74 65 6d 20 73 70 65 63 69 66 69 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 63 6f | .system.specified.by.:cfgcmd:`co |
1037a0 | 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 20 3c 61 73 6e 3e 60 2e 00 54 | nfederation.identifier.<asn>`..T |
1037c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 76 65 72 6c 6f 61 64 20 62 69 74 20 74 6f | his.command.sets.overload.bit.to |
1037e0 | 20 61 76 6f 69 64 20 61 6e 79 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 | .avoid.any.transit.traffic.throu |
103800 | 67 68 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 | gh.this.router..It.is.described. |
103820 | 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 | in.:rfc:`3787`..This.command.set |
103840 | 73 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 | s.priority.for.the.interface.for |
103860 | 20 3a 61 62 62 72 3a 60 44 49 53 20 28 44 65 73 69 67 6e 61 74 65 64 20 49 6e 74 65 72 6d 65 64 | .:abbr:`DIS.(Designated.Intermed |
103880 | 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 70 72 69 6f | iate.System)`.election..The.prio |
1038a0 | 72 69 74 79 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d | rity.range.is.0.to.127..This.com |
1038c0 | 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 | mand.sets.the.administrative.dis |
1038e0 | 74 61 6e 63 65 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 72 6f 75 74 65 2e 20 54 68 | tance.for.a.particular.route..Th |
103900 | 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 | e.distance.range.is.1.to.255..Th |
103920 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 63 6f 73 74 20 6f 66 20 64 65 66 61 | is.command.sets.the.cost.of.defa |
103940 | 75 6c 74 2d 73 75 6d 6d 61 72 79 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 73 74 | ult-summary.LSAs.announced.to.st |
103960 | 75 62 62 79 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 | ubby.areas..The.cost.range.is.0. |
103980 | 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 | to.16777215..This.command.sets.t |
1039a0 | 68 65 20 64 65 66 61 75 6c 74 20 63 6f 73 74 20 6f 66 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 | he.default.cost.of.LSAs.announce |
1039c0 | 64 20 74 6f 20 4e 53 53 41 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 | d.to.NSSA.areas..The.cost.range. |
1039e0 | 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | is.0.to.16777215..This.command.s |
103a00 | 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 64 65 6c 61 79 2c 20 74 68 65 20 69 6e 69 74 69 | ets.the.initial.delay,.the.initi |
103a20 | 61 6c 2d 68 6f 6c 64 74 69 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 2d 68 6f 6c 64 | al-holdtime.and.the.maximum-hold |
103a40 | 74 69 6d 65 20 62 65 74 77 65 65 6e 20 77 68 65 6e 20 53 50 46 20 69 73 20 63 61 6c 63 75 6c 61 | time.between.when.SPF.is.calcula |
103a60 | 74 65 64 20 61 6e 64 20 74 68 65 20 65 76 65 6e 74 20 77 68 69 63 68 20 74 72 69 67 67 65 72 65 | ted.and.the.event.which.triggere |
103a80 | 64 20 74 68 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 74 69 6d 65 73 20 61 72 65 | d.the.calculation..The.times.are |
103aa0 | 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 6e 64 20 6d | .specified.in.milliseconds.and.m |
103ac0 | 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 30 20 74 6f 20 36 30 30 30 | ust.be.in.the.range.of.0.to.6000 |
103ae0 | 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 3a 63 66 67 63 6d 64 3a 60 64 65 6c 61 79 60 | 00.milliseconds..:cfgcmd:`delay` |
103b00 | 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 53 50 46 20 73 63 68 65 64 75 6c 65 20 64 | .sets.the.initial.SPF.schedule.d |
103b20 | 65 6c 61 79 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c | elay.in.milliseconds..The.defaul |
103b40 | 74 20 76 61 6c 75 65 20 69 73 20 32 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 69 74 | t.value.is.200.ms..:cfgcmd:`init |
103b60 | 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 68 | ial-holdtime`.sets.the.minimum.h |
103b80 | 6f 6c 64 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 | old.time.between.two.consecutive |
103ba0 | 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 | .SPF.calculations..The.default.v |
103bc0 | 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 6d 61 78 2d 68 6f | alue.is.1000.ms..:cfgcmd:`max-ho |
103be0 | 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 77 61 69 74 20 74 69 | ldtime`.sets.the.maximum.wait.ti |
103c00 | 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 | me.between.two.consecutive.SPF.c |
103c20 | 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | alculations..The.default.value.i |
103c40 | 73 20 31 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 | s.10000.ms..This.command.sets.th |
103c60 | 65 20 69 6e 74 65 72 66 61 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 | e.interface.bandwidth.for.cost.c |
103c80 | 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e | alculations,.where.bandwidth.can |
103ca0 | 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 31 30 30 30 30 30 2c 20 73 | .be.in.range.from.1.to.100000,.s |
103cc0 | 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | pecified.in.Mbits/s..This.comman |
103ce0 | 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 3a 00 54 68 69 73 20 | d.sets.the.interface.type:.This. |
103d00 | 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 | command.sets.the.interface.with. |
103d20 | 52 49 50 20 4d 44 35 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d | RIP.MD5.authentication..This.com |
103d40 | 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 4d 44 35 20 4b 65 79 2e 20 54 68 65 20 6b 65 79 20 | mand.also.sets.MD5.Key..The.key. |
103d60 | 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 | must.be.shorter.than.16.characte |
103d80 | 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 | rs..This.command.sets.the.interf |
103da0 | 61 63 65 20 77 69 74 68 20 52 49 50 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 | ace.with.RIP.simple.password.aut |
103dc0 | 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 | hentication..This.command.also.s |
103de0 | 65 74 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 74 72 69 6e 67 2e 20 54 68 65 20 73 | ets.authentication.string..The.s |
103e00 | 74 72 69 6e 67 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 | tring.must.be.shorter.than.16.ch |
103e20 | 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 | aracters..This.command.sets.the. |
103e40 | 6d 75 6c 74 69 70 6c 69 63 61 74 69 76 65 20 66 61 63 74 6f 72 20 75 73 65 64 20 66 6f 72 20 64 | multiplicative.factor.used.for.d |
103e60 | 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f | iversity.routing,.in.units.of.1/ |
103e80 | 32 35 36 3b 20 6c 6f 77 65 72 20 76 61 6c 75 65 73 20 63 61 75 73 65 20 64 69 76 65 72 73 69 74 | 256;.lower.values.cause.diversit |
103ea0 | 79 20 74 6f 20 70 6c 61 79 20 61 20 6d 6f 72 65 20 69 6d 70 6f 72 74 61 6e 74 20 72 6f 6c 65 20 | y.to.play.a.more.important.role. |
103ec0 | 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | in.route.selection..The.default. |
103ee0 | 69 74 20 32 35 36 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 74 68 61 74 20 64 69 76 65 72 73 69 | it.256,.which.means.that.diversi |
103f00 | 74 79 20 70 6c 61 79 73 20 6e 6f 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 | ty.plays.no.role.in.route.select |
103f20 | 69 6f 6e 3b 20 79 6f 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 | ion;.you.will.probably.want.to.s |
103f40 | 65 74 20 74 68 61 74 20 74 6f 20 31 32 38 20 6f 72 20 6c 65 73 73 20 6f 6e 20 6e 6f 64 65 73 20 | et.that.to.128.or.less.on.nodes. |
103f60 | 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 72 61 64 69 6f 73 | with.multiple.independent.radios |
103f80 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 65 66 65 72 65 6e 63 | ..This.command.sets.the.referenc |
103fa0 | 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e | e.bandwidth.for.cost.calculation |
103fc0 | 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e | s,.where.bandwidth.can.be.in.ran |
103fe0 | 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 37 2c 20 73 70 65 63 69 66 69 65 64 20 | ge.from.1.to.4294967,.specified. |
104000 | 69 6e 20 4d 62 69 74 73 2f 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 30 4d 62 | in.Mbits/s..The.default.is.100Mb |
104020 | 69 74 2f 73 20 28 69 2e 65 2e 20 61 20 6c 69 6e 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 31 | it/s.(i.e..a.link.of.bandwidth.1 |
104040 | 30 30 4d 62 69 74 2f 73 20 6f 72 20 68 69 67 68 65 72 20 77 69 6c 6c 20 68 61 76 65 20 61 20 63 | 00Mbit/s.or.higher.will.have.a.c |
104060 | 6f 73 74 20 6f 66 20 31 2e 20 43 6f 73 74 20 6f 66 20 6c 6f 77 65 72 20 62 61 6e 64 77 69 64 74 | ost.of.1..Cost.of.lower.bandwidt |
104080 | 68 20 6c 69 6e 6b 73 20 77 69 6c 6c 20 62 65 20 73 63 61 6c 65 64 20 77 69 74 68 20 72 65 66 65 | h.links.will.be.scaled.with.refe |
1040a0 | 72 65 6e 63 65 20 74 6f 20 74 68 69 73 20 63 6f 73 74 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | rence.to.this.cost)..This.comman |
1040c0 | 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 | d.sets.the.router-ID.of.the.OSPF |
1040e0 | 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 | .process..The.router-ID.may.be.a |
104100 | 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 | n.IP.address.of.the.router,.but. |
104120 | 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 | need.not.be.....it.can.be.any.ar |
104140 | 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 | bitrary.32bit.number..However.it |
104160 | 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 | .MUST.be.unique.within.the.entir |
104180 | 65 20 4f 53 50 46 20 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 20 73 70 65 61 6b 65 | e.OSPF.domain.to.the.OSPF.speake |
1041a0 | 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 | r.....bad.things.will.happen.if. |
1041c0 | 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 | multiple.OSPF.speakers.are.confi |
1041e0 | 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 | gured.with.the.same.router-ID!.T |
104200 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f | his.command.sets.the.router-ID.o |
104220 | 66 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 | f.the.OSPFv3.process..The.router |
104240 | 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | -ID.may.be.an.IP.address.of.the. |
104260 | 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 | router,.but.need.not.be.....it.c |
104280 | 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 | an.be.any.arbitrary.32bit.number |
1042a0 | 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 | ..However.it.MUST.be.unique.with |
1042c0 | 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 76 33 20 64 6f 6d 61 69 6e 20 74 6f 20 74 | in.the.entire.OSPFv3.domain.to.t |
1042e0 | 68 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 | he.OSPFv3.speaker.....bad.things |
104300 | 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 76 33 20 | .will.happen.if.multiple.OSPFv3. |
104320 | 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 | speakers.are.configured.with.the |
104340 | 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | .same.router-ID!.This.command.se |
104360 | 74 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 61 | ts.the.specified.interface.to.pa |
104380 | 73 73 69 76 65 20 6d 6f 64 65 2e 20 4f 6e 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 69 6e 74 65 | ssive.mode..On.passive.mode.inte |
1043a0 | 72 66 61 63 65 2c 20 61 6c 6c 20 72 65 63 65 69 76 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 | rface,.all.receiving.packets.are |
1043c0 | 20 70 72 6f 63 65 73 73 65 64 20 61 73 20 6e 6f 72 6d 61 6c 20 61 6e 64 20 56 79 4f 53 20 64 6f | .processed.as.normal.and.VyOS.do |
1043e0 | 65 73 20 6e 6f 74 20 73 65 6e 64 20 65 69 74 68 65 72 20 6d 75 6c 74 69 63 61 73 74 20 6f 72 20 | es.not.send.either.multicast.or. |
104400 | 75 6e 69 63 61 73 74 20 52 49 50 20 70 61 63 6b 65 74 73 20 65 78 63 65 70 74 20 74 6f 20 52 49 | unicast.RIP.packets.except.to.RI |
104420 | 50 20 6e 65 69 67 68 62 6f 72 73 20 73 70 65 63 69 66 69 65 64 20 77 69 74 68 20 6e 65 69 67 68 | P.neighbors.specified.with.neigh |
104440 | 62 6f 72 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 | bor.command..This.command.should |
104460 | 20 4e 4f 54 20 62 65 20 73 65 74 20 6e 6f 72 6d 61 6c 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | .NOT.be.set.normally..This.comma |
104480 | 6e 64 20 73 68 6f 77 73 20 62 6f 74 68 20 73 74 61 74 75 73 20 61 6e 64 20 73 74 61 74 69 73 74 | nd.shows.both.status.and.statist |
1044a0 | 69 63 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e | ics.on.the.specified.wireless.in |
1044c0 | 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 | terface..The.wireless.interface. |
1044e0 | 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 | identifier.can.range.from.wlan0. |
104500 | 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | to.wlan999..This.command.specifi |
104520 | 65 73 20 61 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 | es.a.BGP.confederation.identifie |
104540 | 72 2e 20 3c 61 73 6e 3e 20 69 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 61 75 | r..<asn>.is.the.number.of.the.au |
104560 | 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 6c 79 20 | tonomous.system.that.internally. |
104580 | 69 6e 63 6c 75 64 65 73 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 2d 61 75 74 6f 6e 6f 6d 6f 75 73 | includes.multiple.sub-autonomous |
1045a0 | 20 73 79 73 74 65 6d 73 20 28 61 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 29 2e 00 54 68 69 73 | .systems.(a.confederation)..This |
1045c0 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 61 62 65 6c 20 65 6e 61 62 6c | .command.specifies.a.Babel.enabl |
1045e0 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 | ed.interface.by.interface.name.. |
104600 | 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f | Both.the.sending.and.receiving.o |
104620 | 66 20 42 61 62 65 6c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 | f.Babel.packets.will.be.enabled. |
104640 | 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 | on.the.interface.specified.in.th |
104660 | 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | is.command..This.command.specifi |
104680 | 65 73 20 61 20 4d 44 35 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 | es.a.MD5.password.to.be.used.wit |
1046a0 | 68 20 74 68 65 20 74 63 70 20 73 6f 63 6b 65 74 20 74 68 61 74 20 69 73 20 62 65 69 6e 67 20 75 | h.the.tcp.socket.that.is.being.u |
1046c0 | 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 | sed.to.connect.to.the.remote.pee |
1046e0 | 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 | r..This.command.specifies.a.RIP. |
104700 | 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e | enabled.interface.by.interface.n |
104720 | 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 | ame..Both.the.sending.and.receiv |
104740 | 69 6e 67 20 6f 66 20 52 49 50 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c | ing.of.RIP.packets.will.be.enabl |
104760 | 65 64 20 6f 6e 20 74 68 65 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 | ed.on.the.port.specified.in.this |
104780 | 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .command..This.command.specifies |
1047a0 | 20 61 20 52 49 50 20 6e 65 69 67 68 62 6f 72 2e 20 57 68 65 6e 20 61 20 6e 65 69 67 68 62 6f 72 | .a.RIP.neighbor..When.a.neighbor |
1047c0 | 20 64 6f 65 73 6e e2 80 99 74 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 2c | .doesn...t.understand.multicast, |
1047e0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 73 70 65 63 69 66 79 | .this.command.is.used.to.specify |
104800 | 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 6e 6f 74 20 61 | .neighbors..In.some.cases,.not.a |
104820 | 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 6e 64 65 72 | ll.routers.will.be.able.to.under |
104840 | 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 2c 20 77 68 65 72 65 20 70 61 63 6b 65 74 | stand.multicasting,.where.packet |
104860 | 73 20 61 72 65 20 73 65 6e 74 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 20 67 72 6f | s.are.sent.to.a.network.or.a.gro |
104880 | 75 70 20 6f 66 20 61 64 64 72 65 73 73 65 73 2e 20 49 6e 20 61 20 73 69 74 75 61 74 69 6f 6e 20 | up.of.addresses..In.a.situation. |
1048a0 | 77 68 65 72 65 20 61 20 6e 65 69 67 68 62 6f 72 20 63 61 6e 6e 6f 74 20 70 72 6f 63 65 73 73 20 | where.a.neighbor.cannot.process. |
1048c0 | 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 | multicast.packets,.it.is.necessa |
1048e0 | 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 64 69 72 65 63 74 20 6c 69 6e 6b 20 62 65 | ry.to.establish.a.direct.link.be |
104900 | 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 | tween.routers..This.command.spec |
104920 | 69 66 69 65 73 20 61 20 64 65 66 61 75 6c 74 20 77 65 69 67 68 74 20 76 61 6c 75 65 20 66 6f 72 | ifies.a.default.weight.value.for |
104940 | 20 74 68 65 20 6e 65 69 67 68 62 6f 72 e2 80 99 73 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6e 75 | .the.neighbor...s.routes..The.nu |
104960 | 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 | mber.range.is.1.to.65535..This.c |
104980 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 | ommand.specifies.a.maximum.numbe |
1049a0 | 72 20 6f 66 20 70 72 65 66 69 78 65 73 20 77 65 20 63 61 6e 20 72 65 63 65 69 76 65 20 66 72 6f | r.of.prefixes.we.can.receive.fro |
1049c0 | 6d 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 20 49 66 20 74 68 69 73 20 6e 75 6d 62 65 72 20 69 | m.a.given.peer..If.this.number.i |
1049e0 | 73 20 65 78 63 65 65 64 65 64 2c 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c | s.exceeded,.the.BGP.session.will |
104a00 | 20 62 65 20 64 65 73 74 72 6f 79 65 64 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 | .be.destroyed..The.number.range. |
104a20 | 69 73 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | is.1.to.4294967295..This.command |
104a40 | 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 20 70 61 73 | .specifies.all.interfaces.as.pas |
104a60 | 73 69 76 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 42 65 63 61 75 73 65 20 74 68 69 73 20 63 6f | sive.by.default..Because.this.co |
104a80 | 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | mmand.changes.the.configuration. |
104aa0 | 6c 6f 67 69 63 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 61 73 73 69 76 65 3b 20 74 68 65 72 | logic.to.a.default.passive;.ther |
104ac0 | 65 66 6f 72 65 2c 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 72 65 20 72 6f 75 74 65 72 20 61 | efore,.interfaces.where.router.a |
104ae0 | 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 65 78 70 65 63 74 65 64 20 6e 65 65 64 20 74 6f 20 | djacencies.are.expected.need.to. |
104b00 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 | be.configured.with.the.:cfgcmd:` |
104b20 | 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 2d 65 78 63 6c 75 64 65 60 20 63 6f 6d 6d 61 | passive-interface-exclude`.comma |
104b40 | 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 | nd..This.command.specifies.all.i |
104b60 | 6e 74 65 72 66 61 63 65 73 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 00 54 68 69 73 20 | nterfaces.to.passive.mode..This. |
104b80 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 | command.specifies.an.aggregate.a |
104ba0 | 64 64 72 65 73 73 20 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 68 61 74 20 6c 6f 6e 67 65 72 2d | ddress.and.provides.that.longer- |
104bc0 | 70 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 | prefixes.inside.of.the.aggregate |
104be0 | 20 61 64 64 72 65 73 73 20 61 72 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 73 | .address.are.suppressed.before.s |
104c00 | 65 6e 64 69 6e 67 20 42 47 50 20 75 70 64 61 74 65 73 20 6f 75 74 20 74 6f 20 70 65 65 72 73 2e | ending.BGP.updates.out.to.peers. |
104c20 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 | .This.command.specifies.an.aggre |
104c40 | 67 61 74 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 61 20 6d 61 74 68 65 6d 61 74 69 63 61 6c | gate.address.with.a.mathematical |
104c60 | 20 73 65 74 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 | .set.of.autonomous.systems..This |
104c80 | 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 74 68 65 20 41 53 5f 50 41 54 48 20 | .command.summarizes.the.AS_PATH. |
104ca0 | 61 74 74 72 69 62 75 74 65 73 20 6f 66 20 61 6c 6c 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c | attributes.of.all.the.individual |
104cc0 | 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | .routes..This.command.specifies. |
104ce0 | 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 | an.aggregate.address..The.router |
104d00 | 20 77 69 6c 6c 20 61 6c 73 6f 20 61 6e 6e 6f 75 6e 63 65 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 | .will.also.announce.longer-prefi |
104d20 | 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 | xes.inside.of.the.aggregate.addr |
104d40 | 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 74 74 72 | ess..This.command.specifies.attr |
104d60 | 69 62 75 74 65 73 20 74 6f 20 62 65 20 6c 65 66 74 20 75 6e 63 68 61 6e 67 65 64 20 66 6f 72 20 | ibutes.to.be.left.unchanged.for. |
104d80 | 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 73 65 6e 74 20 74 6f 20 61 20 70 65 65 72 20 6f 72 | advertisements.sent.to.a.peer.or |
104da0 | 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | .peer.group..This.command.specif |
104dc0 | 69 65 73 20 63 69 72 63 75 69 74 20 74 79 70 65 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 3a 00 | ies.circuit.type.for.interface:. |
104de0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 6c 75 73 74 65 72 20 49 | This.command.specifies.cluster.I |
104e00 | 44 20 77 68 69 63 68 20 69 64 65 6e 74 69 66 69 65 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 | D.which.identifies.a.collection. |
104e20 | 6f 66 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 61 6e 64 20 74 68 65 69 72 20 63 6c | of.route.reflectors.and.their.cl |
104e40 | 69 65 6e 74 73 2c 20 61 6e 64 20 69 73 20 75 73 65 64 20 62 79 20 72 6f 75 74 65 20 72 65 66 6c | ients,.and.is.used.by.route.refl |
104e60 | 65 63 74 6f 72 73 20 74 6f 20 61 76 6f 69 64 20 6c 6f 6f 70 69 6e 67 2e 20 42 79 20 64 65 66 61 | ectors.to.avoid.looping..By.defa |
104e80 | 75 6c 74 20 63 6c 75 73 74 65 72 20 49 44 20 69 73 20 73 65 74 20 74 6f 20 74 68 65 20 42 47 50 | ult.cluster.ID.is.set.to.the.BGP |
104ea0 | 20 72 6f 75 74 65 72 20 69 64 20 76 61 6c 75 65 2c 20 62 75 74 20 63 61 6e 20 62 65 20 73 65 74 | .router.id.value,.but.can.be.set |
104ec0 | 20 74 6f 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 33 32 2d 62 69 74 20 76 61 6c 75 65 2e 00 54 | .to.an.arbitrary.32-bit.value..T |
104ee0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 68 6f 6c 64 2d 74 69 6d 65 20 | his.command.specifies.hold-time. |
104f00 | 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 34 | in.seconds..The.timer.range.is.4 |
104f20 | 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | .to.65535..The.default.value.is. |
104f40 | 31 38 30 20 73 65 63 6f 6e 64 2e 20 49 66 20 79 6f 75 20 73 65 74 20 76 61 6c 75 65 20 74 6f 20 | 180.second..If.you.set.value.to. |
104f60 | 30 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 68 6f 6c 64 20 72 6f 75 74 65 73 2e 00 54 68 69 | 0.VyOS.will.not.hold.routes..Thi |
104f80 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 69 6e 74 65 72 66 61 63 65 20 61 73 | s.command.specifies.interface.as |
104fa0 | 20 70 61 73 73 69 76 65 2e 20 50 61 73 73 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 76 65 | .passive..Passive.interface.adve |
104fc0 | 72 74 69 73 65 73 20 69 74 73 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 | rtises.its.address,.but.does.not |
104fe0 | 20 72 75 6e 20 74 68 65 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 28 61 64 6a 61 63 65 6e 63 | .run.the.OSPF.protocol.(adjacenc |
105000 | 69 65 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 6d 65 64 20 61 6e 64 20 68 65 6c 6c 6f 20 70 61 63 | ies.are.not.formed.and.hello.pac |
105020 | 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 64 29 2e 00 54 68 69 73 20 63 6f | kets.are.not.generated)..This.co |
105040 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 20 | mmand.specifies.keep-alive.time. |
105060 | 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 63 61 6e 20 72 61 6e 67 65 20 | in.seconds..The.timer.can.range. |
105080 | 66 72 6f 6d 20 34 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | from.4.to.65535..The.default.val |
1050a0 | 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ue.is.60.second..This.command.sp |
1050c0 | 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 28 4d 45 44 29 20 66 6f 72 20 72 65 64 69 73 74 72 | ecifies.metric.(MED).for.redistr |
1050e0 | 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 | ibuted.routes..The.metric.range. |
105100 | 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 | is.0.to.4294967295..There.are.si |
105120 | 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 | x.modes.available.for.route.sour |
105140 | 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 | ce:.connected,.kernel,.ospf,.rip |
105160 | 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ,.static,.table..This.command.sp |
105180 | 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 | ecifies.metric.for.redistributed |
1051a0 | 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 | .routes.from.the.given.route.sou |
1051c0 | 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 | rce..There.are.five.modes.availa |
1051e0 | 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 | ble.for.route.source:.bgp,.conne |
105200 | 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 | cted,.kernel,.ospf,.static..The. |
105220 | 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 00 54 68 69 73 20 63 6f | metric.range.is.1.to.16..This.co |
105240 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 | mmand.specifies.metric.for.redis |
105260 | 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 | tributed.routes.from.the.given.r |
105280 | 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 | oute.source..There.are.five.mode |
1052a0 | 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 | s.available.for.route.source:.bg |
1052c0 | 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 | p,.connected,.kernel,.rip,.stati |
1052e0 | 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 | c..The.metric.range.is.1.to.1677 |
105300 | 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 | 7214..This.command.specifies.met |
105320 | 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f | ric.for.redistributed.routes.fro |
105340 | 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 | m.the.given.route.source..There. |
105360 | 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 | are.six.modes.available.for.rout |
105380 | 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c | e.source:.bgp,.connected,.kernel |
1053a0 | 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 | ,.ospf,.rip,.static..The.metric. |
1053c0 | 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d | range.is.1.to.16777215..This.com |
1053e0 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 74 79 70 65 20 66 6f 72 20 72 | mand.specifies.metric.type.for.r |
105400 | 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 44 69 66 66 65 72 65 6e 63 65 20 | edistributed.routes..Difference. |
105420 | 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 65 74 72 69 63 20 74 79 70 65 73 20 74 68 61 74 20 6d 65 | between.two.metric.types.that.me |
105440 | 74 72 69 63 20 74 79 70 65 20 31 20 69 73 20 61 20 6d 65 74 72 69 63 20 77 68 69 63 68 20 69 73 | tric.type.1.is.a.metric.which.is |
105460 | 20 22 63 6f 6d 6d 65 6e 73 75 72 61 62 6c 65 22 20 77 69 74 68 20 69 6e 6e 65 72 20 4f 53 50 46 | ."commensurable".with.inner.OSPF |
105480 | 20 6c 69 6e 6b 73 2e 20 57 68 65 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 61 20 6d 65 74 72 69 | .links..When.calculating.a.metri |
1054a0 | 63 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 74 | c.to.the.external.destination,.t |
1054c0 | 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6d 65 74 72 69 63 20 69 73 20 63 61 6c 63 75 6c 61 74 65 | he.full.path.metric.is.calculate |
1054e0 | 64 20 61 73 20 61 20 6d 65 74 72 69 63 20 73 75 6d 20 70 61 74 68 20 6f 66 20 61 20 72 6f 75 74 | d.as.a.metric.sum.path.of.a.rout |
105500 | 65 72 20 77 68 69 63 68 20 68 61 64 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e | er.which.had.advertised.this.lin |
105520 | 6b 20 70 6c 75 73 20 74 68 65 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 75 73 2c 20 61 20 | k.plus.the.link.metric..Thus,.a. |
105540 | 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 73 75 6d 6d 61 72 79 20 6d 65 74 | route.with.the.least.summary.met |
105560 | 72 69 63 20 77 69 6c 6c 20 62 65 20 73 65 6c 65 63 74 65 64 2e 20 49 66 20 65 78 74 65 72 6e 61 | ric.will.be.selected..If.externa |
105580 | 6c 20 6c 69 6e 6b 20 69 73 20 61 64 76 65 72 74 69 73 65 64 20 77 69 74 68 20 6d 65 74 72 69 63 | l.link.is.advertised.with.metric |
1055a0 | 20 74 79 70 65 20 32 20 74 68 65 20 70 61 74 68 20 69 73 20 73 65 6c 65 63 74 65 64 20 77 68 69 | .type.2.the.path.is.selected.whi |
1055c0 | 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 | ch.lies.through.the.router.which |
1055e0 | 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 77 69 74 68 20 74 68 65 20 6c | .advertised.this.link.with.the.l |
105600 | 65 61 73 74 20 6d 65 74 72 69 63 20 64 65 73 70 69 74 65 20 6f 66 20 74 68 65 20 66 61 63 74 20 | east.metric.despite.of.the.fact. |
105620 | 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 | that.internal.path.to.this.route |
105640 | 72 20 69 73 20 6c 6f 6e 67 65 72 20 28 77 69 74 68 20 6d 6f 72 65 20 63 6f 73 74 29 2e 20 48 6f | r.is.longer.(with.more.cost)..Ho |
105660 | 77 65 76 65 72 2c 20 69 66 20 74 77 6f 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 | wever,.if.two.routers.advertised |
105680 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 61 6e 64 20 77 69 74 68 20 6d 65 74 72 69 | .an.external.link.and.with.metri |
1056a0 | 63 20 74 79 70 65 20 32 20 74 68 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 20 67 69 76 65 6e | c.type.2.the.preference.is.given |
1056c0 | 20 74 6f 20 74 68 65 20 70 61 74 68 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 | .to.the.path.which.lies.through. |
1056e0 | 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 20 73 68 6f 72 74 65 72 20 69 6e 74 65 72 6e | the.router.with.a.shorter.intern |
105700 | 61 6c 20 70 61 74 68 2e 20 49 66 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 65 72 | al.path..If.two.different.router |
105720 | 73 20 61 64 76 65 72 74 69 73 65 64 20 74 77 6f 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 73 61 | s.advertised.two.links.to.the.sa |
105740 | 6d 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6d 61 74 69 6f 6e 20 62 75 74 20 77 69 74 68 | me.external.destimation.but.with |
105760 | 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 20 74 79 70 65 2c 20 6d 65 74 72 69 63 20 74 | .different.metric.type,.metric.t |
105780 | 79 70 65 20 31 20 69 73 20 70 72 65 66 65 72 72 65 64 2e 20 49 66 20 74 79 70 65 20 6f 66 20 61 | ype.1.is.preferred..If.type.of.a |
1057a0 | 20 6d 65 74 72 69 63 20 6c 65 66 74 20 75 6e 64 65 66 69 6e 65 64 20 74 68 65 20 72 6f 75 74 65 | .metric.left.undefined.the.route |
1057c0 | 72 20 77 69 6c 6c 20 63 6f 6e 73 69 64 65 72 20 74 68 65 73 65 20 65 78 74 65 72 6e 61 6c 20 6c | r.will.consider.these.external.l |
1057e0 | 69 6e 6b 73 20 74 6f 20 68 61 76 65 20 61 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 74 79 | inks.to.have.a.default.metric.ty |
105800 | 70 65 20 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6e 65 74 | pe.2..This.command.specifies.net |
105820 | 77 6f 72 6b 20 74 79 70 65 20 74 6f 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 2e 20 54 68 65 | work.type.to.Point-to-Point..The |
105840 | 20 64 65 66 61 75 6c 74 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 69 73 20 62 72 6f 61 64 63 61 | .default.network.type.is.broadca |
105860 | 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 | st..This.command.specifies.that. |
105880 | 42 47 50 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 20 4d 45 44 20 77 68 65 6e 20 63 6f 6d 70 61 | BGP.considers.the.MED.when.compa |
1058a0 | 72 69 6e 67 20 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 64 69 66 66 | ring.routes.originated.from.diff |
1058c0 | 65 72 65 6e 74 20 73 75 62 2d 41 53 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 65 64 65 | erent.sub-ASs.within.the.confede |
1058e0 | 72 61 74 69 6f 6e 20 74 6f 20 77 68 69 63 68 20 74 68 69 73 20 42 47 50 20 73 70 65 61 6b 65 72 | ration.to.which.this.BGP.speaker |
105900 | 20 62 65 6c 6f 6e 67 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 | .belongs..The.default.state,.whe |
105920 | 72 65 20 74 68 65 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 6f 74 20 63 6f 6e 73 | re.the.MED.attribute.is.not.cons |
105940 | 69 64 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | idered..This.command.specifies.t |
105960 | 68 61 74 20 42 47 50 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 20 73 68 6f 75 6c 64 20 | hat.BGP.decision.process.should. |
105980 | 63 6f 6e 73 69 64 65 72 20 70 61 74 68 73 20 6f 66 20 65 71 75 61 6c 20 41 53 5f 50 41 54 48 20 | consider.paths.of.equal.AS_PATH. |
1059a0 | 6c 65 6e 67 74 68 20 63 61 6e 64 69 64 61 74 65 73 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 | length.candidates.for.multipath. |
1059c0 | 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 6b 6e 6f 62 2c 20 74 | computation..Without.the.knob,.t |
1059e0 | 68 65 20 65 6e 74 69 72 65 20 41 53 5f 50 41 54 48 20 6d 75 73 74 20 6d 61 74 63 68 20 66 6f 72 | he.entire.AS_PATH.must.match.for |
105a00 | 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d | .multipath.computation..This.com |
105a20 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 77 69 74 68 | mand.specifies.that.a.route.with |
105a40 | 20 61 20 4d 45 44 20 69 73 20 61 6c 77 61 79 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 | .a.MED.is.always.considered.to.b |
105a60 | 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 61 20 72 6f 75 74 65 20 77 69 74 68 6f 75 74 20 61 20 | e.better.than.a.route.without.a. |
105a80 | 4d 45 44 20 62 79 20 63 61 75 73 69 6e 67 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 | MED.by.causing.the.missing.MED.a |
105aa0 | 74 74 72 69 62 75 74 65 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 69 6e 66 69 | ttribute.to.have.a.value.of.infi |
105ac0 | 6e 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 | nity..The.default.state,.where.t |
105ae0 | 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 63 6f 6e 73 | he.missing.MED.attribute.is.cons |
105b00 | 69 64 65 72 65 64 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 7a 65 72 6f 2e 00 | idered.to.have.a.value.of.zero.. |
105b20 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 72 6f 75 74 | This.command.specifies.that.rout |
105b40 | 65 20 75 70 64 61 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 69 | e.updates.received.from.this.nei |
105b60 | 67 68 62 6f 72 20 77 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 75 6e 6d 6f 64 69 66 69 65 64 2c | ghbor.will.be.stored.unmodified, |
105b80 | 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 | .regardless.of.the.inbound.polic |
105ba0 | 79 2e 20 57 68 65 6e 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 | y..When.inbound.soft.reconfigura |
105bc0 | 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 74 6f 72 65 64 20 75 70 64 61 | tion.is.enabled,.the.stored.upda |
105be0 | 74 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 62 79 20 74 68 65 20 6e 65 77 20 70 6f 6c | tes.are.processed.by.the.new.pol |
105c00 | 69 63 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 6e 65 77 20 | icy.configuration.to.create.new. |
105c20 | 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | inbound.updates..This.command.sp |
105c40 | 65 63 69 66 69 65 73 20 74 68 61 74 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 | ecifies.that.simple.password.aut |
105c60 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 | hentication.should.be.used.for.t |
105c80 | 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 54 68 65 20 70 61 73 73 77 6f 72 64 20 6d 75 73 74 | he.given.area..The.password.must |
105ca0 | 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 | .also.be.configured.on.a.per-int |
105cc0 | 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | erface.basis..This.command.speci |
105ce0 | 66 69 65 73 20 74 68 61 74 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 | fies.that.the.community.attribut |
105d00 | 65 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 65 6e 74 20 69 6e 20 72 6f 75 74 65 20 75 70 | e.should.not.be.sent.in.route.up |
105d20 | 64 61 74 65 73 20 74 6f 20 61 20 70 65 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6f 6d 6d | dates.to.a.peer..By.default.comm |
105d40 | 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 65 6e 74 2e 00 54 68 69 73 20 63 6f | unity.attribute.is.sent..This.co |
105d60 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 6c 65 6e 67 74 68 20 | mmand.specifies.that.the.length. |
105d80 | 6f 66 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 70 61 74 68 20 73 65 74 73 20 61 6e 64 20 73 | of.confederation.path.sets.and.s |
105da0 | 65 71 75 65 6e 63 65 73 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 | equences.should.be.taken.into.ac |
105dc0 | 63 6f 75 6e 74 20 64 75 72 69 6e 67 20 74 68 65 20 42 47 50 20 62 65 73 74 20 70 61 74 68 20 64 | count.during.the.BGP.best.path.d |
105de0 | 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ecision.process..This.command.sp |
105e00 | 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6e 65 | ecifies.the.IP.address.of.the.ne |
105e20 | 69 67 68 62 6f 72 69 6e 67 20 64 65 76 69 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ighboring.device..This.command.s |
105e40 | 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 | pecifies.the.OSPF.enabled.interf |
105e60 | 61 63 65 28 73 29 2e 20 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 6e 20 | ace(s)..If.the.interface.has.an. |
105e80 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 20 74 68 65 6e 20 | address.from.defined.range.then. |
105ea0 | 74 68 65 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 53 50 46 20 6f 6e 20 74 68 69 73 | the.command.enables.OSPF.on.this |
105ec0 | 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 72 6f 75 74 65 72 20 63 61 6e 20 70 72 6f 76 69 64 65 | .interface.so.router.can.provide |
105ee0 | 20 6e 65 74 77 6f 72 6b 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 6f 74 68 65 | .network.information.to.the.othe |
105f00 | 72 20 6f 73 70 66 20 72 6f 75 74 65 72 73 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | r.ospf.routers.via.this.interfac |
105f20 | 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 | e..This.command.specifies.the.OS |
105f40 | 50 46 76 33 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d | PFv3.enabled.interface..This.com |
105f60 | 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 | mand.is.also.used.to.enable.the. |
105f80 | 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 | OSPF.process..The.area.number.ca |
105fa0 | 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 | n.be.specified.in.decimal.notati |
105fc0 | 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 | on.in.the.range.from.0.to.429496 |
105fe0 | 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 | 7295..Or.it.can.be.specified.in. |
106000 | 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 | dotted.decimal.notation.similar. |
106020 | 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 | to.ip.address..This.command.spec |
106040 | 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 53 53 41 20 54 6f 74 61 | ifies.the.area.to.be.a.NSSA.Tota |
106060 | 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 | lly.Stub.Area..ABRs.for.such.an. |
106080 | 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 4e 65 74 77 6f 72 6b | area.do.not.need.to.pass.Network |
1060a0 | 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 28 65 78 63 65 70 74 20 74 | -Summary.(type-3).LSAs.(except.t |
1060c0 | 68 65 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 29 2c 20 41 53 42 52 2d | he.default.summary.route),.ASBR- |
1060e0 | 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 61 6e 64 20 41 53 2d 45 78 74 | Summary.LSAs.(type-4).and.AS-Ext |
106100 | 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 69 6e 74 6f 20 74 68 65 20 61 72 65 | ernal.LSAs.(type-5).into.the.are |
106120 | 61 2e 20 42 75 74 20 54 79 70 65 2d 37 20 4c 53 41 73 20 74 68 61 74 20 63 6f 6e 76 65 72 74 20 | a..But.Type-7.LSAs.that.convert. |
106140 | 74 6f 20 54 79 70 65 2d 35 20 61 74 20 74 68 65 20 4e 53 53 41 20 41 42 52 20 61 72 65 20 61 6c | to.Type-5.at.the.NSSA.ABR.are.al |
106160 | 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | lowed..This.command.specifies.th |
106180 | 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 6f 74 20 53 6f 20 53 74 75 62 62 79 20 41 72 65 | e.area.to.be.a.Not.So.Stubby.Are |
1061a0 | 61 2e 20 45 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | a..External.routing.information. |
1061c0 | 69 73 20 69 6d 70 6f 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 4e 53 53 41 20 69 6e 20 54 79 70 65 | is.imported.into.an.NSSA.in.Type |
1061e0 | 2d 37 20 4c 53 41 73 2e 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 73 69 6d 69 6c 61 72 | -7.LSAs..Type-7.LSAs.are.similar |
106200 | 20 74 6f 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2c 20 65 78 63 | .to.Type-5.AS-external.LSAs,.exc |
106220 | 65 70 74 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 66 6c 6f 6f 64 65 | ept.that.they.can.only.be.floode |
106240 | 64 20 69 6e 74 6f 20 74 68 65 20 4e 53 53 41 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 66 75 72 | d.into.the.NSSA..In.order.to.fur |
106260 | 74 68 65 72 20 70 72 6f 70 61 67 61 74 65 20 74 68 65 20 4e 53 53 41 20 65 78 74 65 72 6e 61 6c | ther.propagate.the.NSSA.external |
106280 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 20 54 79 70 65 2d 37 20 4c 53 41 20 6d 75 73 | .information,.the.Type-7.LSA.mus |
1062a0 | 74 20 62 65 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 61 20 54 79 70 65 2d 35 20 41 53 2d 65 | t.be.translated.to.a.Type-5.AS-e |
1062c0 | 78 74 65 72 6e 61 6c 2d 4c 53 41 20 62 79 20 74 68 65 20 4e 53 53 41 20 41 42 52 2e 00 54 68 69 | xternal-LSA.by.the.NSSA.ABR..Thi |
1062e0 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 | s.command.specifies.the.area.to. |
106300 | 62 65 20 61 20 53 74 75 62 20 41 72 65 61 2e 20 54 68 61 74 20 69 73 2c 20 61 6e 20 61 72 65 61 | be.a.Stub.Area..That.is,.an.area |
106320 | 20 77 68 65 72 65 20 6e 6f 20 72 6f 75 74 65 72 20 6f 72 69 67 69 6e 61 74 65 73 20 72 6f 75 74 | .where.no.router.originates.rout |
106340 | 65 73 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 4f 53 50 46 20 61 6e 64 20 68 65 6e 63 65 20 61 6e | es.external.to.OSPF.and.hence.an |
106360 | 20 61 72 65 61 20 77 68 65 72 65 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 | .area.where.all.external.routes. |
106380 | 61 72 65 20 76 69 61 20 74 68 65 20 41 42 52 28 73 29 2e 20 48 65 6e 63 65 2c 20 41 42 52 73 20 | are.via.the.ABR(s)..Hence,.ABRs. |
1063a0 | 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 | for.such.an.area.do.not.need.to. |
1063c0 | 70 61 73 73 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 6f | pass.AS-External.LSAs.(type-5).o |
1063e0 | 72 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 69 6e 74 | r.ASBR-Summary.LSAs.(type-4).int |
106400 | 6f 20 74 68 65 20 61 72 65 61 2e 20 54 68 65 79 20 6e 65 65 64 20 6f 6e 6c 79 20 70 61 73 73 20 | o.the.area..They.need.only.pass. |
106420 | 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e | Network-Summary.(type-3).LSAs.in |
106440 | 74 6f 20 73 75 63 68 20 61 6e 20 61 72 65 61 2c 20 61 6c 6f 6e 67 20 77 69 74 68 20 61 20 64 65 | to.such.an.area,.along.with.a.de |
106460 | 66 61 75 6c 74 2d 72 6f 75 74 65 20 73 75 6d 6d 61 72 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | fault-route.summary..This.comman |
106480 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 54 6f 74 | d.specifies.the.area.to.be.a.Tot |
1064a0 | 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 73 | ally.Stub.Area..In.addition.to.s |
1064c0 | 74 75 62 20 61 72 65 61 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 74 68 69 73 20 61 72 65 61 20 74 | tub.area.limitations.this.area.t |
1064e0 | 79 70 65 20 70 72 65 76 65 6e 74 73 20 61 6e 20 41 42 52 20 66 72 6f 6d 20 69 6e 6a 65 63 74 69 | ype.prevents.an.ABR.from.injecti |
106500 | 6e 67 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 | ng.Network-Summary.(type-3).LSAs |
106520 | 20 69 6e 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 75 62 20 61 72 65 61 2e 20 4f | .into.the.specified.stub.area..O |
106540 | 6e 6c 79 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 69 73 20 61 6c 6c | nly.default.summary.route.is.all |
106560 | 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | owed..This.command.specifies.the |
106580 | 20 62 61 73 65 20 72 65 63 65 69 76 65 20 63 6f 73 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 | .base.receive.cost.for.this.inte |
1065a0 | 72 66 61 63 65 2e 20 46 6f 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2c 20 | rface..For.wireless.interfaces,. |
1065c0 | 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 65 72 20 75 73 65 64 | it.specifies.the.multiplier.used |
1065e0 | 20 66 6f 72 20 63 6f 6d 70 75 74 69 6e 67 20 74 68 65 20 45 54 58 20 72 65 63 65 70 74 69 6f 6e | .for.computing.the.ETX.reception |
106600 | 20 63 6f 73 74 20 28 64 65 66 61 75 6c 74 20 32 35 36 29 3b 20 66 6f 72 20 77 69 72 65 64 20 69 | .cost.(default.256);.for.wired.i |
106620 | 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6f 73 74 | nterfaces,.it.specifies.the.cost |
106640 | 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 6e 65 69 67 | .that.will.be.advertised.to.neig |
106660 | 68 62 6f 75 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | hbours..This.command.specifies.t |
106680 | 68 65 20 64 65 63 61 79 20 66 61 63 74 6f 72 20 66 6f 72 20 74 68 65 20 65 78 70 6f 6e 65 6e 74 | he.decay.factor.for.the.exponent |
1066a0 | 69 61 6c 20 6d 6f 76 69 6e 67 20 61 76 65 72 61 67 65 20 6f 66 20 52 54 54 20 73 61 6d 70 6c 65 | ial.moving.average.of.RTT.sample |
1066c0 | 73 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 2e 20 48 69 67 68 65 72 20 76 61 6c | s,.in.units.of.1/256..Higher.val |
1066e0 | 75 65 73 20 64 69 73 63 61 72 64 20 6f 6c 64 20 73 61 6d 70 6c 65 73 20 66 61 73 74 65 72 2e 20 | ues.discard.old.samples.faster.. |
106700 | 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | The.default.is.42..This.command. |
106720 | 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6c 6f 63 61 6c 20 70 72 65 66 | specifies.the.default.local.pref |
106740 | 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e | erence.value..The.local.preferen |
106760 | 63 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 | ce.range.is.0.to.4294967295..Thi |
106780 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 | s.command.specifies.the.default. |
1067a0 | 6d 65 74 72 69 63 20 76 61 6c 75 65 20 6f 66 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f | metric.value.of.redistributed.ro |
1067c0 | 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 | utes..The.metric.range.is.0.to.1 |
1067e0 | 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | 6777214..This.command.specifies. |
106800 | 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 70 | the.garbage-collection.timer..Up |
106820 | 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c | on.expiration.of.the.garbage-col |
106840 | 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 66 69 6e 61 | lection.timer,.the.route.is.fina |
106860 | 6c 6c 79 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 | lly.removed.from.the.routing.tab |
106880 | 6c 65 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 | le..The.time.range.is.5.to.21474 |
1068a0 | 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 32 30 20 | 83647..The.default.value.is.120. |
1068c0 | 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | seconds..This.command.specifies. |
1068e0 | 74 68 65 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 61 73 20 72 6f 75 74 65 20 72 65 66 6c | the.given.neighbor.as.route.refl |
106900 | 65 63 74 6f 72 20 63 6c 69 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | ector.client..This.command.speci |
106920 | 66 69 65 73 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 69 6d 65 2c 20 69 6e 20 73 65 63 6f | fies.the.length.of.time,.in.seco |
106940 | 6e 64 73 2c 20 62 65 66 6f 72 65 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 73 | nds,.before.the.routing.device.s |
106960 | 65 6e 64 73 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e | ends.hello.packets.out.of.the.in |
106980 | 74 65 72 66 61 63 65 20 62 65 66 6f 72 65 20 69 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 64 | terface.before.it.establishes.ad |
1069a0 | 6a 61 63 65 6e 63 79 20 77 69 74 68 20 61 20 6e 65 69 67 68 62 6f 72 2e 20 54 68 65 20 72 61 6e | jacency.with.a.neighbor..The.ran |
1069c0 | 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 | ge.is.1.to.65535.seconds..The.de |
1069e0 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 | fault.value.is.60.seconds..This. |
106a00 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 52 54 | command.specifies.the.maximum.RT |
106a20 | 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 61 62 6f 76 65 20 77 68 69 63 68 20 | T,.in.milliseconds,.above.which. |
106a40 | 77 65 20 64 6f 6e 27 74 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 | we.don't.increase.the.cost.to.a. |
106a60 | 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 20 6d 73 | neighbour..The.default.is.120.ms |
106a80 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 | ..This.command.specifies.the.max |
106aa0 | 69 6d 75 6d 20 63 6f 73 74 20 61 64 64 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 20 62 | imum.cost.added.to.a.neighbour.b |
106ac0 | 65 63 61 75 73 65 20 6f 66 20 52 54 54 2c 20 69 2e 65 2e 20 77 68 65 6e 20 74 68 65 20 52 54 54 | ecause.of.RTT,.i.e..when.the.RTT |
106ae0 | 20 69 73 20 68 69 67 68 65 72 20 6f 72 20 65 71 75 61 6c 20 74 68 61 6e 20 72 74 74 2d 6d 61 78 | .is.higher.or.equal.than.rtt-max |
106b00 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 35 30 2e 20 53 65 74 74 69 6e 67 20 69 74 | ..The.default.is.150..Setting.it |
106b20 | 20 74 6f 20 30 20 65 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 75 | .to.0.effectively.disables.the.u |
106b40 | 73 65 20 6f 66 20 61 20 52 54 54 2d 62 61 73 65 64 20 63 6f 73 74 2e 00 54 68 69 73 20 63 6f 6d | se.of.a.RTT-based.cost..This.com |
106b60 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 52 54 54 2c 20 | mand.specifies.the.minimum.RTT,. |
106b80 | 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 77 | in.milliseconds,.starting.from.w |
106ba0 | 68 69 63 68 20 77 65 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e | hich.we.increase.the.cost.to.a.n |
106bc0 | 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 6f 73 74 20 69 73 | eighbour..The.additional.cost.is |
106be0 | 20 6c 69 6e 65 61 72 20 69 6e 20 28 72 74 74 20 2d 20 72 74 74 2d 6d 69 6e 29 2e 20 54 68 65 20 | .linear.in.(rtt.-.rtt-min)..The. |
106c00 | 64 65 66 61 75 6c 74 20 69 73 20 31 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | default.is.10.ms..This.command.s |
106c20 | 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 6f 75 74 65 20 61 64 76 65 72 | pecifies.the.minimum.route.adver |
106c40 | 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e 20 | tisement.interval.for.the.peer.. |
106c60 | 54 68 65 20 69 6e 74 65 72 76 61 6c 20 76 61 6c 75 65 20 69 73 20 30 20 74 6f 20 36 30 30 20 73 | The.interval.value.is.0.to.600.s |
106c80 | 65 63 6f 6e 64 73 2c 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 64 76 65 72 74 69 | econds,.with.the.default.adverti |
106ca0 | 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 62 65 69 6e 67 20 30 2e 00 54 68 69 73 20 63 6f | sement.interval.being.0..This.co |
106cc0 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 72 69 6f 72 | mmand.specifies.the.router.prior |
106ce0 | 69 74 79 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6e 6f 6e 62 72 6f 61 64 63 61 73 74 20 6e 65 | ity.value.of.the.nonbroadcast.ne |
106d00 | 69 67 68 62 6f 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 49 50 20 61 64 | ighbor.associated.with.the.IP.ad |
106d20 | 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 | dress.specified..The.default.is. |
106d40 | 30 2e 20 54 68 69 73 20 6b 65 79 77 6f 72 64 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 | 0..This.keyword.does.not.apply.t |
106d60 | 6f 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 69 6e 74 65 72 66 61 63 65 73 | o.point-to-multipoint.interfaces |
106d80 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 | ..This.command.specifies.the.rou |
106da0 | 74 65 72 2d 49 44 2e 20 49 66 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 6e 6f 74 20 73 70 65 63 | ter-ID..If.router.ID.is.not.spec |
106dc0 | 69 66 69 65 64 20 69 74 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 69 67 68 65 73 74 20 69 6e | ified.it.will.use.the.highest.in |
106de0 | 74 65 72 66 61 63 65 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | terface.IP.address..This.command |
106e00 | 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 63 6f 6e 73 74 61 6e 74 2c 20 69 6e | .specifies.the.time.constant,.in |
106e20 | 20 73 65 63 6f 6e 64 73 2c 20 6f 66 20 74 68 65 20 73 6d 6f 6f 74 68 69 6e 67 20 61 6c 67 6f 72 | .seconds,.of.the.smoothing.algor |
106e40 | 69 74 68 6d 20 75 73 65 64 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 68 79 73 74 65 | ithm.used.for.implementing.hyste |
106e60 | 72 65 73 69 73 2e 20 4c 61 72 67 65 72 20 76 61 6c 75 65 73 20 72 65 64 75 63 65 20 72 6f 75 74 | resis..Larger.values.reduce.rout |
106e80 | 65 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 20 76 65 72 | e.oscillation.at.the.cost.of.ver |
106ea0 | 79 20 73 6c 69 67 68 74 6c 79 20 69 6e 63 72 65 61 73 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 | y.slightly.increasing.convergenc |
106ec0 | 65 20 74 69 6d 65 2e 20 54 68 65 20 76 61 6c 75 65 20 30 20 64 69 73 61 62 6c 65 73 20 68 79 73 | e.time..The.value.0.disables.hys |
106ee0 | 74 65 72 65 73 69 73 2c 20 61 6e 64 20 69 73 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 77 69 72 | teresis,.and.is.suitable.for.wir |
106f00 | 65 64 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 20 73 2e | ed.networks..The.default.is.4.s. |
106f20 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 | .This.command.specifies.the.time |
106f40 | 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 6e 20 | .in.milliseconds.after.which.an. |
106f60 | 27 69 6d 70 6f 72 74 61 6e 74 27 20 72 65 71 75 65 73 74 20 6f 72 20 75 70 64 61 74 65 20 77 69 | 'important'.request.or.update.wi |
106f80 | 6c 6c 20 62 65 20 72 65 73 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 | ll.be.resent..The.default.is.200 |
106fa0 | 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | 0.ms..This.command.specifies.the |
106fc0 | 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 | .time.in.milliseconds.between.tw |
106fe0 | 6f 20 73 63 68 65 64 75 6c 65 64 20 68 65 6c 6c 6f 73 2e 20 4f 6e 20 77 69 72 65 64 20 6c 69 6e | o.scheduled.hellos..On.wired.lin |
107000 | 6b 73 2c 20 42 61 62 65 6c 20 6e 6f 74 69 63 65 73 20 61 20 6c 69 6e 6b 20 66 61 69 6c 75 72 65 | ks,.Babel.notices.a.link.failure |
107020 | 20 77 69 74 68 69 6e 20 74 77 6f 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 73 3b 20 6f 6e 20 | .within.two.hello.intervals;.on. |
107040 | 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 74 68 65 20 6c 69 6e 6b 20 71 75 61 6c 69 74 79 | wireless.links,.the.link.quality |
107060 | 20 76 61 6c 75 65 20 69 73 20 72 65 65 73 74 69 6d 61 74 65 64 20 61 74 20 65 76 65 72 79 20 68 | .value.is.reestimated.at.every.h |
107080 | 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 30 | ello.interval..The.default.is.40 |
1070a0 | 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | 00.ms..This.command.specifies.th |
1070c0 | 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 | e.time.in.milliseconds.between.t |
1070e0 | 77 6f 20 73 63 68 65 64 75 6c 65 64 20 75 70 64 61 74 65 73 2e 20 53 69 6e 63 65 20 42 61 62 65 | wo.scheduled.updates..Since.Babe |
107100 | 6c 20 6d 61 6b 65 73 20 65 78 74 65 6e 73 69 76 65 20 75 73 65 20 6f 66 20 74 72 69 67 67 65 72 | l.makes.extensive.use.of.trigger |
107120 | 65 64 20 75 70 64 61 74 65 73 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 66 | ed.updates,.this.can.be.set.to.f |
107140 | 61 69 72 6c 79 20 68 69 67 68 20 76 61 6c 75 65 73 20 6f 6e 20 6c 69 6e 6b 73 20 77 69 74 68 20 | airly.high.values.on.links.with. |
107160 | 6c 69 74 74 6c 65 20 70 61 63 6b 65 74 20 6c 6f 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | little.packet.loss..The.default. |
107180 | 69 73 20 32 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | is.20000.ms..This.command.specif |
1071a0 | 69 65 73 20 74 68 65 20 74 69 6d 65 6f 75 74 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 | ies.the.timeout.timer..Upon.expi |
1071c0 | 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 | ration.of.the.timeout,.the.route |
1071e0 | 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 76 61 6c 69 64 3b 20 68 6f 77 65 76 65 72 2c 20 69 74 | .is.no.longer.valid;.however,.it |
107200 | 20 69 73 20 72 65 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | .is.retained.in.the.routing.tabl |
107220 | 65 20 66 6f 72 20 61 20 73 68 6f 72 74 20 74 69 6d 65 20 73 6f 20 74 68 61 74 20 6e 65 69 67 68 | e.for.a.short.time.so.that.neigh |
107240 | 62 6f 72 73 20 63 61 6e 20 62 65 20 6e 6f 74 69 66 69 65 64 20 74 68 61 74 20 74 68 65 20 72 6f | bors.can.be.notified.that.the.ro |
107260 | 75 74 65 20 68 61 73 20 62 65 65 6e 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 74 69 6d 65 20 72 | ute.has.been.dropped..The.time.r |
107280 | 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 | ange.is.5.to.2147483647..The.def |
1072a0 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 | ault.value.is.180.seconds..This. |
1072c0 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 75 70 64 61 74 65 20 74 69 6d | command.specifies.the.update.tim |
1072e0 | 65 72 2e 20 45 76 65 72 79 20 75 70 64 61 74 65 20 74 69 6d 65 72 20 73 65 63 6f 6e 64 73 2c 20 | er..Every.update.timer.seconds,. |
107300 | 74 68 65 20 52 49 50 20 70 72 6f 63 65 73 73 20 69 73 20 61 77 61 6b 65 6e 65 64 20 74 6f 20 73 | the.RIP.process.is.awakened.to.s |
107320 | 65 6e 64 20 61 6e 20 75 6e 73 6f 6c 69 63 69 74 65 64 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 | end.an.unsolicited.response.mess |
107340 | 61 67 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 | age.containing.the.complete.rout |
107360 | 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 52 49 50 | ing.table.to.all.neighboring.RIP |
107380 | 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f | .routers..The.time.range.is.5.to |
1073a0 | 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | .2147483647..The.default.value.i |
1073c0 | 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | s.30.seconds..This.command.speci |
1073e0 | 66 69 65 73 20 77 68 65 74 68 65 72 20 74 6f 20 70 65 72 66 6f 72 6d 20 73 70 6c 69 74 2d 68 6f | fies.whether.to.perform.split-ho |
107400 | 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 53 70 65 63 69 66 79 69 | rizon.on.the.interface..Specifyi |
107420 | 6e 67 20 6e 6f 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6c 77 | ng.no.babel.split-horizon.is.alw |
107440 | 61 79 73 20 63 6f 72 72 65 63 74 2c 20 77 68 69 6c 65 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 | ays.correct,.while.babel.split-h |
107460 | 6f 72 69 7a 6f 6e 20 69 73 20 61 6e 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 20 74 68 61 74 20 73 | orizon.is.an.optimisation.that.s |
107480 | 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 73 79 6d 6d 65 74 72 69 63 20 | hould.only.be.used.on.symmetric. |
1074a0 | 61 6e 64 20 74 72 61 6e 73 69 74 69 76 65 20 28 77 69 72 65 64 29 20 6e 65 74 77 6f 72 6b 73 2e | and.transitive.(wired).networks. |
1074c0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 61 74 20 4f 53 50 46 20 | .This.command.specify.that.OSPF. |
1074e0 | 70 61 63 6b 65 74 73 20 6d 75 73 74 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 69 | packets.must.be.authenticated.wi |
107500 | 74 68 20 4d 44 35 20 48 4d 41 43 73 20 77 69 74 68 69 6e 20 74 68 65 20 67 69 76 65 6e 20 61 72 | th.MD5.HMACs.within.the.given.ar |
107520 | 65 61 2e 20 4b 65 79 69 6e 67 20 6d 61 74 65 72 69 61 6c 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 | ea..Keying.material.must.also.be |
107540 | 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 | .configured.on.a.per-interface.b |
107560 | 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 73 20 74 68 61 74 | asis..This.command.specifys.that |
107580 | 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 | .MD5.HMAC.authentication.must.be |
1075a0 | 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 73 65 74 73 | .used.on.this.interface..It.sets |
1075c0 | 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 63 72 | .OSPF.authentication.key.to.a.cr |
1075e0 | 79 70 74 6f 67 72 61 70 68 69 63 20 70 61 73 73 77 6f 72 64 2e 20 4b 65 79 2d 69 64 20 69 64 65 | yptographic.password..Key-id.ide |
107600 | 6e 74 69 66 69 65 73 20 73 65 63 72 65 74 20 6b 65 79 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 | ntifies.secret.key.used.to.creat |
107620 | 65 20 74 68 65 20 6d 65 73 73 61 67 65 20 64 69 67 65 73 74 2e 20 54 68 69 73 20 49 44 20 69 73 | e.the.message.digest..This.ID.is |
107640 | 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6d 75 73 74 20 62 | .part.of.the.protocol.and.must.b |
107660 | 65 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 | e.consistent.across.routers.on.a |
107680 | 20 6c 69 6e 6b 2e 20 54 68 65 20 6b 65 79 20 63 61 6e 20 62 65 20 6c 6f 6e 67 20 75 70 20 74 6f | .link..The.key.can.be.long.up.to |
1076a0 | 20 31 36 20 63 68 61 72 73 20 28 6c 61 72 67 65 72 20 73 74 72 69 6e 67 73 20 77 69 6c 6c 20 62 | .16.chars.(larger.strings.will.b |
1076c0 | 65 20 74 72 75 6e 63 61 74 65 64 29 2c 20 61 6e 64 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 | e.truncated),.and.is.associated. |
1076e0 | 77 69 74 68 20 74 68 65 20 67 69 76 65 6e 20 6b 65 79 2d 69 64 2e 00 54 68 69 73 20 63 6f 6d 6d | with.the.given.key-id..This.comm |
107700 | 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 | and.summarizes.intra.area.paths. |
107720 | 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 54 79 70 | from.specified.area.into.one.Typ |
107740 | 65 2d 33 20 49 6e 74 65 72 2d 41 72 65 61 20 50 72 65 66 69 78 20 4c 53 41 20 61 6e 6e 6f 75 6e | e-3.Inter-Area.Prefix.LSA.announ |
107760 | 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ced.to.other.areas..This.command |
107780 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 2e 00 54 68 69 73 20 63 | .can.be.used.only.in.ABR..This.c |
1077a0 | 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 | ommand.summarizes.intra.area.pat |
1077c0 | 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 | hs.from.specified.area.into.one. |
1077e0 | 73 75 6d 6d 61 72 79 2d 4c 53 41 20 28 54 79 70 65 2d 33 29 20 61 6e 6e 6f 75 6e 63 65 64 20 74 | summary-LSA.(Type-3).announced.t |
107800 | 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 | o.other.areas..This.command.can. |
107820 | 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 20 61 6e 64 20 4f 4e 4c 59 20 72 6f 75 | be.used.only.in.ABR.and.ONLY.rou |
107840 | 74 65 72 2d 4c 53 41 73 20 28 54 79 70 65 2d 31 29 20 61 6e 64 20 6e 65 74 77 6f 72 6b 2d 4c 53 | ter-LSAs.(Type-1).and.network-LS |
107860 | 41 73 20 28 54 79 70 65 2d 32 29 20 28 69 2e 65 2e 20 4c 53 41 73 20 77 69 74 68 20 73 63 6f 70 | As.(Type-2).(i.e..LSAs.with.scop |
107880 | 65 20 61 72 65 61 29 20 63 61 6e 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 2e 20 41 53 2d 65 78 | e.area).can.be.summarized..AS-ex |
1078a0 | 74 65 72 6e 61 6c 2d 4c 53 41 73 20 28 54 79 70 65 2d 35 29 20 63 61 6e e2 80 99 74 20 62 65 20 | ternal-LSAs.(Type-5).can...t.be. |
1078c0 | 73 75 6d 6d 61 72 69 7a 65 64 20 2d 20 74 68 65 69 72 20 73 63 6f 70 65 20 69 73 20 41 53 2e 20 | summarized.-.their.scope.is.AS.. |
1078e0 | 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 63 | The.optional.argument.:cfgcmd:`c |
107900 | 6f 73 74 60 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 67 67 72 65 67 61 74 65 64 20 6c 69 | ost`.specifies.the.aggregated.li |
107920 | 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 | nk.metric..The.metric.range.is.0 |
107940 | 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e | .to.16777215..This.command.to.en |
107960 | 73 75 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 73 75 6d 6d 61 72 79 20 6c | sure.not.advertise.the.summary.l |
107980 | 73 61 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 | sa.for.the.matched.external.LSAs |
1079a0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 6f 20 63 6c 65 61 72 20 42 47 50 | ..This.command.uses.to.clear.BGP |
1079c0 | 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 | .route.dampening.information.and |
1079e0 | 20 74 6f 20 75 6e 73 75 70 70 72 65 73 73 20 73 75 70 70 72 65 73 73 65 64 20 72 6f 75 74 65 73 | .to.unsuppress.suppressed.routes |
107a00 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e | ..This.command.was.introduced.in |
107a20 | 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 | .VyOS.1.4.-.it.was.previously.ca |
107a40 | 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 | lled:.``set.firewall.options.int |
107a60 | 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 20 3c 76 61 6c 75 65 3e | erface.<name>.adjust-mss.<value> |
107a80 | 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 | ``.This.command.was.introduced.i |
107aa0 | 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 | n.VyOS.1.4.-.it.was.previously.c |
107ac0 | 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e | alled:.``set.firewall.options.in |
107ae0 | 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 36 20 3c 76 61 6c 75 | terface.<name>.adjust-mss6.<valu |
107b00 | 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 | e>``.This.command.will.change.th |
107b20 | 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 | e.hold.down.value.for.IGP-LDP.sy |
107b40 | 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 | nchronization.during.convergence |
107b60 | 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2c 20 62 75 74 20 66 6f 72 20 | /interface.flap.events,.but.for. |
107b80 | 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | this.interface.only..This.comman |
107ba0 | 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 | d.will.change.the.hold.down.valu |
107bc0 | 65 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 | e.globally.for.IGP-LDP.synchroni |
107be0 | 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 | zation.during.convergence/interf |
107c00 | 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 | ace.flap.events..This.command.wi |
107c20 | 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 74 69 65 2d 62 72 65 61 6b 65 72 20 66 6f 72 20 6d | ll.configure.a.tie-breaker.for.m |
107c40 | 75 6c 74 69 70 6c 65 20 6c 6f 63 61 6c 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 20 54 68 65 20 6c | ultiple.local.LFA.backups..The.l |
107c60 | 6f 77 65 72 20 69 6e 64 65 78 20 6e 75 6d 62 65 72 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 63 65 | ower.index.numbers.will.be.proce |
107c80 | 73 73 65 64 20 66 69 72 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e | ssed.first..This.command.will.en |
107ca0 | 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f | able.IGP-LDP.synchronization.glo |
107cc0 | 62 61 6c 6c 79 20 66 6f 72 20 49 53 49 53 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f | bally.for.ISIS..This.requires.fo |
107ce0 | 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 | r.LDP.to.be.functional..This.is. |
107d00 | 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 | described.in.:rfc:`5443`..By.def |
107d20 | 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 | ault.all.interfaces.operational. |
107d40 | 69 6e 20 49 53 2d 49 53 20 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f | in.IS-IS.are.enabled.for.synchro |
107d60 | 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 | nization..Loopbacks.are.exempt.. |
107d80 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 | This.command.will.enable.IGP-LDP |
107da0 | 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 4f 53 | .synchronization.globally.for.OS |
107dc0 | 50 46 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 | PF..This.requires.for.LDP.to.be. |
107de0 | 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e | functional..This.is.described.in |
107e00 | 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 | .:rfc:`5443`..By.default.all.int |
107e20 | 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 4f 53 50 46 20 61 72 65 20 | erfaces.operational.in.OSPF.are. |
107e40 | 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f | enabled.for.synchronization..Loo |
107e60 | 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | pbacks.are.exempt..This.command. |
107e80 | 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e | will.generate.a.default-route.in |
107ea0 | 20 4c 31 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 | .L1.database..This.command.will. |
107ec0 | 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 32 20 64 | generate.a.default-route.in.L2.d |
107ee0 | 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 | atabase..This.command.will.give. |
107f00 | 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c | an.overview.of.a.rule.in.a.singl |
107f20 | 65 20 72 75 6c 65 2d 73 65 74 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 | e.rule-set.This.command.will.giv |
107f40 | 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e | e.an.overview.of.a.rule.in.a.sin |
107f60 | 67 6c 65 20 72 75 6c 65 2d 73 65 74 2c 20 70 6c 75 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 | gle.rule-set,.plus.information.f |
107f80 | 6f 72 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | or.default.action..This.command. |
107fa0 | 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 | will.give.an.overview.of.a.rule. |
107fc0 | 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | in.a.single.rule-set..This.comma |
107fe0 | 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 69 | nd.will.give.an.overview.of.a.si |
108000 | 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c | ngle.rule-set..This.command.will |
108020 | 20 6c 69 6d 69 74 20 4c 46 41 20 62 61 63 6b 75 70 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 75 70 | .limit.LFA.backup.computation.up |
108040 | 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 70 72 69 6f 72 69 74 | .to.the.specified.prefix.priorit |
108060 | 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 74 68 65 20 | y..This.command.would.allow.the. |
108080 | 64 79 6e 61 6d 69 63 20 75 70 64 61 74 65 20 6f 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f | dynamic.update.of.capabilities.o |
1080a0 | 76 65 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 | ver.an.established.BGP.session.. |
1080c0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 63 72 65 61 74 65 73 20 61 20 62 72 69 64 67 65 20 74 | This.commands.creates.a.bridge.t |
1080e0 | 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 62 69 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 | hat.is.used.to.bind.traffic.on.e |
108100 | 74 68 31 20 76 6c 61 6e 20 32 34 31 20 77 69 74 68 20 74 68 65 20 76 78 6c 61 6e 32 34 31 2d 69 | th1.vlan.241.with.the.vxlan241-i |
108120 | 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 | nterface..The.IP.address.is.not. |
108140 | 72 65 71 75 69 72 65 64 2e 20 49 74 20 6d 61 79 20 68 6f 77 65 76 65 72 20 62 65 20 75 73 65 64 | required..It.may.however.be.used |
108160 | 20 61 73 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 66 6f 72 20 65 61 63 68 20 4c | .as.a.default.gateway.for.each.L |
108180 | 65 61 66 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 64 65 76 69 63 65 73 20 6f 6e 20 74 68 65 20 | eaf.which.allows.devices.on.the. |
1081a0 | 76 6c 61 6e 20 74 6f 20 72 65 61 63 68 20 6f 74 68 65 72 20 73 75 62 6e 65 74 73 2e 20 54 68 69 | vlan.to.reach.other.subnets..Thi |
1081c0 | 73 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 68 65 20 73 75 62 6e 65 74 73 20 61 72 65 20 | s.requires.that.the.subnets.are. |
1081e0 | 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 4f 53 50 46 20 73 6f 20 74 68 61 74 20 74 68 | redistributed.by.OSPF.so.that.th |
108200 | 65 20 53 70 69 6e 65 20 77 69 6c 6c 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 72 65 61 63 68 20 | e.Spine.will.learn.how.to.reach. |
108220 | 69 74 2e 20 54 6f 20 64 6f 20 74 68 69 73 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 | it..To.do.this.you.need.to.chang |
108240 | 65 20 74 68 65 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 27 31 30 2e 30 2e 30 2e | e.the.OSPF.network.from.'10.0.0. |
108260 | 30 2f 38 27 20 74 6f 20 27 30 2e 30 2e 30 2e 30 2f 30 27 20 74 6f 20 61 6c 6c 6f 77 20 31 37 32 | 0/8'.to.'0.0.0.0/0'.to.allow.172 |
108280 | 2e 31 36 2f 31 32 2d 6e 65 74 77 6f 72 6b 73 20 74 6f 20 62 65 20 61 64 76 65 72 74 69 73 65 64 | .16/12-networks.to.be.advertised |
1082a0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 46 69 | ..This.commands.specifies.the.Fi |
1082c0 | 6e 69 74 65 20 53 74 61 74 65 20 4d 61 63 68 69 6e 65 20 28 46 53 4d 29 20 69 6e 74 65 6e 64 65 | nite.State.Machine.(FSM).intende |
1082e0 | 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 74 69 6d 69 6e 67 20 6f 66 20 74 68 65 20 65 | d.to.control.the.timing.of.the.e |
108300 | 78 65 63 75 74 69 6f 6e 20 6f 66 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 | xecution.of.SPF.calculations.in. |
108320 | 72 65 73 70 6f 6e 73 65 20 74 6f 20 49 47 50 20 65 76 65 6e 74 73 2e 20 54 68 65 20 70 72 6f 63 | response.to.IGP.events..The.proc |
108340 | 65 73 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 34 30 35 60 2e 00 54 68 | ess.described.in.:rfc:`8405`..Th |
108360 | 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 74 68 65 20 54 43 50 | is.configuration.enables.the.TCP |
108380 | 20 72 65 76 65 72 73 65 20 70 72 6f 78 79 20 66 6f 72 20 74 68 65 20 22 6d 79 2d 74 63 70 2d 61 | .reverse.proxy.for.the."my-tcp-a |
1083a0 | 70 69 22 20 73 65 72 76 69 63 65 2e 20 49 6e 63 6f 6d 69 6e 67 20 54 43 50 20 63 6f 6e 6e 65 63 | pi".service..Incoming.TCP.connec |
1083c0 | 74 69 6f 6e 73 20 6f 6e 20 70 6f 72 74 20 38 38 38 38 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 20 | tions.on.port.8888.will.be.load. |
1083e0 | 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 | balanced.across.the.backend.serv |
108400 | 65 72 73 20 28 73 72 76 30 31 20 61 6e 64 20 73 72 76 30 32 29 20 75 73 69 6e 67 20 74 68 65 20 | ers.(srv01.and.srv02).using.the. |
108420 | 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 | round-robin.load-balancing.algor |
108440 | 69 74 68 6d 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 73 74 65 6e 20 | ithm..This.configuration.listen. |
108460 | 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 | on.port.80.and.redirect.incoming |
108480 | 20 72 65 71 75 65 73 74 73 20 74 6f 20 48 54 54 50 53 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 | .requests.to.HTTPS:.This.configu |
1084a0 | 72 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 | ration.modifies.the.behavior.of. |
1084c0 | 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 49 66 20 79 6f 75 20 68 61 | the.network.statement..If.you.ha |
1084e0 | 76 65 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e | ve.this.configured.the.underlyin |
108500 | 67 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 72 6f 75 74 | g.network.must.exist.in.the.rout |
108520 | 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 | ing.table..This.configuration.pa |
108540 | 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 6d 75 73 74 20 62 65 20 | rameter.is.required.and.must.be. |
108560 | 75 6e 69 71 75 65 20 74 6f 20 65 61 63 68 20 73 75 62 6e 65 74 2e 20 49 74 20 69 73 20 72 65 71 | unique.to.each.subnet..It.is.req |
108580 | 75 69 72 65 64 20 74 6f 20 6d 61 70 20 73 75 62 6e 65 74 73 20 74 6f 20 6c 65 61 73 65 20 66 69 | uired.to.map.subnets.to.lease.fi |
1085a0 | 6c 65 20 65 6e 74 72 69 65 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 | le.entries..This.configuration.p |
1085c0 | 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f | arameter.lets.the.DHCP.server.to |
1085e0 | 20 6c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 74 | .listen.for.DHCP.requests.sent.t |
108600 | 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2c 20 69 74 20 69 73 20 6f | o.the.specified.address,.it.is.o |
108620 | 6e 6c 79 20 72 65 61 6c 69 73 74 69 63 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 61 20 73 | nly.realistically.useful.for.a.s |
108640 | 65 72 76 65 72 20 77 68 6f 73 65 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 20 61 72 65 20 72 65 61 | erver.whose.only.clients.are.rea |
108660 | 63 68 65 64 20 76 69 61 20 75 6e 69 63 61 73 74 73 2c 20 73 75 63 68 20 61 73 20 76 69 61 20 44 | ched.via.unicasts,.such.as.via.D |
108680 | 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 | HCP.relay.agents..This.could.be. |
1086a0 | 68 65 6c 70 66 75 6c 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 65 73 74 20 68 6f 77 20 | helpful.if.you.want.to.test.how. |
1086c0 | 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 68 61 76 65 73 20 75 6e 64 65 72 20 63 65 72 | an.application.behaves.under.cer |
1086e0 | 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 72 | tain.network.conditions..This.cr |
108700 | 65 61 74 65 73 20 61 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 20 63 61 6c 6c 65 64 20 46 49 4c 54 | eates.a.route.policy.called.FILT |
108720 | 45 52 2d 57 45 42 20 77 69 74 68 20 6f 6e 65 20 72 75 6c 65 20 74 6f 20 73 65 74 20 74 68 65 20 | ER-WEB.with.one.rule.to.set.the. |
108740 | 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 | routing.table.for.matching.traff |
108760 | 69 63 20 28 54 43 50 20 70 6f 72 74 20 38 30 29 20 74 6f 20 74 61 62 6c 65 20 49 44 20 31 30 30 | ic.(TCP.port.80).to.table.ID.100 |
108780 | 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 | .instead.of.the.default.routing. |
1087a0 | 74 61 62 6c 65 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 30 30 30 30 2e 00 54 | table..This.defaults.to.10000..T |
1087c0 | 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 38 31 32 2e 00 54 68 69 73 20 64 65 66 61 75 | his.defaults.to.1812..This.defau |
1087e0 | 6c 74 73 20 74 6f 20 32 30 30 37 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 | lts.to.2007..This.defaults.to.30 |
108800 | 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 30 20 73 | .seconds..This.defaults.to.300.s |
108820 | 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 34 39 2e 00 54 68 69 | econds..This.defaults.to.49..Thi |
108840 | 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 | s.defaults.to.5..This.defaults.t |
108860 | 6f 20 55 44 50 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 62 6f 74 68 20 31 2e 32 20 | o.UDP.This.defaults.to.both.1.2. |
108880 | 61 6e 64 20 31 2e 33 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 68 74 74 70 73 3a | and.1.3..This.defaults.to.https: |
1088a0 | 2f 2f 61 63 6d 65 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 | //acme-v02.api.letsencrypt.org/d |
1088c0 | 69 72 65 63 74 6f 72 79 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 70 68 79 30 2e 00 | irectory.This.defaults.to.phy0.. |
1088e0 | 54 68 69 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 64 72 69 76 65 72 20 63 61 70 61 62 | This.depends.on.the.driver.capab |
108900 | 69 6c 69 74 69 65 73 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 | ilities.and.may.not.be.available |
108920 | 20 77 69 74 68 20 61 6c 6c 20 64 72 69 76 65 72 73 2e 00 54 68 69 73 20 64 69 61 62 6c 65 20 74 | .with.all.drivers..This.diable.t |
108940 | 68 65 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 20 61 6e 64 20 64 69 72 65 63 74 6c 79 20 69 | he.external.cache.and.directly.i |
108960 | 6e 6a 65 63 74 73 20 74 68 65 20 66 6c 6f 77 2d 73 74 61 74 65 73 20 69 6e 74 6f 20 74 68 65 20 | njects.the.flow-states.into.the. |
108980 | 69 6e 2d 6b 65 72 6e 65 6c 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 54 72 61 63 6b 69 6e 67 20 53 79 | in-kernel.Connection.Tracking.Sy |
1089a0 | 73 74 65 6d 20 6f 66 20 74 68 65 20 62 61 63 6b 75 70 20 66 69 72 65 77 61 6c 6c 2e 00 54 68 69 | stem.of.the.backup.firewall..Thi |
1089c0 | 73 20 64 69 61 67 72 61 6d 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 74 68 65 20 65 | s.diagram.corresponds.with.the.e |
1089e0 | 78 61 6d 70 6c 65 20 73 69 74 65 20 74 6f 20 73 69 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | xample.site.to.site.configuratio |
108a00 | 6e 20 62 65 6c 6f 77 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 33 31 33 37 | n.below..This.enables.:rfc:`3137 |
108a20 | 60 20 73 75 70 70 6f 72 74 2c 20 77 68 65 72 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 | `.support,.where.the.OSPF.proces |
108a40 | 73 20 64 65 73 63 72 69 62 65 73 20 69 74 73 20 74 72 61 6e 73 69 74 20 6c 69 6e 6b 73 20 69 6e | s.describes.its.transit.links.in |
108a60 | 20 69 74 73 20 72 6f 75 74 65 72 2d 4c 53 41 20 61 73 20 68 61 76 69 6e 67 20 69 6e 66 69 6e 69 | .its.router-LSA.as.having.infini |
108a80 | 74 65 20 64 69 73 74 61 6e 63 65 20 73 6f 20 74 68 61 74 20 6f 74 68 65 72 20 72 6f 75 74 65 72 | te.distance.so.that.other.router |
108aa0 | 73 20 77 69 6c 6c 20 61 76 6f 69 64 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 72 61 6e 73 69 74 | s.will.avoid.calculating.transit |
108ac0 | 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 6c 65 20 | .paths.through.the.router.while. |
108ae0 | 73 74 69 6c 6c 20 62 65 69 6e 67 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 6e 65 74 77 6f 72 | still.being.able.to.reach.networ |
108b00 | 6b 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 65 6e 61 62 | ks.through.the.router..This.enab |
108b20 | 6c 65 73 20 74 68 65 20 67 72 65 65 6e 66 69 65 6c 64 20 6f 70 74 69 6f 6e 20 77 68 69 63 68 20 | les.the.greenfield.option.which. |
108b40 | 73 65 74 73 20 74 68 65 20 60 60 5b 47 46 5d 60 60 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 65 73 | sets.the.``[GF]``.option.This.es |
108b60 | 74 61 62 6c 69 73 68 65 73 20 6f 75 72 20 50 6f 72 74 20 46 6f 72 77 61 72 64 20 72 75 6c 65 2c | tablishes.our.Port.Forward.rule, |
108b80 | 20 62 75 74 20 69 66 20 77 65 20 63 72 65 61 74 65 64 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f | .but.if.we.created.a.firewall.po |
108ba0 | 6c 69 63 79 20 69 74 20 77 69 6c 6c 20 6c 69 6b 65 6c 79 20 62 6c 6f 63 6b 20 74 68 65 20 74 72 | licy.it.will.likely.block.the.tr |
108bc0 | 61 66 66 69 63 2e 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f | affic..This.example.shows.how.to |
108be0 | 20 74 61 72 67 65 74 20 61 6e 20 4d 53 53 20 63 6c 61 6d 70 20 28 69 6e 20 6f 75 72 20 65 78 61 | .target.an.MSS.clamp.(in.our.exa |
108c00 | 6d 70 6c 65 20 74 6f 20 31 33 36 30 20 62 79 74 65 73 29 20 74 6f 20 61 20 73 70 65 63 69 66 69 | mple.to.1360.bytes).to.a.specifi |
108c20 | 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 2e 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 75 | c.destination.IP..This.example.u |
108c40 | 73 65 73 20 43 41 43 65 72 74 20 61 73 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 | ses.CACert.as.certificate.author |
108c60 | 69 74 79 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 63 6c 6f 73 65 6c 79 20 77 6f 72 6b 73 20 | ity..This.feature.closely.works. |
108c80 | 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 70 6b 69 60 20 73 75 62 73 79 73 74 | together.with.:ref:`pki`.subsyst |
108ca0 | 65 6d 20 61 73 20 79 6f 75 20 72 65 71 75 69 72 65 64 20 61 20 78 35 30 39 20 63 65 72 74 69 66 | em.as.you.required.a.x509.certif |
108cc0 | 69 63 61 74 65 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 65 72 76 65 73 20 74 68 65 20 70 | icate..This.feature.serves.the.p |
108ce0 | 75 72 70 6f 73 65 20 6f 66 20 74 68 69 67 68 74 65 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 | urpose.of.thightening.the.packet |
108d00 | 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 61 76 6f 69 | .validation.requirements.to.avoi |
108d20 | 64 20 72 65 63 65 69 76 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 | d.receiving.BFD.control.packets. |
108d40 | 66 72 6f 6d 20 6f 74 68 65 72 20 73 65 73 73 69 6f 6e 73 2e 00 54 68 69 73 20 66 65 61 74 75 72 | from.other.sessions..This.featur |
108d60 | 65 20 73 75 6d 6d 61 72 69 73 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c | e.summarises.originated.external |
108d80 | 20 4c 53 41 73 20 28 54 79 70 65 2d 35 20 61 6e 64 20 54 79 70 65 2d 37 29 2e 20 53 75 6d 6d 61 | .LSAs.(Type-5.and.Type-7)..Summa |
108da0 | 72 79 20 52 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 6f 6e 2d 62 | ry.Route.will.be.originated.on-b |
108dc0 | 65 68 61 6c 66 20 6f 66 20 61 6c 6c 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 | ehalf.of.all.matched.external.LS |
108de0 | 41 73 2e 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 63 6f 6e 74 72 6f | As..This.functionality.is.contro |
108e00 | 6c 6c 65 64 20 62 79 20 61 64 64 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e | lled.by.adding.the.following.con |
108e20 | 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 62 | figuration:.This.functions.for.b |
108e40 | 6f 74 68 20 69 6e 64 69 76 69 64 75 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 61 64 64 | oth.individual.addresses.and.add |
108e60 | 72 65 73 73 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 49 47 50 2d 4c | ress.groups..This.gives.us.IGP-L |
108e80 | 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6e 6f 6e 2d 6c | DP.synchronization.for.all.non-l |
108ea0 | 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 68 6f 6c 64 64 6f | oopback.interfaces.with.a.holddo |
108ec0 | 77 6e 20 74 69 6d 65 72 20 6f 66 20 7a 65 72 6f 20 73 65 63 6f 6e 64 73 3a 00 54 68 69 73 20 67 | wn.timer.of.zero.seconds:.This.g |
108ee0 | 69 76 65 73 20 75 73 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 65 6e 61 | ives.us.MPLS.segment.routing.ena |
108f00 | 62 6c 65 64 20 61 6e 64 20 6c 61 62 65 6c 73 20 66 6f 72 20 66 61 72 20 65 6e 64 20 6c 6f 6f 70 | bled.and.labels.for.far.end.loop |
108f20 | 62 61 63 6b 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | backs:.This.gives.us.the.followi |
108f40 | 6e 67 20 6e 65 69 67 68 62 6f 72 73 68 69 70 73 2c 20 4c 65 76 65 6c 20 31 20 61 6e 64 20 4c 65 | ng.neighborships,.Level.1.and.Le |
108f60 | 76 65 6c 20 32 3a 00 54 68 69 73 20 69 6e 73 74 72 75 63 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 | vel.2:.This.instructs.opennhrp.t |
108f80 | 6f 20 72 65 70 6c 79 20 77 69 74 68 20 61 75 74 68 6f 72 61 74 69 76 65 20 61 6e 73 77 65 72 73 | o.reply.with.authorative.answers |
108fa0 | 20 6f 6e 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 64 65 73 | .on.NHRP.Resolution.Requests.des |
108fc0 | 74 69 6e 69 65 64 20 74 6f 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 69 73 20 69 6e 74 65 | tinied.to.addresses.in.this.inte |
108fe0 | 72 66 61 63 65 20 28 69 6e 73 74 65 61 64 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 | rface.(instead.of.forwarding.the |
109000 | 20 70 61 63 6b 65 74 73 29 2e 20 54 68 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6c 6c 6f | .packets)..This.effectively.allo |
109020 | 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 | ws.the.creation.of.shortcut.rout |
109040 | 65 73 20 74 6f 20 73 75 62 6e 65 74 73 20 6c 6f 63 61 74 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 | es.to.subnets.located.on.the.int |
109060 | 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 | erface..This.is.a.common.scenari |
109080 | 6f 20 77 68 65 72 65 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 | o.where.both.:ref:`source-nat`.a |
1090a0 | 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 61 72 65 20 63 6f | nd.:ref:`destination-nat`.are.co |
1090c0 | 6e 66 69 67 75 72 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 20 49 74 27 73 20 | nfigured.at.the.same.time..It's. |
1090e0 | 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 77 68 65 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 | commonly.used.when.internal.(pri |
109100 | 76 61 74 65 29 20 68 6f 73 74 73 20 6e 65 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 | vate).hosts.need.to.establish.a. |
109120 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 | connection.with.external.resourc |
109140 | 65 73 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 6e 65 65 64 20 74 6f 20 | es.and.external.systems.need.to. |
109160 | 61 63 63 65 73 73 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 72 65 73 6f 75 72 | access.internal.(private).resour |
109180 | 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 | ces..This.is.a.configuration.par |
1091a0 | 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 2c 20 73 61 79 69 6e | ameter.for.the.`<subnet>`,.sayin |
1091c0 | 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 | g.that.as.part.of.the.response,. |
1091e0 | 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 | tell.the.client.that.the.default |
109200 | 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 61 74 20 60 3c 61 64 64 | .gateway.can.be.reached.at.`<add |
109220 | 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ress>`..This.is.a.configuration. |
109240 | 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 2c 20 73 61 79 69 6e 67 | parameter.for.the.subnet,.saying |
109260 | 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 | .that.as.part.of.the.response,.t |
109280 | 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 | ell.the.client.that.the.DNS.serv |
1092a0 | 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 | er.can.be.found.at.`<address>`.. |
1092c0 | 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 | This.is.a.mandatory.command..Set |
1092e0 | 73 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 | s.regular.expression.to.match.ag |
109300 | 61 69 6e 73 74 20 6c 6f 67 20 73 74 72 69 6e 67 20 6d 65 73 73 61 67 65 2e 00 54 68 69 73 20 69 | ainst.log.string.message..This.i |
109320 | 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 74 68 65 20 | s.a.mandatory.command..Sets.the. |
109340 | 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 54 68 65 20 73 63 72 | full.path.to.the.script..The.scr |
109360 | 69 70 74 20 66 69 6c 65 20 6d 75 73 74 20 62 65 20 65 78 65 63 75 74 61 62 6c 65 2e 00 54 68 69 | ipt.file.must.be.executable..Thi |
109380 | 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 69 73 20 | s.is.a.mandatory.option.This.is. |
1093a0 | 61 20 6d 61 6e 64 61 74 6f 72 79 20 73 65 74 74 69 6e 67 2e 00 54 68 69 73 20 69 73 20 61 63 68 | a.mandatory.setting..This.is.ach |
1093c0 | 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 66 69 72 73 74 20 74 68 72 65 65 20 62 | ieved.by.using.the.first.three.b |
1093e0 | 69 74 73 20 6f 66 20 74 68 65 20 54 6f 53 20 28 54 79 70 65 20 6f 66 20 53 65 72 76 69 63 65 29 | its.of.the.ToS.(Type.of.Service) |
109400 | 20 66 69 65 6c 64 20 74 6f 20 63 61 74 65 67 6f 72 69 7a 65 20 64 61 74 61 20 73 74 72 65 61 6d | .field.to.categorize.data.stream |
109420 | 73 20 61 6e 64 2c 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 64 65 | s.and,.in.accordance.with.the.de |
109440 | 66 69 6e 65 64 20 70 72 65 63 65 64 65 6e 63 65 20 70 61 72 61 6d 65 74 65 72 73 2c 20 61 20 64 | fined.precedence.parameters,.a.d |
109460 | 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 2e 00 54 68 69 73 20 69 73 20 61 6c 73 6f 20 6b 6e | ecision.is.made..This.is.also.kn |
109480 | 6f 77 6e 20 61 73 20 74 68 65 20 48 55 42 73 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 | own.as.the.HUBs.IP.address.or.FQ |
1094a0 | 44 4e 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 | DN..This.is.an.optional.command. |
1094c0 | 62 65 63 61 75 73 65 20 74 68 65 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 77 69 6c 6c 20 62 | because.the.event.handler.will.b |
1094e0 | 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 64 20 61 66 74 65 72 20 61 6e | e.automatically.created.after.an |
109500 | 79 20 6f 66 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 54 68 69 73 20 69 73 20 | y.of.the.next.commands..This.is. |
109520 | 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 61 72 67 75 6d 65 | an.optional.command..Adds.argume |
109540 | 6e 74 73 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 41 72 67 75 6d 65 6e 74 73 20 6d 75 73 | nts.to.the.script..Arguments.mus |
109560 | 74 20 62 65 20 73 65 70 61 72 61 74 65 64 20 62 79 20 73 70 61 63 65 73 2e 00 54 68 69 73 20 69 | t.be.separated.by.spaces..This.i |
109580 | 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 65 6e 76 69 | s.an.optional.command..Adds.envi |
1095a0 | 72 6f 6e 6d 65 6e 74 20 61 6e 64 20 69 74 73 20 76 61 6c 75 65 20 74 6f 20 74 68 65 20 73 63 72 | ronment.and.its.value.to.the.scr |
1095c0 | 69 70 74 2e 20 55 73 65 20 73 65 70 61 72 61 74 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 65 | ipt..Use.separate.commands.for.e |
1095e0 | 61 63 68 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 | ach.environment..This.is.an.opti |
109600 | 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 46 69 6c 74 65 72 73 20 6c 6f 67 20 6d 65 73 73 61 67 | onal.command..Filters.log.messag |
109620 | 65 73 20 62 79 20 73 79 73 6c 6f 67 2d 69 64 65 6e 74 69 66 69 65 72 2e 00 54 68 69 73 20 69 73 | es.by.syslog-identifier..This.is |
109640 | 20 64 6f 6e 65 20 74 6f 20 73 75 70 70 6f 72 74 20 28 65 74 68 65 72 6e 65 74 29 20 73 77 69 74 | .done.to.support.(ethernet).swit |
109660 | 63 68 20 66 65 61 74 75 72 65 73 2c 20 6c 69 6b 65 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 77 | ch.features,.like.:rfc:`3069`,.w |
109680 | 68 65 72 65 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 70 6f 72 74 73 20 61 72 65 20 4e 4f | here.the.individual.ports.are.NO |
1096a0 | 54 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 | T.allowed.to.communicate.with.ea |
1096c0 | 63 68 20 6f 74 68 65 72 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 | ch.other,.but.they.are.allowed.t |
1096e0 | 6f 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 74 65 72 2e 20 41 | o.talk.to.the.upstream.router..A |
109700 | 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 69 74 20 69 | s.described.in.:rfc:`3069`,.it.i |
109720 | 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 68 6f 73 74 73 20 | s.possible.to.allow.these.hosts. |
109740 | 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 75 70 73 74 72 | to.communicate.through.the.upstr |
109760 | 65 61 6d 20 72 6f 75 74 65 72 20 62 79 20 70 72 6f 78 79 5f 61 72 70 27 69 6e 67 2e 00 54 68 69 | eam.router.by.proxy_arp'ing..Thi |
109780 | 73 20 69 73 20 65 73 70 65 63 69 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 74 68 65 20 75 | s.is.especially.useful.for.the.u |
1097a0 | 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 73 69 6e 63 65 20 74 68 65 20 73 6f 75 | pstream.interface,.since.the.sou |
1097c0 | 72 63 65 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 6f 66 74 | rce.for.multicast.traffic.is.oft |
1097e0 | 65 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 6c 6f 63 61 74 69 6f 6e 2e 00 54 68 69 73 20 | en.from.a.remote.location..This. |
109800 | 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 74 79 70 65 73 20 6f 66 20 | is.one.of.the.simplest.types.of. |
109820 | 74 75 6e 6e 65 6c 73 2c 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 3a 72 66 63 3a 60 32 30 30 | tunnels,.as.defined.by.:rfc:`200 |
109840 | 33 60 2e 20 49 74 20 74 61 6b 65 73 20 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 20 61 6e 64 20 | 3`..It.takes.an.IPv4.packet.and. |
109860 | 73 65 6e 64 73 20 69 74 20 61 73 20 61 20 70 61 79 6c 6f 61 64 20 6f 66 20 61 6e 6f 74 68 65 72 | sends.it.as.a.payload.of.another |
109880 | 20 49 50 76 34 20 70 61 63 6b 65 74 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 74 | .IPv4.packet..For.this.reason,.t |
1098a0 | 68 65 72 65 20 61 72 65 20 6e 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | here.are.no.other.configuration. |
1098c0 | 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 74 75 6e 6e 65 6c 2e | options.for.this.kind.of.tunnel. |
1098e0 | 00 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 54 68 69 73 20 69 73 20 73 69 6d 69 6c | .This.is.optional..This.is.simil |
109900 | 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 62 | ar.to.the.network.groups.part,.b |
109920 | 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 74 | ut.here.you.are.able.to.negate.t |
109940 | 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 69 73 20 69 73 20 74 | he.matching.addresses..This.is.t |
109960 | 68 65 20 49 50 76 36 20 63 6f 75 6e 74 65 72 70 61 72 74 20 6f 66 20 49 50 49 50 2e 20 49 27 6d | he.IPv6.counterpart.of.IPIP..I'm |
109980 | 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 61 6e 20 52 46 43 20 74 68 61 74 20 64 65 66 69 6e 65 | .not.aware.of.an.RFC.that.define |
1099a0 | 73 20 74 68 69 73 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 73 70 65 63 69 66 69 63 61 6c 6c | s.this.encapsulation.specificall |
1099c0 | 79 2c 20 62 75 74 20 69 74 27 73 20 61 20 6e 61 74 75 72 61 6c 20 73 70 65 63 69 66 69 63 20 63 | y,.but.it's.a.natural.specific.c |
1099e0 | 61 73 65 20 6f 66 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e | ase.of.IPv6.encapsulation.mechan |
109a00 | 69 73 6d 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 32 34 37 33 60 2e 00 54 68 | isms.described.in.:rfc:2473`..Th |
109a20 | 69 73 20 69 73 20 74 68 65 20 4c 41 4e 20 65 78 74 65 6e 73 69 6f 6e 20 75 73 65 20 63 61 73 65 | is.is.the.LAN.extension.use.case |
109a40 | 2e 20 54 68 65 20 65 74 68 30 20 70 6f 72 74 20 6f 66 20 74 68 65 20 64 69 73 74 61 6e 74 20 56 | ..The.eth0.port.of.the.distant.V |
109a60 | 50 4e 20 70 65 65 72 73 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 | PN.peers.will.be.directly.connec |
109a80 | 74 65 64 20 6c 69 6b 65 20 69 66 20 74 68 65 72 65 20 77 61 73 20 61 20 73 77 69 74 63 68 20 62 | ted.like.if.there.was.a.switch.b |
109aa0 | 65 74 77 65 65 6e 20 74 68 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 43 44 20 6d 6f 64 | etween.them..This.is.the.LCD.mod |
109ac0 | 65 6c 20 75 73 65 64 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 54 68 69 73 20 69 73 20 | el.used.in.your.system..This.is. |
109ae0 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 | the.configuration.parameter.for. |
109b00 | 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 | the.entire.shared.network.defini |
109b20 | 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 | tion..All.subnets.will.inherit.t |
109b40 | 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 | his.configuration.item.if.not.sp |
109b60 | 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 65 71 75 | ecified.locally..This.is.the.equ |
109b80 | 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 68 6f 73 74 20 62 6c 6f 63 6b 20 69 6e 20 64 68 63 | ivalent.of.the.host.block.in.dhc |
109ba0 | 70 64 2e 63 6f 6e 66 20 6f 66 20 69 73 63 2d 64 68 63 70 64 2e 00 54 68 69 73 20 69 73 20 74 68 | pd.conf.of.isc-dhcpd..This.is.th |
109bc0 | 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 | e.name.of.the.physical.interface |
109be0 | 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 79 6f 75 72 20 4c 43 44 20 64 69 73 | .used.to.connect.to.your.LCD.dis |
109c00 | 70 6c 61 79 2e 20 54 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 | play..Tab.completion.is.supporte |
109c20 | 64 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 6c 69 73 74 20 79 6f 75 20 61 6c 6c 20 61 76 61 69 6c | d.and.it.will.list.you.all.avail |
109c40 | 61 62 6c 65 20 73 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 74 | able.serial.interface..This.is.t |
109c60 | 68 65 20 70 6f 6c 69 63 79 20 74 68 61 74 20 72 65 71 75 69 65 72 65 73 20 74 68 65 20 6c 6f 77 | he.policy.that.requieres.the.low |
109c80 | 65 73 74 20 72 65 73 6f 75 72 63 65 73 20 66 6f 72 20 74 68 65 20 73 61 6d 65 20 61 6d 6f 75 6e | est.resources.for.the.same.amoun |
109ca0 | 74 20 6f 66 20 74 72 61 66 66 69 63 2e 20 42 75 74 20 2a 2a 76 65 72 79 20 6c 69 6b 65 6c 79 20 | t.of.traffic..But.**very.likely. |
109cc0 | 79 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 69 74 20 61 73 20 79 6f 75 20 63 61 6e 6e 6f 74 | you.do.not.need.it.as.you.cannot |
109ce0 | 20 67 65 74 20 6d 75 63 68 20 66 72 6f 6d 20 69 74 2e 20 53 6f 6d 65 74 69 6d 65 73 20 69 74 20 | .get.much.from.it..Sometimes.it. |
109d00 | 69 73 20 75 73 65 64 20 6a 75 73 74 20 74 6f 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 2e 2a | is.used.just.to.enable.logging.* |
109d20 | 2a 00 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 | *.This.is.useful,.for.example,.i |
109d40 | 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 68 6f 73 74 66 69 6c 65 20 75 70 64 61 | n.combination.with.hostfile.upda |
109d60 | 74 65 2e 00 54 68 69 73 20 69 73 20 77 68 65 72 65 20 22 55 44 50 20 62 72 6f 61 64 63 61 73 74 | te..This.is.where."UDP.broadcast |
109d80 | 20 72 65 6c 61 79 22 20 63 6f 6d 65 73 20 69 6e 74 6f 20 70 6c 61 79 21 20 49 74 20 77 69 6c 6c | .relay".comes.into.play!.It.will |
109da0 | 20 66 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 | .forward.received.broadcasts.to. |
109dc0 | 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 | other.configured.networks..This. |
109de0 | 6d 61 6b 65 73 20 74 68 65 20 73 65 72 76 65 72 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 | makes.the.server.authoritatively |
109e00 | 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 3a 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 | .not.aware.of:.10.in-addr.arpa,. |
109e20 | 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e | 168.192.in-addr.arpa,.16-31.172. |
109e40 | 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 77 68 69 63 68 20 65 6e 61 62 6c 69 6e 67 20 75 70 73 | in-addr.arpa,.which.enabling.ups |
109e60 | 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 28 73 29 20 74 6f 20 62 65 20 75 73 65 64 20 66 | tream.DNS.server(s).to.be.used.f |
109e80 | 6f 72 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 6f 66 20 74 68 65 73 65 20 7a 6f 6e 65 | or.reverse.lookups.of.these.zone |
109ea0 | 73 2e 00 54 68 69 73 20 6d 65 74 68 6f 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 | s..This.method.automatically.dis |
109ec0 | 61 62 6c 65 73 20 49 50 76 36 20 74 72 61 66 66 69 63 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e | ables.IPv6.traffic.forwarding.on |
109ee0 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 71 75 65 73 74 69 6f 6e 2e 00 54 68 69 73 | .the.interface.in.question..This |
109f00 | 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 | .mode.provides.fault.tolerance.. |
109f20 | 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e | This.mode.provides.fault.toleran |
109f40 | 63 65 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 69 6d 61 72 79 60 20 6f 70 74 69 6f 6e | ce..The.:cfgcmd:`primary`.option |
109f60 | 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f 77 2c 20 61 66 66 65 63 74 73 20 74 68 65 20 | ,.documented.below,.affects.the. |
109f80 | 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 6d 6f 64 65 2e 00 54 68 69 73 20 6d 6f 64 65 | behavior.of.this.mode..This.mode |
109fa0 | 20 70 72 6f 76 69 64 65 73 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 66 61 75 | .provides.load.balancing.and.fau |
109fc0 | 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 61 64 64 73 20 50 | lt.tolerance..This.option.adds.P |
109fe0 | 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 61 70 70 | ower.Constraint.element.when.app |
10a000 | 6c 69 63 61 62 6c 65 20 61 6e 64 20 43 6f 75 6e 74 72 79 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 | licable.and.Country.element.is.a |
10a020 | 64 64 65 64 2e 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 69 | dded..Power.Constraint.element.i |
10a040 | 73 20 72 65 71 75 69 72 65 64 20 62 79 20 54 72 61 6e 73 6d 69 74 20 50 6f 77 65 72 20 43 6f 6e | s.required.by.Transmit.Power.Con |
10a060 | 74 72 6f 6c 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 | trol..This.option.can.be.specifi |
10a080 | 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 | ed.multiple.times..This.option.c |
10a0a0 | 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 | an.be.supplied.multiple.times..T |
10a0c0 | 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 69 6e 20 41 63 63 65 73 | his.option.is.mandatory.in.Acces |
10a0e0 | 73 2d 50 6f 69 6e 74 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 71 | s-Point.mode..This.option.is.req |
10a100 | 75 69 72 65 64 20 77 68 65 6e 20 72 75 6e 6e 69 6e 67 20 61 20 44 4d 56 50 4e 20 73 70 6f 6b 65 | uired.when.running.a.DMVPN.spoke |
10a120 | 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 | ..This.option.is.used.by.some.DH |
10a140 | 43 50 20 63 6c 69 65 6e 74 73 20 61 73 20 61 20 77 61 79 20 66 6f 72 20 75 73 65 72 73 20 74 6f | CP.clients.as.a.way.for.users.to |
10a160 | 20 73 70 65 63 69 66 79 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .specify.identifying.information |
10a180 | 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 | .to.the.client..This.can.be.used |
10a1a0 | 20 69 6e 20 61 20 73 69 6d 69 6c 61 72 20 77 61 79 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 2d | .in.a.similar.way.to.the.vendor- |
10a1c0 | 63 6c 61 73 73 2d 69 64 65 6e 74 69 66 69 65 72 20 6f 70 74 69 6f 6e 2c 20 62 75 74 20 74 68 65 | class-identifier.option,.but.the |
10a1e0 | 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 | .value.of.the.option.is.specifie |
10a200 | 64 20 62 79 20 74 68 65 20 75 73 65 72 2c 20 6e 6f 74 20 74 68 65 20 76 65 6e 64 6f 72 2e 00 54 | d.by.the.user,.not.the.vendor..T |
10a220 | 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 | his.option.is.used.by.some.DHCP. |
10a240 | 63 6c 69 65 6e 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 76 65 6e 64 6f 72 20 74 | clients.to.identify.the.vendor.t |
10a260 | 79 70 65 20 61 6e 64 20 70 6f 73 73 69 62 6c 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | ype.and.possibly.the.configurati |
10a280 | 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 | on.of.a.DHCP.client..The.informa |
10a2a0 | 74 69 6f 6e 20 69 73 20 61 20 73 74 72 69 6e 67 20 6f 66 20 62 79 74 65 73 20 77 68 6f 73 65 20 | tion.is.a.string.of.bytes.whose. |
10a2c0 | 63 6f 6e 74 65 6e 74 73 20 61 72 65 20 73 70 65 63 69 66 69 63 20 74 6f 20 74 68 65 20 76 65 6e | contents.are.specific.to.the.ven |
10a2e0 | 64 6f 72 20 61 6e 64 20 61 72 65 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 | dor.and.are.not.specified.in.a.s |
10a300 | 74 61 6e 64 61 72 64 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 | tandard..This.option.must.be.use |
10a320 | 64 20 77 69 74 68 20 60 60 74 69 6d 65 6f 75 74 60 60 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 | d.with.``timeout``.option..This. |
10a340 | 6f 70 74 69 6f 6e 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 | option.only.affects.802.3ad.mode |
10a360 | 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 73 20 61 20 64 65 6c 61 79 20 | ..This.option.specifies.a.delay. |
10a380 | 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 76 72 72 70 20 69 6e 73 74 61 6e 63 65 73 | in.seconds.before.vrrp.instances |
10a3a0 | 20 73 74 61 72 74 20 75 70 20 61 66 74 65 72 20 6b 65 65 70 61 6c 69 76 65 64 20 73 74 61 72 74 | .start.up.after.keepalived.start |
10a3c0 | 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 | s..This.options.defaults.to.2048 |
10a3e0 | 00 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 22 73 68 6f 72 74 | .This.parameter.allows.to."short |
10a400 | 63 75 74 22 20 72 6f 75 74 65 73 20 28 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 29 20 66 6f 72 20 69 | cut".routes.(non-backbone).for.i |
10a420 | 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 74 68 72 65 | nter-area.routes..There.are.thre |
10a440 | 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f | e.modes.available.for.routes.sho |
10a460 | 72 74 63 75 74 74 69 6e 67 3a 00 54 68 69 73 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 74 65 6e 64 | rtcutting:.This.policy.is.intend |
10a480 | 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 72 65 20 62 61 6c 61 6e 63 65 64 20 64 69 | ed.to.provide.a.more.balanced.di |
10a4a0 | 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 6e 20 6c 61 79 65 72 | stribution.of.traffic.than.layer |
10a4c0 | 32 20 61 6c 6f 6e 65 2c 20 65 73 70 65 63 69 61 6c 6c 79 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 | 2.alone,.especially.in.environme |
10a4e0 | 6e 74 73 20 77 68 65 72 65 20 61 20 6c 61 79 65 72 33 20 67 61 74 65 77 61 79 20 64 65 76 69 63 | nts.where.a.layer3.gateway.devic |
10a500 | 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 72 65 61 63 68 20 6d 6f 73 74 20 64 65 73 74 | e.is.required.to.reach.most.dest |
10a520 | 69 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 70 72 6f 6d 70 74 65 64 20 73 6f 6d 65 20 49 53 50 | inations..This.prompted.some.ISP |
10a540 | 73 20 74 6f 20 64 65 76 65 6c 6f 70 20 61 20 70 6f 6c 69 63 79 20 77 69 74 68 69 6e 20 74 68 65 | s.to.develop.a.policy.within.the |
10a560 | 20 3a 61 62 62 72 3a 60 41 52 49 4e 20 28 41 6d 65 72 69 63 61 6e 20 52 65 67 69 73 74 72 79 20 | .:abbr:`ARIN.(American.Registry. |
10a580 | 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 4e 75 6d 62 65 72 73 29 60 20 74 6f 20 61 6c 6c 6f 63 61 | for.Internet.Numbers)`.to.alloca |
10a5a0 | 74 65 20 6e 65 77 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 | te.new.private.address.space.for |
10a5c0 | 20 43 47 4e 73 2c 20 62 75 74 20 41 52 49 4e 20 64 65 66 65 72 72 65 64 20 74 6f 20 74 68 65 20 | .CGNs,.but.ARIN.deferred.to.the. |
10a5e0 | 49 45 54 46 20 62 65 66 6f 72 65 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 74 68 65 20 70 6f 6c | IETF.before.implementing.the.pol |
10a600 | 69 63 79 20 69 6e 64 69 63 61 74 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 61 74 74 65 72 20 77 | icy.indicating.that.the.matter.w |
10a620 | 61 73 20 6e 6f 74 20 61 20 74 79 70 69 63 61 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 69 73 73 75 | as.not.a.typical.allocation.issu |
10a640 | 65 20 62 75 74 20 61 20 72 65 73 65 72 76 61 74 69 6f 6e 20 6f 66 20 61 64 64 72 65 73 73 65 73 | e.but.a.reservation.of.addresses |
10a660 | 20 66 6f 72 20 74 65 63 68 6e 69 63 61 6c 20 70 75 72 70 6f 73 65 73 20 28 70 65 72 20 3a 72 66 | .for.technical.purposes.(per.:rf |
10a680 | 63 3a 60 32 38 36 30 60 29 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 | c:`2860`)..This.required.setting |
10a6a0 | 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 | .defines.the.action.of.the.curre |
10a6c0 | 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a | nt.rule..If.action.is.set.to.``j |
10a6e0 | 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 | ump``,.then.``jump-target``.is.a |
10a700 | 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e | lso.needed..This.required.settin |
10a720 | 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 | g.defines.the.action.of.the.curr |
10a740 | 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 | ent.rule..If.action.is.set.to.ju |
10a760 | 6d 70 2c 20 74 68 65 6e 20 6a 75 6d 70 2d 74 61 72 67 65 74 20 69 73 20 61 6c 73 6f 20 6e 65 65 | mp,.then.jump-target.is.also.nee |
10a780 | 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 73 20 74 77 6f 20 66 69 6c 65 73 2c 20 6f 6e | ded..This.requires.two.files,.on |
10a7a0 | 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 64 | e.to.create.the.device.(XXX.netd |
10a7c0 | 65 76 29 20 61 6e 64 20 6f 6e 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 | ev).and.one.to.configure.the.net |
10a7e0 | 77 6f 72 6b 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 77 6f 72 6b 29 | work.on.the.device.(XXX.network) |
10a800 | 00 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 65 20 63 6f 6e 66 | .This.results.in.the.active.conf |
10a820 | 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 20 64 | iguration:.This.says.that.this.d |
10a840 | 65 76 69 63 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f | evice.is.the.only.DHCP.server.fo |
10a860 | 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 49 66 20 6f 74 68 65 72 20 64 65 76 69 63 65 73 | r.this.network..If.other.devices |
10a880 | 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 6f 66 66 65 72 20 44 48 43 50 20 6c 65 61 73 65 73 | .are.trying.to.offer.DHCP.leases |
10a8a0 | 2c 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 27 44 48 43 50 4e 41 | ,.this.machine.will.send.'DHCPNA |
10a8c0 | 4b 27 20 74 6f 20 61 6e 79 20 64 65 76 69 63 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 71 75 65 | K'.to.any.device.trying.to.reque |
10a8e0 | 73 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6e 6f 74 20 76 61 6c | st.an.IP.address.that.is.not.val |
10a900 | 69 64 20 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 00 54 68 69 73 20 73 65 63 74 69 6f | id.for.this.network..This.sectio |
10a920 | 6e 20 64 65 73 63 72 69 62 65 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 44 4e 53 20 6f 6e 20 74 | n.describes.configuring.DNS.on.t |
10a940 | 68 65 20 73 79 73 74 65 6d 2c 20 6e 61 6d 65 6c 79 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 | he.system,.namely:.This.section. |
10a960 | 64 65 73 63 72 69 62 65 73 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 68 6f 73 74 20 69 6e 66 6f | describes.the.system's.host.info |
10a980 | 72 6d 61 74 69 6f 6e 20 61 6e 64 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | rmation.and.how.to.configure.the |
10a9a0 | 6d 2c 20 69 74 20 63 6f 76 65 72 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 69 63 | m,.it.covers.the.following.topic |
10a9c0 | 73 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 6e 65 65 64 73 20 69 6d 70 72 6f 76 65 6d 65 6e | s:.This.section.needs.improvemen |
10a9e0 | 74 73 2c 20 65 78 61 6d 70 6c 65 73 20 61 6e 64 20 65 78 70 6c 61 6e 61 74 69 6f 6e 73 2e 00 54 | ts,.examples.and.explanations..T |
10aa00 | 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 | his.set.the.default.action.of.th |
10aa20 | 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 | e.rule-set.if.no.rule.matched.a. |
10aa40 | 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 | packet.criteria..If.defacult-act |
10aa60 | 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 | ion.is.set.to.``jump``,.then.``d |
10aa80 | 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 | efault-jump-target``.is.also.nee |
10aaa0 | 64 65 64 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e | ded..This.set.the.default.action |
10aac0 | 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 | .of.the.rule-set.if.no.rule.matc |
10aae0 | 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 | hed.a.packet.criteria..If.defacu |
10ab00 | 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 | lt-action.is.set.to.``jump``,.th |
10ab20 | 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c | en.``default-jump-target``.is.al |
10ab40 | 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 | so.needed..Note.that.for.base.ch |
10ab60 | 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 | ains,.default.action.can.only.be |
10ab80 | 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 | .set.to.``accept``.or.``drop``,. |
10aba0 | 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 | while.on.custom.chain,.more.acti |
10abc0 | 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 | ons.are.available..This.set.the. |
10abe0 | 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 | default.action.of.the.rule-set.i |
10ac00 | 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 | f.no.rule.matched.a.packet.crite |
10ac20 | 72 69 61 2e 20 49 66 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f | ria..If.default-action.is.set.to |
10ac40 | 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 | .``jump``,.then.``default-jump-t |
10ac60 | 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 | arget``.is.also.needed..Note.tha |
10ac80 | 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f | t.for.base.chains,.default.actio |
10aca0 | 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 | n.can.only.be.set.to.``accept``. |
10acc0 | 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 | or.``drop``,.while.on.custom.cha |
10ace0 | 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 | in,.more.actions.are.available.. |
10ad00 | 54 68 69 73 20 73 65 74 73 20 74 68 65 20 61 63 63 65 70 74 65 64 20 63 69 70 68 65 72 73 20 74 | This.sets.the.accepted.ciphers.t |
10ad20 | 6f 20 75 73 65 20 77 68 65 6e 20 76 65 72 73 69 6f 6e 20 3d 3e 20 32 2e 34 2e 30 20 61 6e 64 20 | o.use.when.version.=>.2.4.0.and. |
10ad40 | 4e 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 | NCP.is.enabled.(which.is.the.def |
10ad60 | 61 75 6c 74 29 2e 20 44 65 66 61 75 6c 74 20 4e 43 50 20 63 69 70 68 65 72 20 66 6f 72 20 76 65 | ault)..Default.NCP.cipher.for.ve |
10ad80 | 72 73 69 6f 6e 73 20 3e 3d 20 32 2e 34 2e 30 20 69 73 20 61 65 73 32 35 36 67 63 6d 2e 20 54 68 | rsions.>=.2.4.0.is.aes256gcm..Th |
10ada0 | 65 20 66 69 72 73 74 20 63 69 70 68 65 72 20 69 6e 20 74 68 69 73 20 6c 69 73 74 20 69 73 20 77 | e.first.cipher.in.this.list.is.w |
10adc0 | 68 61 74 20 73 65 72 76 65 72 20 70 75 73 68 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 2e 00 54 68 | hat.server.pushes.to.clients..Th |
10ade0 | 69 73 20 73 65 74 73 20 74 68 65 20 63 69 70 68 65 72 20 77 68 65 6e 20 4e 43 50 20 28 4e 65 67 | is.sets.the.cipher.when.NCP.(Neg |
10ae00 | 6f 74 69 61 62 6c 65 20 43 72 79 70 74 6f 20 50 61 72 61 6d 65 74 65 72 73 29 20 69 73 20 64 69 | otiable.Crypto.Parameters).is.di |
10ae20 | 73 61 62 6c 65 64 20 6f 72 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 20 3c 20 32 2e 34 2e | sabled.or.OpenVPN.version.<.2.4. |
10ae40 | 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 35 30 30 | 0..This.setting.defaults.to.1500 |
10ae60 | 20 61 6e 64 20 69 73 20 76 61 6c 69 64 20 62 65 74 77 65 65 6e 20 31 30 20 61 6e 64 20 36 30 30 | .and.is.valid.between.10.and.600 |
10ae80 | 30 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 | 00..This.setting.enable.or.disab |
10aea0 | 6c 65 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 6f 66 20 69 63 6d 70 20 62 72 6f 61 64 63 61 73 | le.the.response.of.icmp.broadcas |
10aec0 | 74 20 6d 65 73 73 61 67 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d | t.messages..The.following.system |
10aee0 | 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 | .parameter.will.be.altered:.This |
10af00 | 20 73 65 74 74 69 6e 67 20 68 61 6e 64 6c 65 20 69 66 20 56 79 4f 53 20 61 63 63 65 70 74 20 70 | .setting.handle.if.VyOS.accept.p |
10af20 | 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 72 6f 75 74 65 20 6f 70 74 69 6f | ackets.with.a.source.route.optio |
10af40 | 6e 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 | n..The.following.system.paramete |
10af60 | 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 2c | r.will.be.altered:.This.setting, |
10af80 | 20 77 68 69 63 68 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 36 30 30 20 73 65 63 6f 6e 64 73 2c | .which.defaults.to.3600.seconds, |
10afa0 | 20 70 75 74 73 20 61 20 6d 61 78 69 6d 75 6d 20 6f 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 | .puts.a.maximum.on.the.amount.of |
10afc0 | 20 74 69 6d 65 20 6e 65 67 61 74 69 76 65 20 65 6e 74 72 69 65 73 20 61 72 65 20 63 61 63 68 65 | .time.negative.entries.are.cache |
10afe0 | 64 2e 00 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 | d..This.setup.will.make.the.VRRP |
10b000 | 20 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 | .process.execute.the.``/config/s |
10b020 | 63 72 69 70 74 73 2f 76 72 72 70 2d 63 68 65 63 6b 2e 73 68 20 73 63 72 69 70 74 60 60 20 65 76 | cripts/vrrp-check.sh.script``.ev |
10b040 | 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2c 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 | ery.60.seconds,.and.transition.t |
10b060 | 68 65 20 67 72 6f 75 70 20 74 6f 20 74 68 65 20 66 61 75 6c 74 20 73 74 61 74 65 20 69 66 20 69 | he.group.to.the.fault.state.if.i |
10b080 | 74 20 66 61 69 6c 73 20 28 69 2e 65 2e 20 65 78 69 74 73 20 77 69 74 68 20 6e 6f 6e 2d 7a 65 72 | t.fails.(i.e..exits.with.non-zer |
10b0a0 | 6f 20 73 74 61 74 75 73 29 20 74 68 72 65 65 20 74 69 6d 65 73 3a 00 54 68 69 73 20 73 74 61 74 | o.status).three.times:.This.stat |
10b0c0 | 65 6d 65 6e 74 20 73 70 65 63 69 66 69 65 73 20 64 68 63 70 36 63 20 74 6f 20 6f 6e 6c 79 20 65 | ement.specifies.dhcp6c.to.only.e |
10b0e0 | 78 63 68 61 6e 67 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 | xchange.informational.configurat |
10b100 | 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 77 69 74 68 20 73 65 72 76 65 72 73 2e 20 41 20 6c | ion.parameters.with.servers..A.l |
10b120 | 69 73 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 65 73 20 69 73 20 61 | ist.of.DNS.server.addresses.is.a |
10b140 | 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 73 75 63 68 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 | n.example.of.such.parameters..Th |
10b160 | 69 73 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 | is.statement.is.useful.when.the. |
10b180 | 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 73 74 61 74 65 66 75 6c 20 63 6f | client.does.not.need.stateful.co |
10b1a0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 73 75 63 68 20 61 73 20 49 | nfiguration.parameters.such.as.I |
10b1c0 | 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 73 20 | Pv6.addresses.or.prefixes..This. |
10b1e0 | 73 75 70 70 6f 72 74 20 6d 61 79 20 62 65 20 65 6e 61 62 6c 65 64 20 61 64 6d 69 6e 69 73 74 72 | support.may.be.enabled.administr |
10b200 | 61 74 69 76 65 6c 79 20 28 61 6e 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 29 20 77 69 74 68 20 | atively.(and.indefinitely).with. |
10b220 | 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 60 20 63 6f 6d | the.:cfgcmd:`administrative`.com |
10b240 | 6d 61 6e 64 2e 20 49 74 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 63 6f 6e | mand..It.may.also.be.enabled.con |
10b260 | 64 69 74 69 6f 6e 61 6c 6c 79 2e 20 43 6f 6e 64 69 74 69 6f 6e 61 6c 20 65 6e 61 62 6c 69 6e 67 | ditionally..Conditional.enabling |
10b280 | 20 6f 66 20 6d 61 78 2d 6d 65 74 72 69 63 20 72 6f 75 74 65 72 2d 6c 73 61 73 20 63 61 6e 20 62 | .of.max-metric.router-lsas.can.b |
10b2a0 | 65 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 | e.for.a.period.of.seconds.after. |
10b2c0 | 73 74 61 72 74 75 70 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 74 61 | startup.with.the.:cfgcmd:`on-sta |
10b2e0 | 72 74 75 70 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 20 61 6e 64 2f 6f 72 20 66 | rtup.<seconds>`.command.and/or.f |
10b300 | 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 70 72 69 6f 72 20 74 6f 20 | or.a.period.of.seconds.prior.to. |
10b320 | 73 68 75 74 64 6f 77 6e 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 68 | shutdown.with.the.:cfgcmd:`on-sh |
10b340 | 75 74 64 6f 77 6e 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 65 20 74 | utdown.<seconds>`.command..The.t |
10b360 | 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 38 36 34 30 30 2e 00 54 68 69 73 20 74 65 | ime.range.is.5.to.86400..This.te |
10b380 | 63 68 6e 69 71 75 65 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 | chnique.is.commonly.referred.to. |
10b3a0 | 61 73 20 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 20 6f 72 20 48 61 69 72 70 69 6e 20 4e 41 54 | as.NAT.Reflection.or.Hairpin.NAT |
10b3c0 | 2e 00 54 68 69 73 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 73 20 6b 6e 6f 77 6e 20 62 79 20 64 69 | ..This.technology.is.known.by.di |
10b3e0 | 66 66 65 72 65 6e 74 20 6e 61 6d 65 73 3a 00 54 68 69 73 20 74 68 65 20 73 69 6d 70 6c 65 73 74 | fferent.names:.This.the.simplest |
10b400 | 20 71 75 65 75 65 20 70 6f 73 73 69 62 6c 65 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 74 6f | .queue.possible.you.can.apply.to |
10b420 | 20 79 6f 75 72 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 6d 75 73 74 20 67 6f 20 74 | .your.traffic..Traffic.must.go.t |
10b440 | 68 72 6f 75 67 68 20 61 20 66 69 6e 69 74 65 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 | hrough.a.finite.queue.before.it. |
10b460 | 69 73 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 2e 20 59 6f 75 20 6d 75 73 74 20 64 65 66 69 6e | is.actually.sent..You.must.defin |
10b480 | 65 20 68 6f 77 20 6d 61 6e 79 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 71 75 65 75 65 20 63 61 | e.how.many.packets.that.queue.ca |
10b4a0 | 6e 20 63 6f 6e 74 61 69 6e 2e 00 54 68 69 73 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 | n.contain..This.topology.was.bui |
10b4c0 | 6c 74 20 75 73 69 6e 67 20 47 4e 53 33 2e 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 | lt.using.GNS3..This.will.add.the |
10b4e0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 | .following.option.to.the.Kernel. |
10b500 | 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 | commandline:.This.will.add.the.f |
10b520 | 6f 6c 6c 6f 77 69 6e 67 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 4b 65 72 6e | ollowing.two.options.to.the.Kern |
10b540 | 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 | el.commandline:.This.will.be.the |
10b560 | 20 6d 6f 73 74 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 61 | .most.widely.used.interface.on.a |
10b580 | 20 72 6f 75 74 65 72 20 63 61 72 72 79 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 | .router.carrying.traffic.to.the. |
10b5a0 | 72 65 61 6c 20 77 6f 72 6c 64 2e 00 54 68 69 73 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 | real.world..This.will.configure. |
10b5c0 | 61 20 73 74 61 74 69 63 20 41 52 50 20 65 6e 74 72 79 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 | a.static.ARP.entry.always.resolv |
10b5e0 | 69 6e 67 20 60 3c 61 64 64 72 65 73 73 3e 60 20 74 6f 20 60 3c 6d 61 63 3e 60 20 66 6f 72 20 69 | ing.`<address>`.to.`<mac>`.for.i |
10b600 | 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 54 68 69 73 20 77 69 6c | nterface.`<interface>`..This.wil |
10b620 | 6c 20 6d 61 74 63 68 20 54 43 50 20 74 72 61 66 66 69 63 20 77 69 74 68 20 73 6f 75 72 63 65 20 | l.match.TCP.traffic.with.source. |
10b640 | 70 6f 72 74 20 38 30 2e 00 54 68 69 73 20 77 69 6c 6c 20 72 65 6e 64 65 72 20 74 68 65 20 66 6f | port.80..This.will.render.the.fo |
10b660 | 6c 6c 6f 77 69 6e 67 20 64 64 63 6c 69 65 6e 74 5f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | llowing.ddclient_.configuration. |
10b680 | 65 6e 74 72 79 3a 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 | entry:.This.will.show.you.a.basi |
10b6a0 | 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 00 54 68 69 73 20 77 69 6c 6c 20 73 68 | c.firewall.overview.This.will.sh |
10b6c0 | 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 | ow.you.a.basic.firewall.overview |
10b6e0 | 2c 20 66 6f 72 20 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 61 6e 64 20 6e 6f 74 20 6f 6e 6c 79 20 | ,.for.all.ruleset,.and.not.only. |
10b700 | 66 6f 72 20 69 70 76 34 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 | for.ipv4.This.will.show.you.a.ba |
10b720 | 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 7a 6f 6e 65 | sic.summary.of.a.particular.zone |
10b740 | 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d | ..This.will.show.you.a.basic.sum |
10b760 | 6d 61 72 79 20 6f 66 20 7a 6f 6e 65 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 | mary.of.zones.configuration..Thi |
10b780 | 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 72 75 6c 65 2d 73 65 74 20 73 74 61 74 69 | s.will.show.you.a.rule-set.stati |
10b7a0 | 73 74 69 63 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 | stic.since.the.last.boot..This.w |
10b7c0 | 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 74 61 74 69 73 74 69 63 20 6f 66 20 61 6c 6c 20 | ill.show.you.a.statistic.of.all. |
10b7e0 | 72 75 6c 65 2d 73 65 74 73 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 | rule-sets.since.the.last.boot..T |
10b800 | 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 | his.will.show.you.a.summary.of.r |
10b820 | 75 6c 65 2d 73 65 74 73 20 61 6e 64 20 67 72 6f 75 70 73 00 54 68 69 73 20 77 6f 72 6b 61 72 6f | ule-sets.and.groups.This.workaro |
10b840 | 75 6e 64 20 6c 65 74 73 20 79 6f 75 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c | und.lets.you.apply.a.shaping.pol |
10b860 | 69 63 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 62 79 20 66 69 | icy.to.the.ingress.traffic.by.fi |
10b880 | 72 73 74 20 72 65 64 69 72 65 63 74 69 6e 67 20 69 74 20 74 6f 20 61 6e 20 69 6e 2d 62 65 74 77 | rst.redirecting.it.to.an.in-betw |
10b8a0 | 65 65 6e 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 28 60 49 6e 74 65 72 6d 65 64 | een.virtual.interface.(`Intermed |
10b8c0 | 69 61 74 65 20 46 75 6e 63 74 69 6f 6e 61 6c 20 42 6c 6f 63 6b 60 5f 29 2e 20 54 68 65 72 65 2c | iate.Functional.Block`_)..There, |
10b8e0 | 20 69 6e 20 74 68 61 74 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 | .in.that.virtual.interface,.you. |
10b900 | 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 6e 79 20 6f 66 20 74 68 65 | will.be.able.to.apply.any.of.the |
10b920 | 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 77 6f 72 6b 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 | .policies.that.work.for.outbound |
10b940 | 20 74 72 61 66 66 69 63 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 73 68 61 70 69 6e | .traffic,.for.instance,.a.shapin |
10b960 | 67 20 6f 6e 65 2e 00 54 68 69 73 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 | g.one..This.would.generate.the.f |
10b980 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 72 65 65 20 73 69 | ollowing.configuration:.Three.si |
10b9a0 | 67 6e 69 66 69 63 61 6e 74 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 53 4e 4d 50 20 68 61 76 65 20 | gnificant.versions.of.SNMP.have. |
10b9c0 | 62 65 65 6e 20 64 65 76 65 6c 6f 70 65 64 20 61 6e 64 20 64 65 70 6c 6f 79 65 64 2e 20 53 4e 4d | been.developed.and.deployed..SNM |
10b9e0 | 50 76 31 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 | Pv1.is.the.original.version.of.t |
10ba00 | 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 4d 6f 72 65 20 72 65 63 65 6e 74 20 76 65 72 73 69 6f 6e | he.protocol..More.recent.version |
10ba20 | 73 2c 20 53 4e 4d 50 76 32 63 20 61 6e 64 20 53 4e 4d 50 76 33 2c 20 66 65 61 74 75 72 65 20 69 | s,.SNMPv2c.and.SNMPv3,.feature.i |
10ba40 | 6d 70 72 6f 76 65 6d 65 6e 74 73 20 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 66 6c 65 78 | mprovements.in.performance,.flex |
10ba60 | 69 62 69 6c 69 74 79 20 61 6e 64 20 73 65 63 75 72 69 74 79 2e 00 54 69 6d 65 20 5a 6f 6e 65 00 | ibility.and.security..Time.Zone. |
10ba80 | 54 69 6d 65 20 5a 6f 6e 65 20 73 65 74 74 69 6e 67 20 69 73 20 76 65 72 79 20 69 6d 70 6f 72 74 | Time.Zone.setting.is.very.import |
10baa0 | 61 6e 74 20 61 73 20 65 2e 67 20 61 6c 6c 20 79 6f 75 72 20 6c 6f 67 66 69 6c 65 20 65 6e 74 72 | ant.as.e.g.all.your.logfile.entr |
10bac0 | 69 65 73 20 77 69 6c 6c 20 62 65 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 | ies.will.be.based.on.the.configu |
10bae0 | 72 65 64 20 7a 6f 6e 65 2e 20 57 69 74 68 6f 75 74 20 70 72 6f 70 65 72 20 74 69 6d 65 20 7a 6f | red.zone..Without.proper.time.zo |
10bb00 | 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 76 65 72 79 | ne.configuration.it.will.be.very |
10bb20 | 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6d 70 61 72 65 20 6c 6f 67 66 69 6c 65 73 20 66 | .difficult.to.compare.logfiles.f |
10bb40 | 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 79 73 74 65 6d 73 2e 00 54 69 6d 65 20 69 6e 20 6d | rom.different.systems..Time.in.m |
10bb60 | 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 65 | illiseconds.between.retransmitte |
10bb80 | 64 20 4e 65 69 67 68 62 6f 72 20 53 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 | d.Neighbor.Solicitation.messages |
10bba0 | 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 | .Time.in.seconds.that.the.prefix |
10bbc0 | 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 70 72 65 66 65 72 72 65 64 20 28 64 65 66 61 75 6c 74 20 | .will.remain.preferred.(default. |
10bbe0 | 34 20 68 6f 75 72 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 | 4.hours).Time.in.seconds.that.th |
10bc00 | 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 | e.prefix.will.remain.valid.(defa |
10bc20 | 75 6c 74 3a 20 33 30 20 64 61 79 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 | ult:.30.days).Time.in.seconds.th |
10bc40 | 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 | at.the.prefix.will.remain.valid. |
10bc60 | 28 64 65 66 61 75 6c 74 3a 20 36 35 35 32 38 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 20 69 73 | (default:.65528.seconds).Time.is |
10bc80 | 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 2e 00 | .in.minutes.and.defaults.to.60.. |
10bca0 | 54 69 6d 65 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 72 75 6c 65 2e 00 | Time.to.match.the.defined.rule.. |
10bcc0 | 54 69 6d 65 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 74 68 61 74 20 61 20 6e 6f | Time,.in.milliseconds,.that.a.no |
10bce0 | 64 65 20 61 73 73 75 6d 65 73 20 61 20 6e 65 69 67 68 62 6f 72 20 69 73 20 72 65 61 63 68 61 62 | de.assumes.a.neighbor.is.reachab |
10bd00 | 6c 65 20 61 66 74 65 72 20 68 61 76 69 6e 67 20 72 65 63 65 69 76 65 64 20 61 20 72 65 61 63 68 | le.after.having.received.a.reach |
10bd20 | 61 62 69 6c 69 74 79 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 00 54 69 6d 65 6f 75 74 20 69 6e 20 | ability.confirmation.Timeout.in. |
10bd40 | 73 65 63 6f 6e 64 73 00 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 | seconds.Timeout.in.seconds.betwe |
10bd60 | 65 6e 20 68 65 61 6c 74 68 20 74 61 72 67 65 74 20 63 68 65 63 6b 73 2e 00 54 69 6d 65 6f 75 74 | en.health.target.checks..Timeout |
10bd80 | 20 74 6f 20 77 61 69 74 20 72 65 70 6c 79 20 66 6f 72 20 49 6e 74 65 72 69 6d 2d 55 70 64 61 74 | .to.wait.reply.for.Interim-Updat |
10bda0 | 65 20 70 61 63 6b 65 74 73 2e 20 28 64 65 66 61 75 6c 74 20 33 20 73 65 63 6f 6e 64 73 29 00 54 | e.packets..(default.3.seconds).T |
10bdc0 | 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 73 65 72 | imeout.to.wait.response.from.ser |
10bde0 | 76 65 72 20 28 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 72 73 00 54 6f 20 61 63 74 69 76 61 74 65 | ver.(seconds).Timers.To.activate |
10be00 | 20 74 68 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 2c 20 79 6f 75 20 6d 75 73 74 | .the.VLAN.aware.bridge,.you.must |
10be20 | 20 61 63 74 69 76 61 74 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 74 6f 20 75 73 65 20 56 4c | .activate.this.setting.to.use.VL |
10be40 | 41 4e 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 62 72 69 64 67 65 00 54 6f 20 61 6c | AN.settings.for.the.bridge.To.al |
10be60 | 6c 6f 77 20 56 50 4e 2d 63 6c 69 65 6e 74 73 20 61 63 63 65 73 73 20 76 69 61 20 79 6f 75 72 20 | low.VPN-clients.access.via.your. |
10be80 | 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 2c 20 61 20 4e 41 54 20 72 75 6c 65 20 69 73 20 | external.address,.a.NAT.rule.is. |
10bea0 | 72 65 71 75 69 72 65 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 | required:.To.allow.listing.addit |
10bec0 | 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 | ional.custom.domain,.for.example |
10bee0 | 20 60 60 6f 70 65 6e 74 68 72 65 61 64 2e 74 68 72 65 61 64 2e 68 6f 6d 65 2e 61 72 70 61 60 60 | .``openthread.thread.home.arpa`` |
10bf00 | 2c 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 72 65 66 6c 65 63 74 65 64 20 69 6e 20 61 64 | ,.so.that.it.can.reflected.in.ad |
10bf20 | 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 2c | dition.to.the.default.``local``, |
10bf40 | 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 | .use.the.following.command:.To.a |
10bf60 | 6c 6c 6f 77 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 | llow.only.specific.services,.for |
10bf80 | 20 65 78 61 6d 70 6c 65 20 60 60 5f 61 69 72 70 6c 61 79 2e 5f 74 63 70 60 60 20 6f 72 20 60 60 | .example.``_airplay._tcp``.or.`` |
10bfa0 | 5f 69 70 70 2e 5f 74 63 70 60 60 2c 20 28 69 6e 73 74 65 61 64 20 6f 66 20 61 6c 6c 20 73 65 72 | _ipp._tcp``,.(instead.of.all.ser |
10bfc0 | 76 69 63 65 73 29 20 74 6f 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2c 20 75 73 65 | vices).to.be.re-broadcasted,.use |
10bfe0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 | .the.following.command:.To.allow |
10c000 | 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 6f 20 63 6c 69 65 | .traffic.to.pass.through.to.clie |
10c020 | 6e 74 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | nts,.you.need.to.add.the.followi |
10c040 | 6e 67 20 72 75 6c 65 73 2e 20 28 69 66 20 79 6f 75 20 75 73 65 64 20 74 68 65 20 64 65 66 61 75 | ng.rules..(if.you.used.the.defau |
10c060 | 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 | lt.configuration.at.the.top.of.t |
10c080 | 68 69 73 20 70 61 67 65 29 00 54 6f 20 61 70 70 6c 79 20 74 68 69 73 20 70 6f 6c 69 63 79 20 74 | his.page).To.apply.this.policy.t |
10c0a0 | 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 69 6e 74 65 72 66 61 63 65 2c 20 63 6f 6e 66 69 67 75 | o.the.correct.interface,.configu |
10c0c0 | 72 65 20 69 74 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 69 6e 62 6f 75 | re.it.on.the.interface.the.inbou |
10c0e0 | 6e 64 20 6c 6f 63 61 6c 20 68 6f 73 74 20 77 69 6c 6c 20 73 65 6e 64 20 74 68 72 6f 75 67 68 20 | nd.local.host.will.send.through. |
10c100 | 74 6f 20 72 65 61 63 68 20 6f 75 72 20 64 65 73 74 69 6e 65 64 20 74 61 72 67 65 74 20 68 6f 73 | to.reach.our.destined.target.hos |
10c120 | 74 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 65 74 68 31 29 2e 00 54 6f 20 61 75 74 6f | t.(in.our.example.eth1)..To.auto |
10c140 | 20 75 70 64 61 74 65 20 74 68 65 20 62 6c 61 63 6b 6c 69 73 74 20 66 69 6c 65 73 00 54 6f 20 61 | .update.the.blacklist.files.To.a |
10c160 | 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 | utomatically.assign.the.client.a |
10c180 | 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c | n.IP.address.as.tunnel.endpoint, |
10c1a0 | 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 68 65 | .a.client.IP.pool.is.needed..The |
10c1c0 | 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f 72 20 | .source.can.be.either.RADIUS.or. |
10c1e0 | 61 20 6c 6f 63 61 6c 20 73 75 62 6e 65 74 20 6f 72 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e | a.local.subnet.or.IP.range.defin |
10c200 | 69 74 69 6f 6e 2e 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 | ition..To.automatically.assign.t |
10c220 | 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 | he.client.an.IP.address.as.tunne |
10c240 | 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 | l.endpoint,.a.client.IP.pool.is. |
10c260 | 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 | needed..The.source.can.be.either |
10c280 | 20 52 41 44 49 55 53 20 6f 72 20 61 20 6e 61 6d 65 64 20 70 6f 6f 6c 2e 20 54 68 65 72 65 20 69 | .RADIUS.or.a.named.pool..There.i |
10c2a0 | 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 | s.possibility.to.create.multiple |
10c2c0 | 20 6e 61 6d 65 64 20 70 6f 6f 6c 73 2e 20 45 61 63 68 20 6e 61 6d 65 64 20 70 6f 6f 6c 20 63 61 | .named.pools..Each.named.pool.ca |
10c2e0 | 6e 20 69 6e 63 6c 75 64 65 20 6f 6e 6c 79 20 6f 6e 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 | n.include.only.one.address.range |
10c300 | 2e 20 54 6f 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 | ..To.use.multiple.address.ranges |
10c320 | 20 63 6f 6e 66 69 67 75 72 65 20 60 60 6e 65 78 74 2d 70 6f 6f 6c 60 60 20 6f 70 74 69 6f 6e 2e | .configure.``next-pool``.option. |
10c340 | 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 61 63 74 69 6f 6e 60 60 | .To.be.used.only.when.``action`` |
10c360 | 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f | .is.set.to.``jump``..Use.this.co |
10c380 | 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f | mmand.to.specify.jump.target..To |
10c3a0 | 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 64 65 66 75 6c 74 2d 61 63 74 69 | .be.used.only.when.``defult-acti |
10c3c0 | 6f 6e 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 | on``.is.set.to.``jump``..Use.thi |
10c3e0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 | s.command.to.specify.jump.target |
10c400 | 20 66 6f 72 20 64 65 66 61 75 6c 74 20 72 75 6c 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e | .for.default.rule..To.be.used.on |
10c420 | 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 | ly.when.action.is.set.to.``jump` |
10c440 | 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a | `..Use.this.command.to.specify.j |
10c460 | 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e | ump.target..To.be.used.only.when |
10c480 | 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 | .action.is.set.to.``queue``..Use |
10c4a0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 70 61 63 6b | .this.command.to.distribute.pack |
10c4c0 | 65 74 73 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 71 75 65 75 65 73 2e 00 54 6f 20 62 | ets.between.several.queues..To.b |
10c4e0 | 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 | e.used.only.when.action.is.set.t |
10c500 | 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | o.``queue``..Use.this.command.to |
10c520 | 20 6c 65 74 20 70 61 63 6b 65 74 20 67 6f 20 74 68 72 6f 75 67 68 20 66 69 72 65 77 61 6c 6c 20 | .let.packet.go.through.firewall. |
10c540 | 77 68 65 6e 20 6e 6f 20 75 73 65 72 73 70 61 63 65 20 73 6f 66 74 77 61 72 65 20 69 73 20 63 6f | when.no.userspace.software.is.co |
10c560 | 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 71 75 65 75 65 2e 00 54 6f 20 62 65 20 75 73 65 64 | nnected.to.the.queue..To.be.used |
10c580 | 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 | .only.when.action.is.set.to.``qu |
10c5a0 | 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 | eue``..Use.this.command.to.speci |
10c5c0 | 66 79 20 71 75 65 75 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 51 75 65 75 65 20 72 61 | fy.queue.target.to.use..Queue.ra |
10c5e0 | 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 54 6f 20 62 65 20 75 73 65 | nge.is.also.supported..To.be.use |
10c600 | 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d | d.only.when.action.is.set.to.jum |
10c620 | 70 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a | p..Use.this.command.to.specify.j |
10c640 | 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 | ump.target..To.bypass.the.proxy. |
10c660 | 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 63 6f 6d 69 6e 67 | for.every.request.that.is.coming |
10c680 | 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 3a 00 54 6f 20 62 79 70 61 | .from.a.specific.source:.To.bypa |
10c6a0 | 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 | ss.the.proxy.for.every.request.t |
10c6c0 | 68 61 74 20 69 73 20 64 69 72 65 63 74 65 64 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 | hat.is.directed.to.a.specific.de |
10c6e0 | 73 74 69 6e 61 74 69 6f 6e 3a 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 49 50 76 36 20 61 73 73 | stination:.To.configure.IPv6.ass |
10c700 | 69 67 6e 6d 65 6e 74 73 20 66 6f 72 20 63 6c 69 65 6e 74 73 2c 20 74 77 6f 20 6f 70 74 69 6f 6e | ignments.for.clients,.two.option |
10c720 | 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 41 20 67 6c 6f 62 61 | s.need.to.be.configured..A.globa |
10c740 | 6c 20 70 72 65 66 69 78 20 77 68 69 63 68 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 6f 6e 20 | l.prefix.which.is.terminated.on. |
10c760 | 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 20 61 6e 64 20 61 20 64 65 6c 65 67 61 74 65 64 20 | the.clients.cpe.and.a.delegated. |
10c780 | 70 72 65 66 69 78 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 63 61 6e 20 75 73 65 20 66 6f 72 20 64 | prefix,.the.client.can.use.for.d |
10c7a0 | 65 76 69 63 65 73 20 72 6f 75 74 65 64 20 76 69 61 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 | evices.routed.via.the.clients.cp |
10c7c0 | 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 | e..To.configure.VyOS.with.the.:d |
10c7e0 | 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | oc:`legacy.firewall.configuratio |
10c800 | 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 | n.</configuration/firewall/gener |
10c820 | 61 6c 2d 6c 65 67 61 63 79 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 | al-legacy>`.To.configure.VyOS.wi |
10c840 | 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c | th.the.:doc:`zone-based.firewall |
10c860 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 | .configuration.</configuration/f |
10c880 | 69 72 65 77 61 6c 6c 2f 7a 6f 6e 65 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 | irewall/zone>`.To.configure.VyOS |
10c8a0 | 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 3a 64 6f 63 3a 60 66 69 72 65 77 61 6c 6c 20 63 6f 6e | .with.the.new.:doc:`firewall.con |
10c8c0 | 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 | figuration.</configuration/firew |
10c8e0 | 61 6c 6c 2f 67 65 6e 65 72 61 6c 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 62 6c 6f 63 6b | all/general>`.To.configure.block |
10c900 | 69 6e 67 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e | ing.add.the.following.to.the.con |
10c920 | 66 69 67 75 72 61 74 69 6f 6e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 69 74 65 2d 74 6f 2d | figuration.To.configure.site-to- |
10c940 | 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 | site.connection.you.need.to.add. |
10c960 | 70 65 65 72 73 20 77 69 74 68 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 73 | peers.with.the.``set.vpn.ipsec.s |
10c980 | 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 3c 6e 61 6d 65 3e 60 60 20 63 6f 6d 6d 61 6e | ite-to-site.peer.<name>``.comman |
10c9a0 | 64 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 79 73 6c 6f 67 2c 20 79 6f 75 20 6e 65 65 64 | d..To.configure.syslog,.you.need |
10c9c0 | 20 74 6f 20 73 77 69 74 63 68 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f | .to.switch.into.configuration.mo |
10c9e0 | 64 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 | de..To.configure.your.LCD.displa |
10ca00 | 79 20 79 6f 75 20 6d 75 73 74 20 66 69 72 73 74 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 75 73 | y.you.must.first.identify.the.us |
10ca20 | 65 64 20 68 61 72 64 77 61 72 65 2c 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 6f 66 | ed.hardware,.and.connectivity.of |
10ca40 | 20 74 68 65 20 64 69 73 70 6c 61 79 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 69 | .the.display.to.your.system..Thi |
10ca60 | 73 20 63 61 6e 20 62 65 20 61 6e 79 20 73 65 72 69 61 6c 20 70 6f 72 74 20 28 60 74 74 79 53 78 | s.can.be.any.serial.port.(`ttySx |
10ca80 | 78 60 29 20 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 6f 72 20 65 76 65 6e 20 6f 6c | x`).or.serial.via.USB.or.even.ol |
10caa0 | 64 20 70 61 72 61 6c 6c 65 6c 20 70 6f 72 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 6f 20 63 | d.parallel.port.interfaces..To.c |
10cac0 | 72 65 61 74 65 20 56 4c 41 4e 73 20 70 65 72 20 75 73 65 72 20 64 75 72 69 6e 67 20 72 75 6e 74 | reate.VLANs.per.user.during.runt |
10cae0 | 69 6d 65 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 | ime,.the.following.settings.are. |
10cb00 | 72 65 71 75 69 72 65 64 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 | required.on.a.per.interface.basi |
10cb20 | 73 2e 20 56 4c 41 4e 20 49 44 20 61 6e 64 20 56 4c 41 4e 20 72 61 6e 67 65 20 63 61 6e 20 62 65 | s..VLAN.ID.and.VLAN.range.can.be |
10cb40 | 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 | .present.in.the.configuration.at |
10cb60 | 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 | .the.same.time..To.create.a.new. |
10cb80 | 6c 69 6e 65 20 69 6e 20 79 6f 75 72 20 6c 6f 67 69 6e 20 6d 65 73 73 61 67 65 20 79 6f 75 20 6e | line.in.your.login.message.you.n |
10cba0 | 65 65 64 20 74 6f 20 65 73 63 61 70 65 20 74 68 65 20 6e 65 77 20 6c 69 6e 65 20 63 68 61 72 61 | eed.to.escape.the.new.line.chara |
10cbc0 | 63 74 65 72 20 62 79 20 75 73 69 6e 67 20 60 60 5c 5c 6e 60 60 2e 00 54 6f 20 63 72 65 61 74 65 | cter.by.using.``\\n``..To.create |
10cbe0 | 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 64 69 73 74 69 | .more.than.one.tunnel,.use.disti |
10cc00 | 6e 63 74 20 55 44 50 20 70 6f 72 74 73 2e 00 54 6f 20 63 72 65 61 74 65 20 72 6f 75 74 69 6e 67 | nct.UDP.ports..To.create.routing |
10cc20 | 20 74 61 62 6c 65 20 31 30 30 20 61 6e 64 20 61 64 64 20 61 20 6e 65 77 20 64 65 66 61 75 6c 74 | .table.100.and.add.a.new.default |
10cc40 | 20 67 61 74 65 77 61 79 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 72 61 66 66 69 63 20 6d | .gateway.to.be.used.by.traffic.m |
10cc60 | 61 74 63 68 69 6e 67 20 6f 75 72 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 3a 00 54 6f 20 64 65 66 | atching.our.route.policy:.To.def |
10cc80 | 69 6e 65 20 61 20 7a 6f 6e 65 20 73 65 74 75 70 20 65 69 74 68 65 72 20 6f 6e 65 20 77 69 74 68 | ine.a.zone.setup.either.one.with |
10cca0 | 20 69 6e 74 65 72 66 61 63 65 73 20 6f 72 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 00 54 6f 20 | .interfaces.or.a.local.zone..To. |
10ccc0 | 64 69 73 61 62 6c 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 6f 75 74 20 64 | disable.advertisements.without.d |
10cce0 | 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 6f 20 64 69 | eleting.the.configuration:.To.di |
10cd00 | 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 6b 65 | splay.the.configured.OTP.user.ke |
10cd20 | 79 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 | y,.use.the.command:.To.display.t |
10cd40 | 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 73 65 74 74 69 6e 67 73 2c | he.configured.OTP.user.settings, |
10cd60 | 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 20 4d 4c 44 20 | .use.the.command:.To.enable.MLD. |
10cd80 | 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 | reports.and.query.on.interfaces. |
10cda0 | 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 3a 00 54 6f 20 65 6e 61 62 6c 65 20 52 41 44 | `eth0`.and.`eth1`:.To.enable.RAD |
10cdc0 | 49 55 53 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 61 75 | IUS.based.authentication,.the.au |
10cde0 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 68 | thentication.mode.needs.to.be.ch |
10ce00 | 61 6e 67 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 | anged.within.the.configuration.. |
10ce20 | 50 72 65 76 69 6f 75 73 20 73 65 74 74 69 6e 67 73 20 6c 69 6b 65 20 74 68 65 20 6c 6f 63 61 6c | Previous.settings.like.the.local |
10ce40 | 20 75 73 65 72 73 2c 20 73 74 69 6c 6c 20 65 78 69 73 74 73 20 77 69 74 68 69 6e 20 74 68 65 20 | .users,.still.exists.within.the. |
10ce60 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 68 6f 77 65 76 65 72 20 74 68 65 79 20 61 72 65 20 | configuration,.however.they.are. |
10ce80 | 6e 6f 74 20 75 73 65 64 20 69 66 20 74 68 65 20 6d 6f 64 65 20 68 61 73 20 62 65 65 6e 20 63 68 | not.used.if.the.mode.has.been.ch |
10cea0 | 61 6e 67 65 64 20 66 72 6f 6d 20 6c 6f 63 61 6c 20 74 6f 20 72 61 64 69 75 73 2e 20 4f 6e 63 65 | anged.from.local.to.radius..Once |
10cec0 | 20 63 68 61 6e 67 65 64 20 62 61 63 6b 20 74 6f 20 6c 6f 63 61 6c 2c 20 69 74 20 77 69 6c 6c 20 | .changed.back.to.local,.it.will. |
10cee0 | 75 73 65 20 61 6c 6c 20 6c 6f 63 61 6c 20 61 63 63 6f 75 6e 74 73 20 61 67 61 69 6e 2e 00 54 6f | use.all.local.accounts.again..To |
10cf00 | 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 | .enable.bandwidth.shaping.via.RA |
10cf20 | 44 49 55 53 2c 20 74 68 65 20 6f 70 74 69 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 20 6e 65 65 64 | DIUS,.the.option.rate-limit.need |
10cf40 | 73 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 54 6f 20 65 6e 61 62 6c 65 20 64 65 62 75 67 | s.to.be.enabled..To.enable.debug |
10cf60 | 20 6d 65 73 73 61 67 65 73 2e 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 3a 6f 70 63 6d 64 3a | .messages..Available.via.:opcmd: |
10cf80 | 60 73 68 6f 77 20 6c 6f 67 60 20 6f 72 20 3a 6f 70 63 6d 64 3a 60 6d 6f 6e 69 74 6f 72 20 6c 6f | `show.log`.or.:opcmd:`monitor.lo |
10cfa0 | 67 60 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e | g`.To.enable.mDNS.repeater.you.n |
10cfc0 | 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e | eed.to.configure.at.least.two.in |
10cfe0 | 74 65 72 66 61 63 65 73 20 73 6f 20 74 68 61 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 | terfaces.so.that.all.incoming.mD |
10d000 | 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f | NS.packets.from.one.interface.co |
10d020 | 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 63 61 6e 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 | nfigured.here.can.be.re-broadcas |
10d040 | 74 65 64 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 28 73 29 20 63 6f | ted.to.any.other.interface(s).co |
10d060 | 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 | nfigured.under.this.section..To. |
10d080 | 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f | enable.mDNS.repeater.you.need.to |
10d0a0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 | .configure.at.least.two.interfac |
10d0c0 | 65 73 2e 20 54 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 | es..To.re-broadcast.all.incoming |
10d0e0 | 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 | .mDNS.packets.from.any.interface |
10d100 | 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e | .configured.here.to.any.other.in |
10d120 | 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 | terface.configured.under.this.se |
10d140 | 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 48 54 54 50 20 73 65 63 75 72 69 | ction..To.enable.the.HTTP.securi |
10d160 | 74 79 20 68 65 61 64 65 72 73 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ty.headers.in.the.configuration. |
10d180 | 66 69 6c 65 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 | file,.use.the.command:.To.enable |
10d1a0 | 2f 64 69 73 61 62 6c 65 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 20 73 70 | /disable.helper.support.for.a.sp |
10d1c0 | 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 75 72 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 69 64 20 | ecific.neighbour,.the.router-id. |
10d1e0 | 28 41 2e 42 2e 43 2e 44 29 20 68 61 73 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 54 | (A.B.C.D).has.to.be.specified..T |
10d200 | 6f 20 65 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 6c 6f 61 64 20 62 61 6c 61 | o.exclude.traffic.from.load.bala |
10d220 | 6e 63 69 6e 67 2c 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 61 6e 20 65 78 63 6c 75 | ncing,.traffic.matching.an.exclu |
10d240 | 64 65 20 72 75 6c 65 20 69 73 20 6e 6f 74 20 62 61 6c 61 6e 63 65 64 20 62 75 74 20 72 6f 75 74 | de.rule.is.not.balanced.but.rout |
10d260 | 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 | ed.through.the.system.routing.ta |
10d280 | 62 6c 65 20 69 6e 73 74 65 61 64 3a 00 54 6f 20 65 78 70 6c 61 69 6e 20 74 68 65 20 75 73 61 67 | ble.instead:.To.explain.the.usag |
10d2a0 | 65 20 6f 66 20 4c 4e 53 20 66 6f 6c 6c 6f 77 20 6f 75 72 20 62 6c 75 65 70 72 69 6e 74 20 3a 72 | e.of.LNS.follow.our.blueprint.:r |
10d2c0 | 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 6c 61 63 2d 6c 6e 73 60 2e 00 54 6f 20 65 78 74 65 6e 64 | ef:`examples-lac-lns`..To.extend |
10d2e0 | 20 53 4e 4d 50 20 61 67 65 6e 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 63 75 73 74 6f | .SNMP.agent.functionality,.custo |
10d300 | 6d 20 73 63 72 69 70 74 73 20 63 61 6e 20 62 65 20 65 78 65 63 75 74 65 64 20 65 76 65 72 79 20 | m.scripts.can.be.executed.every. |
10d320 | 74 69 6d 65 20 74 68 65 20 61 67 65 6e 74 20 69 73 20 62 65 69 6e 67 20 63 61 6c 6c 65 64 2e 20 | time.the.agent.is.being.called.. |
10d340 | 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 60 60 | This.can.be.achieved.by.using.`` |
10d360 | 61 72 62 69 74 72 61 72 79 20 65 78 74 65 6e 73 69 6f 6e 63 6f 6d 6d 61 6e 64 73 60 60 2e 20 54 | arbitrary.extensioncommands``..T |
10d380 | 68 65 20 66 69 72 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 66 75 6e | he.first.step.is.to.create.a.fun |
10d3a0 | 63 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 6f 66 20 63 6f 75 72 73 65 2c 20 74 68 65 6e 20 75 | ctional.script.of.course,.then.u |
10d3c0 | 70 6c 6f 61 64 20 69 74 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 76 | pload.it.to.your.VyOS.instance.v |
10d3e0 | 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 63 70 20 79 6f 75 72 5f 73 63 72 69 70 74 | ia.the.command.``scp.your_script |
10d400 | 2e 73 68 20 76 79 6f 73 40 79 6f 75 72 5f 72 6f 75 74 65 72 3a 2f 63 6f 6e 66 69 67 2f 75 73 65 | .sh.vyos@your_router:/config/use |
10d420 | 72 2d 64 61 74 61 60 60 2e 20 4f 6e 63 65 20 74 68 65 20 73 63 72 69 70 74 20 69 73 20 75 70 6c | r-data``..Once.the.script.is.upl |
10d440 | 6f 61 64 65 64 2c 20 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | oaded,.it.needs.to.be.configured |
10d460 | 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 2e 00 54 6f 20 66 6f 72 77 61 | .via.the.command.below..To.forwa |
10d480 | 72 64 20 61 6c 6c 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 | rd.all.broadcast.packets.receive |
10d4a0 | 64 20 6f 6e 20 60 55 44 50 20 70 6f 72 74 20 31 39 30 30 60 20 6f 6e 20 60 65 74 68 33 60 2c 20 | d.on.`UDP.port.1900`.on.`eth3`,. |
10d4c0 | 60 65 74 68 34 60 20 6f 72 20 60 65 74 68 35 60 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 69 6e | `eth4`.or.`eth5`.to.all.other.in |
10d4e0 | 74 65 72 66 61 63 65 73 20 69 6e 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 | terfaces.in.this.configuration.. |
10d500 | 54 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 43 41 2c 20 74 68 65 20 73 65 72 76 65 72 20 70 | To.generate.the.CA,.the.server.p |
10d520 | 72 69 76 61 74 65 20 6b 65 79 20 61 6e 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 65 20 | rivate.key.and.certificates.the. |
10d540 | 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 | following.commands.can.be.used.. |
10d560 | 54 6f 20 67 65 74 20 69 74 20 74 6f 20 77 6f 72 6b 20 61 73 20 61 6e 20 61 63 63 65 73 73 20 70 | To.get.it.to.work.as.an.access.p |
10d580 | 6f 69 6e 74 20 77 69 74 68 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 79 6f 75 | oint.with.this.configuration.you |
10d5a0 | 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 44 48 43 50 20 73 65 72 76 | .will.need.to.set.up.a.DHCP.serv |
10d5c0 | 65 72 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 74 68 61 74 20 6e 65 74 77 6f 72 6b 2e 20 59 6f | er.to.work.with.that.network..Yo |
10d5e0 | 75 20 63 61 6e 20 2d 20 6f 66 20 63 6f 75 72 73 65 20 2d 20 61 6c 73 6f 20 62 72 69 64 67 65 20 | u.can.-.of.course.-.also.bridge. |
10d600 | 74 68 65 20 57 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 6e 79 20 | the.Wireless.interface.with.any. |
10d620 | 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 20 28 3a 72 65 66 3a 60 62 72 69 64 67 65 2d | configured.bridge.(:ref:`bridge- |
10d640 | 69 6e 74 65 72 66 61 63 65 60 29 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 6f 20 68 61 | interface`).on.the.system..To.ha |
10d660 | 6e 64 20 6f 75 74 20 69 6e 64 69 76 69 64 75 61 6c 20 70 72 65 66 69 78 65 73 20 74 6f 20 79 6f | nd.out.individual.prefixes.to.yo |
10d680 | 75 72 20 63 6c 69 65 6e 74 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 | ur.clients.the.following.configu |
10d6a0 | 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 3a 00 54 6f 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f | ration.is.used:.To.import.it.fro |
10d6c0 | 6d 20 74 68 65 20 66 69 6c 65 73 79 73 74 65 6d 20 75 73 65 3a 00 54 6f 20 6b 6e 6f 77 20 6d 6f | m.the.filesystem.use:.To.know.mo |
10d6e0 | 72 65 20 61 62 6f 75 74 20 73 63 72 69 70 74 69 6e 67 2c 20 63 68 65 63 6b 20 74 68 65 20 3a 72 | re.about.scripting,.check.the.:r |
10d700 | 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 73 65 63 74 69 6f 6e 2e 00 | ef:`command-scripting`.section.. |
10d720 | 54 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 | To.listen.on.both.`eth0`.and.`et |
10d740 | 68 31 60 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 73 6f 20 72 65 70 65 61 74 | h1`.mDNS.packets.and.also.repeat |
10d760 | 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 65 74 68 30 60 20 74 6f 20 60 | .packets.received.on.`eth0`.to.` |
10d780 | 65 74 68 31 60 20 28 61 6e 64 20 76 69 63 65 2d 76 65 72 73 61 29 20 75 73 65 20 74 68 65 20 66 | eth1`.(and.vice-versa).use.the.f |
10d7a0 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 3a 00 54 6f 20 6d 61 6e 69 70 75 6c 61 74 65 | ollowing.commands:.To.manipulate |
10d7c0 | 20 6f 72 20 64 69 73 70 6c 61 79 20 41 52 50 5f 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 2c 20 | .or.display.ARP_.table.entries,. |
10d7e0 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6d 70 6c 65 | the.following.commands.are.imple |
10d800 | 6d 65 6e 74 65 64 2e 00 54 6f 20 70 65 72 66 6f 72 6d 20 61 20 67 72 61 63 65 66 75 6c 20 73 68 | mented..To.perform.a.graceful.sh |
10d820 | 75 74 64 6f 77 6e 2c 20 74 68 65 20 46 52 52 20 60 60 67 72 61 63 65 66 75 6c 2d 72 65 73 74 61 | utdown,.the.FRR.``graceful-resta |
10d840 | 72 74 20 70 72 65 70 61 72 65 20 69 70 20 6f 73 70 66 60 60 20 45 58 45 43 2d 6c 65 76 65 6c 20 | rt.prepare.ip.ospf``.EXEC-level. |
10d860 | 63 6f 6d 6d 61 6e 64 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 73 73 75 65 64 20 62 65 66 6f 72 | command.needs.to.be.issued.befor |
10d880 | 65 20 72 65 73 74 61 72 74 69 6e 67 20 74 68 65 20 6f 73 70 66 64 20 64 61 65 6d 6f 6e 2e 00 54 | e.restarting.the.ospfd.daemon..T |
10d8a0 | 6f 20 72 65 71 75 65 73 74 20 61 20 2f 35 36 20 70 72 65 66 69 78 20 66 72 6f 6d 20 79 6f 75 72 | o.request.a./56.prefix.from.your |
10d8c0 | 20 49 53 50 20 75 73 65 3a 00 54 6f 20 72 65 73 74 61 72 74 20 74 68 65 20 44 48 43 50 76 36 20 | .ISP.use:.To.restart.the.DHCPv6. |
10d8e0 | 73 65 72 76 65 72 00 54 6f 20 73 65 74 75 70 20 53 4e 41 54 2c 20 77 65 20 6e 65 65 64 20 74 6f | server.To.setup.SNAT,.we.need.to |
10d900 | 20 6b 6e 6f 77 3a 00 54 6f 20 73 65 74 75 70 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 | .know:.To.setup.a.destination.NA |
10d920 | 54 20 72 75 6c 65 20 77 65 20 6e 65 65 64 20 74 6f 20 67 61 74 68 65 72 3a 00 54 6f 20 75 70 64 | T.rule.we.need.to.gather:.To.upd |
10d940 | 61 74 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 2c 20 56 79 4f 53 20 61 6c 73 6f 20 73 68 69 70 | ate.the.firmware,.VyOS.also.ship |
10d960 | 73 20 74 68 65 20 60 71 6d 69 2d 66 69 72 6d 77 61 72 65 2d 75 70 64 61 74 65 60 20 62 69 6e 61 | s.the.`qmi-firmware-update`.bina |
10d980 | 72 79 2e 20 54 6f 20 75 70 67 72 61 64 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 6f 66 20 61 | ry..To.upgrade.the.firmware.of.a |
10d9a0 | 6e 20 65 2e 67 2e 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 6f | n.e.g..Sierra.Wireless.MC7710.mo |
10d9c0 | 64 75 6c 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 70 72 6f 76 69 64 65 64 20 69 6e | dule.to.the.firmware.provided.in |
10d9e0 | 20 74 68 65 20 66 69 6c 65 20 60 60 39 39 39 39 39 39 39 5f 39 39 39 39 39 39 39 5f 39 32 30 30 | .the.file.``9999999_9999999_9200 |
10da00 | 5f 30 33 2e 30 35 2e 31 34 2e 30 30 5f 30 30 5f 67 65 6e 65 72 69 63 5f 30 30 30 2e 30 30 30 5f | _03.05.14.00_00_generic_000.000_ |
10da20 | 30 30 31 5f 53 50 4b 47 5f 4d 43 2e 63 77 65 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 | 001_SPKG_MC.cwe``.use.the.follow |
10da40 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 75 73 65 20 61 20 52 41 44 49 55 53 20 73 65 72 | ing.command:.To.use.a.RADIUS.ser |
10da60 | 76 65 72 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 62 61 6e 64 77 | ver.for.authentication.and.bandw |
10da80 | 69 64 74 68 2d 73 68 61 70 69 6e 67 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d | idth-shaping,.the.following.exam |
10daa0 | 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 | ple.configuration.can.be.used..T |
10dac0 | 6f 20 75 73 65 20 61 20 72 61 64 69 75 73 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6e 65 65 64 20 | o.use.a.radius.server,.you.need. |
10dae0 | 74 6f 20 73 77 69 74 63 68 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 | to.switch.to.authentication.mode |
10db00 | 20 52 41 44 49 55 53 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 00 54 | .RADIUS.and.then.configure.it..T |
10db20 | 6f 20 75 73 65 20 73 75 63 68 20 61 20 73 65 72 76 69 63 65 2c 20 6f 6e 65 20 6d 75 73 74 20 64 | o.use.such.a.service,.one.must.d |
10db40 | 65 66 69 6e 65 20 61 20 6c 6f 67 69 6e 2c 20 70 61 73 73 77 6f 72 64 2c 20 6f 6e 65 20 6f 72 20 | efine.a.login,.password,.one.or. |
10db60 | 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 6e 61 6d 65 73 2c 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 | multiple.hostnames,.protocol.and |
10db80 | 20 73 65 72 76 65 72 2e 00 54 6f 20 75 73 65 20 74 68 65 20 53 61 6c 74 2d 4d 69 6e 69 6f 6e 2c | .server..To.use.the.Salt-Minion, |
10dba0 | 20 61 20 72 75 6e 6e 69 6e 67 20 53 61 6c 74 2d 4d 61 73 74 65 72 20 69 73 20 72 65 71 75 69 72 | .a.running.Salt-Master.is.requir |
10dbc0 | 65 64 2e 20 59 6f 75 20 63 61 6e 20 66 69 6e 64 20 6d 6f 72 65 20 69 6e 20 74 68 65 20 60 53 61 | ed..You.can.find.more.in.the.`Sa |
10dbe0 | 6c 74 20 50 6f 6a 65 63 74 20 44 6f 63 75 6d 65 6e 74 61 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f | lt.Poject.Documentaion.<https:// |
10dc00 | 64 6f 63 73 2e 73 61 6c 74 70 72 6f 6a 65 63 74 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f | docs.saltproject.io/en/latest/co |
10dc20 | 6e 74 65 6e 74 73 2e 68 74 6d 6c 3e 60 5f 00 54 6f 20 75 73 65 20 74 68 69 73 20 66 75 6c 6c 20 | ntents.html>`_.To.use.this.full. |
10dc40 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 61 73 75 6d 65 20 61 20 70 75 62 6c 69 63 20 | configuration.we.asume.a.public. |
10dc60 | 61 63 63 65 73 73 69 62 6c 65 20 68 6f 73 74 6e 61 6d 65 2e 00 54 6f 70 6f 6c 6f 67 79 3a 00 54 | accessible.hostname..Topology:.T |
10dc80 | 6f 70 6f 6c 6f 67 79 3a 20 50 43 34 20 2d 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 | opology:.PC4.-.Leaf2.-.Spine1.-. |
10dca0 | 4c 65 61 66 33 20 2d 20 50 43 35 00 54 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 72 61 63 6b | Leaf3.-.PC5.Toubleshooting.Track |
10dcc0 | 00 54 72 61 63 6b 20 6f 70 74 69 6f 6e 20 74 6f 20 74 72 61 63 6b 20 6e 6f 6e 20 56 52 52 50 20 | .Track.option.to.track.non.VRRP. |
10dce0 | 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 73 2e 20 56 52 52 50 20 63 68 61 6e 67 65 73 20 73 | interface.states..VRRP.changes.s |
10dd00 | 74 61 74 75 73 20 74 6f 20 60 60 46 41 55 4c 54 60 60 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 | tatus.to.``FAULT``.if.one.of.the |
10dd20 | 20 74 72 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 73 74 61 74 65 20 60 60 64 6f 77 | .track.interfaces.in.state.``dow |
10dd40 | 6e 60 60 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 20 42 47 50 20 64 69 64 20 6e 6f 74 20 68 61 76 | n``..Traditional.BGP.did.not.hav |
10dd60 | 65 20 74 68 65 20 66 65 61 74 75 72 65 20 74 6f 20 64 65 74 65 63 74 20 61 20 72 65 6d 6f 74 65 | e.the.feature.to.detect.a.remote |
10dd80 | 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 65 2e 67 2e 20 77 68 65 74 68 | .peer's.capabilities,.e.g..wheth |
10dda0 | 65 72 20 69 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 70 72 65 66 69 78 20 74 79 70 65 73 20 6f 74 | er.it.can.handle.prefix.types.ot |
10ddc0 | 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 72 6f 75 74 65 73 2e 20 54 68 | her.than.IPv4.unicast.routes..Th |
10dde0 | 69 73 20 77 61 73 20 61 20 62 69 67 20 70 72 6f 62 6c 65 6d 20 75 73 69 6e 67 20 4d 75 6c 74 69 | is.was.a.big.problem.using.Multi |
10de00 | 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 20 69 6e 20 61 6e | protocol.Extension.for.BGP.in.an |
10de20 | 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 3a 72 66 63 3a 60 32 38 34 32 | .operational.network..:rfc:`2842 |
10de40 | 60 20 61 64 6f 70 74 65 64 20 61 20 66 65 61 74 75 72 65 20 63 61 6c 6c 65 64 20 43 61 70 61 62 | `.adopted.a.feature.called.Capab |
10de60 | 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 2a 62 67 70 64 2a 20 75 73 65 20 74 68 | ility.Negotiation..*bgpd*.use.th |
10de80 | 69 73 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 64 65 74 | is.Capability.Negotiation.to.det |
10dea0 | 65 63 74 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 | ect.the.remote.peer's.capabiliti |
10dec0 | 65 73 2e 20 49 66 20 61 20 70 65 65 72 20 69 73 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 | es..If.a.peer.is.only.configured |
10dee0 | 20 61 73 20 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 6e 65 69 67 68 62 6f 72 2c 20 2a 62 | .as.an.IPv4.unicast.neighbor,.*b |
10df00 | 67 70 64 2a 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 74 68 65 73 65 20 43 61 70 61 62 69 6c | gpd*.does.not.send.these.Capabil |
10df20 | 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 20 28 61 74 20 6c 65 61 73 | ity.Negotiation.packets.(at.leas |
10df40 | 74 20 6e 6f 74 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 20 6f 70 74 69 6f 6e 61 6c 20 42 47 50 20 | t.not.unless.other.optional.BGP. |
10df60 | 66 65 61 74 75 72 65 73 20 72 65 71 75 69 72 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f | features.require.capability.nego |
10df80 | 74 69 61 74 69 6f 6e 29 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 66 69 72 65 77 61 6c 6c | tiation)..Traditionally.firewall |
10dfa0 | 73 20 77 65 65 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 63 | s.weere.configured.with.the.conc |
10dfc0 | 65 70 74 20 6f 66 20 64 61 74 61 20 67 6f 69 6e 67 20 69 6e 20 61 6e 64 20 6f 75 74 20 6f 66 20 | ept.of.data.going.in.and.out.of. |
10dfe0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 6a 75 73 74 20 6c 69 | an.interface..The.router.just.li |
10e000 | 73 74 65 6e 65 64 20 74 6f 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 74 68 72 6f 75 | stened.to.the.data.flowing.throu |
10e020 | 67 68 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 73 20 72 65 71 75 69 72 65 64 20 69 66 | gh.and.responding.as.required.if |
10e040 | 20 69 74 20 77 61 73 20 64 69 72 65 63 74 65 64 20 61 74 20 74 68 65 20 72 6f 75 74 65 72 20 69 | .it.was.directed.at.the.router.i |
10e060 | 74 73 65 6c 66 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 68 61 72 64 77 61 72 65 20 72 6f | tself..Traditionally.hardware.ro |
10e080 | 75 74 65 72 73 20 69 6d 70 6c 65 6d 65 6e 74 20 49 50 73 65 63 20 65 78 63 6c 75 73 69 76 65 6c | uters.implement.IPsec.exclusivel |
10e0a0 | 79 20 64 75 65 20 74 6f 20 72 65 6c 61 74 69 76 65 20 65 61 73 65 20 6f 66 20 69 6d 70 6c 65 6d | y.due.to.relative.ease.of.implem |
10e0c0 | 65 6e 74 69 6e 67 20 69 74 20 69 6e 20 68 61 72 64 77 61 72 65 20 61 6e 64 20 69 6e 73 75 66 66 | enting.it.in.hardware.and.insuff |
10e0e0 | 69 63 69 65 6e 74 20 43 50 55 20 70 6f 77 65 72 20 66 6f 72 20 64 6f 69 6e 67 20 65 6e 63 72 79 | icient.CPU.power.for.doing.encry |
10e100 | 70 74 69 6f 6e 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 53 69 6e 63 65 20 56 79 4f 53 20 69 73 | ption.in.software..Since.VyOS.is |
10e120 | 20 61 20 73 6f 66 74 77 61 72 65 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 69 73 20 6c 65 73 73 | .a.software.router,.this.is.less |
10e140 | 20 6f 66 20 61 20 63 6f 6e 63 65 72 6e 2e 20 4f 70 65 6e 56 50 4e 20 68 61 73 20 62 65 65 6e 20 | .of.a.concern..OpenVPN.has.been. |
10e160 | 77 69 64 65 6c 79 20 75 73 65 64 20 6f 6e 20 55 4e 49 58 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 | widely.used.on.UNIX.platform.for |
10e180 | 20 61 20 6c 6f 6e 67 20 74 69 6d 65 20 61 6e 64 20 69 73 20 61 20 70 6f 70 75 6c 61 72 20 6f 70 | .a.long.time.and.is.a.popular.op |
10e1a0 | 74 69 6f 6e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 56 50 4e 2c 20 74 68 6f 75 | tion.for.remote.access.VPN,.thou |
10e1c0 | 67 68 20 69 74 27 73 20 61 6c 73 6f 20 63 61 70 61 62 6c 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d | gh.it's.also.capable.of.site-to- |
10e1e0 | 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 | site.connections..Traffic.Filter |
10e200 | 73 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f | s.Traffic.Filters.are.used.to.co |
10e220 | 6e 74 72 6f 6c 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 | ntrol.which.packets.will.have.th |
10e240 | 65 20 64 65 66 69 6e 65 64 20 4e 41 54 20 72 75 6c 65 73 20 61 70 70 6c 69 65 64 2e 20 46 69 76 | e.defined.NAT.rules.applied..Fiv |
10e260 | 65 20 64 69 66 66 65 72 65 6e 74 20 66 69 6c 74 65 72 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 | e.different.filters.can.be.appli |
10e280 | 65 64 20 77 69 74 68 69 6e 20 61 20 4e 41 54 20 72 75 6c 65 2e 00 54 72 61 66 66 69 63 20 50 6f | ed.within.a.NAT.rule..Traffic.Po |
10e2a0 | 6c 69 63 79 00 54 72 61 66 66 69 63 20 63 61 6e 6e 6f 74 20 66 6c 6f 77 20 62 65 74 77 65 65 6e | licy.Traffic.cannot.flow.between |
10e2c0 | 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 6e 79 20 69 | .zone.member.interface.and.any.i |
10e2e0 | 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 6e 6f 74 20 61 20 7a 6f 6e 65 20 6d 65 6d 62 | nterface.that.is.not.a.zone.memb |
10e300 | 65 72 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 | er..Traffic.from.multicast.sourc |
10e320 | 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 | es.will.go.to.the.Rendezvous.Poi |
10e340 | 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 | nt,.and.receivers.will.pull.it.f |
10e360 | 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 | rom.a.shared.tree.using.:abbr:`I |
10e380 | 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 | GMP.(Internet.Group.Management.P |
10e3a0 | 72 6f 74 6f 63 6f 6c 29 60 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 | rotocol)`..Traffic.from.multicas |
10e3c0 | 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 | t.sources.will.go.to.the.Rendezv |
10e3e0 | 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 | ous.Point,.and.receivers.will.pu |
10e400 | 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 49 | ll.it.from.a.shared.tree.using.I |
10e420 | 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 | GMP.(Internet.Group.Management.P |
10e440 | 72 6f 74 6f 63 6f 6c 29 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 | rotocol)..Traffic.from.multicast |
10e460 | 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f | .sources.will.go.to.the.Rendezvo |
10e480 | 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c | us.Point,.and.receivers.will.pul |
10e4a0 | 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 4d 4c | l.it.from.a.shared.tree.using.ML |
10e4c0 | 44 20 28 4d 75 6c 74 69 63 61 73 74 20 4c 69 73 74 65 6e 65 72 20 44 69 73 63 6f 76 65 72 79 29 | D.(Multicast.Listener.Discovery) |
10e4e0 | 2e 00 54 72 61 66 66 69 63 20 6d 75 73 74 20 62 65 20 73 79 6d 6d 65 74 72 69 63 00 54 72 61 66 | ..Traffic.must.be.symmetric.Traf |
10e500 | 66 69 63 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 | fic.which.is.received.by.the.rou |
10e520 | 74 65 72 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 6d 65 6d | ter.on.an.interface.which.is.mem |
10e540 | 62 65 72 20 6f 66 20 61 20 62 72 69 64 67 65 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 6f 6e 20 | ber.of.a.bridge.is.processed.on. |
10e560 | 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 | the.**Bridge.Layer**..A.simplifi |
10e580 | 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 69 73 20 | ed.packet.flow.diagram.for.this. |
10e5a0 | 6c 61 79 65 72 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 72 61 6e 73 69 74 69 6f 6e 20 | layer.is.shown.next:.Transition. |
10e5c0 | 73 63 72 69 70 74 73 00 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 63 61 6e 20 68 | scripts.Transition.scripts.can.h |
10e5e0 | 65 6c 70 20 79 6f 75 20 69 6d 70 6c 65 6d 65 6e 74 20 76 61 72 69 6f 75 73 20 66 69 78 75 70 73 | elp.you.implement.various.fixups |
10e600 | 2c 20 73 75 63 68 20 61 73 20 73 74 61 72 74 69 6e 67 20 61 6e 64 20 73 74 6f 70 70 69 6e 67 20 | ,.such.as.starting.and.stopping. |
10e620 | 73 65 72 76 69 63 65 73 2c 20 6f 72 20 65 76 65 6e 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 | services,.or.even.modifying.the. |
10e640 | 56 79 4f 53 20 63 6f 6e 66 69 67 20 6f 6e 20 56 52 52 50 20 74 72 61 6e 73 69 74 69 6f 6e 2e 20 | VyOS.config.on.VRRP.transition.. |
10e660 | 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 | This.setup.will.make.the.VRRP.pr |
10e680 | 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 | ocess.execute.the.``/config/scri |
10e6a0 | 70 74 73 2f 76 72 72 70 2d 66 61 69 6c 2e 73 68 60 60 20 77 69 74 68 20 61 72 67 75 6d 65 6e 74 | pts/vrrp-fail.sh``.with.argument |
10e6c0 | 20 60 60 46 6f 6f 60 60 20 77 68 65 6e 20 56 52 52 50 20 66 61 69 6c 73 2c 20 61 6e 64 20 74 68 | .``Foo``.when.VRRP.fails,.and.th |
10e6e0 | 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 6d 61 73 74 65 72 2e | e.``/config/scripts/vrrp-master. |
10e700 | 73 68 60 60 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 63 6f 6d 65 73 20 74 68 65 | sh``.when.the.router.becomes.the |
10e720 | 20 6d 61 73 74 65 72 3a 00 54 72 61 6e 73 70 61 72 65 6e 74 20 50 72 6f 78 79 00 54 72 6f 75 62 | .master:.Transparent.Proxy.Troub |
10e740 | 6c 65 73 68 6f 6f 74 69 6e 67 00 54 75 6e 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 00 54 75 6e 6e 65 | leshooting.Tuning.commands.Tunne |
10e760 | 6c 00 54 75 6e 6e 65 6c 20 6b 65 79 73 00 54 75 6e 6e 65 6c 20 70 61 73 73 77 6f 72 64 20 75 73 | l.Tunnel.keys.Tunnel.password.us |
10e780 | 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c | ed.to.authenticate.the.client.(L |
10e7a0 | 41 43 29 00 54 77 6f 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 | AC).Two.environment.variables.ar |
10e7c0 | 65 20 61 76 61 69 6c 61 62 6c 65 3a 00 54 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 | e.available:.Two.interfaces.are. |
10e7e0 | 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c | going.to.be.used.in.the.flowtabl |
10e800 | 65 73 3a 20 65 74 68 30 20 61 6e 64 20 65 74 68 31 00 54 77 6f 20 6e 65 77 20 66 69 6c 65 73 20 | es:.eth0.and.eth1.Two.new.files. |
10e820 | 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 20 61 6e 64 | ``/config/auth/id_rsa_rpki``.and |
10e840 | 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 2e 70 75 62 60 | .``/config/auth/id_rsa_rpki.pub` |
10e860 | 60 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e 00 54 77 6f 20 72 6f 75 74 65 72 73 20 63 | `.will.be.created..Two.routers.c |
10e880 | 6f 6e 6e 65 63 74 65 64 20 62 6f 74 68 20 76 69 61 20 65 74 68 31 20 74 68 72 6f 75 67 68 20 61 | onnected.both.via.eth1.through.a |
10e8a0 | 6e 20 75 6e 74 72 75 73 74 65 64 20 73 77 69 74 63 68 00 54 79 70 65 20 6f 66 20 6d 65 74 72 69 | n.untrusted.switch.Type.of.metri |
10e8c0 | 63 73 20 67 72 6f 75 70 69 6e 67 20 77 68 65 6e 20 70 75 73 68 20 74 6f 20 41 7a 75 72 65 20 44 | cs.grouping.when.push.to.Azure.D |
10e8e0 | 61 74 61 20 45 78 70 6c 6f 72 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 74 | ata.Explorer..The.default.is.``t |
10e900 | 61 62 6c 65 2d 70 65 72 2d 6d 65 74 72 69 63 60 60 2e 00 54 79 70 69 63 61 6c 6c 79 2c 20 61 20 | able-per-metric``..Typically,.a. |
10e920 | 31 2d 74 6f 2d 31 20 4e 41 54 20 72 75 6c 65 20 6f 6d 69 74 73 20 74 68 65 20 64 65 73 74 69 6e | 1-to-1.NAT.rule.omits.the.destin |
10e940 | 61 74 69 6f 6e 20 70 6f 72 74 20 28 61 6c 6c 20 70 6f 72 74 73 29 20 61 6e 64 20 72 65 70 6c 61 | ation.port.(all.ports).and.repla |
10e960 | 63 65 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 77 69 74 68 20 65 69 74 68 65 72 20 2a 2a 61 | ces.the.protocol.with.either.**a |
10e980 | 6c 6c 2a 2a 20 6f 72 20 2a 2a 69 70 2a 2a 2e 00 55 44 50 20 42 72 6f 61 64 63 61 73 74 20 52 65 | ll**.or.**ip**..UDP.Broadcast.Re |
10e9a0 | 6c 61 79 00 55 44 50 20 6d 6f 64 65 20 77 6f 72 6b 73 20 62 65 74 74 65 72 20 77 69 74 68 20 4e | lay.UDP.mode.works.better.with.N |
10e9c0 | 41 54 3a 00 55 44 50 20 70 6f 72 74 20 31 37 30 31 20 66 6f 72 20 49 50 73 65 63 00 55 44 50 20 | AT:.UDP.port.1701.for.IPsec.UDP. |
10e9e0 | 70 6f 72 74 20 34 35 30 30 20 28 4e 41 54 2d 54 29 00 55 44 50 20 70 6f 72 74 20 35 30 30 20 28 | port.4500.(NAT-T).UDP.port.500.( |
10ea00 | 49 4b 45 29 00 55 52 4c 20 46 69 6c 74 65 72 69 6e 67 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 | IKE).URL.Filtering.is.provided.b |
10ea20 | 79 20 53 71 75 69 64 47 75 61 72 64 5f 2e 00 55 52 4c 20 66 69 6c 74 65 72 69 6e 67 00 55 52 4c | y.SquidGuard_..URL.filtering.URL |
10ea40 | 20 77 69 74 68 20 73 69 67 6e 61 74 75 72 65 20 6f 66 20 6d 61 73 74 65 72 20 66 6f 72 20 61 75 | .with.signature.of.master.for.au |
10ea60 | 74 68 20 72 65 70 6c 79 20 76 65 72 69 66 69 63 61 74 69 6f 6e 00 55 53 42 20 74 6f 20 73 65 72 | th.reply.verification.USB.to.ser |
10ea80 | 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 6d 6f 73 74 20 | ial.converters.will.handle.most. |
10eaa0 | 6f 66 20 74 68 65 69 72 20 77 6f 72 6b 20 69 6e 20 73 6f 66 74 77 61 72 65 20 73 6f 20 79 6f 75 | of.their.work.in.software.so.you |
10eac0 | 20 73 68 6f 75 6c 64 20 62 65 20 63 61 72 65 66 75 6c 6c 20 77 69 74 68 20 74 68 65 20 73 65 6c | .should.be.carefull.with.the.sel |
10eae0 | 65 63 74 65 64 20 62 61 75 64 72 61 74 65 20 61 73 20 73 6f 6d 65 20 74 69 6d 65 73 20 74 68 65 | ected.baudrate.as.some.times.the |
10eb00 | 79 20 63 61 6e 27 74 20 63 6f 70 65 20 77 69 74 68 20 74 68 65 20 65 78 70 65 63 74 65 64 20 73 | y.can't.cope.with.the.expected.s |
10eb20 | 70 65 65 64 2e 00 55 55 43 50 20 73 75 62 73 79 73 74 65 6d 00 55 6e 69 63 61 73 74 00 55 6e 69 | peed..UUCP.subsystem.Unicast.Uni |
10eb40 | 63 61 73 74 20 56 52 52 50 00 55 6e 69 63 61 73 74 20 56 58 4c 41 4e 00 55 6e 69 74 20 6f 66 20 | cast.VRRP.Unicast.VXLAN.Unit.of. |
10eb60 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 4d 42 2e 00 55 6e 69 74 73 00 55 6e 74 69 6c 20 | this.command.is.MB..Units.Until. |
10eb80 | 56 79 4f 53 20 31 2e 34 2c 20 74 68 65 20 6f 6e 6c 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 73 69 | VyOS.1.4,.the.only.option.for.si |
10eba0 | 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 20 77 69 74 68 6f 75 74 20 50 4b 49 20 77 | te-to-site.OpenVPN.without.PKI.w |
10ebc0 | 61 73 20 74 6f 20 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 2e 20 54 68 61 74 20 | as.to.use.pre-shared.keys..That. |
10ebe0 | 6f 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 62 75 74 20 69 74 | option.is.still.available.but.it |
10ec00 | 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 | .is.deprecated.and.will.be.remov |
10ec20 | 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f | ed.in.the.future..However,.if.yo |
10ec40 | 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 74 75 6e 6e 65 6c 20 74 6f 20 61 6e 20 | u.need.to.set.up.a.tunnel.to.an. |
10ec60 | 6f 6c 64 65 72 20 56 79 4f 53 20 76 65 72 73 69 6f 6e 20 6f 72 20 61 20 73 79 73 74 65 6d 20 77 | older.VyOS.version.or.a.system.w |
10ec80 | 69 74 68 20 6f 6c 64 65 72 20 4f 70 65 6e 56 50 4e 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 | ith.older.OpenVPN,.you.need.to.s |
10eca0 | 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 2e | till.need.to.know.how.to.use.it. |
10ecc0 | 00 55 70 20 74 6f 20 73 65 76 65 6e 20 71 75 65 75 65 73 20 2d 64 65 66 69 6e 65 64 20 61 73 20 | .Up.to.seven.queues.-defined.as. |
10ece0 | 63 6c 61 73 73 65 73 5f 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 69 6f 72 69 74 69 | classes_.with.different.prioriti |
10ed00 | 65 73 2d 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 50 61 63 6b 65 74 73 20 61 | es-.can.be.configured..Packets.a |
10ed20 | 72 65 20 70 6c 61 63 65 64 20 69 6e 74 6f 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 61 | re.placed.into.queues.based.on.a |
10ed40 | 73 73 6f 63 69 61 74 65 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 2e 20 50 61 63 6b 65 74 | ssociated.match.criteria..Packet |
10ed60 | 73 20 61 72 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 66 72 6f 6d 20 74 68 65 20 71 75 65 75 65 | s.are.transmitted.from.the.queue |
10ed80 | 73 20 69 6e 20 70 72 69 6f 72 69 74 79 20 6f 72 64 65 72 2e 20 49 66 20 63 6c 61 73 73 65 73 20 | s.in.priority.order..If.classes. |
10eda0 | 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 61 72 65 20 62 65 69 6e 67 | with.a.higher.priority.are.being |
10edc0 | 20 66 69 6c 6c 65 64 20 77 69 74 68 20 70 61 63 6b 65 74 73 20 63 6f 6e 74 69 6e 75 6f 75 73 6c | .filled.with.packets.continuousl |
10ede0 | 79 2c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 63 | y,.packets.from.lower.priority.c |
10ee00 | 6c 61 73 73 65 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 | lasses.will.only.be.transmitted. |
10ee20 | 61 66 74 65 72 20 74 72 61 66 66 69 63 20 76 6f 6c 75 6d 65 20 66 72 6f 6d 20 68 69 67 68 65 72 | after.traffic.volume.from.higher |
10ee40 | 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 20 64 65 63 72 65 61 73 65 73 2e 00 55 70 64 | .priority.classes.decreases..Upd |
10ee60 | 61 74 65 00 55 70 64 61 74 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 00 55 70 64 61 74 | ate.Update.container.image.Updat |
10ee80 | 65 20 67 65 6f 69 70 20 64 61 74 61 62 61 73 65 00 55 70 64 61 74 65 73 00 55 70 64 61 74 65 73 | e.geoip.database.Updates.Updates |
10eea0 | 20 66 72 6f 6d 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 61 72 65 | .from.the.RPKI.cache.servers.are |
10eec0 | 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 69 65 64 20 61 6e 64 20 70 61 74 68 20 73 65 6c 65 63 | .directly.applied.and.path.selec |
10eee0 | 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 28 53 6f | tion.is.updated.accordingly..(So |
10ef00 | 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c | ft.reconfiguration.must.be.enabl |
10ef20 | 65 64 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 55 70 6c 6f 61 64 20 62 61 6e | ed.for.this.to.work)..Upload.ban |
10ef40 | 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 | dwidth.limit.in.kbit/s.for.`<use |
10ef60 | 72 3e 60 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b | r>`..Upload.bandwidth.limit.in.k |
10ef80 | 62 69 74 2f 73 20 66 6f 72 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 | bit/s.for.for.user.on.interface. |
10efa0 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 55 70 6f 6e 20 72 65 63 65 70 74 69 6f 6e 20 6f 66 | `<interface>`..Upon.reception.of |
10efc0 | 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 2c 20 77 68 65 6e 20 61 20 72 65 73 70 | .an.incoming.packet,.when.a.resp |
10efe0 | 6f 6e 73 65 20 69 73 20 73 65 6e 74 2c 20 69 74 20 6d 69 67 68 74 20 62 65 20 64 65 73 69 72 65 | onse.is.sent,.it.might.be.desire |
10f000 | 64 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 69 74 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 | d.to.ensure.that.it.leaves.from. |
10f020 | 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 74 68 65 20 69 6e 62 6f 75 6e | the.same.interface.as.the.inboun |
10f040 | 64 20 6f 6e 65 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 65 | d.one..This.can.be.achieved.by.e |
10f060 | 6e 61 62 6c 69 6e 67 20 73 74 69 63 6b 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 74 68 | nabling.sticky.connections.in.th |
10f080 | 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 00 55 70 6f 6e 20 73 68 75 74 64 6f 77 6e 2c | e.load.balancing:.Upon.shutdown, |
10f0a0 | 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 77 69 6c 6c 20 64 65 70 72 65 63 61 74 65 20 74 68 65 20 | .this.option.will.deprecate.the. |
10f0c0 | 70 72 65 66 69 78 20 62 79 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 69 74 20 69 6e 20 74 68 65 20 73 | prefix.by.announcing.it.in.the.s |
10f0e0 | 68 75 74 64 6f 77 6e 20 52 41 00 55 73 65 20 38 30 32 2e 31 31 6e 20 70 72 6f 74 6f 63 6f 6c 00 | hutdown.RA.Use.802.11n.protocol. |
10f100 | 55 73 65 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 66 66 69 65 e2 80 93 48 65 6c 6c 6d 61 6e 29 | Use.:abbr:`DH.(Diffie...Hellman) |
10f120 | 60 20 70 61 72 61 6d 65 74 65 72 73 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 2e | `.parameters.from.PKI.subsystem. |
10f140 | 20 4d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 32 30 34 38 20 62 69 74 73 20 69 6e 20 6c | .Must.be.at.least.2048.bits.in.l |
10f160 | 65 6e 67 74 68 2e 00 55 73 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 | ength..Use.CA.certificate.from.P |
10f180 | 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 44 79 6e 44 4e 53 20 61 73 20 79 6f 75 72 20 | KI.subsystem.Use.DynDNS.as.your. |
10f1a0 | 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 54 4c 53 20 62 75 74 20 | preferred.provider:.Use.TLS.but. |
10f1c0 | 73 6b 69 70 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 00 55 73 65 20 54 4c 53 20 65 6e 63 | skip.host.validation.Use.TLS.enc |
10f1e0 | 72 79 70 74 69 6f 6e 2e 00 55 73 65 20 60 3c 73 75 62 6e 65 74 3e 60 20 61 73 20 74 68 65 20 49 | ryption..Use.`<subnet>`.as.the.I |
10f200 | 50 20 70 6f 6f 6c 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 63 6c 69 65 6e 74 | P.pool.for.all.connecting.client |
10f220 | 73 2e 00 55 73 65 20 60 60 73 68 6f 77 20 6c 6f 67 20 7c 20 73 74 72 69 70 2d 70 72 69 76 61 74 | s..Use.``show.log.|.strip-privat |
10f240 | 65 60 60 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 69 64 65 20 70 72 69 76 61 74 65 20 | e``.if.you.want.to.hide.private. |
10f260 | 64 61 74 61 20 77 68 65 6e 20 73 68 61 72 69 6e 67 20 79 6f 75 72 20 6c 6f 67 73 2e 00 55 73 65 | data.when.sharing.your.logs..Use |
10f280 | 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 | .`delete.system.conntrack.module |
10f2a0 | 73 60 20 74 6f 20 64 65 61 63 74 69 76 65 20 61 6c 6c 20 6d 6f 64 75 6c 65 73 2e 00 55 73 65 20 | s`.to.deactive.all.modules..Use. |
10f2c0 | 61 20 70 65 72 73 69 73 74 65 6e 74 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 6f | a.persistent.LDAP.connection..No |
10f2e0 | 72 6d 61 6c 6c 79 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6f 6e | rmally.the.LDAP.connection.is.on |
10f300 | 6c 79 20 6f 70 65 6e 20 77 68 69 6c 65 20 76 61 6c 69 64 61 74 69 6e 67 20 61 20 75 73 65 72 6e | ly.open.while.validating.a.usern |
10f320 | 61 6d 65 20 74 6f 20 70 72 65 73 65 72 76 65 20 72 65 73 6f 75 72 63 65 73 20 61 74 20 74 68 65 | ame.to.preserve.resources.at.the |
10f340 | 20 4c 44 41 50 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 75 73 65 73 | .LDAP.server..This.option.causes |
10f360 | 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 62 65 20 6b 65 70 74 20 | .the.LDAP.connection.to.be.kept. |
10f380 | 6f 70 65 6e 2c 20 61 6c 6c 6f 77 69 6e 67 20 69 74 20 74 6f 20 62 65 20 72 65 75 73 65 64 20 66 | open,.allowing.it.to.be.reused.f |
10f3a0 | 6f 72 20 66 75 72 74 68 65 72 20 75 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 73 2e 00 55 73 65 | or.further.user.validations..Use |
10f3c0 | 20 61 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 | .a.specific.address-group..Prepe |
10f3e0 | 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 | nd.character.``!``.for.inverted. |
10f400 | 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 | matching.criteria..Use.a.specifi |
10f420 | 63 20 64 6f 6d 61 69 6e 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 | c.domain-group..Prepend.characte |
10f440 | 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 | r.``!``.for.inverted.matching.cr |
10f460 | 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 6d 61 63 2d 67 72 6f 75 70 | iteria..Use.a.specific.mac-group |
10f480 | 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e | ..Prepend.character.``!``.for.in |
10f4a0 | 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 | verted.matching.criteria..Use.a. |
10f4c0 | 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 | specific.network-group..Prepend. |
10f4e0 | 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 | character.``!``.for.inverted.mat |
10f500 | 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 70 | ching.criteria..Use.a.specific.p |
10f520 | 6f 72 74 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 | ort-group..Prepend.character.``! |
10f540 | 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 | ``.for.inverted.matching.criteri |
10f560 | 61 2e 00 55 73 65 20 61 64 64 72 65 73 73 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 28 74 68 65 | a..Use.address.`masquerade`.(the |
10f580 | 20 69 6e 74 65 72 66 61 63 65 73 20 70 72 69 6d 61 72 79 20 61 64 64 72 65 73 73 29 20 6f 6e 20 | .interfaces.primary.address).on. |
10f5a0 | 72 75 6c 65 20 33 30 00 55 73 65 20 61 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e | rule.30.Use.an.automatically.gen |
10f5c0 | 65 72 61 74 65 64 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 00 55 | erated.self-signed.certificate.U |
10f5e0 | 73 65 20 61 6e 79 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 | se.any.local.address,.configured |
10f600 | 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 69 66 20 74 68 69 73 20 69 73 20 6e 6f 74 | .on.any.interface.if.this.is.not |
10f620 | 20 73 65 74 2e 00 55 73 65 20 61 75 74 68 20 6b 65 79 20 66 69 6c 65 20 61 74 20 60 60 2f 63 6f | .set..Use.auth.key.file.at.``/co |
10f640 | 6e 66 69 67 2f 61 75 74 68 2f 6d 79 2e 6b 65 79 60 60 00 55 73 65 20 63 65 72 74 69 66 69 63 61 | nfig/auth/my.key``.Use.certifica |
10f660 | 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 63 6f 6e 66 69 67 | te.from.PKI.subsystem.Use.config |
10f680 | 75 72 65 64 20 60 3c 75 72 6c 3e 60 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 79 6f 75 72 20 49 | ured.`<url>`.to.determine.your.I |
10f6a0 | 50 20 61 64 64 72 65 73 73 2e 20 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 6c 6f 61 64 20 60 | P.address..ddclient_.will.load.` |
10f6c0 | 3c 75 72 6c 3e 60 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 65 78 74 72 61 63 74 20 79 6f 75 72 | <url>`.and.tries.to.extract.your |
10f6e0 | 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2e 00 55 | .IP.address.from.the.response..U |
10f700 | 73 65 20 64 65 53 45 43 20 28 64 65 64 79 6e 2e 69 6f 29 20 61 73 20 79 6f 75 72 20 70 72 65 66 | se.deSEC.(dedyn.io).as.your.pref |
10f720 | 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 | erred.provider:.Use.inverse-matc |
10f740 | 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 | h.to.match.anything.except.the.g |
10f760 | 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 55 73 65 20 6c 6f 63 61 6c 20 73 6f | iven.country-codes..Use.local.so |
10f780 | 63 6b 65 74 20 66 6f 72 20 41 50 49 00 55 73 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 66 6f 6f | cket.for.API.Use.local.user.`foo |
10f7a0 | 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 62 61 72 60 00 55 73 65 20 74 61 62 20 63 6f | `.with.password.`bar`.Use.tab.co |
10f7c0 | 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 63 61 74 65 67 6f | mpletion.to.get.a.list.of.catego |
10f7e0 | 72 69 65 73 2e 00 55 73 65 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 70 65 | ries..Use.the.address.of.the.spe |
10f800 | 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 | cified.interface.on.the.local.ma |
10f820 | 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 | chine.as.the.source.address.of.t |
10f840 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | he.connection..Use.the.following |
10f860 | 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 62 75 69 6c 64 20 61 20 6e 61 74 36 36 20 62 61 73 65 64 | .topology.to.build.a.nat66.based |
10f880 | 20 69 73 6f 6c 61 74 65 64 20 6e 65 74 77 6f 72 6b 20 62 65 74 77 65 65 6e 20 69 6e 74 65 72 6e | .isolated.network.between.intern |
10f8a0 | 61 6c 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 73 20 28 64 79 6e 61 6d 69 | al.and.external.networks.(dynami |
10f8c0 | 63 20 70 72 65 66 69 78 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 29 3a 00 55 73 65 20 | c.prefix.is.not.supported):.Use. |
10f8e0 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 74 72 61 6e 73 6c | the.following.topology.to.transl |
10f900 | 61 74 65 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 | ate.internal.user.local.addresse |
10f920 | 73 20 28 60 60 66 63 3a 3a 2f 37 60 60 29 20 74 6f 20 44 48 43 50 76 36 2d 50 44 20 70 72 6f 76 | s.(``fc::/7``).to.DHCPv6-PD.prov |
10f940 | 69 64 65 64 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 61 6e 20 49 53 50 20 63 6f 6e 6e 65 63 | ided.prefixes.from.an.ISP.connec |
10f960 | 74 65 64 20 74 6f 20 61 20 56 79 4f 53 20 48 41 20 70 61 69 72 2e 00 55 73 65 20 74 68 65 20 73 | ted.to.a.VyOS.HA.pair..Use.the.s |
10f980 | 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 | pecified.address.on.the.local.ma |
10f9a0 | 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 | chine.as.the.source.address.of.t |
10f9c0 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4f 6e 6c 79 20 75 73 65 66 75 6c 20 6f 6e 20 73 79 | he.connection..Only.useful.on.sy |
10f9e0 | 73 74 65 6d 73 20 77 69 74 68 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 61 64 64 72 65 73 73 | stems.with.more.than.one.address |
10fa00 | 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c | ..Use.these.commands.if.you.woul |
10fa20 | 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c | d.like.to.set.the.discovery.hell |
10fa40 | 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 74 | o.and.hold.time.parameters.for.t |
10fa60 | 68 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 | he.targeted.LDP.neighbors..Use.t |
10fa80 | 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 | hese.commands.if.you.would.like. |
10faa0 | 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 | to.set.the.discovery.hello.and.h |
10fac0 | 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 | old.time.parameters..Use.these.c |
10fae0 | 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 65 78 70 6f 72 74 69 6e 67 | ommands.to.control.the.exporting |
10fb00 | 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 | .of.forwarding.equivalence.class |
10fb20 | 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 20 | es.(FECs).for.LDP.to.neighbors.. |
10fb40 | 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 | This.would.be.useful.for.example |
10fb60 | 20 6f 6e 20 6f 6e 6c 79 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 | .on.only.announcing.the.labeled. |
10fb80 | 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f | routes.that.are.needed.and.not.o |
10fba0 | 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 | nes.that.are.not.needed,.such.as |
10fbc0 | 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 | .announcing.loopback.interfaces. |
10fbe0 | 61 6e 64 20 6e 6f 20 6f 74 68 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 | and.no.others..Use.these.command |
10fc00 | 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 69 6d 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f | s.to.control.the.importing.of.fo |
10fc20 | 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 | rwarding.equivalence.classes.(FE |
10fc40 | 43 73 29 20 66 6f 72 20 4c 44 50 20 66 72 6f 6d 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 | Cs).for.LDP.from.neighbors..This |
10fc60 | 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 | .would.be.useful.for.example.on. |
10fc80 | 6f 6e 6c 79 20 61 63 63 65 70 74 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 | only.accepting.the.labeled.route |
10fca0 | 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 | s.that.are.needed.and.not.ones.t |
10fcc0 | 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 63 63 65 | hat.are.not.needed,.such.as.acce |
10fce0 | 70 74 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 72 65 | pting.loopback.interfaces.and.re |
10fd00 | 6a 65 63 74 69 6e 67 20 61 6c 6c 20 6f 74 68 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d | jecting.all.others..Use.this.PIM |
10fd20 | 20 63 6f 6d 6d 61 6e 64 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 | .command.in.the.selected.interfa |
10fd40 | 63 65 20 74 6f 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 28 31 2d 34 32 39 34 39 36 | ce.to.set.the.priority.(1-429496 |
10fd60 | 37 32 39 35 29 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 69 6e 20 74 | 7295).you.want.to.influence.in.t |
10fd80 | 68 65 20 65 6c 65 63 74 69 6f 6e 20 6f 66 20 61 20 6e 6f 64 65 20 74 6f 20 62 65 63 6f 6d 65 20 | he.election.of.a.node.to.become. |
10fda0 | 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 20 66 6f 72 20 61 20 4c 41 4e 20 | the.Designated.Router.for.a.LAN. |
10fdc0 | 73 65 67 6d 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 69 73 | segment..The.default.priority.is |
10fde0 | 20 31 2c 20 73 65 74 20 61 20 20 68 69 67 68 65 72 20 76 61 6c 75 65 20 74 6f 20 67 69 76 65 20 | .1,.set.a..higher.value.to.give. |
10fe00 | 74 68 65 20 72 6f 75 74 65 72 20 6d 6f 72 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 74 68 | the.router.more.preference.in.th |
10fe20 | 65 20 44 52 20 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 | e.DR.election.process..Use.this. |
10fe40 | 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f | PIM.command.to.modify.the.time.o |
10fe60 | 75 74 20 76 61 6c 75 65 20 28 33 31 2d 36 30 30 30 30 20 73 65 63 6f 6e 64 73 29 20 66 6f 72 20 | ut.value.(31-60000.seconds).for. |
10fe80 | 61 6e 20 60 28 53 2c 47 29 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 | an.`(S,G).<https://tools.ietf.or |
10fea0 | 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 66 6c | g/html/rfc7761#section-4.1>`_.fl |
10fec0 | 6f 77 2e 20 33 31 20 73 65 63 6f 6e 64 73 20 69 73 20 63 68 6f 73 65 6e 20 66 6f 72 20 61 20 6c | ow..31.seconds.is.chosen.for.a.l |
10fee0 | 6f 77 65 72 20 62 6f 75 6e 64 20 61 73 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 | ower.bound.as.some.hardware.plat |
10ff00 | 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e | forms.cannot.see.data.flowing.in |
10ff20 | 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 73 20 63 68 75 6e 6b 73 2e 00 | .better.than.30.seconds.chunks.. |
10ff40 | 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 | Use.this.comand.to.set.the.IPv6. |
10ff60 | 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 20 50 50 50 6f 45 20 | address.pool.from.which.a.PPPoE. |
10ff80 | 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f | client.will.get.an.IPv6.prefix.o |
10ffa0 | 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 | f.your.defined.length.(mask).to. |
10ffc0 | 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 | terminate.the.PPPoE.endpoint.at. |
10ffe0 | 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 | their.side..The.mask.length.can. |
110000 | 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 | be.set.from.48.to.128.bit.long,. |
110020 | 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 | the.default.value.is.64..Use.thi |
110040 | 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 | s.comand.to.set.the.IPv6.address |
110060 | 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 49 50 6f 45 20 63 6c 69 65 6e 74 20 | .pool.from.which.an.IPoE.client. |
110080 | 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 | will.get.an.IPv6.prefix.of.your. |
1100a0 | 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 | defined.length.(mask).to.termina |
1100c0 | 74 65 20 74 68 65 20 49 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 | te.the.IPoE.endpoint.at.their.si |
1100e0 | 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 | de..The.mask.length.can.be.set.f |
110100 | 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 | rom.48.to.128.bit.long,.the.defa |
110120 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 | ult.value.is.64..Use.this.comand |
110140 | 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 | .to.set.the.IPv6.address.pool.fr |
110160 | 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 | om.which.an.PPPoE.client.will.ge |
110180 | 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 | t.an.IPv6.prefix.of.your.defined |
1101a0 | 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 | .length.(mask).to.terminate.the. |
1101c0 | 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 | PPPoE.endpoint.at.their.side..Th |
1101e0 | 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 | e.mask.length.can.be.set.from.48 |
110200 | 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 | .to.128.bit.long,.the.default.va |
110220 | 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 | lue.is.64..Use.this.comand.to.se |
110240 | 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 | t.the.IPv6.address.pool.from.whi |
110260 | 63 68 20 61 6e 20 50 50 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 | ch.an.PPTP.client.will.get.an.IP |
110280 | 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 | v6.prefix.of.your.defined.length |
1102a0 | 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 54 50 20 65 6e | .(mask).to.terminate.the.PPTP.en |
1102c0 | 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c | dpoint.at.their.side..The.mask.l |
1102e0 | 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 | ength.can.be.set.from.48.to.128. |
110300 | 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 | bit.long,.the.default.value.is.6 |
110320 | 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 | 4..Use.this.comand.to.set.the.IP |
110340 | 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 53 53 | v6.address.pool.from.which.an.SS |
110360 | 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 | TP.client.will.get.an.IPv6.prefi |
110380 | 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 | x.of.your.defined.length.(mask). |
1103a0 | 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 53 53 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 | to.terminate.the.SSTP.endpoint.a |
1103c0 | 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 | t.their.side..The.mask.length.ca |
1103e0 | 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 | n.be.set.from.48.to.128.bit.long |
110400 | 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 | ,.the.default.value.is.64..Use.t |
110420 | 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 | his.comand.to.set.the.IPv6.addre |
110440 | 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 6c 32 74 70 20 63 6c 69 65 6e | ss.pool.from.which.an.l2tp.clien |
110460 | 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 | t.will.get.an.IPv6.prefix.of.you |
110480 | 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 | r.defined.length.(mask).to.termi |
1104a0 | 6e 61 74 65 20 74 68 65 20 6c 32 74 70 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 | nate.the.l2tp.endpoint.at.their. |
1104c0 | 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 | side..The.mask.length.can.be.set |
1104e0 | 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 | .from.48.to.128.bit.long,.the.de |
110500 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | fault.value.is.64..Use.this.comm |
110520 | 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 | and.for.every.pool.of.client.IP. |
110540 | 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 | addresses.you.want.to.define..Th |
110560 | 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 | e.addresses.of.this.pool.will.be |
110580 | 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 | .given.to.PPPoE.clients..You.mus |
1105a0 | 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 61 6e 64 20 69 74 20 6d 75 73 74 20 | t.use.CIDR.notation.and.it.must. |
1105c0 | 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 | be.within.a./24.subnet..Use.this |
1105e0 | 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e | .command.for.every.pool.of.clien |
110600 | 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e | t.IP.addresses.you.want.to.defin |
110620 | 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 | e..The.addresses.of.this.pool.wi |
110640 | 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f | ll.be.given.to.PPPoE.clients..Yo |
110660 | 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 | u.must.use.CIDR.notation..Use.th |
110680 | 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 66 6f 72 | is.command.if.you.would.like.for |
1106a0 | 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 46 45 43 73 20 77 69 | .the.router.to.advertise.FECs.wi |
1106c0 | 74 68 20 61 20 6c 61 62 65 6c 20 6f 66 20 30 20 66 6f 72 20 65 78 70 6c 69 63 69 74 20 6e 75 6c | th.a.label.of.0.for.explicit.nul |
1106e0 | 6c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 | l.operations..Use.this.command.i |
110700 | 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 | f.you.would.like.to.control.the. |
110720 | 6c 6f 63 61 6c 20 46 45 43 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 20 66 6f 72 20 4c 44 50 2e 20 41 | local.FEC.allocations.for.LDP..A |
110740 | 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 66 6f 72 20 79 6f 75 72 20 | .good.example.would.be.for.your. |
110760 | 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 61 20 6c | local.router.to.not.allocate.a.l |
110780 | 61 62 65 6c 20 66 6f 72 20 65 76 65 72 79 74 68 69 6e 67 2e 20 4a 75 73 74 20 61 20 6c 61 62 65 | abel.for.everything..Just.a.labe |
1107a0 | 6c 20 66 6f 72 20 77 68 61 74 20 69 74 27 73 20 75 73 65 66 75 6c 2e 20 41 20 67 6f 6f 64 20 65 | l.for.what.it's.useful..A.good.e |
1107c0 | 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 6a 75 73 74 20 61 20 6c 6f 6f 70 62 61 63 6b 20 | xample.would.be.just.a.loopback. |
1107e0 | 6c 61 62 65 6c 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 | label..Use.this.command.if.you.w |
110800 | 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 54 43 50 20 73 65 73 73 69 6f 6e | ould.like.to.set.the.TCP.session |
110820 | 20 68 6f 6c 64 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 73 2e 00 55 73 65 20 74 68 69 73 20 63 | .hold.time.intervals..Use.this.c |
110840 | 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 | ommand.to.allow.the.selected.int |
110860 | 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 | erface.to.join.a.multicast.group |
110880 | 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 61 64 64 72 65 73 73 20 | .defining.the.multicast.address. |
1108a0 | 79 6f 75 20 77 61 6e 74 20 74 6f 20 6a 6f 69 6e 20 61 6e 64 20 74 68 65 20 73 6f 75 72 63 65 20 | you.want.to.join.and.the.source. |
1108c0 | 49 50 20 61 64 64 72 65 73 73 20 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | IP.address.too..Use.this.command |
1108e0 | 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 | .to.allow.the.selected.interface |
110900 | 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 | .to.join.a.multicast.group..Use. |
110920 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 | this.command.to.allow.the.select |
110940 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 73 6f 75 72 63 65 2d 73 70 | ed.interface.to.join.a.source-sp |
110960 | 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 | ecific.multicast.group..Use.this |
110980 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 | .command.to.check.the.tunnel.sta |
1109a0 | 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 20 69 6e 74 65 72 66 61 63 65 | tus.for.OpenVPN.client.interface |
1109c0 | 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 | s..Use.this.command.to.check.the |
1109e0 | 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 | .tunnel.status.for.OpenVPN.serve |
110a00 | 72 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | r.interfaces..Use.this.command.t |
110a20 | 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 | o.check.the.tunnel.status.for.Op |
110a40 | 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 | enVPN.site-to-site.interfaces..U |
110a60 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6c 65 61 72 20 42 6f 72 64 65 72 20 | se.this.command.to.clear.Border. |
110a80 | 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 73 74 61 74 69 73 74 69 63 73 20 6f 72 20 73 | Gateway.Protocol.statistics.or.s |
110aa0 | 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | tatus..Use.this.command.to.confi |
110ac0 | 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 | gure.DHCPv6.Prefix.Delegation.(R |
110ae0 | 46 43 33 36 33 33 29 20 6f 6e 20 49 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 | FC3633).on.IPoE..You.will.have.t |
110b00 | 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e | o.set.your.IPv6.pool.and.the.len |
110b20 | 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 | gth.of.the.delegation.prefix..Fr |
110b40 | 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c | om.the.defined.IPv6.pool.you.wil |
110b60 | 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 | l.be.handing.out.networks.of.the |
110b80 | 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 | .defined.length.(delegation-pref |
110ba0 | 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f | ix)..The.length.of.the.delegatio |
110bc0 | 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 | n.prefix.can.be.set.from.32.to.6 |
110be0 | 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | 4.bit.long..Use.this.command.to. |
110c00 | 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 | configure.DHCPv6.Prefix.Delegati |
110c20 | 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 50 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 | on.(RFC3633).on.PPPoE..You.will. |
110c40 | 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 | have.to.set.your.IPv6.pool.and.t |
110c60 | 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 | he.length.of.the.delegation.pref |
110c80 | 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 | ix..From.the.defined.IPv6.pool.y |
110ca0 | 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 | ou.will.be.handing.out.networks. |
110cc0 | 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f | of.the.defined.length.(delegatio |
110ce0 | 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c | n-prefix)..The.length.of.the.del |
110d00 | 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 | egation.prefix.can.be.set.from.3 |
110d20 | 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | 2.to.64.bit.long..Use.this.comma |
110d40 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 | nd.to.configure.DHCPv6.Prefix.De |
110d60 | 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 50 54 50 2e 20 59 6f 75 20 | legation.(RFC3633).on.PPTP..You. |
110d80 | 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 | will.have.to.set.your.IPv6.pool. |
110da0 | 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e | and.the.length.of.the.delegation |
110dc0 | 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 | .prefix..From.the.defined.IPv6.p |
110de0 | 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 | ool.you.will.be.handing.out.netw |
110e00 | 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 | orks.of.the.defined.length.(dele |
110e20 | 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 | gation-prefix)..The.length.of.th |
110e40 | 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 | e.delegation.prefix.can.be.set.f |
110e60 | 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 | rom.32.to.64.bit.long..Use.this. |
110e80 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 | command.to.configure.DHCPv6.Pref |
110ea0 | 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 53 53 54 50 2e | ix.Delegation.(RFC3633).on.SSTP. |
110ec0 | 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 | .You.will.have.to.set.your.IPv6. |
110ee0 | 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 | pool.and.the.length.of.the.deleg |
110f00 | 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 | ation.prefix..From.the.defined.I |
110f20 | 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 | Pv6.pool.you.will.be.handing.out |
110f40 | 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 | .networks.of.the.defined.length. |
110f60 | 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 | (delegation-prefix)..The.length. |
110f80 | 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 | of.the.delegation.prefix.can.be. |
110fa0 | 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 | set.from.32.to.64.bit.long..Use. |
110fc0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 | this.command.to.configure.DHCPv6 |
110fe0 | 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 | .Prefix.Delegation.(RFC3633).on. |
111000 | 6c 32 74 70 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 | l2tp..You.will.have.to.set.your. |
111020 | 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 | IPv6.pool.and.the.length.of.the. |
111040 | 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 | delegation.prefix..From.the.defi |
111060 | 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e | ned.IPv6.pool.you.will.be.handin |
111080 | 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 | g.out.networks.of.the.defined.le |
1110a0 | 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 | ngth.(delegation-prefix)..The.le |
1110c0 | 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 | ngth.of.the.delegation.prefix.ca |
1110e0 | 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e | n.be.set.from.32.to.64.bit.long. |
111100 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 | .Use.this.command.to.configure.D |
111120 | 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 | HCPv6.Prefix.Delegation.(RFC3633 |
111140 | 29 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 | )..You.will.have.to.set.your.IPv |
111160 | 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c | 6.pool.and.the.length.of.the.del |
111180 | 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 | egation.prefix..From.the.defined |
1111a0 | 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f | .IPv6.pool.you.will.be.handing.o |
1111c0 | 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 | ut.networks.of.the.defined.lengt |
1111e0 | 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 | h.(delegation-prefix)..The.lengt |
111200 | 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 | h.of.the.delegation.prefix.can.b |
111220 | 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 | e.set.from.32.to.64.bit.long..Us |
111240 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 79 6e 61 | e.this.command.to.configure.Dyna |
111260 | 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 73 20 74 6f 20 | mic.Authorization.Extensions.to. |
111280 | 52 41 44 49 55 53 20 73 6f 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 72 65 6d 6f 74 65 6c 79 20 | RADIUS.so.that.you.can.remotely. |
1112a0 | 64 69 73 63 6f 6e 6e 65 63 74 20 73 65 73 73 69 6f 6e 73 20 61 6e 64 20 63 68 61 6e 67 65 20 73 | disconnect.sessions.and.change.s |
1112c0 | 6f 6d 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 | ome.authentication.parameters..U |
1112e0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 22 | se.this.command.to.configure.a." |
111300 | 62 6c 61 63 6b 2d 68 6f 6c 65 22 20 72 6f 75 74 65 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2e | black-hole".route.on.the.router. |
111320 | 20 41 20 62 6c 61 63 6b 2d 68 6f 6c 65 20 72 6f 75 74 65 20 69 73 20 61 20 72 6f 75 74 65 20 66 | .A.black-hole.route.is.a.route.f |
111340 | 6f 72 20 77 68 69 63 68 20 74 68 65 20 73 79 73 74 65 6d 20 73 69 6c 65 6e 74 6c 79 20 64 69 73 | or.which.the.system.silently.dis |
111360 | 63 61 72 64 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 61 72 65 20 6d 61 74 63 68 65 64 2e 20 54 | card.packets.that.are.matched..T |
111380 | 68 69 73 20 70 72 65 76 65 6e 74 73 20 6e 65 74 77 6f 72 6b 73 20 6c 65 61 6b 69 6e 67 20 6f 75 | his.prevents.networks.leaking.ou |
1113a0 | 74 20 70 75 62 6c 69 63 20 69 6e 74 65 72 66 61 63 65 73 2c 20 62 75 74 20 69 74 20 64 6f 65 73 | t.public.interfaces,.but.it.does |
1113c0 | 20 6e 6f 74 20 70 72 65 76 65 6e 74 20 74 68 65 6d 20 66 72 6f 6d 20 62 65 69 6e 67 20 75 73 65 | .not.prevent.them.from.being.use |
1113e0 | 64 20 61 73 20 61 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 65 20 69 6e 73 69 64 | d.as.a.more.specific.route.insid |
111400 | 65 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.your.network..Use.this.command |
111420 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 | .to.configure.a.Network.Emulator |
111440 | 20 70 6f 6c 69 63 79 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 | .policy.defining.its.name.and.th |
111460 | 65 20 66 69 78 65 64 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 79 6f 75 20 77 61 6e 74 20 | e.fixed.amount.of.time.you.want. |
111480 | 74 6f 20 61 64 64 20 74 6f 20 61 6c 6c 20 70 61 63 6b 65 74 20 67 6f 69 6e 67 20 6f 75 74 20 6f | to.add.to.all.packet.going.out.o |
1114a0 | 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 6c 61 74 65 6e 63 79 20 77 69 6c | f.the.interface..The.latency.wil |
1114c0 | 6c 20 62 65 20 61 64 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 | l.be.added.through.the.Token.Buc |
1114e0 | 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 73 63 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 | ket.Filter.qdisc..It.will.only.t |
111500 | 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 | ake.effect.if.you.have.configure |
111520 | 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 | d.its.bandwidth.too..You.can.use |
111540 | 20 73 65 63 73 2c 20 6d 73 20 61 6e 64 20 75 73 2e 20 44 65 66 61 75 6c 74 3a 20 35 30 6d 73 2e | .secs,.ms.and.us..Default:.50ms. |
111560 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
111580 | 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 | .Priority.Queue.policy,.set.its. |
1115a0 | 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 77 69 74 68 20 61 20 70 72 69 6f 72 69 74 | name,.set.a.class.with.a.priorit |
1115c0 | 79 20 66 72 6f 6d 20 31 20 74 6f 20 37 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 | y.from.1.to.7.and.define.a.hard. |
1115e0 | 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 | limit.on.the.real.queue.size..Wh |
111600 | 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 | en.this.limit.is.reached,.new.pa |
111620 | 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ckets.are.dropped..Use.this.comm |
111640 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 | and.to.configure.a.Random-Detect |
111660 | 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 6e | .policy.and.set.its.name,.then.n |
111680 | 61 6d 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 | ame.the.IP.Precedence.for.the.vi |
1116a0 | 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 | rtual.queue.you.are.configuring. |
1116c0 | 61 6e 64 20 77 68 61 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 69 74 73 | and.what.the.maximum.size.of.its |
1116e0 | 20 71 75 65 75 65 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 31 20 74 6f 20 31 2d 34 32 39 34 | .queue.will.be.(from.1.to.1-4294 |
111700 | 39 36 37 32 39 35 20 70 61 63 6b 65 74 73 29 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f | 967295.packets)..Packets.are.dro |
111720 | 70 70 65 64 20 77 68 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 6c 65 6e 67 | pped.when.the.current.queue.leng |
111740 | 74 68 20 72 65 61 63 68 65 73 20 74 68 69 73 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 | th.reaches.this.value..Use.this. |
111760 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 | command.to.configure.a.Random-De |
111780 | 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 | tect.policy.and.set.its.name,.th |
1117a0 | 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 | en.state.the.IP.Precedence.for.t |
1117c0 | 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 | he.virtual.queue.you.are.configu |
1117e0 | 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 72 6b 20 28 64 72 6f 70 29 20 70 72 | ring.and.what.its.mark.(drop).pr |
111800 | 6f 62 61 62 69 6c 69 74 79 20 77 69 6c 6c 20 62 65 2e 20 53 65 74 20 74 68 65 20 70 72 6f 62 61 | obability.will.be..Set.the.proba |
111820 | 62 69 6c 69 74 79 20 62 79 20 67 69 76 69 6e 67 20 74 68 65 20 4e 20 76 61 6c 75 65 20 6f 66 20 | bility.by.giving.the.N.value.of. |
111840 | 74 68 65 20 66 72 61 63 74 69 6f 6e 20 31 2f 4e 20 28 64 65 66 61 75 6c 74 3a 20 31 30 29 2e 00 | the.fraction.1/N.(default:.10).. |
111860 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 | Use.this.command.to.configure.a. |
111880 | 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 | Random-Detect.policy.and.set.its |
1118a0 | 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 | .name,.then.state.the.IP.Precede |
1118c0 | 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 | nce.for.the.virtual.queue.you.ar |
1118e0 | 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 78 69 6d | e.configuring.and.what.its.maxim |
111900 | 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f | um.threshold.for.random.detectio |
111920 | 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 | n.will.be.(from.0.to.4096.packet |
111940 | 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 38 29 2e 20 41 74 20 74 68 69 73 20 73 69 7a 65 2c 20 74 | s,.default:.18)..At.this.size,.t |
111960 | 68 65 20 6d 61 72 6b 69 6e 67 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 69 73 | he.marking.(drop).probability.is |
111980 | 20 6d 61 78 69 6d 61 6c 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | .maximal..Use.this.command.to.co |
1119a0 | 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 | nfigure.a.Random-Detect.policy.a |
1119c0 | 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 | nd.set.its.name,.then.state.the. |
1119e0 | 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 | IP.Precedence.for.the.virtual.qu |
111a00 | 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 | eue.you.are.configuring.and.what |
111a20 | 20 69 74 73 20 6d 69 6e 69 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f | .its.minimum.threshold.for.rando |
111a40 | 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 | m.detection.will.be.(from.0.to.4 |
111a60 | 30 39 36 20 70 61 63 6b 65 74 73 29 2e 20 20 49 66 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 | 096.packets)...If.this.value.is. |
111a80 | 65 78 63 65 65 64 65 64 2c 20 70 61 63 6b 65 74 73 20 73 74 61 72 74 20 62 65 69 6e 67 20 65 6c | exceeded,.packets.start.being.el |
111aa0 | 69 67 69 62 6c 65 20 66 6f 72 20 62 65 69 6e 67 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 | igible.for.being.dropped..Use.th |
111ac0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d | is.command.to.configure.a.Random |
111ae0 | 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c | -Detect.policy.and.set.its.name, |
111b00 | 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f | .then.state.the.IP.Precedence.fo |
111b20 | 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 | r.the.virtual.queue.you.are.conf |
111b40 | 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 69 74 73 | iguring.and.what.the.size.of.its |
111b60 | 20 61 76 65 72 61 67 65 2d 70 61 63 6b 65 74 20 73 68 6f 75 6c 64 20 62 65 20 28 69 6e 20 62 79 | .average-packet.should.be.(in.by |
111b80 | 74 65 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 32 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | tes,.default:.1024)..Use.this.co |
111ba0 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 | mmand.to.configure.a.Random-Dete |
111bc0 | 63 74 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 74 20 | ct.policy,.set.its.name.and.set. |
111be0 | 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 | the.available.bandwidth.for.this |
111c00 | 20 70 6f 6c 69 63 79 2e 20 49 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 | .policy..It.is.used.for.calculat |
111c20 | 69 6e 67 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 61 66 74 65 72 | ing.the.average.queue.size.after |
111c40 | 20 73 6f 6d 65 20 69 64 6c 65 20 74 69 6d 65 2e 20 49 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 | .some.idle.time..It.should.be.se |
111c60 | 74 20 74 6f 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 6f 66 20 79 6f 75 72 20 69 6e 74 65 72 | t.to.the.bandwidth.of.your.inter |
111c80 | 66 61 63 65 2e 20 52 61 6e 64 6f 6d 20 44 65 74 65 63 74 20 69 73 20 6e 6f 74 20 61 20 73 68 61 | face..Random.Detect.is.not.a.sha |
111ca0 | 70 69 6e 67 20 70 6f 6c 69 63 79 2c 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6e | ping.policy,.this.command.will.n |
111cc0 | 6f 74 20 73 68 61 70 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | ot.shape..Use.this.command.to.co |
111ce0 | 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 | nfigure.a.Rate-Control.policy,.s |
111d00 | 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6d 6f 75 | et.its.name.and.the.maximum.amou |
111d20 | 6e 74 20 6f 66 20 74 69 6d 65 20 61 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 71 75 65 75 65 | nt.of.time.a.packet.can.be.queue |
111d40 | 64 20 28 64 65 66 61 75 6c 74 3a 20 35 30 20 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | d.(default:.50.ms)..Use.this.com |
111d60 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c | mand.to.configure.a.Rate-Control |
111d80 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 72 61 | .policy,.set.its.name.and.the.ra |
111da0 | 74 65 20 6c 69 6d 69 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 2e 00 55 73 65 20 74 | te.limit.you.want.to.have..Use.t |
111dc0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d | his.command.to.configure.a.Rate- |
111de0 | 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 | Control.policy,.set.its.name.and |
111e00 | 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 62 75 63 6b 65 74 20 69 6e 20 62 79 74 65 73 | .the.size.of.the.bucket.in.bytes |
111e20 | 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 62 75 72 | .which.will.be.available.for.bur |
111e40 | 73 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | st..Use.this.command.to.configur |
111e60 | 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 | e.a.Round-Robin.policy,.set.its. |
111e80 | 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 | name,.set.a.class.ID,.and.the.qu |
111ea0 | 61 6e 74 75 6d 20 66 6f 72 20 74 68 61 74 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 69 63 69 | antum.for.that.class..The.defici |
111ec0 | 74 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 61 64 64 20 74 68 61 74 20 76 61 6c 75 65 20 65 61 | t.counter.will.add.that.value.ea |
111ee0 | 63 68 20 72 6f 75 6e 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | ch.round..Use.this.command.to.co |
111f00 | 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 | nfigure.a.Round-Robin.policy,.se |
111f20 | 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 | t.its.name,.set.a.class.ID,.and. |
111f40 | 74 68 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 6e 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 | the.queue.size.in.packets..Use.t |
111f60 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 | his.command.to.configure.a.Shape |
111f80 | 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d | r.policy,.set.its.name.and.the.m |
111fa0 | 61 78 69 6d 75 6d 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 61 6c 6c 20 63 6f 6d 62 69 6e 65 | aximum.bandwidth.for.all.combine |
111fc0 | 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | d.traffic..Use.this.command.to.c |
111fe0 | 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 | onfigure.a.Shaper.policy,.set.it |
112000 | 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 | s.name,.define.a.class.and.set.t |
112020 | 68 65 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 74 | he.guaranteed.traffic.you.want.t |
112040 | 6f 20 61 6c 6c 6f 63 61 74 65 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 | o.allocate.to.that.class..Use.th |
112060 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 | is.command.to.configure.a.Shaper |
112080 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 | .policy,.set.its.name,.define.a. |
1120a0 | 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 70 65 65 64 20 | class.and.set.the.maximum.speed. |
1120c0 | 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 | possible.for.this.class..The.def |
1120e0 | 61 75 6c 74 20 63 65 69 6c 69 6e 67 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 62 61 6e 64 77 69 | ault.ceiling.value.is.the.bandwi |
112100 | 64 74 68 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | dth.value..Use.this.command.to.c |
112120 | 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 | onfigure.a.Shaper.policy,.set.it |
112140 | 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 | s.name,.define.a.class.and.set.t |
112160 | 68 65 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 75 73 61 67 65 20 6f 66 20 61 76 61 69 6c 61 62 | he.priority.for.usage.of.availab |
112180 | 6c 65 20 62 61 6e 64 77 69 64 74 68 20 6f 6e 63 65 20 67 75 61 72 61 6e 74 65 65 73 20 68 61 76 | le.bandwidth.once.guarantees.hav |
1121a0 | 65 20 62 65 65 6e 20 6d 65 74 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 70 72 69 6f 72 69 | e.been.met..The.lower.the.priori |
1121c0 | 74 79 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 | ty.number,.the.higher.the.priori |
1121e0 | 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 | ty..The.default.priority.value.i |
112200 | 73 20 30 2c 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 2e 00 55 73 65 20 74 | s.0,.the.highest.priority..Use.t |
112220 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 | his.command.to.configure.a.Shape |
112240 | 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 | r.policy,.set.its.name,.define.a |
112260 | 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 60 | .class.and.set.the.size.of.the.` |
112280 | 74 6f 63 6b 65 6e 20 62 75 63 6b 65 74 60 5f 20 69 6e 20 62 79 74 65 73 2c 20 77 68 69 63 68 20 | tocken.bucket`_.in.bytes,.which. |
1122a0 | 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 62 65 20 73 65 6e 74 20 61 74 20 | will.be.available.to.be.sent.at. |
1122c0 | 63 65 69 6c 69 6e 67 20 73 70 65 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 35 4b 62 29 2e 00 55 | ceiling.speed.(default:.15Kb)..U |
1122e0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 | se.this.command.to.configure.a.d |
112300 | 61 74 61 2d 72 61 74 65 20 6c 69 6d 69 74 20 74 6f 20 50 50 50 4f 6f 45 20 63 6c 69 65 6e 74 73 | ata-rate.limit.to.PPPOoE.clients |
112320 | 20 66 6f 72 20 74 72 61 66 66 69 63 20 64 6f 77 6e 6c 6f 61 64 20 6f 72 20 75 70 6c 6f 61 64 2e | .for.traffic.download.or.upload. |
112340 | 20 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 | .The.rate-limit.is.set.in.kbit/s |
112360 | 65 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ec..Use.this.command.to.configur |
112380 | 65 20 61 20 64 72 6f 70 2d 74 61 69 6c 20 70 6f 6c 69 63 79 20 28 50 46 49 46 4f 29 2e 20 43 68 | e.a.drop-tail.policy.(PFIFO)..Ch |
1123a0 | 6f 6f 73 65 20 61 20 75 6e 69 71 75 65 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 | oose.a.unique.name.for.this.poli |
1123c0 | 63 79 20 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 62 79 20 | cy.and.the.size.of.the.queue.by. |
1123e0 | 73 65 74 74 69 6e 67 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 74 | setting.the.number.of.packets.it |
112400 | 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 | .can.contain.(maximum.4294967295 |
112420 | 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | )..Use.this.command.to.configure |
112440 | 20 61 20 73 70 65 63 69 66 69 63 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 66 6f | .a.specific.session.hold.time.fo |
112460 | 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | r.LDP.peers..Set.the.IP.address. |
112480 | 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 68 6f | of.the.LDP.peer.and.a.session.ho |
1124a0 | 6c 64 20 74 69 6d 65 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | ld.time.that.should.be.configure |
1124c0 | 64 20 66 6f 72 20 69 74 2e 20 59 6f 75 20 6d 61 79 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 | d.for.it..You.may.have.to.reset. |
1124e0 | 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 2e 00 55 | the.neighbor.for.this.to.work..U |
112500 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 | se.this.command.to.configure.an. |
112520 | 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 | Ingress.Policer,.defining.its.na |
112540 | 6d 65 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 28 | me.and.the.burst.size.in.bytes.( |
112560 | 64 65 66 61 75 6c 74 3a 20 31 35 29 20 66 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c | default:.15).for.its.default.pol |
112580 | 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | icy..Use.this.command.to.configu |
1125a0 | 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 | re.an.Ingress.Policer,.defining. |
1125c0 | 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 | its.name.and.the.maximum.allowed |
1125e0 | 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 | .bandwidth.for.its.default.polic |
112600 | 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | y..Use.this.command.to.configure |
112620 | 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 | .an.Ingress.Policer,.defining.it |
112640 | 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 | s.name,.a.class.identifier.(1-40 |
112660 | 39 30 29 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 | 90).and.the.burst.size.in.bytes. |
112680 | 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 55 73 | for.this.class.(default:.15)..Us |
1126a0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 | e.this.command.to.configure.an.I |
1126c0 | 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d | ngress.Policer,.defining.its.nam |
1126e0 | 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 | e,.a.class.identifier.(1-4090).a |
112700 | 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 | nd.the.maximum.allowed.bandwidth |
112720 | 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | .for.this.class..Use.this.comman |
112740 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 | d.to.configure.an.Ingress.Police |
112760 | 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 | r,.defining.its.name,.a.class.id |
112780 | 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 20 63 6c 61 73 73 20 6d 61 74 63 68 | entifier.(1-4090),.a.class.match |
1127a0 | 69 6e 67 20 72 75 6c 65 20 6e 61 6d 65 20 61 6e 64 20 69 74 73 20 64 65 73 63 72 69 70 74 69 6f | ing.rule.name.and.its.descriptio |
1127c0 | 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | n..Use.this.command.to.configure |
1127e0 | 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 | .an.Ingress.Policer,.defining.it |
112800 | 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 | s.name,.a.class.identifier.(1-40 |
112820 | 39 30 29 2c 20 61 6e 64 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 28 30 2d 32 30 2c 20 64 65 66 | 90),.and.the.priority.(0-20,.def |
112840 | 61 75 6c 74 20 32 30 29 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 75 6c 65 20 69 73 20 65 76 | ault.20).in.which.the.rule.is.ev |
112860 | 61 6c 75 61 74 65 64 20 28 74 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 | aluated.(the.lower.the.number,.t |
112880 | 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 29 2e 00 55 73 65 20 74 68 69 | he.higher.the.priority)..Use.thi |
1128a0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 | s.command.to.configure.an.fq-cod |
1128c0 | 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 | el.policy,.set.its.name.and.the. |
1128e0 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 | maximum.number.of.bytes.(default |
112900 | 3a 20 31 35 31 34 29 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 20 66 72 6f 6d 20 61 20 71 75 | :.1514).to.be.dequeued.from.a.qu |
112920 | 65 75 65 20 61 74 20 6f 6e 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | eue.at.once..Use.this.command.to |
112940 | 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 | .configure.an.fq-codel.policy,.s |
112960 | 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 | et.its.name.and.the.number.of.su |
112980 | 62 2d 71 75 65 75 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 29 20 69 6e 74 6f 20 77 68 | b-queues.(default:.1024).into.wh |
1129a0 | 69 63 68 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 6c 61 73 73 69 66 69 65 64 2e 00 55 73 65 20 | ich.packets.are.classified..Use. |
1129c0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d | this.command.to.configure.an.fq- |
1129e0 | 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 | codel.policy,.set.its.name.and.t |
112a00 | 68 65 20 74 69 6d 65 20 70 65 72 69 6f 64 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6f 6e 74 72 | he.time.period.used.by.the.contr |
112a20 | 6f 6c 20 6c 6f 6f 70 20 6f 66 20 43 6f 44 65 6c 20 74 6f 20 64 65 74 65 63 74 20 77 68 65 6e 20 | ol.loop.of.CoDel.to.detect.when. |
112a40 | 61 20 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 69 73 20 64 65 76 65 6c 6f 70 69 6e 67 | a.persistent.queue.is.developing |
112a60 | 2c 20 65 6e 73 75 72 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 65 61 73 75 72 65 64 20 6d 69 6e | ,.ensuring.that.the.measured.min |
112a80 | 69 6d 75 6d 20 64 65 6c 61 79 20 64 6f 65 73 20 6e 6f 74 20 62 65 63 6f 6d 65 20 74 6f 6f 20 73 | imum.delay.does.not.become.too.s |
112aa0 | 74 61 6c 65 20 28 64 65 66 61 75 6c 74 3a 20 31 30 30 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 | tale.(default:.100ms)..Use.this. |
112ac0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c | command.to.configure.an.fq-codel |
112ae0 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e | .policy,.set.its.name,.and.defin |
112b00 | 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 | e.a.hard.limit.on.the.real.queue |
112b20 | 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 | .size..When.this.limit.is.reache |
112b40 | 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 28 64 65 66 61 | d,.new.packets.are.dropped.(defa |
112b60 | 75 6c 74 3a 20 31 30 32 34 30 20 70 61 63 6b 65 74 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | ult:.10240.packets)..Use.this.co |
112b80 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 | mmand.to.configure.an.fq-codel.p |
112ba0 | 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 | olicy,.set.its.name,.and.define. |
112bc0 | 74 68 65 20 61 63 63 65 70 74 61 62 6c 65 20 6d 69 6e 69 6d 75 6d 20 73 74 61 6e 64 69 6e 67 2f | the.acceptable.minimum.standing/ |
112be0 | 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 64 65 6c 61 79 2e 20 54 68 69 73 20 6d 69 6e | persistent.queue.delay..This.min |
112c00 | 69 6d 75 6d 20 64 65 6c 61 79 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 72 61 63 | imum.delay.is.identified.by.trac |
112c20 | 6b 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 6d 69 6e 69 6d 75 6d 20 71 75 65 75 65 20 64 65 6c | king.the.local.minimum.queue.del |
112c40 | 61 79 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 65 78 70 65 72 69 65 6e 63 65 20 28 64 65 66 61 | ay.that.packets.experience.(defa |
112c60 | 75 6c 74 3a 20 35 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | ult:.5ms)..Use.this.command.to.c |
112c80 | 6f 6e 66 69 67 75 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 49 47 4d 50 20 | onfigure.an.interface.with.IGMP. |
112ca0 | 73 6f 20 74 68 61 74 20 50 49 4d 20 63 61 6e 20 72 65 63 65 69 76 65 20 49 47 4d 50 20 72 65 70 | so.that.PIM.can.receive.IGMP.rep |
112cc0 | 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 | orts.and.query.on.the.selected.i |
112ce0 | 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 75 6c 74 20 49 47 4d 50 20 76 65 72 73 69 6f | nterface..By.default.IGMP.versio |
112d00 | 6e 20 33 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | n.3.will.be.used..Use.this.comma |
112d20 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 66 | nd.to.configure.authentication.f |
112d40 | 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | or.LDP.peers..Set.the.IP.address |
112d60 | 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 6e 64 20 61 20 70 61 73 73 77 6f 72 64 20 | .of.the.LDP.peer.and.a.password. |
112d80 | 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 61 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 | that.should.be.shared.in.order.t |
112da0 | 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | o.become.neighbors..Use.this.com |
112dc0 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 | mand.to.configure.in.the.selecte |
112de0 | 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 68 6f 73 74 20 71 75 65 72 79 20 | d.interface.the.IGMP.host.query. |
112e00 | 69 6e 74 65 72 76 61 6c 20 28 31 2d 31 38 30 30 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 | interval.(1-1800).in.seconds.tha |
112e20 | 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | t.PIM.will.use..Use.this.command |
112e40 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e | .to.configure.in.the.selected.in |
112e60 | 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 | terface.the.IGMP.query.response. |
112e80 | 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 | timeout.value.(10-250).in.decise |
112ea0 | 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e | conds..If.a.report.is.not.return |
112ec0 | 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c | ed.in.the.specified.time,.it.wil |
112ee0 | 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 | l.be.assumed.the.(S,G).or.(*,G). |
112f00 | 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 | state.:rfc:`7761#section-4.1`.ha |
112f20 | 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | s.timed.out..Use.this.command.to |
112f40 | 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 | .configure.in.the.selected.inter |
112f60 | 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d | face.the.IGMP.query.response.tim |
112f80 | 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e | eout.value.(10-250).in.decisecon |
112fa0 | 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 | ds..If.a.report.is.not.returned. |
112fc0 | 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 | in.the.specified.time,.it.will.b |
112fe0 | 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c 47 29 20 6f 72 20 28 5c 2a 2c 47 29 20 73 74 | e.assumed.the.(S,G).or.(\*,G).st |
113000 | 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 | ate.:rfc:`7761#section-4.1`.has. |
113020 | 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | timed.out..Use.this.command.to.c |
113040 | 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 | onfigure.in.the.selected.interfa |
113060 | 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f | ce.the.IGMP.query.response.timeo |
113080 | 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 | ut.value.(10-250).in.deciseconds |
1130a0 | 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e | ..If.a.report.is.not.returned.in |
1130c0 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 | .the.specified.time,.it.will.be. |
1130e0 | 61 73 73 75 6d 65 64 20 74 68 65 20 60 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 | assumed.the.`(S,G).or.(*,G).stat |
113100 | 65 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 | e.<https://tools.ietf.org/html/r |
113120 | 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 68 61 73 20 74 69 6d 65 64 20 | fc7761#section-4.1>`_.has.timed. |
113140 | 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | out..Use.this.command.to.configu |
113160 | 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 | re.in.the.selected.interface.the |
113180 | 20 4d 4c 44 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 36 35 35 33 | .MLD.host.query.interval.(1-6553 |
1131a0 | 35 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e | 5).in.seconds.that.PIM.will.use. |
1131c0 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 32 35 20 73 65 63 6f 6e 64 | .The.default.value.is.125.second |
1131e0 | 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | s..Use.this.command.to.configure |
113200 | 20 74 68 65 20 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 | .the..sampling.rate.for.flow.acc |
113220 | 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 73 79 73 74 65 6d 20 73 61 6d 70 6c 65 73 20 6f 6e 65 20 | ounting..The.system.samples.one. |
113240 | 69 6e 20 65 76 65 72 79 20 60 3c 72 61 74 65 3e 60 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 | in.every.`<rate>`.packets,.where |
113260 | 20 60 3c 72 61 74 65 3e 60 20 69 73 20 74 68 65 20 76 61 6c 75 65 20 63 6f 6e 66 69 67 75 72 65 | .`<rate>`.is.the.value.configure |
113280 | 64 20 66 6f 72 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 2d 72 61 74 65 20 6f 70 74 69 6f 6e 2e 20 | d.for.the.sampling-rate.option.. |
1132a0 | 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 | The.advantage.of.sampling.every. |
1132c0 | 6e 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 6e 20 3e 20 31 2c 20 61 6c 6c 6f 77 73 20 79 | n.packets,.where.n.>.1,.allows.y |
1132e0 | 6f 75 20 74 6f 20 64 65 63 72 65 61 73 65 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 6f | ou.to.decrease.the.amount.of.pro |
113300 | 63 65 73 73 69 6e 67 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 66 | cessing.resources.required.for.f |
113320 | 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 | low.accounting..The.disadvantage |
113340 | 20 6f 66 20 6e 6f 74 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 | .of.not.sampling.every.packet.is |
113360 | 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 73 74 69 63 73 20 70 72 6f 64 75 63 65 64 20 61 72 | .that.the.statistics.produced.ar |
113380 | 65 20 65 73 74 69 6d 61 74 65 73 20 6f 66 20 61 63 74 75 61 6c 20 64 61 74 61 20 66 6c 6f 77 73 | e.estimates.of.actual.data.flows |
1133a0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
1133c0 | 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 73 68 61 72 65 64 20 73 65 | the.IP.address.and.the.shared.se |
1133e0 | 63 72 65 74 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 | cret.key.of.your.RADIUS.server.. |
113400 | 20 59 6f 75 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 | .You.can.have.multiple.RADIUS.se |
113420 | 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 | rvers.configured.if.you.wish.to. |
113440 | 61 63 68 69 65 76 65 20 72 65 64 75 6e 64 61 6e 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | achieve.redundancy..Use.this.com |
113460 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | mand.to.configure.the.IP.address |
113480 | 20 75 73 65 64 20 61 73 20 74 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 64 20 6f 66 20 74 68 | .used.as.the.LDP.router-id.of.th |
1134a0 | 65 20 6c 6f 63 61 6c 20 64 65 76 69 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.local.device..Use.this.command |
1134c0 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 69 6e 74 65 | .to.configure.the.PIM.hello.inte |
1134e0 | 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 31 2d 31 38 30 29 20 66 6f 72 20 74 68 65 20 | rval.in.seconds.(1-180).for.the. |
113500 | 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | selected.interface..Use.this.com |
113520 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 | mand.to.configure.the.burst.size |
113540 | 20 6f 66 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 | .of.the.traffic.in.a.Network.Emu |
113560 | 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 | lator.policy..Define.the.name.of |
113580 | 20 74 68 65 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 61 6e 64 | .the.Network.Emulator.policy.and |
1135a0 | 20 69 74 73 20 74 72 61 66 66 69 63 20 62 75 72 73 74 20 73 69 7a 65 20 28 69 74 20 77 69 6c 6c | .its.traffic.burst.size.(it.will |
1135c0 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e | .be.configured.through.the.Token |
1135e0 | 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 73 63 29 2e 20 44 65 66 61 75 6c 74 3a 31 | .Bucket.Filter.qdisc)..Default:1 |
113600 | 35 6b 62 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 | 5kb..It.will.only.take.effect.if |
113620 | 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 | .you.have.configured.its.bandwid |
113640 | 74 68 20 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | th.too..Use.this.command.to.conf |
113660 | 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 67 61 74 65 77 61 79 20 49 50 20 61 64 64 72 65 | igure.the.local.gateway.IP.addre |
113680 | 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ss..Use.this.command.to.configur |
1136a0 | 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 61 74 65 20 61 74 20 77 68 69 63 68 20 74 72 61 66 | e.the.maximum.rate.at.which.traf |
1136c0 | 66 69 63 20 77 69 6c 6c 20 62 65 20 73 68 61 70 65 64 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 | fic.will.be.shaped.in.a.Network. |
1136e0 | 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 | Emulator.policy..Define.the.name |
113700 | 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 20 72 61 74 65 2e 00 55 73 65 | .of.the.policy.and.the.rate..Use |
113720 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 | .this.command.to.configure.the.s |
113740 | 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e | ampling.rate.for.sFlow.accountin |
113760 | 67 20 28 64 65 66 61 75 6c 74 3a 20 31 30 30 30 29 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | g.(default:.1000).Use.this.comma |
113780 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 | nd.to.configure.the.username.and |
1137a0 | 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 6f 66 20 61 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 | .the.password.of.a.locally.confi |
1137c0 | 67 75 72 65 64 20 75 73 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | gured.user..Use.this.command.to. |
1137e0 | 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 71 | control.the.maximum.number.of.eq |
113800 | 75 61 6c 20 63 6f 73 74 20 70 61 74 68 73 20 74 6f 20 72 65 61 63 68 20 61 20 73 70 65 63 69 66 | ual.cost.paths.to.reach.a.specif |
113820 | 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 75 70 70 65 72 20 6c 69 6d 69 74 20 | ic.destination..The.upper.limit. |
113840 | 6d 61 79 20 64 69 66 66 65 72 20 69 66 20 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 76 61 6c | may.differ.if.you.change.the.val |
113860 | 75 65 20 6f 66 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 64 75 72 69 6e 67 20 63 6f 6d 70 69 | ue.of.MULTIPATH_NUM.during.compi |
113880 | 6c 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 4d 55 4c 54 49 50 41 54 48 | lation..The.default.is.MULTIPATH |
1138a0 | 5f 4e 55 4d 20 28 36 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | _NUM.(64)..Use.this.command.to.c |
1138c0 | 72 65 61 74 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 67 69 | reate.a.Fair-Queue.policy.and.gi |
1138e0 | 76 65 20 69 74 20 61 20 6e 61 6d 65 2e 20 49 74 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | ve.it.a.name..It.is.based.on.the |
113900 | 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 20 61 6e | .Stochastic.Fairness.Queueing.an |
113920 | 64 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 | d.can.be.applied.to.outbound.tra |
113940 | 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 | ffic..Use.this.command.to.define |
113960 | 20 49 50 73 65 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | .IPsec.interface..Use.this.comma |
113980 | 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 | nd.to.define.a.Fair-Queue.policy |
1139a0 | 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 | ,.based.on.the.Stochastic.Fairne |
1139c0 | 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 | ss.Queueing,.and.set.the.number. |
1139e0 | 6f 66 20 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 61 | of.maximum.packets.allowed.to.wa |
113a00 | 69 74 20 69 6e 20 74 68 65 20 71 75 65 75 65 2e 20 41 6e 79 20 6f 74 68 65 72 20 70 61 63 6b 65 | it.in.the.queue..Any.other.packe |
113a20 | 74 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | t.will.be.dropped..Use.this.comm |
113a40 | 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 | and.to.define.a.Fair-Queue.polic |
113a60 | 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e | y,.based.on.the.Stochastic.Fairn |
113a80 | 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 | ess.Queueing,.and.set.the.number |
113aa0 | 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 74 20 77 68 69 63 68 20 61 20 6e 65 77 20 71 75 65 75 65 | .of.seconds.at.which.a.new.queue |
113ac0 | 20 61 6c 67 6f 72 69 74 68 6d 20 70 65 72 74 75 72 62 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 | .algorithm.perturbation.will.occ |
113ae0 | 75 72 20 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 | ur.(maximum.4294967295)..Use.thi |
113b00 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 49 50 76 36 | s.command.to.define.default.IPv6 |
113b20 | 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | .address.pool.name..Use.this.com |
113b40 | 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 61 64 64 72 65 73 73 20 70 | mand.to.define.default.address.p |
113b60 | 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 | ool.name..Use.this.command.to.de |
113b80 | 66 69 6e 65 20 64 6f 6d 61 69 6e 73 2c 20 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2c 20 73 6f 20 | fine.domains,.one.at.a.time,.so. |
113ba0 | 74 68 61 74 20 74 68 65 20 73 79 73 74 65 6d 20 75 73 65 73 20 74 68 65 6d 20 74 6f 20 63 6f 6d | that.the.system.uses.them.to.com |
113bc0 | 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2e 20 4d 61 | plete.unqualified.host.names..Ma |
113be0 | 78 69 6d 75 6d 3a 20 36 20 65 6e 74 72 69 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ximum:.6.entries..Use.this.comma |
113c00 | 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 | nd.to.define.in.the.selected.int |
113c20 | 65 72 66 61 63 65 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 | erface.whether.you.choose.IGMP.v |
113c40 | 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ersion.2.or.3..Use.this.command. |
113c60 | 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 | to.define.in.the.selected.interf |
113c80 | 61 63 65 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 | ace.whether.you.choose.IGMP.vers |
113ca0 | 69 6f 6e 20 32 20 6f 72 20 33 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 | ion.2.or.3..The.default.value.is |
113cc0 | 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 | .3..Use.this.command.to.define.t |
113ce0 | 68 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 74 6f 20 62 65 20 67 69 76 65 6e 20 | he.IP.address.range.to.be.given. |
113d00 | 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 | to.PPPoE.clients..If.notation.`` |
113d20 | 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 | x.x.x.x-x.x.x.x``,.it.must.be.wi |
113d40 | 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 | thin.a./24.subnet..If.notation.` |
113d60 | 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f | `x.x.x.x/x``.is.used.there.is.po |
113d80 | 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 | ssibility.to.set.host/netmask..U |
113da0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 | se.this.command.to.define.the.fi |
113dc0 | 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 | rst.IP.address.of.a.pool.of.addr |
113de0 | 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 49 50 6f 45 20 63 6c 69 65 6e 74 | esses.to.be.given.to.IPoE.client |
113e00 | 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 | s..If.notation.``x.x.x.x-x.x.x.x |
113e20 | 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e | ``,.it.must.be.within.a./24.subn |
113e40 | 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 | et..If.notation.``x.x.x.x/x``.is |
113e60 | 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 | .used.there.is.possibility.to.se |
113e80 | 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | t.host/netmask..Use.this.command |
113ea0 | 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 | .to.define.the.first.IP.address. |
113ec0 | 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 | of.a.pool.of.addresses.to.be.giv |
113ee0 | 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 | en.to.PPPoE.clients..It.must.be. |
113f00 | 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f | within.a./24.subnet..Use.this.co |
113f20 | 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 | mmand.to.define.the.first.IP.add |
113f40 | 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 | ress.of.a.pool.of.addresses.to.b |
113f60 | 65 20 67 69 76 65 6e 20 74 6f 20 50 50 54 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 | e.given.to.PPTP.clients..If.nota |
113f80 | 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 | tion.``x.x.x.x-x.x.x.x``,.it.mus |
113fa0 | 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 | t.be.within.a./24.subnet..If.not |
113fc0 | 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 | ation.``x.x.x.x/x``.is.used.ther |
113fe0 | 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 | e.is.possibility.to.set.host/net |
114000 | 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 | mask..Use.this.command.to.define |
114020 | 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 | .the.first.IP.address.of.a.pool. |
114040 | 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 53 53 54 50 | of.addresses.to.be.given.to.SSTP |
114060 | 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d | .clients..If.notation.``x.x.x.x- |
114080 | 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f | x.x.x.x``,.it.must.be.within.a./ |
1140a0 | 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 | 24.subnet..If.notation.``x.x.x.x |
1140c0 | 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 | /x``.is.used.there.is.possibilit |
1140e0 | 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 | y.to.set.host/netmask..Use.this. |
114100 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 | command.to.define.the.first.IP.a |
114120 | 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f | ddress.of.a.pool.of.addresses.to |
114140 | 20 62 65 20 67 69 76 65 6e 20 74 6f 20 6c 32 74 70 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f | .be.given.to.l2tp.clients..If.no |
114160 | 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d | tation.``x.x.x.x-x.x.x.x``,.it.m |
114180 | 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e | ust.be.within.a./24.subnet..If.n |
1141a0 | 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 | otation.``x.x.x.x/x``.is.used.th |
1141c0 | 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e | ere.is.possibility.to.set.host/n |
1141e0 | 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 | etmask..Use.this.command.to.defi |
114200 | 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f | ne.the.first.IP.address.of.a.poo |
114220 | 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 70 70 | l.of.addresses.to.be.given.to.pp |
114240 | 70 6f 65 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 | poe.clients..If.notation.``x.x.x |
114260 | 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 | .x-x.x.x.x``,.it.must.be.within. |
114280 | 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e | a./24.subnet..If.notation.``x.x. |
1142a0 | 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 | x.x/x``.is.used.there.is.possibi |
1142c0 | 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 | lity.to.set.host/netmask..Use.th |
1142e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 69 6e 74 65 72 66 61 | is.command.to.define.the.interfa |
114300 | 63 65 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 6f 20 | ce.the.PPPoE.server.will.use.to. |
114320 | 6c 69 73 74 65 6e 20 66 6f 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 | listen.for.PPPoE.clients..Use.th |
114340 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 61 73 74 20 49 50 | is.command.to.define.the.last.IP |
114360 | 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 | .address.of.a.pool.of.addresses. |
114380 | 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 | to.be.given.to.PPPoE.clients..It |
1143a0 | 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 | .must.be.within.a./24.subnet..Us |
1143c0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 65 6e | e.this.command.to.define.the.len |
1143e0 | 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 6f 66 20 79 6f 75 72 20 4e 65 74 77 6f 72 6b | gth.of.the.queue.of.your.Network |
114400 | 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 | .Emulator.policy..Set.the.policy |
114420 | 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 | .name.and.the.maximum.number.of. |
114440 | 70 61 63 6b 65 74 73 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 74 68 65 20 71 75 65 75 65 | packets.(1-4294967295).the.queue |
114460 | 20 6d 61 79 20 68 6f 6c 64 20 71 75 65 75 65 64 20 61 74 20 61 20 74 69 6d 65 2e 00 55 73 65 20 | .may.hold.queued.at.a.time..Use. |
114480 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d | this.command.to.define.the.maxim |
1144a0 | 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 | um.number.of.entries.to.keep.in. |
1144c0 | 74 68 65 20 41 52 50 20 63 61 63 68 65 20 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c | the.ARP.cache.(1024,.2048,.4096, |
1144e0 | 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 | .8192,.16384,.32768)..Use.this.c |
114500 | 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d | ommand.to.define.the.maximum.num |
114520 | 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 4e 65 | ber.of.entries.to.keep.in.the.Ne |
114540 | 69 67 68 62 6f 72 20 63 61 63 68 65 20 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 | ighbor.cache.(1024,.2048,.4096,. |
114560 | 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | 8192,.16384,.32768)..Use.this.co |
114580 | 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6e 65 78 74 20 61 64 64 72 65 73 73 | mmand.to.define.the.next.address |
1145a0 | 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | .pool.name..Use.this.command.to. |
1145c0 | 64 65 66 69 6e 65 20 77 68 65 74 68 65 72 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 | define.whether.your.PPPoE.client |
1145e0 | 73 20 77 69 6c 6c 20 6c 6f 63 61 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 6e 20 79 | s.will.locally.authenticate.in.y |
114600 | 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 6d 20 6f 72 20 69 6e 20 52 41 44 49 55 53 20 73 65 72 | our.VyOS.system.or.in.RADIUS.ser |
114620 | 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 72 65 63 74 20 | ver..Use.this.command.to.direct. |
114640 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6e 6f 74 20 64 65 74 65 63 74 20 61 6e 79 20 70 | an.interface.to.not.detect.any.p |
114660 | 68 79 73 69 63 61 6c 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 6f 6e 20 61 20 6c 69 6e 6b 2c | hysical.state.changes.on.a.link, |
114680 | 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 6e 20 74 68 65 20 63 61 62 6c 65 20 69 73 20 | .for.example,.when.the.cable.is. |
1146a0 | 75 6e 70 6c 75 67 67 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 | unplugged..Use.this.command.to.d |
1146c0 | 69 73 61 62 6c 65 20 49 50 76 34 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 | isable.IPv4.directed.broadcast.f |
1146e0 | 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 | orwarding.on.all.interfaces..Use |
114700 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 66 6f | .this.command.to.disable.IPv4.fo |
114720 | 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 | rwarding.on.all.interfaces..Use. |
114740 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 66 6f 72 | this.command.to.disable.IPv6.for |
114760 | 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 | warding.on.all.interfaces..Use.t |
114780 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 | his.command.to.disable.IPv6.oper |
1147a0 | 61 74 69 6f 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 6e 20 44 75 70 6c 69 63 61 74 | ation.on.interface.when.Duplicat |
1147c0 | 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 66 61 69 6c 73 20 6f 6e 20 4c 69 6e | e.Address.Detection.fails.on.Lin |
1147e0 | 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | k-Local.address..Use.this.comman |
114800 | 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 45 | d.to.disable.the.generation.of.E |
114820 | 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 28 70 61 75 73 65 20 66 72 61 6d | thernet.flow.control.(pause.fram |
114840 | 65 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 | es)..Use.this.command.to.emulate |
114860 | 20 6e 6f 69 73 65 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c | .noise.in.a.Network.Emulator.pol |
114880 | 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 | icy..Set.the.policy.name.and.the |
1148a0 | 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 63 6f 72 72 75 70 74 65 64 20 70 61 63 6b 65 74 73 | .percentage.of.corrupted.packets |
1148c0 | 20 79 6f 75 20 77 61 6e 74 2e 20 41 20 72 61 6e 64 6f 6d 20 65 72 72 6f 72 20 77 69 6c 6c 20 62 | .you.want..A.random.error.will.b |
1148e0 | 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 61 20 72 61 6e 64 6f 6d 20 70 6f 73 69 74 69 6f | e.introduced.in.a.random.positio |
114900 | 6e 20 66 6f 72 20 74 68 65 20 63 68 6f 73 65 6e 20 70 65 72 63 65 6e 74 20 6f 66 20 70 61 63 6b | n.for.the.chosen.percent.of.pack |
114920 | 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 | ets..Use.this.command.to.emulate |
114940 | 20 70 61 63 6b 65 74 2d 6c 6f 73 73 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 | .packet-loss.conditions.in.a.Net |
114960 | 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f | work.Emulator.policy..Set.the.po |
114980 | 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 | licy.name.and.the.percentage.of. |
1149a0 | 6c 6f 73 73 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 | loss.packets.your.traffic.will.s |
1149c0 | 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 | uffer..Use.this.command.to.emula |
1149e0 | 74 65 20 70 61 63 6b 65 74 2d 72 65 6f 72 64 65 72 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 20 | te.packet-reordering.conditions. |
114a00 | 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 | in.a.Network.Emulator.policy..Se |
114a20 | 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e | t.the.policy.name.and.the.percen |
114a40 | 74 61 67 65 20 6f 66 20 72 65 6f 72 64 65 72 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 | tage.of.reordered.packets.your.t |
114a60 | 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | raffic.will.suffer..Use.this.com |
114a80 | 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 4c 44 50 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 | mand.to.enable.LDP.on.the.interf |
114aa0 | 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | ace.you.define..Use.this.command |
114ac0 | 20 74 6f 20 65 6e 61 62 6c 65 20 4d 50 4c 53 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 6e 20 74 68 | .to.enable.MPLS.processing.on.th |
114ae0 | 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 | e.interface.you.define..Use.this |
114b00 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 20 69 6e 20 74 68 65 20 73 65 | .command.to.enable.PIM.in.the.se |
114b20 | 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 | lected.interface.so.that.it.can. |
114b40 | 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 20 6e 65 69 67 68 62 6f 72 73 2e 00 | communicate.with.PIM.neighbors.. |
114b60 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 76 36 | Use.this.command.to.enable.PIMv6 |
114b80 | 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 | .in.the.selected.interface.so.th |
114ba0 | 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 76 36 | at.it.can.communicate.with.PIMv6 |
114bc0 | 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 65 6e | .neighbors..This.command.also.en |
114be0 | 61 62 6c 65 73 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 | ables.MLD.reports.and.query.on.t |
114c00 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 6e 6c 65 73 73 20 3a 63 66 67 63 6d 64 3a 60 6d 6c 64 | he.interface.unless.:cfgcmd:`mld |
114c20 | 20 64 69 73 61 62 6c 65 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 55 73 65 20 74 68 69 | .disable`.is.configured..Use.thi |
114c40 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 61 63 71 75 69 73 69 74 69 6f 6e 20 | s.command.to.enable.acquisition. |
114c60 | 6f 66 20 49 50 76 36 20 61 64 64 72 65 73 73 20 75 73 69 6e 67 20 73 74 61 74 65 6c 65 73 73 20 | of.IPv6.address.using.stateless. |
114c80 | 61 75 74 6f 63 6f 6e 66 69 67 20 28 53 4c 41 41 43 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | autoconfig.(SLAAC)..Use.this.com |
114ca0 | 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 | mand.to.enable.bandwidth.shaping |
114cc0 | 20 76 69 61 20 52 41 44 49 55 53 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .via.RADIUS..Use.this.command.to |
114ce0 | 20 65 6e 61 62 6c 65 20 70 72 6f 78 79 20 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e | .enable.proxy.Address.Resolution |
114d00 | 20 50 72 6f 74 6f 63 6f 6c 20 28 41 52 50 29 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | .Protocol.(ARP).on.this.interfac |
114d20 | 65 2e 20 50 72 6f 78 79 20 41 52 50 20 61 6c 6c 6f 77 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 | e..Proxy.ARP.allows.an.Ethernet. |
114d40 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 69 74 73 20 6f 77 | interface.to.respond.with.its.ow |
114d60 | 6e 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 | n.:abbr:`MAC.(Media.Access.Contr |
114d80 | 6f 6c 29 60 20 61 64 64 72 65 73 73 20 74 6f 20 41 52 50 20 72 65 71 75 65 73 74 73 20 66 6f 72 | ol)`.address.to.ARP.requests.for |
114da0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 73 75 62 | .destination.IP.addresses.on.sub |
114dc0 | 6e 65 74 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 | nets.attached.to.other.interface |
114de0 | 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 53 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b | s.on.the.system..Subsequent.pack |
114e00 | 65 74 73 20 73 65 6e 74 20 74 6f 20 74 68 6f 73 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 | ets.sent.to.those.destination.IP |
114e20 | 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 61 70 70 72 6f 70 72 | .addresses.are.forwarded.appropr |
114e40 | 69 61 74 65 6c 79 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 | iately.by.the.system..Use.this.c |
114e60 | 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 | ommand.to.enable.targeted.LDP.se |
114e80 | 73 73 69 6f 6e 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 | ssions.to.the.local.router..The. |
114ea0 | 72 6f 75 74 65 72 20 77 69 6c 6c 20 74 68 65 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 79 20 | router.will.then.respond.to.any. |
114ec0 | 73 65 73 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e | sessions.that.are.trying.to.conn |
114ee0 | 65 63 74 20 74 6f 20 69 74 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 61 20 6c 69 6e 6b 20 6c 6f | ect.to.it.that.are.not.a.link.lo |
114f00 | 63 61 6c 20 74 79 70 65 20 6f 66 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 | cal.type.of.TCP.connection..Use. |
114f20 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 64 65 6c 61 79 | this.command.to.enable.the.delay |
114f40 | 20 6f 66 20 50 41 44 4f 20 28 50 50 50 6f 45 20 41 63 74 69 76 65 20 44 69 73 63 6f 76 65 72 79 | .of.PADO.(PPPoE.Active.Discovery |
114f60 | 20 4f 66 66 65 72 29 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 | .Offer).packets,.which.can.be.us |
114f80 | 65 64 20 61 73 20 61 20 73 65 73 73 69 6f 6e 20 62 61 6c 61 6e 63 69 6e 67 20 6d 65 63 68 61 6e | ed.as.a.session.balancing.mechan |
114fa0 | 69 73 6d 20 77 69 74 68 20 6f 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 2e 00 55 73 | ism.with.other.PPPoE.servers..Us |
114fc0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 63 | e.this.command.to.enable.the.loc |
114fe0 | 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 74 72 79 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 | al.router.to.try.and.connect.wit |
115000 | 68 20 61 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 61 6e 6f 74 | h.a.targeted.LDP.session.to.anot |
115020 | 68 65 72 20 72 6f 75 74 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | her.router..Use.this.command.to. |
115040 | 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c | enable.the.logging.of.the.defaul |
115060 | 74 20 61 63 74 69 6f 6e 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2e 00 55 73 65 20 74 | t.action.on.custom.chains..Use.t |
115080 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e | his.command.to.enable.the.loggin |
1150a0 | 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 74 68 65 20 73 | g.of.the.default.action.on.the.s |
1150c0 | 70 65 63 69 66 69 65 64 20 63 68 61 69 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | pecified.chain..Use.this.command |
1150e0 | 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 | .to.enable.the.logging.of.the.de |
115100 | 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | fault.action..Use.this.command.t |
115120 | 6f 20 65 6e 61 62 6c 65 2c 20 64 69 73 61 62 6c 65 2c 20 6f 72 20 73 70 65 63 69 66 79 20 68 6f | o.enable,.disable,.or.specify.ho |
115140 | 70 20 63 6f 75 6e 74 20 66 6f 72 20 54 54 4c 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 4c 44 50 | p.count.for.TTL.security.for.LDP |
115160 | 20 70 65 65 72 73 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 76 61 6c 75 65 20 69 73 20 | .peers..By.default.the.value.is. |
115180 | 73 65 74 20 74 6f 20 32 35 35 20 28 6f 72 20 6d 61 78 20 54 54 4c 29 2e 00 55 73 65 20 74 68 69 | set.to.255.(or.max.TTL)..Use.thi |
1151a0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 66 6c 75 73 68 20 74 68 65 20 6b 65 72 6e 65 6c 20 49 50 | s.command.to.flush.the.kernel.IP |
1151c0 | 76 36 20 72 6f 75 74 65 20 63 61 63 68 65 2e 20 41 6e 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 | v6.route.cache..An.address.can.b |
1151e0 | 65 20 61 64 64 65 64 20 74 6f 20 66 6c 75 73 68 20 69 74 20 6f 6e 6c 79 20 66 6f 72 20 74 68 61 | e.added.to.flush.it.only.for.tha |
115200 | 74 20 72 6f 75 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 | t.route..Use.this.command.to.get |
115220 | 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 7a 6f 6e 65 2e 00 55 73 65 20 74 68 69 73 | .an.overview.of.a.zone..Use.this |
115240 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | .command.to.get.information.abou |
115260 | 74 20 4f 53 50 46 76 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 | t.OSPFv3..Use.this.command.to.ge |
115280 | 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 4e 47 20 70 72 | t.information.about.the.RIPNG.pr |
1152a0 | 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 72 | otocol.Use.this.command.to.instr |
1152c0 | 75 63 74 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 50 50 | uct.the.system.to.establish.a.PP |
1152e0 | 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 | PoE.connection.automatically.onc |
115300 | 65 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 69 6e 74 | e.traffic.passes.through.the.int |
115320 | 65 72 66 61 63 65 2e 20 41 20 64 69 73 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e | erface..A.disabled.on-demand.con |
115340 | 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 74 20 62 6f 6f 74 20 74 | nection.is.established.at.boot.t |
115360 | 69 6d 65 20 61 6e 64 20 72 65 6d 61 69 6e 73 20 75 70 2e 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 | ime.and.remains.up..If.the.link. |
115380 | 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 | fails.for.any.reason,.the.link.i |
1153a0 | 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 55 | s.brought.back.up.immediately..U |
1153c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6e 6b 20 74 68 65 20 50 50 50 6f | se.this.command.to.link.the.PPPo |
1153e0 | 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 | E.connection.to.a.physical.inter |
115400 | 66 61 63 65 2e 20 45 61 63 68 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 75 73 74 | face..Each.PPPoE.connection.must |
115420 | 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f 76 65 72 20 61 20 70 68 79 73 69 63 61 6c 20 | .be.established.over.a.physical. |
115440 | 69 6e 74 65 72 66 61 63 65 2e 20 49 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 67 | interface..Interfaces.can.be.reg |
115460 | 75 6c 61 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 56 49 46 73 20 6f | ular.Ethernet.interfaces,.VIFs.o |
115480 | 72 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 2f 56 49 46 73 2e 00 55 73 65 20 74 | r.bonding.interfaces/VIFs..Use.t |
1154a0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 | his.command.to.locally.check.the |
1154c0 | 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 49 50 6f 45 20 73 65 72 | .active.sessions.in.the.IPoE.ser |
1154e0 | 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 | ver..Use.this.command.to.locally |
115500 | 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 | .check.the.active.sessions.in.th |
115520 | 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.PPPoE.server..Use.this.command |
115540 | 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 | .to.locally.check.the.active.ses |
115560 | 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 | sions.in.the.PPTP.server..Use.th |
115580 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 | is.command.to.locally.check.the. |
1155a0 | 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 53 53 54 50 20 73 65 72 76 | active.sessions.in.the.SSTP.serv |
1155c0 | 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 | er..Use.this.command.to.manually |
1155e0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 20 66 6f | .configure.a.Rendezvous.Point.fo |
115600 | 72 20 50 49 4d 20 73 6f 20 74 68 61 74 20 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 63 61 6e 20 | r.PIM.so.that.join.messages.can. |
115620 | 62 65 20 73 65 6e 74 20 74 68 65 72 65 2e 20 53 65 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a | be.sent.there..Set.the.Rendevouz |
115640 | 20 50 6f 69 6e 74 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 | .Point.address.and.the.matching. |
115660 | 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 20 | prefix.of.group.ranges.covered.. |
115680 | 54 68 65 73 65 20 76 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 | These.values.must.be.shared.with |
1156a0 | 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 74 | .every.router.participating.in.t |
1156c0 | 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | he.PIM.network..Use.this.command |
1156e0 | 20 74 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 64 76 65 72 74 69 73 65 64 20 44 4e 53 20 6e | .to.not.install.advertised.DNS.n |
115700 | 61 6d 65 73 65 72 76 65 72 73 20 69 6e 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d | ameservers.into.the.local.system |
115720 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 70 72 65 66 65 72 20 49 50 76 | ..Use.this.command.to.prefer.IPv |
115740 | 34 20 66 6f 72 20 54 43 50 20 70 65 65 72 20 74 72 61 6e 73 70 6f 72 74 20 63 6f 6e 6e 65 63 74 | 4.for.TCP.peer.transport.connect |
115760 | 69 6f 6e 20 66 6f 72 20 4c 44 50 20 77 68 65 6e 20 62 6f 74 68 20 61 6e 20 49 50 76 34 20 61 6e | ion.for.LDP.when.both.an.IPv4.an |
115780 | 64 20 49 50 76 36 20 4c 44 50 20 61 64 64 72 65 73 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 | d.IPv6.LDP.address.are.configure |
1157a0 | 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 | d.on.the.same.interface..Use.thi |
1157c0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 | s.command.to.reset.IPv6.Neighbor |
1157e0 | 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 63 61 63 68 65 20 66 6f 72 20 61 6e | .Discovery.Protocol.cache.for.an |
115800 | 20 61 64 64 72 65 73 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 | .address.or.interface..Use.this. |
115820 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 61 6e 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 | command.to.reset.an.LDP.neighbor |
115840 | 2f 54 43 50 20 73 65 73 73 69 6f 6e 20 74 68 61 74 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 | /TCP.session.that.is.established |
115860 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 4f | .Use.this.command.to.reset.the.O |
115880 | 70 65 6e 56 50 4e 20 70 72 6f 63 65 73 73 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 | penVPN.process.on.a.specific.int |
1158a0 | 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 | erface..Use.this.command.to.rese |
1158c0 | 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 00 | t.the.specified.OpenVPN.client.. |
1158e0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 | Use.this.command.to.restrict.the |
115900 | 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 6f 6e 20 61 20 67 69 76 65 6e 20 61 63 63 65 73 73 | .PPPoE.session.on.a.given.access |
115920 | 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 20 4e 6f 72 6d 61 6c 6c 79 2c 20 61 20 68 6f 73 74 20 | .concentrator..Normally,.a.host. |
115940 | 73 65 6e 64 73 20 61 20 50 50 50 6f 45 20 69 6e 69 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 20 | sends.a.PPPoE.initiation.packet. |
115960 | 74 6f 20 73 74 61 72 74 20 74 68 65 20 50 50 50 6f 45 20 64 69 73 63 6f 76 65 72 79 20 70 72 6f | to.start.the.PPPoE.discovery.pro |
115980 | 63 65 73 73 2c 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 | cess,.a.number.of.access.concent |
1159a0 | 72 61 74 6f 72 73 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 6f 66 66 65 72 20 70 61 63 6b 65 74 | rators.respond.with.offer.packet |
1159c0 | 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 73 65 6c 65 63 74 73 20 6f 6e 65 20 6f 66 20 74 68 | s.and.the.host.selects.one.of.th |
1159e0 | 65 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 | e.responding.access.concentrator |
115a00 | 73 20 74 6f 20 73 65 72 76 65 20 74 68 69 73 20 73 65 73 73 69 6f 6e 2e 00 55 73 65 20 74 68 69 | s.to.serve.this.session..Use.thi |
115a20 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 69 6e 74 65 72 66 61 63 65 20 69 | s.command.to.see.LDP.interface.i |
115a40 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | nformation.Use.this.command.to.s |
115a60 | 65 65 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 | ee.LDP.neighbor.information.Use. |
115a80 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 64 65 74 61 69 6c 65 64 20 4c 44 50 | this.command.to.see.detailed.LDP |
115aa0 | 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 | .neighbor.information.Use.this.c |
115ac0 | 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e | ommand.to.see.discovery.hello.in |
115ae0 | 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 | formation.Use.this.command.to.se |
115b00 | 65 20 74 68 65 20 4c 61 62 65 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 2e 00 55 73 | e.the.Label.Information.Base..Us |
115b20 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 61 20 6e 61 6d 65 20 66 6f 72 | e.this.command.to.set.a.name.for |
115b40 | 20 74 68 69 73 20 50 50 50 6f 45 2d 73 65 72 76 65 72 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e | .this.PPPoE-server.access.concen |
115b60 | 74 72 61 74 6f 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 | trator..Use.this.command.to.set. |
115b80 | 72 65 2d 64 69 61 6c 20 64 65 6c 61 79 20 74 69 6d 65 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 | re-dial.delay.time.to.be.used.wi |
115ba0 | 74 68 20 70 65 72 73 69 73 74 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 | th.persist.PPPoE.sessions..When. |
115bc0 | 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 | the.PPPoE.session.is.terminated. |
115be0 | 62 79 20 70 65 65 72 2c 20 61 6e 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 6f 70 74 69 6f 6e 20 69 73 | by.peer,.and.on-demand.option.is |
115c00 | 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 | .not.set,.the.router.will.attemp |
115c20 | 74 20 74 6f 20 72 65 2d 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 50 50 50 6f 45 20 6c 69 6e 6b | t.to.re-establish.the.PPPoE.link |
115c40 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 | ..Use.this.command.to.set.the.IP |
115c60 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 6f | .address.of.the.local.endpoint.o |
115c80 | 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 | f.a.PPPoE.session..If.it.is.not. |
115ca0 | 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 | set.it.will.be.negotiated..Use.t |
115cc0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 | his.command.to.set.the.IP.addres |
115ce0 | 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 | s.of.the.remote.endpoint.of.a.PP |
115d00 | 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 | PoE.session..If.it.is.not.set.it |
115d20 | 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f | .will.be.negotiated..Use.this.co |
115d40 | 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 | mmand.to.set.the.IPv4.or.IPv6.ad |
115d60 | 64 72 65 73 73 20 6f 66 20 65 76 65 72 79 20 44 6f 6d 61 6e 20 4e 61 6d 65 20 53 65 72 76 65 72 | dress.of.every.Doman.Name.Server |
115d80 | 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 2e 20 54 68 65 79 20 77 69 6c | .you.want.to.configure..They.wil |
115da0 | 6c 20 62 65 20 70 72 6f 70 61 67 61 74 65 64 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 | l.be.propagated.to.PPPoE.clients |
115dc0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 | ..Use.this.command.to.set.the.IP |
115de0 | 76 34 20 6f 72 20 49 50 76 36 20 74 72 61 6e 73 70 6f 72 74 2d 61 64 64 72 65 73 73 20 75 73 65 | v4.or.IPv6.transport-address.use |
115e00 | 64 20 62 79 20 4c 44 50 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 | d.by.LDP..Use.this.command.to.se |
115e20 | 74 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 62 | t.the.idle.timeout.interval.to.b |
115e40 | 65 20 75 73 65 64 20 77 69 74 68 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 73 65 73 73 | e.used.with.on-demand.PPPoE.sess |
115e60 | 69 6f 6e 73 2e 20 57 68 65 6e 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 | ions..When.an.on-demand.connecti |
115e80 | 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 | on.is.established,.the.link.is.b |
115ea0 | 72 6f 75 67 68 74 20 75 70 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 69 73 20 73 | rought.up.only.when.traffic.is.s |
115ec0 | 65 6e 74 20 61 6e 64 20 69 73 20 64 69 73 61 62 6c 65 64 20 77 68 65 6e 20 74 68 65 20 6c 69 6e | ent.and.is.disabled.when.the.lin |
115ee0 | 6b 20 69 73 20 69 64 6c 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 73 70 65 63 69 | k.is.idle.for.the.interval.speci |
115f00 | 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 | fied..Use.this.command.to.set.th |
115f20 | 65 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 | e.password.for.authenticating.wi |
115f40 | 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 | th.a.remote.PPPoE.endpoint..Auth |
115f60 | 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 | entication.is.optional.from.the. |
115f80 | 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 | system's.point.of.view.but.most. |
115fa0 | 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 | service.providers.require.it..Us |
115fc0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 74 61 72 67 65 74 | e.this.command.to.set.the.target |
115fe0 | 20 74 6f 20 75 73 65 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 | .to.use..Action.queue.must.be.de |
116000 | 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 00 55 73 65 20 74 68 | fined.to.use.this.setting.Use.th |
116020 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 66 | is.command.to.set.the.username.f |
116040 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 | or.authenticating.with.a.remote. |
116060 | 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 | PPPoE.endpoint..Authentication.i |
116080 | 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 | s.optional.from.the.system's.poi |
1160a0 | 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 | nt.of.view.but.most.service.prov |
1160c0 | 69 64 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | iders.require.it..Use.this.comma |
1160e0 | 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 | nd.to.show.IPv6.Border.Gateway.P |
116100 | 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f | rotocol.information..Use.this.co |
116120 | 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 | mmand.to.show.IPv6.Neighbor.Disc |
116140 | 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 | overy.Protocol.information..Use. |
116160 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 66 6f 72 77 61 72 | this.command.to.show.IPv6.forwar |
116180 | 64 69 6e 67 20 73 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ding.status..Use.this.command.to |
1161a0 | 20 73 68 6f 77 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 | .show.IPv6.multicast.group.membe |
1161c0 | 72 73 68 69 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 | rship..Use.this.command.to.show. |
1161e0 | 49 50 76 36 20 72 6f 75 74 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | IPv6.routes..Use.this.command.to |
116200 | 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 73 00 55 73 65 20 | .show.all.IPv6.access.lists.Use. |
116220 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 70 72 | this.command.to.show.all.IPv6.pr |
116240 | 65 66 69 78 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | efix.lists.Use.this.command.to.s |
116260 | 68 6f 77 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 | how.the.status.of.the.RIPNG.prot |
116280 | 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 | ocol.Use.this.command.to.specify |
1162a0 | 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 | .a.DNS.server.for.the.system.to. |
1162c0 | 62 65 20 75 73 65 64 20 66 6f 72 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 2e 20 4d 6f 72 65 20 74 68 | be.used.for.DNS.lookups..More.th |
1162e0 | 61 6e 20 6f 6e 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 | an.one.DNS.server.can.be.added,. |
116300 | 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2e 20 42 6f 74 68 20 | configuring.one.at.a.time..Both. |
116320 | 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 73 75 70 70 | IPv4.and.IPv6.addresses.are.supp |
116340 | 6f 72 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 | orted..Use.this.command.to.speci |
116360 | 66 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 | fy.a.domain.name.to.be.appended. |
116380 | 74 6f 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 77 69 74 68 69 6e 20 55 52 4c 73 20 74 68 61 74 | to.domain-names.within.URLs.that |
1163a0 | 20 64 6f 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 61 20 64 6f 74 20 60 60 2e 60 60 20 74 68 65 20 | .do.not.include.a.dot.``.``.the. |
1163c0 | 64 6f 6d 61 69 6e 20 69 73 20 61 70 70 65 6e 64 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | domain.is.appended..Use.this.com |
1163e0 | 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 62 | mand.to.specify.a.service.name.b |
116400 | 79 20 77 68 69 63 68 20 74 68 65 20 6c 6f 63 61 6c 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 | y.which.the.local.PPPoE.interfac |
116420 | 65 20 63 61 6e 20 73 65 6c 65 63 74 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 | e.can.select.access.concentrator |
116440 | 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 2e 20 49 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 | s.to.connect.with..It.will.conne |
116460 | 63 74 20 74 6f 20 61 6e 79 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 66 | ct.to.any.access.concentrator.if |
116480 | 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 | .not.set..Use.this.command.to.us |
1164a0 | 65 20 4c 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 49 50 76 34 20 45 | e.Layer.4.information.for.IPv4.E |
1164c0 | 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | CMP.hashing..Use.this.command.to |
1164e0 | 20 75 73 65 20 61 20 43 69 73 63 6f 20 6e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 74 20 66 6f 72 6d 61 | .use.a.Cisco.non-compliant.forma |
116500 | 74 20 74 6f 20 73 65 6e 64 20 61 6e 64 20 69 6e 74 65 72 70 72 65 74 20 74 68 65 20 44 75 61 6c | t.to.send.and.interpret.the.Dual |
116520 | 2d 53 74 61 63 6b 20 63 61 70 61 62 69 6c 69 74 79 20 54 4c 56 20 66 6f 72 20 49 50 76 36 20 4c | -Stack.capability.TLV.for.IPv6.L |
116540 | 44 50 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 | DP.communications..This.is.relat |
116560 | 65 64 20 74 6f 20 3a 72 66 63 3a 60 37 35 35 32 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ed.to.:rfc:`7552`..Use.this.comm |
116580 | 61 6e 64 20 74 6f 20 75 73 65 20 6f 72 64 65 72 65 64 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 | and.to.use.ordered.label.distrib |
1165a0 | 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 65 2e 20 46 52 52 20 62 79 20 64 65 66 61 75 | ution.control.mode..FRR.by.defau |
1165c0 | 6c 74 20 75 73 65 73 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6c 61 62 65 6c 20 64 69 73 74 72 69 | lt.uses.independent.label.distri |
1165e0 | 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 65 20 66 6f 72 20 6c 61 62 65 6c 20 64 69 | bution.control.mode.for.label.di |
116600 | 73 74 72 69 62 75 74 69 6f 6e 2e 20 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 | stribution...This.is.related.to. |
116620 | 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | :rfc:`5036`..Use.this.command.to |
116640 | 20 75 73 65 72 20 4c 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 45 43 | .user.Layer.4.information.for.EC |
116660 | 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | MP.hashing..Use.this.command.to. |
116680 | 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 64 65 74 61 | view.operational.status.and.deta |
1166a0 | 69 6c 73 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f | ils.wireless-specific.informatio |
1166c0 | 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e | n.about.all.wireless.interfaces. |
1166e0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 | .Use.this.command.to.view.operat |
116700 | 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 | ional.status.and.wireless-specif |
116720 | 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 | ic.information.about.all.wireles |
116740 | 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | s.interfaces..Use.this.command.t |
116760 | 6f 20 76 69 65 77 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 71 75 65 75 65 20 | o.view.wireless.interface.queue. |
116780 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 | information..The.wireless.interf |
1167a0 | 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c | ace.identifier.can.range.from.wl |
1167c0 | 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 55 73 65 64 20 66 6f 72 20 74 72 6f 75 62 6c 65 | an0.to.wlan999..Used.for.trouble |
1167e0 | 73 68 6f 6f 74 69 6e 67 2e 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 61 20 73 70 65 63 69 66 | shooting..Used.to.block.a.specif |
116800 | 69 63 20 6d 69 6d 65 2d 74 79 70 65 2e 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 73 70 65 63 | ic.mime-type..Used.to.block.spec |
116820 | 69 66 69 63 20 64 6f 6d 61 69 6e 73 20 62 79 20 74 68 65 20 50 72 6f 78 79 2e 20 53 70 65 63 69 | ific.domains.by.the.Proxy..Speci |
116840 | 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 | fying."vyos.net".will.block.all. |
116860 | 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 74 2c 20 61 6e 64 20 73 70 65 63 69 66 79 69 | access.to.vyos.net,.and.specifyi |
116880 | 6e 67 20 22 2e 78 78 78 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 | ng.".xxx".will.block.all.access. |
1168a0 | 74 6f 20 55 52 4c 73 20 68 61 76 69 6e 67 20 61 6e 20 55 52 4c 20 65 6e 64 69 6e 67 20 6f 6e 20 | to.URLs.having.an.URL.ending.on. |
1168c0 | 2e 78 78 78 2e 00 55 73 65 72 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 70 75 74 20 | .xxx..User.interface.can.be.put. |
1168e0 | 74 6f 20 56 52 46 20 63 6f 6e 74 65 78 74 20 76 69 61 20 52 41 44 49 55 53 20 41 63 63 65 73 73 | to.VRF.context.via.RADIUS.Access |
116900 | 2d 41 63 63 65 70 74 20 70 61 63 6b 65 74 2c 20 6f 72 20 63 68 61 6e 67 65 20 69 74 20 76 69 61 | -Accept.packet,.or.change.it.via |
116920 | 20 52 41 44 49 55 53 20 43 6f 41 2e 20 60 60 41 63 63 65 6c 2d 56 52 46 2d 4e 61 6d 65 60 60 20 | .RADIUS.CoA..``Accel-VRF-Name``. |
116940 | 69 73 20 75 73 65 64 20 66 72 6f 6d 20 74 68 65 73 65 20 70 75 72 70 6f 73 65 73 2e 20 49 74 20 | is.used.from.these.purposes..It. |
116960 | 69 73 20 63 75 73 74 6f 6d 20 60 41 43 43 45 4c 2d 50 50 50 20 61 74 74 72 69 62 75 74 65 60 5f | is.custom.`ACCEL-PPP.attribute`_ |
116980 | 2e 20 44 65 66 69 6e 65 20 69 74 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 | ..Define.it.in.your.RADIUS.serve |
1169a0 | 72 2e 00 55 73 65 72 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 00 55 73 69 6e 67 20 27 73 6f | r..User-level.messages.Using.'so |
1169c0 | 66 74 2d 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 27 20 77 65 20 67 65 74 20 74 68 65 20 70 | ft-reconfiguration'.we.get.the.p |
1169e0 | 6f 6c 69 63 79 20 75 70 64 61 74 65 20 77 69 74 68 6f 75 74 20 62 6f 75 6e 63 69 6e 67 20 74 68 | olicy.update.without.bouncing.th |
116a00 | 65 20 6e 65 69 67 68 62 6f 72 2e 00 55 73 69 6e 67 20 2a 2a 6f 70 65 6e 76 70 6e 2d 6f 70 74 69 | e.neighbor..Using.**openvpn-opti |
116a20 | 6f 6e 20 2d 72 65 6e 65 67 2d 73 65 63 2a 2a 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 2e 20 54 | on.-reneg-sec**.can.be.tricky..T |
116a40 | 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 6e 65 67 6f 74 69 61 74 | his.option.is.used.to.renegotiat |
116a60 | 65 20 64 61 74 61 20 63 68 61 6e 6e 65 6c 20 61 66 74 65 72 20 6e 20 73 65 63 6f 6e 64 73 2e 20 | e.data.channel.after.n.seconds.. |
116a80 | 57 68 65 6e 20 75 73 65 64 20 61 74 20 62 6f 74 68 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 | When.used.at.both.server.and.cli |
116aa0 | 65 6e 74 2c 20 74 68 65 20 6c 6f 77 65 72 20 76 61 6c 75 65 20 77 69 6c 6c 20 74 72 69 67 67 65 | ent,.the.lower.value.will.trigge |
116ac0 | 72 20 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 73 65 74 20 | r.the.renegotiation..If.you.set. |
116ae0 | 69 74 20 74 6f 20 30 20 6f 6e 20 6f 6e 65 20 73 69 64 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 | it.to.0.on.one.side.of.the.conne |
116b00 | 63 74 69 6f 6e 20 28 74 6f 20 64 69 73 61 62 6c 65 20 69 74 29 2c 20 74 68 65 20 63 68 6f 73 65 | ction.(to.disable.it),.the.chose |
116b20 | 6e 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 73 69 64 65 20 77 69 6c 6c 20 64 | n.value.on.the.other.side.will.d |
116b40 | 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 20 | etermine.when.the.renegotiation. |
116b60 | 77 69 6c 6c 20 6f 63 63 75 72 2e 00 55 73 69 6e 67 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 | will.occur..Using.BGP.confederat |
116b80 | 69 6f 6e 00 55 73 69 6e 67 20 42 47 50 20 72 6f 75 74 65 2d 72 65 66 6c 65 63 74 6f 72 73 00 55 | ion.Using.BGP.route-reflectors.U |
116ba0 | 73 69 6e 67 20 56 4c 41 4e 20 61 77 61 72 65 20 42 72 69 64 67 65 00 55 73 69 6e 67 20 6f 75 72 | sing.VLAN.aware.Bridge.Using.our |
116bc0 | 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 63 68 61 70 74 65 72 20 2d 20 3a 72 65 66 3a 60 70 | .documentation.chapter.-.:ref:`p |
116be0 | 6b 69 60 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 69 6e 73 74 61 6c 6c 20 43 41 20 61 6e 64 20 | ki`.generate.and.install.CA.and. |
116c00 | 53 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 69 6e 67 20 74 68 65 20 6f 70 65 | Server.certificate.Using.the.ope |
116c20 | 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 42 72 69 64 | ration.mode.command.to.view.Brid |
116c40 | 67 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 69 6e 67 20 74 68 69 73 20 63 6f 6d 6d 61 6e | ge.Information.Using.this.comman |
116c60 | 64 2c 20 79 6f 75 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6c 69 65 6e 74 20 | d,.you.will.create.a.new.client. |
116c80 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 | configuration.which.can.connect. |
116ca0 | 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e | to.``interface``.on.this.router. |
116cc0 | 20 54 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 | .The.public.key.from.the.specifi |
116ce0 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 78 | ed.interface.is.automatically.ex |
116d00 | 74 72 61 63 74 65 64 20 61 6e 64 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 74 68 65 20 63 6f | tracted.and.embedded.into.the.co |
116d20 | 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 55 73 75 61 6c 6c 79 20 74 68 69 73 20 63 6f 6e 66 69 67 | nfiguration..Usually.this.config |
116d40 | 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 6e 20 50 45 73 20 28 50 72 6f 76 69 64 65 72 | uration.is.used.in.PEs.(Provider |
116d60 | 20 45 64 67 65 29 20 74 6f 20 72 65 70 6c 61 63 65 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 63 | .Edge).to.replace.the.incoming.c |
116d80 | 75 73 74 6f 6d 65 72 20 41 53 20 6e 75 6d 62 65 72 20 73 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 | ustomer.AS.number.so.the.connect |
116da0 | 65 64 20 43 45 20 28 20 43 75 73 74 6f 6d 65 72 20 45 64 67 65 29 20 63 61 6e 20 75 73 65 20 74 | ed.CE.(.Customer.Edge).can.use.t |
116dc0 | 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 61 73 20 74 68 65 20 6f 74 68 65 72 20 63 | he.same.AS.number.as.the.other.c |
116de0 | 75 73 74 6f 6d 65 72 20 73 69 74 65 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 75 73 74 6f | ustomer.sites..This.allows.custo |
116e00 | 6d 65 72 73 20 6f 66 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 | mers.of.the.provider.network.to. |
116e20 | 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 61 63 72 6f 73 73 20 74 68 | use.the.same.AS.number.across.th |
116e40 | 65 69 72 20 73 69 74 65 73 2e 00 56 48 54 20 28 56 65 72 79 20 48 69 67 68 20 54 68 72 6f 75 67 | eir.sites..VHT.(Very.High.Throug |
116e60 | 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 61 63 29 00 56 48 | hput).capabilities.(802.11ac).VH |
116e80 | 54 20 6c 69 6e 6b 20 61 64 61 70 74 61 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 56 | T.link.adaptation.capabilities.V |
116ea0 | 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 | HT.operating.channel.center.freq |
116ec0 | 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 20 31 20 28 66 6f 72 20 75 73 65 20 77 | uency.-.center.freq.1.(for.use.w |
116ee0 | 69 74 68 20 38 30 2c 20 38 30 2b 38 30 20 61 6e 64 20 31 36 30 20 6d 6f 64 65 73 29 00 56 48 54 | ith.80,.80+80.and.160.modes).VHT |
116f00 | 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 | .operating.channel.center.freque |
116f20 | 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 20 32 20 28 66 6f 72 20 75 73 65 20 77 69 74 | ncy.-.center.freq.2.(for.use.wit |
116f40 | 68 20 74 68 65 20 38 30 2b 38 30 20 6d 6f 64 65 29 00 56 4c 41 4e 00 56 4c 41 4e 20 31 30 20 6f | h.the.80+80.mode).VLAN.VLAN.10.o |
116f60 | 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 20 28 41 43 43 45 53 | n.member.interface.`eth2`.(ACCES |
116f80 | 53 20 6d 6f 64 65 29 00 56 4c 41 4e 20 45 78 61 6d 70 6c 65 00 56 4c 41 4e 20 4f 70 74 69 6f 6e | S.mode).VLAN.Example.VLAN.Option |
116fa0 | 73 00 56 4c 41 4e 20 6d 6f 6e 69 74 6f 72 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 63 20 63 72 65 | s.VLAN.monitor.for.automatic.cre |
116fc0 | 61 74 69 6f 6e 20 6f 66 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 66 6f 72 20 73 70 65 | ation.of.VLAN.interfaces.for.spe |
116fe0 | 63 69 66 69 63 20 75 73 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 3c 69 6e 74 65 72 66 61 63 | cific.user.on.specific.<interfac |
117000 | 65 3e 00 56 4c 41 4e 20 6e 61 6d 65 00 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 | e>.VLAN.name.VLAN's.can.be.creat |
117020 | 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 | ed.by.Accel-ppp.on.the.fly.via.t |
117040 | 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 | he.use.of.a.Kernel.module.named. |
117060 | 60 60 76 6c 61 6e 5f 6d 6f 6e 60 60 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e | ``vlan_mon``,.which.is.monitorin |
117080 | 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 | g.incoming.vlans.and.creates.the |
1170a0 | 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 | .necessary.VLAN.if.required.and. |
1170c0 | 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f | allowed..VyOS.supports.the.use.o |
1170e0 | 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e | f.either.VLAN.ID's.or.entire.ran |
117100 | 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 | ges,.both.values.can.be.defined. |
117120 | 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 | at.the.same.time.for.an.interfac |
117140 | 65 2e 00 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 | e..VLAN's.can.be.created.by.Acce |
117160 | 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 | l-ppp.on.the.fly.via.the.use.of. |
117180 | 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 76 6c 61 6e 5f 6d 6f 6e 60 | a.Kernel.module.named.`vlan_mon` |
1171a0 | 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 | ,.which.is.monitoring.incoming.v |
1171c0 | 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 | lans.and.creates.the.necessary.V |
1171e0 | 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f | LAN.if.required.and.allowed..VyO |
117200 | 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 | S.supports.the.use.of.either.VLA |
117220 | 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 | N.ID's.or.entire.ranges,.both.va |
117240 | 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 | lues.can.be.defined.at.the.same. |
117260 | 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4d 77 61 72 65 20 75 73 | time.for.an.interface..VMware.us |
117280 | 65 72 73 20 73 68 6f 75 6c 64 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 56 4d 58 4e 45 54 33 | ers.should.ensure.that.a.VMXNET3 |
1172a0 | 20 61 64 61 70 74 65 72 20 69 73 20 75 73 65 64 2e 20 45 31 30 30 30 20 61 64 61 70 74 65 72 73 | .adapter.is.used..E1000.adapters |
1172c0 | 20 68 61 76 65 20 6b 6e 6f 77 6e 20 69 73 73 75 65 73 20 77 69 74 68 20 47 52 45 20 70 72 6f 63 | .have.known.issues.with.GRE.proc |
1172e0 | 65 73 73 69 6e 67 2e 00 56 50 4e 00 56 50 4e 2d 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 71 | essing..VPN.VPN-clients.will.req |
117300 | 75 65 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2c 20 6f | uest.configuration.parameters,.o |
117320 | 70 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 63 61 6e 20 44 4e 53 20 70 61 72 61 6d 65 74 65 72 20 | ptionally.you.can.DNS.parameter. |
117340 | 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 56 52 46 00 56 52 46 20 52 6f 75 74 65 20 4c 65 61 | to.the.client..VRF.VRF.Route.Lea |
117360 | 6b 69 6e 67 00 56 52 46 20 61 6e 64 20 4e 41 54 00 56 52 46 20 62 6c 75 65 20 72 6f 75 74 69 6e | king.VRF.and.NAT.VRF.blue.routin |
117380 | 67 20 74 61 62 6c 65 00 56 52 46 20 64 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | g.table.VRF.default.routing.tabl |
1173a0 | 65 00 56 52 46 20 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 6f 75 74 | e.VRF.red.routing.table.VRF.rout |
1173c0 | 65 20 6c 65 61 6b 69 6e 67 00 56 52 46 20 74 6f 70 6f 6c 6f 67 79 20 65 78 61 6d 70 6c 65 00 56 | e.leaking.VRF.topology.example.V |
1173e0 | 52 52 50 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 52 65 64 75 6e 64 61 6e 63 79 20 50 | RRP.(Virtual.Router.Redundancy.P |
117400 | 72 6f 74 6f 63 6f 6c 29 20 70 72 6f 76 69 64 65 73 20 61 63 74 69 76 65 2f 62 61 63 6b 75 70 20 | rotocol).provides.active/backup. |
117420 | 72 65 64 75 6e 64 61 6e 63 79 20 66 6f 72 20 72 6f 75 74 65 72 73 2e 20 45 76 65 72 79 20 56 52 | redundancy.for.routers..Every.VR |
117440 | 52 50 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 70 68 79 73 69 63 61 6c 20 49 50 2f 49 50 76 36 | RP.router.has.a.physical.IP/IPv6 |
117460 | 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 61 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e | .address,.and.a.virtual.address. |
117480 | 20 4f 6e 20 73 74 61 72 74 75 70 2c 20 72 6f 75 74 65 72 73 20 65 6c 65 63 74 20 74 68 65 20 6d | .On.startup,.routers.elect.the.m |
1174a0 | 61 73 74 65 72 2c 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 | aster,.and.the.router.with.the.h |
1174c0 | 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 | ighest.priority.becomes.the.mast |
1174e0 | 65 72 20 61 6e 64 20 61 73 73 69 67 6e 73 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 | er.and.assigns.the.virtual.addre |
117500 | 73 73 20 74 6f 20 69 74 73 20 69 6e 74 65 72 66 61 63 65 2e 20 41 6c 6c 20 72 6f 75 74 65 72 73 | ss.to.its.interface..All.routers |
117520 | 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 69 65 73 20 62 65 63 6f 6d 65 20 62 61 | .with.lower.priorities.become.ba |
117540 | 63 6b 75 70 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 6d 61 73 74 65 72 20 74 68 65 6e 20 73 74 | ckup.routers..The.master.then.st |
117560 | 61 72 74 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 74 | arts.sending.keepalive.packets.t |
117580 | 6f 20 6e 6f 74 69 66 79 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 69 74 27 73 | o.notify.other.routers.that.it's |
1175a0 | 20 61 76 61 69 6c 61 62 6c 65 2e 20 49 66 20 74 68 65 20 6d 61 73 74 65 72 20 66 61 69 6c 73 20 | .available..If.the.master.fails. |
1175c0 | 61 6e 64 20 73 74 6f 70 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b | and.stops.sending.keepalive.pack |
1175e0 | 65 74 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 68 69 | ets,.the.router.with.the.next.hi |
117600 | 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6e 65 77 20 6d | ghest.priority.becomes.the.new.m |
117620 | 61 73 74 65 72 20 61 6e 64 20 74 61 6b 65 73 20 6f 76 65 72 20 74 68 65 20 76 69 72 74 75 61 6c | aster.and.takes.over.the.virtual |
117640 | 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 63 61 6e 20 75 73 65 20 74 77 6f 20 6d 6f 64 65 73 | .address..VRRP.can.use.two.modes |
117660 | 3a 20 70 72 65 65 6d 70 74 69 76 65 20 61 6e 64 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 2e | :.preemptive.and.non-preemptive. |
117680 | 20 49 6e 20 74 68 65 20 70 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 69 66 20 61 20 72 6f | .In.the.preemptive.mode,.if.a.ro |
1176a0 | 75 74 65 72 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 66 61 69 6c | uter.with.a.higher.priority.fail |
1176c0 | 73 20 61 6e 64 20 74 68 65 6e 20 63 6f 6d 65 73 20 62 61 63 6b 2c 20 72 6f 75 74 65 72 73 20 77 | s.and.then.comes.back,.routers.w |
1176e0 | 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 67 69 76 65 20 75 70 20 | ith.lower.priority.will.give.up. |
117700 | 74 68 65 69 72 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 2e 20 49 6e 20 6e 6f 6e 2d 70 72 65 65 | their.master.status..In.non-pree |
117720 | 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 74 68 65 20 6e 65 77 6c 79 20 65 6c 65 63 74 65 64 20 6d | mptive.mode,.the.newly.elected.m |
117740 | 61 73 74 65 72 20 77 69 6c 6c 20 6b 65 65 70 20 74 68 65 20 6d 61 73 74 65 72 20 73 74 61 74 75 | aster.will.keep.the.master.statu |
117760 | 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 69 6e 64 65 66 69 | s.and.the.virtual.address.indefi |
117780 | 6e 69 74 65 6c 79 2e 00 56 52 52 50 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 61 6e 20 62 | nitely..VRRP.functionality.can.b |
1177a0 | 65 20 65 78 74 65 6e 64 65 64 20 77 69 74 68 20 73 63 72 69 70 74 73 2e 20 56 79 4f 53 20 73 75 | e.extended.with.scripts..VyOS.su |
1177c0 | 70 70 6f 72 74 73 20 74 77 6f 20 6b 69 6e 64 73 20 6f 66 20 73 63 72 69 70 74 73 3a 20 68 65 61 | pports.two.kinds.of.scripts:.hea |
1177e0 | 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e | lth.check.scripts.and.transition |
117800 | 20 73 63 72 69 70 74 73 2e 20 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 65 | .scripts..Health.check.scripts.e |
117820 | 78 65 63 75 74 65 20 63 75 73 74 6f 6d 20 63 68 65 63 6b 73 20 69 6e 20 61 64 64 69 74 69 6f 6e | xecute.custom.checks.in.addition |
117840 | 20 74 6f 20 74 68 65 20 6d 61 73 74 65 72 20 72 6f 75 74 65 72 20 72 65 61 63 68 61 62 69 6c 69 | .to.the.master.router.reachabili |
117860 | 74 79 2e 20 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 61 72 65 20 65 78 65 63 75 | ty..Transition.scripts.are.execu |
117880 | 74 65 64 20 77 68 65 6e 20 56 52 52 50 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 66 72 6f 6d | ted.when.VRRP.state.changes.from |
1178a0 | 20 6d 61 73 74 65 72 20 74 6f 20 62 61 63 6b 75 70 20 6f 72 20 66 61 75 6c 74 20 61 6e 64 20 76 | .master.to.backup.or.fault.and.v |
1178c0 | 69 63 65 20 76 65 72 73 61 20 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 6e 61 | ice.versa.and.can.be.used.to.ena |
1178e0 | 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 63 65 72 74 61 69 6e 20 73 65 72 76 69 63 65 73 2c | ble.or.disable.certain.services, |
117900 | 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 00 56 52 52 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 | .for.example..VRRP.groups.are.cr |
117920 | 65 61 74 65 64 20 77 69 74 68 20 74 68 65 20 60 60 73 65 74 20 68 69 67 68 2d 61 76 61 69 6c 61 | eated.with.the.``set.high-availa |
117940 | 62 69 6c 69 74 79 20 76 72 72 70 20 67 72 6f 75 70 20 24 47 52 4f 55 50 5f 4e 41 4d 45 60 60 20 | bility.vrrp.group.$GROUP_NAME``. |
117960 | 63 6f 6d 6d 61 6e 64 73 2e 20 54 68 65 20 72 65 71 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 | commands..The.required.parameter |
117980 | 73 20 61 72 65 20 69 6e 74 65 72 66 61 63 65 2c 20 76 72 69 64 2c 20 61 6e 64 20 61 64 64 72 65 | s.are.interface,.vrid,.and.addre |
1179a0 | 73 73 2e 00 56 52 52 50 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 75 73 65 20 6d | ss..VRRP.keepalive.packets.use.m |
1179c0 | 75 6c 74 69 63 61 73 74 2c 20 61 6e 64 20 56 52 52 50 20 73 65 74 75 70 73 20 61 72 65 20 6c 69 | ulticast,.and.VRRP.setups.are.li |
1179e0 | 6d 69 74 65 64 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 | mited.to.a.single.datalink.layer |
117a00 | 20 73 65 67 6d 65 6e 74 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 | .segment..You.can.setup.multiple |
117a20 | 20 56 52 52 50 20 67 72 6f 75 70 73 20 28 61 6c 73 6f 20 63 61 6c 6c 65 64 20 76 69 72 74 75 61 | .VRRP.groups.(also.called.virtua |
117a40 | 6c 20 72 6f 75 74 65 72 73 29 2e 20 56 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 20 61 72 65 20 | l.routers)..Virtual.routers.are. |
117a60 | 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 56 52 49 44 20 28 56 69 72 74 75 61 6c 20 52 6f | identified.by.a.VRID.(Virtual.Ro |
117a80 | 75 74 65 72 20 49 44 65 6e 74 69 66 69 65 72 29 2e 20 49 66 20 79 6f 75 20 73 65 74 75 70 20 6d | uter.IDentifier)..If.you.setup.m |
117aa0 | 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 | ultiple.groups.on.the.same.inter |
117ac0 | 66 61 63 65 2c 20 74 68 65 69 72 20 56 52 49 44 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 | face,.their.VRIDs.must.be.unique |
117ae0 | 20 69 66 20 74 68 65 79 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 61 | .if.they.use.the.same.address.fa |
117b00 | 6d 69 6c 79 2c 20 62 75 74 20 69 74 27 73 20 70 6f 73 73 69 62 6c 65 20 28 65 76 65 6e 20 69 66 | mily,.but.it's.possible.(even.if |
117b20 | 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 72 65 61 64 61 62 69 6c 69 74 79 | .not.recommended.for.readability |
117b40 | 20 72 65 61 73 6f 6e 73 29 20 74 6f 20 75 73 65 20 64 75 70 6c 69 63 61 74 65 20 56 52 49 44 73 | .reasons).to.use.duplicate.VRIDs |
117b60 | 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 56 52 52 50 20 70 | .on.different.interfaces..VRRP.p |
117b80 | 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 60 60 70 72 69 6f 72 69 | riority.can.be.set.with.``priori |
117ba0 | 74 79 60 60 20 6f 70 74 69 6f 6e 3a 00 56 54 49 20 2d 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 | ty``.option:.VTI.-.Virtual.Tunne |
117bc0 | 6c 20 49 6e 74 65 72 66 61 63 65 00 56 58 4c 41 4e 00 56 58 4c 41 4e 20 69 73 20 61 6e 20 65 76 | l.Interface.VXLAN.VXLAN.is.an.ev |
117be0 | 6f 6c 75 74 69 6f 6e 20 6f 66 20 65 66 66 6f 72 74 73 20 74 6f 20 73 74 61 6e 64 61 72 64 69 7a | olution.of.efforts.to.standardiz |
117c00 | 65 20 61 6e 20 6f 76 65 72 6c 61 79 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 70 72 6f 74 6f | e.an.overlay.encapsulation.proto |
117c20 | 63 6f 6c 2e 20 49 74 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 | col..It.increases.the.scalabilit |
117c40 | 79 20 75 70 20 74 6f 20 31 36 20 6d 69 6c 6c 69 6f 6e 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f | y.up.to.16.million.logical.netwo |
117c60 | 72 6b 73 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 6c 61 79 65 72 20 32 20 61 64 6a 61 63 | rks.and.allows.for.layer.2.adjac |
117c80 | 65 6e 63 79 20 61 63 72 6f 73 73 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4d 75 6c 74 69 63 61 | ency.across.IP.networks..Multica |
117ca0 | 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 77 69 74 68 20 68 65 61 64 2d 65 6e 64 20 72 65 70 6c | st.or.unicast.with.head-end.repl |
117cc0 | 69 63 61 74 69 6f 6e 20 28 48 45 52 29 20 69 73 20 75 73 65 64 20 74 6f 20 66 6c 6f 6f 64 20 62 | ication.(HER).is.used.to.flood.b |
117ce0 | 72 6f 61 64 63 61 73 74 2c 20 75 6e 6b 6e 6f 77 6e 20 75 6e 69 63 61 73 74 2c 20 61 6e 64 20 6d | roadcast,.unknown.unicast,.and.m |
117d00 | 75 6c 74 69 63 61 73 74 20 28 42 55 4d 29 20 74 72 61 66 66 69 63 2e 00 56 58 4c 41 4e 20 73 70 | ulticast.(BUM).traffic..VXLAN.sp |
117d20 | 65 63 69 66 69 63 20 6f 70 74 69 6f 6e 73 00 56 58 4c 41 4e 20 77 61 73 20 6f 66 66 69 63 69 61 | ecific.options.VXLAN.was.officia |
117d40 | 6c 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 49 45 54 46 20 69 6e 20 3a 72 | lly.documented.by.the.IETF.in.:r |
117d60 | 66 63 3a 60 37 33 34 38 60 2e 00 56 61 6c 69 64 20 76 61 6c 75 65 73 20 61 72 65 20 30 2e 2e 32 | fc:`7348`..Valid.values.are.0..2 |
117d80 | 35 35 2e 00 56 61 6c 75 65 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 | 55..Value.Value.to.send.to.RADIU |
117da0 | 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 50 2d 41 64 64 72 65 73 73 20 61 74 74 72 69 | S.server.in.NAS-IP-Address.attri |
117dc0 | 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 | bute.and.to.be.matched.in.DM/CoA |
117de0 | 20 72 65 71 75 65 73 74 73 2e 20 41 6c 73 6f 20 44 4d 2f 43 6f 41 20 73 65 72 76 65 72 20 77 69 | .requests..Also.DM/CoA.server.wi |
117e00 | 6c 6c 20 62 69 6e 64 20 74 6f 20 74 68 61 74 20 61 64 64 72 65 73 73 2e 00 56 61 6c 75 65 20 74 | ll.bind.to.that.address..Value.t |
117e20 | 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 | o.send.to.RADIUS.server.in.NAS-I |
117e40 | 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 | dentifier.attribute.and.to.be.ma |
117e60 | 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 2e 00 56 65 72 69 66 69 | tched.in.DM/CoA.requests..Verifi |
117e80 | 63 61 74 69 6f 6e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 3a 00 56 65 72 69 66 79 20 74 68 61 74 | cation.Verification:.Verify.that |
117ea0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 68 69 74 74 69 6e 67 20 74 68 65 20 72 75 6c | .connections.are.hitting.the.rul |
117ec0 | 65 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 3a 00 56 65 72 73 69 6f 6e 00 56 69 72 74 75 61 6c | e.on.both.sides:.Version.Virtual |
117ee0 | 20 45 74 68 65 72 6e 65 74 00 56 69 72 74 75 61 6c 20 53 65 72 76 65 72 20 61 6c 6c 6f 77 73 20 | .Ethernet.Virtual.Server.allows. |
117f00 | 74 6f 20 4c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 | to.Load-balance.traffic.destinat |
117f20 | 69 6f 6e 20 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 3a 70 6f 72 74 20 62 65 74 77 65 65 6e | ion.virtual-address:port.between |
117f40 | 20 73 65 76 65 72 61 6c 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e 00 56 69 72 74 75 61 6c 2d 73 | .several.real.servers..Virtual-s |
117f60 | 65 72 76 65 72 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 | erver.Virtual-server.can.be.conf |
117f80 | 69 67 75 72 65 64 20 77 69 74 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 | igured.with.VRRP.virtual.address |
117fa0 | 20 6f 72 20 77 69 74 68 6f 75 74 20 56 52 52 50 2e 00 56 6f 6c 75 6d 65 20 69 73 20 65 69 74 68 | .or.without.VRRP..Volume.is.eith |
117fc0 | 65 72 20 6d 6f 75 6e 74 65 64 20 61 73 20 72 77 20 28 72 65 61 64 2d 77 72 69 74 65 20 2d 20 64 | er.mounted.as.rw.(read-write.-.d |
117fe0 | 65 66 61 75 6c 74 29 20 6f 72 20 72 6f 20 28 72 65 61 64 2d 6f 6e 6c 79 29 00 56 79 4f 53 20 31 | efault).or.ro.(read-only).VyOS.1 |
118000 | 2e 31 20 73 75 70 70 6f 72 74 65 64 20 6c 6f 67 69 6e 20 61 73 20 75 73 65 72 20 60 60 72 6f 6f | .1.supported.login.as.user.``roo |
118020 | 74 60 60 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 64 75 65 20 74 | t``..This.has.been.removed.due.t |
118040 | 6f 20 74 69 67 68 74 65 72 20 73 65 63 75 72 69 74 79 20 69 6e 20 56 79 4f 53 20 31 2e 32 2e 00 | o.tighter.security.in.VyOS.1.2.. |
118060 | 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 73 75 70 70 6f 72 74 73 20 44 48 43 | VyOS.1.3.(equuleus).supports.DHC |
118080 | 50 76 36 2d 50 44 20 28 3a 72 66 63 3a 60 33 36 33 33 60 29 2e 20 44 48 43 50 76 36 20 50 72 65 | Pv6-PD.(:rfc:`3633`)..DHCPv6.Pre |
1180a0 | 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 6d | fix.Delegation.is.supported.by.m |
1180c0 | 6f 73 74 20 49 53 50 73 20 77 68 6f 20 70 72 6f 76 69 64 65 20 6e 61 74 69 76 65 20 49 50 76 36 | ost.ISPs.who.provide.native.IPv6 |
1180e0 | 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 20 6f 6e 20 66 69 78 65 64 20 6e 65 74 77 6f 72 6b 73 | .for.consumers.on.fixed.networks |
118100 | 2e 00 56 79 4f 53 20 31 2e 34 20 28 73 61 67 69 74 74 61 29 20 69 6e 74 72 6f 64 75 63 65 64 20 | ..VyOS.1.4.(sagitta).introduced. |
118120 | 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 73 75 70 70 6f 72 74 20 66 6f 72 20 56 52 46 73 | dynamic.routing.support.for.VRFs |
118140 | 2e 00 56 79 4f 53 20 31 2e 34 20 63 68 61 6e 67 65 64 20 74 68 65 20 77 61 79 20 69 6e 20 68 6f | ..VyOS.1.4.changed.the.way.in.ho |
118160 | 77 20 65 6e 63 72 79 74 69 6f 6e 20 6b 65 79 73 20 6f 72 20 63 65 72 74 69 66 69 63 61 74 65 73 | w.encrytion.keys.or.certificates |
118180 | 20 61 72 65 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 | .are.stored.on.the.system..In.th |
1181a0 | 65 20 70 72 65 20 56 79 4f 53 20 31 2e 34 20 65 72 61 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 | e.pre.VyOS.1.4.era,.certificates |
1181c0 | 20 67 6f 74 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 2f 63 6f 6e 66 69 67 20 61 6e 64 20 65 76 | .got.stored.under./config.and.ev |
1181e0 | 65 72 79 20 73 65 72 76 69 63 65 20 72 65 66 65 72 65 6e 63 65 64 20 61 20 66 69 6c 65 2e 20 54 | ery.service.referenced.a.file..T |
118200 | 68 61 74 20 6d 61 64 65 20 63 6f 70 79 69 6e 67 20 61 20 72 75 6e 6e 69 6e 67 20 63 6f 6e 66 69 | hat.made.copying.a.running.confi |
118220 | 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 73 79 73 74 65 6d 20 41 20 74 6f 20 73 79 73 74 65 6d | guration.from.system.A.to.system |
118240 | 20 42 20 61 20 62 69 74 20 68 61 72 64 65 72 2c 20 61 73 20 79 6f 75 20 68 61 64 20 74 6f 20 63 | .B.a.bit.harder,.as.you.had.to.c |
118260 | 6f 70 79 20 74 68 65 20 66 69 6c 65 73 20 61 6e 64 20 74 68 65 69 72 20 70 65 72 6d 69 73 73 69 | opy.the.files.and.their.permissi |
118280 | 6f 6e 73 20 62 79 20 68 61 6e 64 2e 00 56 79 4f 53 20 31 2e 34 20 75 73 65 73 20 63 68 72 6f 6e | ons.by.hand..VyOS.1.4.uses.chron |
1182a0 | 79 20 69 6e 73 74 65 61 64 20 6f 66 20 6e 74 70 64 20 28 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 | y.instead.of.ntpd.(see.:vytask:` |
1182c0 | 54 33 30 30 38 60 29 20 77 68 69 63 68 20 77 69 6c 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 | T3008`).which.will.no.longer.acc |
1182e0 | 65 70 74 20 61 6e 6f 6e 79 6d 6f 75 73 20 4e 54 50 20 72 65 71 75 65 73 74 73 20 61 73 20 69 6e | ept.anonymous.NTP.requests.as.in |
118300 | 20 56 79 4f 53 20 31 2e 33 2e 20 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 77 69 | .VyOS.1.3..All.configurations.wi |
118320 | 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 20 74 6f 20 6b 65 65 70 20 74 68 65 20 61 6e 6f 6e 79 | ll.be.migrated.to.keep.the.anony |
118340 | 6d 6f 75 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 46 6f 72 20 6e 65 77 20 73 65 74 75 | mous.functionality..For.new.setu |
118360 | 70 73 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6c 69 65 6e 74 73 20 75 73 69 6e 67 20 79 6f 75 | ps.if.you.have.clients.using.you |
118380 | 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 61 73 20 4e 54 50 20 73 65 72 76 65 | r.VyOS.installation.as.NTP.serve |
1183a0 | 72 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 60 61 6c 6c 6f 77 2d 63 | r,.you.must.specify.the.`allow-c |
1183c0 | 6c 69 65 6e 74 60 20 64 69 72 65 63 74 69 76 65 2e 00 56 79 4f 53 20 41 72 69 73 74 61 20 45 4f | lient`.directive..VyOS.Arista.EO |
1183e0 | 53 20 73 65 74 75 70 00 56 79 4f 53 20 45 53 50 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e | S.setup.VyOS.ESP.group.has.the.n |
118400 | 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 46 69 65 6c 64 00 56 79 4f 53 20 49 4b 45 | ext.options:.VyOS.Field.VyOS.IKE |
118420 | 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f | .group.has.the.next.options:.VyO |
118440 | 53 20 4d 49 42 73 00 56 79 4f 53 20 4e 41 54 36 36 20 44 48 43 50 76 36 20 75 73 69 6e 67 20 61 | S.MIBs.VyOS.NAT66.DHCPv6.using.a |
118460 | 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 56 79 4f 53 20 4e 41 54 36 36 20 53 69 6d 70 | .dummy.interface.VyOS.NAT66.Simp |
118480 | 6c 65 20 43 6f 6e 66 69 67 75 72 65 00 56 79 4f 53 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 | le.Configure.VyOS.Network.Emulat |
1184a0 | 6f 72 20 70 6f 6c 69 63 79 20 65 6d 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e | or.policy.emulates.the.condition |
1184c0 | 73 20 79 6f 75 20 63 61 6e 20 73 75 66 66 65 72 20 69 6e 20 61 20 72 65 61 6c 20 6e 65 74 77 6f | s.you.can.suffer.in.a.real.netwo |
1184e0 | 72 6b 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 | rk..You.will.be.able.to.configur |
118500 | 65 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 72 61 74 65 2c 20 62 75 72 73 74 2c 20 64 65 6c 61 79 | e.things.like.rate,.burst,.delay |
118520 | 2c 20 70 61 63 6b 65 74 20 6c 6f 73 73 2c 20 70 61 63 6b 65 74 20 63 6f 72 72 75 70 74 69 6f 6e | ,.packet.loss,.packet.corruption |
118540 | 20 6f 72 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 2e 00 56 79 4f 53 20 4f 70 74 69 | .or.packet.reordering..VyOS.Opti |
118560 | 6f 6e 00 56 79 4f 53 20 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 28 50 42 | on.VyOS.Policy-Based.Routing.(PB |
118580 | 52 29 20 77 6f 72 6b 73 20 62 79 20 6d 61 74 63 68 69 6e 67 20 73 6f 75 72 63 65 20 49 50 20 61 | R).works.by.matching.source.IP.a |
1185a0 | 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 | ddress.ranges.and.forwarding.the |
1185c0 | 20 74 72 61 66 66 69 63 20 75 73 69 6e 67 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 | .traffic.using.different.routing |
1185e0 | 20 74 61 62 6c 65 73 2e 00 56 79 4f 53 20 53 4e 4d 50 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 | .tables..VyOS.SNMP.supports.both |
118600 | 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 56 79 4f 53 20 61 6c 73 6f 20 63 6f 6d 65 73 20 | .IPv4.and.IPv6..VyOS.also.comes. |
118620 | 77 69 74 68 20 61 20 62 75 69 6c 64 20 69 6e 20 53 53 54 50 20 73 65 72 76 65 72 2c 20 73 65 65 | with.a.build.in.SSTP.server,.see |
118640 | 20 3a 72 65 66 3a 60 73 73 74 70 60 2e 00 56 79 4f 53 20 61 6c 73 6f 20 70 72 6f 76 69 64 65 73 | .:ref:`sstp`..VyOS.also.provides |
118660 | 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 | .DHCPv6.server.functionality.whi |
118680 | 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e | ch.is.described.in.this.section. |
1186a0 | 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 28 63 75 72 72 65 6e 74 6c 79 29 20 | .VyOS.also.supports.(currently). |
1186c0 | 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 | two.different.modes.of.authentic |
1186e0 | 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 | ation,.local.and.RADIUS..To.crea |
118700 | 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 60 60 76 79 6f 73 | te.a.new.local.user.named.``vyos |
118720 | 60 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 60 76 79 6f 73 60 60 20 75 73 65 20 74 68 | ``.with.password.``vyos``.use.th |
118740 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 61 6c 73 6f 20 | e.following.commands..VyOS.also. |
118760 | 73 75 70 70 6f 72 74 73 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 | supports.two.different.modes.of. |
118780 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 | authentication,.local.and.RADIUS |
1187a0 | 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d | ..To.create.a.new.local.user.nam |
1187c0 | 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 20 61 20 70 61 73 73 77 6f 72 64 20 6f 66 20 22 76 79 | ed."vyos".with.a.password.of."vy |
1187e0 | 6f 73 22 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 | os".use.the.following.commands.. |
118800 | 56 79 4f 53 20 63 61 6e 20 61 6c 73 6f 20 72 75 6e 20 69 6e 20 44 4d 56 50 4e 20 73 70 6f 6b 65 | VyOS.can.also.run.in.DMVPN.spoke |
118820 | 20 6d 6f 64 65 2e 00 56 79 4f 53 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f | .mode..VyOS.can.be.configured.to |
118840 | 20 74 72 61 63 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 75 73 69 6e 67 20 74 68 65 20 63 6f 6e | .track.connections.using.the.con |
118860 | 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 20 43 6f 6e 6e | nection.tracking.subsystem..Conn |
118880 | 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 62 65 63 6f 6d 65 73 20 6f 70 65 72 61 74 69 6f | ection.tracking.becomes.operatio |
1188a0 | 6e 61 6c 20 6f 6e 63 65 20 65 69 74 68 65 72 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c | nal.once.either.stateful.firewal |
1188c0 | 6c 20 6f 72 20 4e 41 54 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 63 61 6e | l.or.NAT.is.configured..VyOS.can |
1188e0 | 20 6e 6f 74 20 6f 6e 6c 79 20 61 63 74 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 | .not.only.act.as.an.OpenVPN.site |
118900 | 2d 74 6f 2d 73 69 74 65 20 6f 72 20 73 65 72 76 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 | -to-site.or.server.for.multiple. |
118920 | 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 63 61 6e 20 69 6e 64 65 65 64 20 61 6c 73 6f 20 63 6f 6e | clients..You.can.indeed.also.con |
118940 | 66 69 67 75 72 65 20 61 6e 79 20 56 79 4f 53 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 | figure.any.VyOS.OpenVPN.interfac |
118960 | 65 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e | e.as.an.OpenVPN.client.connectin |
118980 | 67 20 74 6f 20 61 20 56 79 4f 53 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 6f 72 20 61 6e | g.to.a.VyOS.OpenVPN.server.or.an |
1189a0 | 79 20 6f 74 68 65 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 64 65 66 | y.other.OpenVPN.server..VyOS.def |
1189c0 | 61 75 6c 74 20 77 69 6c 6c 20 62 65 20 60 61 75 74 6f 60 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e | ault.will.be.`auto`..VyOS.does.n |
1189e0 | 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 | ot.have.a.special.command.to.sta |
118a00 | 72 74 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 61 62 65 6c 20 | rt.the.Babel.process..The.Babel. |
118a20 | 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 42 61 | process.starts.when.the.first.Ba |
118a40 | 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 | bel.enabled.interface.is.configu |
118a60 | 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 | red..VyOS.does.not.have.a.specia |
118a80 | 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 | l.command.to.start.the.OSPF.proc |
118aa0 | 65 73 73 2e 20 54 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 | ess..The.OSPF.process.starts.whe |
118ac0 | 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 | n.the.first.ospf.enabled.interfa |
118ae0 | 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 | ce.is.configured..VyOS.does.not. |
118b00 | 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 | have.a.special.command.to.start. |
118b20 | 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 76 33 20 70 | the.OSPFv3.process..The.OSPFv3.p |
118b40 | 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 | rocess.starts.when.the.first.osp |
118b60 | 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | f.enabled.interface.is.configure |
118b80 | 64 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 20 49 50 20 4d 75 6c 74 69 63 61 73 74 | d..VyOS.facilitates.IP.Multicast |
118ba0 | 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 | .by.supporting.**PIM.Sparse.Mode |
118bc0 | 2a 2a 2c 20 2a 2a 49 47 4d 50 2a 2a 20 61 6e 64 20 2a 2a 49 47 4d 50 2d 50 72 6f 78 79 2a 2a 2e | **,.**IGMP**.and.**IGMP-Proxy**. |
118be0 | 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 20 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 | .VyOS.facilitates.IPv6.Multicast |
118c00 | 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a 50 49 4d 76 36 2a 2a 20 61 6e 64 20 2a 2a 4d | .by.supporting.**PIMv6**.and.**M |
118c20 | 4c 44 2a 2a 2e 00 56 79 4f 53 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 46 61 73 74 4e 65 74 4d | LD**..VyOS.includes.the.FastNetM |
118c40 | 6f 6e 20 43 6f 6d 6d 75 6e 69 74 79 20 45 64 69 74 69 6f 6e 2e 00 56 79 4f 53 20 69 73 20 61 62 | on.Community.Edition..VyOS.is.ab |
118c60 | 6c 65 20 74 6f 20 75 70 64 61 74 65 20 61 20 72 65 6d 6f 74 65 20 44 4e 53 20 72 65 63 6f 72 64 | le.to.update.a.remote.DNS.record |
118c80 | 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 65 74 73 20 61 20 6e 65 77 20 49 50 | .when.an.interface.gets.a.new.IP |
118ca0 | 20 61 64 64 72 65 73 73 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 64 6f 20 73 6f 2c 20 56 79 4f | .address..In.order.to.do.so,.VyO |
118cc0 | 53 20 69 6e 63 6c 75 64 65 73 20 64 64 63 6c 69 65 6e 74 5f 2c 20 61 20 50 65 72 6c 20 73 63 72 | S.includes.ddclient_,.a.Perl.scr |
118ce0 | 69 70 74 20 77 72 69 74 74 65 6e 20 66 6f 72 20 74 68 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 75 | ipt.written.for.this.only.one.pu |
118d00 | 72 70 6f 73 65 2e 00 56 79 4f 53 20 69 73 20 61 6c 73 6f 20 61 62 6c 65 20 74 6f 20 75 73 65 20 | rpose..VyOS.is.also.able.to.use. |
118d20 | 61 6e 79 20 73 65 72 76 69 63 65 20 72 65 6c 79 69 6e 67 20 6f 6e 20 70 72 6f 74 6f 63 6f 6c 73 | any.service.relying.on.protocols |
118d40 | 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 64 63 6c 69 65 6e 74 2e 00 56 79 4f 53 20 69 74 73 | .supported.by.ddclient..VyOS.its |
118d60 | 65 6c 66 20 73 75 70 70 6f 72 74 73 20 53 4e 4d 50 76 32 5f 20 28 76 65 72 73 69 6f 6e 20 32 29 | elf.supports.SNMPv2_.(version.2) |
118d80 | 20 61 6e 64 20 53 4e 4d 50 76 33 5f 20 28 76 65 72 73 69 6f 6e 20 33 29 20 77 68 65 72 65 20 74 | .and.SNMPv3_.(version.3).where.t |
118da0 | 68 65 20 6c 61 74 65 72 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 62 65 63 61 75 73 65 20 | he.later.is.recommended.because. |
118dc0 | 6f 66 20 69 6d 70 72 6f 76 65 64 20 73 65 63 75 72 69 74 79 20 28 6f 70 74 69 6f 6e 61 6c 20 61 | of.improved.security.(optional.a |
118de0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 29 2e 00 56 | uthentication.and.encryption)..V |
118e00 | 79 4f 53 20 6c 65 74 73 20 79 6f 75 20 63 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 6e 20 | yOS.lets.you.control.traffic.in. |
118e20 | 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 2c 20 68 65 72 65 20 77 65 20 77 69 6c | many.different.ways,.here.we.wil |
118e40 | 6c 20 63 6f 76 65 72 20 65 76 65 72 79 20 70 6f 73 73 69 62 69 6c 69 74 79 2e 20 59 6f 75 20 63 | l.cover.every.possibility..You.c |
118e60 | 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 73 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 20 61 73 | an.configure.as.many.policies.as |
118e80 | 20 79 6f 75 20 77 61 6e 74 2c 20 62 75 74 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 | .you.want,.but.you.will.only.be. |
118ea0 | 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 | able.to.apply.one.policy.per.int |
118ec0 | 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 20 28 69 6e 62 6f 75 6e 64 20 6f 72 | erface.and.direction.(inbound.or |
118ee0 | 20 6f 75 74 62 6f 75 6e 64 29 2e 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 3a 61 | .outbound)..VyOS.makes.use.of.:a |
118f00 | 62 62 72 3a 60 46 52 52 20 28 46 72 65 65 20 52 61 6e 67 65 20 52 6f 75 74 69 6e 67 29 60 20 61 | bbr:`FRR.(Free.Range.Routing)`.a |
118f20 | 6e 64 20 77 65 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 74 68 61 6e 6b 20 74 68 65 6d 20 66 | nd.we.would.like.to.thank.them.f |
118f40 | 6f 72 20 74 68 65 69 72 20 65 66 66 6f 72 74 21 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 | or.their.effort!.VyOS.makes.use. |
118f60 | 6f 66 20 4c 69 6e 75 78 20 60 6e 65 74 66 69 6c 74 65 72 20 3c 68 74 74 70 73 3a 2f 2f 6e 65 74 | of.Linux.`netfilter.<https://net |
118f80 | 66 69 6c 74 65 72 2e 6f 72 67 2f 3e 60 5f 20 66 6f 72 20 70 61 63 6b 65 74 20 66 69 6c 74 65 72 | filter.org/>`_.for.packet.filter |
118fa0 | 69 6e 67 2e 00 56 79 4f 53 20 6e 6f 74 20 6f 6e 6c 79 20 63 61 6e 20 6e 6f 77 20 6d 61 6e 61 67 | ing..VyOS.not.only.can.now.manag |
118fc0 | 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 73 73 75 65 64 20 62 79 20 33 72 64 20 70 61 72 | e.certificates.issued.by.3rd.par |
118fe0 | 74 79 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 69 65 73 2c 20 69 74 20 63 | ty.Certificate.Authorities,.it.c |
119000 | 61 6e 20 61 6c 73 6f 20 61 63 74 20 61 73 20 61 20 43 41 20 6f 6e 20 69 74 73 20 6f 77 6e 2e 20 | an.also.act.as.a.CA.on.its.own.. |
119020 | 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 72 6f 6f 74 20 43 41 20 | You.can.create.your.own.root.CA. |
119040 | 61 6e 64 20 73 69 67 6e 20 6b 65 79 73 20 77 69 74 68 20 69 74 20 62 79 20 6d 61 6b 69 6e 67 20 | and.sign.keys.with.it.by.making. |
119060 | 75 73 65 20 6f 66 20 73 6f 6d 65 20 73 69 6d 70 6c 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 | use.of.some.simple.op-mode.comma |
119080 | 6e 64 73 2e 00 56 79 4f 53 20 6e 6f 77 20 61 6c 73 6f 20 68 61 73 20 74 68 65 20 61 62 69 6c 69 | nds..VyOS.now.also.has.the.abili |
1190a0 | 74 79 20 74 6f 20 63 72 65 61 74 65 20 43 41 73 2c 20 6b 65 79 73 2c 20 44 69 66 66 69 65 2d 48 | ty.to.create.CAs,.keys,.Diffie-H |
1190c0 | 65 6c 6c 6d 61 6e 20 61 6e 64 20 6f 74 68 65 72 20 6b 65 79 70 61 69 72 73 20 66 72 6f 6d 20 61 | ellman.and.other.keypairs.from.a |
1190e0 | 6e 20 65 61 73 79 20 74 6f 20 61 63 63 65 73 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 | n.easy.to.access.operational.lev |
119100 | 65 6c 20 63 6f 6d 6d 61 6e 64 2e 00 56 79 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 | el.command..VyOS.operational.mod |
119120 | 65 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 6e 6f 74 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c | e.commands.are.not.only.availabl |
119140 | 65 20 66 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 6b 65 79 73 20 62 75 74 20 61 6c 73 6f 20 74 | e.for.generating.keys.but.also.t |
119160 | 6f 20 64 69 73 70 6c 61 79 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 20 61 6e 20 | o.display.them..VyOS.provide.an. |
119180 | 48 54 54 50 20 41 50 49 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 65 78 65 63 | HTTP.API..You.can.use.it.to.exec |
1191a0 | 75 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2c 20 75 70 64 61 74 65 20 56 79 4f | ute.op-mode.commands,.update.VyO |
1191c0 | 53 2c 20 73 65 74 20 6f 72 20 64 65 6c 65 74 65 20 63 6f 6e 66 69 67 2e 00 56 79 4f 53 20 70 72 | S,.set.or.delete.config..VyOS.pr |
1191e0 | 6f 76 69 64 65 73 20 44 4e 53 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 73 6d | ovides.DNS.infrastructure.for.sm |
119200 | 61 6c 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 | all.networks..It.is.designed.to. |
119220 | 62 65 20 6c 69 67 68 74 77 65 69 67 68 74 20 61 6e 64 20 68 61 76 65 20 61 20 73 6d 61 6c 6c 20 | be.lightweight.and.have.a.small. |
119240 | 66 6f 6f 74 70 72 69 6e 74 2c 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 72 65 73 6f 75 72 63 65 | footprint,.suitable.for.resource |
119260 | 20 63 6f 6e 73 74 72 61 69 6e 65 64 20 72 6f 75 74 65 72 73 20 61 6e 64 20 66 69 72 65 77 61 6c | .constrained.routers.and.firewal |
119280 | 6c 73 2e 20 46 6f 72 20 74 68 69 73 20 77 65 20 75 74 69 6c 69 7a 65 20 50 6f 77 65 72 44 4e 53 | ls..For.this.we.utilize.PowerDNS |
1192a0 | 20 72 65 63 75 72 73 6f 72 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 61 20 63 6f 6d 6d 61 | .recursor..VyOS.provides.a.comma |
1192c0 | 6e 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 | nd.to.generate.a.connection.prof |
1192e0 | 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 20 74 68 61 74 | ile.used.by.Windows.clients.that |
119300 | 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 | .will.connect.to.the."rw".connec |
119320 | 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 70 72 | tion.on.our.VyOS.server..VyOS.pr |
119340 | 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 | ovides.policies.commands.exclusi |
119360 | 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 | vely.for.BGP.traffic.filtering.a |
119380 | 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 61 73 2d 70 61 74 68 2d 6c 69 73 74 2a | nd.manipulation:.**as-path-list* |
1193a0 | 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 | *.is.one.of.them..VyOS.provides. |
1193c0 | 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f | policies.commands.exclusively.fo |
1193e0 | 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 | r.BGP.traffic.filtering.and.mani |
119400 | 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 | pulation:.**community-list**.is. |
119420 | 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 | one.of.them..VyOS.provides.polic |
119440 | 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 | ies.commands.exclusively.for.BGP |
119460 | 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 | .traffic.filtering.and.manipulat |
119480 | 69 6f 6e 3a 20 2a 2a 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e | ion:.**extcommunity-list**.is.on |
1194a0 | 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 | e.of.them..VyOS.provides.policie |
1194c0 | 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 | s.commands.exclusively.for.BGP.t |
1194e0 | 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f | raffic.filtering.and.manipulatio |
119500 | 6e 3a 20 2a 2a 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f | n:.**large-community-list**.is.o |
119520 | 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 20 6f | ne.of.them..VyOS.provides.some.o |
119540 | 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 6f 6e 20 4f 70 65 6e 56 50 4e 2e 00 | perational.commands.on.OpenVPN.. |
119560 | 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 44 48 43 50 20 66 | VyOS.provides.support.for.DHCP.f |
119580 | 61 69 6c 6f 76 65 72 2e 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 6d 75 73 74 20 62 65 20 63 | ailover..DHCP.failover.must.be.c |
1195a0 | 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 62 79 20 74 68 65 20 66 6f 6c 6c | onfigured.explicitly.by.the.foll |
1195c0 | 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 | owing.statements..VyOS.provides. |
1195e0 | 74 68 69 73 20 75 74 69 6c 69 74 79 20 74 6f 20 69 6d 70 6f 72 74 20 65 78 69 73 74 69 6e 67 20 | this.utility.to.import.existing. |
119600 | 63 65 72 74 69 66 69 63 61 74 65 73 2f 6b 65 79 20 66 69 6c 65 73 20 64 69 72 65 63 74 6c 79 20 | certificates/key.files.directly. |
119620 | 69 6e 74 6f 20 50 4b 49 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 2e 20 50 72 65 76 69 6f 75 73 20 | into.PKI.from.op-mode..Previous. |
119640 | 74 6f 20 56 79 4f 53 20 31 2e 34 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 77 65 72 65 20 73 | to.VyOS.1.4,.certificates.were.s |
119660 | 74 6f 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 2f 63 6f 6e 66 69 67 20 66 6f 6c 64 65 72 20 70 | tored.under.the./config.folder.p |
119680 | 65 72 6d 61 6e 65 6e 74 6c 79 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 20 | ermanently.and.will.be.retained. |
1196a0 | 70 6f 73 74 20 75 70 67 72 61 64 65 2e 00 56 79 4f 53 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 | post.upgrade..VyOS.reverse-proxy |
1196c0 | 20 69 73 20 62 61 6c 61 6e 63 65 72 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 74 68 | .is.balancer.and.proxy.server.th |
1196e0 | 61 74 20 70 72 6f 76 69 64 65 73 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 2c 20 6c | at.provides.high-availability,.l |
119700 | 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 70 72 6f 78 79 69 6e 67 20 66 6f 72 20 54 | oad.balancing.and.proxying.for.T |
119720 | 43 50 20 28 6c 65 76 65 6c 20 34 29 20 61 6e 64 20 48 54 54 50 2d 62 61 73 65 64 20 28 6c 65 76 | CP.(level.4).and.HTTP-based.(lev |
119740 | 65 6c 20 37 29 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 | el.7).applications..VyOS.support |
119760 | 73 20 3a 61 62 62 72 3a 60 50 49 4d 2d 53 4d 20 28 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 | s.:abbr:`PIM-SM.(PIM.Sparse.Mode |
119780 | 29 60 20 61 73 20 77 65 6c 6c 20 61 73 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 | )`.as.well.as.:abbr:`IGMP.(Inter |
1197a0 | 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 | net.Group.Management.Protocol)`. |
1197c0 | 76 32 20 61 6e 64 20 76 33 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 47 4d | v2.and.v3.VyOS.supports.both.IGM |
1197e0 | 50 20 76 65 72 73 69 6f 6e 20 32 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 33 20 28 77 68 69 63 68 | P.version.2.and.version.3.(which |
119800 | 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 | .allows.source-specific.multicas |
119820 | 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 4d 4c 44 20 76 65 72 73 69 | t)..VyOS.supports.both.MLD.versi |
119840 | 6f 6e 20 31 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 32 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 | on.1.and.version.2.(which.allows |
119860 | 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 79 4f | .source-specific.multicast)..VyO |
119880 | 53 20 73 75 70 70 6f 72 74 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 | S.supports.flow-accounting.for.b |
1198a0 | 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 | oth.IPv4.and.IPv6.traffic..The.s |
1198c0 | 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c 20 61 | ystem.acts.as.a.flow.exporter,.a |
1198e0 | 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 69 74 68 20 61 | nd.you.are.free.to.use.it.with.a |
119900 | 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 | ny.compatible.collector..VyOS.su |
119920 | 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 | pports.multiple.IKEv2.remote-acc |
119940 | 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f | ess.connections..Every.connectio |
119960 | 6e 20 63 61 6e 20 68 61 76 65 20 69 74 73 20 64 65 64 69 63 61 74 65 64 20 49 4b 45 2f 45 53 50 | n.can.have.its.dedicated.IKE/ESP |
119980 | 20 63 69 70 68 65 72 73 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 72 20 6c 6f 63 61 6c 20 | .ciphers,.certificates.or.local. |
1199a0 | 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 2e 67 2e 20 69 6e 62 6f 75 6e 64 20 | listen.address.for.e.g..inbound. |
1199c0 | 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6f 6e | load.balancing..VyOS.supports.on |
1199e0 | 6c 69 6e 65 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 75 70 64 61 74 65 73 00 56 79 4f 53 20 73 | line.checking.for.updates.VyOS.s |
119a00 | 75 70 70 6f 72 74 73 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 | upports.sFlow.accounting.for.bot |
119a20 | 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 79 73 | h.IPv4.and.IPv6.traffic..The.sys |
119a40 | 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 | tem.acts.as.a.flow.exporter,.and |
119a60 | 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 69 74 68 20 61 6e 79 | .you.are.free.to.use.it.with.any |
119a80 | 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 | .compatible.collector..VyOS.supp |
119aa0 | 6f 72 74 73 20 73 65 74 74 69 6e 67 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 20 63 6f 6e 6e 65 63 | orts.setting.timeouts.for.connec |
119ac0 | 74 69 6f 6e 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | tions.according.to.the.connectio |
119ae0 | 6e 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 | n.type..You.can.set.timeout.valu |
119b00 | 65 73 20 66 6f 72 20 67 65 6e 65 72 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 66 6f 72 20 | es.for.generic.connections,.for. |
119b20 | 49 43 4d 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e | ICMP.connections,.UDP.connection |
119b40 | 73 2c 20 6f 72 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 61 20 6e | s,.or.for.TCP.connections.in.a.n |
119b60 | 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 73 74 61 74 65 73 2e 00 56 79 4f 53 20 | umber.of.different.states..VyOS. |
119b80 | 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 75 70 20 50 50 50 6f 45 20 69 6e 20 74 77 6f | supports.setting.up.PPPoE.in.two |
119ba0 | 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 20 74 6f 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 | .different.ways.to.a.PPPoE.inter |
119bc0 | 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 65 63 61 75 73 65 20 | net.connection..This.is.because. |
119be0 | 6d 6f 73 74 20 49 53 50 73 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 64 65 6d 20 74 68 61 74 20 69 | most.ISPs.provide.a.modem.that.i |
119c00 | 73 20 61 6c 73 6f 20 61 20 77 69 72 65 6c 65 73 73 20 72 6f 75 74 65 72 2e 00 56 79 4f 53 20 75 | s.also.a.wireless.router..VyOS.u |
119c20 | 73 65 73 20 49 53 43 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 6f 74 68 20 49 50 76 | ses.ISC.DHCP.server.for.both.IPv |
119c40 | 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 | 4.and.IPv6.address.assignment..V |
119c60 | 79 4f 53 20 75 73 65 73 20 4b 65 61 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 6f 74 | yOS.uses.Kea.DHCP.server.for.bot |
119c80 | 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 6d 65 | h.IPv4.and.IPv6.address.assignme |
119ca0 | 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 5b 46 52 52 6f 75 74 69 6e 67 5d 28 68 74 74 70 73 3a | nt..VyOS.uses.[FRRouting](https: |
119cc0 | 2f 2f 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 29 20 61 73 20 74 68 65 20 63 6f 6e 74 72 6f 6c | //frrouting.org/).as.the.control |
119ce0 | 20 70 6c 61 6e 65 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 61 6e 64 20 73 74 61 74 69 63 20 72 6f | .plane.for.dynamic.and.static.ro |
119d00 | 75 74 69 6e 67 2e 20 54 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 20 62 65 68 61 76 69 | uting..The.routing.daemon.behavi |
119d20 | 6f 72 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 64 75 72 69 6e 67 20 72 75 6e 74 69 6d | or.can.be.adjusted.during.runtim |
119d40 | 65 2c 20 62 75 74 20 72 65 71 75 69 72 65 20 65 69 74 68 65 72 20 61 20 72 65 73 74 61 72 74 20 | e,.but.require.either.a.restart. |
119d60 | 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 6f 72 20 61 20 72 65 62 6f | of.the.routing.daemon,.or.a.rebo |
119d80 | 6f 74 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 2e 00 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 | ot.of.the.system..VyOS.uses.the. |
119da0 | 60 69 6e 74 65 72 66 61 63 65 73 20 77 77 61 6e 60 20 73 75 62 73 79 73 74 65 6d 20 66 6f 72 20 | `interfaces.wwan`.subsystem.for. |
119dc0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 60 6d 69 | configuration..VyOS.uses.the.`mi |
119de0 | 72 72 6f 72 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d | rror`.option.to.configure.port.m |
119e00 | 69 72 72 6f 72 69 6e 67 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 64 | irroring..The.configuration.is.d |
119e20 | 69 76 69 64 65 64 20 69 6e 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 64 69 72 65 63 74 69 6f | ivided.into.2.different.directio |
119e40 | 6e 73 2e 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 73 68 6f 75 6c 64 20 62 65 20 | ns..Destination.ports.should.be. |
119e60 | 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 66 66 69 63 | configured.for.different.traffic |
119e80 | 20 64 69 72 65 63 74 69 6f 6e 73 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 60 61 63 63 65 | .directions..VyOS.utilizes.`acce |
119ea0 | 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 3a 61 62 62 72 3a 60 49 50 6f 45 20 28 | l-ppp`_.to.provide.:abbr:`IPoE.( |
119ec0 | 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 | Internet.Protocol.over.Ethernet) |
119ee0 | 60 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 | `.server.functionality..It.can.b |
119f00 | 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | e.used.with.local.authentication |
119f20 | 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 | .(mac-address).or.a.connected.RA |
119f40 | 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 60 61 63 63 65 | DIUS.server..VyOS.utilizes.`acce |
119f60 | 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 | l-ppp`_.to.provide.PPPoE.server. |
119f80 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 | functionality..It.can.be.used.wi |
119fa0 | 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e | th.local.authentication.or.a.con |
119fc0 | 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 | nected.RADIUS.server..VyOS.utili |
119fe0 | 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 4c 32 54 50 20 73 | zes.accel-ppp_.to.provide.L2TP.s |
11a000 | 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 | erver.functionality..It.can.be.u |
11a020 | 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 | sed.with.local.authentication.or |
11a040 | 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 | .a.connected.RADIUS.server..VyOS |
11a060 | 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 | .utilizes.accel-ppp_.to.provide. |
11a080 | 53 53 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 57 65 20 73 75 | SSTP.server.functionality..We.su |
11a0a0 | 70 70 6f 72 74 20 62 6f 74 68 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 20 61 75 74 68 | pport.both.local.and.RADIUS.auth |
11a0c0 | 65 6e 74 69 63 61 74 69 6f 6e 2e 00 57 41 4e 20 4c 6f 61 64 20 42 61 6c 61 63 69 6e 67 20 73 68 | entication..WAN.Load.Balacing.sh |
11a0e0 | 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f | ould.not.be.used.when.dynamic.ro |
11a100 | 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 65 64 2f 6e 65 65 64 65 64 2e 20 54 | uting.protocol.is.used/needed..T |
11a120 | 68 69 73 20 66 65 61 74 75 72 65 20 63 72 65 61 74 65 73 20 63 75 73 74 6f 6d 69 7a 65 64 20 72 | his.feature.creates.customized.r |
11a140 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 | outing.tables.and.firewall.rules |
11a160 | 2c 20 74 68 61 74 20 6d 61 6b 65 73 20 69 74 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 74 6f 20 | ,.that.makes.it.incompatible.to. |
11a180 | 75 73 65 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 41 4e 20 | use.with.routing.protocols..WAN. |
11a1a0 | 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 31 60 00 57 41 4e 20 6c 6f 61 64 20 62 61 6c | interface.on.`eth1`.WAN.load.bal |
11a1c0 | 61 6e 63 69 6e 67 00 57 4c 41 4e 2f 57 49 46 49 20 2d 20 57 69 72 65 6c 65 73 73 20 4c 41 4e 00 | ancing.WLAN/WIFI.-.Wireless.LAN. |
11a1e0 | 57 4d 4d 2d 50 53 20 55 6e 73 63 68 65 64 75 6c 65 64 20 41 75 74 6f 6d 61 74 69 63 20 50 6f 77 | WMM-PS.Unscheduled.Automatic.Pow |
11a200 | 65 72 20 53 61 76 65 20 44 65 6c 69 76 65 72 79 20 5b 55 2d 41 50 53 44 5d 00 57 50 41 20 70 61 | er.Save.Delivery.[U-APSD].WPA.pa |
11a220 | 73 73 70 68 72 61 73 65 20 60 60 31 32 33 34 35 36 37 38 60 60 00 57 57 41 4e 20 2d 20 57 69 72 | ssphrase.``12345678``.WWAN.-.Wir |
11a240 | 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 00 57 61 72 6e 69 6e 67 00 | eless.Wide-Area-Network.Warning. |
11a260 | 57 61 72 6e 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 00 57 65 20 61 73 73 75 6d 65 20 74 68 61 | Warning.conditions.We.assume.tha |
11a280 | 74 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 73 74 61 74 69 63 20 31 39 32 | t.the.LEFT.router.has.static.192 |
11a2a0 | 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2c 20 61 6e 64 20 74 68 65 | .0.2.10.address.on.eth0,.and.the |
11a2c0 | 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 61 64 64 72 | .RIGHT.router.has.a.dynamic.addr |
11a2e0 | 65 73 73 20 6f 6e 20 65 74 68 30 2e 00 57 65 20 63 61 6e 20 61 6c 73 6f 20 63 72 65 61 74 65 20 | ess.on.eth0..We.can.also.create. |
11a300 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 43 65 72 62 6f 72 74 20 77 | the.certificates.using.Cerbort.w |
11a320 | 68 69 63 68 20 69 73 20 61 6e 20 65 61 73 79 2d 74 6f 2d 75 73 65 20 63 6c 69 65 6e 74 20 74 68 | hich.is.an.easy-to-use.client.th |
11a340 | 61 74 20 66 65 74 63 68 65 73 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 4c 65 | at.fetches.a.certificate.from.Le |
11a360 | 74 27 73 20 45 6e 63 72 79 70 74 20 61 6e 20 6f 70 65 6e 20 63 65 72 74 69 66 69 63 61 74 65 20 | t's.Encrypt.an.open.certificate. |
11a380 | 61 75 74 68 6f 72 69 74 79 20 6c 61 75 6e 63 68 65 64 20 62 79 20 74 68 65 20 45 46 46 2c 20 4d | authority.launched.by.the.EFF,.M |
11a3a0 | 6f 7a 69 6c 6c 61 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 61 6e 64 20 64 65 70 6c 6f 79 73 20 69 | ozilla,.and.others.and.deploys.i |
11a3c0 | 74 20 74 6f 20 61 20 77 65 62 20 73 65 72 76 65 72 2e 00 57 65 20 63 61 6e 20 62 75 69 6c 64 20 | t.to.a.web.server..We.can.build. |
11a3e0 | 72 6f 75 74 65 2d 6d 61 70 73 20 66 6f 72 20 69 6d 70 6f 72 74 20 62 61 73 65 64 20 6f 6e 20 74 | route-maps.for.import.based.on.t |
11a400 | 68 65 73 65 20 73 74 61 74 65 73 2e 20 48 65 72 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 52 50 | hese.states..Here.is.a.simple.RP |
11a420 | 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 65 72 65 20 60 72 6f 75 74 69 6e 61 | KI.configuration,.where.`routina |
11a440 | 74 6f 72 60 20 69 73 20 74 68 65 20 52 50 4b 49 2d 76 61 6c 69 64 61 74 69 6e 67 20 22 63 61 63 | tor`.is.the.RPKI-validating."cac |
11a460 | 68 65 22 20 73 65 72 76 65 72 20 77 69 74 68 20 69 70 20 60 31 39 32 2e 30 2e 32 2e 31 60 3a 00 | he".server.with.ip.`192.0.2.1`:. |
11a480 | 57 65 20 63 61 6e 27 74 20 73 75 70 70 6f 72 74 20 61 6c 6c 20 64 69 73 70 6c 61 79 73 20 66 72 | We.can't.support.all.displays.fr |
11a4a0 | 6f 6d 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 2e 20 49 66 20 79 6f 75 72 20 64 69 73 70 6c 61 | om.the.beginning..If.your.displa |
11a4c0 | 79 20 74 79 70 65 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 70 6c 65 61 73 65 20 63 72 65 61 74 65 | y.type.is.missing,.please.create |
11a4e0 | 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 76 69 61 20 50 68 61 62 72 69 63 61 74 | .a.feature.request.via.Phabricat |
11a500 | 6f 72 5f 2e 00 57 65 20 63 6f 6e 66 69 67 75 72 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 | or_..We.configure.a.new.connecti |
11a520 | 6f 6e 20 6e 61 6d 65 64 20 60 60 72 77 60 60 20 66 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 | on.named.``rw``.for.road-warrior |
11a540 | 2c 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 73 20 69 74 73 65 6c 66 20 61 73 20 60 60 31 39 | ,.that.identifies.itself.as.``19 |
11a560 | 32 2e 30 2e 32 2e 31 60 60 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 73 20 61 6e 64 20 75 73 65 | 2.0.2.1``.to.the.clients.and.use |
11a580 | 73 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 63 65 72 74 69 66 69 63 61 74 65 20 73 69 67 6e 65 | s.the.``vyos``.certificate.signe |
11a5a0 | 64 20 62 79 20 74 68 65 20 60 43 41 63 65 72 74 5f 43 6c 61 73 73 33 5f 52 6f 6f 74 60 60 20 69 | d.by.the.`CAcert_Class3_Root``.i |
11a5c0 | 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 2e 20 57 65 20 73 65 6c 65 63 74 20 6f 75 72 20 70 72 | ntermediate.CA..We.select.our.pr |
11a5e0 | 65 76 69 6f 75 73 6c 79 20 73 70 65 63 69 66 69 65 64 20 49 4b 45 2f 45 53 50 20 67 72 6f 75 70 | eviously.specified.IKE/ESP.group |
11a600 | 73 20 61 6e 64 20 61 6c 73 6f 20 6c 69 6e 6b 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 70 | s.and.also.link.the.IP.address.p |
11a620 | 6f 6f 6c 20 74 6f 20 64 72 61 77 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 00 57 65 20 63 | ool.to.draw.addresses.from..We.c |
11a640 | 6f 75 6c 64 20 65 78 70 61 6e 64 20 6f 6e 20 74 68 69 73 20 61 6e 64 20 61 6c 73 6f 20 64 65 6e | ould.expand.on.this.and.also.den |
11a660 | 79 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 69 6e 20 74 68 | y.link.local.and.multicast.in.th |
11a680 | 65 20 72 75 6c 65 20 32 30 20 61 63 74 69 6f 6e 20 64 65 6e 79 2e 00 57 65 20 64 6f 20 6e 6f 74 | e.rule.20.action.deny..We.do.not |
11a6a0 | 20 68 61 76 65 20 43 4c 49 20 6e 6f 64 65 73 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 | .have.CLI.nodes.for.every.single |
11a6c0 | 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 2e 20 49 66 20 61 6e 20 6f 70 74 69 6f 6e 20 69 73 | .OpenVPN.option..If.an.option.is |
11a6e0 | 20 6d 69 73 73 69 6e 67 2c 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 73 68 6f 75 | .missing,.a.feature.request.shou |
11a700 | 6c 64 20 62 65 20 6f 70 65 6e 65 64 20 61 74 20 50 68 61 62 72 69 63 61 74 6f 72 5f 20 73 6f 20 | ld.be.opened.at.Phabricator_.so. |
11a720 | 61 6c 6c 20 75 73 65 72 73 20 63 61 6e 20 62 65 6e 65 66 69 74 20 66 72 6f 6d 20 69 74 20 28 73 | all.users.can.benefit.from.it.(s |
11a740 | 65 65 20 3a 72 65 66 3a 60 69 73 73 75 65 73 5f 66 65 61 74 75 72 65 73 60 29 2e 00 57 65 20 64 | ee.:ref:`issues_features`)..We.d |
11a760 | 6f 6e 27 74 20 72 65 63 6f 6d 65 6e 64 20 74 6f 20 75 73 65 20 61 72 67 75 6d 65 6e 74 73 2e 20 | on't.recomend.to.use.arguments.. |
11a780 | 55 73 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 69 73 20 6d 6f 72 65 20 70 72 65 66 66 | Using.environments.is.more.preff |
11a7a0 | 65 72 65 62 6c 65 2e 00 57 65 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e | ereble..We.generate.a.connection |
11a7c0 | 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 | .profile.used.by.Windows.clients |
11a7e0 | 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 20 63 | .that.will.connect.to.the."rw".c |
11a800 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 20 6f 6e 20 | onnection.on.our.VyOS.server.on. |
11a820 | 74 68 65 20 56 50 4e 20 73 65 72 76 65 72 73 20 49 50 20 61 64 64 72 65 73 73 2f 66 71 64 6e 20 | the.VPN.servers.IP.address/fqdn. |
11a840 | 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 2e 00 57 65 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 | `vpn.vyos.net`..We.listen.on.por |
11a860 | 74 20 35 31 38 32 30 00 57 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 | t.51820.We.need.to.generate.the. |
11a880 | 63 65 72 74 69 66 69 63 61 74 65 20 77 68 69 63 68 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 | certificate.which.authenticates. |
11a8a0 | 75 73 65 72 73 20 77 68 6f 20 61 74 74 65 6d 70 74 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 | users.who.attempt.to.access.the. |
11a8c0 | 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 53 53 4c | network.resource.through.the.SSL |
11a8e0 | 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d | .VPN.tunnels..The.following.comm |
11a900 | 61 6e 64 73 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 73 65 6c 66 20 73 69 67 6e 65 64 20 63 | ands.will.create.a.self.signed.c |
11a920 | 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 69 | ertificates.and.will.be.stored.i |
11a940 | 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 65 20 6e 6f 77 20 75 74 69 6c 69 7a 65 20 | n.configuration:.We.now.utilize. |
11a960 | 60 74 75 6e 65 64 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 72 65 73 6f 75 72 63 65 20 62 61 6c | `tuned`.for.dynamic.resource.bal |
11a980 | 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 70 72 6f 66 69 6c 65 73 2e 00 57 65 20 6f 6e 6c | ancing.based.on.profiles..We.onl |
11a9a0 | 79 20 61 6c 6c 6f 77 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 73 75 62 6e 65 | y.allow.the.192.168.2.0/24.subne |
11a9c0 | 74 20 74 6f 20 74 72 61 76 65 6c 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 00 57 65 20 6f | t.to.travel.over.the.tunnel.We.o |
11a9e0 | 6e 6c 79 20 6e 65 65 64 20 61 20 73 69 6e 67 6c 65 20 73 74 65 70 20 66 6f 72 20 74 68 69 73 20 | nly.need.a.single.step.for.this. |
11aa00 | 69 6e 74 65 72 66 61 63 65 3a 00 57 65 20 72 6f 75 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 | interface:.We.route.all.traffic. |
11aa20 | 66 6f 72 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 74 | for.the.192.168.2.0/24.network.t |
11aa40 | 6f 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 00 57 65 20 75 73 65 20 61 20 76 6f 6e 74 | o.interface.`wg01`.We.use.a.vont |
11aa60 | 61 69 6e 65 72 20 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 | ainer.providing.the.TACACS.serve |
11aa80 | 20 72 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2e 00 57 65 20 77 69 6c 6c 20 6f 6e 6c 79 20 | .rin.this.example..We.will.only. |
11aaa0 | 61 63 63 65 70 74 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 66 72 6f 6d 20 69 6e 74 65 | accept.traffic.comming.from.inte |
11aac0 | 72 66 61 63 65 20 65 74 68 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 | rface.eth0,.protocol.tcp.and.des |
11aae0 | 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 | tination.port.1122..All.other.tr |
11ab00 | 61 66 66 69 63 20 74 72 61 73 70 61 73 73 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f | affic.traspassing.the.router.sho |
11ab20 | 75 6c 64 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 57 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 | uld.be.blocked..We'll.configure. |
11ab40 | 4f 70 65 6e 56 50 4e 20 75 73 69 6e 67 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 | OpenVPN.using.self-signed.certif |
11ab60 | 69 63 61 74 65 73 2c 20 61 6e 64 20 74 68 65 6e 20 64 69 73 63 75 73 73 20 74 68 65 20 6c 65 67 | icates,.and.then.discuss.the.leg |
11ab80 | 61 63 79 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 00 57 65 27 6c 6c 20 75 | acy.pre-shared.key.mode..We'll.u |
11aba0 | 73 65 20 74 68 65 20 49 4b 45 20 61 6e 64 20 45 53 50 20 67 72 6f 75 70 73 20 63 72 65 61 74 65 | se.the.IKE.and.ESP.groups.create |
11abc0 | 64 20 61 62 6f 76 65 20 66 6f 72 20 74 68 69 73 20 56 50 4e 2e 20 42 65 63 61 75 73 65 20 77 65 | d.above.for.this.VPN..Because.we |
11abe0 | 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 6e | .need.access.to.2.different.subn |
11ac00 | 65 74 73 20 6f 6e 20 74 68 65 20 66 61 72 20 73 69 64 65 2c 20 77 65 20 77 69 6c 6c 20 6e 65 65 | ets.on.the.far.side,.we.will.nee |
11ac20 | 64 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 2e 20 49 66 20 79 6f 75 20 | d.two.different.tunnels..If.you. |
11ac40 | 63 68 61 6e 67 65 64 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 45 53 50 20 67 72 6f | changed.the.names.of.the.ESP.gro |
11ac60 | 75 70 20 61 6e 64 20 49 4b 45 20 67 72 6f 75 70 20 69 6e 20 74 68 65 20 70 72 65 76 69 6f 75 73 | up.and.IKE.group.in.the.previous |
11ac80 | 20 73 74 65 70 2c 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 75 73 65 20 74 68 65 20 63 6f 72 | .step,.make.sure.you.use.the.cor |
11aca0 | 72 65 63 74 20 6e 61 6d 65 73 20 68 65 72 65 20 74 6f 6f 2e 00 57 65 62 20 50 72 6f 78 79 20 41 | rect.names.here.too..Web.Proxy.A |
11acc0 | 75 74 6f 64 69 73 63 6f 76 65 72 79 20 28 57 50 41 44 29 20 55 52 4c 00 57 65 62 70 72 6f 78 79 | utodiscovery.(WPAD).URL.Webproxy |
11ace0 | 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 | .Webserver.should.listen.on.spec |
11ad00 | 69 66 69 65 64 20 70 6f 72 74 2e 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6f 6e 6c | ified.port..Webserver.should.onl |
11ad20 | 79 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 | y.listen.on.specified.IP.address |
11ad40 | 00 57 68 65 6e 20 4c 44 50 20 69 73 20 77 6f 72 6b 69 6e 67 2c 20 79 6f 75 20 77 69 6c 6c 20 62 | .When.LDP.is.working,.you.will.b |
11ad60 | 65 20 61 62 6c 65 20 74 6f 20 73 65 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | e.able.to.see.label.information. |
11ad80 | 69 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 | in.the.outcome.of.``show.ip.rout |
11ada0 | 65 60 60 2e 20 42 65 73 69 64 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 | e``..Besides.that.information,.t |
11adc0 | 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 73 70 65 63 69 66 69 63 20 2a 73 68 6f 77 2a 20 63 6f | here.are.also.specific.*show*.co |
11ade0 | 6d 6d 61 6e 64 73 20 66 6f 72 20 4c 44 50 3a 00 57 68 65 6e 20 50 49 4d 20 72 65 63 65 69 76 65 | mmands.for.LDP:.When.PIM.receive |
11ae00 | 73 20 61 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 74 68 65 20 73 6f 75 72 63 65 20 6f | s.a.register.packet.the.source.o |
11ae20 | 66 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 65 64 20 74 6f | f.the.packet.will.be.compared.to |
11ae40 | 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e 64 20 | .the.prefix-list.specified,.and. |
11ae60 | 69 66 20 61 20 70 65 72 6d 69 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6e 6f 72 6d 61 6c 20 70 | if.a.permit.is.received.normal.p |
11ae80 | 72 6f 63 65 73 73 69 6e 67 20 63 6f 6e 74 69 6e 75 65 73 2e 20 49 66 20 61 20 64 65 6e 79 20 69 | rocessing.continues..If.a.deny.i |
11aea0 | 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | s.returned.for.the.source.addres |
11aec0 | 73 20 6f 66 20 74 68 65 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 61 20 72 65 67 69 73 | s.of.the.register.packet.a.regis |
11aee0 | 74 65 72 20 73 74 6f 70 20 6d 65 73 73 61 67 65 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 | ter.stop.message.is.sent.to.the. |
11af00 | 73 6f 75 72 63 65 2e 00 57 68 65 6e 20 56 52 46 73 20 61 72 65 20 75 73 65 64 20 69 74 20 69 73 | source..When.VRFs.are.used.it.is |
11af20 | 20 6e 6f 74 20 6f 6e 6c 79 20 6d 61 6e 64 61 74 6f 72 79 20 74 6f 20 63 72 65 61 74 65 20 61 20 | .not.only.mandatory.to.create.a. |
11af40 | 56 52 46 20 62 75 74 20 61 6c 73 6f 20 74 68 65 20 56 52 46 20 69 74 73 65 6c 66 20 6e 65 65 64 | VRF.but.also.the.VRF.itself.need |
11af60 | 73 20 74 6f 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | s.to.be.assigned.to.an.interface |
11af80 | 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 | ..When.a.``custom``.DynDNS.provi |
11afa0 | 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 60 3c 73 65 72 76 65 72 3e 60 20 77 68 65 72 65 | der.is.used.the.`<server>`.where |
11afc0 | 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 62 65 69 6e 67 20 73 65 6e 74 20 | .update.requests.are.being.sent. |
11afe0 | 74 6f 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 57 68 65 6e 20 61 20 60 60 63 | to.must.be.specified..When.a.``c |
11b000 | 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 20 | ustom``.DynDNS.provider.is.used. |
11b020 | 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 | the.protocol.used.for.communicat |
11b040 | 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 62 65 20 73 70 65 63 | ing.to.the.provider.must.be.spec |
11b060 | 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 | ified.under.`<protocol>`..See.th |
11b080 | 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 66 6f 72 | e.embedded.completion.helper.for |
11b0a0 | 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 20 60 60 63 | .available.protocols..When.a.``c |
11b0c0 | 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 2c | ustom``.DynDNS.provider.is.used, |
11b0e0 | 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 | .the.protocol.used.for.communica |
11b100 | 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 62 65 20 73 70 65 | ting.to.the.provider.must.be.spe |
11b120 | 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 | cified.under.`<protocol>`..See.t |
11b140 | 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 68 | he.embedded.completion.helper.wh |
11b160 | 65 6e 20 65 6e 74 65 72 69 6e 67 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 61 76 | en.entering.above.command.for.av |
11b180 | 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 20 66 61 69 6c 6f 76 | ailable.protocols..When.a.failov |
11b1a0 | 65 72 20 6f 63 63 75 72 73 20 69 6e 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 20 6d 6f 64 65 2c | er.occurs.in.active-backup.mode, |
11b1c0 | 20 62 6f 6e 64 69 6e 67 20 77 69 6c 6c 20 69 73 73 75 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 | .bonding.will.issue.one.or.more. |
11b1e0 | 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 6f 6e 20 74 68 65 20 6e 65 77 6c 79 20 61 63 74 | gratuitous.ARPs.on.the.newly.act |
11b200 | 69 76 65 20 73 6c 61 76 65 2e 20 4f 6e 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 69 73 | ive.slave..One.gratuitous.ARP.is |
11b220 | 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 61 73 74 65 72 20 69 | .issued.for.the.bonding.master.i |
11b240 | 6e 74 65 72 66 61 63 65 20 61 6e 64 20 65 61 63 68 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 | nterface.and.each.VLAN.interface |
11b260 | 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 62 6f 76 65 20 69 74 2c 20 70 72 6f 76 69 64 65 64 20 | s.configured.above.it,.provided. |
11b280 | 74 68 61 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 74 20 6c 65 61 73 74 20 | that.the.interface.has.at.least. |
11b2a0 | 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 47 72 61 74 75 | one.IP.address.configured..Gratu |
11b2c0 | 69 74 6f 75 73 20 41 52 50 73 20 69 73 73 75 65 64 20 66 6f 72 20 56 4c 41 4e 20 69 6e 74 65 72 | itous.ARPs.issued.for.VLAN.inter |
11b2e0 | 66 61 63 65 73 20 61 72 65 20 74 61 67 67 65 64 20 77 69 74 68 20 74 68 65 20 61 70 70 72 6f 70 | faces.are.tagged.with.the.approp |
11b300 | 72 69 61 74 65 20 56 4c 41 4e 20 69 64 2e 00 57 68 65 6e 20 61 20 6c 69 6e 6b 20 69 73 20 72 65 | riate.VLAN.id..When.a.link.is.re |
11b320 | 63 6f 6e 6e 65 63 74 65 64 20 6f 72 20 61 20 6e 65 77 20 73 6c 61 76 65 20 6a 6f 69 6e 73 20 74 | connected.or.a.new.slave.joins.t |
11b340 | 68 65 20 62 6f 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 69 73 20 72 | he.bond.the.receive.traffic.is.r |
11b360 | 65 64 69 73 74 72 69 62 75 74 65 64 20 61 6d 6f 6e 67 20 61 6c 6c 20 61 63 74 69 76 65 20 73 6c | edistributed.among.all.active.sl |
11b380 | 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 62 79 20 69 6e 69 74 69 61 74 69 6e 67 20 41 | aves.in.the.bond.by.initiating.A |
11b3a0 | 52 50 20 52 65 70 6c 69 65 73 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 4d 41 43 | RP.Replies.with.the.selected.MAC |
11b3c0 | 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 73 2e | .address.to.each.of.the.clients. |
11b3e0 | 20 54 68 65 20 75 70 64 65 6c 61 79 20 70 61 72 61 6d 65 74 65 72 20 28 64 65 74 61 69 6c 65 64 | .The.updelay.parameter.(detailed |
11b400 | 20 62 65 6c 6f 77 29 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 61 20 76 61 6c 75 65 20 65 | .below).must.be.set.to.a.value.e |
11b420 | 71 75 61 6c 20 6f 72 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 73 77 69 74 63 68 27 | qual.or.greater.than.the.switch' |
11b440 | 73 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 73 6f 20 74 68 61 74 20 74 68 65 20 41 | s.forwarding.delay.so.that.the.A |
11b460 | 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 70 65 65 72 73 20 77 69 6c | RP.Replies.sent.to.the.peers.wil |
11b480 | 6c 20 6e 6f 74 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 73 77 69 74 63 68 2e 00 | l.not.be.blocked.by.the.switch.. |
11b4a0 | 57 68 65 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 69 74 20 | When.a.packet.is.to.be.sent,.it. |
11b4c0 | 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 61 74 20 71 75 65 | will.have.to.go.through.that.que |
11b4e0 | 75 65 2c 20 73 6f 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 | ue,.so.the.packet.will.be.placed |
11b500 | 20 61 74 20 74 68 65 20 74 61 69 6c 20 6f 66 20 69 74 2e 20 57 68 65 6e 20 74 68 65 20 70 61 63 | .at.the.tail.of.it..When.the.pac |
11b520 | 6b 65 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 2c 20 | ket.completely.goes.through.it,. |
11b540 | 69 74 20 77 69 6c 6c 20 62 65 20 64 65 71 75 65 75 65 64 20 65 6d 70 74 79 69 6e 67 20 69 74 73 | it.will.be.dequeued.emptying.its |
11b560 | 20 70 6c 61 63 65 20 69 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 62 65 69 6e 67 20 65 76 | .place.in.the.queue.and.being.ev |
11b580 | 65 6e 74 75 61 6c 6c 79 20 68 61 6e 64 65 64 20 74 6f 20 74 68 65 20 4e 49 43 20 74 6f 20 62 65 | entually.handed.to.the.NIC.to.be |
11b5a0 | 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 20 6f 75 74 2e 00 57 68 65 6e 20 61 20 70 65 65 72 20 | .actually.sent.out..When.a.peer. |
11b5c0 | 72 65 63 65 69 76 65 73 20 61 20 6d 61 72 74 69 61 6e 20 6e 65 78 74 68 6f 70 20 61 73 20 70 61 | receives.a.martian.nexthop.as.pa |
11b5e0 | 72 74 20 6f 66 20 74 68 65 20 4e 4c 52 49 20 66 6f 72 20 61 20 72 6f 75 74 65 20 70 65 72 6d 69 | rt.of.the.NLRI.for.a.route.permi |
11b600 | 74 20 74 68 65 20 6e 65 78 74 68 6f 70 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 75 63 68 | t.the.nexthop.to.be.used.as.such |
11b620 | 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 72 65 6a 65 63 74 69 6e 67 20 61 6e 64 20 72 65 73 65 74 | ,.instead.of.rejecting.and.reset |
11b640 | 74 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 68 65 6e 20 61 20 72 6f 75 74 | ting.the.connection..When.a.rout |
11b660 | 65 20 66 61 69 6c 73 2c 20 61 20 72 6f 75 74 69 6e 67 20 75 70 64 61 74 65 20 69 73 20 73 65 6e | e.fails,.a.routing.update.is.sen |
11b680 | 74 20 74 6f 20 77 69 74 68 64 72 61 77 20 74 68 65 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 | t.to.withdraw.the.route.from.the |
11b6a0 | 20 6e 65 74 77 6f 72 6b 27 73 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 20 57 68 65 6e 20 | .network's.routing.tables..When. |
11b6c0 | 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 63 68 61 | the.route.is.re-enabled,.the.cha |
11b6e0 | 6e 67 65 20 69 6e 20 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 73 20 61 6c 73 6f 20 61 64 76 65 | nge.in.availability.is.also.adve |
11b700 | 72 74 69 73 65 64 2e 20 41 20 72 6f 75 74 65 20 74 68 61 74 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 | rtised..A.route.that.continually |
11b720 | 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 20 72 65 71 75 69 72 65 73 20 61 20 67 72 | .fails.and.returns.requires.a.gr |
11b740 | 65 61 74 20 64 65 61 6c 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 74 6f 20 75 | eat.deal.of.network.traffic.to.u |
11b760 | 70 64 61 74 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 62 6f 75 74 20 74 68 65 20 72 6f 75 74 | pdate.the.network.about.the.rout |
11b780 | 65 27 73 20 73 74 61 74 75 73 2e 00 57 68 65 6e 20 61 64 64 69 6e 67 20 49 50 76 36 20 72 6f 75 | e's.status..When.adding.IPv6.rou |
11b7a0 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 65 78 63 68 61 6e 67 65 20 66 65 61 74 75 72 | ting.information.exchange.featur |
11b7c0 | 65 20 74 6f 20 42 47 50 2e 20 54 68 65 72 65 20 77 65 72 65 20 73 6f 6d 65 20 70 72 6f 70 6f 73 | e.to.BGP..There.were.some.propos |
11b7e0 | 61 6c 73 2e 20 3a 61 62 62 72 3a 60 49 45 54 46 20 28 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e | als..:abbr:`IETF.(Internet.Engin |
11b800 | 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 29 60 20 3a 61 62 62 72 3a 60 49 44 52 20 28 | eering.Task.Force)`.:abbr:`IDR.( |
11b820 | 49 6e 74 65 72 20 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 6f 70 74 65 64 20 61 | Inter.Domain.Routing)`.adopted.a |
11b840 | 20 70 72 6f 70 6f 73 61 6c 20 63 61 6c 6c 65 64 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 | .proposal.called.Multiprotocol.E |
11b860 | 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 54 68 65 20 73 70 65 63 69 66 69 63 61 74 | xtension.for.BGP..The.specificat |
11b880 | 69 6f 6e 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 32 38 33 60 2e | ion.is.described.in.:rfc:`2283`. |
11b8a0 | 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 64 6f 65 73 20 6e 6f 74 20 64 65 66 69 6e 65 20 6e 65 | .The.protocol.does.not.define.ne |
11b8c0 | 77 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 49 74 20 64 65 66 69 6e 65 73 20 6e 65 77 20 61 74 74 72 | w.protocols..It.defines.new.attr |
11b8e0 | 69 62 75 74 65 73 20 74 6f 20 65 78 69 73 74 69 6e 67 20 42 47 50 2e 20 57 68 65 6e 20 69 74 20 | ibutes.to.existing.BGP..When.it. |
11b900 | 69 73 20 75 73 65 64 20 65 78 63 68 61 6e 67 69 6e 67 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 | is.used.exchanging.IPv6.routing. |
11b920 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 42 47 50 2d 34 2b 2e | information.it.is.called.BGP-4+. |
11b940 | 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 65 78 63 68 61 6e 67 69 6e 67 20 | .When.it.is.used.for.exchanging. |
11b960 | 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 | multicast.routing.information.it |
11b980 | 20 69 73 20 63 61 6c 6c 65 64 20 4d 42 47 50 2e 00 57 68 65 6e 20 61 6e 20 61 75 74 68 6f 72 69 | .is.called.MBGP..When.an.authori |
11b9a0 | 74 61 74 69 76 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 6e 73 77 65 72 20 61 20 | tative.server.does.not.answer.a. |
11b9c0 | 71 75 65 72 79 20 6f 72 20 73 65 6e 64 73 20 61 20 72 65 70 6c 79 20 74 68 65 20 72 65 63 75 72 | query.or.sends.a.reply.the.recur |
11b9e0 | 73 6f 72 20 64 6f 65 73 20 6e 6f 74 20 6c 69 6b 65 2c 20 69 74 20 69 73 20 74 68 72 6f 74 74 6c | sor.does.not.like,.it.is.throttl |
11ba00 | 65 64 2e 20 41 6e 79 20 73 65 72 76 65 72 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 73 75 70 | ed..Any.servers.matching.the.sup |
11ba20 | 70 6c 69 65 64 20 6e 65 74 6d 61 73 6b 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 74 68 72 | plied.netmasks.will.never.be.thr |
11ba40 | 6f 74 74 6c 65 64 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 50 50 50 6f 45 20 77 | ottled..When.configured,.PPPoE.w |
11ba60 | 69 6c 6c 20 63 72 65 61 74 65 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 73 20 77 | ill.create.the.necessary.VLANs.w |
11ba80 | 68 65 6e 20 72 65 71 75 69 72 65 64 2e 20 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 73 65 73 73 | hen.required..Once.the.user.sess |
11baa0 | 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 63 61 6e 63 65 6c 6c 65 64 20 61 6e 64 20 74 68 65 20 56 | ion.has.been.cancelled.and.the.V |
11bac0 | 4c 41 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 20 61 6e 79 6d 6f 72 65 2c 20 56 79 4f 53 20 | LAN.is.not.needed.anymore,.VyOS. |
11bae0 | 77 69 6c 6c 20 72 65 6d 6f 76 65 20 69 74 20 61 67 61 69 6e 2e 00 57 68 65 6e 20 63 6f 6e 66 69 | will.remove.it.again..When.confi |
11bb00 | 67 75 72 69 6e 67 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 3a 20 2a | guring.a.Random-Detect.policy:.* |
11bb20 | 2a 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 65 63 65 64 65 6e 63 65 20 6e 75 6d 62 65 | *the.higher.the.precedence.numbe |
11bb40 | 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2a 2a 2e 00 57 68 | r,.the.higher.the.priority**..Wh |
11bb60 | 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 66 69 6c 74 65 72 2c 20 79 6f 75 20 | en.configuring.your.filter,.you. |
11bb80 | 63 61 6e 20 75 73 65 20 74 68 65 20 60 60 54 61 62 60 60 20 6b 65 79 20 74 6f 20 73 65 65 20 74 | can.use.the.``Tab``.key.to.see.t |
11bba0 | 68 65 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 | he.many.different.parameters.you |
11bbc0 | 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 | .can.configure..When.configuring |
11bbe0 | 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c 20 68 | .your.traffic.policy,.you.will.h |
11bc00 | 61 76 65 20 74 6f 20 73 65 74 20 64 61 74 61 20 72 61 74 65 20 76 61 6c 75 65 73 2c 20 77 61 74 | ave.to.set.data.rate.values,.wat |
11bc20 | 63 68 20 6f 75 74 20 74 68 65 20 75 6e 69 74 73 20 79 6f 75 20 61 72 65 20 6d 61 6e 61 67 69 6e | ch.out.the.units.you.are.managin |
11bc40 | 67 2c 20 69 74 20 69 73 20 65 61 73 79 20 74 6f 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 77 69 | g,.it.is.easy.to.get.confused.wi |
11bc60 | 74 68 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 69 78 65 73 20 61 6e 64 20 73 75 | th.the.different.prefixes.and.su |
11bc80 | 66 66 69 78 65 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 20 56 79 4f 53 20 77 69 6c 6c 20 61 6c | ffixes.you.can.use..VyOS.will.al |
11bca0 | 77 61 79 73 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 75 6e 69 74 | ways.show.you.the.different.unit |
11bcc0 | 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e 67 20 61 20 72 | s.you.can.use..When.defining.a.r |
11bce0 | 75 6c 65 2c 20 69 74 20 69 73 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 6e | ule,.it.is.enable.by.default..In |
11bd00 | 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 6a 75 73 | .some.cases,.it.is.useful.to.jus |
11bd20 | 74 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 75 6c 65 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 | t.disable.the.rule,.rather.than. |
11bd40 | 72 65 6d 6f 76 69 6e 67 20 69 74 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 74 | removing.it..When.defining.the.t |
11bd60 | 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 2c 20 63 61 6c 6c 65 64 20 60 60 62 61 63 6b | ranslated.address,.called.``back |
11bd80 | 65 6e 64 73 60 60 2c 20 61 20 60 60 77 65 69 67 68 74 60 60 20 6d 75 73 74 20 62 65 20 63 6f 6e | ends``,.a.``weight``.must.be.con |
11bda0 | 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 6c 65 74 73 20 74 68 65 20 75 73 65 72 20 64 65 66 69 | figured..This.lets.the.user.defi |
11bdc0 | 6e 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 61 63 63 | ne.load.balance.distribution.acc |
11bde0 | 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 20 54 68 65 6d 20 73 75 6d 20 | ording.to.their.needs..Them.sum. |
11be00 | 6f 66 20 61 6c 6c 20 74 68 65 20 77 65 69 67 68 74 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 | of.all.the.weights.defined.for.t |
11be20 | 68 65 20 62 61 63 6b 65 6e 64 73 20 73 68 6f 75 6c 64 20 62 65 20 65 71 75 61 6c 20 74 6f 20 31 | he.backends.should.be.equal.to.1 |
11be40 | 30 30 2e 20 49 6e 20 6f 64 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 77 65 69 67 68 74 20 64 65 | 00..In.oder.words,.the.weight.de |
11be60 | 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 20 69 73 20 74 68 65 20 70 65 72 | fined.for.the.backend.is.the.per |
11be80 | 63 65 6e 74 61 67 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 68 61 74 20 | centage.of.the.connections.that. |
11bea0 | 77 69 6c 6c 20 72 65 63 65 69 76 65 20 73 75 63 68 20 62 61 63 6b 65 6e 64 2e 00 57 68 65 6e 20 | will.receive.such.backend..When. |
11bec0 | 64 65 71 75 65 75 69 6e 67 2c 20 65 61 63 68 20 68 61 73 68 2d 62 75 63 6b 65 74 20 77 69 74 68 | dequeuing,.each.hash-bucket.with |
11bee0 | 20 64 61 74 61 20 69 73 20 71 75 65 72 69 65 64 20 69 6e 20 61 20 72 6f 75 6e 64 20 72 6f 62 69 | .data.is.queried.in.a.round.robi |
11bf00 | 6e 20 66 61 73 68 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | n.fashion..You.can.configure.the |
11bf20 | 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 2e 00 57 68 65 6e 20 64 65 73 69 67 | .length.of.the.queue..When.desig |
11bf40 | 6e 69 6e 67 20 79 6f 75 72 20 4e 41 54 20 72 75 6c 65 73 65 74 20 6c 65 61 76 65 20 73 6f 6d 65 | ning.your.NAT.ruleset.leave.some |
11bf60 | 20 73 70 61 63 65 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 72 75 6c 65 73 | .space.between.consecutive.rules |
11bf80 | 20 66 6f 72 20 6c 61 74 65 72 20 65 78 74 65 6e 73 69 6f 6e 2e 20 59 6f 75 72 20 72 75 6c 65 73 | .for.later.extension..Your.rules |
11bfa0 | 65 74 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 6e 75 6d 62 65 72 73 20 31 30 2c 20 | et.could.start.with.numbers.10,. |
11bfc0 | 32 30 2c 20 33 30 2e 20 59 6f 75 20 74 68 75 73 20 63 61 6e 20 6c 61 74 65 72 20 65 78 74 65 6e | 20,.30..You.thus.can.later.exten |
11bfe0 | 64 20 74 68 65 20 72 75 6c 65 73 65 74 20 61 6e 64 20 70 6c 61 63 65 20 6e 65 77 20 72 75 6c 65 | d.the.ruleset.and.place.new.rule |
11c000 | 73 20 62 65 74 77 65 65 6e 20 65 78 69 73 74 69 6e 67 20 6f 6e 65 73 2e 00 57 68 65 6e 20 64 6f | s.between.existing.ones..When.do |
11c020 | 69 6e 67 20 66 61 75 6c 74 20 69 73 6f 6c 61 74 69 6f 6e 20 77 69 74 68 20 70 69 6e 67 2c 20 79 | ing.fault.isolation.with.ping,.y |
11c040 | 6f 75 20 73 68 6f 75 6c 64 20 66 69 72 73 74 20 72 75 6e 20 69 74 20 6f 6e 20 74 68 65 20 6c 6f | ou.should.first.run.it.on.the.lo |
11c060 | 63 61 6c 20 68 6f 73 74 2c 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 6c 6f 63 | cal.host,.to.verify.that.the.loc |
11c080 | 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 20 61 6e 64 20 72 | al.network.interface.is.up.and.r |
11c0a0 | 75 6e 6e 69 6e 67 2e 20 54 68 65 6e 2c 20 63 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 68 6f 73 74 | unning..Then,.continue.with.host |
11c0c0 | 73 20 61 6e 64 20 67 61 74 65 77 61 79 73 20 66 75 72 74 68 65 72 20 64 6f 77 6e 20 74 68 65 20 | s.and.gateways.further.down.the. |
11c0e0 | 72 6f 61 64 20 74 6f 77 61 72 64 73 20 79 6f 75 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 52 | road.towards.your.destination..R |
11c100 | 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 61 6e 64 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 73 | ound-trip.time.and.packet.loss.s |
11c120 | 74 61 74 69 73 74 69 63 73 20 61 72 65 20 63 6f 6d 70 75 74 65 64 2e 00 57 68 65 6e 20 66 69 72 | tatistics.are.computed..When.fir |
11c140 | 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 6e 65 77 20 56 50 4e 20 74 68 65 | st.connecting.to.the.new.VPN.the |
11c160 | 20 75 73 65 72 20 69 73 20 70 72 6f 6d 70 74 65 64 20 74 6f 20 65 6e 74 65 72 20 70 72 6f 70 65 | .user.is.prompted.to.enter.prope |
11c180 | 72 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 | r.credentials..When.loading.the. |
11c1a0 | 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 | certificate.you.need.to.manually |
11c1c0 | 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 43 45 52 54 49 46 49 43 | .strip.the.``-----BEGIN.CERTIFIC |
11c1e0 | 41 54 45 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 43 45 52 54 49 46 | ATE-----``.and.``-----END.CERTIF |
11c200 | 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 | ICATE-----``.tags..Also,.the.cer |
11c220 | 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 | tificate/key.needs.to.be.present |
11c240 | 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 | ed.in.a.single.line.without.line |
11c260 | 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 64 6f | .breaks.(``\n``),.this.can.be.do |
11c280 | 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d | ne.using.the.following.shell.com |
11c2a0 | 6d 61 6e 64 3a 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 | mand:.When.loading.the.certifica |
11c2c0 | 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 74 68 | te.you.need.to.manually.strip.th |
11c2e0 | 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 | e.``-----BEGIN.KEY-----``.and.`` |
11c300 | 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 | -----END.KEY-----``.tags..Also,. |
11c320 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | the.certificate/key.needs.to.be. |
11c340 | 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f | presented.in.a.single.line.witho |
11c360 | 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 | ut.line.breaks.(``\n``),.this.ca |
11c380 | 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 | n.be.done.using.the.following.sh |
11c3a0 | 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6d 61 74 68 63 69 6e 67 20 61 6c 6c 20 70 | ell.command:.When.mathcing.all.p |
11c3c0 | 61 74 74 65 72 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 72 75 6c 65 2c 20 74 68 65 6e 20 | atterns.defined.in.a.rule,.then. |
11c3e0 | 64 69 66 66 65 72 65 6e 74 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 6d 61 64 65 2e 20 54 | different.actions.can.be.made..T |
11c400 | 68 69 73 20 69 6e 63 6c 75 64 65 73 20 64 72 6f 70 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 2c | his.includes.droping.the.packet, |
11c420 | 20 6d 6f 64 69 66 79 69 6e 67 20 63 65 72 74 61 69 6e 20 64 61 74 61 2c 20 6f 72 20 73 65 74 74 | .modifying.certain.data,.or.sett |
11c440 | 69 6e 67 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 57 | ing.a.different.routing.table..W |
11c460 | 68 65 6e 20 6e 6f 20 6f 70 74 69 6f 6e 73 2f 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 75 73 | hen.no.options/parameters.are.us |
11c480 | 65 64 2c 20 74 68 65 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 73 79 73 | ed,.the.contents.of.the.main.sys |
11c4a0 | 6c 6f 67 20 66 69 6c 65 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 2e 00 57 68 65 6e 20 6e 6f 2d | log.file.are.displayed..When.no- |
11c4c0 | 72 65 6c 65 61 73 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 70 36 63 20 77 69 6c | release.is.specified,.dhcp6c.wil |
11c4e0 | 6c 20 73 65 6e 64 20 61 20 72 65 6c 65 61 73 65 20 6d 65 73 73 61 67 65 20 6f 6e 20 63 6c 69 65 | l.send.a.release.message.on.clie |
11c500 | 6e 74 20 65 78 69 74 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 73 69 6e 67 20 61 6e 20 61 73 73 | nt.exit.to.prevent.losing.an.ass |
11c520 | 69 67 6e 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 2e 00 57 68 65 6e 20 70 72 | igned.address.or.prefix..When.pr |
11c540 | 6f 63 65 73 73 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 | ocessing.packets.from.a.neighbor |
11c560 | 20 70 72 6f 63 65 73 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 | .process.the.number.of.packets.i |
11c580 | 6e 63 6f 6d 69 6e 67 20 61 74 20 6f 6e 65 20 74 69 6d 65 20 62 65 66 6f 72 65 20 6d 6f 76 69 6e | ncoming.at.one.time.before.movin |
11c5a0 | 67 20 6f 6e 20 74 6f 20 74 68 65 20 6e 65 78 74 20 74 61 73 6b 2e 00 57 68 65 6e 20 72 61 70 69 | g.on.to.the.next.task..When.rapi |
11c5c0 | 64 2d 63 6f 6d 6d 69 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 70 36 63 20 77 69 | d-commit.is.specified,.dhcp6c.wi |
11c5e0 | 6c 6c 20 69 6e 63 6c 75 64 65 20 61 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 20 6f 70 74 69 6f 6e | ll.include.a.rapid-commit.option |
11c600 | 20 69 6e 20 73 6f 6c 69 63 69 74 20 6d 65 73 73 61 67 65 73 20 61 6e 64 20 77 61 69 74 20 66 6f | .in.solicit.messages.and.wait.fo |
11c620 | 72 20 61 6e 20 69 6d 6d 65 64 69 61 74 65 20 72 65 70 6c 79 20 69 6e 73 74 65 61 64 20 6f 66 20 | r.an.immediate.reply.instead.of. |
11c640 | 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 2e 00 57 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 | advertisements..When.remote.peer |
11c660 | 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 | .does.not.have.capability.negoti |
11c680 | 61 74 69 6f 6e 20 66 65 61 74 75 72 65 2c 20 72 65 6d 6f 74 65 20 70 65 65 72 20 77 69 6c 6c 20 | ation.feature,.remote.peer.will. |
11c6a0 | 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 74 20 61 6c 6c | not.send.any.capabilities.at.all |
11c6c0 | 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 2c 20 62 67 70 20 63 6f 6e 66 69 67 75 72 65 73 20 74 | ..In.that.case,.bgp.configures.t |
11c6e0 | 68 65 20 70 65 65 72 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 69 6c 69 | he.peer.with.configured.capabili |
11c700 | 74 69 65 73 2e 00 57 68 65 6e 20 72 75 6e 6e 69 6e 67 20 69 74 20 61 74 20 31 47 62 69 74 20 61 | ties..When.running.it.at.1Gbit.a |
11c720 | 6e 64 20 6c 6f 77 65 72 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 72 65 64 75 63 65 | nd.lower,.you.may.want.to.reduce |
11c740 | 20 74 68 65 20 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 20 74 6f 20 31 30 30 30 20 70 61 63 6b 65 | .the.`queue-limit`.to.1000.packe |
11c760 | 74 73 20 6f 72 20 6c 65 73 73 2e 20 49 6e 20 72 61 74 65 73 20 6c 69 6b 65 20 31 30 4d 62 69 74 | ts.or.less..In.rates.like.10Mbit |
11c780 | 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 69 74 20 74 6f 20 36 30 30 20 | ,.you.may.want.to.set.it.to.600. |
11c7a0 | 70 61 63 6b 65 74 73 2e 00 57 68 65 6e 20 73 65 6e 64 69 6e 67 20 50 49 4d 20 68 65 6c 6c 6f 20 | packets..When.sending.PIM.hello. |
11c7c0 | 70 61 63 6b 65 74 73 20 74 65 6c 6c 20 50 49 4d 20 74 6f 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 | packets.tell.PIM.to.not.send.any |
11c7e0 | 20 76 36 20 73 65 63 6f 6e 64 61 72 79 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 69 | .v6.secondary.addresses.on.the.i |
11c800 | 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 73 | nterface..This.information.is.us |
11c820 | 65 64 20 74 6f 20 61 6c 6c 6f 77 20 50 49 4d 20 74 6f 20 75 73 65 20 76 36 20 6e 65 78 74 68 6f | ed.to.allow.PIM.to.use.v6.nextho |
11c840 | 70 73 20 69 6e 20 69 74 27 73 20 64 65 63 69 73 69 6f 6e 20 66 6f 72 20 3a 61 62 62 72 3a 60 52 | ps.in.it's.decision.for.:abbr:`R |
11c860 | 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 6c 6f | PF.(Reverse.Path.Forwarding)`.lo |
11c880 | 6f 6b 75 70 20 69 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 20 28 | okup.if.this.option.is.not.set.( |
11c8a0 | 64 65 66 61 75 6c 74 29 2e 00 57 68 65 6e 20 73 65 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | default)..When.set.the.interface |
11c8c0 | 20 69 73 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 22 64 69 61 6c 2d 6f 6e 2d 64 65 6d 61 6e 64 22 | .is.enabled.for."dial-on-demand" |
11c8e0 | 2e 00 57 68 65 6e 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 73 68 6f 75 6c 64 20 62 65 | ..When.specified,.this.should.be |
11c900 | 20 74 68 65 20 6f 6e 6c 79 20 6b 65 79 77 6f 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 | .the.only.keyword.for.the.interf |
11c920 | 61 63 65 2e 00 57 68 65 6e 20 73 74 61 72 74 69 6e 67 20 61 20 56 79 4f 53 20 6c 69 76 65 20 73 | ace..When.starting.a.VyOS.live.s |
11c940 | 79 73 74 65 6d 20 28 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 43 44 29 20 74 68 65 20 | ystem.(the.installation.CD).the. |
11c960 | 63 6f 6e 66 69 67 75 72 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 64 65 66 61 75 | configured.keyboard.layout.defau |
11c980 | 6c 74 73 20 74 6f 20 55 53 2e 20 41 73 20 74 68 69 73 20 6d 69 67 68 74 20 6e 6f 74 20 73 75 69 | lts.to.US..As.this.might.not.sui |
11c9a0 | 74 65 20 65 76 65 72 79 6f 6e 65 73 20 75 73 65 20 63 61 73 65 20 79 6f 75 20 63 61 6e 20 61 64 | te.everyones.use.case.you.can.ad |
11c9c0 | 6a 75 73 74 20 74 68 65 20 75 73 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 6f 6e | just.the.used.keyboard.layout.on |
11c9e0 | 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 00 57 68 65 6e 20 74 68 65 20 44 48 | .the.system.console..When.the.DH |
11ca00 | 43 50 20 73 65 72 76 65 72 20 69 73 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 64 79 6e 61 6d 69 63 | CP.server.is.considering.dynamic |
11ca20 | 61 6c 6c 79 20 61 6c 6c 6f 63 61 74 69 6e 67 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 6f | ally.allocating.an.IP.address.to |
11ca40 | 20 61 20 63 6c 69 65 6e 74 2c 20 69 74 20 66 69 72 73 74 20 73 65 6e 64 73 20 61 6e 20 49 43 4d | .a.client,.it.first.sends.an.ICM |
11ca60 | 50 20 45 63 68 6f 20 72 65 71 75 65 73 74 20 28 61 20 70 69 6e 67 29 20 74 6f 20 74 68 65 20 61 | P.Echo.request.(a.ping).to.the.a |
11ca80 | 64 64 72 65 73 73 20 62 65 69 6e 67 20 61 73 73 69 67 6e 65 64 2e 20 49 74 20 77 61 69 74 73 20 | ddress.being.assigned..It.waits. |
11caa0 | 66 6f 72 20 61 20 73 65 63 6f 6e 64 2c 20 61 6e 64 20 69 66 20 6e 6f 20 49 43 4d 50 20 45 63 68 | for.a.second,.and.if.no.ICMP.Ech |
11cac0 | 6f 20 72 65 73 70 6f 6e 73 65 20 68 61 73 20 62 65 65 6e 20 68 65 61 72 64 2c 20 69 74 20 61 73 | o.response.has.been.heard,.it.as |
11cae0 | 73 69 67 6e 73 20 74 68 65 20 61 64 64 72 65 73 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6c 6f 73 | signs.the.address..When.the.clos |
11cb00 | 65 2d 61 63 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e 20 74 68 65 20 70 65 | e-action.option.is.set.on.the.pe |
11cb20 | 65 72 73 2c 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 20 6f 66 20 65 61 63 68 | ers,.the.connection-type.of.each |
11cb40 | 20 70 65 65 72 20 68 61 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 65 64 20 63 61 72 65 66 75 6c 6c | .peer.has.to.considered.carefull |
11cb60 | 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 | y..For.example,.if.the.option.is |
11cb80 | 20 73 65 74 20 6f 6e 20 62 6f 74 68 20 70 65 65 72 73 2c 20 74 68 65 6e 20 62 6f 74 68 20 77 6f | .set.on.both.peers,.then.both.wo |
11cba0 | 75 6c 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 6e 64 20 68 6f 6c 64 | uld.attempt.to.initiate.and.hold |
11cbc0 | 20 6f 70 65 6e 20 6d 75 6c 74 69 70 6c 65 20 63 6f 70 69 65 73 20 6f 66 20 65 61 63 68 20 63 68 | .open.multiple.copies.of.each.ch |
11cbe0 | 69 6c 64 20 53 41 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 69 6e 73 74 61 | ild.SA..This.might.lead.to.insta |
11cc00 | 62 69 6c 69 74 79 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6f 72 20 63 70 75 2f 6d 65 6d 6f | bility.of.the.device.or.cpu/memo |
11cc20 | 72 79 20 75 74 69 6c 69 7a 61 74 69 6f 6e 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 | ry.utilization..When.the.command |
11cc40 | 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 | .above.is.set,.VyOS.will.answer. |
11cc60 | 65 76 65 72 79 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 | every.ICMP.echo.request.addresse |
11cc80 | 64 20 74 6f 20 69 74 73 65 6c 66 2c 20 62 75 74 20 74 68 61 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 | d.to.itself,.but.that.will.only. |
11cca0 | 68 61 70 70 65 6e 20 69 66 20 6e 6f 20 6f 74 68 65 72 20 72 75 6c 65 20 69 73 20 61 70 70 6c 69 | happen.if.no.other.rule.is.appli |
11ccc0 | 65 64 20 64 72 6f 70 70 69 6e 67 20 6f 72 20 72 65 6a 65 63 74 69 6e 67 20 6c 6f 63 61 6c 20 65 | ed.dropping.or.rejecting.local.e |
11cce0 | 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 63 6f 6e 66 6c 69 63 | cho.requests..In.case.of.conflic |
11cd00 | 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 61 6e 73 77 65 72 20 49 43 4d 50 20 65 63 68 | t,.VyOS.will.not.answer.ICMP.ech |
11cd20 | 6f 20 72 65 71 75 65 73 74 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f | o.requests..When.the.command.abo |
11cd40 | 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 6e 6f 20 49 | ve.is.set,.VyOS.will.answer.no.I |
11cd60 | 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 64 20 74 6f 20 69 74 | CMP.echo.request.addressed.to.it |
11cd80 | 73 65 6c 66 20 61 74 20 61 6c 6c 2c 20 6e 6f 20 6d 61 74 74 65 72 20 77 68 65 72 65 20 69 74 20 | self.at.all,.no.matter.where.it. |
11cda0 | 63 6f 6d 65 73 20 66 72 6f 6d 20 6f 72 20 77 68 65 74 68 65 72 20 6d 6f 72 65 20 73 70 65 63 69 | comes.from.or.whether.more.speci |
11cdc0 | 66 69 63 20 72 75 6c 65 73 20 61 72 65 20 62 65 69 6e 67 20 61 70 70 6c 69 65 64 20 74 6f 20 61 | fic.rules.are.being.applied.to.a |
11cde0 | 63 63 65 70 74 20 74 68 65 6d 2e 00 57 68 65 6e 20 74 68 65 20 76 72 72 70 20 67 72 6f 75 70 20 | ccept.them..When.the.vrrp.group. |
11ce00 | 69 73 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 20 77 69 | is.a.member.of.the.sync.group.wi |
11ce20 | 6c 6c 20 75 73 65 20 6f 6e 6c 79 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 20 68 65 61 6c 74 | ll.use.only.the.sync.group.healt |
11ce40 | 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 2e 20 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f | h.check.script..This.example.sho |
11ce60 | 77 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 66 6f 72 20 74 68 65 20 73 | ws.how.to.configure.it.for.the.s |
11ce80 | 79 6e 63 20 67 72 6f 75 70 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 44 48 43 50 20 74 6f 20 72 65 | ync.group:.When.using.DHCP.to.re |
11cea0 | 74 72 69 65 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 66 20 6c 6f 63 61 6c | trieve.IPv4.address.and.if.local |
11cec0 | 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 64 2c 20 74 68 65 79 | .customizations.are.needed,.they |
11cee0 | 20 73 68 6f 75 6c 64 20 62 65 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 65 6e | .should.be.possible.using.the.en |
11cf00 | 74 65 72 20 61 6e 64 20 65 78 69 74 20 68 6f 6f 6b 73 20 70 72 6f 76 69 64 65 64 2e 20 54 68 65 | ter.and.exit.hooks.provided..The |
11cf20 | 20 68 6f 6f 6b 20 64 69 72 73 20 61 72 65 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 45 56 45 2d 4e | .hook.dirs.are:.When.using.EVE-N |
11cf40 | 47 20 74 6f 20 6c 61 62 20 74 68 69 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 65 6e 73 75 72 65 | G.to.lab.this.environment.ensure |
11cf60 | 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 65 31 30 30 30 20 61 73 20 74 68 65 20 64 65 73 69 | .you.are.using.e1000.as.the.desi |
11cf80 | 72 65 64 20 64 72 69 76 65 72 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 6e 65 74 77 6f 72 6b | red.driver.for.your.VyOS.network |
11cfa0 | 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 | .interfaces..When.using.the.regu |
11cfc0 | 6c 61 72 20 76 69 72 74 69 6f 20 6e 65 74 77 6f 72 6b 20 64 72 69 76 65 72 20 6e 6f 20 4c 41 43 | lar.virtio.network.driver.no.LAC |
11cfe0 | 50 20 50 44 55 73 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 79 20 56 79 4f 53 20 74 68 75 73 | P.PDUs.will.be.sent.by.VyOS.thus |
11d000 | 20 74 68 65 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 63 | .the.port-channel.will.never.bec |
11d020 | 6f 6d 65 20 61 63 74 69 76 65 21 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 | ome.active!.When.using.NAT.for.a |
11d040 | 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 | .large.number.of.host.systems.it |
11d060 | 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 | .recommended.that.a.minimum.of.1 |
11d080 | 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 | .IP.address.is.used.to.NAT.every |
11d0a0 | 20 32 35 36 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 74 | .256.host.systems..This.is.due.t |
11d0c0 | 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 | o.the.limit.of.65,000.port.numbe |
11d0e0 | 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 74 | rs.available.for.unique.translat |
11d100 | 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 76 65 72 61 67 65 20 | ions.and.a.reserving.an.average. |
11d120 | 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 73 79 73 | of.200-300.sessions.per.host.sys |
11d140 | 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 20 6c 61 72 67 65 20 | tem..When.using.NAT.for.a.large. |
11d160 | 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d | number.of.host.systems.it.recomm |
11d180 | 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 64 64 | ended.that.a.minimum.of.1.IP.add |
11d1a0 | 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 20 32 35 36 20 70 72 | ress.is.used.to.NAT.every.256.pr |
11d1c0 | 69 76 61 74 65 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 | ivate.host.systems..This.is.due. |
11d1e0 | 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 | to.the.limit.of.65,000.port.numb |
11d200 | 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 | ers.available.for.unique.transla |
11d220 | 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 76 65 72 61 67 65 | tions.and.a.reserving.an.average |
11d240 | 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 73 79 | .of.200-300.sessions.per.host.sy |
11d260 | 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 6b 6e 6f 77 6e 2d 68 6f 73 74 | stem..When.using.SSH,.known-host |
11d280 | 73 2d 66 69 6c 65 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 | s-file,.private-key-file.and.pub |
11d2a0 | 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f | lic-key-file.are.mandatory.optio |
11d2c0 | 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d | ns..When.using.SSH,.private-key- |
11d2e0 | 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e | file.and.public-key-file.are.man |
11d300 | 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 54 69 6d 65 2d | datory.options..When.using.Time- |
11d320 | 62 61 73 65 64 20 6f 6e 65 2d 74 69 6d 65 20 70 61 73 73 77 6f 72 64 20 28 54 4f 54 50 29 20 28 | based.one-time.password.(TOTP).( |
11d340 | 4f 54 50 20 48 4f 54 50 2d 74 69 6d 65 29 2c 20 62 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 | OTP.HOTP-time),.be.sure.that.the |
11d360 | 20 74 69 6d 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 4f 54 50 20 | .time.on.the.server.and.the.OTP. |
11d380 | 74 6f 6b 65 6e 20 67 65 6e 65 72 61 74 6f 72 20 61 72 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 | token.generator.are.synchronized |
11d3a0 | 20 62 79 20 4e 54 50 00 57 68 65 6e 20 75 73 69 6e 67 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | .by.NTP.When.using.site-to-site. |
11d3c0 | 49 50 73 65 63 20 77 69 74 68 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 73 2c 20 62 65 20 73 75 | IPsec.with.VTI.interfaces,.be.su |
11d3e0 | 72 65 20 74 6f 20 64 69 73 61 62 6c 65 20 72 6f 75 74 65 20 61 75 74 6f 69 6e 73 74 61 6c 6c 00 | re.to.disable.route.autoinstall. |
11d400 | 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 36 20 70 72 6f 74 6f 63 6f 6c 2c 20 4d 52 | When.using.the.IPv6.protocol,.MR |
11d420 | 55 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 31 32 38 30 20 62 79 74 65 73 2e 00 57 | U.must.be.at.least.1280.bytes..W |
11d440 | 68 65 6e 20 75 74 69 6c 69 7a 69 6e 67 20 56 79 4f 53 20 69 6e 20 61 6e 20 65 6e 76 69 72 6f 6e | hen.utilizing.VyOS.in.an.environ |
11d460 | 6d 65 6e 74 20 77 69 74 68 20 41 72 69 73 74 61 20 67 65 61 72 20 79 6f 75 20 63 61 6e 20 75 73 | ment.with.Arista.gear.you.can.us |
11d480 | 65 20 74 68 69 73 20 62 6c 75 65 20 70 72 69 6e 74 20 61 73 20 61 6e 20 69 6e 69 74 69 61 6c 20 | e.this.blue.print.as.an.initial. |
11d4a0 | 73 65 74 75 70 20 74 6f 20 67 65 74 20 61 6e 20 4c 41 43 50 20 62 6f 6e 64 20 2f 20 70 6f 72 74 | setup.to.get.an.LACP.bond./.port |
11d4c0 | 2d 63 68 61 6e 6e 65 6c 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 62 65 74 77 65 65 6e 20 74 68 6f | -channel.operational.between.tho |
11d4e0 | 73 65 20 74 77 6f 20 64 65 76 69 63 65 73 2e 00 57 68 65 72 65 20 62 6f 74 68 20 72 6f 75 74 65 | se.two.devices..Where.both.route |
11d500 | 73 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 70 65 65 72 73 2c | s.were.received.from.eBGP.peers, |
11d520 | 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 68 69 63 68 20 69 73 20 | .then.prefer.the.route.which.is. |
11d540 | 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 | already.selected..Note.that.this |
11d560 | 20 63 68 65 63 6b 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 65 64 20 69 66 20 3a 63 66 67 63 6d 64 | .check.is.not.applied.if.:cfgcmd |
11d580 | 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 63 6f 6d 70 61 72 65 2d 72 6f 75 74 65 72 69 64 60 | :`bgp.bestpath.compare-routerid` |
11d5a0 | 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 63 68 65 63 6b 20 63 61 6e 20 70 | .is.configured..This.check.can.p |
11d5c0 | 72 65 76 65 6e 74 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 66 20 6f 73 63 69 6c 6c 61 74 69 6f 6e | revent.some.cases.of.oscillation |
11d5e0 | 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 | ..Where.firewall.base.chain.to.c |
11d600 | 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 | onfigure.firewall.filtering.rule |
11d620 | 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 | s.for.transit.traffic.is.``set.f |
11d640 | 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 | irewall.ipv4.forward.filter....` |
11d660 | 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 | `,.which.happens.in.stage.5,.hig |
11d680 | 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 | hlightened.with.red.color..Where |
11d6a0 | 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 | .firewall.base.chain.to.configur |
11d6c0 | 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 74 | e.firewall.filtering.rules.for.t |
11d6e0 | 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | ransit.traffic.is.``set.firewall |
11d700 | 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 | .ipv6.forward.filter....``,.whic |
11d720 | 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 68 6c 69 67 68 74 65 | h.happens.in.stage.5,.highlighte |
11d740 | 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 20 72 6f 75 74 65 73 | ned.with.red.color..Where.routes |
11d760 | 20 77 69 74 68 20 61 20 4d 45 44 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 | .with.a.MED.were.received.from.t |
11d780 | 68 65 20 73 61 6d 65 20 41 53 2c 20 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 | he.same.AS,.prefer.the.route.wit |
11d7a0 | 68 20 74 68 65 20 6c 6f 77 65 73 74 20 4d 45 44 2e 00 57 68 65 72 65 2c 20 6d 61 69 6e 20 6b 65 | h.the.lowest.MED..Where,.main.ke |
11d7c0 | 79 20 77 6f 72 64 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 74 68 73 20 | y.words.and.configuration.paths. |
11d7e0 | 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 75 6e 64 65 72 73 74 6f 6f 64 3a 00 57 68 65 | that.needs.to.be.understood:.Whe |
11d800 | 74 68 65 72 20 74 6f 20 61 63 63 65 70 74 20 44 41 44 20 28 44 75 70 6c 69 63 61 74 65 20 41 64 | ther.to.accept.DAD.(Duplicate.Ad |
11d820 | 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 29 2e 00 57 68 69 63 68 20 67 65 6e 65 72 61 74 65 | dress.Detection)..Which.generate |
11d840 | 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 | s.the.following.configuration:.W |
11d860 | 68 69 63 68 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | hich.results.in.a.configuration. |
11d880 | 6f 66 3a 00 57 68 69 63 68 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 6f 6c | of:.Which.would.generate.the.fol |
11d8a0 | 6c 6f 77 69 6e 67 20 4e 41 54 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 63 6f 6e 66 69 67 75 72 61 | lowing.NAT.destination.configura |
11d8c0 | 74 69 6f 6e 3a 00 57 68 69 6c 65 20 2a 2a 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 2a 2a 20 61 | tion:.While.**network.groups**.a |
11d8e0 | 63 63 65 70 74 20 49 50 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 43 49 44 52 20 6e 6f 74 61 74 69 | ccept.IP.networks.in.CIDR.notati |
11d900 | 6f 6e 2c 20 73 70 65 63 69 66 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 | on,.specific.IP.addresses.can.be |
11d920 | 20 61 64 64 65 64 20 61 73 20 61 20 33 32 2d 62 69 74 20 70 72 65 66 69 78 2e 20 49 66 20 79 6f | .added.as.a.32-bit.prefix..If.yo |
11d940 | 75 20 66 6f 72 65 73 65 65 20 74 68 65 20 6e 65 65 64 20 74 6f 20 61 64 64 20 61 20 6d 69 78 20 | u.foresee.the.need.to.add.a.mix. |
11d960 | 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 20 6e | of.addresses.and.networks,.the.n |
11d980 | 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 57 68 69 | etwork.group.is.recommended..Whi |
11d9a0 | 6c 65 20 6d 61 6e 79 20 61 72 65 20 61 77 61 72 65 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 73 20 | le.many.are.aware.of.OpenVPN.as. |
11d9c0 | 61 20 43 6c 69 65 6e 74 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 2c 20 69 74 20 69 73 20 6f 66 74 | a.Client.VPN.solution,.it.is.oft |
11d9e0 | 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 61 73 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | en.overlooked.as.a.site-to-site. |
11da00 | 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 20 64 75 65 20 74 6f 20 6c 61 63 6b 20 6f 66 20 73 75 70 70 | VPN.solution.due.to.lack.of.supp |
11da20 | 6f 72 74 20 66 6f 72 20 74 68 69 73 20 6d 6f 64 65 20 69 6e 20 6d 61 6e 79 20 72 6f 75 74 65 72 | ort.for.this.mode.in.many.router |
11da40 | 20 70 6c 61 74 66 6f 72 6d 73 2e 00 57 68 69 6c 65 20 6e 6f 72 6d 61 6c 20 47 52 45 20 69 73 20 | .platforms..While.normal.GRE.is. |
11da60 | 66 6f 72 20 6c 61 79 65 72 20 33 2c 20 47 52 45 54 41 50 20 69 73 20 66 6f 72 20 6c 61 79 65 72 | for.layer.3,.GRETAP.is.for.layer |
11da80 | 20 32 2e 20 47 52 45 54 41 50 20 63 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 65 20 45 74 68 65 72 | .2..GRETAP.can.encapsulate.Ether |
11daa0 | 6e 65 74 20 66 72 61 6d 65 73 2c 20 74 68 75 73 20 69 74 20 63 61 6e 20 62 65 20 62 72 69 64 67 | net.frames,.thus.it.can.be.bridg |
11dac0 | 65 64 20 77 69 74 68 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 63 72 65 61 | ed.with.other.interfaces.to.crea |
11dae0 | 74 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 73 20 74 68 61 74 20 | te.datalink.layer.segments.that. |
11db00 | 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 72 65 6d 6f 74 65 20 73 69 74 65 73 2e 00 57 68 69 74 | span.multiple.remote.sites..Whit |
11db20 | 65 6c 69 73 74 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2e | elist.of.addresses.and.networks. |
11db40 | 20 41 6c 77 61 79 73 20 61 6c 6c 6f 77 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e | .Always.allow.inbound.connection |
11db60 | 73 20 66 72 6f 6d 20 74 68 65 73 65 20 73 79 73 74 65 6d 73 2e 00 57 69 6c 6c 20 61 64 64 20 60 | s.from.these.systems..Will.add.` |
11db80 | 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 79 60 60 20 61 74 20 74 68 65 20 65 6e 64 20 6f 66 20 | `persistent-key``.at.the.end.of. |
11dba0 | 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 | the.generated.OpenVPN.configurat |
11dbc0 | 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 69 73 20 6f 6e 6c 79 20 61 73 20 6c 61 73 | ion..Please.use.this.only.as.las |
11dbe0 | 74 20 72 65 73 6f 72 74 20 2d 20 74 68 69 6e 67 73 20 6d 69 67 68 74 20 62 72 65 61 6b 20 61 6e | t.resort.-.things.might.break.an |
11dc00 | 64 20 4f 70 65 6e 56 50 4e 20 77 6f 6e 27 74 20 73 74 61 72 74 20 69 66 20 79 6f 75 20 70 61 73 | d.OpenVPN.won't.start.if.you.pas |
11dc20 | 73 20 69 6e 76 61 6c 69 64 20 6f 70 74 69 6f 6e 73 2f 73 79 6e 74 61 78 2e 00 57 69 6c 6c 20 61 | s.invalid.options/syntax..Will.a |
11dc40 | 64 64 20 60 60 70 75 73 68 20 22 6b 65 65 70 61 6c 69 76 65 20 31 20 31 30 22 60 60 20 74 6f 20 | dd.``push."keepalive.1.10"``.to. |
11dc60 | 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 20 66 69 6c | the.generated.OpenVPN.config.fil |
11dc80 | 65 2e 00 57 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 6f 6e 6c 79 20 70 61 63 6b 65 74 73 | e..Will.be.recorded.only.packets |
11dca0 | 2f 66 6c 6f 77 73 20 6f 6e 20 2a 2a 69 6e 63 6f 6d 69 6e 67 2a 2a 20 64 69 72 65 63 74 69 6f 6e | /flows.on.**incoming**.direction |
11dcc0 | 20 69 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 64 65 66 | .in.configured.interfaces.by.def |
11dce0 | 61 75 6c 74 2e 00 57 69 6c 6c 20 64 72 6f 70 20 60 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b | ault..Will.drop.`<shared-network |
11dd00 | 2d 6e 61 6d 65 3e 5f 60 20 66 72 6f 6d 20 63 6c 69 65 6e 74 20 44 4e 53 20 72 65 63 6f 72 64 2c | -name>_`.from.client.DNS.record, |
11dd20 | 20 75 73 69 6e 67 20 6f 6e 6c 79 20 74 68 65 20 68 6f 73 74 20 64 65 63 6c 61 72 61 74 69 6f 6e | .using.only.the.host.declaration |
11dd40 | 20 6e 61 6d 65 20 61 6e 64 20 64 6f 6d 61 69 6e 3a 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 | .name.and.domain:.`<hostname>.<d |
11dd60 | 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 57 69 6e 64 6f 77 73 20 31 30 20 64 6f 65 73 20 6e 6f 74 | omain-name>`.Windows.10.does.not |
11dd80 | 20 61 6c 6c 6f 77 20 61 20 75 73 65 72 20 74 6f 20 63 68 6f 6f 73 65 20 74 68 65 20 69 6e 74 65 | .allow.a.user.to.choose.the.inte |
11dda0 | 67 72 69 74 79 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 75 73 69 | grity.and.encryption.ciphers.usi |
11ddc0 | 6e 67 20 74 68 65 20 47 55 49 20 61 6e 64 20 69 74 20 75 73 65 73 20 73 6f 6d 65 20 6f 6c 64 65 | ng.the.GUI.and.it.uses.some.olde |
11dde0 | 72 20 70 72 6f 70 6f 73 61 6c 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 41 20 75 73 65 72 20 63 | r.proposals.by.default..A.user.c |
11de00 | 61 6e 20 6f 6e 6c 79 20 63 68 61 6e 67 65 20 74 68 65 20 70 72 6f 70 6f 73 61 6c 73 20 6f 6e 20 | an.only.change.the.proposals.on. |
11de20 | 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 62 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 | the.client.side.by.configuring.t |
11de40 | 68 65 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 76 69 61 20 | he.IPSec.connection.profile.via. |
11de60 | 50 6f 77 65 72 53 68 65 6c 6c 2e 00 57 69 6e 64 6f 77 73 20 49 6e 74 65 72 6e 65 74 20 4e 61 6d | PowerShell..Windows.Internet.Nam |
11de80 | 65 20 53 65 72 76 69 63 65 20 28 57 49 4e 53 29 20 73 65 72 76 65 72 73 20 70 72 6f 70 61 67 61 | e.Service.(WINS).servers.propaga |
11dea0 | 74 65 64 20 74 6f 20 63 6c 69 65 6e 74 00 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 | ted.to.client.Windows.expects.th |
11dec0 | 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e | e.server.name.to.be.also.used.in |
11dee0 | 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e | .the.server's.certificate.common |
11df00 | 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 | .name,.so.it's.best.to.use.this. |
11df20 | 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e | DNS.name.for.your.VPN.connection |
11df40 | 2e 00 57 69 72 65 47 75 61 72 64 00 57 69 72 65 47 75 61 72 64 20 43 6c 69 65 6e 74 20 51 52 20 | ..WireGuard.WireGuard.Client.QR. |
11df60 | 63 6f 64 65 00 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 69 74 73 65 6c 66 20 | code.WireGuard.interface.itself. |
11df80 | 75 73 65 73 20 61 64 64 72 65 73 73 20 31 30 2e 31 2e 30 2e 31 2f 33 30 00 57 69 72 65 47 75 61 | uses.address.10.1.0.1/30.WireGua |
11dfa0 | 72 64 20 69 73 20 61 6e 20 65 78 74 72 65 6d 65 6c 79 20 73 69 6d 70 6c 65 20 79 65 74 20 66 61 | rd.is.an.extremely.simple.yet.fa |
11dfc0 | 73 74 20 61 6e 64 20 6d 6f 64 65 72 6e 20 56 50 4e 20 74 68 61 74 20 75 74 69 6c 69 7a 65 73 20 | st.and.modern.VPN.that.utilizes. |
11dfe0 | 73 74 61 74 65 2d 6f 66 2d 74 68 65 2d 61 72 74 20 63 72 79 70 74 6f 67 72 61 70 68 79 2e 20 53 | state-of-the-art.cryptography..S |
11e000 | 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 72 65 67 75 61 72 64 2e 63 6f 6d 20 66 6f 72 | ee.https://www.wireguard.com.for |
11e020 | 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 20 72 65 71 | .more.information..WireGuard.req |
11e040 | 75 69 72 65 73 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 61 20 6b 65 79 70 61 69 | uires.the.generation.of.a.keypai |
11e060 | 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 20 | r,.which.includes.a.private.key. |
11e080 | 74 6f 20 64 65 63 72 79 70 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 2c 20 61 6e 64 | to.decrypt.incoming.traffic,.and |
11e0a0 | 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 70 65 65 72 28 73 29 20 74 6f 20 65 6e 63 | .a.public.key.for.peer(s).to.enc |
11e0c0 | 72 79 70 74 20 74 72 61 66 66 69 63 2e 00 57 69 72 65 6c 65 73 73 20 63 68 61 6e 6e 65 6c 20 60 | rypt.traffic..Wireless.channel.` |
11e0e0 | 60 31 60 60 00 57 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 20 74 79 70 65 20 66 6f 72 20 74 68 | `1``.Wireless.device.type.for.th |
11e100 | 69 73 20 69 6e 74 65 72 66 61 63 65 00 57 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 20 64 | is.interface.Wireless.hardware.d |
11e120 | 65 76 69 63 65 20 75 73 65 64 20 61 73 20 75 6e 64 65 72 6c 61 79 20 72 61 64 69 6f 2e 00 57 69 | evice.used.as.underlay.radio..Wi |
11e140 | 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 00 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 20 | reless.options.Wireless.options. |
11e160 | 28 53 74 61 74 69 6f 6e 2f 43 6c 69 65 6e 74 29 00 57 69 72 65 6c 65 73 73 4d 6f 64 65 6d 20 28 | (Station/Client).WirelessModem.( |
11e180 | 57 57 41 4e 29 20 6f 70 74 69 6f 6e 73 00 57 69 74 68 20 56 79 4f 53 20 62 65 69 6e 67 20 62 61 | WWAN).options.With.VyOS.being.ba |
11e1a0 | 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 69 6e 75 78 20 61 6e 64 20 69 74 73 20 6b 65 72 6e | sed.on.top.of.Linux.and.its.kern |
11e1c0 | 65 6c 2c 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 | el,.the.Netfilter.project.create |
11e1e0 | 64 20 74 68 65 20 69 70 74 61 62 6c 65 73 20 61 6e 64 20 6e 6f 77 20 74 68 65 20 73 75 63 63 65 | d.the.iptables.and.now.the.succe |
11e200 | 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e | ssor.nftables.for.the.Linux.kern |
11e220 | 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 61 20 | el.to.work.directly.on.the.data. |
11e240 | 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 | flows..This.now.extends.the.conc |
11e260 | 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c | ept.of.zone-based.security.to.al |
11e280 | 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 | low.for.manipulating.the.data.at |
11e2a0 | 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 | .multiple.stages.once.accepted.b |
11e2c0 | 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 | y.the.network.interface.and.the. |
11e2e0 | 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 | driver.before.being.handed.off.t |
11e300 | 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 20 61 20 77 65 62 20 73 65 | o.the.destination.(e.g..a.web.se |
11e320 | 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 57 69 74 68 20 57 69 | rver.OR.another.device)..With.Wi |
11e340 | 72 65 47 75 61 72 64 2c 20 61 20 52 6f 61 64 20 57 61 72 72 69 6f 72 20 56 50 4e 20 63 6f 6e 66 | reGuard,.a.Road.Warrior.VPN.conf |
11e360 | 69 67 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | ig.is.similar.to.a.site-to-site. |
11e380 | 56 50 4e 2e 20 49 74 20 6a 75 73 74 20 6c 61 63 6b 73 20 74 68 65 20 60 60 61 64 64 72 65 73 73 | VPN..It.just.lacks.the.``address |
11e3a0 | 60 60 20 61 6e 64 20 60 60 70 6f 72 74 60 60 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 57 69 74 68 | ``.and.``port``.statements..With |
11e3c0 | 20 74 68 65 20 60 60 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6f 70 74 69 6f 6e 20 73 65 74 20 | .the.``name-server``.option.set. |
11e3e0 | 74 6f 20 60 60 6e 6f 6e 65 60 60 2c 20 56 79 4f 53 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 | to.``none``,.VyOS.will.ignore.th |
11e400 | 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 79 6f 75 72 20 49 53 50 20 73 65 6e 64 73 20 79 6f 75 | e.nameservers.your.ISP.sends.you |
11e420 | 20 61 6e 64 20 74 68 75 73 20 79 6f 75 20 63 61 6e 20 66 75 6c 6c 79 20 72 65 6c 79 20 6f 6e 20 | .and.thus.you.can.fully.rely.on. |
11e440 | 74 68 65 20 6f 6e 65 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 61 | the.ones.you.have.configured.sta |
11e460 | 74 69 63 61 6c 6c 79 2e 00 57 69 74 68 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 79 6f 75 20 63 | tically..With.the.firewall.you.c |
11e480 | 61 6e 20 73 65 74 20 72 75 6c 65 73 20 74 6f 20 61 63 63 65 70 74 2c 20 64 72 6f 70 20 6f 72 20 | an.set.rules.to.accept,.drop.or. |
11e4a0 | 72 65 6a 65 63 74 20 49 43 4d 50 20 69 6e 2c 20 6f 75 74 20 6f 72 20 6c 6f 63 61 6c 20 74 72 61 | reject.ICMP.in,.out.or.local.tra |
11e4c0 | 66 66 69 63 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 67 65 6e 65 72 | ffic..You.can.also.use.the.gener |
11e4e0 | 61 6c 20 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 63 6f 6d 6d 61 6e 64 | al.**firewall.all-ping**.command |
11e500 | 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c | ..This.command.affects.only.to.L |
11e520 | 4f 43 41 4c 20 28 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 79 6f 75 72 20 | OCAL.(packets.destined.for.your. |
11e540 | 56 79 4f 53 20 73 79 73 74 65 6d 29 2c 20 6e 6f 74 20 74 6f 20 49 4e 20 6f 72 20 4f 55 54 20 74 | VyOS.system),.not.to.IN.or.OUT.t |
11e560 | 72 61 66 66 69 63 2e 00 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 63 | raffic..With.this.command,.you.c |
11e580 | 61 6e 20 73 70 65 63 69 66 79 20 68 6f 77 20 74 68 65 20 55 52 4c 20 70 61 74 68 20 73 68 6f 75 | an.specify.how.the.URL.path.shou |
11e5a0 | 6c 64 20 62 65 20 6d 61 74 63 68 65 64 20 61 67 61 69 6e 73 74 20 69 6e 63 6f 6d 69 6e 67 20 72 | ld.be.matched.against.incoming.r |
11e5c0 | 65 71 75 65 73 74 73 2e 00 57 69 74 68 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c | equests..With.zone-based.firewal |
11e5e0 | 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 | ls.a.new.concept.was.implemented |
11e600 | 2c 20 69 6e 20 61 64 64 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 69 6e 20 | ,.in.addtion.to.the.standard.in. |
11e620 | 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 66 | and.out.traffic.flows,.a.local.f |
11e640 | 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 6f | low.was.added..This.local.was.fo |
11e660 | 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 61 6e 64 20 64 65 73 74 69 6e | r.traffic.originating.and.destin |
11e680 | 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 57 68 69 63 68 20 6d | ed.to.the.router.itself..Which.m |
11e6a0 | 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 77 65 72 65 20 72 65 71 75 69 | eans.additional.rules.were.requi |
11e6c0 | 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 69 74 73 65 6c | red.to.secure.the.firewall.itsel |
11e6e0 | 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 | f.from.the.network,.in.addition. |
11e700 | 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 | to.the.existing.inbound.and.outb |
11e720 | 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 | ound.rules.from.the.traditional. |
11e740 | 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 59 00 59 6f 75 20 61 70 70 6c 79 20 61 20 72 75 6c | concept.above..Y.You.apply.a.rul |
11e760 | 65 2d 73 65 74 20 61 6c 77 61 79 73 20 74 6f 20 61 20 7a 6f 6e 65 20 66 72 6f 6d 20 61 6e 20 6f | e-set.always.to.a.zone.from.an.o |
11e780 | 74 68 65 72 20 7a 6f 6e 65 2c 20 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 | ther.zone,.it.is.recommended.to. |
11e7a0 | 63 72 65 61 74 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 20 66 6f 72 20 65 61 63 68 20 7a 6f 6e | create.one.rule-set.for.each.zon |
11e7c0 | 65 20 70 61 69 72 2e 00 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 73 65 74 20 70 6f 73 74 | e.pair..You.are.able.to.set.post |
11e7e0 | 2d 6c 6f 67 69 6e 20 6f 72 20 70 72 65 2d 6c 6f 67 69 6e 20 62 61 6e 6e 65 72 20 6d 65 73 73 61 | -login.or.pre-login.banner.messa |
11e800 | 67 65 73 20 74 6f 20 64 69 73 70 6c 61 79 20 63 65 72 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 | ges.to.display.certain.informati |
11e820 | 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 79 73 74 65 6d 2e 00 59 6f 75 20 61 72 65 20 62 65 20 61 | on.for.this.system..You.are.be.a |
11e840 | 62 6c 65 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 65 20 66 69 6c 65 73 20 75 73 69 6e 67 20 | ble.to.download.the.files.using. |
11e860 | 53 43 50 2c 20 6f 6e 63 65 20 74 68 65 20 53 53 48 20 73 65 72 76 69 63 65 20 68 61 73 20 62 65 | SCP,.once.the.SSH.service.has.be |
11e880 | 65 6e 20 61 63 74 69 76 61 74 65 64 20 6c 69 6b 65 20 73 6f 00 59 6f 75 20 63 61 6e 20 61 6c 73 | en.activated.like.so.You.can.als |
11e8a0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f | o.configure.the.time.interval.fo |
11e8c0 | 72 20 70 72 65 65 6d 70 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 22 70 72 65 65 6d 70 74 2d 64 | r.preemption.with.the."preempt-d |
11e8e0 | 65 6c 61 79 22 20 6f 70 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 73 65 | elay".option..For.example,.to.se |
11e900 | 74 20 74 68 65 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 72 6f 75 74 65 72 20 74 6f 20 | t.the.higher.priority.router.to. |
11e920 | 74 61 6b 65 20 6f 76 65 72 20 69 6e 20 31 38 30 20 73 65 63 6f 6e 64 73 2c 20 75 73 65 3a 00 59 | take.over.in.180.seconds,.use:.Y |
11e940 | 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 66 69 6e 65 20 63 75 73 74 6f 6d 20 74 69 6d 65 6f 75 | ou.can.also.define.custom.timeou |
11e960 | 74 20 76 61 6c 75 65 73 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 | t.values.to.apply.to.a.specific. |
11e980 | 73 75 62 73 65 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 61 73 65 64 20 6f 6e 20 | subset.of.connections,.based.on. |
11e9a0 | 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 20 54 6f 20 64 | a.packet.and.flow.selector..To.d |
11e9c0 | 6f 20 74 68 69 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 75 6c | o.this,.you.need.to.create.a.rul |
11e9e0 | 65 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 | e.defining.the.packet.and.flow.s |
11ea00 | 65 6c 65 63 74 6f 72 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 6b 65 65 70 20 64 69 66 66 65 | elector..You.can.also.keep.diffe |
11ea20 | 72 65 6e 74 20 44 4e 53 20 7a 6f 6e 65 20 75 70 64 61 74 65 64 2e 20 4a 75 73 74 20 63 72 65 61 | rent.DNS.zone.updated..Just.crea |
11ea40 | 74 65 20 61 20 6e 65 77 20 63 6f 6e 66 69 67 20 6e 6f 64 65 3a 20 60 60 73 65 74 20 73 65 72 76 | te.a.new.config.node:.``set.serv |
11ea60 | 69 63 65 20 64 6e 73 20 64 79 6e 61 6d 69 63 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 | ice.dns.dynamic.interface.<inter |
11ea80 | 66 61 63 65 3e 20 72 66 63 32 31 33 36 20 3c 6f 74 68 65 72 2d 73 65 72 76 69 63 65 2d 6e 61 6d | face>.rfc2136.<other-service-nam |
11eaa0 | 65 3e 60 60 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 6f 70 74 20 66 6f 72 20 75 73 69 6e 67 20 | e>``.You.can.also.opt.for.using. |
11eac0 | 60 3a 3a 2f 36 34 60 20 61 73 20 70 72 65 66 69 78 20 66 6f 72 20 79 6f 75 72 20 3a 61 62 62 72 | `::/64`.as.prefix.for.your.:abbr |
11eae0 | 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 2e 20 | :`RAs.(Router.Advertisements)`.. |
11eb00 | 54 68 69 73 20 77 69 6c 6c 20 74 61 6b 65 20 74 68 65 20 49 50 76 36 20 47 55 41 20 70 72 65 66 | This.will.take.the.IPv6.GUA.pref |
11eb20 | 69 78 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2c 20 77 68 | ix.assigned.to.the.interface,.wh |
11eb40 | 69 63 68 20 63 6f 6d 65 73 20 69 6e 20 68 61 6e 64 79 20 77 68 65 6e 20 75 73 69 6e 67 20 44 48 | ich.comes.in.handy.when.using.DH |
11eb60 | 43 50 76 36 2d 50 44 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 73 70 65 63 69 66 79 20 77 68 | CPv6-PD..You.can.also.specify.wh |
11eb80 | 69 63 68 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 | ich.IPv6.access-list.should.be.s |
11eba0 | 68 6f 77 6e 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 74 75 6e 65 20 6d 75 6c 74 69 63 61 73 | hown:.You.can.also.tune.multicas |
11ebc0 | 74 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 59 | t.with.the.following.commands..Y |
11ebe0 | 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 61 6e 6f 74 68 65 72 20 61 74 74 72 69 62 75 74 | ou.can.also.use.another.attribut |
11ec00 | 65 73 20 66 6f 72 20 69 64 65 6e 74 69 66 79 20 63 6c 69 65 6e 74 20 66 6f 72 20 64 69 73 63 6f | es.for.identify.client.for.disco |
11ec20 | 6e 6e 65 63 74 2c 20 6c 69 6b 65 20 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2c 20 41 | nnect,.like.Framed-IP-Address,.A |
11ec40 | 63 63 74 2d 53 65 73 73 69 6f 6e 2d 49 64 2c 20 65 74 63 2e 20 52 65 73 75 6c 74 20 63 6f 6d 6d | cct-Session-Id,.etc..Result.comm |
11ec60 | 61 6e 64 73 20 61 70 70 65 61 72 73 20 69 6e 20 6c 6f 67 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 | ands.appears.in.log..You.can.als |
11ec80 | 6f 20 77 72 69 74 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 61 20 66 69 6c 74 | o.write.a.description.for.a.filt |
11eca0 | 65 72 3a 00 59 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 6d 75 6c 74 69 70 6c 65 20 6b 65 79 73 | er:.You.can.assign.multiple.keys |
11ecc0 | 20 74 6f 20 74 68 65 20 73 61 6d 65 20 75 73 65 72 20 62 79 20 75 73 69 6e 67 20 61 20 75 6e 69 | .to.the.same.user.by.using.a.uni |
11ece0 | 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 70 65 72 20 53 53 48 20 6b 65 79 2e 00 59 6f 75 20 | que.identifier.per.SSH.key..You. |
11ed00 | 63 61 6e 20 61 76 6f 69 64 20 74 68 65 20 22 6c 65 61 6b 79 22 20 62 65 68 61 76 69 6f 72 20 62 | can.avoid.the."leaky".behavior.b |
11ed20 | 79 20 75 73 69 6e 67 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 74 68 61 74 20 64 | y.using.a.firewall.policy.that.d |
11ed40 | 72 6f 70 73 20 22 69 6e 76 61 6c 69 64 22 20 73 74 61 74 65 20 70 61 63 6b 65 74 73 2e 00 59 6f | rops."invalid".state.packets..Yo |
11ed60 | 75 20 63 61 6e 20 63 68 65 63 6b 20 79 6f 75 72 20 4e 49 43 20 64 72 69 76 65 72 20 62 79 20 69 | u.can.check.your.NIC.driver.by.i |
11ed80 | 73 73 75 69 6e 67 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 65 | ssuing.:opcmd:`show.interfaces.e |
11eda0 | 74 68 65 72 6e 65 74 20 65 74 68 30 20 70 68 79 73 69 63 61 6c 20 7c 20 67 72 65 70 20 2d 69 20 | thernet.eth0.physical.|.grep.-i. |
11edc0 | 64 72 69 76 65 72 60 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 20 70 6f 6c 69 | driver`.You.can.configure.a.poli |
11ede0 | 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 | cy.into.a.class.through.the.``qu |
11ee00 | 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 | eue-type``.setting..You.can.conf |
11ee20 | 69 67 75 72 65 20 63 6c 61 73 73 65 73 20 28 75 70 20 74 6f 20 34 30 39 30 29 20 77 69 74 68 20 | igure.classes.(up.to.4090).with. |
11ee40 | 64 69 66 66 65 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 61 6e 64 20 61 20 64 65 66 61 75 6c 74 | different.settings.and.a.default |
11ee60 | 20 70 6f 6c 69 63 79 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f | .policy.which.will.be.applied.to |
11ee80 | 20 61 6e 79 20 74 72 61 66 66 69 63 20 6e 6f 74 20 6d 61 74 63 68 69 6e 67 20 61 6e 79 20 6f 66 | .any.traffic.not.matching.any.of |
11eea0 | 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6c 61 73 73 65 73 2e 00 59 6f 75 20 63 61 6e | .the.configured.classes..You.can |
11eec0 | 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 | .configure.multiple.interfaces.w |
11eee0 | 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 66 6c 6f 77 20 | hich.whould.participate.in.flow. |
11ef00 | 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 | accounting..You.can.configure.mu |
11ef20 | 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 | ltiple.interfaces.which.whould.p |
11ef40 | 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 73 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 | articipate.in.sflow.accounting.. |
11ef60 | 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 69 6e 74 | You.can.create.multiple.VLAN.int |
11ef80 | 65 72 66 61 63 65 73 20 6f 6e 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e | erfaces.on.a.physical.interface. |
11efa0 | 20 54 68 65 20 56 4c 41 4e 20 49 44 20 72 61 6e 67 65 20 69 73 20 66 72 6f 6d 20 30 20 74 6f 20 | .The.VLAN.ID.range.is.from.0.to. |
11efc0 | 34 30 39 34 2e 00 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 61 20 56 52 52 50 20 67 72 6f | 4094..You.can.disable.a.VRRP.gro |
11efe0 | 75 70 20 77 69 74 68 20 60 60 64 69 73 61 62 6c 65 60 60 20 6f 70 74 69 6f 6e 3a 00 59 6f 75 20 | up.with.``disable``.option:.You. |
11f000 | 63 61 6e 20 67 65 74 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 4f 53 50 46 76 33 20 69 6e 66 | can.get.more.specific.OSPFv3.inf |
11f020 | 6f 72 6d 61 74 69 6f 6e 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 | ormation.by.using.the.parameters |
11f040 | 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 59 6f 75 20 63 61 6e 20 6e 6f 74 20 61 73 73 69 67 6e | .shown.below:.You.can.not.assign |
11f060 | 20 74 68 65 20 73 61 6d 65 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 73 74 61 74 65 6d 65 6e 74 20 | .the.same.allowed-ips.statement. |
11f080 | 74 6f 20 6d 75 6c 74 69 70 6c 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 73 2e 20 54 68 69 | to.multiple.WireGuard.peers..Thi |
11f0a0 | 73 20 61 20 64 65 73 69 67 6e 20 64 65 63 69 73 69 6f 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e | s.a.design.decision..For.more.in |
11f0c0 | 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 20 60 57 69 72 65 | formation.please.check.the.`Wire |
11f0e0 | 47 75 61 72 64 20 6d 61 69 6c 69 6e 67 20 6c 69 73 74 60 5f 2e 00 59 6f 75 20 63 61 6e 20 6e 6f | Guard.mailing.list`_..You.can.no |
11f100 | 74 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 56 52 52 50 20 73 65 74 75 70 2c 20 69 66 20 6d | t.run.this.in.a.VRRP.setup,.if.m |
11f120 | 75 6c 74 69 70 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 73 20 61 72 65 20 6c 61 75 6e 63 | ultiple.mDNS.repeaters.are.launc |
11f140 | 68 65 64 20 69 6e 20 61 20 73 75 62 6e 65 74 20 79 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 | hed.in.a.subnet.you.will.experie |
11f160 | 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 61 63 6b 65 74 20 73 74 6f 72 6d 20 64 65 61 74 68 21 | nce.the.mDNS.packet.storm.death! |
11f180 | 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 22 64 69 61 6c 22 20 74 68 65 20 70 65 65 72 20 77 69 74 | .You.can.now."dial".the.peer.wit |
11f1a0 | 68 20 74 68 65 20 66 6f 6c 6c 77 6f 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 73 74 70 63 | h.the.follwoing.command:.``sstpc |
11f1c0 | 20 2d 2d 6c 6f 67 2d 6c 65 76 65 6c 20 34 20 2d 2d 6c 6f 67 2d 73 74 64 65 72 72 20 2d 2d 75 73 | .--log-level.4.--log-stderr.--us |
11f1e0 | 65 72 20 76 79 6f 73 20 2d 2d 70 61 73 73 77 6f 72 64 20 76 79 6f 73 20 76 70 6e 2e 65 78 61 6d | er.vyos.--password.vyos.vpn.exam |
11f200 | 70 6c 65 2e 63 6f 6d 20 2d 2d 20 63 61 6c 6c 20 76 79 6f 73 60 60 2e 00 59 6f 75 20 63 61 6e 20 | ple.com.--.call.vyos``..You.can. |
11f220 | 6e 6f 77 20 53 53 48 20 69 6e 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 20 75 73 69 6e 67 20 61 | now.SSH.into.your.system.using.a |
11f240 | 64 6d 69 6e 2f 61 64 6d 69 6e 20 61 73 20 61 20 64 65 66 61 75 6c 74 20 75 73 65 72 20 73 75 70 | dmin/admin.as.a.default.user.sup |
11f260 | 70 6c 69 65 64 20 66 72 6f 6d 20 74 68 65 20 60 60 6c 66 6b 65 69 74 65 6c 2f 74 61 63 61 63 73 | plied.from.the.``lfkeitel/tacacs |
11f280 | 5f 70 6c 75 73 3a 6c 61 74 65 73 74 60 60 20 63 6f 6e 74 61 69 6e 65 72 2e 00 59 6f 75 20 63 61 | _plus:latest``.container..You.ca |
11f2a0 | 6e 20 6f 6e 6c 79 20 61 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 | n.only.apply.one.policy.per.inte |
11f2c0 | 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 2c 20 62 75 74 20 79 6f 75 20 63 6f 75 | rface.and.direction,.but.you.cou |
11f2e0 | 6c 64 20 72 65 75 73 65 20 61 20 70 6f 6c 69 63 79 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 | ld.reuse.a.policy.on.different.i |
11f300 | 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 73 3a 00 59 6f 75 20 63 61 | nterfaces.and.directions:.You.ca |
11f320 | 6e 20 72 75 6e 20 74 68 65 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 73 65 | n.run.the.UDP.broadcast.relay.se |
11f340 | 72 76 69 63 65 20 6f 6e 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 | rvice.on.multiple.routers.connec |
11f360 | 74 65 64 20 74 6f 20 61 20 73 75 62 6e 65 74 2e 20 54 68 65 72 65 20 69 73 20 2a 2a 4e 4f 2a 2a | ted.to.a.subnet..There.is.**NO** |
11f380 | 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 70 61 63 6b 65 74 20 73 74 6f 72 | .UDP.broadcast.relay.packet.stor |
11f3a0 | 6d 21 00 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 73 74 61 74 69 63 20 44 48 43 50 | m!.You.can.specify.a.static.DHCP |
11f3c0 | 20 61 73 73 69 67 6e 6d 65 6e 74 20 6f 6e 20 61 20 70 65 72 20 68 6f 73 74 20 62 61 73 69 73 2e | .assignment.on.a.per.host.basis. |
11f3e0 | 20 59 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f | .You.will.need.the.MAC.address.o |
11f400 | 66 20 74 68 65 20 73 74 61 74 69 6f 6e 20 61 6e 64 20 79 6f 75 72 20 64 65 73 69 72 65 64 20 49 | f.the.station.and.your.desired.I |
11f420 | 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 | P.address..The.address.must.be.i |
11f440 | 6e 73 69 64 65 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 66 69 6e 69 74 69 6f 6e 20 62 75 74 20 | nside.the.subnet.definition.but. |
11f460 | 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 72 61 6e 67 65 20 73 74 61 74 | can.be.outside.of.the.range.stat |
11f480 | 65 6d 65 6e 74 2e 00 59 6f 75 20 63 61 6e 20 74 65 73 74 20 74 68 65 20 53 4e 4d 50 76 33 20 66 | ement..You.can.test.the.SNMPv3.f |
11f4a0 | 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 66 72 6f 6d 20 61 6e 79 20 6c 69 6e 75 78 20 62 61 73 65 | unctionality.from.any.linux.base |
11f4c0 | 64 20 73 79 73 74 65 6d 2c 20 6a 75 73 74 20 72 75 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | d.system,.just.run.the.following |
11f4e0 | 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 6e 6d 70 77 61 6c 6b 20 2d 76 20 33 20 2d 75 20 76 79 6f | .command:.``snmpwalk.-v.3.-u.vyo |
11f500 | 73 20 2d 61 20 53 48 41 20 2d 41 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 78 20 41 45 53 20 | s.-a.SHA.-A.vyos12345678.-x.AES. |
11f520 | 2d 58 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 6c 20 61 75 74 68 50 72 69 76 20 31 39 32 2e | -X.vyos12345678.-l.authPriv.192. |
11f540 | 30 2e 32 2e 31 20 2e 31 60 60 00 59 6f 75 20 63 61 6e 20 75 73 65 20 77 69 6c 64 63 61 72 64 20 | 0.2.1..1``.You.can.use.wildcard. |
11f560 | 60 60 2a 60 60 20 74 6f 20 6d 61 74 63 68 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 | ``*``.to.match.a.group.of.interf |
11f580 | 61 63 65 73 2e 00 59 6f 75 20 63 61 6e 20 76 65 72 69 66 79 20 79 6f 75 72 20 56 52 52 50 20 67 | aces..You.can.verify.your.VRRP.g |
11f5a0 | 72 6f 75 70 20 73 74 61 74 75 73 20 77 69 74 68 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c | roup.status.with.the.operational |
11f5c0 | 20 6d 6f 64 65 20 60 60 72 75 6e 20 73 68 6f 77 20 76 72 72 70 60 60 20 63 6f 6d 6d 61 6e 64 3a | .mode.``run.show.vrrp``.command: |
11f5e0 | 00 59 6f 75 20 63 61 6e 20 76 69 65 77 20 74 68 61 74 20 74 68 65 20 70 6f 6c 69 63 79 20 69 73 | .You.can.view.that.the.policy.is |
11f600 | 20 62 65 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 28 6f 72 20 69 6e 63 6f 72 72 65 63 74 6c 79 | .being.correctly.(or.incorrectly |
11f620 | 29 20 75 74 69 6c 69 73 65 64 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | ).utilised.with.the.following.co |
11f640 | 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 6e 6f 74 20 65 61 73 69 6c 79 20 72 65 64 69 73 74 72 | mmand:.You.cannot.easily.redistr |
11f660 | 69 62 75 74 65 20 49 50 76 36 20 72 6f 75 74 65 73 20 76 69 61 20 4f 53 50 46 76 33 20 6f 6e 20 | ibute.IPv6.routes.via.OSPFv3.on. |
11f680 | 61 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 6c 69 6e 6b 2e 20 54 68 69 73 | a.WireGuard.interface.link..This |
11f6a0 | 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6c 69 6e 6b 2d | .requires.you.to.configure.link- |
11f6c0 | 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 6d 61 6e 75 61 6c 6c 79 20 6f 6e 20 74 68 65 20 | local.addresses.manually.on.the. |
11f6e0 | 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 73 65 65 20 3a 76 79 74 61 73 | WireGuard.interfaces,.see.:vytas |
11f700 | 6b 3a 60 54 31 34 38 33 60 2e 00 59 6f 75 20 64 6f 20 2a 2a 6e 6f 74 2a 2a 20 6e 65 65 64 20 74 | k:`T1483`..You.do.**not**.need.t |
11f720 | 6f 20 63 6f 70 79 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 6f 74 | o.copy.the.certificate.to.the.ot |
11f740 | 68 65 72 20 72 6f 75 74 65 72 2e 20 49 6e 73 74 65 61 64 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f | her.router..Instead,.you.need.to |
11f760 | 20 72 65 74 72 69 65 76 65 20 69 74 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e | .retrieve.its.SHA-256.fingerprin |
11f780 | 74 2e 20 4f 70 65 6e 56 50 4e 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 53 48 41 2d 32 35 36 | t..OpenVPN.only.supports.SHA-256 |
11f7a0 | 20 66 69 6e 67 65 72 70 72 69 6e 74 73 20 61 74 20 74 68 65 20 6d 6f 6d 65 6e 74 2c 20 73 6f 20 | .fingerprints.at.the.moment,.so. |
11f7c0 | 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | you.need.to.use.the.following.co |
11f7e0 | 6d 6d 61 6e 64 3a 00 59 6f 75 20 6d 61 79 20 61 6c 73 6f 20 61 64 64 69 74 69 6f 6e 61 6c 6c 79 | mmand:.You.may.also.additionally |
11f800 | 20 63 6f 6e 66 69 67 75 72 65 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 20 64 69 66 66 65 72 65 6e | .configure.timeouts.for.differen |
11f820 | 74 20 74 79 70 65 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 59 6f 75 20 6d 61 79 20 | t.types.of.connections..You.may. |
11f840 | 70 72 65 66 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 69 | prefer.locally.configured.capabi |
11f860 | 6c 69 74 69 65 73 20 6d 6f 72 65 20 74 68 61 6e 20 74 68 65 20 6e 65 67 6f 74 69 61 74 65 64 20 | lities.more.than.the.negotiated. |
11f880 | 63 61 70 61 62 69 6c 69 74 69 65 73 20 65 76 65 6e 20 74 68 6f 75 67 68 20 72 65 6d 6f 74 65 20 | capabilities.even.though.remote. |
11f8a0 | 70 65 65 72 20 73 65 6e 64 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 74 68 65 20 | peer.sends.capabilities..If.the. |
11f8c0 | 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 6f | peer.is.configured.by.:cfgcmd:`o |
11f8e0 | 76 65 72 72 69 64 65 2d 63 61 70 61 62 69 6c 69 74 79 60 2c 20 56 79 4f 53 20 69 67 6e 6f 72 65 | verride-capability`,.VyOS.ignore |
11f900 | 73 20 72 65 63 65 69 76 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 68 65 6e 20 6f 76 65 | s.received.capabilities.then.ove |
11f920 | 72 72 69 64 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 77 69 | rride.negotiated.capabilities.wi |
11f940 | 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 65 73 2e 00 59 6f 75 20 6d 61 79 20 77 61 | th.configured.values..You.may.wa |
11f960 | 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 | nt.to.disable.sending.Capability |
11f980 | 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 4f 50 45 4e 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e | .Negotiation.OPEN.message.option |
11f9a0 | 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 72 20 77 68 65 6e 20 72 65 | al.parameter.to.the.peer.when.re |
11f9c0 | 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 43 61 70 | mote.peer.does.not.implement.Cap |
11f9e0 | 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 | ability.Negotiation..Please.use. |
11fa00 | 3a 63 66 67 63 6d 64 3a 60 64 69 73 61 62 6c 65 2d 63 61 70 61 62 69 6c 69 74 79 2d 6e 65 67 6f | :cfgcmd:`disable-capability-nego |
11fa20 | 74 69 61 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 | tiation`.command.to.disable.the. |
11fa40 | 66 65 61 74 75 72 65 2e 00 59 6f 75 20 6e 65 65 64 20 32 20 73 65 70 61 72 61 74 65 20 66 69 72 | feature..You.need.2.separate.fir |
11fa60 | 65 77 61 6c 6c 73 20 74 6f 20 64 65 66 69 6e 65 20 74 72 61 66 66 69 63 3a 20 6f 6e 65 20 66 6f | ewalls.to.define.traffic:.one.fo |
11fa80 | 72 20 65 61 63 68 20 64 69 72 65 63 74 69 6f 6e 2e 00 59 6f 75 20 6e 65 65 64 20 74 6f 20 64 69 | r.each.direction..You.need.to.di |
11faa0 | 73 61 62 6c 65 20 74 68 65 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 69 6e 20 70 72 6f | sable.the.in-memory.table.in.pro |
11fac0 | 64 75 63 74 69 6f 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 21 20 55 73 69 6e 67 20 3a 61 62 62 | duction.environments!.Using.:abb |
11fae0 | 72 3a 60 49 4d 54 20 28 49 6e 2d 4d 65 6d 6f 72 79 20 54 61 62 6c 65 29 60 20 6d 61 79 20 6c 65 | r:`IMT.(In-Memory.Table)`.may.le |
11fb00 | 61 64 20 74 6f 20 68 65 61 76 79 20 43 50 55 20 6f 76 65 72 6c 6f 61 64 69 6e 67 20 61 6e 64 20 | ad.to.heavy.CPU.overloading.and. |
11fb20 | 75 6e 73 74 61 62 6c 65 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 62 65 68 61 76 69 6f | unstable.flow-accounting.behavio |
11fb40 | 72 2e 00 59 6f 75 20 6e 65 65 64 20 79 6f 75 72 20 50 50 50 6f 45 20 63 72 65 64 65 6e 74 69 61 | r..You.need.your.PPPoE.credentia |
11fb60 | 6c 73 20 66 72 6f 6d 20 79 6f 75 72 20 44 53 4c 20 49 53 50 20 69 6e 20 6f 72 64 65 72 20 74 6f | ls.from.your.DSL.ISP.in.order.to |
11fb80 | 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 2e 20 54 68 65 20 75 73 75 61 6c 20 75 73 65 72 6e | .configure.this..The.usual.usern |
11fba0 | 61 6d 65 20 69 73 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 6e 61 6d 65 40 68 6f 73 74 2e | ame.is.in.the.form.of.name@host. |
11fbc0 | 6e 65 74 20 62 75 74 20 6d 61 79 20 76 61 72 79 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 49 53 | net.but.may.vary.depending.on.IS |
11fbe0 | 50 2e 00 59 6f 75 20 6e 6f 77 20 73 65 65 20 74 68 65 20 6c 6f 6e 67 65 72 20 41 53 20 70 61 74 | P..You.now.see.the.longer.AS.pat |
11fc00 | 68 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 64 64 20 61 20 66 69 72 65 77 61 6c 6c 20 74 6f 20 | h..You.should.add.a.firewall.to. |
11fc20 | 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 20 61 73 20 77 65 6c 6c | your.configuration.above.as.well |
11fc40 | 20 62 79 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 6f 20 74 68 65 20 70 70 70 6f 65 30 20 69 | .by.assigning.it.to.the.pppoe0.i |
11fc60 | 74 73 65 6c 66 20 61 73 20 73 68 6f 77 6e 20 68 65 72 65 3a 00 59 6f 75 20 73 68 6f 75 6c 64 20 | tself.as.shown.here:.You.should. |
11fc80 | 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 49 53 44 45 5f 4c 4f 43 | also.ensure.that.the.OUTISDE_LOC |
11fca0 | 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 | AL.firewall.group.is.applied.to. |
11fcc0 | 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f | the.WAN.interface.and.a.directio |
11fce0 | 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 | n.(local)..You.should.also.ensur |
11fd00 | 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 53 49 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c | e.that.the.OUTSIDE_LOCAL.firewal |
11fd20 | 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e | l.group.is.applied.to.the.WAN.in |
11fd40 | 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e | terface.and.a.direction.(local). |
11fd60 | 00 59 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 6e 65 65 64 20 74 68 65 20 70 75 62 6c 69 63 20 6b | .You.will.also.need.the.public.k |
11fd80 | 65 79 20 6f 66 20 79 6f 75 72 20 70 65 65 72 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 6e | ey.of.your.peer.as.well.as.the.n |
11fda0 | 65 74 77 6f 72 6b 28 73 29 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 75 6e 6e 65 6c 20 28 61 6c | etwork(s).you.want.to.tunnel.(al |
11fdc0 | 6c 6f 77 65 64 2d 69 70 73 29 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 57 69 72 65 47 75 | lowed-ips).to.configure.a.WireGu |
11fde0 | 61 72 64 20 74 75 6e 6e 65 6c 2e 20 54 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 62 65 6c 6f 77 | ard.tunnel..The.public.key.below |
11fe00 | 20 69 73 20 61 6c 77 61 79 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 79 | .is.always.the.public.key.from.y |
11fe20 | 6f 75 72 20 70 65 65 72 2c 20 6e 6f 74 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6f 6e 65 2e 00 59 6f | our.peer,.not.your.local.one..Yo |
11fe40 | 75 72 20 49 53 50 73 20 6d 6f 64 65 6d 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 70 6f | ur.ISPs.modem.is.connected.to.po |
11fe60 | 72 74 20 60 60 65 74 68 30 60 60 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 62 6f 78 2e 00 59 6f | rt.``eth0``.of.your.VyOS.box..Yo |
11fe80 | 75 72 20 4c 41 4e 20 63 6f 6e 6e 65 63 74 65 64 20 6f 6e 20 65 74 68 30 20 75 73 65 73 20 70 72 | ur.LAN.connected.on.eth0.uses.pr |
11fea0 | 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a 3a 2f 36 34 60 60 20 77 69 | efix.``2001:db8:beef:2::/64``.wi |
11fec0 | 74 68 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 65 69 6e 67 20 60 60 32 30 30 31 3a 64 62 38 3a | th.the.router.beeing.``2001:db8: |
11fee0 | 62 65 65 66 3a 32 3a 3a 31 60 60 00 5a 65 62 72 61 20 73 75 70 70 6f 72 74 73 20 70 72 65 66 69 | beef:2::1``.Zebra.supports.prefi |
11ff00 | 78 2d 6c 69 73 74 73 20 61 6e 64 20 52 6f 75 74 65 20 4d 61 70 73 73 20 74 6f 20 6d 61 74 63 68 | x-lists.and.Route.Mapss.to.match |
11ff20 | 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 72 20 46 52 52 20 | .routes.received.from.other.FRR. |
11ff40 | 63 6f 6d 70 6f 6e 65 6e 74 73 2e 20 54 68 65 20 70 65 72 6d 69 74 2f 64 65 6e 79 20 66 61 63 69 | components..The.permit/deny.faci |
11ff60 | 6c 69 74 69 65 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 | lities.provided.by.these.command |
11ff80 | 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 77 68 69 63 68 20 72 6f | s.can.be.used.to.filter.which.ro |
11ffa0 | 75 74 65 73 20 7a 65 62 72 61 20 77 69 6c 6c 20 69 6e 73 74 61 6c 6c 20 69 6e 20 74 68 65 20 6b | utes.zebra.will.install.in.the.k |
11ffc0 | 65 72 6e 65 6c 2e 00 5a 65 62 72 61 2f 4b 65 72 6e 65 6c 20 72 6f 75 74 65 20 66 69 6c 74 65 72 | ernel..Zebra/Kernel.route.filter |
11ffe0 | 69 6e 67 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c 00 5a 6f 6e 65 20 42 61 73 | ing.Zone.Based.Firewall.Zone.Bas |
120000 | 65 64 20 46 69 72 65 77 61 6c 6c 20 28 44 65 70 72 65 63 61 74 65 64 29 00 5a 6f 6e 65 2d 50 6f | ed.Firewall.(Deprecated).Zone-Po |
120020 | 6c 69 63 79 20 4f 76 65 72 76 69 65 77 00 5a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c | licy.Overview.Zone-based.firewal |
120040 | 6c 00 5b 41 2e 42 2e 43 2e 44 5d 20 e2 80 93 20 6c 69 6e 6b 2d 73 74 61 74 65 2d 69 64 2e 20 57 | l.[A.B.C.D].....link-state-id..W |
120060 | 69 74 68 20 74 68 69 73 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 64 | ith.this.specified.the.command.d |
120080 | 69 73 70 6c 61 79 73 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 65 | isplays.portion.of.the.network.e |
1200a0 | 6e 76 69 72 6f 6e 6d 65 6e 74 20 74 68 61 74 20 69 73 20 62 65 69 6e 67 20 64 65 73 63 72 69 62 | nvironment.that.is.being.describ |
1200c0 | 65 64 20 62 79 20 74 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2e 20 54 68 65 20 76 61 6c | ed.by.the.advertisement..The.val |
1200e0 | 75 65 20 65 6e 74 65 72 65 64 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 61 64 76 65 72 74 | ue.entered.depends.on.the.advert |
120100 | 69 73 65 6d 65 6e 74 e2 80 99 73 20 4c 53 20 74 79 70 65 2e 20 49 74 20 6d 75 73 74 20 62 65 20 | isement...s.LS.type..It.must.be. |
120120 | 65 6e 74 65 72 65 64 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 61 6e 20 49 50 20 61 64 64 | entered.in.the.form.of.an.IP.add |
120140 | 72 65 73 73 2e 00 60 31 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 | ress..`1..Create.an.event.handle |
120160 | 72 60 5f 00 60 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 | r`_.`2..Add.regex.to.the.script` |
120180 | 5f 00 60 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 | _.`3..Add.a.full.path.to.the.scr |
1201a0 | 69 70 74 60 5f 00 60 34 2e 20 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 | ipt`_.`4..Add.optional.parameter |
1201c0 | 73 60 5f 00 60 3c 6e 61 6d 65 3e 60 20 6d 75 73 74 20 62 65 20 69 64 65 6e 74 69 63 61 6c 20 6f | s`_.`<name>`.must.be.identical.o |
1201e0 | 6e 20 62 6f 74 68 20 73 69 64 65 73 21 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e | n.both.sides!.``$.tail.-n.+2.ca. |
120200 | 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 | key.|.head.-n.-1.|.tr.-d.'\n'``. |
120220 | 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 | ``$.tail.-n.+2.ca.pem.|.head.-n. |
120240 | 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 | -1.|.tr.-d.'\n'``.``$.tail.-n.+2 |
120260 | 20 63 65 72 74 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 | .cert.key.|.head.-n.-1.|.tr.-d.' |
120280 | 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 70 65 6d 20 7c 20 | \n'``.``$.tail.-n.+2.cert.pem.|. |
1202a0 | 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 2b 60 60 20 | head.-n.-1.|.tr.-d.'\n'``.``+``. |
1202c0 | 73 75 63 63 65 73 73 66 75 6c 00 60 60 2d 60 60 20 66 61 69 6c 65 64 00 60 60 2f 63 6f 6e 66 69 | successful.``-``.failed.``/confi |
1202e0 | 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 6f 73 74 2d 68 6f 6f 6b 73 | g/scripts/dhcp-client/post-hooks |
120300 | 2e 64 2f 60 60 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 | .d/``.``/config/scripts/dhcp-cli |
120320 | 65 6e 74 2f 70 72 65 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 30 2e 70 6f 6f 6c 2e 6e 74 70 2e | ent/pre-hooks.d/``.``0.pool.ntp. |
120340 | 6f 72 67 60 60 00 60 60 30 60 60 20 2d 20 32 30 20 6f 72 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e | org``.``0``.-.20.or.40.MHz.chann |
120360 | 65 6c 20 77 69 64 74 68 20 28 64 65 66 61 75 6c 74 29 00 60 60 30 60 60 3a 20 4e 6f 20 72 65 70 | el.width.(default).``0``:.No.rep |
120380 | 6c 61 79 20 77 69 6e 64 6f 77 2c 20 73 74 72 69 63 74 20 63 68 65 63 6b 00 60 60 31 2d 34 32 39 | lay.window,.strict.check.``1-429 |
1203a0 | 34 39 36 37 32 39 35 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 68 61 | 4967295``:.Number.of.packets.tha |
1203c0 | 74 20 63 6f 75 6c 64 20 62 65 20 6d 69 73 6f 72 64 65 72 65 64 00 60 60 31 2e 70 6f 6f 6c 2e 6e | t.could.be.misordered.``1.pool.n |
1203e0 | 74 70 2e 6f 72 67 60 60 00 60 60 31 31 35 32 30 30 60 60 20 2d 20 31 31 35 2c 32 30 30 20 62 70 | tp.org``.``115200``.-.115,200.bp |
120400 | 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 29 00 60 | s.(default.for.serial.console).` |
120420 | 60 31 32 30 30 60 60 20 2d 20 31 32 30 30 20 62 70 73 00 60 60 31 39 32 2e 31 36 38 2e 32 2e 32 | `1200``.-.1200.bps.``192.168.2.2 |
120440 | 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 4f 53 20 65 74 68 32 20 66 72 | 54``.IP.addreess.on.VyOS.eth2.fr |
120460 | 6f 6d 20 49 53 50 32 00 60 60 31 39 32 30 30 60 60 20 2d 20 31 39 2c 32 30 30 20 62 70 73 00 60 | om.ISP2.``19200``.-.19,200.bps.` |
120480 | 60 31 60 60 20 2d 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 32 2e | `1``.-.80.MHz.channel.width.``2. |
1204a0 | 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 32 30 33 2e 30 2e 31 31 33 2e 32 35 34 60 60 | pool.ntp.org``.``203.0.113.254`` |
1204c0 | 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 4f 53 20 65 74 68 31 20 66 72 6f 6d 20 49 | .IP.addreess.on.VyOS.eth1.from.I |
1204e0 | 53 50 31 00 60 60 32 34 30 30 60 60 20 2d 20 32 34 30 30 20 62 70 73 00 60 60 32 60 60 20 2d 20 | SP1.``2400``.-.2400.bps.``2``.-. |
120500 | 31 36 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 33 38 34 30 30 60 60 20 | 160.MHz.channel.width.``38400``. |
120520 | 2d 20 33 38 2c 34 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 58 65 6e 20 63 6f | -.38,400.bps.(default.for.Xen.co |
120540 | 6e 73 6f 6c 65 29 00 60 60 33 60 60 20 2d 20 38 30 2b 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c | nsole).``3``.-.80+80.MHz.channel |
120560 | 20 77 69 64 74 68 00 60 60 34 38 30 30 60 60 20 2d 20 34 38 30 30 20 62 70 73 00 60 60 35 37 36 | .width.``4800``.-.4800.bps.``576 |
120580 | 30 30 60 60 20 2d 20 35 37 2c 36 30 30 20 62 70 73 00 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 | 00``.-.57,600.bps.``64:ff9b::/96 |
1205a0 | 60 60 20 69 73 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 66 6f 72 20 | ``.is.the.well-known.prefix.for. |
1205c0 | 49 50 76 34 2d 65 6d 62 65 64 64 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 | IPv4-embedded.IPv6.addresses..Th |
1205e0 | 65 20 70 72 65 66 69 78 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 49 50 | e.prefix.is.used.to.represent.IP |
120600 | 76 34 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | v4.addresses.in.an.IPv6.address. |
120620 | 66 6f 72 6d 61 74 2e 20 54 68 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 69 73 20 65 6e 63 6f | format..The.IPv4.address.is.enco |
120640 | 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 77 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 6f 66 20 | ded.in.the.low-order.32.bits.of. |
120660 | 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 68 69 67 68 2d 6f 72 64 65 72 | the.IPv6.address..The.high-order |
120680 | 20 33 32 20 62 69 74 73 20 61 72 65 20 73 65 74 20 74 6f 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f | .32.bits.are.set.to.the.well-kno |
1206a0 | 77 6e 20 70 72 65 66 69 78 20 36 34 3a 66 66 39 62 3a 3a 2f 39 36 2e 00 60 60 38 30 32 2e 33 61 | wn.prefix.64:ff9b::/96..``802.3a |
1206c0 | 64 60 60 20 2d 20 49 45 45 45 20 38 30 32 2e 33 61 64 20 44 79 6e 61 6d 69 63 20 6c 69 6e 6b 20 | d``.-.IEEE.802.3ad.Dynamic.link. |
1206e0 | 61 67 67 72 65 67 61 74 69 6f 6e 2e 20 43 72 65 61 74 65 73 20 61 67 67 72 65 67 61 74 69 6f 6e | aggregation..Creates.aggregation |
120700 | 20 67 72 6f 75 70 73 20 74 68 61 74 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 73 70 65 65 | .groups.that.share.the.same.spee |
120720 | 64 20 61 6e 64 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 73 2e 20 55 74 69 6c 69 7a 65 73 20 | d.and.duplex.settings..Utilizes. |
120740 | 61 6c 6c 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 | all.slaves.in.the.active.aggrega |
120760 | 74 6f 72 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 70 65 | tor.according.to.the.802.3ad.spe |
120780 | 63 69 66 69 63 61 74 69 6f 6e 2e 00 60 60 39 36 30 30 60 60 20 2d 20 39 36 30 30 20 62 70 73 00 | cification..``9600``.-.9600.bps. |
1207a0 | 60 60 3c 20 64 68 2d 67 72 6f 75 70 20 3e 60 60 20 64 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 | ``<.dh-group.>``.defines.a.Diffi |
1207c0 | 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 3b 00 60 60 4b 6e 6f 77 6e | e-Hellman.group.for.PFS;.``Known |
1207e0 | 20 6c 69 6d 69 74 61 74 69 6f 6e 73 3a 60 60 00 60 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d | .limitations:``.``Stateful-IPv6- |
120800 | 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 20 61 6e 64 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 | Address-Pool``.and.``Delegated-I |
120820 | 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e | Pv6-Prefix-Pool``.are.defined.in |
120840 | 20 52 46 43 36 39 31 31 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 64 65 66 69 6e 65 | .RFC6911..If.they.are.not.define |
120860 | 64 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2c 20 61 64 64 20 6e 65 77 | d.in.your.RADIUS.server,.add.new |
120880 | 20 64 69 63 74 69 6f 6e 61 72 79 5f 2e 00 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 4e 41 | .dictionary_..``WLB_INTERFACE_NA |
1208a0 | 4d 45 3d 5b 69 6e 74 65 72 66 61 63 65 6e 61 6d 65 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 | ME=[interfacename]``:.Interface. |
1208c0 | 74 6f 20 62 65 20 6d 6f 6e 69 74 6f 72 65 64 00 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f | to.be.monitored.``WLB_INTERFACE_ |
1208e0 | 53 54 41 54 45 3d 5b 41 43 54 49 56 45 7c 46 41 49 4c 45 44 5d 60 60 3a 20 49 6e 74 65 72 66 61 | STATE=[ACTIVE|FAILED]``:.Interfa |
120900 | 63 65 20 73 74 61 74 65 00 60 60 61 60 60 20 2d 20 38 30 32 2e 31 31 61 20 2d 20 35 34 20 4d 62 | ce.state.``a``.-.802.11a.-.54.Mb |
120920 | 69 74 73 2f 73 65 63 00 60 60 61 63 60 60 20 2d 20 38 30 32 2e 31 31 61 63 20 2d 20 31 33 30 30 | its/sec.``ac``.-.802.11ac.-.1300 |
120940 | 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 63 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 60 | .Mbits/sec.``accept-own-nexthop` |
120960 | 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 | `.-...........Well-known.communi |
120980 | 74 69 65 73 20 76 61 6c 75 65 20 61 63 63 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 20 30 78 | ties.value.accept-own-nexthop.0x |
1209a0 | 46 46 46 46 30 30 30 38 00 60 60 61 63 63 65 70 74 2d 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 | FFFF0008.``accept-own``.-....... |
1209c0 | 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 | ............Well-known.communiti |
1209e0 | 65 73 20 76 61 6c 75 65 20 41 43 43 45 50 54 5f 4f 57 4e 20 30 78 46 46 46 46 30 30 30 31 00 60 | es.value.ACCEPT_OWN.0xFFFF0001.` |
120a00 | 60 61 63 63 65 70 74 60 60 3a 20 61 63 63 65 70 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 | `accept``:.accept.the.packet..`` |
120a20 | 61 63 63 65 73 73 2d 70 6f 69 6e 74 60 60 20 2d 20 41 63 63 65 73 73 2d 70 6f 69 6e 74 20 66 6f | access-point``.-.Access-point.fo |
120a40 | 72 77 61 72 64 73 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 6f 74 68 65 72 20 6e 6f 64 | rwards.packets.between.other.nod |
120a60 | 65 73 00 60 60 61 63 74 69 6f 6e 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 66 61 69 6c 75 72 65 | es.``action``.keep-alive.failure |
120a80 | 20 61 63 74 69 6f 6e 3a 00 60 60 61 63 74 69 76 65 2d 62 61 63 6b 75 70 60 60 20 2d 20 41 63 74 | .action:.``active-backup``.-.Act |
120aa0 | 69 76 65 2d 62 61 63 6b 75 70 20 70 6f 6c 69 63 79 3a 20 4f 6e 6c 79 20 6f 6e 65 20 73 6c 61 76 | ive-backup.policy:.Only.one.slav |
120ac0 | 65 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 69 73 20 61 63 74 69 76 65 2e 20 41 20 64 69 66 66 65 | e.in.the.bond.is.active..A.diffe |
120ae0 | 72 65 6e 74 20 73 6c 61 76 65 20 62 65 63 6f 6d 65 73 20 61 63 74 69 76 65 20 69 66 2c 20 61 6e | rent.slave.becomes.active.if,.an |
120b00 | 64 20 6f 6e 6c 79 20 69 66 2c 20 74 68 65 20 61 63 74 69 76 65 20 73 6c 61 76 65 20 66 61 69 6c | d.only.if,.the.active.slave.fail |
120b20 | 73 2e 20 54 68 65 20 62 6f 6e 64 27 73 20 4d 41 43 20 61 64 64 72 65 73 73 20 69 73 20 65 78 74 | s..The.bond's.MAC.address.is.ext |
120b40 | 65 72 6e 61 6c 6c 79 20 76 69 73 69 62 6c 65 20 6f 6e 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 72 74 | ernally.visible.on.only.one.port |
120b60 | 20 28 6e 65 74 77 6f 72 6b 20 61 64 61 70 74 65 72 29 20 74 6f 20 61 76 6f 69 64 20 63 6f 6e 66 | .(network.adapter).to.avoid.conf |
120b80 | 75 73 69 6e 67 20 74 68 65 20 73 77 69 74 63 68 2e 00 60 60 61 64 61 70 74 69 76 65 2d 6c 6f 61 | using.the.switch..``adaptive-loa |
120ba0 | 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 70 74 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 | d-balance``.-.Adaptive.load.bala |
120bc0 | 6e 63 69 6e 67 3a 20 69 6e 63 6c 75 64 65 73 20 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 | ncing:.includes.transmit-load-ba |
120be0 | 6c 61 6e 63 65 20 70 6c 75 73 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e | lance.plus.receive.load.balancin |
120c00 | 67 20 66 6f 72 20 49 50 56 34 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 | g.for.IPV4.traffic,.and.does.not |
120c20 | 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 | .require.any.special.switch.supp |
120c40 | 6f 72 74 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 | ort..The.receive.load.balancing. |
120c60 | 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 | is.achieved.by.ARP.negotiation.. |
120c80 | 54 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 74 65 72 63 65 70 74 73 20 74 68 | The.bonding.driver.intercepts.th |
120ca0 | 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 6c 6f 63 61 6c 20 | e.ARP.Replies.sent.by.the.local. |
120cc0 | 73 79 73 74 65 6d 20 6f 6e 20 74 68 65 69 72 20 77 61 79 20 6f 75 74 20 61 6e 64 20 6f 76 65 72 | system.on.their.way.out.and.over |
120ce0 | 77 72 69 74 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 | writes.the.source.hardware.addre |
120d00 | 73 73 20 77 69 74 68 20 74 68 65 20 75 6e 69 71 75 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 | ss.with.the.unique.hardware.addr |
120d20 | 65 73 73 20 6f 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 | ess.of.one.of.the.slaves.in.the. |
120d40 | 62 6f 6e 64 20 73 75 63 68 20 74 68 61 74 20 64 69 66 66 65 72 65 6e 74 20 70 65 65 72 73 20 75 | bond.such.that.different.peers.u |
120d60 | 73 65 20 64 69 66 66 65 72 65 6e 74 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 65 73 20 | se.different.hardware.addresses. |
120d80 | 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 2e 00 60 60 61 67 67 72 65 73 73 69 76 65 60 60 20 75 | for.the.server..``aggressive``.u |
120da0 | 73 65 20 41 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 | se.Aggressive.mode.for.Key.Excha |
120dc0 | 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 20 70 72 6f 74 6f 63 6f 6c 20 61 67 67 72 65 | nges.in.the.IKEv1.protocol.aggre |
120de0 | 73 73 69 76 65 20 6d 6f 64 65 20 69 73 20 6d 75 63 68 20 6d 6f 72 65 20 69 6e 73 65 63 75 72 65 | ssive.mode.is.much.more.insecure |
120e00 | 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 4d 61 69 6e 20 6d 6f 64 65 3b 00 60 60 61 6c 6c 2d 61 76 | .compared.to.Main.mode;.``all-av |
120e20 | 61 69 6c 61 62 6c 65 60 60 20 61 6c 6c 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 | ailable``.all.checking.target.ad |
120e40 | 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 | dresses.must.be.available.to.pas |
120e60 | 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 | s.this.check.``any-available``.a |
120e80 | 6e 79 20 6f 66 20 74 68 65 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 | ny.of.the.checking.target.addres |
120ea0 | 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 | ses.must.be.available.to.pass.th |
120ec0 | 69 73 20 63 68 65 63 6b 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6c 6f 63 61 6c 2d | is.check.``authentication.local- |
120ee0 | 69 64 2f 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 49 4b 45 20 69 64 65 6e 74 69 66 69 63 61 74 | id/remote-id``.-.IKE.identificat |
120f00 | 69 6f 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 6f 66 20 56 50 | ion.is.used.for.validation.of.VP |
120f20 | 4e 20 70 65 65 72 20 64 65 76 69 63 65 73 20 64 75 72 69 6e 67 20 49 4b 45 20 6e 65 67 6f 74 69 | N.peer.devices.during.IKE.negoti |
120f40 | 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 6c | ation..If.you.do.not.configure.l |
120f60 | 6f 63 61 6c 2f 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 2c 20 74 68 65 20 64 65 76 69 63 65 | ocal/remote-identity,.the.device |
120f80 | 20 75 73 65 73 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 | .uses.the.IPv4.or.IPv6.address.t |
120fa0 | 68 61 74 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d | hat.corresponds.to.the.local/rem |
120fc0 | 6f 74 65 20 70 65 65 72 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 6e 20 63 65 72 74 61 69 6e 20 | ote.peer.by.default..In.certain. |
120fe0 | 6e 65 74 77 6f 72 6b 20 73 65 74 75 70 73 20 28 6c 69 6b 65 20 69 70 73 65 63 20 69 6e 74 65 72 | network.setups.(like.ipsec.inter |
121000 | 66 61 63 65 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 2c 20 6f 72 20 62 65 | face.with.dynamic.address,.or.be |
121020 | 68 69 6e 64 20 74 68 65 20 4e 41 54 20 29 2c 20 74 68 65 20 49 4b 45 20 49 44 20 72 65 63 65 69 | hind.the.NAT.),.the.IKE.ID.recei |
121040 | 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 | ved.from.the.peer.does.not.match |
121060 | 20 74 68 65 20 49 4b 45 20 67 61 74 65 77 61 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 | .the.IKE.gateway.configured.on.t |
121080 | 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 50 68 | he.device..This.can.lead.to.a.Ph |
1210a0 | 61 73 65 20 31 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 75 72 65 2e 20 53 6f 2c 20 6d 61 | ase.1.validation.failure..So,.ma |
1210c0 | 6b 65 20 73 75 72 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 2f 72 | ke.sure.to.configure.the.local/r |
1210e0 | 65 6d 6f 74 65 20 69 64 20 65 78 70 6c 69 63 69 74 6c 79 20 61 6e 64 20 65 6e 73 75 72 65 20 74 | emote.id.explicitly.and.ensure.t |
121100 | 68 61 74 20 74 68 65 20 49 4b 45 20 49 44 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 | hat.the.IKE.ID.is.the.same.as.th |
121120 | 65 20 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 | e.remote-identity.configured.on. |
121140 | 74 68 65 20 70 65 65 72 20 64 65 76 69 63 65 2e 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f | the.peer.device..``authenticatio |
121160 | 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 | n``.-.configure.authentication.b |
121180 | 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 | etween.VyOS.and.a.remote.peer..I |
1211a0 | 66 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 6d 6f 64 65 20 69 73 20 75 73 65 64 | f.pre-shared-secret.mode.is.used |
1211c0 | 2c 20 74 68 65 20 73 65 63 72 65 74 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 | ,.the.secret.key.must.be.defined |
1211e0 | 20 69 6e 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 | .in.``set.vpn.ipsec.authenticati |
121200 | 6f 6e 60 60 20 61 6e 64 20 73 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 61 75 74 68 65 6e 74 69 63 | on``.and.suboptions:.``authentic |
121220 | 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 | ation``.-.configure.authenticati |
121240 | 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 | on.between.VyOS.and.a.remote.pee |
121260 | 72 2e 20 53 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 62 60 60 20 2d 20 38 30 32 2e 31 31 62 20 2d | r..Suboptions:.``b``.-.802.11b.- |
121280 | 20 31 31 20 4d 62 69 74 73 2f 73 65 63 00 60 60 62 61 62 65 6c 60 60 20 2d 20 42 61 62 65 6c 20 | .11.Mbits/sec.``babel``.-.Babel. |
1212a0 | 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 28 42 61 62 65 6c 29 00 60 60 62 65 67 69 6e | routing.protocol.(Babel).``begin |
1212c0 | 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 20 6f 66 20 74 68 65 20 | ``.Matches.the.beginning.of.the. |
1212e0 | 55 52 4c 20 70 61 74 68 00 60 60 62 67 70 60 60 20 2d 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 | URL.path.``bgp``.-.Border.Gatewa |
121300 | 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 00 60 60 62 69 6e 64 60 60 20 2d 20 73 65 6c 65 | y.Protocol.(BGP).``bind``.-.sele |
121320 | 63 74 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 69 6e 64 20 74 6f 20 74 68 | ct.a.VTI.interface.to.bind.to.th |
121340 | 69 73 20 70 65 65 72 3b 00 60 60 62 6c 61 63 6b 68 6f 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 | is.peer;.``blackhole``.-........ |
121360 | 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 | ............Well-known.communiti |
121380 | 65 73 20 76 61 6c 75 65 20 42 4c 41 43 4b 48 4f 4c 45 20 30 78 46 46 46 46 30 32 39 41 00 60 60 | es.value.BLACKHOLE.0xFFFF029A.`` |
1213a0 | 62 72 6f 61 64 63 61 73 74 60 60 20 2d 20 42 72 6f 61 64 63 61 73 74 20 70 6f 6c 69 63 79 3a 20 | broadcast``.-.Broadcast.policy:. |
1213c0 | 74 72 61 6e 73 6d 69 74 73 20 65 76 65 72 79 74 68 69 6e 67 20 6f 6e 20 61 6c 6c 20 73 6c 61 76 | transmits.everything.on.all.slav |
1213e0 | 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 60 60 62 75 72 73 74 60 60 3a 20 4e 75 6d 62 65 72 20 | e.interfaces..``burst``:.Number. |
121400 | 6f 66 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6f 76 65 72 73 68 6f 6f 74 20 | of.packets.allowed.to.overshoot. |
121420 | 74 68 65 20 6c 69 6d 69 74 20 77 69 74 68 69 6e 20 60 60 70 65 72 69 6f 64 60 60 2e 20 44 65 66 | the.limit.within.``period``..Def |
121440 | 61 75 6c 74 20 35 2e 00 60 60 63 61 2d 63 65 72 74 2d 66 69 6c 65 60 60 20 2d 20 43 41 20 63 65 | ault.5..``ca-cert-file``.-.CA.ce |
121460 | 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2e 20 55 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e | rtificate.file..Using.for.authen |
121480 | 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 61 2d 63 65 72 74 69 | ticating.remote.peer;.``ca-certi |
1214a0 | 66 69 63 61 74 65 60 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 69 6e 20 50 4b 49 | ficate``.-.CA.certificate.in.PKI |
1214c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 55 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e | .configuration..Using.for.authen |
1214e0 | 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 64 70 60 60 20 2d 20 | ticating.remote.peer;.``cdp``.-. |
121500 | 4c 69 73 74 65 6e 20 66 6f 72 20 43 44 50 20 66 6f 72 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 | Listen.for.CDP.for.Cisco.routers |
121520 | 2f 73 77 69 74 63 68 65 73 00 60 60 63 65 72 74 2d 66 69 6c 65 60 60 20 2d 20 63 65 72 74 69 66 | /switches.``cert-file``.-.certif |
121540 | 69 63 61 74 65 20 66 69 6c 65 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 | icate.file,.which.will.be.used.f |
121560 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f | or.authenticating.local.router.o |
121580 | 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d | n.remote.peer;.``certificate``.- |
1215a0 | 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 | .certificate.file.in.PKI.configu |
1215c0 | 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 | ration,.which.will.be.used.for.a |
1215e0 | 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 | uthenticating.local.router.on.re |
121600 | 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 6c 65 61 72 60 60 20 63 6c 6f 73 65 73 20 74 68 65 20 | mote.peer;.``clear``.closes.the. |
121620 | 43 48 49 4c 44 5f 53 41 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 74 61 6b 65 20 66 75 72 74 68 | CHILD_SA.and.does.not.take.furth |
121640 | 65 72 20 61 63 74 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 63 6c 65 61 72 60 60 20 73 | er.action.(default);.``clear``.s |
121660 | 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 63 6c 65 61 72 3b 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 | et.action.to.clear;.``close-acti |
121680 | 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 | on.=.none.|.clear.|.hold.|.resta |
1216a0 | 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b | rt``.-.defines.the.action.to.tak |
1216c0 | 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c | e.if.the.remote.peer.unexpectedl |
1216e0 | 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 | y.closes.a.CHILD_SA.(see.above.f |
121700 | 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 | or.meaning.of.values)..A.closeac |
121720 | 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 | tion.should.not.be.used.if.the.p |
121740 | 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 | eer.uses.reauthentication.or.uni |
121760 | 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 | queids..``close-action.=.none.|. |
121780 | 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 | clear.|.trap.|.start``.-.defines |
1217a0 | 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 | .the.action.to.take.if.the.remot |
1217c0 | 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 | e.peer.unexpectedly.closes.a.CHI |
1217e0 | 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 | LD_SA.(see.above.for.meaning.of. |
121800 | 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f | values)..A.closeaction.should.no |
121820 | 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 | t.be.used.if.the.peer.uses.reaut |
121840 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 | hentication.or.uniqueids..``clos |
121860 | 65 2d 61 63 74 69 6f 6e 60 60 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f | e-action``.defines.the.action.to |
121880 | 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 | .take.if.the.remote.peer.unexpec |
1218a0 | 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 3a 00 60 60 63 6f 6d 70 72 | tedly.closes.a.CHILD_SA:.``compr |
1218c0 | 65 73 73 69 6f 6e 60 60 20 20 45 6e 61 62 6c 65 73 20 74 68 65 20 20 49 50 43 6f 6d 70 28 49 50 | ession``..Enables.the..IPComp(IP |
1218e0 | 20 50 61 79 6c 6f 61 64 20 43 6f 6d 70 72 65 73 73 69 6f 6e 29 20 70 72 6f 74 6f 63 6f 6c 20 77 | .Payload.Compression).protocol.w |
121900 | 68 69 63 68 20 61 6c 6c 6f 77 73 20 63 6f 6d 70 72 65 73 73 69 6e 67 20 74 68 65 20 63 6f 6e 74 | hich.allows.compressing.the.cont |
121920 | 65 6e 74 20 6f 66 20 49 50 20 70 61 63 6b 65 74 73 2e 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e | ent.of.IP.packets..``compression |
121940 | 60 60 20 77 68 65 74 68 65 72 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 6f 66 | ``.whether.IPComp.compression.of |
121960 | 20 63 6f 6e 74 65 6e 74 20 69 73 20 70 72 6f 70 6f 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e | .content.is.proposed.on.the.conn |
121980 | 65 63 74 69 6f 6e 3a 00 60 60 63 6f 6e 6e 65 63 74 65 64 60 60 20 2d 20 43 6f 6e 6e 65 63 74 65 | ection:.``connected``.-.Connecte |
1219a0 | 64 20 72 6f 75 74 65 73 20 28 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 73 75 62 6e | d.routes.(directly.attached.subn |
1219c0 | 65 74 20 6f 72 20 68 6f 73 74 29 00 60 60 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 60 60 20 | et.or.host).``connection-type``. |
1219e0 | 2d 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | -.how.to.handle.this.connection. |
121a00 | 70 72 6f 63 65 73 73 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 72 69 61 6e 74 73 3a 00 60 60 63 6f | process..Possible.variants:.``co |
121a20 | 6e 74 69 6e 75 65 60 60 3a 20 63 6f 6e 74 69 6e 75 65 20 70 61 72 73 69 6e 67 20 6e 65 78 74 20 | ntinue``:.continue.parsing.next. |
121a40 | 72 75 6c 65 2e 00 60 60 63 72 6c 2d 66 69 6c 65 60 60 20 2d 20 66 69 6c 65 20 77 69 74 68 20 74 | rule..``crl-file``.-.file.with.t |
121a60 | 68 65 20 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 4c 69 73 74 2e 20 | he.Certificate.Revocation.List.. |
121a80 | 55 73 69 6e 67 20 74 6f 20 63 68 65 63 6b 20 69 66 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 | Using.to.check.if.a.certificate. |
121aa0 | 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 76 61 6c 69 64 20 6f 72 20 | for.the.remote.peer.is.valid.or. |
121ac0 | 72 65 76 6f 6b 65 64 3b 00 60 60 64 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 | revoked;.``d``.-.Execution.inter |
121ae0 | 76 61 6c 20 69 6e 20 64 61 79 73 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f | val.in.days.``dead-peer-detectio |
121b00 | 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 | n.action.=.clear.|.hold.|.restar |
121b20 | 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 | t``.-.R_U_THERE.notification.mes |
121b40 | 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f | sages(IKEv1).or.empty.INFORMATIO |
121b60 | 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 | NAL.messages.(IKEv2).are.periodi |
121b80 | 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 | cally.sent.in.order.to.check.the |
121ba0 | 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 | .liveliness.of.the.IPsec.peer..T |
121bc0 | 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 68 6f 6c 64 2c 20 61 6e 64 20 72 65 73 74 61 | he.values.clear,.hold,.and.resta |
121be0 | 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e | rt.all.activate.DPD.and.determin |
121c00 | 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d | e.the.action.to.perform.on.a.tim |
121c20 | 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 | eout..With.``clear``.the.connect |
121c40 | 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 | ion.is.closed.with.no.further.ac |
121c60 | 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 68 6f 6c 64 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 | tions.taken..``hold``.installs.a |
121c80 | 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d | .trap.policy,.which.will.catch.m |
121ca0 | 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d | atching.traffic.and.tries.to.re- |
121cc0 | 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 | negotiate.the.connection.on.dema |
121ce0 | 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 | nd..``restart``.will.immediately |
121d00 | 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 | .trigger.an.attempt.to.re-negoti |
121d20 | 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d | ate.the.connection..``dead-peer- |
121d40 | 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 | detection.action.=.clear.|.trap. |
121d60 | 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 | |.restart``.-.R_U_THERE.notifica |
121d80 | 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e | tion.messages(IKEv1).or.empty.IN |
121da0 | 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 | FORMATIONAL.messages.(IKEv2).are |
121dc0 | 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 | .periodically.sent.in.order.to.c |
121de0 | 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 | heck.the.liveliness.of.the.IPsec |
121e00 | 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 74 72 61 70 2c 20 61 | .peer..The.values.clear,.trap,.a |
121e20 | 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 20 | nd.restart.all.activate.DPD.and. |
121e40 | 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d 20 | determine.the.action.to.perform. |
121e60 | 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 65 | on.a.timeout..With.``clear``.the |
121e80 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 75 | .connection.is.closed.with.no.fu |
121ea0 | 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 74 72 61 70 60 60 20 69 6e | rther.actions.taken..``trap``.in |
121ec0 | 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c | stalls.a.trap.policy,.which.will |
121ee0 | 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 | .catch.matching.traffic.and.trie |
121f00 | 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | s.to.re-negotiate.the.connection |
121f20 | 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d 6d | .on.demand..``restart``.will.imm |
121f40 | 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 | ediately.trigger.an.attempt.to.r |
121f60 | 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 65 | e-negotiate.the.connection..``de |
121f80 | 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 60 60 20 63 6f 6e 74 72 6f 6c 73 20 74 68 65 | ad-peer-detection``.controls.the |
121fa0 | 20 75 73 65 20 6f 66 20 74 68 65 20 44 65 61 64 20 50 65 65 72 20 44 65 74 65 63 74 69 6f 6e 20 | .use.of.the.Dead.Peer.Detection. |
121fc0 | 70 72 6f 74 6f 63 6f 6c 20 28 44 50 44 2c 20 52 46 43 20 33 37 30 36 29 20 77 68 65 72 65 20 52 | protocol.(DPD,.RFC.3706).where.R |
121fe0 | 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 28 | _U_THERE.notification.messages.( |
122000 | 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 | IKEv1).or.empty.INFORMATIONAL.me |
122020 | 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 | ssages.(IKEv2).are.periodically. |
122040 | 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c | sent.in.order.to.check.the.livel |
122060 | 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 3a 00 60 60 64 65 66 61 75 | iness.of.the.IPsec.peer:.``defau |
122080 | 6c 74 2d 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 45 53 50 20 67 72 6f 75 70 20 74 6f 20 75 73 | lt-esp-group``.-.ESP.group.to.us |
1220a0 | 65 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 | e.by.default.for.traffic.encrypt |
1220c0 | 69 6f 6e 2e 20 4d 69 67 68 74 20 62 65 20 6f 76 65 72 77 72 69 74 74 65 6e 20 62 79 20 69 6e 64 | ion..Might.be.overwritten.by.ind |
1220e0 | 69 76 69 64 75 61 6c 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6f 72 20 56 | ividual.settings.for.tunnel.or.V |
122100 | 54 49 20 69 6e 74 65 72 66 61 63 65 20 62 69 6e 64 69 6e 67 3b 00 60 60 64 65 73 63 72 69 70 74 | TI.interface.binding;.``descript |
122120 | 69 6f 6e 60 60 20 2d 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 65 65 | ion``.-.description.for.this.pee |
122140 | 72 3b 00 60 60 64 68 2d 67 72 6f 75 70 60 60 20 64 68 2d 67 72 6f 75 70 3b 00 60 60 64 68 63 70 | r;.``dh-group``.dh-group;.``dhcp |
122160 | 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 49 44 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 | -interface``.-.ID.for.authentica |
122180 | 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 66 72 6f 6d 20 44 48 43 50 20 61 64 64 72 65 73 73 | tion.generated.from.DHCP.address |
1221a0 | 20 64 79 6e 61 6d 69 63 61 6c 6c 79 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 | .dynamically;.``dhcp-interface`` |
1221c0 | 20 2d 20 75 73 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 72 65 63 65 69 76 65 64 20 66 | .-.use.an.IP.address,.received.f |
1221e0 | 72 6f 6d 20 44 48 43 50 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 | rom.DHCP.for.IPSec.connection.wi |
122200 | 74 68 20 74 68 69 73 20 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 60 60 6c 6f 63 61 6c | th.this.peer,.instead.of.``local |
122220 | 2d 61 64 64 72 65 73 73 60 60 3b 00 60 60 64 69 73 61 62 6c 65 2d 6d 6f 62 69 6b 65 60 60 20 64 | -address``;.``disable-mobike``.d |
122240 | 69 73 61 62 6c 65 73 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 | isables.MOBIKE.Support..MOBIKE.i |
122260 | 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 20 61 6e 64 20 65 | s.only.available.for.IKEv2.and.e |
122280 | 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 | nabled.by.default..``disable-rou |
1222a0 | 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 2d 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 77 | te-autoinstall``.-.This.option.w |
1222c0 | 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 72 6f 75 74 | hen.configured.disables.the.rout |
1222e0 | 65 73 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 74 61 62 6c | es.installed.in.the.default.tabl |
122300 | 65 20 32 32 30 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 69 70 73 65 63 2e 20 49 74 | e.220.for.site-to-site.ipsec..It |
122320 | 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 77 69 74 68 20 56 54 49 20 63 6f 6e 66 69 67 75 | .is.mostly.used.with.VTI.configu |
122340 | 72 61 74 69 6f 6e 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 | ration..``disable-route-autoinst |
122360 | 61 6c 6c 60 60 20 44 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 | all``.Do.not.automatically.insta |
122380 | 6c 6c 20 72 6f 75 74 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 3b 00 60 60 | ll.routes.to.remote.networks;.`` |
1223a0 | 64 69 73 61 62 6c 65 60 60 20 2d 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b | disable``.-.disable.this.tunnel; |
1223c0 | 00 60 60 64 69 73 61 62 6c 65 60 60 20 44 69 73 61 62 6c 65 20 50 46 53 3b 00 60 60 64 69 73 61 | .``disable``.Disable.PFS;.``disa |
1223e0 | 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e | ble``.disable.IPComp.compression |
122400 | 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 | .(default);.``disable``.disable. |
122420 | 4d 4f 42 49 4b 45 3b 00 60 60 64 72 6f 70 60 60 3a 20 64 72 6f 70 20 74 68 65 20 70 61 63 6b 65 | MOBIKE;.``drop``:.drop.the.packe |
122440 | 74 2e 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 36 60 60 00 60 60 65 63 64 | t..``ecdsa-sha2-nistp256``.``ecd |
122460 | 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d | sa-sha2-nistp384``.``ecdsa-sha2- |
122480 | 6e 69 73 74 70 35 32 31 60 60 00 60 60 65 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 | nistp521``.``edp``.-.Listen.for. |
1224a0 | 45 44 50 20 66 6f 72 20 45 78 74 72 65 6d 65 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 | EDP.for.Extreme.routers/switches |
1224c0 | 00 60 60 65 6e 61 62 6c 65 60 60 20 49 6e 68 65 72 69 74 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d | .``enable``.Inherit.Diffie-Hellm |
1224e0 | 61 6e 20 67 72 6f 75 70 20 66 72 6f 6d 20 49 4b 45 20 67 72 6f 75 70 20 28 64 65 66 61 75 6c 74 | an.group.from.IKE.group.(default |
122500 | 29 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 | );.``enable``.enable.IPComp.comp |
122520 | 72 65 73 73 69 6f 6e 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b | ression;.``enable``.enable.MOBIK |
122540 | 45 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 49 4b 45 76 32 29 3b 00 60 60 65 6e 63 72 79 70 74 | E.(default.for.IKEv2);.``encrypt |
122560 | 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 | ion``.encryption.algorithm.(defa |
122580 | 75 6c 74 20 31 32 38 20 62 69 74 20 41 45 53 2d 43 42 43 29 3b 00 60 60 65 6e 63 72 79 70 74 69 | ult.128.bit.AES-CBC);.``encrypti |
1225a0 | 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 3b 00 60 60 65 6e 64 | on``.encryption.algorithm;.``end |
1225c0 | 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 | ``.Matches.the.end.of.the.URL.pa |
1225e0 | 74 68 2e 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 | th..``esp-group``.-.define.ESP.g |
122600 | 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 69 6e 65 | roup.for.encrypt.traffic,.define |
122620 | 64 20 62 79 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 | d.by.this.tunnel;.``esp-group``. |
122640 | 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 | -.define.ESP.group.for.encrypt.t |
122660 | 72 61 66 66 69 63 2c 20 70 61 73 73 65 64 20 74 68 69 73 20 56 54 49 20 69 6e 74 65 72 66 61 63 | raffic,.passed.this.VTI.interfac |
122680 | 65 2e 00 60 60 65 78 61 63 74 60 60 20 52 65 71 75 69 72 65 73 20 61 6e 20 65 78 61 63 74 6c 79 | e..``exact``.Requires.an.exactly |
1226a0 | 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 60 66 64 70 60 60 20 2d | .match.of.the.URL.path.``fdp``.- |
1226c0 | 20 4c 69 73 74 65 6e 20 66 6f 72 20 46 44 50 20 66 6f 72 20 46 6f 75 6e 64 72 79 20 72 6f 75 74 | .Listen.for.FDP.for.Foundry.rout |
1226e0 | 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 66 69 6c 65 60 60 20 2d 20 70 61 74 68 20 74 6f 20 | ers/switches.``file``.-.path.to. |
122700 | 74 68 65 20 6b 65 79 20 66 69 6c 65 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 20 | the.key.file;.``flexvpn``.Allow. |
122720 | 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 | FlexVPN.vendor.ID.payload.(IKEv2 |
122740 | 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 | .only)..Send.the.Cisco.FlexVPN.v |
122760 | 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 | endor.ID.payload.(IKEv2.only),.w |
122780 | 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b | hich.is.required.in.order.to.mak |
1227a0 | 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f | e.Cisco.brand.devices.allow.nego |
1227c0 | 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 | tiating.a.local.traffic.selector |
1227e0 | 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 | .(from.strongSwan's.point.of.vie |
122800 | 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 | w).that.is.not.the.assigned.virt |
122820 | 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 | ual.IP.address.if.such.an.addres |
122840 | 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 | s.is.requested.by.strongSwan..Se |
122860 | 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 | nding.the.Cisco.FlexVPN.vendor.I |
122880 | 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 | D.prevents.the.peer.from.narrowi |
1228a0 | 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 | ng.the.initiator's.local.traffic |
1228c0 | 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 | .selector.and.allows.it.to.e.g.. |
1228e0 | 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 | negotiate.a.TS.of.0.0.0.0/0.==.0 |
122900 | 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 | .0.0.0/0.instead..This.has.been. |
122920 | 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 | tested.with.a."tunnel.mode.ipsec |
122940 | 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 | .ipv4".Cisco.template.but.should |
122960 | 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e | .also.work.for.GRE.encapsulation |
122980 | 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 73 20 46 6c 65 78 56 50 4e 20 76 65 6e | ;.``flexvpn``.Allows.FlexVPN.ven |
1229a0 | 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e | dor.ID.payload.(IKEv2.only)..Sen |
1229c0 | 64 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 | d.the.Cisco.FlexVPN.vendor.ID.pa |
1229e0 | 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 | yload.(IKEv2.only),.which.is.req |
122a00 | 75 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 | uired.in.order.to.make.Cisco.bra |
122a20 | 6e 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c | nd.devices.allow.negotiating.a.l |
122a40 | 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f | ocal.traffic.selector.(from.stro |
122a60 | 6e 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 | ngSwan's.point.of.view).that.is. |
122a80 | 6e 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 | not.the.assigned.virtual.IP.addr |
122aa0 | 65 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 | ess.if.such.an.address.is.reques |
122ac0 | 74 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 | ted.by.strongSwan..Sending.the.C |
122ae0 | 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 | isco.FlexVPN.vendor.ID.prevents. |
122b00 | 74 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 | the.peer.from.narrowing.the.init |
122b20 | 69 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 | iator's.local.traffic.selector.a |
122b40 | 6e 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 | nd.allows.it.to.e.g..negotiate.a |
122b60 | 20 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e | .TS.of.0.0.0.0/0.==.0.0.0.0/0.in |
122b80 | 73 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 | stead..This.has.been.tested.with |
122ba0 | 20 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 | .a."tunnel.mode.ipsec.ipv4".Cisc |
122bc0 | 6f 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 | o.template.but.should.also.work. |
122be0 | 66 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6f 72 63 65 2d 75 | for.GRE.encapsulation;.``force-u |
122c00 | 64 70 2d 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 60 60 20 2d 20 66 6f 72 63 65 20 65 6e 63 61 70 | dp-encapsulation``.-.force.encap |
122c20 | 73 75 6c 61 74 69 6f 6e 20 6f 66 20 45 53 50 20 69 6e 74 6f 20 55 44 50 20 64 61 74 61 67 72 61 | sulation.of.ESP.into.UDP.datagra |
122c40 | 6d 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 65 20 69 66 20 62 65 74 77 65 65 6e 20 6c 6f | ms..Useful.in.case.if.between.lo |
122c60 | 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 64 65 20 69 73 20 66 69 72 65 77 61 6c 6c 20 | cal.and.remote.side.is.firewall. |
122c80 | 6f 72 20 4e 41 54 2c 20 77 68 69 63 68 20 6e 6f 74 20 61 6c 6c 6f 77 73 20 70 61 73 73 69 6e 67 | or.NAT,.which.not.allows.passing |
122ca0 | 20 70 6c 61 69 6e 20 45 53 50 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 74 68 65 6d 3b | .plain.ESP.packets.between.them; |
122cc0 | 00 60 60 67 60 60 20 2d 20 38 30 32 2e 31 31 67 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 20 | .``g``.-.802.11g.-.54.Mbits/sec. |
122ce0 | 28 64 65 66 61 75 6c 74 29 00 60 60 67 72 61 63 65 66 75 6c 2d 73 68 75 74 64 6f 77 6e 60 60 20 | (default).``graceful-shutdown``. |
122d00 | 2d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 | -............Well-known.communit |
122d20 | 69 65 73 20 76 61 6c 75 65 20 47 52 41 43 45 46 55 4c 5f 53 48 55 54 44 4f 57 4e 20 30 78 46 46 | ies.value.GRACEFUL_SHUTDOWN.0xFF |
122d40 | 46 46 30 30 30 30 00 60 60 68 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 | FF0000.``h``.-.Execution.interva |
122d60 | 6c 20 69 6e 20 68 6f 75 72 73 00 60 60 68 61 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 | l.in.hours.``hash``.hash.algorit |
122d80 | 68 6d 20 28 64 65 66 61 75 6c 74 20 73 68 61 31 29 2e 00 60 60 68 61 73 68 60 60 20 68 61 73 68 | hm.(default.sha1)..``hash``.hash |
122da0 | 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 | .algorithm..``hold``.set.action. |
122dc0 | 74 6f 20 68 6f 6c 64 20 28 64 65 66 61 75 6c 74 29 00 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 | to.hold.(default).``hold``.set.a |
122de0 | 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 3b 00 60 60 68 74 34 30 2b 60 60 20 2d 20 42 6f 74 68 20 | ction.to.hold;.``ht40+``.-.Both. |
122e00 | 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 | 20.MHz.and.40.MHz.with.secondary |
122e20 | 20 63 68 61 6e 6e 65 6c 20 61 62 6f 76 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e | .channel.above.the.primary.chann |
122e40 | 65 6c 00 60 60 68 74 34 30 2d 60 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 | el.``ht40-``.-.Both.20.MHz.and.4 |
122e60 | 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 62 65 6c | 0.MHz.with.secondary.channel.bel |
122e80 | 6f 77 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 76 63 30 60 60 20 | ow.the.primary.channel.``hvc0``. |
122ea0 | 2d 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 00 60 60 69 64 60 60 20 2d 20 73 74 61 74 69 63 20 49 44 | -.Xen.console.``id``.-.static.ID |
122ec0 | 27 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 49 6e 20 67 65 6e 65 72 61 | 's.for.authentication..In.genera |
122ee0 | 6c 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 60 60 3c 78 2e | l.local.and.remote.address.``<x. |
122f00 | 78 2e 78 2e 78 3e 60 60 2c 20 60 60 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 60 60 20 | x.x.x>``,.``<h:h:h:h:h:h:h:h>``. |
122f20 | 6f 72 20 60 60 25 61 6e 79 60 60 3b 00 60 60 69 6b 65 2d 67 72 6f 75 70 60 60 20 2d 20 49 4b 45 | or.``%any``;.``ike-group``.-.IKE |
122f40 | 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 3b | .group.to.use.for.key.exchanges; |
122f60 | 00 60 60 69 6b 65 76 31 60 60 20 75 73 65 20 49 4b 45 76 31 20 66 6f 72 20 4b 65 79 20 45 78 63 | .``ikev1``.use.IKEv1.for.Key.Exc |
122f80 | 68 61 6e 67 65 3b 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 2d 20 72 65 61 75 74 68 | hange;.``ikev2-reauth``.-.reauth |
122fa0 | 65 6e 74 69 63 61 74 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 75 72 69 6e 67 20 74 68 65 20 | enticate.remote.peer.during.the. |
122fc0 | 72 65 6b 65 79 69 6e 67 20 70 72 6f 63 65 73 73 2e 20 43 61 6e 20 62 65 20 75 73 65 64 20 6f 6e | rekeying.process..Can.be.used.on |
122fe0 | 6c 79 20 77 69 74 68 20 49 4b 45 76 32 2e 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 49 4b 45 5f | ly.with.IKEv2..Create.a.new.IKE_ |
123000 | 53 41 20 66 72 6f 6d 20 74 68 65 20 73 63 72 61 74 63 68 20 61 6e 64 20 74 72 79 20 74 6f 20 72 | SA.from.the.scratch.and.try.to.r |
123020 | 65 63 72 65 61 74 65 20 61 6c 6c 20 49 50 73 65 63 20 53 41 73 3b 00 60 60 69 6b 65 76 32 2d 72 | ecreate.all.IPsec.SAs;.``ikev2-r |
123040 | 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 | eauth``.whether.rekeying.of.an.I |
123060 | 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 | KE_SA.should.also.reauthenticate |
123080 | 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 | .the.peer..In.IKEv1,.reauthentic |
1230a0 | 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 2e 20 53 65 74 74 69 6e 67 20 74 68 | ation.is.always.done..Setting.th |
1230c0 | 69 73 20 70 61 72 61 6d 65 74 65 72 20 65 6e 61 62 6c 65 73 20 72 65 6d 6f 74 65 20 68 6f 73 74 | is.parameter.enables.remote.host |
1230e0 | 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 | .re-authentication.during.an.IKE |
123100 | 20 72 65 6b 65 79 2e 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 | .rekey..``ikev2-reauth``.whether |
123120 | 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c | .rekeying.of.an.IKE_SA.should.al |
123140 | 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 | so.reauthenticate.the.peer..In.I |
123160 | 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 | KEv1,.reauthentication.is.always |
123180 | 20 64 6f 6e 65 3a 00 60 60 69 6b 65 76 32 60 60 20 75 73 65 20 49 4b 45 76 32 20 66 6f 72 20 4b | .done:.``ikev2``.use.IKEv2.for.K |
1231a0 | 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6e 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 | ey.Exchange;.``in``:.Ruleset.for |
1231c0 | 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 6e 20 69 6e 62 6f 75 6e 64 | .forwarded.packets.on.an.inbound |
1231e0 | 20 69 6e 74 65 72 66 61 63 65 00 60 60 69 6e 69 74 69 61 74 65 60 60 20 2d 20 64 6f 65 73 20 69 | .interface.``initiate``.-.does.i |
123200 | 6e 69 74 69 61 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 | nitial.connection.to.remote.peer |
123220 | 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 | .immediately.after.configuring.a |
123240 | 6e 64 20 61 66 74 65 72 20 62 6f 6f 74 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 | nd.after.boot..In.this.mode.the. |
123260 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 72 65 73 74 61 72 74 65 64 | connection.will.not.be.restarted |
123280 | 20 69 6e 20 63 61 73 65 20 6f 66 20 64 69 73 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 72 65 | .in.case.of.disconnection,.there |
1232a0 | 66 6f 72 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 74 6f 67 65 74 68 65 | fore.should.be.used.only.togethe |
1232c0 | 72 20 77 69 74 68 20 44 50 44 20 6f 72 20 61 6e 6f 74 68 65 72 20 73 65 73 73 69 6f 6e 20 74 72 | r.with.DPD.or.another.session.tr |
1232e0 | 61 63 6b 69 6e 67 20 6d 65 74 68 6f 64 73 3b 00 60 60 69 6e 74 65 6c 5f 69 64 6c 65 2e 6d 61 78 | acking.methods;.``intel_idle.max |
123300 | 5f 63 73 74 61 74 65 3d 30 60 60 20 44 69 73 61 62 6c 65 20 69 6e 74 65 6c 5f 69 64 6c 65 20 61 | _cstate=0``.Disable.intel_idle.a |
123320 | 6e 64 20 66 61 6c 6c 20 62 61 63 6b 20 6f 6e 20 61 63 70 69 5f 69 64 6c 65 00 60 60 69 6e 74 65 | nd.fall.back.on.acpi_idle.``inte |
123340 | 72 66 61 63 65 60 60 20 49 6e 74 65 72 66 61 63 65 20 4e 61 6d 65 20 74 6f 20 75 73 65 2e 20 54 | rface``.Interface.Name.to.use..T |
123360 | 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 | he.name.of.the.interface.on.whic |
123380 | 68 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 73 68 6f 75 6c 64 20 62 65 | h.virtual.IP.addresses.should.be |
1233a0 | 20 69 6e 73 74 61 6c 6c 65 64 2e 20 49 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 | .installed..If.not.specified.the |
1233c0 | 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 20 | .addresses.will.be.installed.on. |
1233e0 | 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 3b 00 60 60 69 6e 74 65 72 66 | the.outbound.interface;.``interf |
123400 | 61 63 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 | ace``.is.used.for.the.VyOS.CLI.c |
123420 | 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 | ommand.to.identify.the.WireGuard |
123440 | 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 69 73 20 70 72 69 76 61 74 65 20 6b 65 | .interface.where.this.private.ke |
123460 | 79 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 69 6e 74 65 72 6e 65 74 60 60 20 2d 20 | y.is.to.be.used..``internet``.-. |
123480 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 | ....................Well-known.c |
1234a0 | 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 30 00 60 60 69 6e 74 65 72 76 61 6c 60 60 20 | ommunities.value.0.``interval``. |
1234c0 | 6b 65 65 70 2d 61 6c 69 76 65 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c | keep-alive.interval.in.seconds.< |
1234e0 | 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 33 30 29 3b 00 60 60 69 73 69 73 60 60 20 | 2-86400>.(default.30);.``isis``. |
123500 | 2d 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 | -.Intermediate.System.to.Interme |
123520 | 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 2d 49 53 29 00 60 60 6a 75 6d 70 60 60 3a 20 6a | diate.System.(IS-IS).``jump``:.j |
123540 | 75 6d 70 20 74 6f 20 61 6e 6f 74 68 65 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 60 60 6b | ump.to.another.custom.chain..``k |
123560 | 65 72 6e 65 6c 60 60 20 2d 20 4b 65 72 6e 65 6c 20 72 6f 75 74 65 73 00 60 60 6b 65 79 2d 65 78 | ernel``.-.Kernel.routes.``key-ex |
123580 | 63 68 61 6e 67 65 60 60 20 77 68 69 63 68 20 70 72 6f 74 6f 63 6f 6c 20 73 68 6f 75 6c 64 20 62 | change``.which.protocol.should.b |
1235a0 | 65 20 75 73 65 64 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 | e.used.to.initialize.the.connect |
1235c0 | 69 6f 6e 20 49 66 20 6e 6f 74 20 73 65 74 20 62 6f 74 68 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 | ion.If.not.set.both.protocols.ar |
1235e0 | 65 20 68 61 6e 64 6c 65 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 6c 6c 20 75 | e.handled.and.connections.will.u |
123600 | 73 65 20 49 4b 45 76 32 20 77 68 65 6e 20 69 6e 69 74 69 61 74 69 6e 67 2c 20 62 75 74 20 61 63 | se.IKEv2.when.initiating,.but.ac |
123620 | 63 65 70 74 20 61 6e 79 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 77 68 65 6e 20 72 | cept.any.protocol.version.when.r |
123640 | 65 73 70 6f 6e 64 69 6e 67 3a 00 60 60 6b 65 79 60 60 20 2d 20 61 20 70 72 69 76 61 74 65 20 6b | esponding:.``key``.-.a.private.k |
123660 | 65 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 | ey,.which.will.be.used.for.authe |
123680 | 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 | nticating.local.router.on.remote |
1236a0 | 20 70 65 65 72 3a 00 60 60 6c 61 74 65 6e 63 79 60 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f | .peer:.``latency``:.A.server.pro |
1236c0 | 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 6c 6f 77 65 72 69 6e 67 20 6e 65 74 77 6f 72 6b | file.focused.on.lowering.network |
1236e0 | 20 6c 61 74 65 6e 63 79 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 | .latency..This.profile.favors.pe |
123700 | 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 | rformance.over.power.savings.by. |
123720 | 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d | setting.``intel_pstate``.and.``m |
123740 | 69 6e 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 60 60 2e 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 | in_perf_pct=100``..``least-conne |
123760 | 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 74 6f 20 | ction``.Distributes.requests.to. |
123780 | 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 | the.server.with.the.fewest.activ |
1237a0 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e | e.connections.``least-connection |
1237c0 | 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 74 70 20 74 6a 65 20 73 | ``.Distributes.requests.tp.tje.s |
1237e0 | 65 72 76 65 72 20 77 6f 74 6a 20 74 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e | erver.wotj.the.fewest.active.con |
123800 | 6e 65 63 74 69 6f 6e 73 00 60 60 6c 69 66 65 2d 62 79 74 65 73 60 60 20 45 53 50 20 6c 69 66 65 | nections.``life-bytes``.ESP.life |
123820 | 20 69 6e 20 62 79 74 65 73 20 3c 31 30 32 34 2d 32 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e | .in.bytes.<1024-26843545600000>. |
123840 | 20 4e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 | .Number.of.bytes.transmitted.ove |
123860 | 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b | r.an.IPsec.SA.before.it.expires; |
123880 | 00 60 60 6c 69 66 65 2d 70 61 63 6b 65 74 73 60 60 20 45 53 50 20 6c 69 66 65 20 69 6e 20 70 61 | .``life-packets``.ESP.life.in.pa |
1238a0 | 63 6b 65 74 73 20 3c 31 30 30 30 2d 32 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d | ckets.<1000-26843545600000>..Num |
1238c0 | 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 | ber.of.packets.transmitted.over. |
1238e0 | 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 | an.IPsec.SA.before.it.expires;.` |
123900 | 60 6c 69 66 65 74 69 6d 65 60 60 20 45 53 50 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f | `lifetime``.ESP.lifetime.in.seco |
123920 | 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 33 36 30 30 29 2e 20 48 | nds.<30-86400>.(default.3600)..H |
123940 | 6f 77 20 6c 6f 6e 67 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 73 74 61 6e 63 65 20 6f 66 | ow.long.a.particular.instance.of |
123960 | 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 20 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 | .a.connection.(a.set.of.encrypti |
123980 | 6f 6e 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 73 20 66 6f 72 20 75 73 65 72 20 | on/authentication.keys.for.user. |
1239a0 | 70 61 63 6b 65 74 73 29 20 73 68 6f 75 6c 64 20 6c 61 73 74 2c 20 66 72 6f 6d 20 73 75 63 63 65 | packets).should.last,.from.succe |
1239c0 | 73 73 66 75 6c 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 65 78 70 69 72 79 3b 00 60 60 6c | ssful.negotiation.to.expiry;.``l |
1239e0 | 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 | ifetime``.IKE.lifetime.in.second |
123a00 | 73 20 3c 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c | s.<0-86400>.(default.28800);.``l |
123a20 | 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 | ifetime``.IKE.lifetime.in.second |
123a40 | 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 | s.<30-86400>.(default.28800);.`` |
123a60 | 6c 6c 67 72 2d 73 74 61 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | llgr-stale``.-.................. |
123a80 | 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4c 4c | .Well-known.communities.value.LL |
123aa0 | 47 52 5f 53 54 41 4c 45 20 30 78 46 46 46 46 30 30 30 36 00 60 60 6c 6f 63 61 6c 2d 61 64 64 72 | GR_STALE.0xFFFF0006.``local-addr |
123ac0 | 65 73 73 60 60 20 2d 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 49 50 53 | ess``.-.local.IP.address.for.IPS |
123ae0 | 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 2e 20 49 66 | ec.connection.with.this.peer..If |
123b00 | 20 64 65 66 69 6e 65 64 20 60 60 61 6e 79 60 60 2c 20 74 68 65 6e 20 61 6e 20 49 50 20 61 64 64 | .defined.``any``,.then.an.IP.add |
123b20 | 72 65 73 73 20 77 68 69 63 68 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 | ress.which.configured.on.interfa |
123b40 | 63 65 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 75 73 | ce.with.default.route.will.be.us |
123b60 | 65 64 3b 00 60 60 6c 6f 63 61 6c 2d 61 73 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | ed;.``local-as``.-.............. |
123b80 | 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 | .......Well-known.communities.va |
123ba0 | 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 5f 53 55 42 43 4f 4e 46 45 44 20 30 78 46 46 46 46 46 46 | lue.NO_EXPORT_SUBCONFED.0xFFFFFF |
123bc0 | 30 33 00 60 60 6c 6f 63 61 6c 2d 69 64 60 60 20 2d 20 49 44 20 66 6f 72 20 74 68 65 20 6c 6f 63 | 03.``local-id``.-.ID.for.the.loc |
123be0 | 61 6c 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 2c 20 64 75 72 69 | al.VyOS.router..If.defined,.duri |
123c00 | 6e 67 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 | ng.the.authentication.it.will.be |
123c20 | 20 73 65 6e 64 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 6c 6f 63 61 6c 2d 6b 65 | .send.to.remote.peer;.``local-ke |
123c40 | 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 | y``.-.name.of.PKI.key-pair.with. |
123c60 | 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 00 60 60 6c 6f 63 61 6c 60 60 20 2d 20 64 65 | local.private.key.``local``.-.de |
123c80 | 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 66 6f 72 20 6d 61 74 63 68 20 74 72 | fine.a.local.source.for.match.tr |
123ca0 | 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 | affic,.which.should.be.encrypted |
123cc0 | 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 6c 6f 63 61 6c 60 | .and.send.to.this.peer:.``local` |
123ce0 | 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 | `:.Ruleset.for.packets.destined. |
123d00 | 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 72 00 60 60 6d 60 60 20 2d 20 45 78 65 63 75 74 69 6f | for.this.router.``m``.-.Executio |
123d20 | 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 00 60 60 6d 61 69 6e 60 60 20 52 | n.interval.in.minutes.``main``.R |
123d40 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 62 79 20 56 79 4f 53 20 61 6e 64 20 6f 74 | outing.table.used.by.VyOS.and.ot |
123d60 | 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6e 6f 74 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 | her.interfaces.not.participating |
123d80 | 20 69 6e 20 50 42 52 00 60 60 6d 61 69 6e 60 60 20 75 73 65 20 4d 61 69 6e 20 6d 6f 64 65 20 66 | .in.PBR.``main``.use.Main.mode.f |
123da0 | 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 20 50 72 | or.Key.Exchanges.in.the.IKEv1.Pr |
123dc0 | 6f 74 6f 63 6f 6c 20 28 52 65 63 6f 6d 6d 65 6e 64 65 64 20 44 65 66 61 75 6c 74 29 3b 00 60 60 | otocol.(Recommended.Default);.`` |
123de0 | 6d 65 73 73 61 67 65 60 60 3a 20 46 75 6c 6c 20 6d 65 73 73 61 67 65 20 74 68 61 74 20 68 61 73 | message``:.Full.message.that.has |
123e00 | 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 63 72 69 70 74 2e 00 60 60 6d 69 74 69 67 61 74 | .triggered.the.script..``mitigat |
123e20 | 69 6f 6e 73 3d 6f 66 66 60 60 00 60 60 6d 6f 62 69 6b 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 | ions=off``.``mobike``.enable.MOB |
123e40 | 49 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 | IKE.Support..MOBIKE.is.only.avai |
123e60 | 6c 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 3a 00 60 60 6d 6f 64 65 60 60 20 2d 20 6d 6f 64 65 | lable.for.IKEv2:.``mode``.-.mode |
123e80 | 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 | .for.authentication.between.VyOS |
123ea0 | 20 61 6e 64 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6d 6f 64 65 60 60 20 49 4b 45 76 31 | .and.remote.peer:.``mode``.IKEv1 |
123ec0 | 20 50 68 61 73 65 20 31 20 4d 6f 64 65 20 53 65 6c 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 64 65 60 | .Phase.1.Mode.Selection:.``mode` |
123ee0 | 60 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 | `.the.type.of.the.connection:.`` |
123f00 | 6d 6f 6e 69 74 6f 72 60 60 20 2d 20 50 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 20 61 6c | monitor``.-.Passively.monitor.al |
123f20 | 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 66 72 65 71 75 65 6e 63 79 2f 63 68 61 6e 6e | l.packets.on.the.frequency/chann |
123f40 | 65 6c 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 | el.``multi-user-beamformee``.-.S |
123f60 | 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 | upport.for.operation.as.single.u |
123f80 | 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d | ser.beamformer.``multi-user-beam |
123fa0 | 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e | former``.-.Support.for.operation |
123fc0 | 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 6e 60 60 | .as.single.user.beamformer.``n`` |
123fe0 | 20 2d 20 38 30 32 2e 31 31 6e 20 2d 20 36 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 6e 61 6d | .-.802.11n.-.600.Mbits/sec.``nam |
124000 | 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d | e``.is.used.for.the.VyOS.CLI.com |
124020 | 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 69 73 20 6b 65 79 2e 20 54 68 69 73 20 | mand.to.identify.this.key..This. |
124040 | 6b 65 79 20 60 60 6e 61 6d 65 60 60 20 69 73 20 74 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 | key.``name``.is.then.used.in.the |
124060 | 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 72 65 66 65 72 65 6e 63 65 20 | .CLI.configuration.to.reference. |
124080 | 74 68 65 20 6b 65 79 20 69 6e 73 74 61 6e 63 65 2e 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e | the.key.instance..``net.ipv4.con |
1240a0 | 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 | f.all.accept_redirects``.``net.i |
1240c0 | 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 | pv4.conf.all.accept_source_route |
1240e0 | 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 6c 6f 67 5f 6d 61 72 74 69 | ``.``net.ipv4.conf.all.log_marti |
124100 | 61 6e 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 72 70 5f 66 69 6c | ans``.``net.ipv4.conf.all.rp_fil |
124120 | 74 65 72 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 73 65 6e 64 5f 72 | ter``.``net.ipv4.conf.all.send_r |
124140 | 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 69 63 6d 70 5f 65 63 68 6f 5f | edirects``.``net.ipv4.icmp_echo_ |
124160 | 69 67 6e 6f 72 65 5f 62 72 6f 61 64 63 61 73 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 | ignore_broadcasts``.``net.ipv4.t |
124180 | 63 70 5f 72 66 63 31 33 33 37 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 63 70 5f 73 79 6e 63 | cp_rfc1337``.``net.ipv4.tcp_sync |
1241a0 | 6f 6f 6b 69 65 73 60 60 00 60 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 | ookies``.``net.ipv6.conf.all.acc |
1241c0 | 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e | ept_redirects``.``net.ipv6.conf. |
1241e0 | 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 6f 2d 61 | all.accept_source_route``.``no-a |
124200 | 64 76 65 72 74 69 73 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c | dvertise``.-.................Wel |
124220 | 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 41 44 56 | l-known.communities.value.NO_ADV |
124240 | 45 52 54 49 53 45 20 30 78 46 46 46 46 46 46 30 32 00 60 60 6e 6f 2d 65 78 70 6f 72 74 60 60 20 | ERTISE.0xFFFFFF02.``no-export``. |
124260 | 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 | -....................Well-known. |
124280 | 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 20 30 78 46 46 | communities.value.NO_EXPORT.0xFF |
1242a0 | 46 46 46 46 30 31 00 60 60 6e 6f 2d 6c 6c 67 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 | FFFF01.``no-llgr``.-............ |
1242c0 | 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 | ..........Well-known.communities |
1242e0 | 20 76 61 6c 75 65 20 4e 4f 5f 4c 4c 47 52 20 30 78 46 46 46 46 30 30 30 37 00 60 60 6e 6f 2d 70 | .value.NO_LLGR.0xFFFF0007.``no-p |
124300 | 65 65 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c | eer``.-......................Wel |
124320 | 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 50 45 45 52 | l-known.communities.value.NOPEER |
124340 | 20 30 78 46 46 46 46 46 46 30 34 00 60 60 6e 6f 60 60 20 64 69 73 61 62 6c 65 20 72 65 6d 6f 74 | .0xFFFFFF04.``no``.disable.remot |
124360 | 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 6f 6e 20 64 75 72 69 6e 67 20 61 | e.host.re-authenticaton.during.a |
124380 | 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 60 6e 6f 6e 65 60 60 20 2d 20 45 78 65 63 75 74 69 6f | n.IKE.rekey;.``none``.-.Executio |
1243a0 | 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 00 60 60 6e 6f 6e 65 60 60 20 2d | n.interval.in.minutes.``none``.- |
1243c0 | 20 6c 6f 61 64 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 68 69 63 | .loads.the.connection.only,.whic |
1243e0 | 68 20 74 68 65 6e 20 63 61 6e 20 62 65 20 6d 61 6e 75 61 6c 6c 79 20 69 6e 69 74 69 61 74 65 64 | h.then.can.be.manually.initiated |
124400 | 20 6f 72 20 75 73 65 64 20 61 73 20 61 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 6e 66 69 67 75 72 | .or.used.as.a.responder.configur |
124420 | 61 74 69 6f 6e 2e 00 60 60 6e 6f 6e 65 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 6e 6f | ation..``none``.set.action.to.no |
124440 | 6e 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 6e 6f 73 65 6c 65 63 74 60 60 20 6d 61 72 6b 73 | ne.(default);.``noselect``.marks |
124460 | 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 75 6e 75 73 65 64 2c 20 65 78 63 65 70 74 20 66 6f | .the.server.as.unused,.except.fo |
124480 | 72 20 64 69 73 70 6c 61 79 20 70 75 72 70 6f 73 65 73 2e 20 54 68 65 20 73 65 72 76 65 72 20 69 | r.display.purposes..The.server.i |
1244a0 | 73 20 64 69 73 63 61 72 64 65 64 20 62 79 20 74 68 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6c 67 | s.discarded.by.the.selection.alg |
1244c0 | 6f 72 69 74 68 6d 2e 00 60 60 6e 74 73 60 60 20 65 6e 61 62 6c 65 73 20 4e 65 74 77 6f 72 6b 20 | orithm..``nts``.enables.Network. |
1244e0 | 54 69 6d 65 20 53 65 63 75 72 69 74 79 20 28 4e 54 53 29 20 66 6f 72 20 74 68 65 20 73 65 72 76 | Time.Security.(NTS).for.the.serv |
124500 | 65 72 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 31 35 60 00 60 | er.as.specified.in.:rfc:`8915`.` |
124520 | 60 6f 70 74 69 6f 6e 73 60 60 00 60 60 6f 73 70 66 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 | `options``.``ospf``.-.Open.Short |
124540 | 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 4f 53 50 46 76 32 29 00 60 60 6f 73 70 66 76 33 | est.Path.First.(OSPFv2).``ospfv3 |
124560 | 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 49 | ``.-.Open.Shortest.Path.First.(I |
124580 | 50 76 36 29 20 28 4f 53 50 46 76 33 29 00 60 60 6f 75 74 60 60 3a 20 52 75 6c 65 73 65 74 20 66 | Pv6).(OSPFv3).``out``:.Ruleset.f |
1245a0 | 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 6e 20 6f 75 74 62 6f | or.forwarded.packets.on.an.outbo |
1245c0 | 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 6c | und.interface.``passphrase``.-.l |
1245e0 | 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 72 61 73 65 00 60 60 70 61 | ocal.private.key.passphrase.``pa |
124600 | 73 73 70 68 72 61 73 65 60 60 20 2d 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 72 | ssphrase``.-.private.key.passphr |
124620 | 61 73 65 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 61 73 73 77 6f 72 64 60 60 20 2d 20 70 | ase,.if.needed..``password``.-.p |
124640 | 61 73 73 70 68 72 61 73 65 20 70 72 69 76 61 74 65 20 6b 65 79 2c 20 69 66 20 6e 65 65 64 65 64 | assphrase.private.key,.if.needed |
124660 | 2e 00 60 60 70 65 65 72 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 | ..``peer``.is.used.for.the.VyOS. |
124680 | 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 | CLI.command.to.identify.the.Wire |
1246a0 | 47 75 61 72 64 20 70 65 65 72 20 77 68 65 72 65 20 74 68 69 73 20 73 65 63 72 65 64 20 69 73 20 | Guard.peer.where.this.secred.is. |
1246c0 | 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 70 65 72 69 6f 64 60 60 3a 20 54 69 6d 65 20 77 69 6e | to.be.used..``period``:.Time.win |
1246e0 | 64 6f 77 20 66 6f 72 20 72 61 74 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 50 6f 73 73 69 62 | dow.for.rate.calculation..Possib |
124700 | 6c 65 20 76 61 6c 75 65 73 3a 20 60 60 73 65 63 6f 6e 64 60 60 20 28 6f 6e 65 20 73 65 63 6f 6e | le.values:.``second``.(one.secon |
124720 | 64 29 2c 20 60 60 6d 69 6e 75 74 65 60 60 20 28 6f 6e 65 20 6d 69 6e 75 74 65 29 2c 20 60 60 68 | d),.``minute``.(one.minute),.``h |
124740 | 6f 75 72 60 60 20 28 6f 6e 65 20 68 6f 75 72 29 2e 20 44 65 66 61 75 6c 74 20 69 73 20 60 60 73 | our``.(one.hour)..Default.is.``s |
124760 | 65 63 6f 6e 64 60 60 2e 00 60 60 70 66 73 60 60 20 77 68 65 74 68 65 72 20 50 65 72 66 65 63 74 | econd``..``pfs``.whether.Perfect |
124780 | 20 46 6f 72 77 61 72 64 20 53 65 63 72 65 63 79 20 6f 66 20 6b 65 79 73 20 69 73 20 64 65 73 69 | .Forward.Secrecy.of.keys.is.desi |
1247a0 | 72 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 27 73 20 6b 65 79 69 6e 67 20 63 | red.on.the.connection's.keying.c |
1247c0 | 68 61 6e 6e 65 6c 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c | hannel.and.defines.a.Diffie-Hell |
1247e0 | 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 3a 00 60 60 70 6f 6f 6c 60 60 20 6d 6f 62 69 | man.group.for.PFS:.``pool``.mobi |
124800 | 6c 69 7a 65 73 20 70 65 72 73 69 73 74 65 6e 74 20 63 6c 69 65 6e 74 20 6d 6f 64 65 20 61 73 73 | lizes.persistent.client.mode.ass |
124820 | 6f 63 69 61 74 69 6f 6e 20 77 69 74 68 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 | ociation.with.a.number.of.remote |
124840 | 20 73 65 72 76 65 72 73 2e 00 60 60 70 6f 72 74 60 60 20 2d 20 64 65 66 69 6e 65 20 70 6f 72 74 | .servers..``port``.-.define.port |
124860 | 2e 20 48 61 76 65 20 65 66 66 65 63 74 20 6f 6e 6c 79 20 77 68 65 6e 20 75 73 65 64 20 74 6f 67 | ..Have.effect.only.when.used.tog |
124880 | 65 74 68 65 72 20 77 69 74 68 20 60 60 70 72 65 66 69 78 60 60 3b 00 60 60 70 72 65 2d 73 68 61 | ether.with.``prefix``;.``pre-sha |
1248a0 | 72 65 64 2d 73 65 63 72 65 74 60 60 20 2d 20 75 73 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 | red-secret``.-.use.predefined.sh |
1248c0 | 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 65 3b 00 60 60 70 72 65 66 65 72 60 60 20 6d | ared.secret.phrase;.``prefer``.m |
1248e0 | 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 70 72 65 66 65 72 72 65 64 2e 20 41 6c | arks.the.server.as.preferred..Al |
124900 | 6c 20 6f 74 68 65 72 20 74 68 69 6e 67 73 20 62 65 69 6e 67 20 65 71 75 61 6c 2c 20 74 68 69 73 | l.other.things.being.equal,.this |
124920 | 20 68 6f 73 74 20 77 69 6c 6c 20 62 65 20 63 68 6f 73 65 6e 20 66 6f 72 20 73 79 6e 63 68 72 6f | .host.will.be.chosen.for.synchro |
124940 | 6e 69 7a 61 74 69 6f 6e 20 61 6d 6f 6e 67 20 61 20 73 65 74 20 6f 66 20 63 6f 72 72 65 63 74 6c | nization.among.a.set.of.correctl |
124960 | 79 20 6f 70 65 72 61 74 69 6e 67 20 68 6f 73 74 73 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 | y.operating.hosts..``prefix``.-. |
124980 | 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 6c 6f 63 61 6c 20 73 69 64 65 2e 00 60 60 70 72 65 66 | IP.network.at.local.side..``pref |
1249a0 | 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 72 65 6d 6f 74 65 20 73 69 64 65 | ix``.-.IP.network.at.remote.side |
1249c0 | 2e 00 60 60 70 72 66 60 60 20 70 73 65 75 64 6f 2d 72 61 6e 64 6f 6d 20 66 75 6e 63 74 69 6f 6e | ..``prf``.pseudo-random.function |
1249e0 | 2e 00 60 60 70 72 69 6f 72 69 74 79 60 60 20 2d 20 41 64 64 20 70 72 69 6f 72 69 74 79 20 66 6f | ..``priority``.-.Add.priority.fo |
124a00 | 72 20 70 6f 6c 69 63 79 2d 62 61 73 65 64 20 49 50 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 | r.policy-based.IPSec.VPN.tunnels |
124a20 | 28 6c 6f 77 65 73 74 20 76 61 6c 75 65 20 6d 6f 72 65 20 70 72 65 66 65 72 61 62 6c 65 29 00 60 | (lowest.value.more.preferable).` |
124a40 | 60 70 72 6f 63 65 73 73 6f 72 2e 6d 61 78 5f 63 73 74 61 74 65 3d 31 60 60 20 4c 69 6d 69 74 20 | `processor.max_cstate=1``.Limit. |
124a60 | 70 72 6f 63 65 73 73 6f 72 20 74 6f 20 6d 61 78 69 6d 75 6d 20 43 2d 73 74 61 74 65 20 31 00 60 | processor.to.maximum.C-state.1.` |
124a80 | 60 70 72 6f 70 6f 73 61 6c 60 60 20 45 53 50 2d 67 72 6f 75 70 20 70 72 6f 70 6f 73 61 6c 20 77 | `proposal``.ESP-group.proposal.w |
124aa0 | 69 74 68 20 6e 75 6d 62 65 72 20 3c 31 2d 36 35 35 33 35 3e 3a 00 60 60 70 72 6f 70 6f 73 61 6c | ith.number.<1-65535>:.``proposal |
124ac0 | 60 60 20 74 68 65 20 6c 69 73 74 20 6f 66 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 74 68 65 | ``.the.list.of.proposals.and.the |
124ae0 | 69 72 20 70 61 72 61 6d 65 74 65 72 73 3a 00 60 60 70 72 6f 74 6f 63 6f 6c 60 60 20 2d 20 64 65 | ir.parameters:.``protocol``.-.de |
124b00 | 66 69 6e 65 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 | fine.the.protocol.for.match.traf |
124b20 | 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 | fic,.which.should.be.encrypted.a |
124b40 | 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 70 73 6b 60 60 20 2d 20 | nd.send.to.this.peer;.``psk``.-. |
124b60 | 50 72 65 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 6e 61 6d 65 3a 00 60 60 71 75 65 | Preshared.secret.key.name:.``que |
124b80 | 75 65 60 60 3a 20 45 6e 71 75 65 75 65 20 70 61 63 6b 65 74 20 74 6f 20 75 73 65 72 73 70 61 63 | ue``:.Enqueue.packet.to.userspac |
124ba0 | 65 2e 00 60 60 72 61 74 65 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 | e..``rate``:.Number.of.packets.. |
124bc0 | 44 65 66 61 75 6c 74 20 35 2e 00 60 60 72 65 6a 65 63 74 60 60 3a 20 72 65 6a 65 63 74 20 74 68 | Default.5..``reject``:.reject.th |
124be0 | 65 20 70 61 63 6b 65 74 2e 00 60 60 72 65 6d 6f 74 65 2d 61 64 64 72 65 73 73 60 60 20 2d 20 72 | e.packet..``remote-address``.-.r |
124c00 | 65 6d 6f 74 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 | emote.IP.address.or.hostname.for |
124c20 | 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 | .IPSec.connection..IPv4.or.IPv6. |
124c40 | 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 | address.is.used.when.a.peer.has. |
124c60 | 61 20 70 75 62 6c 69 63 20 73 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 73 2e 20 48 6f 73 74 | a.public.static.IP.address..Host |
124c80 | 6e 61 6d 65 20 69 73 20 61 20 44 4e 53 20 6e 61 6d 65 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 | name.is.a.DNS.name.which.could.b |
124ca0 | 65 20 75 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 | e.used.when.a.peer.has.a.public. |
124cc0 | 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 44 4e 53 20 6e 61 6d 65 2c 20 62 75 74 20 61 6e 20 | IP.address.and.DNS.name,.but.an. |
124ce0 | 49 50 20 61 64 64 72 65 73 73 20 63 6f 75 6c 64 20 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d | IP.address.could.be.changed.from |
124d00 | 20 74 69 6d 65 20 74 6f 20 74 69 6d 65 2e 00 60 60 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 64 | .time.to.time..``remote-id``.-.d |
124d20 | 65 66 69 6e 65 20 61 6e 20 49 44 20 66 6f 72 20 72 65 6d 6f 74 65 20 70 65 65 72 2c 20 69 6e 73 | efine.an.ID.for.remote.peer,.ins |
124d40 | 74 65 61 64 20 6f 66 20 75 73 69 6e 67 20 70 65 65 72 20 6e 61 6d 65 20 6f 72 20 61 64 64 72 65 | tead.of.using.peer.name.or.addre |
124d60 | 73 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 | ss..Useful.in.case.if.the.remote |
124d80 | 20 70 65 65 72 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 20 6f 72 20 69 66 20 60 60 6d 6f 64 65 | .peer.is.behind.NAT.or.if.``mode |
124da0 | 20 78 35 30 39 60 60 20 69 73 20 75 73 65 64 3b 00 60 60 72 65 6d 6f 74 65 2d 6b 65 79 60 60 20 | .x509``.is.used;.``remote-key``. |
124dc0 | 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 72 65 6d 6f | -.name.of.PKI.key-pair.with.remo |
124de0 | 74 65 20 70 75 62 6c 69 63 20 6b 65 79 00 60 60 72 65 6d 6f 74 65 60 60 20 2d 20 64 65 66 69 6e | te.public.key.``remote``.-.defin |
124e00 | 65 20 74 68 65 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 6d 61 74 | e.the.remote.destination.for.mat |
124e20 | 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 | ch.traffic,.which.should.be.encr |
124e40 | 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 72 | ypted.and.send.to.this.peer:.``r |
124e60 | 65 70 6c 61 79 2d 77 69 6e 64 6f 77 60 60 20 2d 20 49 50 73 65 63 20 72 65 70 6c 61 79 20 77 69 | eplay-window``.-.IPsec.replay.wi |
124e80 | 6e 64 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 6f 72 20 74 68 69 73 20 43 48 49 4c 44 | ndow.to.configure.for.this.CHILD |
124ea0 | 5f 53 41 20 28 64 65 66 61 75 6c 74 3a 20 33 32 29 2c 20 61 20 76 61 6c 75 65 20 6f 66 20 30 20 | _SA.(default:.32),.a.value.of.0. |
124ec0 | 64 69 73 61 62 6c 65 73 20 49 50 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e | disables.IPsec.replay.protection |
124ee0 | 00 60 60 72 65 71 2d 73 73 6c 2d 73 6e 69 60 60 20 53 53 4c 20 53 65 72 76 65 72 20 4e 61 6d 65 | .``req-ssl-sni``.SSL.Server.Name |
124f00 | 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 72 65 71 75 65 73 74 20 6d 61 74 63 68 00 | .Indication.(SNI).request.match. |
124f20 | 60 60 72 65 73 70 2d 74 69 6d 65 60 60 3a 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 65 73 70 6f | ``resp-time``:.the.maximum.respo |
124f40 | 6e 73 65 20 74 69 6d 65 20 66 6f 72 20 70 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 52 61 | nse.time.for.ping.in.seconds..Ra |
124f60 | 6e 67 65 20 31 2e 2e 2e 33 30 2c 20 64 65 66 61 75 6c 74 20 35 00 60 60 72 65 73 70 6f 6e 64 60 | nge.1...30,.default.5.``respond` |
124f80 | 60 20 2d 20 64 6f 65 73 20 6e 6f 74 20 74 72 79 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 63 | `.-.does.not.try.to.initiate.a.c |
124fa0 | 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 6e 20 74 | onnection.to.a.remote.peer..In.t |
124fc0 | 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 49 50 53 65 63 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c | his.mode,.the.IPSec.session.will |
124fe0 | 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f 6e 6c 79 20 61 66 74 65 72 20 69 6e 69 74 69 | .be.established.only.after.initi |
125000 | 61 74 69 6f 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 43 6f 75 6c 64 20 | ation.from.a.remote.peer..Could. |
125020 | 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 72 65 20 69 73 20 6e 6f 20 64 69 72 65 63 | be.useful.when.there.is.no.direc |
125040 | 74 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 74 6f 20 74 68 65 20 70 65 65 72 20 64 75 65 20 74 | t.connectivity.to.the.peer.due.t |
125060 | 6f 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 | o.firewall.or.NAT.in.the.middle. |
125080 | 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 | of.the.local.and.remote.side..`` |
1250a0 | 72 65 73 74 61 72 74 60 60 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 65 73 20 74 6f 20 72 | restart``.immediately.tries.to.r |
1250c0 | 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 75 6e 64 65 72 20 61 | e-negotiate.the.CHILD_SA.under.a |
1250e0 | 20 66 72 65 73 68 20 49 4b 45 5f 53 41 3b 00 60 60 72 65 73 74 61 72 74 60 60 20 73 65 74 20 61 | .fresh.IKE_SA;.``restart``.set.a |
125100 | 63 74 69 6f 6e 20 74 6f 20 72 65 73 74 61 72 74 3b 00 60 60 72 65 74 75 72 6e 60 60 3a 20 52 65 | ction.to.restart;.``return``:.Re |
125120 | 74 75 72 6e 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 68 61 69 6e 20 61 6e 64 20 | turn.from.the.current.chain.and. |
125140 | 63 6f 6e 74 69 6e 75 65 20 61 74 20 74 68 65 20 6e 65 78 74 20 72 75 6c 65 20 6f 66 20 74 68 65 | continue.at.the.next.rule.of.the |
125160 | 20 6c 61 73 74 20 63 68 61 69 6e 2e 00 60 60 72 69 70 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 | .last.chain..``rip``.-.Routing.I |
125180 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 52 49 50 29 00 60 60 72 69 70 6e | nformation.Protocol.(RIP).``ripn |
1251a0 | 67 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 | g``.-.Routing.Information.Protoc |
1251c0 | 6f 6c 20 6e 65 78 74 2d 67 65 6e 65 72 61 74 69 6f 6e 20 28 49 50 76 36 29 20 28 52 49 50 6e 67 | ol.next-generation.(IPv6).(RIPng |
1251e0 | 29 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 2d 20 52 6f 75 6e 64 2d 72 6f 62 69 6e 20 | ).``round-robin``.-.Round-robin. |
125200 | 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 70 61 63 6b 65 74 73 20 69 6e 20 73 65 71 75 | policy:.Transmit.packets.in.sequ |
125220 | 65 6e 74 69 61 6c 20 6f 72 64 65 72 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 61 76 61 69 | ential.order.from.the.first.avai |
125240 | 6c 61 62 6c 65 20 73 6c 61 76 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 6c 61 73 74 2e 00 60 60 | lable.slave.through.the.last..`` |
125260 | 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 | round-robin``.Distributes.reques |
125280 | 74 73 20 69 6e 20 61 20 63 69 72 63 75 6c 61 72 20 6d 61 6e 6e 65 72 2c 20 73 65 71 75 65 6e 74 | ts.in.a.circular.manner,.sequent |
1252a0 | 69 61 6c 6c 79 20 73 65 6e 64 69 6e 67 20 65 61 63 68 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 | ially.sending.each.request.to.th |
1252c0 | 65 20 6e 65 78 74 20 73 65 72 76 65 72 20 69 6e 20 6c 69 6e 65 00 60 60 72 6f 75 74 65 2d 66 69 | e.next.server.in.line.``route-fi |
1252e0 | 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 34 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e | lter-translated-v4``.-...Well-kn |
125300 | 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 | own.communities.value.ROUTE_FILT |
125320 | 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 34 20 30 78 46 46 46 46 30 30 30 32 00 60 60 72 6f | ER_TRANSLATED_v4.0xFFFF0002.``ro |
125340 | 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 36 60 60 20 2d 20 20 20 57 | ute-filter-translated-v6``.-...W |
125360 | 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 | ell-known.communities.value.ROUT |
125380 | 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 36 20 30 78 46 46 46 46 30 30 30 | E_FILTER_TRANSLATED_v6.0xFFFF000 |
1253a0 | 34 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 34 60 60 20 2d 20 20 20 20 20 20 20 20 20 | 4.``route-filter-v4``.-......... |
1253c0 | 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 | .....Well-known.communities.valu |
1253e0 | 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 34 20 30 78 46 46 46 46 30 30 30 33 00 60 60 72 | e.ROUTE_FILTER_v4.0xFFFF0003.``r |
125400 | 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 36 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | oute-filter-v6``.-.............. |
125420 | 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 | Well-known.communities.value.ROU |
125440 | 54 45 5f 46 49 4c 54 45 52 5f 76 36 20 30 78 46 46 46 46 30 30 30 35 00 60 60 72 73 61 2d 6b 65 | TE_FILTER_v6.0xFFFF0005.``rsa-ke |
125460 | 79 2d 6e 61 6d 65 60 60 20 2d 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 20 66 6f 72 20 61 75 | y-name``.-.shared.RSA.key.for.au |
125480 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 | thentication..The.key.must.be.de |
1254a0 | 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 | fined.in.the.``set.vpn.rsa-keys` |
1254c0 | 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 72 73 61 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 | `.section;.``rsa``.-.options.for |
1254e0 | 20 52 53 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 72 73 61 60 | .RSA.authentication.mode:.``rsa` |
125500 | 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 2e 00 60 | `.-.use.simple.shared.RSA.key..` |
125520 | 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b | `rsa``.-.use.simple.shared.RSA.k |
125540 | 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 | ey..The.key.must.be.defined.in.t |
125560 | 68 65 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b | he.``set.vpn.rsa-keys``.section; |
125580 | 00 60 60 73 65 63 72 65 74 60 60 20 2d 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 | .``secret``.-.predefined.shared. |
1255a0 | 73 65 63 72 65 74 2e 20 55 73 65 64 20 69 66 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 6f 64 65 20 | secret..Used.if.configured.mode. |
1255c0 | 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 3b 00 60 60 73 65 74 20 66 69 72 | ``pre-shared-secret``;.``set.fir |
1255e0 | 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 | ewall.bridge.forward.filter....` |
125600 | 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 | `..``set.firewall.ipv4.forward.f |
125620 | 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 | ilter....``..``set.firewall.ipv4 |
125640 | 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 | .input.filter....``..``set.firew |
125660 | 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 | all.ipv4.output.filter....``..`` |
125680 | 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 | set.firewall.ipv6.forward.filter |
1256a0 | 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 | ....``..``set.firewall.ipv6.inpu |
1256c0 | 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 | t.filter....``..``set.firewall.i |
1256e0 | 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 69 6e 67 6c | pv6.output.filter....``..``singl |
125700 | 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f | e-user-beamformee``.-.Support.fo |
125720 | 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 | r.operation.as.single.user.beamf |
125740 | 6f 72 6d 65 65 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 | ormee.``single-user-beamformer`` |
125760 | 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 | .-.Support.for.operation.as.sing |
125780 | 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 73 6f 6e 6d 70 60 60 20 2d 20 4c | le.user.beamformer.``sonmp``.-.L |
1257a0 | 69 73 74 65 6e 20 66 6f 72 20 53 4f 4e 4d 50 20 66 6f 72 20 4e 6f 72 74 65 6c 20 72 6f 75 74 65 | isten.for.SONMP.for.Nortel.route |
1257c0 | 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 44 | rs/switches.``source-address``.D |
1257e0 | 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | istributes.requests.based.on.the |
125800 | 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 | .source.IP.address.of.the.client |
125820 | 00 60 60 73 73 68 2d 64 73 73 60 60 00 60 60 73 73 68 2d 65 64 32 35 35 31 39 60 60 00 60 60 73 | .``ssh-dss``.``ssh-ed25519``.``s |
125840 | 73 68 2d 72 73 61 20 41 41 41 41 42 33 4e 7a 61 43 31 79 63 32 45 41 41 41 41 42 41 41 2e 2e 2e | sh-rsa.AAAAB3NzaC1yc2EAAAABAA... |
125860 | 56 42 44 35 6c 4b 77 45 57 42 20 75 73 65 72 6e 61 6d 65 40 68 6f 73 74 2e 65 78 61 6d 70 6c 65 | VBD5lKwEWB.username@host.example |
125880 | 2e 63 6f 6d 60 60 00 60 60 73 73 68 2d 72 73 61 60 60 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 2d | .com``.``ssh-rsa``.``ssl-fc-sni- |
1258a0 | 65 6e 64 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e 64 20 6d 61 74 63 68 20 65 6e 64 20 6f 66 20 | end``.SSL.frontend.match.end.of. |
1258c0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 00 60 60 73 73 6c 2d 66 63 2d | connection.Server.Name.``ssl-fc- |
1258e0 | 73 6e 69 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 | sni``.SSL.frontend.connection.Se |
125900 | 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 6d 61 74 63 68 00 60 60 73 74 61 | rver.Name.Indication.match.``sta |
125920 | 72 74 60 60 20 74 72 69 65 73 20 74 6f 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 72 65 2d 63 72 65 | rt``.tries.to.immediately.re-cre |
125940 | 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b 00 60 60 73 74 61 74 69 63 60 60 20 2d 20 53 | ate.the.CHILD_SA;.``static``.-.S |
125960 | 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 00 60 60 73 74 | tatically.configured.routes.``st |
125980 | 61 74 69 6f 6e 60 60 20 2d 20 43 6f 6e 6e 65 63 74 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 61 63 | ation``.-.Connects.to.another.ac |
1259a0 | 63 65 73 73 20 70 6f 69 6e 74 00 60 60 73 79 6e 70 72 6f 78 79 60 60 3a 20 73 79 6e 70 72 6f 78 | cess.point.``synproxy``:.synprox |
1259c0 | 79 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 73 79 73 63 74 6c 60 60 20 69 73 20 75 73 65 64 | y.the.packet..``sysctl``.is.used |
1259e0 | 20 74 6f 20 6d 6f 64 69 66 79 20 6b 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 | .to.modify.kernel.parameters.at. |
125a00 | 72 75 6e 74 69 6d 65 2e 20 20 54 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 | runtime...The.parameters.availab |
125a20 | 6c 65 20 61 72 65 20 74 68 6f 73 65 20 6c 69 73 74 65 64 20 75 6e 64 65 72 20 2f 70 72 6f 63 2f | le.are.those.listed.under./proc/ |
125a40 | 73 79 73 2f 2e 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 | sys/..``table.10``.Routing.table |
125a60 | 20 75 73 65 64 20 66 6f 72 20 49 53 50 31 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 | .used.for.ISP1.``table.10``.Rout |
125a80 | 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 30 20 28 31 39 32 2e | ing.table.used.for.VLAN.10.(192. |
125aa0 | 31 36 38 2e 31 38 38 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 | 168.188.0/24).``table.11``.Routi |
125ac0 | 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 50 32 00 60 60 74 61 62 6c 65 20 31 | ng.table.used.for.ISP2.``table.1 |
125ae0 | 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e 20 | 1``.Routing.table.used.for.VLAN. |
125b00 | 31 31 20 28 31 39 32 2e 31 36 38 2e 31 38 39 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 60 60 20 | 11.(192.168.189.0/24).``table``. |
125b20 | 2d 20 4e 6f 6e 2d 6d 61 69 6e 20 4b 65 72 6e 65 6c 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 00 | -.Non-main.Kernel.Routing.Table. |
125b40 | 60 60 74 61 72 67 65 74 60 60 3a 20 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 62 65 20 73 65 6e | ``target``:.the.target.to.be.sen |
125b60 | 74 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 74 6f 2c 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 | t.ICMP.packets.to,.address.can.b |
125b80 | 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 00 60 60 | e.an.IPv4.address.or.hostname.`` |
125ba0 | 74 65 73 74 2d 73 63 72 69 70 74 60 60 3a 20 41 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 | test-script``:.A.user.defined.sc |
125bc0 | 72 69 70 74 20 6d 75 73 74 20 72 65 74 75 72 6e 20 30 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 | ript.must.return.0.to.be.conside |
125be0 | 72 65 64 20 73 75 63 63 65 73 73 66 75 6c 20 61 6e 64 20 6e 6f 6e 2d 7a 65 72 6f 20 74 6f 20 66 | red.successful.and.non-zero.to.f |
125c00 | 61 69 6c 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 2f 63 6f 6e | ail..Scripts.are.located.in./con |
125c20 | 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 74 | fig/scripts,.for.different.locat |
125c40 | 69 6f 6e 73 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 | ions.the.full.path.needs.to.be.p |
125c60 | 72 6f 76 69 64 65 64 00 60 60 74 68 72 65 73 68 6f 6c 64 60 60 3a 20 60 60 62 65 6c 6f 77 60 60 | rovided.``threshold``:.``below`` |
125c80 | 20 6f 72 20 60 60 61 62 6f 76 65 60 60 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 74 65 | .or.``above``.the.specified.rate |
125ca0 | 20 6c 69 6d 69 74 2e 00 60 60 74 68 72 6f 75 67 68 70 75 74 60 60 3a 20 41 20 73 65 72 76 65 72 | .limit..``throughput``:.A.server |
125cc0 | 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 69 6d 70 72 6f 76 69 6e 67 20 6e 65 | .profile.focused.on.improving.ne |
125ce0 | 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 70 75 74 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 66 | twork.throughput..This.profile.f |
125d00 | 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 76 | avors.performance.over.power.sav |
125d20 | 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 60 | ings.by.setting.``intel_pstate`` |
125d40 | 20 61 6e 64 20 60 60 6d 61 78 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 60 60 20 61 6e 64 20 69 6e | .and.``max_perf_pct=100``.and.in |
125d60 | 63 72 65 61 73 69 6e 67 20 6b 65 72 6e 65 6c 20 6e 65 74 77 6f 72 6b 20 62 75 66 66 65 72 20 73 | creasing.kernel.network.buffer.s |
125d80 | 69 7a 65 73 2e 00 60 60 74 69 6d 65 6f 75 74 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d | izes..``timeout``.keep-alive.tim |
125da0 | 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 | eout.in.seconds.<2-86400>.(defau |
125dc0 | 6c 74 20 31 32 30 29 20 49 4b 45 76 31 20 6f 6e 6c 79 00 60 60 74 72 61 6e 73 6d 69 74 2d 6c 6f | lt.120).IKEv1.only.``transmit-lo |
125de0 | 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 70 74 69 76 65 20 74 72 61 6e 73 6d 69 74 | ad-balance``.-.Adaptive.transmit |
125e00 | 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 63 68 61 6e 6e 65 6c 20 62 6f 6e 64 69 6e 67 | .load.balancing:.channel.bonding |
125e20 | 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 | .that.does.not.require.any.speci |
125e40 | 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 2e 00 60 60 74 72 61 6e 73 70 6f 72 74 60 60 | al.switch.support..``transport`` |
125e60 | 20 74 72 61 6e 73 70 6f 72 74 20 6d 6f 64 65 3b 00 60 60 74 72 61 70 60 60 20 20 69 6e 73 74 61 | .transport.mode;.``trap``..insta |
125e80 | 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 | lls.a.trap.policy,.which.will.ca |
125ea0 | 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 | tch.matching.traffic.and.tries.t |
125ec0 | 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 74 75 6e 6e 65 6c 20 6f 6e 2d 64 65 6d | o.re-negotiate.the.tunnel.on-dem |
125ee0 | 61 6e 64 3b 00 60 60 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f | and;.``trap``.installs.a.trap.po |
125f00 | 6c 69 63 79 20 66 6f 72 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b 00 60 60 74 74 6c 2d 6c 69 6d | licy.for.the.CHILD_SA;.``ttl-lim |
125f20 | 69 74 60 60 3a 20 46 6f 72 20 74 68 65 20 55 44 50 20 54 54 4c 20 6c 69 6d 69 74 20 74 65 73 74 | it``:.For.the.UDP.TTL.limit.test |
125f40 | 20 74 68 65 20 68 6f 70 20 63 6f 75 6e 74 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 73 70 65 | .the.hop.count.limit.must.be.spe |
125f60 | 63 69 66 69 65 64 2e 20 54 68 65 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 | cified..The.limit.must.be.shorte |
125f80 | 72 20 74 68 61 6e 20 74 68 65 20 70 61 74 68 20 6c 65 6e 67 74 68 2c 20 61 6e 20 49 43 4d 50 20 | r.than.the.path.length,.an.ICMP. |
125fa0 | 74 69 6d 65 20 65 78 70 69 72 65 64 20 6d 65 73 73 61 67 65 20 69 73 20 6e 65 65 64 65 64 20 74 | time.expired.message.is.needed.t |
125fc0 | 6f 20 62 65 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 61 20 73 75 63 63 65 73 73 66 75 6c 20 74 | o.be.returned.for.a.successful.t |
125fe0 | 65 73 74 2e 20 64 65 66 61 75 6c 74 20 31 00 60 60 74 74 79 53 4e 60 60 20 2d 20 53 65 72 69 61 | est..default.1.``ttySN``.-.Seria |
126000 | 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 74 79 55 53 42 58 60 60 20 2d 20 55 53 42 20 | l.device.name.``ttyUSBX``.-.USB. |
126020 | 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 75 6e 6e 65 6c 60 60 20 2d 20 | Serial.device.name.``tunnel``.-. |
126040 | 64 65 66 69 6e 65 20 63 72 69 74 65 72 69 61 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 62 | define.criteria.for.traffic.to.b |
126060 | 65 20 6d 61 74 63 68 65 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6e 67 20 61 6e 64 20 73 65 6e | e.matched.for.encrypting.and.sen |
126080 | 64 20 69 74 20 74 6f 20 61 20 70 65 65 72 3a 00 60 60 74 75 6e 6e 65 6c 60 60 20 74 75 6e 6e 65 | d.it.to.a.peer:.``tunnel``.tunne |
1260a0 | 6c 20 6d 6f 64 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 74 79 70 65 60 60 3a 20 53 70 65 63 | l.mode.(default);.``type``:.Spec |
1260c0 | 69 66 79 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 65 73 74 2e 20 74 79 70 65 20 63 61 6e 20 62 | ify.the.type.of.test..type.can.b |
1260e0 | 65 20 70 69 6e 67 2c 20 74 74 6c 20 6f 72 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 | e.ping,.ttl.or.a.user.defined.sc |
126100 | 72 69 70 74 00 60 60 75 73 65 2d 78 35 30 39 2d 69 64 60 60 20 2d 20 75 73 65 20 6c 6f 63 61 6c | ript.``use-x509-id``.-.use.local |
126120 | 20 49 44 20 66 72 6f 6d 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 43 61 6e 6e 6f | .ID.from.x509.certificate..Canno |
126140 | 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 60 60 69 64 60 60 20 69 73 20 64 65 66 69 6e 65 64 | t.be.used.when.``id``.is.defined |
126160 | 3b 00 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 44 65 66 69 6e 65 73 20 | ;.``virtual-address``.-.Defines. |
126180 | 61 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 69 73 20 72 65 | a.virtual.IP.address.which.is.re |
1261a0 | 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 20 61 6e 64 20 6f 6e 65 | quested.by.the.initiator.and.one |
1261c0 | 20 6f 72 20 73 65 76 65 72 61 6c 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 | .or.several.IPv4.and/or.IPv6.add |
1261e0 | 72 65 73 73 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c | resses.are.assigned.from.multipl |
126200 | 65 20 70 6f 6f 6c 73 20 62 79 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 2e 00 60 60 76 69 72 74 | e.pools.by.the.responder..``virt |
126220 | 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 | ual-ip``.Allow.install.virtual-i |
126240 | 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 | p.addresses..Comma.separated.lis |
126260 | 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 | t.of.virtual.IPs.to.request.in.I |
126280 | 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 | KEv2.configuration.payloads.or.I |
1262a0 | 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 | KEv1.Mode.Config..The.wildcard.a |
1262c0 | 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 | ddresses.0.0.0.0.and.::.request. |
1262e0 | 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 | an.arbitrary.address,.specific.a |
126300 | 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 | ddresses.may.be.defined..The.res |
126320 | 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 | ponder.may.return.a.different.ad |
126340 | 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 00 60 | dress,.though,.or.none.at.all..` |
126360 | 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 73 20 74 6f 20 69 6e 73 74 61 6c 6c 20 | `virtual-ip``.Allows.to.install. |
126380 | 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 | virtual-ip.addresses..Comma.sepa |
1263a0 | 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 | rated.list.of.virtual.IPs.to.req |
1263c0 | 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c | uest.in.IKEv2.configuration.payl |
1263e0 | 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 | oads.or.IKEv1.Mode.Config..The.w |
126400 | 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a | ildcard.addresses.0.0.0.0.and.:: |
126420 | 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 | .request.an.arbitrary.address,.s |
126440 | 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 | pecific.addresses.may.be.defined |
126460 | 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 | ..The.responder.may.return.a.dif |
126480 | 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 | ferent.address,.though,.or.none. |
1264a0 | 61 74 20 61 6c 6c 2e 20 44 65 66 69 6e 65 20 74 68 65 20 60 60 76 69 72 74 75 61 6c 2d 61 64 64 | at.all..Define.the.``virtual-add |
1264c0 | 72 65 73 73 60 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 | ress``.option.to.configure.the.I |
1264e0 | 50 20 61 64 64 72 65 73 73 20 69 6e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 68 69 65 72 61 72 | P.address.in.site-to-site.hierar |
126500 | 63 68 79 2e 00 60 60 76 6e 63 60 60 20 2d 20 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 43 | chy..``vnc``.-.Virtual.Network.C |
126520 | 6f 6e 74 72 6f 6c 20 28 56 4e 43 29 00 60 60 76 74 69 60 60 20 2d 20 75 73 65 20 61 20 56 54 49 | ontrol.(VNC).``vti``.-.use.a.VTI |
126540 | 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f | .interface.for.traffic.encryptio |
126560 | 6e 2e 20 41 6e 79 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 73 65 | n..Any.traffic,.which.will.be.se |
126580 | 6e 64 20 74 6f 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 62 65 20 65 6e 63 72 | nd.to.VTI.interface.will.be.encr |
1265a0 | 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 20 55 73 69 | ypted.and.send.to.this.peer..Usi |
1265c0 | 6e 67 20 56 54 49 20 6d 61 6b 65 73 20 49 50 53 65 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ng.VTI.makes.IPSec.configuration |
1265e0 | 20 6d 75 63 68 20 66 6c 65 78 69 62 6c 65 20 61 6e 64 20 65 61 73 69 65 72 20 69 6e 20 63 6f 6d | .much.flexible.and.easier.in.com |
126600 | 70 6c 65 78 20 73 69 74 75 61 74 69 6f 6e 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 64 79 | plex.situation,.and.allows.to.dy |
126620 | 6e 61 6d 69 63 61 6c 6c 79 20 61 64 64 2f 64 65 6c 65 74 65 20 72 65 6d 6f 74 65 20 6e 65 74 77 | namically.add/delete.remote.netw |
126640 | 6f 72 6b 73 2c 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 61 20 70 65 65 72 2c 20 61 73 20 69 | orks,.reachable.via.a.peer,.as.i |
126660 | 6e 20 74 68 69 73 20 6d 6f 64 65 20 72 6f 75 74 65 72 20 64 6f 6e 27 74 20 6e 65 65 64 20 74 6f | n.this.mode.router.don't.need.to |
126680 | 20 63 72 65 61 74 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 53 41 2f 70 6f 6c 69 63 79 20 66 6f 72 | .create.additional.SA/policy.for |
1266a0 | 20 65 61 63 68 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 3a 00 60 60 78 35 30 39 60 60 20 2d | .each.remote.network:.``x509``.- |
1266c0 | 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 78 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | .options.for.x509.authentication |
1266e0 | 20 6d 6f 64 65 3a 00 60 60 78 35 30 39 60 60 20 2d 20 75 73 65 20 63 65 72 74 69 66 69 63 61 74 | .mode:.``x509``.-.use.certificat |
126700 | 65 73 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 | es.infrastructure.for.authentica |
126720 | 74 69 6f 6e 2e 00 60 60 78 6f 72 2d 68 61 73 68 60 60 20 2d 20 58 4f 52 20 70 6f 6c 69 63 79 3a | tion..``xor-hash``.-.XOR.policy: |
126740 | 20 54 72 61 6e 73 6d 69 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 | .Transmit.based.on.the.selected. |
126760 | 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 20 20 54 68 65 20 64 65 66 61 75 | transmit.hash.policy...The.defau |
126780 | 6c 74 20 70 6f 6c 69 63 79 20 69 73 20 61 20 73 69 6d 70 6c 65 20 5b 28 73 6f 75 72 63 65 20 4d | lt.policy.is.a.simple.[(source.M |
1267a0 | 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 27 64 20 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f | AC.address.XOR'd.with.destinatio |
1267c0 | 6e 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 | n.MAC.address.XOR.packet.type.ID |
1267e0 | 29 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 6e 74 5d 2e 20 41 6c 74 65 72 6e 61 74 65 | ).modulo.slave.count]..Alternate |
126800 | 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 62 65 20 73 65 6c 65 63 74 | .transmit.policies.may.be.select |
126820 | 65 64 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 | ed.via.the.:cfgcmd:`hash-policy` |
126840 | 20 6f 70 74 69 6f 6e 2c 20 64 65 73 63 72 69 62 65 64 20 62 65 6c 6f 77 2e 00 60 60 79 65 73 60 | .option,.described.below..``yes` |
126860 | 60 20 65 6e 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 | `.enable.remote.host.re-authenti |
126880 | 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 69 67 6e | cation.during.an.IKE.rekey;.`ign |
1268a0 | 6f 72 65 60 3a 20 4e 6f 20 63 6f 72 72 65 63 74 69 6f 6e 20 69 73 20 61 70 70 6c 69 65 64 20 74 | ore`:.No.correction.is.applied.t |
1268c0 | 6f 20 74 68 65 20 63 6c 6f 63 6b 20 66 6f 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 2e | o.the.clock.for.the.leap.second. |
1268e0 | 20 54 68 65 20 63 6c 6f 63 6b 20 77 69 6c 6c 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 6c 61 74 | .The.clock.will.be.corrected.lat |
126900 | 65 72 20 69 6e 20 6e 6f 72 6d 61 6c 20 6f 70 65 72 61 74 69 6f 6e 20 77 68 65 6e 20 6e 65 77 20 | er.in.normal.operation.when.new. |
126920 | 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 61 72 65 20 6d 61 64 65 20 61 6e 64 20 74 68 65 20 65 73 | measurements.are.made.and.the.es |
126940 | 74 69 6d 61 74 65 64 20 6f 66 66 73 65 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6f 6e 65 20 | timated.offset.includes.the.one. |
126960 | 73 65 63 6f 6e 64 20 65 72 72 6f 72 2e 00 60 73 6d 65 61 72 60 3a 20 57 68 65 6e 20 73 6d 65 61 | second.error..`smear`:.When.smea |
126980 | 72 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 20 6c 65 61 70 20 73 74 61 | ring.a.leap.second,.the.leap.sta |
1269a0 | 74 75 73 20 69 73 20 73 75 70 70 72 65 73 73 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 | tus.is.suppressed.on.the.server. |
1269c0 | 61 6e 64 20 74 68 65 20 73 65 72 76 65 64 20 74 69 6d 65 20 69 73 20 63 6f 72 72 65 63 74 65 64 | and.the.served.time.is.corrected |
1269e0 | 20 73 6c 6f 77 6c 79 20 62 79 20 73 6c 65 77 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 73 74 | .slowly.by.slewing.instead.of.st |
126a00 | 65 70 70 69 6e 67 2e 20 54 68 65 20 63 6c 69 65 6e 74 73 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 | epping..The.clients.do.not.need. |
126a20 | 61 6e 79 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 73 20 74 68 65 | any.special.configuration.as.the |
126a40 | 79 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 72 65 20 69 73 20 61 6e 79 20 6c 65 61 70 20 | y.do.not.know.there.is.any.leap. |
126a60 | 73 65 63 6f 6e 64 20 61 6e 64 20 74 68 65 79 20 66 6f 6c 6c 6f 77 20 74 68 65 20 73 65 72 76 65 | second.and.they.follow.the.serve |
126a80 | 72 20 74 69 6d 65 20 77 68 69 63 68 20 65 76 65 6e 74 75 61 6c 6c 79 20 62 72 69 6e 67 73 20 74 | r.time.which.eventually.brings.t |
126aa0 | 68 65 6d 20 62 61 63 6b 20 74 6f 20 55 54 43 2e 20 43 61 72 65 20 6d 75 73 74 20 62 65 20 74 61 | hem.back.to.UTC..Care.must.be.ta |
126ac0 | 6b 65 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 65 79 20 75 73 65 20 6f 6e 6c 79 20 4e 54 50 20 | ken.to.ensure.they.use.only.NTP. |
126ae0 | 73 65 72 76 65 72 73 20 77 68 69 63 68 20 73 6d 65 61 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 | servers.which.smear.the.leap.sec |
126b00 | 6f 6e 64 20 69 6e 20 65 78 61 63 74 6c 79 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 66 6f 72 20 | ond.in.exactly.the.same.way.for. |
126b20 | 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 00 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 | synchronisation..`source-address |
126b40 | 60 20 61 6e 64 20 60 73 6f 75 72 63 65 2d 69 6e 74 65 72 66 61 63 65 60 20 63 61 6e 20 6e 6f 74 | `.and.`source-interface`.can.not |
126b60 | 20 62 65 20 75 73 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 60 73 79 73 74 | .be.used.at.the.same.time..`syst |
126b80 | 65 6d 60 3a 20 57 68 65 6e 20 69 6e 73 65 72 74 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e | em`:.When.inserting.a.leap.secon |
126ba0 | 64 2c 20 74 68 65 20 6b 65 72 6e 65 6c 20 73 74 65 70 73 20 74 68 65 20 73 79 73 74 65 6d 20 63 | d,.the.kernel.steps.the.system.c |
126bc0 | 6c 6f 63 6b 20 62 61 63 6b 77 61 72 64 73 20 62 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 | lock.backwards.by.one.second.whe |
126be0 | 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 6f 20 30 30 3a 30 30 3a 30 30 20 55 54 43 | n.the.clock.gets.to.00:00:00.UTC |
126c00 | 2e 20 57 68 65 6e 20 64 65 6c 65 74 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 69 | ..When.deleting.a.leap.second,.i |
126c20 | 74 20 73 74 65 70 73 20 66 6f 72 77 61 72 64 20 62 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 | t.steps.forward.by.one.second.wh |
126c40 | 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 6f 20 32 33 3a 35 39 3a 35 39 20 55 54 | en.the.clock.gets.to.23:59:59.UT |
126c60 | 43 2e 00 60 74 69 6d 65 7a 6f 6e 65 60 3a 20 54 68 69 73 20 64 69 72 65 63 74 69 76 65 20 73 70 | C..`timezone`:.This.directive.sp |
126c80 | 65 63 69 66 69 65 73 20 61 20 74 69 6d 65 7a 6f 6e 65 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d | ecifies.a.timezone.in.the.system |
126ca0 | 20 74 69 6d 65 7a 6f 6e 65 20 64 61 74 61 62 61 73 65 20 77 68 69 63 68 20 63 68 72 6f 6e 79 64 | .timezone.database.which.chronyd |
126cc0 | 20 63 61 6e 20 75 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 77 69 6c 6c 20 | .can.use.to.determine.when.will. |
126ce0 | 74 68 65 20 6e 65 78 74 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 6f 63 63 75 72 20 61 6e 64 20 77 | the.next.leap.second.occur.and.w |
126d00 | 68 61 74 20 69 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 6f 66 66 73 65 74 20 62 65 74 77 65 65 | hat.is.the.current.offset.betwee |
126d20 | 6e 20 54 41 49 20 61 6e 64 20 55 54 43 2e 20 49 74 20 77 69 6c 6c 20 70 65 72 69 6f 64 69 63 61 | n.TAI.and.UTC..It.will.periodica |
126d40 | 6c 6c 79 20 63 68 65 63 6b 20 69 66 20 32 33 3a 35 39 3a 35 39 20 61 6e 64 20 32 33 3a 35 39 3a | lly.check.if.23:59:59.and.23:59: |
126d60 | 36 30 20 61 72 65 20 76 61 6c 69 64 20 74 69 6d 65 73 20 69 6e 20 74 68 65 20 74 69 6d 65 7a 6f | 60.are.valid.times.in.the.timezo |
126d80 | 6e 65 2e 20 54 68 69 73 20 6e 6f 72 6d 61 6c 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 74 68 65 | ne..This.normally.works.with.the |
126da0 | 20 72 69 67 68 74 2f 55 54 43 20 74 69 6d 65 7a 6f 6e 65 20 77 68 69 63 68 20 69 73 20 74 68 65 | .right/UTC.timezone.which.is.the |
126dc0 | 20 64 65 66 61 75 6c 74 00 60 74 77 65 65 74 20 62 79 20 45 76 69 6c 4d 6f 67 60 5f 2c 20 32 30 | .default.`tweet.by.EvilMog`_,.20 |
126de0 | 32 30 2d 30 32 2d 32 31 00 61 20 62 61 6e 64 77 69 64 74 68 20 74 65 73 74 20 6f 76 65 72 20 74 | 20-02-21.a.bandwidth.test.over.t |
126e00 | 68 65 20 56 50 4e 20 67 6f 74 20 74 68 65 73 65 20 72 65 73 75 6c 74 73 3a 00 61 20 62 6c 61 6e | he.VPN.got.these.results:.a.blan |
126e20 | 6b 20 69 6e 64 69 63 61 74 65 73 20 74 68 61 74 20 6e 6f 20 74 65 73 74 20 68 61 73 20 62 65 65 | k.indicates.that.no.test.has.bee |
126e40 | 6e 20 63 61 72 72 69 65 64 20 6f 75 74 00 61 65 73 32 35 36 20 45 6e 63 72 79 70 74 69 6f 6e 00 | n.carried.out.aes256.Encryption. |
126e60 | 61 6c 65 72 74 00 61 6c 6c 00 61 6e 20 52 44 20 2f 20 52 54 4c 49 53 54 00 61 6e 20 69 6e 74 65 | alert.all.an.RD./.RTLIST.an.inte |
126e80 | 72 66 61 63 65 20 77 69 74 68 20 61 20 6e 65 78 74 68 6f 70 00 61 6e 79 3a 20 61 6e 79 20 49 50 | rface.with.a.nexthop.any:.any.IP |
126ea0 | 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 61 6e 79 3a 20 61 6e 79 20 49 50 76 36 | .address.to.match..any:.any.IPv6 |
126ec0 | 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 61 75 74 68 00 61 75 74 68 6f 72 69 7a | .address.to.match..auth.authoriz |
126ee0 | 61 74 69 6f 6e 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 | ation.auto.-.interface.duplex.se |
126f00 | 74 74 69 6e 67 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 61 75 74 6f 20 2d 20 | tting.is.auto-negotiated.auto.-. |
126f20 | 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 | interface.speed.is.auto-negotiat |
126f40 | 65 64 00 62 67 70 64 00 62 6f 6e 64 69 6e 67 00 62 6f 6f 74 2d 73 69 7a 65 00 62 6f 6f 74 66 69 | ed.bgpd.bonding.boot-size.bootfi |
126f60 | 6c 65 2d 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 2c 20 66 69 6c 65 6e 61 6d 65 00 | le-name.bootfile-name,.filename. |
126f80 | 62 6f 6f 74 66 69 6c 65 2d 73 65 72 76 65 72 00 62 6f 6f 74 66 69 6c 65 2d 73 69 7a 65 00 62 72 | bootfile-server.bootfile-size.br |
126fa0 | 69 64 67 65 00 63 6c 69 65 6e 74 20 65 78 61 6d 70 6c 65 20 28 64 65 62 69 61 6e 20 39 29 00 63 | idge.client.example.(debian.9).c |
126fc0 | 6c 69 65 6e 74 2d 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 00 63 6c 6f 63 6b 00 63 6c 6f 63 6b 20 | lient-prefix-length.clock.clock. |
126fe0 | 64 61 65 6d 6f 6e 20 28 6e 6f 74 65 20 32 29 00 63 72 69 74 00 63 72 6f 6e 00 64 61 65 6d 6f 6e | daemon.(note.2).crit.cron.daemon |
127000 | 00 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 | .ddclient_.has.another.way.to.de |
127020 | 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 | termine.the.WAN.IP.address..This |
127040 | 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 3a 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 | .is.controlled.by:.ddclient_.use |
127060 | 73 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 | s.two.methods.to.update.a.DNS.re |
127080 | 63 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 | cord..The.first.one.will.send.up |
1270a0 | 64 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e | dates.directly.to.the.DNS.daemon |
1270c0 | 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 | ,.in.compliance.with.:rfc:`2136` |
1270e0 | 2e 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 | ..The.second.one.involves.a.thir |
127100 | 64 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d | d.party.service,.like.DynDNS.com |
127120 | 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 69 6d 69 6c 61 72 20 77 65 62 73 69 74 65 2e 20 54 | .or.any.other.similar.website..T |
127140 | 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f | his.method.uses.HTTP.requests.to |
127160 | 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f | .transmit.the.new.IP.address..Yo |
127180 | 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 | u.can.configure.both.in.VyOS..dd |
1271a0 | 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 | client_.uses.two.methods.to.upda |
1271c0 | 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 | te.a.DNS.record..The.first.one.w |
1271e0 | 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 | ill.send.updates.directly.to.the |
127200 | 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 | .DNS.daemon,.in.compliance.with. |
127220 | 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f | :rfc:`2136`..The.second.one.invo |
127240 | 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 | lves.a.third.party.service,.like |
127260 | 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 75 63 68 20 73 65 | .DynDNS.com.or.any.other.such.se |
127280 | 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 | rvice.provider..This.method.uses |
1272a0 | 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e | .HTTP.requests.to.transmit.the.n |
1272c0 | 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 | ew.IP.address..You.can.configure |
1272e0 | 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 73 6b | .both.in.VyOS..ddclient_.will.sk |
127300 | 69 70 20 61 6e 79 20 61 64 64 72 65 73 73 20 6c 6f 63 61 74 65 64 20 62 65 66 6f 72 65 20 74 68 | ip.any.address.located.before.th |
127320 | 65 20 73 74 72 69 6e 67 20 73 65 74 20 69 6e 20 60 3c 70 61 74 74 65 72 6e 3e 60 2e 00 64 65 62 | e.string.set.in.`<pattern>`..deb |
127340 | 75 67 00 64 65 63 72 65 6d 65 6e 74 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 20 6d 69 | ug.decrement-lifetime.default.mi |
127360 | 6e 2d 74 68 72 65 73 68 6f 6c 64 00 64 65 66 61 75 6c 74 2d 6c 65 61 73 65 2d 74 69 6d 65 2c 20 | n-threshold.default-lease-time,. |
127380 | 6d 61 78 2d 6c 65 61 73 65 2d 74 69 6d 65 00 64 65 66 61 75 6c 74 2d 6c 69 66 65 74 69 6d 65 00 | max-lease-time.default-lifetime. |
1273a0 | 64 65 66 61 75 6c 74 2d 70 72 65 66 65 72 65 6e 63 65 00 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 | default-preference.default-route |
1273c0 | 72 00 64 65 70 72 65 63 61 74 65 2d 70 72 65 66 69 78 00 64 65 73 74 69 6e 61 74 69 6f 6e 2d 68 | r.deprecate-prefix.destination-h |
1273e0 | 61 73 68 69 6e 67 00 64 68 63 70 2d 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 64 69 | ashing.dhcp-server-identifier.di |
127400 | 72 65 63 74 00 64 69 72 65 63 74 6f 72 79 00 64 69 73 61 62 6c 65 3a 20 4e 6f 20 73 6f 75 72 63 | rect.directory.disable:.No.sourc |
127420 | 65 20 76 61 6c 69 64 61 74 69 6f 6e 00 64 6e 73 73 6c 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 00 64 | e.validation.dnssl.domain-name.d |
127440 | 6f 6d 61 69 6e 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 | omain-name-servers.domain-search |
127460 | 00 65 6d 65 72 67 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 20 49 43 4d 50 76 34 | .emerg.enable.or.disable..ICMPv4 |
127480 | 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 | .redirect.messages.send.by.VyOS. |
1274a0 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 | The.following.system.parameter.w |
1274c0 | 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c | ill.be.altered:.enable.or.disabl |
1274e0 | 65 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 | e.ICMPv4.redirect.messages.send. |
127500 | 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 | by.VyOS.The.following.system.par |
127520 | 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f | ameter.will.be.altered:.enable.o |
127540 | 72 20 64 69 73 61 62 6c 65 20 6f 66 20 49 43 4d 50 76 34 20 6f 72 20 49 43 4d 50 76 36 20 72 65 | r.disable.of.ICMPv4.or.ICMPv6.re |
127560 | 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 61 63 63 65 70 74 65 64 20 62 79 20 56 79 4f 53 | direct.messages.accepted.by.VyOS |
127580 | 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 | ..The.following.system.parameter |
1275a0 | 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 | .will.be.altered:.enable.or.disa |
1275c0 | 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 6d 61 72 74 69 61 6e 20 49 50 76 34 20 | ble.the.logging.of.martian.IPv4. |
1275e0 | 70 61 63 6b 65 74 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 | packets..The.following.system.pa |
127600 | 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 72 72 00 65 74 68 | rameter.will.be.altered:.err.eth |
127620 | 65 72 6e 65 74 00 65 78 61 63 74 2d 6d 61 74 63 68 3a 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f | ernet.exact-match:.exact.match.o |
127640 | 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 65 73 2e 00 65 78 63 6c 75 64 65 00 | f.the.network.prefixes..exclude. |
127660 | 66 61 69 6c 6f 76 65 72 00 66 61 73 74 3a 20 52 65 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 | failover.fast:.Request.partner.t |
127680 | 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 79 20 31 20 73 65 63 6f 6e | o.transmit.LACPDUs.every.1.secon |
1276a0 | 64 00 66 69 6c 65 20 3c 66 69 6c 65 20 6e 61 6d 65 3e 00 66 69 6c 74 65 72 2d 6c 69 73 74 00 66 | d.file.<file.name>.filter-list.f |
1276c0 | 74 70 00 66 75 6c 6c 20 2d 20 61 6c 77 61 79 73 20 75 73 65 20 66 75 6c 6c 2d 64 75 70 6c 65 78 | tp.full.-.always.use.full-duplex |
1276e0 | 00 67 65 6e 65 76 65 00 68 61 6c 66 20 2d 20 61 6c 77 61 79 73 20 75 73 65 20 68 61 6c 66 2d 64 | .geneve.half.-.always.use.half-d |
127700 | 75 70 6c 65 78 00 68 6f 70 2d 6c 69 6d 69 74 00 68 6f 73 74 3a 20 73 69 6e 67 6c 65 20 68 6f 73 | uplex.hop-limit.host:.single.hos |
127720 | 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 68 74 74 70 73 3a 2f 2f 61 | t.IP.address.to.match..https://a |
127740 | 63 63 65 73 73 2e 72 65 64 68 61 74 2e 63 6f 6d 2f 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 | ccess.redhat.com/sites/default/f |
127760 | 69 6c 65 73 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 32 30 31 35 30 31 2d 70 65 72 66 2d 62 72 69 | iles/attachments/201501-perf-bri |
127780 | 65 66 2d 6c 6f 77 2d 6c 61 74 65 6e 63 79 2d 74 75 6e 69 6e 67 2d 72 68 65 6c 37 2d 76 32 2e 31 | ef-low-latency-tuning-rhel7-v2.1 |
1277a0 | 2e 70 64 66 00 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 6f 70 65 6e 76 70 6e 2e 6e | .pdf.https://community.openvpn.n |
1277c0 | 65 74 2f 6f 70 65 6e 76 70 6e 2f 77 69 6b 69 2f 44 61 74 61 43 68 61 6e 6e 65 6c 4f 66 66 6c 6f | et/openvpn/wiki/DataChannelOfflo |
1277e0 | 61 64 2f 46 65 61 74 75 72 65 73 00 69 66 20 74 68 65 72 65 20 69 73 20 61 20 73 75 70 70 6f 72 | ad/Features.if.there.is.a.suppor |
127800 | 74 65 64 20 64 65 76 69 63 65 2c 20 65 6e 61 62 6c 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 00 69 | ted.device,.enable.Intel...QAT.i |
127820 | 66 20 74 68 65 72 65 20 69 73 20 6e 6f 6e 20 64 65 76 69 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e | f.there.is.non.device.the.comman |
127840 | 64 20 77 69 6c 6c 20 73 68 6f 77 20 60 60 60 4e 6f 20 51 41 54 20 64 65 76 69 63 65 20 66 6f 75 | d.will.show.```No.QAT.device.fou |
127860 | 6e 64 60 60 60 00 69 6e 66 6f 00 69 6e 74 65 72 76 61 6c 00 69 6e 76 61 6c 69 64 00 69 6e 76 65 | nd```.info.interval.invalid.inve |
127880 | 72 73 65 2d 6d 61 74 63 68 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 | rse-match:.network/netmask.to.ma |
1278a0 | 74 63 68 20 28 72 65 71 75 69 72 65 73 20 6e 65 74 77 6f 72 6b 20 62 65 20 64 65 66 69 6e 65 64 | tch.(requires.network.be.defined |
1278c0 | 29 2e 00 69 70 2d 66 6f 72 77 61 72 64 69 6e 67 00 69 73 69 73 64 00 69 74 20 63 61 6e 20 62 65 | )..ip-forwarding.isisd.it.can.be |
1278e0 | 20 75 73 65 64 20 77 69 74 68 20 61 6e 79 20 4e 49 43 2c 00 69 74 20 64 6f 65 73 20 6e 6f 74 20 | .used.with.any.NIC,.it.does.not. |
127900 | 69 6e 63 72 65 61 73 65 20 68 61 72 64 77 61 72 65 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 | increase.hardware.device.interru |
127920 | 70 74 20 72 61 74 65 20 28 61 6c 74 68 6f 75 67 68 20 69 74 20 64 6f 65 73 20 69 6e 74 72 6f 64 | pt.rate.(although.it.does.introd |
127940 | 75 63 65 20 69 6e 74 65 72 2d 70 72 6f 63 65 73 73 6f 72 20 69 6e 74 65 72 72 75 70 74 73 20 28 | uce.inter-processor.interrupts.( |
127960 | 49 50 49 73 29 29 2e 00 6b 65 72 6e 00 6c 32 74 70 76 33 00 6c 64 70 64 00 6c 65 61 73 65 00 6c | IPIs))..kern.l2tpv3.ldpd.lease.l |
127980 | 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 | east-connection.left.local_ip:.1 |
1279a0 | 39 32 2e 31 36 38 2e 30 2e 31 30 20 23 20 56 50 4e 20 47 61 74 65 77 61 79 2c 20 62 65 68 69 6e | 92.168.0.10.#.VPN.Gateway,.behin |
1279c0 | 64 20 4e 41 54 20 64 65 76 69 63 65 00 6c 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 31 39 38 | d.NAT.device.left.local_ip:.`198 |
1279e0 | 2e 35 31 2e 31 30 30 2e 33 60 20 23 20 73 65 72 76 65 72 20 73 69 64 65 20 57 41 4e 20 49 50 00 | .51.100.3`.#.server.side.WAN.IP. |
127a00 | 6c 65 66 74 20 70 75 62 6c 69 63 5f 69 70 3a 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 00 6c 65 66 | left.public_ip:172.18.201.10.lef |
127a20 | 74 20 73 75 62 6e 65 74 3a 20 60 31 39 32 2e 31 36 38 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 31 | t.subnet:.`192.168.0.0/24`.site1 |
127a40 | 2c 20 73 65 72 76 65 72 20 73 69 64 65 20 28 69 2e 65 2e 20 6c 6f 63 61 6c 69 74 79 2c 20 61 63 | ,.server.side.(i.e..locality,.ac |
127a60 | 74 75 61 6c 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 63 6c 69 65 6e 74 20 6f 72 20 73 65 72 | tually.there.is.no.client.or.ser |
127a80 | 76 65 72 20 72 6f 6c 65 73 29 00 6c 69 6e 6b 2d 6d 74 75 00 6c 6f 63 61 6c 20 75 73 65 20 30 20 | ver.roles).link-mtu.local.use.0. |
127aa0 | 28 6c 6f 63 61 6c 30 29 00 6c 6f 63 61 6c 20 75 73 65 20 31 20 28 6c 6f 63 61 6c 31 29 00 6c 6f | (local0).local.use.1.(local1).lo |
127ac0 | 63 61 6c 20 75 73 65 20 32 20 28 6c 6f 63 61 6c 32 29 00 6c 6f 63 61 6c 20 75 73 65 20 33 20 28 | cal.use.2.(local2).local.use.3.( |
127ae0 | 6c 6f 63 61 6c 33 29 00 6c 6f 63 61 6c 20 75 73 65 20 34 20 28 6c 6f 63 61 6c 34 29 00 6c 6f 63 | local3).local.use.4.(local4).loc |
127b00 | 61 6c 20 75 73 65 20 35 20 28 6c 6f 63 61 6c 35 29 00 6c 6f 63 61 6c 20 75 73 65 20 37 20 28 6c | al.use.5.(local5).local.use.7.(l |
127b20 | 6f 63 61 6c 37 29 00 6c 6f 63 61 6c 30 00 6c 6f 63 61 6c 31 00 6c 6f 63 61 6c 32 00 6c 6f 63 61 | ocal7).local0.local1.local2.loca |
127b40 | 6c 33 00 6c 6f 63 61 6c 34 00 6c 6f 63 61 6c 35 00 6c 6f 63 61 6c 36 00 6c 6f 63 61 6c 37 00 6c | l3.local4.local5.local6.local7.l |
127b60 | 6f 63 61 6c 69 74 79 2d 62 61 73 65 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c | ocality-based-least-connection.l |
127b80 | 6f 67 61 6c 65 72 74 00 6c 6f 67 61 75 64 69 74 00 6c 6f 6f 73 65 3a 20 45 61 63 68 20 69 6e 63 | ogalert.logaudit.loose:.Each.inc |
127ba0 | 6f 6d 69 6e 67 20 70 61 63 6b 65 74 27 73 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 | oming.packet's.source.address.is |
127bc0 | 20 61 6c 73 6f 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 | .also.tested.against.the.FIB.and |
127be0 | 20 69 66 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 | .if.the.source.address.is.not.re |
127c00 | 61 63 68 61 62 6c 65 20 76 69 61 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 70 61 | achable.via.any.interface.the.pa |
127c20 | 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e 00 6c 70 72 00 6d 44 4e 53 20 52 | cket.check.will.fail..lpr.mDNS.R |
127c40 | 65 70 65 61 74 65 72 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e | epeater.mDNS.repeater.can.be.con |
127c60 | 66 69 67 75 72 65 64 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 20 6f 6e 6c 79 20 73 70 65 | figured.to.re-broadcast.only.spe |
127c80 | 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 61 6c 6c 20 | cific.services..By.default,.all. |
127ca0 | 73 65 72 76 69 63 65 73 20 61 72 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2e 00 6d 44 4e | services.are.re-broadcasted..mDN |
127cc0 | 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 64 20 65 69 74 68 65 72 | S.repeater.can.be.enabled.either |
127ce0 | 20 6f 6e 20 49 50 76 34 20 73 6f 63 6b 65 74 20 6f 72 20 6f 6e 20 49 50 76 36 20 73 6f 63 6b 65 | .on.IPv4.socket.or.on.IPv6.socke |
127d00 | 74 20 6f 72 20 62 6f 74 68 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 2e 20 42 79 20 64 65 | t.or.both.to.re-broadcast..By.de |
127d20 | 66 61 75 6c 74 2c 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e | fault,.mDNS.repeater.will.listen |
127d40 | 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 6d 44 4e 53 20 72 65 70 | .on.both.IPv4.and.IPv6..mDNS.rep |
127d60 | 65 61 74 65 72 20 63 61 6e 20 62 65 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 64 69 73 61 62 6c 65 | eater.can.be.temporarily.disable |
127d80 | 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 73 65 72 76 69 63 65 20 75 | d.without.deleting.the.service.u |
127da0 | 73 69 6e 67 00 6d 61 69 6c 00 6d 61 6e 61 67 65 64 2d 66 6c 61 67 00 6d 61 74 63 68 2d 66 72 61 | sing.mail.managed-flag.match-fra |
127dc0 | 67 3a 20 53 65 63 6f 6e 64 20 61 6e 64 20 66 75 72 74 68 65 72 20 66 72 61 67 6d 65 6e 74 73 20 | g:.Second.and.further.fragments. |
127de0 | 6f 66 20 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 69 70 73 | of.fragmented.packets..match-ips |
127e00 | 65 63 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e | ec:.match.inbound.IPsec.packets. |
127e20 | 00 6d 61 74 63 68 2d 6e 6f 6e 2d 66 72 61 67 3a 20 48 65 61 64 20 66 72 61 67 6d 65 6e 74 73 20 | .match-non-frag:.Head.fragments. |
127e40 | 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e | or.unfragmented.packets..match-n |
127e60 | 6f 6e 65 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 6e 6f 6e 2d 49 50 73 65 63 20 70 61 63 | one:.match.inbound.non-IPsec.pac |
127e80 | 6b 65 74 73 2e 00 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 00 6d 6f 72 65 20 69 6e 66 6f 72 6d | kets..minimal.config.more.inform |
127ea0 | 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 | ation.related.IGP..-.:ref:`routi |
127ec0 | 6e 67 2d 69 73 69 73 60 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 | ng-isis`.more.information.relate |
127ee0 | 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 6e 61 6d | d.IGP..-.:ref:`routing-ospf`.nam |
127f00 | 65 2d 73 65 72 76 65 72 00 6e 65 74 62 69 6f 73 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 6e 65 | e-server.netbios-name-servers.ne |
127f20 | 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 | twork:.network/netmask.to.match. |
127f40 | 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e | (requires.inverse-match.be.defin |
127f60 | 65 64 29 20 42 55 47 2c 20 4e 4f 20 69 6e 76 65 72 74 2d 6d 61 74 63 68 20 6f 70 74 69 6f 6e 20 | ed).BUG,.NO.invert-match.option. |
127f80 | 69 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 36 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b | in.access-list6.network:.network |
127fa0 | 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 | /netmask.to.match.(requires.inve |
127fc0 | 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 6e 65 77 73 00 6e 65 78 74 | rse-match.be.defined)..news.next |
127fe0 | 2d 73 65 72 76 65 72 00 6e 6f 2d 61 75 74 6f 6e 6f 6d 6f 75 73 2d 66 6c 61 67 00 6e 6f 2d 6f 6e | -server.no-autonomous-flag.no-on |
128000 | 2d 6c 69 6e 6b 2d 66 6c 61 67 00 6e 6f 74 66 6f 75 6e 64 00 6e 6f 74 69 63 65 00 6e 74 70 00 6e | -link-flag.notfound.notice.ntp.n |
128020 | 74 70 2d 73 65 72 76 65 72 00 6e 74 70 2d 73 65 72 76 65 72 73 00 6f 6e 65 20 72 75 6c 65 20 77 | tp-server.ntp-servers.one.rule.w |
128040 | 69 74 68 20 61 20 4c 41 4e 20 28 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 29 20 61 6e | ith.a.LAN.(inbound-interface).an |
128060 | 64 20 74 68 65 20 57 41 4e 20 28 69 6e 74 65 72 66 61 63 65 29 2e 00 6f 70 65 6e 76 70 6e 00 6f | d.the.WAN.(interface)..openvpn.o |
128080 | 73 70 66 36 64 00 6f 73 70 66 64 00 6f 73 70 66 64 20 73 75 70 70 6f 72 74 73 20 4f 70 61 71 75 | spf6d.ospfd.ospfd.supports.Opaqu |
1280a0 | 65 20 4c 53 41 20 3a 72 66 63 3a 60 32 33 37 30 60 20 61 73 20 70 61 72 74 69 61 6c 20 73 75 70 | e.LSA.:rfc:`2370`.as.partial.sup |
1280c0 | 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 54 72 61 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e | port.for.MPLS.Traffic.Engineerin |
1280e0 | 67 20 4c 53 41 73 2e 20 54 68 65 20 6f 70 61 71 75 65 2d 6c 73 61 20 63 61 70 61 62 69 6c 69 74 | g.LSAs..The.opaque-lsa.capabilit |
128100 | 79 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 | y.must.be.enabled.in.the.configu |
128120 | 72 61 74 69 6f 6e 2e 00 6f 74 68 65 72 2d 63 6f 6e 66 69 67 2d 66 6c 61 67 00 70 61 67 65 73 20 | ration..other-config-flag.pages. |
128140 | 74 6f 20 73 6f 72 74 00 70 6f 6c 69 63 79 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 00 70 6f 6c 69 | to.sort.policy.as-path-list.poli |
128160 | 63 79 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 65 78 74 63 6f 6d 6d | cy.community-list.policy.extcomm |
128180 | 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 | unity-list.policy.large-communit |
1281a0 | 79 2d 6c 69 73 74 00 70 6f 70 2d 73 65 72 76 65 72 00 70 72 65 66 65 72 72 65 64 2d 6c 69 66 65 | y-list.pop-server.preferred-life |
1281c0 | 74 69 6d 65 00 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 | time.prefix-list,.distribute-lis |
1281e0 | 74 00 70 73 65 75 64 6f 2d 65 74 68 65 72 6e 65 74 00 72 61 6e 67 65 00 72 65 61 63 68 61 62 6c | t.pseudo-ethernet.range.reachabl |
128200 | 65 2d 74 69 6d 65 00 72 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 72 65 74 72 61 6e 73 2d 74 69 | e-time.reset.commands.retrans-ti |
128220 | 6d 65 72 00 72 66 63 33 34 34 32 2d 73 74 61 74 69 63 2d 72 6f 75 74 65 2c 20 77 69 6e 64 6f 77 | mer.rfc3442-static-route,.window |
128240 | 73 2d 73 74 61 74 69 63 2d 72 6f 75 74 65 00 72 66 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 | s-static-route.rfc3768-compatibi |
128260 | 6c 69 74 79 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 37 32 2e 31 38 2e 32 30 32 2e | lity.right.local_ip:.172.18.202. |
128280 | 31 30 20 23 20 72 69 67 68 74 20 73 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 6c 6f 63 | 10.#.right.side.WAN.IP.right.loc |
1282a0 | 61 6c 5f 69 70 3a 20 60 32 30 33 2e 30 2e 31 31 33 2e 32 60 20 23 20 72 65 6d 6f 74 65 20 6f 66 | al_ip:.`203.0.113.2`.#.remote.of |
1282c0 | 66 69 63 65 20 73 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 73 75 62 6e 65 74 3a 20 60 | fice.side.WAN.IP.right.subnet:.` |
1282e0 | 31 30 2e 30 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 32 2c 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 | 10.0.0.0/24`.site2,remote.office |
128300 | 20 73 69 64 65 00 72 69 70 64 00 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 72 6f 75 74 65 2d 6d 61 70 | .side.ripd.round-robin.route-map |
128320 | 00 72 6f 75 74 65 72 73 00 73 46 6c 6f 77 00 73 46 6c 6f 77 20 69 73 20 61 20 74 65 63 68 6e 6f | .routers.sFlow.sFlow.is.a.techno |
128340 | 6c 6f 67 79 20 74 68 61 74 20 65 6e 61 62 6c 65 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 66 20 | logy.that.enables.monitoring.of. |
128360 | 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 62 79 20 73 65 6e 64 69 6e 67 20 73 61 6d 70 6c | network.traffic.by.sending.sampl |
128380 | 65 64 20 70 61 63 6b 65 74 73 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f 72 20 64 65 76 69 63 65 | ed.packets.to.a.collector.device |
1283a0 | 2e 00 73 65 63 75 72 69 74 79 00 73 65 72 76 65 72 20 65 78 61 6d 70 6c 65 00 73 65 72 76 65 72 | ..security.server.example.server |
1283c0 | 2d 69 64 65 6e 74 69 66 69 65 72 00 73 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e | -identifier.set.a.destination.an |
1283e0 | 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e | d/or.source.address..Accepted.in |
128400 | 70 75 74 3a 00 73 68 61 32 35 36 20 48 61 73 68 65 73 00 73 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 | put:.sha256.Hashes.show.commands |
128420 | 00 73 69 61 64 64 72 00 73 6c 6f 77 3a 20 52 65 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f | .siaddr.slow:.Request.partner.to |
128440 | 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e | .transmit.LACPDUs.every.30.secon |
128460 | 64 73 00 73 6d 74 70 2d 73 65 72 76 65 72 00 73 6f 66 74 77 61 72 65 20 66 69 6c 74 65 72 73 20 | ds.smtp-server.software.filters. |
128480 | 63 61 6e 20 65 61 73 69 6c 79 20 62 65 20 61 64 64 65 64 20 74 6f 20 68 61 73 68 20 6f 76 65 72 | can.easily.be.added.to.hash.over |
1284a0 | 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2c 00 73 6f 75 72 63 65 2d 68 61 73 68 69 6e 67 00 73 | .new.protocols,.source-hashing.s |
1284c0 | 70 6f 6b 65 30 31 2d 73 70 6f 6b 65 30 34 00 73 70 6f 6b 65 30 35 00 73 74 61 74 69 63 2d 6d 61 | poke01-spoke04.spoke05.static-ma |
1284e0 | 70 70 69 6e 67 00 73 74 61 74 69 63 2d 72 6f 75 74 65 00 73 74 72 69 63 74 3a 20 45 61 63 68 20 | pping.static-route.strict:.Each. |
128500 | 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 20 69 73 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 | incoming.packet.is.tested.agains |
128520 | 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 | t.the.FIB.and.if.the.interface.i |
128540 | 73 20 6e 6f 74 20 74 68 65 20 62 65 73 74 20 72 65 76 65 72 73 65 20 70 61 74 68 20 74 68 65 20 | s.not.the.best.reverse.path.the. |
128560 | 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e 20 42 79 20 64 65 66 61 75 | packet.check.will.fail..By.defau |
128580 | 6c 74 20 66 61 69 6c 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e | lt.failed.packets.are.discarded. |
1285a0 | 00 73 75 62 6e 65 74 2d 6d 61 73 6b 00 73 79 73 6c 6f 67 00 74 61 69 6c 00 74 63 5f 20 69 73 20 | .subnet-mask.syslog.tail.tc_.is. |
1285c0 | 61 20 70 6f 77 65 72 66 75 6c 20 74 6f 6f 6c 20 66 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 | a.powerful.tool.for.Traffic.Cont |
1285e0 | 72 6f 6c 20 66 6f 75 6e 64 20 61 74 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 48 | rol.found.at.the.Linux.kernel..H |
128600 | 6f 77 65 76 65 72 2c 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6f 66 74 | owever,.its.configuration.is.oft |
128620 | 65 6e 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 75 6d 62 65 72 73 6f 6d 65 20 74 61 73 6b 2e | en.considered.a.cumbersome.task. |
128640 | 20 46 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 65 61 73 65 73 20 74 68 65 20 6a 6f 62 | .Fortunately,.VyOS.eases.the.job |
128660 | 20 74 68 72 6f 75 67 68 20 69 74 73 20 43 4c 49 2c 20 77 68 69 6c 65 20 75 73 69 6e 67 20 60 60 | .through.its.CLI,.while.using.`` |
128680 | 74 63 60 60 20 61 73 20 62 61 63 6b 65 6e 64 2e 00 74 66 74 70 2d 73 65 72 76 65 72 2d 6e 61 6d | tc``.as.backend..tftp-server-nam |
1286a0 | 65 00 74 68 69 73 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 | e.this.option.allows.to.configur |
1286c0 | 65 20 70 72 65 66 69 78 2d 73 69 64 20 6f 6e 20 53 52 2e 20 54 68 65 20 e2 80 98 6e 6f 2d 70 68 | e.prefix-sid.on.SR..The....no-ph |
1286e0 | 70 2d 66 6c 61 67 e2 80 99 20 6d 65 61 6e 73 20 4e 4f 20 50 65 6e 75 6c 74 69 6d 61 74 65 20 48 | p-flag....means.NO.Penultimate.H |
128700 | 6f 70 20 50 6f 70 70 69 6e 67 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 | op.Popping.that.allows.SR.node.t |
128720 | 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 6e 6f 74 | o.request.to.its.neighbor.to.not |
128740 | 20 70 6f 70 20 74 68 65 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 65 78 70 6c 69 63 69 74 2d | .pop.the.label..The....explicit- |
128760 | 6e 75 6c 6c e2 80 99 20 66 6c 61 67 20 61 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 | null....flag.allows.SR.node.to.r |
128780 | 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 73 65 6e 64 20 49 | equest.to.its.neighbor.to.send.I |
1287a0 | 50 20 70 61 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 45 58 50 4c 49 43 49 54 2d 4e 55 4c 4c 20 | P.packet.with.the.EXPLICIT-NULL. |
1287c0 | 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 6e 2d 66 6c 61 67 2d 63 6c 65 61 72 e2 80 99 20 6f 70 | label..The....n-flag-clear....op |
1287e0 | 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 20 63 | tion.can.be.used.to.explicitly.c |
128800 | 6c 65 61 72 20 74 68 65 20 4e 6f 64 65 20 66 6c 61 67 20 74 68 61 74 20 69 73 20 73 65 74 20 62 | lear.the.Node.flag.that.is.set.b |
128820 | 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 50 72 65 66 69 78 2d 53 49 44 73 20 61 73 73 6f 63 69 | y.default.for.Prefix-SIDs.associ |
128840 | 61 74 65 64 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 69 73 | ated.to.loopback.addresses..This |
128860 | 20 6f 70 74 69 6f 6e 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 | .option.is.necessary.to.configur |
128880 | 65 20 41 6e 79 63 61 73 74 2d 53 49 44 73 2e 00 74 69 6d 65 2d 6f 66 66 73 65 74 00 74 69 6d 65 | e.Anycast-SIDs..time-offset.time |
1288a0 | 2d 73 65 72 76 65 72 00 74 69 6d 65 2d 73 65 72 76 65 72 73 00 74 75 6e 6e 65 6c 00 75 73 65 20 | -server.time-servers.tunnel.use. |
1288c0 | 36 20 28 6c 6f 63 61 6c 36 29 00 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | 6.(local6).use.this.command.to.c |
1288e0 | 68 65 63 6b 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6e 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 | heck.if.there.is.an.Intel...QAT. |
128900 | 73 75 70 70 6f 72 74 65 64 20 50 72 6f 63 65 73 73 6f 72 20 69 6e 20 79 6f 75 72 20 73 79 73 74 | supported.Processor.in.your.syst |
128920 | 65 6d 2e 00 75 73 65 72 00 75 75 63 70 00 76 61 6c 69 64 00 76 61 6c 69 64 2d 6c 69 66 65 74 69 | em..user.uucp.valid.valid-lifeti |
128940 | 6d 65 00 76 65 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 72 | me.veth.interfaces.need.to.be.cr |
128960 | 65 61 74 65 64 20 69 6e 20 70 61 69 72 73 20 2d 20 69 74 27 73 20 63 61 6c 6c 65 64 20 74 68 65 | eated.in.pairs.-.it's.called.the |
128980 | 20 70 65 65 72 20 6e 61 6d 65 00 76 78 6c 61 6e 00 77 61 72 6e 69 6e 67 00 77 65 20 64 65 73 63 | .peer.name.vxlan.warning.we.desc |
1289a0 | 72 69 62 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 53 52 20 49 53 49 53 20 | ribed.the.configuration.SR.ISIS. |
1289c0 | 2f 20 53 52 20 4f 53 50 46 20 75 73 69 6e 67 20 32 20 63 6f 6e 6e 65 63 74 65 64 20 77 69 74 68 | /.SR.OSPF.using.2.connected.with |
1289e0 | 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .them.to.share.label.information |
128a00 | 2e 00 77 65 69 67 68 74 65 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 77 65 69 67 | ..weighted-least-connection.weig |
128a20 | 68 74 65 64 2d 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 77 68 69 6c 65 20 61 20 2a 62 79 74 65 2a 20 | hted-round-robin.while.a.*byte*. |
128a40 | 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 61 20 73 69 6e 67 6c 65 20 2a 2a 62 2a 2a 2e 00 77 69 | is.written.as.a.single.**b**..wi |
128a60 | 6e 73 2d 73 65 72 76 65 72 00 77 69 72 65 67 75 61 72 64 00 77 69 72 65 6c 65 73 73 00 77 69 74 | ns-server.wireguard.wireless.wit |
128a80 | 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 61 63 63 65 6c 65 72 61 74 69 | h.:cfgcmd:`set.system.accelerati |
128aa0 | 6f 6e 20 71 61 74 60 20 6f 6e 20 62 6f 74 68 20 73 79 73 74 65 6d 73 20 74 68 65 20 62 61 6e 64 | on.qat`.on.both.systems.the.band |
128ac0 | 77 69 64 74 68 20 69 6e 63 72 65 61 73 65 73 2e 00 77 70 61 64 2d 75 72 6c 00 77 70 61 64 2d 75 | width.increases..wpad-url.wpad-u |
128ae0 | 72 6c 2c 20 77 70 61 64 2d 75 72 6c 20 63 6f 64 65 20 32 35 32 20 3d 20 74 65 78 74 00 77 77 61 | rl,.wpad-url.code.252.=.text.wwa |
128b00 | 6e 00 7a 65 62 72 61 00 | n.zebra. |